caverion.se

.se crawl

First seen 2026-05-11 · Last seen 2026-05-17 · ok HTTP/1.1 200 12517 ms crawled 2026-05-17

SE · 217.114.94.2 · AS30811 Optimizely AB

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title

Caverion | Building Performance - Caverion

Description

Våra liv formas av de miljöer vi skapar runt omkring oss. Caverion vill vara med och skapa en omvärld där företag lyckas och människor mår bra.

Language

Canonical

https://www.caverion.se/

Translations

da
de
de-at
et
fi
lt
lv
no
pl
sv

Open Graph

url: https://www.caverion.com/
title: Caverion Web
site name: Caverion
description: Våra liv formas av de miljöer vi skapar runt omkring oss. Caverion vill vara med och skapa en omvärld där företag lyckas och människor mår bra.

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Font Awesome

Third-party hosts loaded (17)

cdn.jsdelivr.net×2
cdnjs.cloudflare.com×1
code.jquery.com×1
mktdplp102cdn.azureedge.net×1
stackpath.bootstrapcdn.com×1
use.fontawesome.com×1
www.caverion.at×1
www.caverion.com×1
www.caverion.de×1
www.caverion.dk×1
www.caverion.ee×1
www.caverion.fi×1
www.caverion.lt×1
www.caverion.lv×1
www.caverion.no×1
www.caverion.pl×1
www.googletagmanager.com×1

DNS records live

NS

ns1.eurodns.com
ns2.eurodns.com
ns3.eurodns.com
ns4.eurodns.com

MX

10 caverion-se.mail.protection.outlook.com

TXT

Show 5 TXT records

caverion-se.mail.protection.outlook.com.
MS=5813B15D2D0442C90DD20A9B78EDD09657AC5BD1
MS=ms66922057
google-site-verification=STke6rSwRiiCJ1DQ62DE-00xaCiLpBiMdi-d_NDOUhA
6RNeNygZVWBFVcGcxJN072lEp00cHMLJjDZxTxH8jn+fWPe/IPoUAUlh3TX81UPCsm5pV+FEunW632SFtO1LbA==

Email authentication weak

SPF: v=spf1 ip4:81.22.169.238 ip4:62.119.31.23 include:spf.protection.outlook.com ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-03-25 to 2026-06-23

Expires in 35 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.caverion.se/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com *.facebook.com *.episerver.net *.googletagmanager.com *.cookiebot.com *.google-analytics.com *.google.com *.googleapis.com *.infogram.com *.cloudflare.com *.jquery.com *.bootstrapcdn.com *.nyltx.com *.licdn.com *.jsdelivr.net *.facebook.net *.twitter.com *.azureedge.net *.emarketeer.com *.tools.investis.com *.gstatic.com *.fbcdn.net *.jifo.co *.infogram.com *.reachmee.com *.tiktok.com *.upseller.cloud *.giosg.com *.clients.giosgusercontent.com *.siteimprove.net siteimproveanalytics.com *.vo.msecnd.net *.workbuster.com *.typeform.com *.addthis.com *.addthisedge.com *.moatads.com *.inzynk.io googleads.g.doubleclick.net *.clarity.ms *.eventilla.com caverion.onecruiter.com *.scratcher.io js.monitor.azure.com formui-usa1.mkt.dynamics.com; frame-ancestors 'self'
strict-transport-security: max-age=31536000