hdn.nl

HTML metadata

Title: HDN - Hypotheken Data Netwerk
Language: nl-NL
Canonical: https://hdn.nl/

Open Graph

url: https://hdn.nl/
title: HDN - Hypotheken Data Netwerk
locale: nl_NL
site name: hdn

Technology

Server: Apache
CMS: WordPress
PHP: 8.3.30 security-only

Fonts

Google Fonts

Social widgets

Vimeo Embed

Third-party hosts loaded (3)

fonts.gstatic.com×1
player.vimeo.com×1
www.gstatic.com×1

Social

Contact

Email

servicedesk@hdn.nl

Phone

0182750585

Address

Rijnzathe 12E3454 PV De Meern

Registration

Registrar

Communications Security Net B.V.

Created

1997-03-25

Updated

2026-04-28

Name servers

ns1.csnet.nl
ns2.csnet.nl

DNS records live

NS

ns1.csnet.nl
ns2.csnet.nl

MX

10 hdn-nl.mail.protection.outlook.com

TXT

te6aytoud7
knowbe4-site-verification=3a62d3937464dee54f37ecd94807b297
atlassian-sending-domain-verification=7b9981bc-8241-44dc-ae22-e197a5a20279

Verified for

Apple
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:servers.mcsv.net include:_spf.psm.knowbe4.com include:spf.protection.outlook.com include:_spf.atlassian.net include:_senderspf.csnet.nl include:_spf.spotler.email ip4:212.57.57.68 ip6:2a02:690:4280::68 -all

strict (-all)

DMARC

v=DMARC1; p=reject;

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDtaPrXQuerHJ+YUkLKvRus6Kq+a0basN70SBonku3tnmuLhlyGzQBV1ixKmtNoyn8utcFuRdTZrGKGi/8fF8…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K8dTW94xRvWRfvaWAbZ/XkzCsqUSzR/ffLm6RIUip1Gclex1nUhzyUXbi+69cAYA2idiCINCMbUhDdbRP…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDF6JkFaE1wMSjKoqvFaxKg0a8Lvmy7kTYSDbLnnVKla2kf6og6VmyKFsQc5Y2UPgBIyGWYOcjUeJgfD6IiP0Lz//…

selectors probed

Certificate (current)

E8

from 2026-04-12 to 2026-07-11

Expires in 40 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://hdn.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: sameorigin, SAMEORIGIN
permissions-policy: geolocation=(), microphone=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' blob: https://connect.facebook.net https://www.youtube.com https://player.vimeo.com https://stats.wpmucdn.com https://www.google.com https://googletagmanager.com https://www.googletagmanager.com https://hb.wpmucdn.com https://*.googleapis.com https://www.gstatic.com https://cdn-cookieyes.com https://script.hotjar.com https://static.hotjar.com https://snap.licdn.com/li.lms-analytics/insight.min.js https://www.google-analytics.com https://cdn.jsdelivr.net https://*.youtube.com https://*.wisernotify.com https://*.facebook.net https://*.licdn.com https://*.jsdelivr.net https://*.getclicky.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://www.gstatic.com https://maxcdn.bootstrapcdn.com https://fonts.bunny.net https://rgsharedweb.s3.amazonaws.com https://*.googleapis.com https://hb.wpmucdn.com https://cdnjs.cloudflare.com https://*.wisernotify.com https://*.cloudflare.com
strict-transport-security: max-age=31536000; includeSubDomains