Artikelen

SEO, serverconfiguratie, beveiligingscontroles, het herkennen van frauduleuze sites, dark patterns en desinformatie. Uitgelegd aan de hand van de controles van SiteScouter, onderbouwd met overheidsinstanties en officiële documentatie.

Beveiliging

Onderzoek webbeveiliging 5 miljoen sites: HSTS en CSP – eindrapport

Onderzoek webbeveiliging bij 5 miljoen sites: HTTPS 95.1%, maar HSTS slechts 29.3% en CSP 16.6%. Eindrapport: Tranco top 1M en 3.95M Common Crawl-domeinen.

Bijgewerkt 2026-10-29

Beveiliging

Hoe de site van de aanvaller is gestopt: clientHold in WHOIS

Volgens WHOIS zette de registrar de domeinen van de GMO-aanvaller op 28 okt om 03:35 JST op clientHold. Wat het record toont, en een blik uit de branche.

Bijgewerkt 2026-10-29

Beveiliging

World Web Security Survey of 5 Million Sites — Interim Report: What Changed When 1 Million Common Crawl Domains Were Added

Interim report of a plan to observe 5 million websites worldwide with one non-intrusive method. After the Tranco top 1 million, 1 million domains from the Common Crawl domain ranking were added; this report shows, for the two populations separately, how reachability, HTTPS, HSTS, CSP, WAF/CDN, TLS, certificates, PHP support status and CVE exposure (upper bound) changed.

Bijgewerkt 2026-10-28

Beveiliging

How to Upgrade PHP in Practice: Check, Switch, Verify, and Hide the Version

How to find your current PHP version, the support schedule and the fixed releases for the critical 2026 PHP CVEs (CVSS 9.8), switching versions on shared hosting, post-switch checks, and hiding version strings with expose_php, ServerTokens and server_tokens.

Bijgewerkt 2026-10-28

Beveiliging

Beveiliging van betaal- en banksites: HSTS en TLS bij 920 sites

Beveiliging van betaal- en banksites: 26.4% van 269 sites heeft een tekortkoming, meestal ontbrekende HSTS. Geen enkele draait end-of-life PHP.

Bijgewerkt 2026-10-28

Beveiliging

The Day Financial Infrastructure Stops: A Japanese VPS Breach, Search Suggestions, Share Prices, and What Under-investing in Security Costs (Flash Edition)

A VPS service for automated FX trading went offline and its users were told to unplug their PCs. This article records the incident from public sources only, follows search suggestions and share prices, and sets out, in general terms, what under-investing in security can cost any operator (flash edition, updated every business day).

Bijgewerkt 2026-10-28

Beveiliging

Security Exposure Survey 2026: PHP, HSTS and CVE exposure across 268,000 sites in Japan, the G7, Vietnam and Malaysia

One ordinary page load per site, 268,485 sites in 10 regions: Japan is last on all 8 security controls, end-of-life PHP is common everywhere, and about six in ten PHP-disclosing sites still show a version older than the fixes for the critical 2026 PHP CVEs.

Bijgewerkt 2026-10-24