slakthistoria.se
HTML metadata
Technology
- CMS
- Nuxt
- JS framework
- Nuxt, Vue
- Analytics
-
- Google Tag Manager
- Ads
-
- Google Ads (DoubleClick)
- Magnite
Third-party hosts loaded (7)
- cdn.cxense.com×1
- dev.visualwebsiteoptimizer.com×1
- europe-west1-bonnier-big-data.cloudfunctions.net×1
- micro.rubiconproject.com×1
- securepubads.g.doubleclick.net×1
- slakthistoria.dk×1
- www.googletagmanager.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- hugh.ns.cloudflare.com
- venus.ns.cloudflare.com
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- Verified for
-
- Adobe
- Meta
- Microsoft 365
Email authentication weak
- SPF
-
v=spf1 include:spf1.bonnierpublications.com include:spf2.bonnierpublications.com ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 84 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline' unsafe-inline; script-src 'self' * data: blob: unsafe-inline 'unsafe-inline' 'unsafe-eval'; script-src-elem * data: blob: unsafe-inline 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: unsafe-inline 'unsafe-inline'; img-src * data: blob: unsafe-inline 'unsafe-inline'; media-src * data: blob: unsafe-inline 'unsafe-inline'; frame-src * data: blob:; style-src * data: blob: unsafe-inline 'unsafe-inline'; font-src * data: blob: unsafe-inline 'unsafe-inline'; frame-ancestors 'none'- strict-transport-security
max-age=15724800; includeSubDomains