despotmiddelburg.nl

HTML metadata

Title: De Spot Middelburg
Description: De Spot is het poppodium van Middelburg. Wij organiseren concerten, open podia, dansavonden, theater en andere culturele activiteiten.
Language: nl
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://despotmiddelburg.nl/welkom

Open Graph

title: Welkom!

Technology

CMS: Drupal

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (5)

cdn.jsdelivr.net×2
fonts.googleapis.com×2
consent.cookiefirst.com×1
fonts.gstatic.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

drew.ns.cloudflare.com
zita.ns.cloudflare.com

MX

10 despotmiddelburg-nl.mail.protection.outlook.com

Verified for

1Password
Apple
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.afas.online include:spf.protection.outlook.com include:_spf.zivver.com include:hosting.regicare.nl include:mail-heroes.nl -all

strict (-all)

DMARC

v=DMARC1;p=reject

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhEaKZGpmFLl1xJajaK7s2Vh+DPuWJNCfb5//URuAc4QaOi7DC8/d2HSYNFs2vhh4Cb6D7L4ZjZNh3…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmidxq7JjegT2ucyopnSZR3q7tWrKZADH2wN41/RebfodQHV60/Md4lXOCj0Pa7c3gN1fEuhJdHHuxv…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+HaJKolJPGqBWpdkh3GhsCmnc7+qn9Swez2FQtaBEZz/OJU9c/W7XjCf6W2/ppSjanKY4Srdcp4XkAJ0/…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNWjDMOkXHCtaAuyTiTDvWGoobhCYEMrnvmNO3qU0jb2R9GO9iPasjR4uV5CCustmcI1atGLd/qDsqglEIkyAl1K…

selectors probed

Certificate (current)

R12

from 2026-05-25 to 2026-08-23

Expires in 79 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://despotmiddelburg.nl/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy

findings

missing Content Security Policy
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000, max-age=31536000; includeSubDomains
content-security-policy-report-only: report-uri /report-csp-violation; upgrade-insecure-requests