knaw.nl
HTML metadata
Technology
- Server
- Apache
- CMS
- Next.js
Contact
- Phone
Registration
- Registrar
- SURF B.V.
- Created
- 1994-10-03
- Updated
- 2026-03-31
- Name servers
-
- ns1.surfnet.nl
- ns1.zurich.surf.net
- ns3.surfnet.nl
- ns2.surfnet.nl
DNS records live
- NS
-
- ns1.surfnet.nl
- ns1.zurich.surf.net
- ns2.surfnet.nl
- ns3.surfnet.nl
- MX
-
- 0 knaw-nl.mail.protection.outlook.com
- TXT
-
Show 11 TXT records
bw=PyPBZFeE2tQkoeBRxXYmeBuS3uLfkdcUswjyyL973iS6mCkVvXn6dUZyrFXWsGknbJGIaEbjWNeL3Rg2I92MbXPcArPmEMCPNv15sm0x65tcpO+jrI5Lt1gUi9X1EySVOw==have-i-been-pwned-verification=b1fd016e7cf47b73cf71b12f8ed10003google-site-verification=HfgEEpjNWwaecSYe8KnNATWfrzAExHVBlvTsuA7kGnkHARICA-vvDQGK7pd3xxArhCoJDapple-domain-verification=Kx3upsCHpUwCVztUatlassian-domain-verification=9CeGC9xO7peuiHdqk16OTwnXaYfFs3iy9LGVIXxD/OxiJfEJahXbqX7Q5jrUrqJ2procurios-site-verification=gagUhW73NFSdoza3Vaj3adobe-idp-site-verification=e574ceb69375114ec72f4bc11ec46141ec4c1c194117b84d37a333c9a1375d04google-site-verification=94L39qL06lBH7le4wa74Yq2Me0ByOxWwLc7WdL8AA3sgoogle-site-verification=PA5clm1yBwUuQdkN5N0q_7xjZWXFMLR8nB2gLkVtX-A
Email authentication strong
- SPF
-
v=spf1 include:spf.protection.outlook.com include:_spf.knaw.nl include:servers.mcsv.net ip4:5.39.185.32/29 ip4:185.181.140.187 ip4:87.253.234.71 ip4:87.253.234.73 ip4:87.253.234.85 include:spam1.htx.nl include:spf.mailjet.com include:_spf-dc55.sapsf.eu include:spf.topdesk.net -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:dmarc@knaw.nl; rf=iodef;policy: quarantine - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDFyVfURHJYiM/vI+GECQ7wlLvlAJg2zcPvzUMyK9yyHBTjEStv5UG/SFlW8AEkfid5o684z3V/NpBbvb+f1A… - selector2:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPEjAwlbNXkopZHkqScI2Gjs01wDywUwPCsFikAJCWTvEE762w/aZ4pRxnbH9CoA3mK/C3XijNnaR10n5oBM… - k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed - selector1:
Certificate (current)
GEANT TLS RSA 1
Expires in 206 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- weak content type protection
- missing Permissions Policy
Header values
- referrer-policy
same-origin;- x-content-type-options
nosniff;- content-security-policy
default-src 'self'; script-src 'self' 'sha256-LQnC+k6vutVzAdw5UhP0U7LbNIIpURkrOaZfZfQFnH4='; script-src-elem 'self' 'sha256-LQnC+k6vutVzAdw5UhP0U7LbNIIpURkrOaZfZfQFnH4=' https://www.google-analytics.com/ https://www.googletagmanager.com/ https://embed.email-provider.eu/; style-src 'unsafe-inline' https://*.knaw.nl/ https://fast.fonts.net/ https://fonts.googleapis.com/ https://embed.email-provider.eu/; font-src 'self' data: https://fonts.gstatic.com/; frame-src 'self' https://www.youtube.com/ https://contactcenter.laposta.nl/; img-src 'self' https://storage.knaw.nl/ https://*.cloudfront.net/ https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.google.nl https://www.google.de data:; frame-ancestors 'self' https://contactcenter.laposta.nl/; connect-src 'self' https://*.knaw.nl/ https://*.algolia.net https://*.bugsnag.com/ https://*.google-analytics.com/ https://*.analytics.google.com https://stats.g.doubleclick.net/ https://embed.email-provi- strict-transport-security
max-age=31536000; includeSubDomains; preload;