regionkronoberg.se

HTML metadata

Title: Region Kronoberg
Description: Region Kronoberg arbetar med ett hållbart, långsiktigt perspektiv för utveckling, tillväxt och en god hälso- och sjukvård som ska möta människors behov.
Language: sv
Generator: EPiServer
Canonical: https://www.regionkronoberg.se/

Open Graph

url: https://www.regionkronoberg.se/
title: Startsida
description: Region Kronoberg arbetar med ett hållbart, långsiktigt perspektiv för utveckling, tillväxt och en god hälso- och sjukvård som ska möta människors behov.

Technology

CMS: Gatsby
jQuery: 3.6.0
Stack: ASP.NET

Third-party hosts loaded (2)

dl.episerver.net×1
www.browsealoud.com×1

Social

Contact

Phone

0470-58 80 00

DNS records live

NS

emea.excedodns.eu
global.excedodns.com
nordic.excedodns.net
sto.excedodns.se
world.excedodns.org

MX

0 regionkronoberg-se.mail.protection.outlook.com

Verified for

Apple
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:194.68.88.0/24 include:spf.protection.outlook.com -all exp=spf-fail.regionkronoberg.se

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc@kronoberg.se; ruf=mailto:dmarc@kronoberg.se

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nYJnmxiSIH4SmBOrGzvQCCFnxe6+ufTtiOpQEt3UoGi9PGLOF+7/9NKMWxEsGt8DR6zg/67I9LSWU…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-09-22 to 2026-10-24

Expires in 145 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.regionkronoberg.se/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: fullscreen=(self "https://www.youtube.com" "https://www.youtube-nocookie.com" "https://player.vimeo.com" "https://play.mediaflowpro.com" "https://play.mediaflow.com")
x-content-type-options: nosniff
content-security-policy: default-src 'self' mfstatic.com *.mediaflowpro.com *.mediaflow.com; base-uri 'self'; script-src 'self' 'unsafe-hashes' 'unsafe-inline' 'unsafe-eval' https://esmaker.net/nx2/public/ *.inviewer.se https://static.mediaflowpro.com https://cdn.matomo.cloud https://*.browsealoud.com https://*.episerver.net https://matomo.regionkronoberg.se https://regionkronoberg.matomo.cloud https://cdn.siteimprove.net mfstatic.com; style-src 'self' 'unsafe-inline' https://static.mediaflowpro.com https://fonts.googleapis.com https://*.episerver.net mfstatic.com; img-src 'self' data: https://recruit.visma.com/Upload/MediaBank/ https://esmaker.net/nx2/public/ https://*.mediaflowpro.com https://*.episerver.net https://*.inviewer.se; media-src blob: *.mediaflow.com *.mediaflowpro.com mfstatic.com *.inviewer.se *.mediaflowcdn.com cdn0-70012-liveedge0.dna.ip-only.net cdn0-70012-liveedge0.dna.contentdelivery.net; child-src blob:; font-src 'self' https://static.mediaflowpro.com https://fonts.gstatic.com https://*.e
strict-transport-security: max-age=31536000;, max-age=157680000