finalist.nl

HTML metadata

Title: Finalist - Digitale oplossingen met maatschappelijke impact
Description: Finalist ontwerpt en implementeert digitale oplossingen die de wereld verbeteren. Ontdek onze diensten in strategie, design, technologie en online marketing.
Language: nl
Generator: Drupal 11 (https://www.drupal.org)
Canonical: https://www.finalist.nl/

Open Graph

url: https://www.finalist.nl/
title: Homepage
image:url: https://www.finalist.nl/media/333/edit
site name: Finalist
determiner: Homepage | Finalist
description: De wereld toegankelijk maken door moderne digitale ervaringen te creëren voor belangrijke levensfasen

Technology

CDN: Cloudflare
CMS: Drupal

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (3)

analytics.ahrefs.com×1
use.typekit.net×1
www.googletagmanager.com×1

Social

Contact

Phone

088 217 08 00

DNS records live

NS

gwen.ns.cloudflare.com
kevin.ns.cloudflare.com

MX

0 finalist-nl.mail.protection.outlook.com

TXT

Show 4 TXT records

25cc40375d99bf088fb8dba76d5d8f9ecb9f8a88
google-site-verification: u2WweJuM3vyytZWVizLLvtqvhtSsO1UWMRHZGbnyRr4
atlassian-sending-domain-verification=5000c4b3-58bf-4a9b-b462-f2e6caf07d00
DomainVerification=HXXLXJM82C6OI9KOH1GY4IUE6HMBG0FVS3TGLBIAOA5MBG3RBYN0W7Z1XAEVT8HG

Verified for

Ahrefs
Anthropic
Apple
Atlassian
Google
Microsoft
Microsoft 365

Email authentication strong

SPF

v=spf1 mx ip4:83.96.201.136 ip4:83.96.252.74 ip4:83.96.203.55 include:_spf.atlassian.net include:spf.protection.outlook.com ip4:83.96.203.57 ip4:195.211.0.0/16 ip4:83.96.202.15 ip4:83.96.214.92 ip4:83.96.202.138 ip4:178.104.3.34 include:_spf.psm.knowbe4.com a:auth-smtp.kotisivut.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc@swx4xmap.uriports.com; ruf=mailto:dmarc@swx4xmap.uriports.com; fo=1:d:s

policy: quarantine

DKIM

Show 7 DKIM selectors

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi54HrTGBzuUk/s53QZoQNCurpqnWd3ZVqVClCgnC4VEd7cGaIJ9k7SuHZjJT4TcXZ4m4MEVzw8rVL9…
selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCcBbCKSwy5Ud6WPj+q06G1nhTdjln4eHTE//azACN3SRUR8n6kiEna0+92UQqrxtdlYb7EDBhl0gyX5rx+Z…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQChK0FGC85w+7XETgaPg1foppoafSXt6zHGN6rzP8t/1gxoIt04UY+Iq9QoPRCLV6rT0aMWwo9MjaR6AU0Bx8…
mail: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCoAZl2ugZ1DEx4cuhd6EsvyHYQ8jmdD0F+XYcdf8FvJCBiwKaRrn5T5eZyTPrTDkBVRvHgDuq2qIkBcziwyG…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AwtB5VSR/2QObl559Ig7H/vfK3GEi50qTWSwYjOgmtWX8KxB7PXTq77y6IBZNccAZR63xtsvrhBNXrAzV…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDycjNdJv1FbxkkhnkNxWH66C211+2zXhjxdFR1RIhtfHMjDoN82hUxuhQ/Dx5ZcPMmbDFtBWYu3fpI4BIzQ8XeZ…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

WE1

from 2026-05-30 to 2026-08-28

Expires in 86 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.finalist.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), camera=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), usb=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; default-src data: 'self' cdn.ldnfrpl.com *.googlesyndication.com img.sct.eu1.usercentrics.eu consent.cookiebot.eu consentcdn.cookiebot.eu www.googletagmanager.com *.ads.linkedin.com www.google.nl conv.indeed.com td.doubleclick.net collector.leadinfo.net api.leadinfo.com matomo.finlist.nl www.linkedin.com px.ads.linkedin.com matomo.finalist.nl consent.cookiebot.com consentcdn.cookiebot.com imgsct.cookiebot.com p.typekit.net use.typekit.net cdnjs.cloudflare.com cdnjs.jsdelivr.net www.google.com googleads.g.doubleclick.net www.youtube.com; script-src 'unsafe-eval' 'unsafe-inline' 'self' cdn.jsdelivr.net analytics.ahrefs.com www.googleadservices.com conv.indeed.com px.ads.linkedin.com cdn.leadinfo.net collector.leadinfo.net api.leadinfo.com s2.adform.net consent.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu matomo.finalist.nl www.googletagmanager.com static.hotjar.com www.google.com www.google-analytics.com snap.licdn.com tra
strict-transport-security: max-age=31536000; includeSubDomains