byggvesta.se
HTML metadata
Technology
- Server
- Apache
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- tracking.emerse.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- digipdns.com
- digipdns.eu
- digipdns.net
- digipdns.se
- MX
-
- 10 byggvesta-se.mail.protection.outlook.com
- Verified for
-
- Apple
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 mx a ip4:109.228.136.194 ip4:185.84.28.20 ip4:185.27.171.63 ip4:83.140.71.187 ip4:185.29.113.92 ip4:149.72.222.23 include:spf.protection.outlook.com a:noreply.momentum.se include:all._spf.plma.se include:_spf.salesforce.com -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.emailpolicy: quarantine - DKIM
-
- selector2:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC20jJkEZx4HuLxo9zvWDD+jJnKSTn+y6SyTLlXdLz2GBpgPOJ8umzSomv9mwgOnD+GCy86i1YDRxh7+hsUF4… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvtXLlwBmGKB6rQAv01hnDGWrx+xHVzeVaNGPG689bnNYCJ6iw0P02QB6Z8InY8jYqw4co70i/CSrCavfr… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/Twh6EAXd0yQLt5zh41g/1dR/KMrMBw8RtRMSszVmT3cmkgCTuo9bGgQKjbDtuiV00ikbHS3c+z6/WiHw9O1K49…
selectors probed - selector2:
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 130 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- missing frame protection
Header values
- referrer-policy
strict-origin-when-cross-origin- permissions-policy
geolocation=(self), microphone=(), camera=()- x-content-type-options
nosniff- content-security-policy
default-src 'self' mailto: tel:; font-src https: data: blob:; img-src https: data: blob:; script-src https: 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval'; style-src https: 'unsafe-inline'; worker-src https: blob:; frame-ancestors 'self'; frame-src https: mailto: tel: blob:; connect-src https: blob:; media-src https: mediastream: blob:- strict-transport-security
max-age=31536000; includeSubDomains