scandisupply.dk
HTML metadata
Technology
- CDN
- Netlify
- CMS
- Nuxt
- Analytics
-
- Google Tag Manager
- Plausible
- Fonts
-
- Adobe Fonts
- Google Fonts
Third-party hosts loaded (6)
- images.ctfassets.net×26
- fonts.googleapis.com×3
- fonts.gstatic.com×3
- use.typekit.net×2
- plausible.io×1
- www.googletagmanager.com×1
Social
Contact
DNS records live
- NS
-
- ns.scannet2.dk
- ns2.scannet2.dk
- MX
-
- 10 mx01.hornetsecurity.com
- 20 mx02.hornetsecurity.com
- 30 mx03.hornetsecurity.com
- 40 mx04.hornetsecurity.com
- TXT
-
google-site-verification=041m5WZZj4YyoC1PLPhzLlK5gDn95sOBFF8Y1sL2YbgMS=ms58307406
Email authentication weak
- SPF
-
v=spf1 include:spf.hornetsecurity.com include:spf.protection.outlook.com include:_spf.online.superoffice.com include:spf-westeu.emailsignatures365.com -allstrict (-all) - DMARC
- not published
- DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxIe/y3Wggy1pxPs51ivZDP79AIclmV4dmRHG76oRG2lHK9z7EvWK62eaGFVl+W60ANlMBuU9Iixns… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruKmiwKp5wBMK7xLt01ufVxKRKVw9EguFBgI+DRmfXE7e1QMIhDqGCCVReqtNst8xRL3eDhr7GNxqi…
selectors probed - selector1:
Certificate (current)
E7
Expires in 44 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer- x-frame-options
DENY- x-content-type-options
nosniff- content-security-policy
script-src 'self' 'unsafe-hashes' 'unsafe-inline' 'unsafe-eval' *.jotfor.ms plausible.io www.google.com fonts.googleapis.com www.googletagmanager.com dev-scandisupply.netlify.app prod-scandisupply.netlify.app preview-scandisupply.netlify.app scandisupply.dk events.jotform.com *.google-analytics.com www.youtube.com; style-src 'self' 'unsafe-hashes' 'unsafe-inline' plausible.io use.typekit.net p.typekit.net fonts.googleapis.com; img-src 'self' images.ctfassets.net data: scandi-supply.imgix.net *.google-analytics.com i.ytimg.com; connect-src 'self' plausible.io *.contentful.com *.algolia.net algolia.net api.scandisupply.cloud4.structpim.com *.google-analytics.com noembed.com cdn.plyr.io scandisupply-productapi-dev.azurewebsites.net scandisupply-productapi-prod.azurewebsites.net; object-src 'none'; font-src 'self' use.typekit.net fonts.gstatic.com www.bugherd.com d2iiunr5ws5ch1.cloudfront.net data:- strict-transport-security
max-age=31536000