ictopen.nl

HTML metadata

Title

Homepage | ICT Open

Language

en

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://ictopen.nl/

Translations

en

Open Graph

url: https://ictopen.nl/
title: Homepage | ICT Open
image:url: https://ictopen.nl/sites/ict_open/files/styles/opengraph/public/media-images/hero-bg.png?h=4ac186ab&itok=0xe-I5BX
site name: ICT Open

Technology

CMS: Drupal

Fonts

Google Fonts

Third-party hosts loaded (3)

fonts.googleapis.com×4
cdn-eu.readspeaker.com×1
fonts.gstatic.com×1

Social

Registration

Registrar

SURF B.V.

Created

2007-07-04

Updated

2026-03-31

Name servers

ns1.zurich.surf.net
ns3.surfnet.nl
ns2.surfnet.nl
ns1.surfnet.nl

DNS records live

NS

ns1.surfnet.nl
ns1.zurich.surf.net
ns2.surfnet.nl
ns3.surfnet.nl

TXT

aanmelder.nl-user=91457

Verified for

HARICA

Email authentication no MX

SPF: v=spf1 ip4:54.72.247.34 ip4:82.94.210.253 include:_spf.betawerk.nl -all
strict (-all)
DMARC: v=DMARC1; p=reject; rua=mailto:eppb4fgu@ag.eu.dmarcadvisor.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

GEANT TLS RSA 1

from 2025-09-29 to 2026-09-29

Expires in 118 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://ictopen.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(),autoplay=(*),camera=(),ch-ua=(self),ch-ua-arch=(self),ch-ua-bitness=(self),ch-ua-full-version=(self),ch-ua-full-version-list=(self),ch-ua-mobile=(self),ch-ua-model=(self),ch-ua-platform=(self),ch-ua-platform-version=(self),ch-ua-wow64=(self),display-capture=(self),encrypted-media=(*),fullscreen=(*),geolocation=(self),gyroscope=(),hid=(),idle-detection=(),keyboard-map=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(self),publickey-credentials-get=(),screen-wake-lock=(self),serial=(),sync-xhr=(*),usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://*.siteimprove.com https://*.readspeaker.com https://*.hireserve.nl https://*.acc.hireserve.nl https://*.doubleclick.net https://www.facebook.com https://api.ats-platform.com https://platform.hireserve.nl https://connect.facebook.net https://adservice.google.com https://www.nwo.nl https://maps.googleapis.com https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com https://*.hireserve.nl https://fonts.googleapis.com https://*.acc.hireserve.nl https://www.nwo.nl; frame-src 'self' https://www.google.com https://*.twitter.com https://*.youtube.com https://*.vimeo.com https://app.powerbi.com https://td.doubleclick.net https://my2.siteimprove.com https://expeditienext.weticket.io https://contentassistant.eu.siteimprove.com; img-src 'self' https://*.siteimproveanalytics.io data: https://www.gstatic.com https://*.google-analytics.com http
strict-transport-security: max-age=31536000
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin