bergholm.com

HTML metadata

Title: Startsida
Language: sv

Open Graph

title: Startsida

Technology

Server: nginx

Analytics

Google Tag Manager

Fonts

Adobe Fonts
Google Fonts

Third-party hosts loaded (7)

cdn.jsdelivr.net×2
fonts.googleapis.com×2
cdnjs.cloudflare.com×1
fonts.gstatic.com×1
unpkg.com×1
use.typekit.net×1
www.googletagmanager.com×1

Social

Contact

Phone

0550-380 80

Registration

Registrar

Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA

Created

1998-04-09

Expires

2027-04-08 309 days left

Updated

2026-03-05

Name servers

ns1.loopia.se
ns2.loopia.se

DNS records live

NS

ns1.loopia.se
ns2.loopia.se

MX

10 bergholm-com.mail.protection.outlook.com

TXT

Show 4 TXT records

s74og044jh6d1rner5uipc68l6
qbhrmv9g6vua92046v3ha2ue7u
huouc4colp27kkp1ihu9pokkqa
qbhrmv9g6vua92046v3ha2ue7u.

Verified for

Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:spf.mtasv.net include:servers.mcsv.net -all

strict (-all)

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:re+zhdml0xs7kr@dmarc.postmarkapp.com; sp=none; aspf=r;

policy: none (monitoring only) · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDd2D1RZQS69jL1txcNt5giJgwBKgQsyVyofwLHNGsJRTYmNhT89C1vvobV0QDB/XyYVFMt2age8uQl/VqVGk…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

E7

from 2026-05-06 to 2026-08-04

Expires in 63 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.bergholm.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=(self), payment=(), usb=(), fullscreen=(self)
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://unpkg.com https://npmcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://maps.googleapis.com https://api.mapbox.com https://www.youtube.com https://www.youtube-nocookie.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://unpkg.com https://npmcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://maps.googleapis.com https://api.mapbox.com https://www.youtube.com https://www.youtube-nocookie.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://api.mapbox.com; style-src-elem 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.clou
strict-transport-security: max-age=31536000; includeSubDomains