weleda.nl

HTML metadata

Title

Shop WELEDA natuurlijke cosmetica online - WELEDA

Description

Koop natuurlijke cosmetica en gezondheidsproducten online bij WELEDA ♡ Gezichts- en lichaamsverzorging ♡ Moeder en baby ✓ Gratis verzending bij bestellingen vanaf € 49,-

Language

nl-NL

Canonical

https://www.weleda.nl

Translations

de ×3
en ×3
fr ×3
nl ×2
es
it

Open Graph

url: https://www.weleda.nl
title: Shop WELEDA natuurlijke cosmetica online - WELEDA
site name: Weleda
description: Koop natuurlijke cosmetica en gezondheidsproducten online bij WELEDA ♡ Gezichts- en lichaamsverzorging ♡ Moeder en baby ✓ Gratis verzending bij bestellingen vanaf € 49,-

Technology

CDN: Amazon CloudFront
CMS: Nuxt

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (15)

assets.weleda.com×10
cdn.cookielaw.org×2
www.googletagmanager.com×2
www.weleda.be×2
www.weleda.ch×2
gb.preview.ecom.weleda.com×1
www.google.com×1
www.gstatic.com×1
www.weleda.at×1
www.weleda.com×1
www.weleda.com.au×1
www.weleda.de×1
www.weleda.es×1
www.weleda.fr×1
www.weleda.it×1

Social

Contact

Address: Platinastraat 161, 2718 SR, Zoetermeer, Nederland, NL

DNS records live

NS

ns1.sitebytes.nl
ns2.sitebytes.nl
ns3.sitebytes.nl

Email authentication weak

SPF

v=spf1 include:spf.mailjet.com include:spf.spamservice.nl include:spf.protection.outlook.com ip4:5.79.89.162 include:mail.weledanet.nl ip4:89.20.182.126 ip4:62.197.14.50 include:_spf.google.com -all

strict (-all)

DMARC

not published

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDGu8RaP3ilc/5EkCrsdr+qYe3x5ywULvkL6mpMMAJP2wQOMsM/oUEDWZgNPSwTsxgsqDujFG/hvggbzBbBEb…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R12

from 2026-05-22 to 2026-08-20

Expires in 81 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.weleda.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), display-capture=(), fullscreen=('self' https://*.youtube.com), geolocation=(), microphone=()
x-content-type-options: nosniff
content-security-policy: base-uri 'none'; font-src 'self' data: https://fonts.gstatic.com https://applepay.cdn-apple.com https://cdn.mouseflow.com; form-action 'self' https://*.adyen.com https://www.facebook.com; frame-ancestors 'self' https://*.weleda.bloomreach.cloud https://www.weleda.fr; img-src 'self' data: https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg http
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin