ices.dk
HTML metadata
Technology
- CDN
- Cloudflare
- ASP.NET
- 4.0.30319
- jQuery
- 1.8 known XSS (<3.5)
- Analytics
-
- Cloudflare Insights
- Google Tag Manager
Third-party hosts loaded (4)
- ajax.googleapis.com×1
- static.cloudflareinsights.com×1
- www.freeprivacypolicy.com×1
- www.googletagmanager.com×1
Social
DNS records live
- NS
-
- ns01.one.com
- ns02.one.com
- MX
-
- 0 ices-dk.mail.protection.outlook.com
- TXT
-
ms=ms38391459
- Verified for
-
- Apple
Email authentication strong
- SPF
-
v=spf1 include:spf.topdesk.net include:spf.protection.outlook.com mx a ip4:217.63.104.17 ip4:217.63.104.3 ip4:194.182.30.76 -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email;policy: reject (enforced) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzuurJP5UgiGDSk7lIYoQuDgz1JJiwY6aozbm4eKVbi5cIIDkI9xIl6LozoaRXAAP6MgTrym/9wgO3OR2FOu… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LgVVEmA5A0e7a97G3PoAQ6IjRqxejc/Ru3CJtFL3x+2PXUXR+jTP3fvN9sL3ZP/xB41o6XNBtauiD…
selectors probed - selector1:
Certificate (current)
E8
Expires in 42 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- missing HSTS
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;
Links to (8)
- doi.org×1
- facebook.com×1
- figshare.com×1
- linkedin.com×1
- microsoft.com×1
- sharepoint.com×1
- twitter.com×1
- youtube.com×1