kansfonds.nl

HTML metadata

Title: Home - Iedereen een thuis - Kansfonds
Description: Niemand kan zonder thuis. Toch zijn er in ons land meer dan 1 miljoen mensen die geen thuis hebben. Kansfonds helpt thuisgeven.
Language: nl-NL
Canonical: https://www.kansfonds.nl/

Open Graph

url: https://www.kansfonds.nl/
title: Home
locale: nl_NL
site name: Kansfonds
description: Ieder mens telt. Daarom ziet Kansfonds om naar de meest kwetsbare mensen in Nederland: dak- en thuislozen, ongedocumenteerden en mensen in armoede.

Technology

Server: nginx
CMS: WordPress
jQuery: 3.7.1

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Email

Phone

0356249651

Address

's-Gravelandseweg 801217 EW HilversumPostbus 1561200 AD Hilversum035 624 96 51info@kansfonds.nl

Registration

Registrar

team.blue nl B.V.

Created

2004-02-09

Updated

2025-12-09

Name servers

ns2.transip.eu
ns0.transip.net
ns1.transip.nl

DNS records live

NS

ns0.transip.net
ns1.transip.nl
ns2.transip.eu

MX

10 mx1-eu1.ppe-hosted.com
20 mx2-eu1.ppe-hosted.com

TXT

MwRMofFmLZvrCIt08yZ5OrBSGKnnr5Pt
ppe-a0ad973bf6d675b5746f0186db14d1170c6f3cb9
oOHIGe1/latCFkYdhrhY0MBA3pXKz5FXvGongr9VJaDDSjMdK8QAIijMBaZb8lTAxXnVQsgqeAdclHqAEJjRNg==

Verified for

Google
Meta

Email authentication strong

SPF

v=spf1 ip4:185.233.89.46 a:dispatch-eu.ppe-hosted.com include:spf.protection.outlook.com include:spf.afas.online include:_spf.spotlergroup.com include:mailgun.org ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:a0a53fce@in.mailhardener.com,mailto:c5210bf@dmarc.mailgun.org,mailto:7fcd17eb@inbox.ondmarc.com; ruf=mailto:a0a53fce@in.mailhardener.com,mailto:c5210bf@dmarc.mailgun.org,mailto:7fcd17eb@inbox.ondmarc.com

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCH4XKMpvPVx+Dzfj84An+k+gtU5I7TgcyNYZGppfnfpF7nK6j7m6/SY7cWu2F5Pwud/aBW4enkgkWG+NKJm2…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoweWO1btomQXkmUm4jb0WtPd8U7dicQxj3HMO42gh6VPSS9v5djp8MdEjwe/wUGFpkoHCxEh783JK…

selectors probed

Certificates

Loading certificate

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.kansfonds.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src https: data: blob:; script-src 'unsafe-inline' 'unsafe-eval' https: data:; style-src 'unsafe-inline' https: data:; img-src data: https: blob: android-webview android-webview-video-poster:; font-src data: https:; connect-src *; media-src https: data: blob:; worker-src https: blob:; frame-src 'self' https: blob:; frame-ancestors 'self'; upgrade-insecure-requests
strict-transport-security: max-age=63072000