werkenbijreto.nl

Werk jij mee aan onze missie?

Wij zijn RETO. Met ons kleine, maar gedreven team delen wij de passie voor internet en haar techniek. Je kan je voorstellen dat wij met elkaar bijzond

Last scanned 47 min agoCompare with another site →

Built with

Backend: PHP

Also detected

Libraries: jQuery
Infrastructure: Apache

Overview

Status: alive
Registered: 2014-04-02 (12 years ago)
First seen here: 2026-09-22
Security grade: F (0/100, from headers & TLS)
Privacy score: 64/100 (2 third-party script hosts, 0 tracking/marketing services)
Hosting: The Internet Engineering Group B.V. · AS197731 · Netherlands
Server header: Apache/2.2.14 (Ubuntu)
Response time: 30 ms to first byte, measured from our crawler
Mobile-ready: yes (viewport meta tag)
Linked to from: 6 other sites seen so far

Loads scripts from

Third-party domains this page pulls JavaScript or iframes from. Each one can see who visits.

googleapis.comreto.nl

What to fix

Serve the site over HTTPS
Free certificates are available from Let's Encrypt; most hosts enable it with one click.
Add a Content-Security-Policy
Limits which scripts can run, and is the main defense against XSS. Start with Content-Security-Policy-Report-Only to test.
Add X-Content-Type-Options
Header: X-Content-Type-Options: nosniff
Prevent clickjacking
Header: X-Frame-Options: DENY (or a CSP frame-ancestors directive).
Add a Referrer-Policy
Header: Referrer-Policy: strict-origin-when-cross-origin
Publish a DMARC record
A TXT record at _dmarc.<domain>; start with v=DMARC1; p=none; to monitor.

Security & email signals

✗ HTTPS
✗ HSTS
✗ Content-Security-Policy
✗ X-Content-Type-Options
✗ X-Frame-Options
✗ Referrer-Policy
✗ Permissions-Policy
✓ SPF record
✗ DMARC record
✗ DKIM record
✓ Cookies set securely
✓ Has real content (not an empty shell)
✓ Valid TLS certificate

Badge

Show this site's security grade in a README or footer:

<a href="https://webtelemetry.dev/site/werkenbijreto.nl"><img src="https://webtelemetry.dev/badge/werkenbijreto.nl.svg" alt="Security grade"></a>

Generated automatically from passive, publicly observable data. Think something here is wrong or want this profile removed? See /bot. Machine-readable: JSON.