indexo.dev

c4energi.se

.se crawl

First seen 2026-05-27 · Last seen 2026-05-31 · ok HTTP/1.1 200 751 ms crawled 2026-05-30

SE · 213.212.8.84 · AS12552 GlobalConnect AB

Reputation 100/100

Classifying

HTML metadata

Title
C4 Energi
Language
sv

Technology

CMS
Gatsby
jQuery
3.3.1 known XSS (<3.5)
Stack
ASP.NET
Cookie consent
  • Cookiebot
Fonts
  • Adobe Fonts

Third-party hosts loaded (4)

  • cdnjs.cloudflare.com×5
  • app.weply.chat×1
  • consent.cookiebot.com×1
  • use.typekit.net×1

Social

Contact

Email
Phone

DNS records live

NS
  • nssec1.skno.se
  • nssec2.skno.se
MX
  • 10 c4energi-se.mail.eo.outlook.com
TXT
Show 6 TXT records
  • 3ru00lcvium3v6notgk9tns480
  • lime-domain-verification=07BD925A7002120
  • _7wmyhxcyzc8nd62nv3gmjf5ik96h6m4
  • DomainVerification=LZU1DGUL7YWAIE6FC6JUFBYMYN4D6KYRR8L15D2YADMSR43VT63PZICX99BG1JCV
  • aubjtuu0blkrrt38v6osth555c
  • x3BE6fi1BeSj261Yscl6G6TsEMiprxTaJrT4/garMDsAxVbqBAjvw6v79h/CkbVt7j/F6sCXx20+PPKYH+iHwg==
Verified for
  • Microsoft 365

Email authentication strong

SPF
v=spf1 include:spf.protection.outlook.com include:spf.bedrock.lime-technologies.com include:outboundspf.cloud.advania.se a:mail.sitevision-cloud.net ip4:193.17.67.50 ip4:217.114.80.100 -all
strict (-all)
DMARC
v=DMARC1; p=quarantine; rua=mailto:c4e.it@c4energi.se
policy: quarantine
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDGNTFFPDzrDTnkqxgwY+A68I6ydSL35FDNF2tTX6ipbaWQgPTmF0J01Ru4hfPE+oCuXL+Nd6Kr2a9ev7Cxv…
selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2
from 2026-03-24 to 2026-10-08
Expires in 128 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.c4energi.se/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
content-security-policy
default-src 'self' ws: wss: data:; script-src 'self' https://www.gstatic.com https://consentcdn.cookiebot.com https://consent.cookiebot.com/uc.js https://consent.cookiebot.com/c960e547-3a88-424c-ac14-6079433c9419/cd.js https://consent.cookiebot.com/c960e547-3a88-424c-ac14-6079433c9419/cc.js https://consent.cookiebot.com http://www.google-analytics.com/analytics.js https://www.gstatic.com/charts/loader.js https://static.addtoany.com https://cdnjs.cloudflare.com https://c4energi.matomo.cloud https://maps.googleapis.com https://www.youtube.com https://app.weply.chat https://webmaptest-c4energi.msappproxy.net https://webmap-c4energi.msappproxy.net https://*.weply.chat https://ftp.mirakel.nu https://connect.facebook.net 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://p.typekit.net https://use.typekit
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (4)

Linked from (2)