bobedre.dk
HTML metadata
Technology
- CMS
- Nuxt
- JS framework
- Nuxt, Vue
- Analytics
-
- Google Tag Manager
- Ads
-
- Google Ads (DoubleClick)
- Magnite
Third-party hosts loaded (8)
- bo-bedre.no×1
- cdn.cxense.com×1
- dev.visualwebsiteoptimizer.com×1
- europe-west1-bonnier-big-data.cloudfunctions.net×1
- micro.rubiconproject.com×1
- scandiliv.nl×1
- securepubads.g.doubleclick.net×1
- www.googletagmanager.com×1
Contact
- Phone
DNS records live
- NS
-
- hugh.ns.cloudflare.com
- venus.ns.cloudflare.com
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
DomainVerification=AN37GEB7QUQWZXF2SIUHJ1A13ZG1LJMA8Z0UYV9F3X00RIZ26E8OCI62I3NRI1FP
- Verified for
-
- Adobe
- Meta
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 a mx include:spf.mtasv.net include:_spf.google.com a:heurose.easyweb.dk ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; pct=1; rua=mailto:y5puaew7@ag.dmarcian-eu.compolicy: quarantine · pct=1 - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNdTs1+ZDdMpLUShmyrDBYEsA+u6OS9uSubuTyrupqCotH4kVWWzfrSMgGaj17iUOBc943FZ5gTHSs…
selectors probed - google:
Certificate (current)
R13
Expires in 70 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline' unsafe-inline; script-src 'self' * data: blob: unsafe-inline 'unsafe-inline' 'unsafe-eval'; script-src-elem * data: blob: unsafe-inline 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: unsafe-inline 'unsafe-inline'; img-src * data: blob: unsafe-inline 'unsafe-inline'; media-src * data: blob: unsafe-inline 'unsafe-inline'; frame-src * data: blob:; style-src * data: blob: unsafe-inline 'unsafe-inline'; font-src * data: blob: unsafe-inline 'unsafe-inline'; frame-ancestors 'none'- strict-transport-security
max-age=15724800; includeSubDomains