nspoh.nl

HTML metadata

Title: NSPOH - Opleidingen en bij- en nascholingen
Description: NSPOH biedt post-academische opleidingen en bij- en nascholingen voor professionals in de publieke gezondheidszorg en arbeid en gezondheid. Up-to-date, persoonlijk en praktijkgericht.
Language: nl-NL
Canonical: https://www.nspoh.nl/

Open Graph

url: https://www.nspoh.nl/
title: NSPOH - Opleidingen en bij- en nascholingen
locale: nl_NL
site name: NSPOH
description: NSPOH biedt post-academische opleidingen en bij- en nascholingen voor professionals in de publieke gezondheidszorg en arbeid en gezondheid. Up-to-date, persoonlijk en praktijkgericht.

Technology

Server: nginx
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (4)

kit.fontawesome.com×1
use.typekit.net×1
www.google.com×1
www.googletagmanager.com×1

Social

Contact

Email

info@nspoh.nl

Phone

0308100500

DNS records live

NS

ns.internlnet.nl
ns3.internl.net
ns4.internl.net

MX

0 nspoh-nl.mail.protection.outlook.com

TXT

07o40l2QFrZYEVpvaezreB6BjV0omVHa11WAuk7lZqNbIDlTLonJ2RgsXOhqKHX+PiE6t3zD9nZf6RVQkNxgQQ==

Verified for

Microsoft 365
Zoom

Email authentication partial

SPF

v=spf1 ip4:92.68.255.35 ip4:217.100.56.42 ip4:77.74.51.237 ip4:87.233.83.48 ip4:87.233.189.160/27 ip4:87.233.196.64/27 ip4:87.233.187.16/28 include:spf_cluster.yard.nl include:spf.protection.outlook.com include:spf.afas.online include:spf.topdesk.net include:_spf.mailplus.nl include:spf.geenspam.mx ~all

softfail (~all)

DMARC

v=DMARC1;p=none;pct=100;rua=mailto:d.denhartog@nspoh.nl

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCyTbah6lTMA5Y5XVUiUmYmLH0YSURjkWcTgknbeJBgThY5OZX7zcUqLIMWI6SHCMLed9D2s5qNhiY+KyIdaq…
mail: v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tt29JW0TBmIxM/IxWwt4EBBsQjdzzcyVQVNkYIqNg92QQCo4z13xiV4xK6FwPKYSPyN…

selectors probed

Certificate (current)

R13

from 2026-05-12 to 2026-08-10

Expires in 71 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.nspoh.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(),autoplay=(self),camera=(),display-capture=(),encrypted-media=(),fullscreen=(*),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),screen-wake-lock=(),sync-xhr=(self),usb=(),xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: base-uri 'self';connect-src 'self' https://es.elk01.yard.nl https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://ka-p.fontawesome.com https://kit.fontawesome.com;default-src 'self';font-src 'self' data: https://ka-p.fontawesome.com https://fonts.gstatic.com https://use.typekit.net;img-src 'self' data: https://img.youtube.com https://i.ytimg.com https://i.vimeocdn.com https://secure.gravatar.com https://*.google-analytics.com https://*.googletagmanager.com;media-src 'self';object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https:;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/css2 https://*.typekit.net;frame-ancestors 'self';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://www.podbean.com/ https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com;upgrade-insecure-requests
strict-transport-security: max-age=63072000; includeSubDomains; preload