asfyn.dk

HTML metadata

Technology

Server

nginx

CMS

Nuxt

JS framework

Nuxt, Vue

Analytics

• Google Tag Manager

Third-party hosts loaded (5)

• www.googletagmanager.com×2
• energifyn.my.site.com×1
• hello.myfonts.net×1
• policy.app.cookieinformation.com×1
• widget.trustpilot.com×1

DNS records live

NS

• arch.ns.cloudflare.com
• kate.ns.cloudflare.com

MX

• 0 asfyn-dk.mail.protection.outlook.com

TXT

Show 4 TXT records

• jaKS7GcTpGQ7998IYattJOJvoLKY3tqWJAs3AWJkkLEjJfMZ7WS8CjheQ2YUPCmvFct2yWTEi1XR1yhBfPP/bg==
• 00D680000047HcJ=1TBQD00000001Ab
• 00DQJ0000074ziT=1TBQJ00000001Qj
• 6/pG2KkVEwWt29HnNcuOmJDaY76EOd8jhXEIPzz7WQGfBuQyLQ9tW1lLFtq+jXGUKU0FeuFdHztxMm/iU0ijDw==

Verified for

• Atlassian
• Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf.energifyn.dk include:sendgrid.net include:_spf.salesforce.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; aspf=r; rua=mailto:dmarc_agg@vali.email;

policy: reject (enforced)

DKIM

• selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDRdwaTXAI+E8Y4JtaLh1TZXEjPbaPgDFgqX4nKbf7QPTBGIB1Rz5g1J3fn4gIyeFe0HIP1YetW/8DVsfeOri…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.asfyn.dk/forside/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Linked from (1)

• fjernvarmefyn.dk×1