tankesport.se
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Gatsby
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- widget.trustpilot.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- gina.ns.cloudflare.com
- randy.ns.cloudflare.com
- MX
-
- 1 tankesport-se.mail.protection.outlook.com
- TXT
-
BGhnzy1pgHujO6DcsIDkLYOkE3A6TSeTZFzUidEEYgVbDaVt3EVQ3/V9dHwU3qDce6IXcnCOftwYXaP7aiRACA==
- Verified for
-
- Microsoft 365
- Yahoo
Email authentication strong
- SPF
-
v=spf1 ip4:86.93.158.155 ip4:85.90.245.168 include:sites.savviihq.com include:spf.protection.outlook.com mx ip4:194.165.34.0/24 include:spf.mailjet.com -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:aggregate@keesing.net,mailto:dmarc_agg@vali.email; ruf=mailto:forensicreports@keesing.net; fo=1; adkim=s; aspf=s; pct=100;policy: reject (enforced) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBA5lle0DW6+L89t5uz6VieZG7C6z0z+OrYF6ej8RQhuesf/t8JG+mF7cwh6TU/7XNkZla/4Hk4Dyg…
selectors probed - selector1:
Certificate (current)
WE1
Expires in 38 days
HTTP security headers
- present
-
- content-security-policy-report-only
- x-frame-options
- x-content-type-options
- permissions-policy
- findings
-
- missing HSTS
- missing Content Security Policy
- missing Referrer Policy
Header values
- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(), autoplay=(), bluetooth=(), camera=*, compute-pressure=(), cross-origin-isolated=(self), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=*, gyroscope=(), hid=(), identity-credentials-get=(), idle-detection=(), keyboard-map=(), magnetometer=(), microphone=*, midi=(), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), sync-xhr=*, storage-access=(), usb=(), web-share=(), window-management=(), xr-spatial-tracking=()- x-content-type-options
nosniff- content-security-policy-report-only
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com fonts.googleapis.com *.googleapis.com data: *.fontawesome.com script.hotjar.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.payp