akavia.se
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Gatsby
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (3)
- dev.visualwebsiteoptimizer.com×2
- cdnjs.cloudflare.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- ns1.loopia.se
- ns2.loopia.se
- MX
-
- 1 akavia-se.mail.protection.outlook.com
- TXT
-
00D5I000002F67Z=1TBTX00000005pJ_3h9efbk3opkk0zq1eq1jxjg5wngtul0
- Verified for
-
- Microsoft 365
- Miro
Email authentication strong
- SPF
-
v=spf1 include:spf.protection.outlook.com include:_spf.salesforce.com a:smtprelay02.iplace.se include:spf.bedrock.lime-technologies.com include:sendgrid.net include:spf.mailjet.com include:mail.webropolsurveys.com include:_customdomain.learnifier.se ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc_agg@vali.email,mailto:aggrep@akavia.se; ruf=mailto:authfail@akavia.se; fo=1policy: quarantine - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDV8N8xt16cWEWH1pDmEQeKxsFowNaXe1L5qCVl3lG0dNR+pPXkkU11b8n0BFR1wGh2T5i7w1LrZSE6JJpMo3… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlWQPHzLEjFw1pQpd8FK16DwyMg2FW+JkwGbA8BW2slvWbYqEvrIsc9jVBCtlOeJa7gXLZ5NjHB0+UqTMV… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1/ef9UK8KnS7cUEEd2Xe+ZpyyRUgyNiuuadiNIeJZPupTmV9IGK8g4GeE6kSt60+NP3/As9oElKXxtUtF…
selectors probed - selector1:
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 271 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- short HSTS max-age
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
Header values
- referrer-policy
strict-origin-when-cross-origin- permissions-policy
accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()- x-content-type-options
nosniff- content-security-policy
default-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' *.visualwebsiteoptimizer.com app.vwo.com bankid: gomonday.se https://*.gomonday.se https://*.googletagmanager.com https://analys.akavia.se https://app.kollektivavtalskollen.se https://az416426.vo.msecnd.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://connect.facebook.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://customer.cludo.com https://e.infogram.com https://gomonday.formstack.com https://googletagmanager.com https://i16.inviewer.se https://jusk01mstr97cp7prod-slot.dxcloud.episerver.net https://mfstatic.com https://script.hotjar.com https://static.hotjar.com https://static.mediaflowpro.com https://via.tt.se https://www.lyyti.fi https://www.youtube.com https://js.monitor.azure.com;frame-src *.visualwebsiteoptimizer.com app.vwo.com bankid: gomonday.se https://*.gomonday.se https://app.kollektivavtalskollen.se https://consentcdn.cookiebot.com https://e.infogram.com https://- strict-transport-security
max-age=2592000