zonmw.nl

.nl crawl

First seen 2026-05-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 15692 ms crawled 2026-05-16

NL · 31.7.0.123 · AS20847 Previder B.V.

Reputation 100/100

Classifying

HTML metadata

Title: Working with knowledge to boost good health for all | ZonMw
Description: ZonMw programs and fund research and innovation in health, healthcare and well-being, promote knowledge infrastructures and the use of knowledge developed. Toge
Language: en
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://www.zonmw.nl/en

Open Graph

url: https://www.zonmw.nl/en
title: Front page | ZonMw
image:url: https://www.zonmw.nl/enthemes/custom/zonmw/assets/images/logo-color.svg
site name: ZonMw

Technology

CMS: Drupal

Social

Contact

Phone

DNS records live

NS

ns1.surfnet.nl
ns1.zurich.surf.net
ns2.surfnet.nl
ns3.surfnet.nl

MX

10 zonmw-nl.mail.protection.outlook.com

Verified for

Apple
Cisco
Google

Email authentication strong

SPF

v=spf1 ip4:31.7.0.123 ip4:194.171.150.1 a:mail10.quest.ie ip4:138.2.138.201/32 ip4:138.2.160.15 ip4:52.50.107.234/32 a:smtp1.saas.windinternet.nl include:spf.protection.outlook.com include:spf.topdesk.net include:_spf.spotler.email ip4:185.181.140.102/32 include:spf.afas.online include:_spf.idmanager.com include:spf.bctcloud.eu include:spf.flowmailer.net ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:ii4clpan@ag.eu.dmarcadvisor.com;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDxL9dHc+mTz4rjy4mU9S9qcYFOyh0FeGsZ7rC0JoBOThvj6nNCFImyC8t4YTgjveN1a9eq6gnB+x94oJlHmP…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC1ci/Hlw447IMT8g5OgjzFiZSq8S6lUZTX/2cgFQuRVBgI5ZhIKHb0Yg5bcZ3kd/XO00hKUVQBaeuYdiDyEf…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-06-17 to 2026-06-18

Expires in 28 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.zonmw.nl/en

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://login.microsoftonline.com; script-src 'self' 'unsafe-inline' https://www.google.com/recaptcha https://zonmw.containers.piwik.pro https://zonmw.piwik.pro https://svc.webspellchecker.net https://static.userback.io https://cdnjs.cloudflare.com https://fonts.googleapis.com https://platform.twitter.com https://static.mailplus.nl https://m15.mailplus.nl https://www.google.com https://www.gstatic.com https://connect.facebook.net; object-src 'self'; style-src 'self' 'unsafe-inline' https://www.google.com/recaptcha https://static.userback.io https://cdnjs.cloudflare.com https://zonmw.piwik.pro https://fonts.googleapis.com https://fonts.gstatic.com https://static.mailplus.nl; img-src 'self' data: https://www.gstatic.com https://fonts.gstatic.com https://syndication.twitter.com https://zonmw.piwik.pro https://static.userback.io https://cdnjs.cloudflare.com https://fonts.googleapis.co https://maps.googleapis.com https://www.rovid.nl https://cdn.leanlibrary.app https://ww
strict-transport-security: max-age=31536000