regionjh.se — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Region Jämtland Härjedalen
Description: Välkommen till Region Jämtland Härjedalens webbplats
Language: sv
Canonical: https://www.regionjh.se

Open Graph

description: Välkommen till Region Jämtland Härjedalens webbplats

Technology

Stack: Java

Third-party hosts loaded (1)

static.rekai.se×2

Contact

Email

region@regionjh.se

Phone

063-147500

DNS records live

NS

a.dns.tele2.net
ns1.regionjh.se
ns2.regionjh.se

MX

10 regionjh-se.mail.protection.outlook.com

TXT

DomainVerification=H4UK3FMJKWJPP1UVIOKKT3SD8S0DI50CDLJL5ONWAIGECA4FLCMU3OUXRQ440EP0
_394j48gb7u1gtw96trpkyq55oumrwmm

Verified for

Apple
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:servers.mcsv.net include:_spf.google.com include:spf.defgo.com include:mail.webropolsurveys.com include:_spf.online.superoffice.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDGGZCYGvVbHuk17TNDTGw9tAwX0F2C9Q9mQW71fJBGWA1CIaraxT0LBtNXuCc0qUGxY/l97GUBcYr8n07iRn…

selectors probed

Certificate (current)

Telia RSA OV CA v4

from 2026-05-07 to 2026-11-06

Expires in 158 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://regionjh.se/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-inline'; frame-src 'self' api.screen9.com qcnl.tv *.google.com *.quickchannel.com *.youtube.com *.regionjh.se *.utv-regionjh.se *.vimeo.com *.mediaflow.com web5.stratsys.se jamtlandharjedalen.app.stratsys.com *.openstreetmap.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com *.vimeo.com https://tile.openstreetmap.org *.rekai.se https://*.vizzit.se blob:; img-src 'self' https://*.googleapis.com https://*.gstatic.com *.google.com https://tile.openstreetmap.org *.vizzit.se *.vimeo.com *.googleusercontent.com *.nationelltklinisktkunskapsstod.se *.1177.se https://recruit.visma.com data:; connect-src 'self' https://*.googleapis.com *.google.com https://*.gstatic.com *.rekai.se https://*.vizzit.se *.vizzit.se data: blob:; font-src 'self' https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *.vizzit.se; worker-s
strict-transport-security: max-age=31536000; includeSubDomains; preload