halle.be

HTML metadata

Title

Home | Stad Halle

Language

nl

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://www.halle.be/

Translations

nl

Open Graph

url: https://www.halle.be/home
title: Home

Technology

CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (5)

prod.widgets.burgerprofiel.vlaanderen.be×3
apps.elfsight.com×1
cdn.cookie-script.com×1
static.elfsight.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

02 365 99 00

DNS records live

NS

ns.cipal.be
ns2.cipal.be

MX

0 halle-be.mail.protection.outlook.com

TXT

Show 5 TXT records

3dG7aRVmxiBtE4/vmpJROeq7Pwa3z1QTo+U145BP+adnrdzS6KXm//iTGUpgd6anBDXqOsmWjo6niehHIOYhDw==
YrbhF7Zio226kK2EuF0N3fX7fx4/9b5USWJpjE0LG3pECLCxT6ECHnAhtEwST831yDRLSG9ga3dtsnOpx7sVlw==
spf2.0/pra ip4:91.183.133.211 include:spf.flexmail.eu ?all
hT3QnxTP80X64XVWQZsLB9Ab8N1XncHwYPBdiRt583SdxZi5F61q7nC1RDFN09W/Umrt3GTgHuHDevsPivaIpg==
cG4CJugGgQ9MH6ZPt0yk3reAR4TevRnQ58ht28AEw+/C9J1Bpw3Tw1xv/+DoZknbk2ATv0LVpKtVNALkAtSNOw==

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 a include:spf.flexmail.eu include:spf.protection.outlook.com include:spf.mail.e2e.be include:spf.icontroller.eu include:recreatex.be include:_spf.bibliotheek.be ip4:3.68.129.51 include:relay.mailchannels.net ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; pct=100

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDh5w12d4/JDMfe/iaqpMbtg3HGXUgfI/YY4ebaJeR3CJsdnEUCcWfJ5xWuE38xKody00AqHjCyJwGVyF4Qce…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu6m8sGJoJLU1cw50d+yBPEe0uy//HsItJ9fwdMXlXm1IaM8Nvch8gnylfOT7ysxq5GnOXVZNw8QZ8…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H/meE4ZjDIIzS/aABzJYGuHAIu6leak2wIARVw6YmFCVl1xbF6fMFsVfj52rbi2xV6Is3gmwM7qXfb/ri…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDiSamGKCGzfh3O0rLkT8fzTxg2bddtxcI9p/vr0d2UqedQBkDrsIV2QyA+ow8ZGEmwr6TAcuDzmP8lbRLzCIRrHX…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-01-20 to 2027-02-07

Expires in 248 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.halle.be/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: autoplay=self, camera=(), fullscreen=self, geolocation=(), microphone=(), payment=(), screen-wake-lock=(), sync-xhr=(), usb=()
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
strict-transport-security: max-age=63072000; includeSubDomains; preload