davinci.nl

HTML metadata

Title: Rock jouw wereld! - ROC Da Vinci College
Description: Rock jij jouw wereld! Kies een mbo-opleiding die bij je past, ontwikkel je talenten en zet de eerste stap richting een succesvolle toekomst.
Language: nl-NL
Canonical: https://www.davinci.nl/

Open Graph

url: https://www.davinci.nl/
title: Rock jouw wereld! - ROC Da Vinci College
locale: nl_NL
site name: ROC Da Vinci College
description: Rock jij jouw wereld! Kies een mbo-opleiding die bij je past, ontwikkel je talenten en zet de eerste stap richting een succesvolle toekomst.

Technology

Server: Apache
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (3)

www.google.com×2
maps.googleapis.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns1.as41887.nl
ns2.as41887.eu
ns3.as41887.io
ns4.as41887.it

MX

10 d311171.b.ess.de.barracudanetworks.com
20 d311171.a.ess.de.barracudanetworks.com

TXT

tczPHcK/9I08/yU6HV+wwJyEfUOxpAiBtaNh3ONlyCUzpOwaljD7UaXaN0D50r8EqT8PcuI9rEoBC2h7V+OabQ==
MS=DAA65F359757636A7530A59F3E8720480E818750

Verified for

Apple
Microsoft
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.davinci.nl.eu-a96tglv1.e1.dspf.app -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:a96tglv1@ag.eu.dmarcadvisor.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCy0LJNdlGYMJ283fhGtQonfyPStX6uxRdgp7dOxnTVqAoUt3oHvtnFd3al/75cMhaQrA824RBPDdLvsE6Gtl…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

R13

from 2026-04-28 to 2026-07-27

Expires in 54 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.davinci.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: same-origin,
x-frame-options: sameorigin
x-content-type-options: nosniff
content-security-policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://cdn.davinci.nl https://maps.googleapis.com https://fonts.googleapis.com https://www.gstatic.com https://www.youtube-nocookie.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://cdn.davinci.nl https://www.google.com https://maps.googleapis.com https://www.googletagmanager.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://snap.licdn.com https://connect.facebook.net https://analytics.tiktok.com https://googleads.g.doubleclick.net https://www.gstatic.com https://widget.salonhub.nl https://dev.visualwebsiteoptimizer.com https://public.salonhub.nl https://www.youtube-nocookie.com; child-src 'self' https://www.youtube-nocookie.com https://www.youtube.com https://maps.google.com https://studieincijfers.s-bb.nl https://studieincijfers.kiesmbo.nl https://www.googletagmanager.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://td.doubleclick.net https://www.faceb
strict-transport-security: max-age=63072000; includeSubdomains;