ser.nl

HTML metadata

Title: Sociaal-Economische Raad | SER
Description: De Sociaal-Economische Raad (SER) is de belangrijkste adviesraad voor regering en parlement over sociaal-economische vraagstukken. In de SER werken ondernemers, werknemers en onafhankelijke kroonleden samen.
Language: nl
Canonical: https://www.ser.nl/nl

Open Graph

title: Sociaal-Economische Raad
description: De Sociaal-Economische Raad (SER) is de belangrijkste adviesraad voor regering en parlement over sociaal-economische vraagstukken. In de SER werken ondernemers, werknemers en onafhankelijke kroonleden samen.

Technology

jQuery: 3.3.1 known XSS (<3.5)
Stack: ASP.NET

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Third-party hosts loaded (4)

code.jquery.com×1
consent.cookiebot.com×1
f1-eu.readspeaker.com×1
www.googletagmanager.com×1

Social

Contact

Phone

+31703499499

Registration

Registrar

Hostnet B.V.

Created

1994-11-23

Updated

2024-10-10

Name servers

ns01.hostnet.nl
ns02.hostnet.nl

DNS records live

NS

ns01.hostnet.nl
ns02.hostnet.nl

MX

0 ser-nl.mail.protection.outlook.com

TXT

Show 7 TXT records

ain8m48lpbnpn7f8fhdgga6163
8q1jwbd3yfmrs04cvzwm00tghg26vflt
ciscocidomainverification=84d7901e625c5818655bd4be5d7c0a571ddbf4220a5c5b8f29398e7c1ea7a9f
mtnc72zc71327hxf2z33tkqs11y0qq5c
knowbe4-site-verification=7e4b40567668e0b3c44f3cc59ab336c5
MS=16813AE083E6DC093FF9A728C3A608EFC2EFF177
afx/rTXcpJdKOeexUH5L+5jtiGcc9ReLOCugGVJGhQNmTs1P9lPDuK9uZPxitCjPgbPUNQlQVOyWRsMTCNjreg==

Verified for

Apple
Brevo
DocuSign
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:_spf_ip.unilogicnetworks.net include:spf.sendinblue.com include:spf.topdesk.net include:spf.protection.outlook.com include:mailswitch.nl include:spf.afas.online include:_spf.spotler.email include:spf.tribecrm.nl include:_spf.createsend.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; sp=quarantine; rua=mailto:postmaster@ser.nl; ruf=mailto:postmaster@ser.nl; rf=afrf; fo=1; adkim=r; aspf=r

policy: quarantine · sp=quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCveLTr3tVuyNt4d7bzINPOdYxfcdsP1he+dLbvtwNMmqynOWkuf6XB0YDHl0kO3PwnBOarO6UO+fZKUIYsJS…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDFdlyLBINPOpHts7h2eaGutDamhd8HAH4kVgPn9vzIJVQqQPbaOue51ruLihK6gtd0br0e9kXjnCN1UZ6zOo…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2025-08-08 to 2026-08-08

Expires in 67 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.ser.nl/nl

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src *; style-src 'self' 'unsafe-inline' 'unsafe-eval' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; frame-src 'self' *; object-src 'self' ; img-src 'self' data: https:; font-src 'self' data: * https://fonts.gstatic.com; connect-src 'self' *; media-src * data: https:; base-uri 'self';
strict-transport-security: max-age=31536000; includeSubDomains; preload