svh.nl

HTML metadata

Title: SVH
Description: Leermiddelen, examens, SVH Meester, brancheactiviteiten: wij staan achter de Nederlandse hospitality!
Language: nl

Open Graph

title: SVH
description: Leermiddelen, examens, SVH Meester, brancheactiviteiten: wij staan achter de Nederlandse hospitality!

Technology

Stack: PHP

Analytics

Google Tag Manager

Third-party hosts loaded (2)

cloudstatic.obi4wan.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns01.hostnet.nl
ns02.hostnet.nl

MX

10 svh-nl.mail.protection.outlook.com

Verified for

Adobe
Meta

Email authentication strong

SPF

v=spf1 ip4:37.97.224.237 a:mail02.syca.nl ip4:94.228.142.21 ip4:136.144.182.62 include:_spf.zivver.com include:spf.protection.outlook.com include:_spf.spotler.email include:spf.topdesk.net include:spf.webconnect.nl include:_spf.fluxility.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; fo=1

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOpNuEaxmF3pBV/2/U3EXfokLzNL5ZEwFQ8qRuCvUjnFmRAtXyStP46tvq5THI5U8yEyS2B5o8V6Mm…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xihfBi3kxZAtD4/J4Y6OXt9ttUZZQim4VaCMO1pntIZmVNfALDYhoy9EwpFe6ekCmAxqJGuaIaRoA…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R12

from 2026-04-05 to 2026-07-04

Expires in 34 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.svh.nl/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: same-origin
permissions-policy: autoplay=(self), accelerometer=(), autoplay=(), camera=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=()
x-content-type-options: nosniff
content-security-policy: script-src 'self' *.obi4wan.com *.jquery.com *.google-analytics.com *.googletagmanager.com *.hotjar.com *.youtube.com 'unsafe-inline' 'unsafe-eval'; object-src 'self'; frame-ancestors 'self' https://www.khn.nl https://hospitalityacademy.nu
strict-transport-security: max-age=31536000; includeSubDomains