vdk.be

HTML metadata

Title

Welkom bij vdk bank | vdk bank

Description

Bij vdk bank adviseren we mensen, bedrijven en organisaties over hun geldzaken. Fair, deskundig en duurzaam ✔ | Word nu klant bij vdk bank 

Language

nl

Generator

Drupal 11 (https://www.drupal.org)

Canonical

https://www.vdk.be/nl

Translations

fr
nl

Open Graph

title: Welkom bij vdk bank | vdk bank
image:url: https://www.vdk.be/sites/default/files/styles/social_media_image/public/2019-08/WEB_GettyImages-641416216.jpg?h=bf25593e&itok=JOMa-BDf
description: Bij vdk bank adviseren we mensen, bedrijven en organisaties over hun geldzaken. Fair, deskundig en duurzaam ✔ | Word nu klant bij vdk bank 

Technology

CMS: Drupal

Fonts

Adobe Fonts

Third-party hosts loaded (1)

use.typekit.net×1

Social

DNS records live

NS

ns1.cloud.telenet.be
ns2.cloud.telenet.be
ns3.cloud.telenet.be

MX

10 d311655.a.ess.de.barracudanetworks.com
10 d311655.b.ess.de.barracudanetworks.com

TXT

Show 5 TXT records

atlassian-sending-domain-verification=da881755-9478-4714-9c19-e88d174ce23e
79HujkbvXI1VwOyLdik9mVzMIRTSuYVzfTDbDd8FDzE=
_q4w1wbf81vwjs2j52s5kcqnfvke24cc
pfHY92tV5PSiHb1NP66YY1FJFSXaFkxsReLPoNRZcUpCWEXb8pH1cysQ78RXDiFSAKbSHLNhqsn0PmHqFAILkA==
IXsnRd50/1FQ85nNKsaO6bhY7Twk/WV4sbn5JD/5rTs=

Verified for

Apple
Atlassian
GlobalSign
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:213.211.131.160/28 ip4:109.236.128.144/28 ip4:79.132.240.144/28 ip4:84.199.96.16/28 ip4:84.198.220.160/28 ip4:212.123.14.16/28 ip4:84.198.220.144/28 ip4:205.201.128.0/20 ip4:148.105.8.0/21 ip4:77.109.100.99/32 ip4:185.35.173.41/32 ip4:50.31.58.237/32 include:spf.ess.de.barracudanetworks.com include:spf.ess.barracudanetworks.com include:_spf.relay.mailprotect.be include:spf.mailjet.com include:spf.protection.outlook.com include:spf.mandrillapp.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:5kv1im856t@rua.powerdmarc.com; ruf=mailto:5kv1im856t@ruf.powerdmarc.com; pct=100; fo=1;

policy: reject (enforced)

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6y3K1KXEuVZZ91X/TaPx+8B3hv6ng5SXnfmOQOfDqu46yP1FsJuSOMN8FFQZl20RRPLDjjJMYGVbN9r5As…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6u8MBrZ3rPC/u/NHST8O51WjBO9iRaY3gl0V3u8W/qLg9rJFOJjyvOzXgZD+oFWJoBapuby0og60ddUli6…

selectors probed

Certificate (current)

GlobalSign Extended Validation CA - SHA256 - G3

from 2025-07-10 to 2026-08-11

Expires in 72 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.vdk.be/nl

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.gstatic.com; connect-src 'self' *.cookieinformation.com *.googleapis.com *.piwik.pro google.com *.google.com *.doubleclick.net; font-src 'self' *.gstatic.com *.typekit.net; frame-src 'self' *.cookieinformation.com *.vimeo.com *.doubleclick.net *.skedify.io *.youtube.com *.youtube.be *.youtu.be *.googletagmanager.com *.allianz.be *.adobe.com *.google.com *.pexipengage.com; img-src 'self' data: *.cookieinformation.com *.googleapis.com *.google.com *.google.be *.google.de *.facebook.com *.doubleclick.net *.gstatic.com *.vdk.be vdk.be; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cookieinformation.com *.googletagmanager.com *.googleapis.com *.piwik.pro *.doubleclick.net *.facebook.net *.skedify.io *.googleadservices.com *.pexipengage.com cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com unpkg.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.typekit.ne
strict-transport-security: max-age=31536000; preload