promovendum.nl

HTML metadata

Title: Verzekeringen voor hoger opgeleiden | Promovendum
Description: Welke verzekering je ook bij ons onderbrengt: je bent voor een zeer lage premie goed verzekerd!
Language: nl
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://www.promovendum.nl/

Open Graph

url: https://www.promovendum.nl/
title: Verzekeringen voor hoger opgeleiden
site name: Promovendum
description: Welke verzekering je ook bij ons onderbrengt: je bent voor een zeer lage premie goed verzekerd!

Technology

Server: Apache
CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Phone

078 648 13 00

Address

Laan der Verenigde Naties 9, 3316 AK, Dordrecht, NL

Registration

Registrar

team.blue nl B.V.

Created

2010-02-25

Updated

2021-11-05

Name servers

ns0.transip.net
ns1.transip.nl
ns2.transip.eu

DNS records live

NS

ns0.transip.net
ns1.transip.nl
ns2.transip.eu

MX

1 cust31399-1-in.mailcontrol.com
2 cust31399-2-in.mailcontrol.com

TXT

detectify-verification=d2d401afcabba28c8e604f668ebf36b4

Verified for

Google
Meta
Microsoft 365

Email authentication strong

SPF: v=spf1 include:mailplus.nl include:spf.protection.outlook.com include:mailcontrol.com a:mail.cak.nl ip4:80.113.17.201 ip4:80.113.17.202 ip4:80.113.17.203 ip4:80.113.17.204 ip4:80.113.17.205 ip4:87.251.43.109 ip4:85.115.32.0/19 ip4:212.54.32.0/19 ip4:80.113.20.33 ip4:85.115.56.190 include:spfrelay.cak.nl -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@promovendum.nl; ruf=mailto:dmarcfailurereports@promovendum.nl; aspf=r;
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV E36

from 2026-02-10 to 2027-03-01

Expires in 273 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.promovendum.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: sameorigin
x-content-type-options: nosniff
content-security-policy: default-src 'self'; connect-src 'self' bat.bing.net bat.bing.com *.google-analytics.com *.doubleclick.net *.g.doubleclick.net public.pandosearch.com *.mouseflow.com *.analytics.google.com adservice.google.com www.google.com www.googletagmanager.com www.facebook.com *.googlesyndication.com www.googleadservices.com www.google.nl; font-src 'self' data: *.googleusercontent.com fonts.gstatic.com cdn.mouseflow.com; frame-src 'self' bat.bing.com www.googletagmanager.com www.gstatic.com www.google-analytics.com www.googleadservices.com *.doubleclick.net *.g.doubleclick.net www.youtube-nocookie.com player.vimeo.com optimize.google.com mozbar.moz.com facebook.com tpc.googlesyndication.com www.google.nl www.google.co.uk www.google.be www.google.de www.google.fr www.google.com www.google.es www.google.com.tr www.google.it www.google.se www.google.ch www.google.ae www.google.no www.google.at www.google.lu www.facebook.com; img-src 'self' data: bat.bing.com www.googletagmanager.com *.googletagmanage
strict-transport-security: max-age=34567890; includeSubDomains; preload