htm.nl

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since htm.nl can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

no-cache, no-store

Content-Encoding

Not sent

Security

Content-Security-Policy

script-src 'unsafe-eval' *.clarity.com *.survicate.com *.adform.net *.facebook.net *.zemanta.com *.htm.nl 'self' 'unsafe-inline' *.youtube.com *.vimeo.com maps.googleapis.com *.google-analytics.com *.googletagmanager.com https://widget.eu.surveymonkey.com https://ajax.googleapis.com *.google.com/recaptcha/ *.gstatic.com/recaptcha/ https://*.cookiebot.com https://*.clarity.ms https://c.bing.com; style-src *.survicate.com *.googletagmanager.com 'self' 'unsafe-inline' fonts.googleapis.com; font-src *.survicate.com 'self' data: fonts.gstatic.com; connect-src *.survicate.com *.clarity.ms *.doubleclick.net *.google.com sst.htm.nl 'self' maps.googleapis.com *.analytics.google.com *.googletagmanager.com consentcdn.cookiebot.com https://*.cookiebot.com https://*.google-analytics.com; img-src *.cloudinary.com *.survicate.com *.clarity.ms *.bing.com *.facebook.com *.zemanta.com *.google.nl *.cookiebot.com *.ytimg.com *.vimeocdn.com *.maps.gstatic.com *.maps.googleapis.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.gstatic.com 'self' data: blob: maps.gstatic.com maps.googleapis.com; form-action 'self' ideal.ing.nl betalen.rabobank.nl www.abnamro.nl diensten.asnbank.nl ideal2.knab.nl diensten.regiobank.nl diensten.snsbank.nl ideal.triodos.nl *.vanlanschotkempen.com ideal.bunq.com *.buckaroo.nl *.b2clogin.com *.facebook.com https://htmnlb2c.b2clogin.com pay.ideal.nl; frame-src *.vimeo.com *.youtuve-nocookie.com *.google.com *.doubleclick.net connect.facebook.net/:1 cookiebot.com *.surveymonkey.com *.youtube-nocookie.com *.facebook.com htm-webcms-prd-win.azurewebsites.net sst.htm.nl 'self' consentcdn.cookiebot.com https://eu.surveymonkey.com https://kiesmijnregio.nl; base-uri 'self'; default-src 'self'; frame-ancestors 'self' *.buckaroo.nl; manifest-src 'self'

Strict-Transport-Security

max-age=31536000; preload

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), browsing-topics=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), gamepad=(), geolocation=(self "https://kiesmijnregio.nl/"), gyroscope=(), hid=(), identity-credentials-get=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker-selection=(), storage-access=(), usb=(), web-share=(), window-management=(), xr-spatial-tracking=()

What each security header does

Redirect chain

1. 1.http://htm.nl/HTTP 307

   → https://htm.nl/

2. 2.https://htm.nl/HTTP 308

   → https://www.htm.nl/

3. 3.https://www.htm.nl/HTTP 200

Meta tags

Title

HTM | Vanzelfsprekend betrouwbaar OV in regio Den Haag

Description

Plan je reis, bekijk dienstregelingen en regel tickets en abonnementen voor openbaar vervoer in regio Den Haag. Stap in en laat HTM je brengen!

Canonical

https://www.htm.nl/

Robots

Not set

Generator

Not set

Open Graph title

Not set

Open Graph description

Not set

Open Graph image

Not set

Open Graph type

Not set

Twitter card

Not set

Twitter title

Not set

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

4

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• ASP.NETframework

  X-Powered-By: ASP.NET

Related domains