alkmaar.nl
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress
Third-party hosts loaded (4)
- kit.fontawesome.com×2
- analytics.silktide.com×1
- gmpg.org×1
- oc-cdn-public-eur.azureedge.net×1
Social
Registration
- Registrar
- Realtime Register
- Created
- 1995-08-28
- Updated
- 2025-01-13
- Name servers
-
- anycast-eu.dns.sqr.nl
- unicast-eu.dns.sqr.domains
- anycast-global.dns.sqr.cloud
DNS records live
- NS
-
- anycast-eu.dns.sqr.nl
- anycast-global.dns.sqr.cloud
- unicast-eu.dns.sqr.domains
- MX
-
- 10 alkmaar-nl.p-v1.mx.microsoft
- TXT
-
Show 25 TXT records
mPlmHLBmRLhaLpmuUCarP0FIptorKqxyFR8WKKqzqmWybWTAbwlPn7aLjJNsc0UxhsfyWtB6nHIguQ8sLCQ5ldRq4DshiwYq8FPMy9s0PQOzkWhRcwjnYQGk8HPf1Avub5f8f9a1f12a43c3ea9ddc36707564b5aa06007a60287434fb19423265c639f5hGQLkKVn5mFNvjiC6kjIpAMB8W9VF6B7tQzQbdN8oh6nPeSr6PTB4NSoCYHZPxsyg4EpC+UXbLTGSGfgX0v5ptR/GLUyQHdZ+o5MbvsAvaycwe8LJtJ6XS6OP2G5YWigqCP0OdH7f4eCg5t0Ycs9Aw==tnhaDydzOIv7JO4PZmaC2OrPOlWIM3wHG458gim6voynyInFRPMW1imiHfTqAIhvg4eES8RbwML9B227QSitLgXJgzqlEWoWa8rIl5ELkmcffuKkhbVsdsDwCEZx5h9Fs0TqgfBqivWswNE8v6CKdhtacwoc6XP0r7izR3vO6hqL7xtXT08DRkpEEjCldrzJadobe-sign-verification=fe83651d96e78e4eb829c16324ad4606FPRg4WgOkAuKvmT7nTCYucvQvvmXtlA8qd8V2pOEQa5uL7YjbyfkncLalfdxhQVLQICNcmNVKIa5XmpRHbg4rO0m7GuALhBuEO68pTcaNQI8kwutjjDPD4HXo8oXEpqqgJvXFp5RIYiKEkUsNIrkBxSHjdiCZKqokNmyoOGkU9H0Y0S76bTh939zWOAFauf4KarJyuXDnQxpkmRo2L45TNHnxfc2gNAJs8arEuWuwYrQuK2QutmLGqBipDJOiynON2TTUEA5atz2veK8dL6Q3ZhldHigdjEA3E8Sb6Y1fNDMAzGYWg2ABBj2Icb9WfFcv=NTA7516-1;startdate=2025-09;enddate=2030-09;provider=smartlockr;ntamx=10 ntamx.smartlockr.euautodesk-domain-verification=dY8UMZYd6mRO-wy8isW16pFzkFyN12ru0F2TjC5VHYteep8ZOPeRewQofzawCNd8ohSB8DVr3mxjOLz0vMEeHzvWNoPhv8ra9TMSIPW7Nm47GPi2yPLafeO6s9YKyE7bcPJR7nCBgH3ooNWmeBrJa4OsdRG4q9nZxTsUCKjxwNCJ0D3ebdpLPFl9YogmxUCu8g7ttBkbLuRjGQGn67OgOSvr7dEXUSuKbkvXR0xtbTj5ajmlLGHHkUBh3WS1hBzDLFRrkCxYEw9ZcRMQTmFf30rWMIK0I4NihosjBMPDtAnbMP4LRobfxTuiYXhkqVBbuH8UcAeaPv1PZuIE9Vogmsfpkey=2fwqhlcny0dcybmhpun7hkjmv1f57235d0661f004876fec9629ae9c41d2906e7ef2c3c8df4bc16e3af66594a03HRwy5CBKMe98Ryd5J3pxeL7MzQ6GtUQAB33K5Mg7XD4OcEKwHhuk9lPhICfxyslvSZbMUEmGb8Z7ChEPKnxBxHVz2ihRd6vHI1iEKFDdRkTpaWRxnYSkke5TisE9JRo
- Verified for
-
- Apple
- Canva
- Meta
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 include:spf.protection.outlook.com ip4:93.93.120.28 ip4:51.136.120.10 ip4:185.249.220.0/24 ip4:40.95.64.0/22 ip4:185.225.161.0/24 ip4:51.105.148.248 ip4:20.50.169.50 ip4:31.7.1.29 ip6:2a03:9700:8000:1::29 include:spf.afas.online include:_spf.mailrelay.zorgring.nl include:_spf.service.centric.eu include:spf_servers.yard.nl include:spf_cluster.yard.nl include:spf.zaaksysteem.nl include:_saas.easyfunders.nl -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:5ztwg1fi@ag.eu.dmarcadvisor.com; ruf=mailto:5ztwg1fi@fr.eu.dmarcadvisor.com;policy: reject (enforced) - DKIM
-
Show 4 DKIM selectors
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny3N7iDApstWsyVMy13VU3guwTryt7RJJbgav+iy0xoaDDliZhC5nVgt/wQ5F1HhX6vXfpOYanDK5i… - selector2:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDaYVwP+wTgkw/c/4lbeLDVA4ErjIAYE+Z8fQHmqh2b+kWTvNaCwAA0M8kIDq7SDoTEwOMctpWYIaOme3VKge… - k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA… - mail:
v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7mWZykoCxzBmUc2+gPSDuBbbPVVQ+MwtTrof/nsuqujSDKACmkukoW0vRRck7PY6pQr…
selectors probed - selector1:
Certificate (current)
certSIGN Web CA
Expires in 91 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
- weak content type protection
Header values
- referrer-policy
strict-origin-when-cross-origin, strict-origin-when-cross-origin- x-frame-options
sameorigin, SAMEORIGIN- permissions-policy
accelerometer=(self), autoplay=(self), camera=(self), cross-origin-isolated=(self), document-domain=*, encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), interest-cohort=(), magnetometer=(self), microphone=(self), midi=(self), payment=(self), picture-in-picture=*, publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=*, usb=(self), xr-spatial-tracking=(self)- x-content-type-options
nosniff, nosniff- content-security-policy
connect-src 'self' *.fontawesome.com *.readspeaker.com fonts.googleapis.com cdn1.readspeaker.com *.elk01.yard.nl *.test01.yard.nl *.googleapis.com *.silktide.com; default-src 'self' *.fontawesome.com *.readspeaker.com alkmaar-openpub.accept02.yard.nl alkmaar-openpdc.accept02.yard.nl; font-src 'self' data: https: fonts.gstatic.com *.fontawesome.com *.readspeaker.com; frame-src 'self' www.google.com www.youtube.com www.youtube-nocookie.com *.vimeo.com *.arcgis.com oc-cdn-public-eur.azureedge.net cdn.knightlab.com/; img-src data: https: *.fontawesome.com *.google-analytics.com *.readspeaker.com alkmaar-openpub.accept02.yard.nl alkmaar-openpdc.accept02.yard.nl; media-src 'self' *.fontawesome.com *.readspeaker.com; object-src data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: *.googleapis.com www.gstatic.com *.google.com *.google-analytics.com *.googletagmanager.com *.fontawesome.com *.readspeaker.com *.silktide.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eva- strict-transport-security
max-age=31536000; includeSubDomains; preload, max-age=31536000; includeSubDomains