zorgenzekerheid.nl

HTML metadata

Title: Zorg en Zekerheid
Description: Zorg en Zekerheid is de regionale zorgverzekeraar die zich sterk maakt voor de beste, betaalbare zorg. Wij vinden gezonde mensen belangrijker dan winst.
Language: nl
Generator: XperienCentral
Canonical: https://www.zorgenzekerheid.nl/home

Open Graph

url: https://www.zorgenzekerheid.nl/home
title: Home
locale: nl_NL
site name: Zorgverzekeraar Zorg en Zekerheid
description: Zorg en Zekerheid is de regionale zorgverzekeraar die zich sterk maakt voor de beste, betaalbare zorg. Wij vinden gezonde mensen belangrijker dan winst.

Technology

CMS: Gatsby

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

DNS records live

NS

ns1.zorgenzekerheid.nl
ns2.zorgenzekerheid.nl

MX

0 zorgenzekerheid-nl.d-v1.mx.microsoft

TXT

Show 9 TXT records

_4s71u99kyga1h9hlxn0iv7d26b0dp2s
_szbdfq87fi8mu77l9maixhxim5raftx
atlassian-sending-domain-verification=27d18f46-eecc-4d1b-9d67-ca8458813b5e
hpe-greenlake-domain-verification=68376c335a2d36502d5a647579464a6f65726b6e587762304a3465776b323975
Z1EH16bBie5BkcxYFH4GY9I3mLkAjiXk0pp2/GzwSnU=
_zo9w0rm0kaxnl8cl6xe9qtoaj7imd09
_udgn7tuxeij6gfjge41xk5pmp38m0eg
amazonses:D9IlburyDS8EduVmrkG2kiVzjtpKjxJ5Xf2YbfUsF9w=
tmes=425bb3d80ba646adeb76801d5b74524d

Verified for

Apple
Atlassian
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:94.228.136.149 ip4:193.173.52.130 ip4:143.55.148.111 ip4:143.55.145.195 include:_spf.zivver.com include:spf.afas.online include:spf.protection.outlook.com include:_spf.spotler.email include:_spf.salesforce.com include:spf.mandrillapp.com include:_spf.emply.com include:spf.flowmailer.net include:spf.mailjet.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:ce3lsa1o@ag.eu.dmarcadvisor.com; ruf=mailto:ce3lsa1o@fr.eu.dmarcadvisor.com;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCQp5CCsXa5GD3GfAjDJqmucNw8NzdxuB8uJgIFD/HnfaZUTDMP84THBVPrMIieFUiFOKKksWJKcraeQkuTKw…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCPdje2uf114VbXFVDJqg5XqFffhp4OHKNDx+x7N0AuZlKsCoZBlqQTBQTEPU9OKDV6NlSSmzlxTfQsg7DEQX…

selectors probed

Certificate (current) wrong cert

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-08-19 to 2026-09-20

Expires in 111 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.zorgenzekerheid.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy

Header values

x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), accelerometer=(), autoplay=(), camera=(), encrypted-media=(), fullscreen=(self "https://zorgenzekerheid.pingvp.com" "https://indd.adobe.com/"), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' https://platform.twitter.com/ https://*.gstatic.com/ https://*.googleapis.com/ https://plugins.blueconic.net/ https://*.googlesyndication.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://zorgverzekeraarzz--acc.sandbox.my.salesforce-sites.com/ https://d20000000m3vhea0--lightning.my.salesforce.com/ https://*.googletagmanager.com https://www.dwin1.com https://www.pingvp.com https://clients1.google.com bat.bing.com https://www.pingvp.com https://indd.adobe.com; child-src 'self'; connect-src 'self' https://*.googletagmanager.com https://*.analytics.google.com wss://*.hotjar.com/ https://region1.analytics.google.com/ https://zorgverzekeraarzz--acc.sandbox.my.salesforce-sites.com/ https://zorgverzekeraarzz--acc.sandbox.lightning.force.com/ https://*.google-analytics.com/ https://lightning-zorgenzekerheid.cs100.force.com/ https://c.la1-c1cs-fra.salesforceliveagent.com/content https://www.google-analytics.com/ https://service.zorgenzekerhei
strict-transport-security: max-age=63072000; includeSubDomains