indexo.dev

storebrand.se

.se crawl

First seen 2026-05-25 · Last seen 2026-05-29 · ok HTTP/1.1 200 1960 ms crawled 2026-05-29

NL · 20.103.30.120 · AS8075 Microsoft Corporation

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Välkommen till Storebrand!
Description
Storebrand är en ledande aktör på den nordiska marknaden för långsiktigt sparande och försäkringar. Vi förvaltar mer än 1000 miljarder NOK, vilket gör Storebrand till Norges största kapitalförvaltare.
Language
sv
Canonical
https://www.storebrand.se/

Open Graph

url
https://www.storebrand.se/
title
Välkommen till Storebrand!
description
Storebrand är en ledande aktör på den nordiska marknaden för långsiktigt sparande och försäkringar. Vi förvaltar mer än 1000 miljarder NOK, vilket gör Storebrand till Norges största kapitalförvaltare.

Technology

Server
nginx
Cookie consent
  • OneTrust

Third-party hosts loaded (1)

  • cdn.cookielaw.org×1

Social

Contact

Phone

DNS records live

NS
  • ns1-07.azure-dns.com
  • ns2-07.azure-dns.net
  • ns3-07.azure-dns.org
  • ns4-07.azure-dns.info
MX
  • 10 mxa-0028d802.gslb.pphosted.com
  • 10 mxb-0028d802.gslb.pphosted.com
TXT
  • Tpkt6yEqJjww5ePovOHb1AfrMdphdC4doqOCHNR0wAMmfJpoSwoqJDV99c7p2EQSRXm5KrkgcrVfjXeeD2WTBA==
Verified for
  • Atlassian
  • DocuSign
  • GlobalSign
  • Google
  • Microsoft 365

Email authentication strong

SPF
v=spf1 include:_spf.storebrand.com include:servers.mcsv.net ~all
softfail (~all)
DMARC
v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: reject (enforced)
DKIM
  • google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAlbra/iCtLF++BXjGf0KWwV+2fQvpjbF3tlesQOJGVdnB/BtVtJSe/8RCuwVnwKZgOg2ngjTidemr…
  • s1: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKyLjeDwAle59I1/MtubUrUHx38xPdafA6lIqnAWmGR1Th0ADHr4DUOiQWbkwKFugYkr7PWk52QYBgC05PRTT…
selectors probed

Certificate (current)

GlobalSign RSA OV SSL CA 2018
from 2026-02-11 to 2027-03-15
Expires in 287 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.storebrand.se/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self';form-action 'self';media-src 'self';worker-src 'self' blob:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://spp.my.site.com https://spp--uat.sandbox.my.site.com https://spp.my.salesforce.com https://spp.lightning.force.com https://static.lightning.force.com https://b.static.lightning.force.com https://bat.bing.com https://bat.bing.net https://blocks.insurely.com/ https://cdn.cookielaw.org/ https://observe.spp.se/ https://observe.storebrandfonder.se/ https://observe.storebrand.se/ https://*.googletagmanager.com https://www.google-analytics.com/ https://*.googleadservices.com https://*.google.com https://*.googlesyndication.com https://*.doubleclick.net https://*.hotjar.com/ https://*.hotjar.io/ https://snap.licdn.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://p.adsymptotic.com https://cdn.linkedin.oribi.io https://gw.linkedin.oribi.io https://dc.ads.linkedin.com https://sjs.bizographics.com https://www.youtube.com/ https://cdn.screen9.com

Links to (9)

Linked from (1)