bpost.be

HTML metadata

Title

Bpost will see to it | Bpost

Description

Take care of all your postal needs and send parcels online. It's so quick and easy! You'll find all prices, shipping options, postcodes and Bpost sales points quick as lightning, also on your smartphone.

Language

en

Canonical

https://www.bpost.be/en

Translations

de
en
fr
nl

Technology

CDN: Amazon CloudFront
CMS: Drupal

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (7)

maxcdn.bootstrapcdn.com×2
www.googletagmanager.com×2
ajax.googleapis.com×1
cdn.jsdelivr.net×1
cdnjs.cloudflare.com×1
fonts.gstatic.com×1
static.addtoany.com×1

Social

Contact

Phone

+3222785129

DNS records live

NS

europe1.dnsnode.net
nsp.dnsnode.net
nsu.dnsnode.net

MX

10 bpost-be.mail.protection.outlook.com

TXT

Show 18 TXT records

figma-domain-verification=132eacf928b230110e53542a677e3a281e4ad8d8b87792ed61166771d77ff9d5-1765799630
amazonses:O9zu9jUJ1ZwFPYSXKFgULrmH9cGWkr8BmYc+zbH14h8=
apple-domain-verification=PsFwMScQitY2pLzh
msfpkey=6hun1crjfk5cq6sckag9h2kq
facebook-domain-verification=vuizo8zc9e1o9b9jdaqz7vxmrmez3q
atlassian-domain-verification=tWp/pKrehseAZgXQ9TWU7lqiUcuVdY4PD5tpGAoOJW2o4voWiv8kGanUV6a/l+W8
amazonses:pxw3m8FvPcyyDBFLPXvORPHHa20IFMH9dz92XpnOvHQ=
amazonses:7iAR7GRKGpMzcsauZJW/ZGsWD+a9G1flrBqCozM647U=
Dynatrace-site-verification=b72374ef-1d86-4eb9-82b9-1e38afdf81dd__r0ncjbiha2s9j0pp57cf1mh08v
HARICA-lA1b27AmhUiYwE3laeI
onetrust-domain-verification=ec2a3bd2980645fa9dbb8476f589eaaa
d365mktkey=hoVaNyvdfpJLvjZpJNFxqsixxE1z0pQj6RAxxpWwZ3Ux
amazonses:Q6D+t9X4XKDziqXW1Fj7UwX5tTp9fdDDDbNGzy1JIBw=
linkedin-site-verification=4eaa943a-93f5-4932-b1c7-b5ed00b8115e
bnFZdC7m+DuY2spicJLGKvdFbxPJP0knGT7VzobVuZm7/LCpkgXF940NQ3r+zDLND4teFqOCLOS19BqqtFxucg==
HARICA-B9ZBt0Ga2KXHtMtxfKo
google-site-verification=ZUel8LSiv8IqoeF5I0CcWrtO63yI_SkTWIE__hjmHuE
amazonses:kcixaoOpp5achxkQ/XlSGNefHv0VsC4oJH9EFWfQDA8=

Email authentication strong

SPF

not published

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc@sq9heudn.uriports.com,mailto:dmarc_agg@vali.email; ruf=mailto:dmarc@sq9heudn.uriports.com; sp=reject; adkim=r; aspf=s

policy: reject (enforced) · sp=reject

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+wKm3FFQxDNCS/07Ce82H70Ynni7R2XQ7HTq7yKqKgg9IX2C0f/WsDcBbmsG6cMJpIW/T3/Pphi/WhXljFb…
mail: v=DKIM1; t=s; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf5mm7jW2b14sWh80WgBLE9UngP7Ozj7+StCcAA1Rmu7XVgZfqXZVAs8C7DPw828vl88OLFd8…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjmbZN83yK54ivRvUuawaupqVWpYKKTKSlSve9w8pECukULkjWcloyTj8+OQEHNJ0YtF99Eu38upuTP7JT…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrh2VyRITFNSkGrC5sXXKDVojECoIJ0jezNV8P7NRECediHT3uWEmzptWN6ZgGwrKuzIDlIyT2i9Ax2oYsiw7o+y…

selectors probed

Certificate (current)

GEANT TLS RSA 1

from 2025-11-19 to 2026-11-19

Expires in 183 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.bpost.be/en

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin
x-frame-options: ALLOW-FROM http://oas-pr.netpost
x-content-type-options: nosniff
content-security-policy: default-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googleoptimize.com www.google-analytics.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com cdnjs.cloudflare.com mimo84.github.io bpaid.unfyd.com bpost2.unfyd.com www.google.com www.gstatic.com cdn.rawgit.com *.googletagmanager.com optanon.blob.core.windows.net cdn.cookielaw.org code.jquery.com ajax.googleapis.com w.usabilla.com www.bpost2.be http://bpost2.be maps.googleapis.com connect.facebook.net s.pinimg.com img.en25.com api.usabilla.com d6tizftlrpuof.cloudfront.net bpost.wikafi.be bat.bing.com geolocation.onetrust.com static.addtoany.com *.licdn.com *.linkedin.com hello.bpost.be static.zdassets.com unpkg.com mktdplp102cdn.azureedge.net oc-cdn-public-eur.azureedge.net msft-lcw-trial.azureedge.net *.urlgeni.us *.clarity.ms *.google.com cxppeur1rdrect01sa02cdn.blob.core.windows.net 2uqtsoukg0.kameleoon.io *.kameleoon.io *.kameleoon.eu *.kameleoon.com www.recaptcha.net https://googleads.g.doubleclick.net https://c
strict-transport-security: max-age=31536000;

Links to (9)

Linked from (2)

huodaiagent.com×1
crewplanner.com×1