werkenbijabnamro.nl

.nl crawl

First seen 2026-05-29 · Last seen 2026-05-31 · ok HTTP/1.1 200 694 ms crawled 2026-05-31

DE · 188.34.152.85 · AS24940 Hetzner Online GmbH

Reputation 75/100 listed in spam blocklist

Classifying

HTML metadata

Title

Home | Werken bij ABN AMRO

Language

Canonical

https://www.werkenbijabnamro.nl/

Translations

Open Graph

url: https://www.werkenbijabnamro.nl/
title: Home | Werken bij ABN AMRO

Technology

Server: nginx
CMS: Gatsby
PHP: 8.4.17

Third-party hosts loaded (4)

maps.googleapis.com×1
unpkg.com×1
www.abnamro.nl×1
www.google.com×1

Social

Contact

Address: Gustav Mahlerlaan 10, 1082 PP, Amsterdam

Registration

Registrar

ABN Amro Bank N.V.

Created

2008-01-22

Updated

2025-03-06

Name servers

a20-67.akam.net
a9-66.akam.net
a1-47.akam.net
a7-65.akam.net
a4-64.akam.net
a16-66.akam.net

DNS records live

NS

a1-47.akam.net
a16-66.akam.net
a20-67.akam.net
a4-64.akam.net
a7-65.akam.net
a9-66.akam.net

Verified for

Google

Email authentication no MX

SPF: v=spf1 -all
strict (-all)
DMARC: v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2025-12-09 to 2026-12-10

Expires in 192 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.werkenbijabnamro.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: base-uri 'self'; default-src 'self'; media-src * data: blob: 'self'; script-src 'nonce-ONiEhSZWnAt3GTT45MdJaQ==' 'sha256-EM8aVMqRFMqsUuADDhBhRUxrN/FkI5xU9XyPeV70M/0=' 'unsafe-eval' 'strict-dynamic'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob:; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; object-src 'none';
strict-transport-security: max-age=31536000; includeSubDomains; preload