has.nl

HTML metadata

Title: HAS green academy - de hogeschool voor agro food en leefomgeving
Description: HAS green academy, voorheen HAS Hogeschool, is het kenniscentrum van Zuid-Nederland voor scholieren, studenten en professionals die geïntegreerd zijn in de sectoren agro, food en leefomgeving. Wij zijn een full service instelling die jouw kunnen bijstaan tijdens je carrière, van starter tot doorgewinterde professional.
Language: nl

Open Graph

site name: HAS green academy

Technology

Server: Microsoft-IIS

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Registration

Registrar

SURF B.V.

Created

2004-04-02

Updated

2026-03-31

Name servers

ns1.zurich.surf.net
ns3.surfnet.nl
ns2.surfnet.nl
ns1.surfnet.nl

DNS records live

NS

ns1.surfnet.nl
ns1.zurich.surf.net
ns2.surfnet.nl
ns3.surfnet.nl

MX

10 has-nl.mail.protection.outlook.com

TXT

bw=tgypDRxd5oQbmBl4QvJaWcSOJpRZM1ycXaXplDp0qVJ2

Verified for

HARICA

Email authentication strong

SPF

v=spf1 ip4:104.19.191.28 ip4:85.17.187.195 ip4:62.204.93.136 ip4:83.149.98.65 ip4:185.49.48.66 ip4:185.49.48.67 include:spf.protection.outlook.com include:spf.eu.exclaimer.net include:servers.mcsv.net include:_spf.spotler.email include:_spf.bbnotify.net include:spf.topdesk.net include:spf.interconnect.nl  include:spf.mailjet.com  include:amazonses.com include:spf.ccvshop.eu -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@has.nl; ruf=mailto:dmarc-reports@has.nl; pct=100; sp=none; aspf=r; adkim=r

policy: quarantine · sp=none

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mPTcE/JXgrEln+oB9kQxgTWpmSCzeiadQWNW6SP4n6RwQqTNhjLO99gk3NmLcp8O+hxkstyTgE2WG…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QmEDuZOxqn4N/eLrNTcuJ1N5uEHgMSdzP7mMgW0W6vQmDpP1CCVi6U6opSUpljQMH7f+3JhbbNKOU…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqzyGZiibiekjQemIPiRbaoijA1X3wWJdg4CHE8iI8iEO5rsRhgnRV28VdSWa5gh0XWznAUAunvr4+HG1M…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f3HIjEuVUB2MvMfAIMUqMYnN1XsDtvc/+pxjvWKVPRyovfYyzS7ZpGLCzDQQgGVTESORSOaBj53J98cMU…

selectors probed

Certificate (current)

GEANT TLS RSA 1

from 2025-12-02 to 2026-12-02

Expires in 185 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.has.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' data: *.google-analytics.com *.googletagmanager.com *.googlesyndication.com *.analytics.google.com https://www.google.nl https://*.g.doubleclick.net https://*.google.com *.hotjar.io *.hotjar.com wss://ws.hotjar.com *.youtube-nocookie.com *.cookiebot.com *.youtube.com *.issuu.com *.office.com analytics.tiktok.com *.snapchat.com www.facebook.com app.springcast.fm *.cloud.microsoft https://*.formconnector.com *.has.nl *.mkt.dynamics.com https://*.mkt.dynamics.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net *.typeform.com *.reddit.com;script-src 'nonce-4ZZA2jqL4ClgO5rR014l0WPWDJRmi4G7HkkrDi7Jbeo=' 'unsafe-eval' 'strict-dynamic';style-src 'self' 'unsafe-inline' *.typeform.com;
strict-transport-security: max-age=31536000