indexo.dev

avfallhalsingland.se

.se crawl

First seen 2026-06-01 · Last seen 2026-06-01 · ok HTTP/1.1 200 661 ms crawled 2026-06-02

SE · 93.188.2.54 · AS39570 Loopia AB

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title
Avfall Hälsingland | Avfall Hälsingland
Language
sv
Canonical
https://avfallhalsingland.se/

Open Graph

url
https://avfallhalsingland.se/
title
Avfall Hälsingland - Avfall Hälsingland
locale
sv_SE
site name
Avfall Hälsingland
description
Välkommen! Skriv i rutan det du vill sortera. Förslag på ord kommer upp medan du skriver in texten. Om du skriver ett ord som inte finns i guiden så ser vi det. Vi lägger till nya ord löpande. Avfallsslag: här kan du läsa om olika material du sorterar. A – Ö: här finns hela Sorteringsguiden i bokstavsordning. […]

Technology

Server
nginx
CMS
WordPress
PHP
8.3.30 security-only
jQuery
1.9.1 known XSS (<3.5)
Fonts
  • Font Awesome
  • Google Fonts

Third-party hosts loaded (5)

  • ajax.googleapis.com×2
  • fonts.googleapis.com×2
  • maps.google.com×2
  • cdn.gtranslate.net×1
  • use.fontawesome.com×1

Contact

Phone

DNS records live

NS
  • ns1.loopia.se
  • ns2.loopia.se
MX
  • 10 mailcluster.loopia.se
  • 20 mail2.loopia.se

Email authentication weak

SPF
v=spf1 include:spf.loopia.se -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-05-27 to 2026-08-25
Expires in 83 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://avfallhalsingland.se/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://cdn.gtranslate.net https://translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=sv&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback; img-src 'self' data: blob: ; object-src 'self' data: blob: ; frame-src 'self' data: blob: ;

Linked from (1)