debaak.nl

HTML metadata

Title: de Baak
Description: Het trainingsinstituut voor ontwikkeling en leiderschap sinds 1947
Language: nl
Canonical: https://debaak.nl/

Open Graph

url: https://debaak.nl/
title: de Baak
site name: de Baak
description: Training Ontwikkeling Leiderschap sinds 1947

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Phone

0343556369

Registration

Registrar

Realtime Register

Created

1995-11-08

Updated

2024-10-24

Name servers

ashley.ns.cloudflare.com
norman.ns.cloudflare.com

DNS records live

NS

ashley.ns.cloudflare.com
norman.ns.cloudflare.com

MX

0 d306165.a.ess.de.barracudanetworks.com
0 d306165.b.ess.de.barracudanetworks.com

TXT

wh398589k28lp7x332ybb3zwr15c08hp
BPL=1251259

Verified for

DocuSign
Dynamics 365
Google
Meta

Email authentication strong

SPF

v=spf1 include:_spf.debaak.nl -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:rua+debaak.nl@dmarc.barracudanetworks.com; ruf=mailto:ruf+debaak.nl@dmarc.barracudanetworks.com

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoUoIQgAAfd1f27vdAMhjuihnGN/5Evz51mrd9w4SAeCt6cyC2n5NNUcKszlCheK5kUKSAbDvS5UaS…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jgKUmhzuVL1TZ3cJqIq/zef75E4P6pWnKUb2GBy/AFbQEJmTd4NLmT0F5ow//jq/obgDcoLfiYDE1j0nf…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDFmaf+hcFFXifGElhNoS7S5NfMxBmLnlnKE06E/Hmqjir5v85RIJGzWWn4bf2iiNR0AiLBIPYayM8bkGqq79NSvi…

selectors probed

Certificate (current)

WE1

from 2026-04-28 to 2026-07-27

Expires in 54 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://debaak.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

short HSTS max-age
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: fullscreen=(self), geolocation=*, camera=()
x-content-type-options: nosniff
content-security-policy: frame-src superbold.nl *.umbraco.com public-eur.mkt.dynamics.com *.youtube.com *.vimeo.com *.google.com *.youtube-nocookie.com *.guiltypeople.nl *.debaak.nl debaak.nl *.azurewebsites.net *.cookiebot.com *.googletagmanager.com *.svc.dynamics.com *.*.dynamics.com;frame-ancestors superbold.nl *.umbraco.com public-eur.mkt.dynamics.com *.youtube.com *.vimeo.com *.google.com *.youtube-nocookie.com *.guiltypeople.nl *.debaak.nl debaak.nl *.azurewebsites.net *.cookiebot.com *.googletagmanager.com *.svc.dynamics.com *.*.dynamics.com;
strict-transport-security: max-age=7776000; includeSubDomains; preload