spps.se
HTML metadata
Technology
- Server
- Apache
- PHP
- 7.1.33 end of life
- jQuery
- 1.11.2 known XSS (<3.5)
- Fonts
-
- Google Fonts
Third-party hosts loaded (1)
- fonts.googleapis.com×5
Contact
DNS records live
- NS
-
- ns1.wikinggruppen.se
- ns2.wikinggruppen.se
- MX
-
- 1 webmail.awork.dk
Email authentication strong
- SPF
-
v=spf1 a:webmail.awork.dk ip4:185.20.14.84 ip4:185.20.14.240 include:_vsp.oderland.com +a +mx ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:abuse@awork.one; ruf=mailto:abuse@awork.one; fo=1; pct=100; aspf=s; adkim=spolicy: reject (enforced) - DKIM
-
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8N86IWNiXNuHNn8Ejw88OmgMUM5/Z4GWndBS/rkbVF/mHpvdT3FcssNdpnXxrcgJxYNPunsabaULMl… - dkim:
v=DKIM1;k=rsa;t=s;s=email;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyVW5ZXba9/+P/nE140NO6zGB8YeguqmbKEDV0rePgGtpKHAwYO0MWJuwUS1KXJwqZzN…
selectors probed - default:
Certificate (current)
R13
Expires in 54 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- permissions-policy
microphone=()- x-content-type-options
nosniff- content-security-policy
default-src 'self' captcha.yemiez.com *.googletagmanager.com *.youtube.com *.vasttrafik.se *.bookmore.com *.doubleclick.net *.vackertvader.se *.bostyret.se *.statcounter.com statcounter.com *.google.com *.google-analytics.com apps.bokamera.se data: 'unsafe-inline' 'unsafe-eval';font-src 'self' fonts.gstatic.com;style-src 'self' fonts.googleapis.com 'unsafe-inline'- strict-transport-security
max-age=63072000