indexo.dev

ymea.nl

.nl crawl

First seen 2026-05-26 · Last seen 2026-05-31 · ok HTTP/1.1 200 119 ms crawled 2026-05-30

US · 104.18.17.135 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Ymea | Effectieve ondersteuning bij overgangsverschijnselen
Description
Ondersteuning nodig bij de overgang? De natuurlijke middelen van Ymea helpen bij overgangsverschijnselen zoals stemmingswisselingen en opvliegers!
Language
nl-nl
Canonical
https://ymea.nl/
Translations
  • nl ×2
  • fr
Feeds

Open Graph

url
https://ymea.nl/
title
Ymea | Effectieve ondersteuning bij overgangsverschijnselen
locale
en_US
site name
Ymea Nederland
description
Ondersteuning nodig bij de overgang? De natuurlijke middelen van Ymea helpen bij overgangsverschijnselen zoals stemmingswisselingen en opvliegers!

Technology

CDN
Cloudflare
CMS
WordPress
jQuery
3.1.0 known XSS (<3.5)
Fonts
  • Adobe Fonts
  • Google Fonts

Third-party hosts loaded (4)

  • cdnjs.cloudflare.com×3
  • fonts.googleapis.com×2
  • use.typekit.net×2
  • ymea.be×2

Contact

Phone

Registration

Registrar
MarkMonitor Inc.
Created
1999-05-21
Updated
2025-05-29
Name servers
  • lara.ns.cloudflare.com
  • olof.ns.cloudflare.com

DNS records live

NS
  • lara.ns.cloudflare.com
  • olof.ns.cloudflare.com
MX
  • 10 mx.mailprotect.be
  • 50 mx.backup.mailprotect.be
TXT
  • mail-grant:vqzbsthnwtuz0qpjro509bzkhs0=
  • O0M1E18670
Verified for
  • Google

Email authentication weak

SPF
not published
DMARC
v=DMARC1; p=none; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

WE1
from 2026-05-18 to 2026-08-17
Expires in 77 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://ymea.nl/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
same-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=self
x-content-type-options
nosniff
content-security-policy
default-src 'self' *.ymea.nl *.ymea.be *.cloudflare.com *.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ymea.nl *.ymea.be *.addtoany.com *.adsrvr.org *.amazon-adsystem.com *.azure.com *.bootstrapcdn.com *.channelsight.com *.ckeditor.com *.clic2buy.com *.click2buy.com *.cloudflare.com *.cookielaw.org *.criteo.com *.criteo.net *.delivr.net *.doubleclick.net *.facebook.com *.facebook.net *.google.co.in *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.jquery.com *.jsdelivr.net *.myfonts.net *.newrelic.com *.onetrust.com *.outbrain.com *.pinterest.com *.recaptcha.net *.snapchat.com *.soundcloud.com *.static.net *.taboola.com *.teads.tv *.typekit.net *.unpkg.com *.vimeo.com *.visualstudio.com *.wp.com *.youtube.com addtoany.com adsrvr.org amazon-adsystem.com azure.com bootstrapcdn.com channelsight.com ckeditor.com clic2buy.com click2buy.com cloudflare.com cookielaw.org criteo.com crite
strict-transport-security
max-age=63072000; includeSubDomains

Links to (2)

Linked from (2)