zzgzorggroep.nl

HTML metadata

Title: ZZG zorggroep - Oog voor elkaar
Description: ZZG zorggroep ondersteunt u als het niet meer vanzelf gaat. Met zorg thuis, in het Herstelcentrum of bij een verblijf in een woonlocatie. Lees meer.
Language: nl

Technology

CMS: Ghost
jQuery: 3.4.1 known XSS (<3.5)

Analytics

Google Tag Manager

Fonts

Font Awesome

Third-party hosts loaded (5)

cdnjs.cloudflare.com×4
code.jquery.com×3
stackpath.bootstrapcdn.com×2
use.fontawesome.com×1
www.googletagmanager.com×1

Social

Contact

Email

info@zzgzorggroep.nl

Phone

024-3665777

Registration

Registrar

Registrar.eu

Created

2007-09-07

Updated

2025-07-04

Name servers

ns.eatserver.nl
ns2.eatserver.nl

DNS records live

NS

ns.eatserver.nl
ns2.eatserver.nl

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
30 alt3.aspmx.l.google.com
30 alt4.aspmx.l.google.com

TXT

DomainVerification=3SBXF1P6FC7NDNTWT0ENUY1YG2Q6E5BUY10O1YBH4Z7VHGL9AEUS55XYO7T51I3N

Email authentication strong

SPF

v=spf1 a:loek.zzgzorggroep.nl ip4:37.153.245.54 ip4:217.26.125.140 include:_spf.google.com include:_spf.syveon.com include:spf.mailjet.com include:spf.topdesk.net include:spf.formdesk.com  include:_spf.cobytes.email ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:4cedcafc@in.mailhardener.com; ruf=mailto:4cedcafc@in.mailhardener.com; fo=1

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+2ZLHtke9MfOcNbasi41HpNpNtp3Uz2+84IZ7OP8WN45VNNuhufJQZeOBRFe7b5tEXQt4NHQm6hKN…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-02-22 to 2026-08-23

Expires in 79 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.zzgzorggroep.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; font-src *; img-src * data:; script-src * 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src * 'unsafe-inline'; connect-src 'self' https://*.google-analytics.com https://maps.googleapis.com/ https://stats.g.doubleclick.net/; frame-src 'self' https://www.youtube-nocookie.com youtube.com www.youtube.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/
strict-transport-security: max-age=31536000; includeSubDomains