seb.fi
HTML metadata
Technology
- Cookie consent
-
- OneTrust
Third-party hosts loaded (5)
- images3.cmp.optimizely.com×4
- images1.cmp.optimizely.com×3
- cdn.cookielaw.org×1
- content.seb.se×1
- images4.cmp.optimizely.com×1
DNS records live
- NS
-
- ns1.seb.se
- ns2.sebgroup.com
- pdns1.cscdns.net
- pdns2.cscdns.net
- MX
-
Show 6 MX records
- 10 smtp-01.seb.se
- 10 smtp-02.seb.se
- 10 smtp-03.seb.se
- 10 smtp-04.seb.se
- 10 smtp-05.seb.se
- 10 smtp-06.seb.se
- TXT
-
Show 9 TXT records
50d00018aaf04aa686d49ca0c198eea55p8mp4r2hvtt2dtnrrgmm0rh658w5gf1_5hptob3pmb88v9eiduxhh6nqbvwbgh6_ataqzfky86393is2likje1vf9mwo4ebjptt67z28n4ksps7f57yxx1br5spstbzltdfs4k41zdjlhhwwm0k46x2v4vx5y0zqz4zj28wyl1dx5g21g717pbdsqk87zmxxdwxpqcyfj43jqj7g81qpc2ht1ysrv75docker-verification=6b50a5c5-cd65-4115-961f-e1e1e1bf3534
- Verified for
-
- Microsoft 365
- OneTrust
Email authentication no MX
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificates
Loading certificate
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
camera=(), microphone=(), payment=(), usb=()- x-content-type-options
nosniff- content-security-policy
style-src 'self' 'unsafe-inline'; script-src 'self' 'nonce-rc0phXU9pedgmY45F7JAB30vJyEKU+13HyXT1hEiIwM=' 'report-sample' 'unsafe-eval' *.seb.se cdn.cookielaw.org; img-src 'self' *.seb.se seb.d3.sc.omtrdc.net cache.cvm3.se cdn.cookielaw.org data: https:; frame-src 'self' *.seb.se seb-external.creo.se seb-external.creomediamanager.com player.cvm3.se seb-live.creo.se; font-src 'self' content.seb.se data:; connect-src 'self' *.seb.se https://seb.se/dsc/forms-api/api/formdata seb.d3.sc.omtrdc.net cdn.cookielaw.org geolocation.onetrust.com sebconsent-privacy.my.onetrust.com https://c.seb.fi; base-uri 'self'; object-src 'none'; report-uri /api/csp-report/- strict-transport-security
max-age=31536000;
Links to (3)
- cvm3.se×1
- seb.se×1
- sebgroup.com×1
Linked from (2)
- kti.fi×1
- nuortennyt.fi×1