hz.nl

HTML metadata

Title

HZ University of Applied Sciences | HZ University of Applied Sciences

Description

HZ University of Applied Sciences, dé hogeschool aan de Zeeuwse kust. Ontdek praktijkgericht onderwijs, persoonlijke begeleiding en een breed aanbod aan…

Language

nl

Generator

SEOmatic

Canonical

https://hz.nl/

Translations

en
nl

Open Graph

url: https://hz.nl/
title: HZ University of Applied Sciences
locale: nl
see also: https://nl-nl.facebook.com/HZUniversityofAppliedSciences
site name: HZ University of Applied Sciences
description: HZ University of Applied Sciences, dé hogeschool aan de Zeeuwse kust. Ontdek praktijkgericht onderwijs, persoonlijke begeleiding en een breed aanbod aan…
locale:alternate: en

Technology

Server: Apache

Analytics

Google Tag Manager

Third-party hosts loaded (2)

analytics.silktide.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns1.hzeeland.nl
ns1.surfnet.nl
ns1.zurich.surf.net
ns2.hzeeland.nl
ns2.surfnet.nl
ns3.surfnet.nl

MX

10 mailgate2.hz.nl
105 www-proxy2.hz.nl
11 mailgate1.hz.nl
5 www-proxy0.hz.nl

TXT

DomainVerification=AMXIGHS7DXBG4Y3AZO7RWWKT2OX9BIBSOPB3C5EAXHFFI1FQ2URYA95ON0UWN94K
HZ University of Applied Sciences, Vlissingen
6pPi48+2MiZl4l920VNLL66DsLe6W9krZsV6XHszVCc1uIfsIniGp5s4DHHTdLNarqyEIZPS2NeAe7AUxfZFIw==

Email authentication strong

SPF

v=spf1 ip4:145.19.1.8/29 ip6:2001:610:300:1::8/125   ip4:145.19.1.140/30 ip4:145.19.1.144/29 ip6:2001:610:300:1::8c/126 ip6:2001:610:300:1::90/125 ip4:145.19.111.54 ip6:2001:610:300:66::11 ip4:145.19.97.161 include:_spfext.hz.nl -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc-rua@hzeeland.nl; ruf=mailto:dmarc-ruf@hzeeland.nl; fo=1; pct=100;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCv+EIIpnENL7BKQTnZY614e8libN8thkxjugz1RpzDuEGG50Ac98cHD6SAwilLObYMNY1pRHx0F7WoMlqKdE…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

R13

from 2026-05-25 to 2026-08-23

Expires in 83 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://hz.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), geolocation=(self), microphone=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://analytics.silktide.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://googleads.g.doubleclick.net https://*.cookiebot.com https://*.hsforms.net https://*.hsforms.com https://*.hs-scripts.com https://snap.licdn.com https://*.snapchat.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://heatmaps.monsido.com https://app-script.monsido.com https://sc-static.net https://connect.facebook.net https://js.hs-analytics.net https://js.hs-banner.com https://script.hotjar.com https://cdn.unibuddy.co https://static.hotjar.com https://www.eventbrite.nl; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://www.googletagmanager.com https://www.google.nl https://www.google.com https://googleads.g.doubleclick.net https://*.cookiebot.com https://www.facebook.com https://connect.facebook.net https://*.snapchat.com https://track.hubspot.com
strict-transport-security: max-age=31536000