paxess.se
HTML metadata
Technology
- Server
- Microsoft-IIS
- jQuery
- 3.4.1 known XSS (<3.5)
- Fonts
-
- Google Fonts
Third-party hosts loaded (6)
- cdnjs.cloudflare.com×2
- stackpath.bootstrapcdn.com×2
- cdn.jsdelivr.net×1
- code.jquery.com×1
- fonts.googleapis.com×1
- kit.fontawesome.com×1
Contact
- Phone
DNS records live
- NS
-
- ns1.namesystem.se
- ns2.namesystem.se
- ns3.namesystem.se
- MX
-
- 10 mail.bahnhof.se
- TXT
-
7t3w3z4hy67mwk527wxjqqwh74ndvkgdiPkzJWuJ5sWJkAPAFXsbOSJFFUUlx9MBF-c8EF2pAnQ
Email authentication weak
- SPF
-
v=spf1 ip4:185.11.96.22 ip4:185.11.96.16/28 ip4:80.166.12.0/24 ip4:188.180.65.192/29 ip4:212.98.80.10/32 include:_spf-pvt.bahnhof.se include:_spf-ftg.bahnhof.se include:amazonses.com -allstrict (-all) - DMARC
- not published
- DKIM
-
- default:
v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ezgJa4IjNTXGRjzjx+uKDnuQ/2sGSAG9USZrYYCqLbrCy7O3Sw2LDQwxKVKW7kJ3/Qy…
selectors probed - default:
Certificate (current)
R12
Expires in 76 days
HTTP security headers
- present
-
- x-frame-options
- findings
-
- missing HSTS
- missing Content Security Policy
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN