gambling betting

government public service

blog personal website

documentation technical

technology software

Dutch

__cmpcccx72832

shown_video_id_array

__cmpconsentx72832

_ga_6B4FYWY638

The domain name 'voetbal.headliner.nl' uses the Dutch country-code top-level domain (.nl) and includes subdomain 'voetbal'. Count 9 characters in 'headliner' with 4 vowels and 5 consonants. Segmentation suggests 1 word: headliner. No strong language cues emerged from the frequency lists.

html/fa/c2/fac23365-a7e3-40d9-9802-9eafad669111.html.gz

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:164:0

12bb40359553df001634a1d24fff4ca5e51d53b3ad2f37ee23c2cd8e9d3a513b

64a3e0c915c6b363682594819ed0ac890bccdf2980d715e3c6bd1d493a76a914

8a16b99781737ea7ea85bc36931c7db9e89ff9fe259b5ae5fcfde9655e58bfb0

64dd4424b45fe8be47a1bd376e2584bd19f65300e706615f060e4e48cabdeb0a

136eb704d02d91d568297ef5086c50f8333d467aff73319da13075c44bea5f41

d749e69446af30d958476170932a9e742b0dd9bcb51c00a7c1f5c35abfa0ab85

d507d496ef05e427ed43b59c569c92bc1c614b2762e4fc981e52b55ac4510e08

198fc11942f81a8fe8fc30d35cfaae381453a850620153adf92cb71804a1f892

3cf3931cc4dbc63055fb7f1620ee73f236658f1561a8df62f52a1143b30b19ab

a5ac7f637667ba09ccb46a0604e9c36d0a6f0e83ea18be428917f1b294efbde8

d7eb86ac6b5cf16eafa6c46d681769fe85b34b60ecf1390402766aebcdece15b

80e43637b7d10bebf6fcc69c89a5dedec7306fac34f7e9e1c554af8a9c283efe

025afe799e3f7059f291cb24d25698de60877f3c3908e1e64dbe7d518bcddba1

0cfd7fdc6e608bc2820e86aa254d06fd2b5142fbf945626c03404a86a65fe4cb

190bacff482893d4b553f665363eb3eab449ae96d59499c4076d978058a197ad

ccadbf91a37c857c2a14b7c7d151dc0fb834a0798a9e38d6a8e1ae223b21f544

ce0a0c0deb192e8a065734f772e1674d29657f8d6a2457d46c0d3c25a3cd1d90

89de7c442ce393b625e39baf5a97f5cce74e3ad5aba26f5862117f399659f16e

421c501d9fd8ad876df8cf1fcae672386ae7784befe6da9e55fa84e635d06ed1

6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e

e22e093bbfba8b55c1024ef5645cc41074eb6efa68a1898eb5a856f657cc2e52

e0c0d8df9dc0ad4b30c2c8bf329c2d0b195e363755ad86e78e4013ee426e0be4

0fd7c028c796c5701c79e651b426e1462ab047acebb27f878dab0361c30fc677

7eae99c5817da7868a359dafa4a60b5d35b19f531e8cb2a725356724ebb8a808

a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb

17044b481f24a900d2901e6eb0ed2568dc7382a91357642e5f5aca7f511dcebb

e42ec13eb4609e7aa635205f1c69a4f85c8d63ecdb723c806ea2d7a1355193c1

5eeacd49141383674f56e3e9cd4892f7a5778a601aa5913d7ac46f55c05464a5

97fc8f0c88696fd285c6a458391e26fdd395c0112b5c1beea7159902fa6f93f0

c30bc5ad870ee40682bae6d17189ff3070178c4689639b66bb96518af6113196

8bc1c98e19fa7cc0e8e20906f2d6d12a0486d50ab344ac94c818e2c725e5865e

3c2df0cf51d52de194b84574ae0ca2e0be0fdcfd8bc92c2d41a9053c9ce48362

6c6f694925ef18c052161f9b1d81387b37b0632d6d286700f541c4cc16964cc5

Next.js missing cache-control header may lead to CDN caching empty reply

Denial of Service condition in Next.js image optimization

Next.js authorization bypass vulnerability

Next.js Race Condition to Cache Poisoning

A vulnerability in Next.js Image Optimization has been fixed in v15.4.5 and v14.2.31. When images returned from API routes vary based on request headers (such as `Cookie` or `Authorization`), these responses could be incorrectly cached and served to unauthorized users due to a cache key confusion bug.

All users are encouraged to upgrade if they use API routes to serve images that depend on request headers and have image optimization enabled.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-57752)

A vulnerability in **Next.js Image Optimization** has been fixed in **v15.4.5** and **v14.2.31**. The issue allowed attacker-controlled external image sources to trigger file downloads with arbitrary content and filenames under specific configurations. This behavior could be abused for phishing or malicious file delivery.

All users relying on `images.domains` or `images.remotePatterns` are encouraged to upgrade and verify that external image sources are strictly validated.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-55173)

A vulnerability in **Next.js Middleware** has been fixed in **v14.2.32** and **v15.4.7**. The issue occurred when request headers were directly passed into `NextResponse.next()`. In self-hosted applications, this could allow Server-Side Request Forgery (SSRF) if certain sensitive headers from the incoming request were reflected back into the response.

