haskoning.nl
HTML metadata
Technology
- CDN
- Cloudflare
- Stack
- ASP.NET
- Analytics
-
- Cloudflare Insights
- Google Tag Manager
Third-party hosts loaded (2)
- static.cloudflareinsights.com×1
- www.googletagmanager.com×1
Social
DNS records live
- NS
-
- pdns09.domaincontrol.com
- pdns10.domaincontrol.com
- TXT
-
_6rpj254j40qbtj6izxnptsw9xoc4oho_q8z163pg75cp6jxqt9yxrkaihdl9bih
- Verified for
-
Email authentication no MX
- SPF
- not published
- DMARC
-
v=DMARC1; p=reject; adkim=r; aspf=r; rua=mailto:dmarc_rua@onsecureserver.net;policy: reject (enforced) - DKIM
- no key found at common selectors
Certificate (current)
Trust Provider B.V. TLS RSA CA G1
Expires in 174 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
Header values
- referrer-policy
same-origin- permissions-policy
autoplay=(self), camera=(), encrypted-media=(), fullscreen=(self "https://www.youtube.com" "https://www.youtube-nocookie.com" "https://player.vimeo.com"), geolocation=(self), microphone=(), midi=(self), payment=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'report-sample' 'unsafe-eval' 'unsafe-inline' https://www.gstatic.com https://*.google.com https://*.clarity.ms https://*.genially.com https://*.video-dns.com https://*.usercentrics.eu https://*.youtube.com https://*.b0e8.com https://*.bc0a.com https://*.brightedge.com https://*.cloudflareinsights.com https://*.blob.core.windows.net https://*.googleapis.com https://*.cookielaw.org https://*.facebook.net https://*.recruitmentplatform.com ajax.cloudflare.com https://*.google.com https://*.doubleclick.net https://*.azureedge.net https://*.linkedin.com https://*.ads.linkedin.com https://*.maphub.net https://*.licdn.com https://*.mrwork.nl https://*.hotjar.com https://*.weglot.com https://*.unpkg.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.mkt.dynamics.com https://*.svc.dynamics.com https://*.googlevideo.com; style-src 'self' 'report-sample' 'unsafe-inline' https://*.azureedge.net https://*.- strict-transport-security
max-age=31536000; includeSubDomains; preload
Links to (11)
Linked from (2)
- nvdo.nl×1
- haskoning.com×1