pipos.se
HTML metadata
Technology
- Stack
- Java
DNS records live
- NS
-
- ns1.ics-services.se
- ns2.ics-services.se
- ns3.ics-services.se
- MX
-
- 0 mailcluster.loopia.se
Email authentication weak
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 204 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- referrer-policy
- findings
-
- short HSTS max-age
- CSP allows unsafe inline scripts/styles
- missing content type protection
- missing Permissions Policy
Header values
- referrer-policy
strict-origin- x-frame-options
SAMEORIGIN- content-security-policy
default-src 'none'; connect-src 'self'; font-src 'self'; form-action 'self' https://ui.ungpd.com; frame-src 'self' https://www.youtube.com; img-src 'self' data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'- strict-transport-security
max-age=300; includeSubDomains