fnrs.nl
HTML metadata
Technology
- Server
- nginx
- Fonts
-
- Google Fonts
Third-party hosts loaded (1)
- fonts.googleapis.com×1
Social
Contact
- Phone
Registration
- Registrar
- Registrar.eu
- Created
- 1999-11-05
- Updated
- 2025-07-11
- Name servers
-
- ns2.qns.eu
- ns1.qns.eu
- ns4.qns.eu
- ns3.qns.eu
DNS records live
- NS
-
- ns1.qns.eu
- ns2.qns.eu
- ns3.qns.eu
- ns4.qns.eu
- MX
-
- 0 fnrs-nl.mail.protection.outlook.com
Email authentication strong
- SPF
-
v=spf1 a include:spf.protection.outlook.com include:spf.qns.eu include:spf_servers.yard.nl include:spf_cluster.yard.nl include:spf.eprov.nl include:_spf.exactonline.nl ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:dmarc@qns.eu;policy: reject (enforced) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUujP1wUA/VzAe98SNGfoLvwyTzKJd0DxTp7u5GhawQsYrNDuArv863Mx+7+ag3ikCcFT3K7ln/Koy…
selectors probed - selector1:
Certificate (current)
R12
Expires in 18 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
same-origin- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), encrypted-media=(), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(self), midi=(), payment=(), publickey-credentials-get=(), usb=(), wake-lock=(), screen-wake-lock=(), web-share=(), xr-spatial-tracking=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google.com/jsapi https://www.gstatic.com/charts/ maps.googleapis.com www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com platform.twitter.com; object-src 'self' youtube.com www.youtube.com player.vimeo.com video.vu.nl cloud.reflexappointment.nl; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://www.gstatic.com/charts/; img-src 'self' data: images.unsplash.com maps.gstatic.com *.googleapis.com *.ggpht *.google-analytics.com *.analytics.google.com ssl.google-analytics.com www.googletagmanager.com; media-src 'self'; frame-src 'self' https://www.recaptcha.net https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ youtube.com www.youtube.com docs.google.com player.vimeo.com video.vu.nl cloud.reflexappointment.nl; font-src 'self' data: fonts.gstatic.com; connect-src- strict-transport-security
max-age=31536000; includeSubDomains; preload