morups.se

HTML metadata

Title: Svensktillverkade fönster av högsta kvalitet - Morups Fönster
Description: Vi utför smidiga fönsterbyten med svensktillverkade fönster från vår egna fabrik. ➤ Fönster med lågt u-värde ➤ Leverans i hela Sverige ☎ Kontakta oss!
Language: sv-SE
Generator: WP Rocket 3.21.3
Canonical: https://morups.se/

Open Graph

url: https://morups.se/
title: Svensktillverkade fönster av högsta kvalitet - Morups Fönster
locale: sv_SE
site name: Morups Fönster
description: Vi utför smidiga fönsterbyten med svensktillverkade fönster från vår egna fabrik. ➤ Fönster med lågt u-värde ➤ Leverans i hela Sverige ☎ Kontakta oss!
updated time: 2026-04-27T08:20:00+02:00

Technology

Server: Apache
CMS: WordPress
jQuery: 3.7.1

Analytics

Google Analytics
Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (8)

fonts.googleapis.com×3
code.jquery.com×1
consent.cookiebot.eu×1
fonts.gstatic.com×1
widget.trustpilot.com×1
www.google-analytics.com×1
www.googletagmanager.com×1
www.uc.se×1

Social

Contact

Phone

020780000

DNS records live

NS

ns1.dnshost.net
ns2.dnshost.net

MX

10 morups-se.mail.eo.outlook.com

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:spf.mandrillapp.com a:mail.edisoft.no a:smtpspare.edi-soft.com include:sendgrid.net include:relay.mailbaby.net -all

strict (-all)

DMARC

v=DMARC1; p=none; fo=1; rua=mailto:hembesok@morups.se

policy: none (monitoring only)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aBt1C3u8b27HaHBnnBmjfnD9ZV505bBCV71bgZWpKbNIXt0jKxVXoFc9895JxQEW3QpXAgPeYNA3b4prj…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCeDm6651YydpAGJ7p7M5/A0pVuQD7f3MMZrlv6b3q5E+Ox5WqqUUJc99NIY4olpywRxlvpuUOtYtjhpFnpkmq8yW…

selectors probed

Certificate (current)

R13

from 2026-05-20 to 2026-08-18

Expires in 75 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://morups.se/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' data: blob: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://consent.cookiebot.eu https://www.googletagmanager.com https://widget.trustpilot.com https://www.clarity.ms https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://connect.facebook.net https://tb.de17a.com https://consentcdn.cookiebot.eu https://static.hotjar.com/ https://script.hotjar.com/ https://web103.reachmee.com https://bat.bing.com/ https://code.jquery.com/ https://bat.bing-int.com https://adsby.bidtheatre.com; style-src 'self' 'unsafe-inline' 'report-sample' data: blob: https://fonts.googleapis.com; img-src 'self' data: blob: https://www.uc.se https://www.facebook.com https://www.google-analytics.com https://www.google.se https://www.google.com https://www.googletagmanager.com https://bat.bing.com/ https://img.sct.eu1.usercentrics.eu https://user-sync.fwmrm.net https://simage2.pubmatic.com ht
strict-transport-security: max-age=31536000; includeSubDomains