laxa.se

HTML metadata

Technology

jQuery

3.3.1 known XSS (<3.5)

Stack

Java

Fonts

• Google Fonts

Third-party hosts loaded (3)

• fonts.googleapis.com×2
• ajax.googleapis.com×1
• cdnjs.cloudflare.com×1

Contact

Email

• kommun@laxa.se

Phone

• 0584-473100

DNS records live

NS

• ns1.loopia.se
• ns2.loopia.se

MX

• 1 laxa-se.mail.protection.outlook.com

TXT

• kCpsz36+UmAV9mH5fgM4n9T6Egrc4otU2kt1VofJAziyd5WlHZO1F3My8L7+tKQ0fuBVLLhSCg+bMOb1LDRP0A==
• DomainVerification=VS0GXZU1CB92B3AWAG4Y8XOB929VCRKAEVXSTFGOTQX6UD31NU2HY0XCMSTFHTE7
• u4uvf0khhlokh0ook7c5hic0a

Verified for

• Apple
• GlobalSign
• Microsoft 365

Email authentication partial

SPF

v=spf1 mx a ip4:193.44.212.47 ip4:193.44.212.48 include:_uk.axiell.com include:_se_net.axiell.com include:spf.protection.outlook.com include:mg-lcsse.tietoevry.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc.rua@laxa.se; ruf=mailto:dmarc.ruf@laxa.se; fo=s;

policy: none (monitoring only)

DKIM

• selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMwIqdhU0G+Lr4dlH1txBJd7CdUeKQruETbMzCGtQOEr8OFQh1MOkIUKBATnJIWhEcP4BMg9NvfKDMKpcesH…
• selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8CklZPEGawGLRsiD0E+ZhQU3ic9aCEfByWMaF6f72CbUs+wI9KaIs6/hDEvfa0B1xv87ajpL9bw0a…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.laxa.se/

present

• x-frame-options

findings

• missing HSTS
• missing Content Security Policy
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (5)

• typeform.com×1
• sydnarke.se×1
• schoolsoft.se×1
• naturvardsverket.se×1
• naturkartan.se×1

Linked from (2)

• bergslagsbibblan.se×1
• malardalsradet.se×1