henryschein.nl

HTML metadata

Title: Tandheelkundige producten, medische producten - Henry Schein
Description: Henry Schein is een wereldwijde distributeur van medische, tandheelkundige zoals vaccins, farmaceutische producten, financiële services en apparatuur.
Language: nl-NL

Technology

CDN: Akamai
Server: Microsoft-IIS
Stack: ASP.NET

Analytics

Google Tag Manager

Cookie consent

Usercentrics

Social widgets

Vimeo Embed

Third-party hosts loaded (4)

player.vimeo.com×4
app.usercentrics.eu×3
api.usercentrics.eu×1
www.googletagmanager.com×1

DNS records live

NS

a1-118.akam.net
a11-67.akam.net
a13-64.akam.net
a16-65.akam.net
a26-66.akam.net
a4-67.akam.net

MX

10 mxa-001d3a01.gslb.pphosted.com
10 mxb-001d3a01.gslb.pphosted.com

TXT

cJvg4aZATIrpuw3cEzohbJidhBv5yGGM5L8Ht/LXkBop+J31QceJ84AhOGOE50sU/P/FMjEAJYvrHHT2WC1pwA==
g23dWmxi5L6bkDOOSsEeNkxqBUFNJoMCedBpR8JxG12dzy78x6ZUehB9bJv66m5T6KWcVmRHDa1OxxJEWI1StA==
v=DKIM1; k=rsa; g=*; s=email; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxANU2cQ+LYQHEVwzyCvmc+wq6RnPWh57f/0Kyhuyfeg64keK+u86lLIoGhFBt/45ZtQIDAQAB;

Verified for

Google
Microsoft 365

Email authentication partial

SPF

v=spf1 include:4106893.spf01.hubspotemail.net include:_spf.general.transactional-mail-a.com include:spf-001d3a01.pphosted.com include:spf.protection.outlook.com include:spf.trustit.eu include:spf.afas.online include:_senderspf.copernica.com a mx ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

dkim: v=DKIM1;k=rsa;g=*;s=email;h=sha256;t=;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9Utms7Bo7J/hfIVlLuhe9tOkZFPTBmdCbe1sPbt1z4bVgchqYd8lXUu0N3z1d…

selectors probed

Certificate (current)

DigiCert Global G3 TLS ECC SHA384 2020 CA1

from 2025-11-10 to 2026-11-13

Expires in 161 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.henryschein.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.zscloud.net js.usemessages.com js.hsleadflows.net js.hs-banner.com js.hsadspixel.net js.hs-analytics.net *.usercentrics.eu js.hs-scripts.com *.adroll.com *.adroll.mgr.consensu.org *.kampyle.com *.go-mpulse.net munchkin.marketo.net *.serving-sys.com *.googleadservices.com googleads.g.doubleclick.net *.akamaihd.net secure.comodo.com www.trustlogo.com seal.verisign.com seal.websecurity.norton.com *.digicert.com www.googletagmanager.com optimize.google.com *.google-analytics.com *.algorecs.com js.hsforms.net forms.hsforms.com *.hubspot.com services.cognitoforms.com www.google.com *.google.com *.google.at *.google.be *.google.de *.google.es *.google.fr *.google.it *.google.nl *.google.pt www.google:* www.gstatic.com *.googleapis.com cloud.github.com code.jquery.com connect.facebook.net static.ak.fbcdn.net *.hscollectedforms.net widgets.twimg.com www.dentapure.com www.google.com tagmanager.google.com volusionchat.appspot.
strict-transport-security: max-age=31536000