nc.dk
HTML metadata
Technology
- CDN
- Cloudflare
- JS framework
- Angular 19.2.3
- Fonts
-
- Google Fonts
Third-party hosts loaded (3)
- fonts.googleapis.com×1
- fonts.gstatic.com×1
- policy.app.cookieinformation.com×1
DNS records live
- NS
-
- elsa.ns.cloudflare.com
- roan.ns.cloudflare.com
- MX
-
- 10 nc-dk.mail.protection.outlook.com
- TXT
-
Show 4 TXT records
plFHST/jBDwq1iUhPkCDWlF45rO+N7XX4uITjdygPx+mTty+UPGTeQakSjLk41Ywzyh20+mn3cGbbOyAJez3hg==1JLDnE6qHOEzvg8GLTLOCwM6hKhFheQhcPtB44ry+87xFC9IFdSSNu479imo9zLs9XiikoYIMWvI35UwXsODxw==5cWGujLRq8EJYwGGPls/Ef0jMIt9DKJv/6nF/MzgW7nGZC7IeDpMy1jVOuGp/pUQISoV3WPOf8/8VXmqd10Z8Q==ciscocidomainverification=7c0308d01e739231c62db8c4cc90012cf7a331055e57aa7fbca7f39ff699cccd
- Verified for
-
- Apple
- GlobalSign
- Meta
Email authentication partial
- SPF
-
v=spf1 include:spf.protection.outlook.com include:musvc.com include:spf.zitcom.dk include:customerspf.sitecore.net include:_spf.vaimo.net ip4:195.81.252.0/23 ip4:185.59.148.0/22 ip4:194.182.254.0/24 ip4:194.255.39.34 -allstrict (-all) - DMARC
-
v=DMARC1; p=none; rua=mailto:633c00dc7e5f7@dmarc.centerasecurity.com; ruf=mailto:dmarcforensics@nc.dk; fo=1;policy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCfazcH2+mdz2WwEJlAby1x9oO1RxekjJiJ0TnX8vpleB8jBhctf3cWwo3b4UNwIWUPZiIoEsfLVPOc0pJUUN…
selectors probed - selector1:
Certificate (current)
WE1
Expires in 29 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-content-type-options
nosniff- content-security-policy
default-src 'self' https: data: blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self' https://api.eu1.exponea.com/editor/; frame-ancestors 'self' *.umbraco.io *.local https://client.mstory.dk https://www.mstory.dk; worker-src 'self' https:; upgrade-insecure-requests;- strict-transport-security
max-age=31536000; includeSubDomains; preload