indexo.dev

arcticswedenvisitorsboard.com

.com crawl

First seen 2026-05-30 · Last seen 2026-05-30 · ok HTTP/1.1 200 397 ms crawled 2026-05-31

SE · 194.117.171.80 · AS3301 Telia Company AB

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Arctic Sweden Visitors Board
Description
Besöksnäringsorganisation för Sveriges arkitska resmål.
Language
sv
Generator
WordPress 6.6.2
Canonical
https://arcticswedenvisitorsboard.com/
Translations
  • en
  • sv

Open Graph

url
https://arcticswedenvisitorsboard.com/
title
Arctic Sweden Visitors Board
locale
sv_SE
site name
Arctic Sweden Visitors Board
description
Swedish Lapland Visitors Board företräder besöksnäringen i Sveriges arktiska resmål samt förvaltar och marknadsför resmålsvarumärket Swedish Lapland.

Technology

Server
Apache
CMS
WordPress 6.6.2
Analytics
  • Google Analytics
  • Google Tag Manager

Third-party hosts loaded (2)

  • www.google-analytics.com×1
  • www.googletagmanager.com×1

Social

Registration

Registrar
Name SRS AB
Created
2025-10-22
Expires
2026-10-22 143 days left
Updated
2025-10-22
Name servers
  • ns.communique.se
  • ns2.communique.se

DNS records live

NS
  • ns.communique.se
  • ns2.communique.se

Email authentication no MX

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-04-05 to 2026-07-04
Expires in 33 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://arcticswedenvisitorsboard.com/

present
  • content-security-policy
  • referrer-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Permissions Policy
Header values
referrer-policy
no-referrer-when-downgrade
content-security-policy
base-uri 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' 'nonce-QVAsdqk5gfDhpbUeEp6gftgNbKw=' http: https: *.youtube.com youtube.com s3.amazonaws.com; font-src 'self' data: http: https:; default-src 'self' 'unsafe-inline' *.cookiepro.com *.googleapis.com *.googletagmanager.com *.google-analytics.com; style-src 'self' https://fonts.googleapis.com http: https: 'unsafe-inline'; frame-src 'self' youtube.com www.youtube.com; img-src http: https: data:;

Links to (2)