All users implementing custom middleware logic in self-hosted environments are strongly encouraged to upgrade and verify correct usage of the `next()` function.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-57822)

A DoS vulnerability exists in self-hosted Next.js applications that have `remotePatterns` configured for the Image Optimizer. The image optimization endpoint (`/_next/image`) loads external images entirely into memory without enforcing a maximum size limit, allowing an attacker to cause out-of-memory conditions by requesting optimization of arbitrarily large images. This vulnerability requires that `remotePatterns` is configured to allow image optimization from external domains and that the attacker can serve or control a large image on an allowed domain.

Strongly consider upgrading to 15.5.10 and 16.1.5 to reduce risk and prevent availability issues in Next applications.

## Summary
When Next.js rewrites proxy traffic to an external backend, a crafted `DELETE`/`OPTIONS` request using `Transfer-Encoding: chunked` could trigger request boundary disagreement between the proxy and backend. This could allow request smuggling through rewritten routes.

## Impact
An attacker could smuggle a second request to unintended backend routes (for example, internal/admin endpoints), bypassing assumptions that only the configured rewrite destination/path is reachable. This does not impact applications hosted on providers that handle rewrites at the CDN level, such as Vercel. 

## Patches
The vulnerability originated in an upstream library vendored by Next.js. It is fixed by updating that dependency’s behavior so `content-length: 0` is added only when both `content-length` and `transfer-encoding` are absent, and `transfer-encoding` is no longer removed in that code path.

## Workarounds
If upgrade is not immediately possible:
- Block chunked `DELETE`/`OPTIONS` requests on rewritten routes at your edge/proxy.
- Enforce authentication/authorization on backend routes per our [security guidance](https://nextjs.org/docs/app/guides/data-security).

## Summary
The default Next.js image optimization disk cache (`/_next/image`) did not have a configurable upper bound, allowing unbounded cache growth.

## Impact
An attacker could generate many unique image-optimization variants and exhaust disk space, causing denial of service.

## Patches
Fixed by adding an LRU-backed disk cache with `images.maximumDiskCacheSize`, including eviction of least-recently-used entries when the limit is exceeded. Setting `maximumDiskCacheSize: 0` disables disk caching. 

## Workarounds
If upgrade is not immediately possible:
- Periodically clean `.next/cache/images`.
- Reduce variant cardinality (e.g., tighten values for `images.localPatterns`, `images.remotePatterns`, and `images.qualities`)

64d2e2d342fc91e0a30d843ccc91c1a03cf7ea60f0b7707ee9ae694e81130958

2f94609673d2da691a1cb9b831cd782b0d1e5152df97316abfacfa909b91b0d5

viewport

Crysencio Summerville bloeit momenteel uit bij West Ham United, waar hij indruk maakt en daardoor deze winter op de radar van meerdere Europese topclubs stond. De Rotterdammer doorliep de jeugd van Feyenoord maar vertrok in 2019 naar FC Dordrecht nadat hij bij Feyenoord tegen gedragsproblemen en wrijving met staf en teamgenoten aanliep. Een half seizoen in de Keuken Kampioen Divisie (18 wedstrijden, vijf goals) verbeterde zijn reputatie; daarna volgde een huurperiode bij ADO Den Haag en uiteindelijk definitief vertrek omdat Feyenoord niet ver wilde gaan met een contractverlenging.Summerville koos voor Leeds United, een stap waar hij aanvankelijk vooral in het beloftenelftal begon. Trainers prezen zijn snelheid en bewegingsvrijheid, kwaliteiten die hem later bij het eerste elftal brachten. Na het vertrek van Raphinha gaf coach Jesse Marsch hem structureel vertrouwen, waarna hij zich ontwikkelde tot een sleutelspeler. Die vorm leidde tot een transfer naar West Ham, waar hij op dit moment uitblinkt en belangstelling van meerdere grote clubs bleef aantrekken.Samengevat: een snel en beweeglijk buitenspeler die via leer- en herstelperiodes in de lagere competities en bij Leeds zijn talent heeft geconsolideerd, nu bij West Ham doorbreekt en mogelijk komende zomer een nieuwe, grotere transfer kan maken.

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

abuse@nl.team.blue

REDACTED FOR PRIVACY

Splendense

team.blue nl B.V.

TransIP

headliner.nl

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZO-CF


	window.dataLayer = window.dataLayer || [];
	function gtag(){dataLayer.push(arguments);}
	gtag('js', new Date());
	gtag('config', 'G-6B4FYWY638');


Google-Analytics

Google Analytics

Onsen UI

Wie is Crysencio Summerville, de Nederlander die het geweldig doet bij West Ham?

Tracking domain: a.delivery.consentmanager.net

a.delivery.consentmanager.net

stats.g.doubleclick.net

Tracking domain: region1.analytics.google.com

region1.analytics.google.com

c.amazon-adsystem.com

Tracking domain: www.googletagmanager.com

www.googletagmanager.com

js-agent.newrelic.com

Tracking domain: securepubads.g.doubleclick.net

securepubads.g.doubleclick.net

imasdk.googleapis.com

bam.eu01.nr-data.net

tags.tiqcdn.com

cdn.consentmanager.net

✅ Low Risk - https://voetbal.headliner.nl/item/wie-is-crysencio-summerville-de-nederlander-die-het-geweldig-doet-bij-west-ham-voetbalnieuws-68930

Requests	IP Address	Location	AS Autonomous System
17	13.35.58.50	United States	AS16509Amazon.com, Inc.
17	142.251.13.97	United States	AS15169Google LLC
17	77.68.24.79	United Kingdom	AS8560IONOS SE
51	3	-	-

Security Scan Report: voetbal.headliner.nl

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History