indexo.dev

werkenvoorgouda.nl

.nl crawl

First seen 2026-05-28 · Last seen 2026-05-31 · ok HTTP/1.1 200 895 ms crawled 2026-05-31

NL · 185.144.224.28 · AS20847 Previder B.V.

Reputation 100/100

Classifying

HTML metadata

Title
Werken voor Gouda
Language
nl-NL
Canonical
https://www.werkenvoorgouda.nl/
Feeds

Open Graph

url
https://www.werkenvoorgouda.nl/
title
Werken voor Gouda
locale
nl_NL
site name
Werken voor Gouda

Technology

CMS
WordPress
Social widgets
  • Vimeo Embed

Third-party hosts loaded (5)

  • www.gouda.nl×10
  • kit.fontawesome.com×2
  • gmpg.org×1
  • player.vimeo.com×1
  • siteimproveanalytics.com×1

Social

DNS records live

NS
  • ns0.transip.net
  • ns1.transip.nl
  • ns2.transip.eu
MX
  • 10 mail.werkenvoorgouda.nl

Email authentication strong

SPF
v=spf1 a mx ip4:5.255.91.103 ip6:2a00:1ca8:2a:f:0:0:0:65 include:spf_servers.yard.nl include:spf_cluster.yard.nl include:spf.shockmedia.email -all
strict (-all)
DMARC
v=DMARC1;p=reject; rua=mailto:spam@werkenvoorgouda.nl; ruf=mailto:spam@werkenvoorgouda.nl
policy: reject (enforced)
DKIM
  • mail: v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9vumh/55AX6x1qwA+uvNWSjlPUiD/sj5XP1AK3BQ3o6sTcYSMUbDVMYd6GMU8F1sAuM…
selectors probed

Certificate (current)

R13
from 2026-04-30 to 2026-07-29
Expires in 59 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.werkenvoorgouda.nl

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • weak frame protection
  • weak content type protection
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
sameorigin, SAMEORIGIN
permissions-policy
accelerometer=(self), autoplay=(self), camera=(self), cross-origin-isolated=(self), document-domain=*, encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), magnetometer=(self), microphone=(self), midi=(self), payment=(self), picture-in-picture=*, publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=*, usb=(self), xr-spatial-tracking=(self)
x-content-type-options
nosniff, nosniff
content-security-policy
connect-src 'self' elasticsearch-yard.app.owc.shockapp.io *.fontawesome.com *.googleapis.com *.google-analytics.com *.readspeaker.com *.siteimprove.com elasticsearch-yard-staging.app.owc.shockapp.io cdn1.readspeaker.com fonts.googleapis.com meldingen.hollandsmiddenveilig.nl www.google.com; default-src 'self'; font-src 'self' data: https:; frame-src 'self' https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://indiveo.services; img-src data: https:; media-src 'self'; object-src data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.fontawesome.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.readspeaker.com *.siteimprove.net connect.facebook.net siteimproveanalytics.com translate.google.com meldingen.hollandsmiddenveilig.nl www.google.com www.google-analytics.com www.gstatic.com nl.postex.com; style-src 'self' 'unsafe-inline' *.googleapis.com w
strict-transport-security
max-age=31536000; includeSubDomains

Links to (6)

Linked from (1)