indexo.dev

a-star.se

.se crawl

First seen 2026-05-29 · Last seen 2026-05-29 · ok HTTP/1.1 200 1440 ms crawled 2026-05-31

SE · 93.188.2.55 · AS39570 Loopia AB

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title
A-star
Language
en-US
Generator
Elementor 4.1.1; features: additional_custom_breakpoints; settings: css_print_method-external, google_font-enabled, font_display-auto
Canonical
https://a-star.se/
Feeds

Technology

Server
nginx
CMS
WordPress
jQuery
3.7.1
Analytics
  • Google Tag Manager
Cookie consent
  • Cookiebot

Third-party hosts loaded (4)

  • consent.cookiebot.com×1
  • forms.markethype.io×1
  • www.facebook.com×1
  • www.googletagmanager.com×1

Social

DNS records live

NS
  • ns1.loopia.se
  • ns2.loopia.se
MX
  • 10 astar-se0c.mail.protection.outlook.com
TXT
  • k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDkHiomA2oY5dmgEhSabFPvwxaQqWQgDFpIlbFS27mVoxlWXZefY1pBdR9WZLkWVlV9TQ9RquWJWSq4M19OXQmIcY3mLE5akcSBoAgaWF
  • mailerlite-domain-verification=f472085594ff34c04246f624e3f5d7ff5ce13d67
  • kL4ITCjRO+LksBbk1hAFiWj28/eId0D6NYXSPTCGl/HXOU87t9ob7qDTnSUdaBu9MwAsrvgLxit43SKP9p4rkA==

Email authentication weak

SPF
v=spf1 include:_spf.mlsend.com include:spf.protection.outlook.com ~all
softfail (~all)
DMARC
not published
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF+xqqQKI/OY+ZtNr4LHbDJncPntV2xzES6eHJ/Cy0giFL6aTUFAP1BYSdGZ2sDePwHsvfwQhPBAxG…
selectors probed

Certificate (current)

R13
from 2026-04-16 to 2026-07-15
Expires in 44 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://a-star.se/

present
  • permissions-policy
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
Header values
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")

Links to (4)

Linked from (1)