tomtit.se — domain check, WHOIS, DNS & reputation

HTML metadata

Title

Tom Tits Experiment – Sveriges största science center

Description

Besök Sveriges största och första science center – Tom Tits Experiment. Utforska 400 interaktiva experiment och upptäck naturvetenskap med hela familjen.

Language

sv

Canonical

https://www.tomtit.se/

Translations

en
sv

Open Graph

url: https://www.tomtit.se/
title: Tom Tits Experiment – Sveriges största science center
description: Besök Sveriges största och första science center – Tom Tits Experiment. Utforska 400 interaktiva experiment och upptäck naturvetenskap med hela familjen.

Technology

Server: Microsoft-IIS

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Email

info@tomtit.se

Phone

08-550 225 00

Address

Tom Tits Experiment Storgatan 33, 151 27 Södertälje, Box 633, SE

DNS records live

NS

ns1.p201.dns.oraclecloud.net
ns2.p201.dns.oraclecloud.net
ns3.p201.dns.oraclecloud.net
ns4.p201.dns.oraclecloud.net

MX

3 tomtit-se.mail.protection.outlook.com

TXT

kbjbryhdnzg7d6tcq1x62ct4xd3rq66d
wvcm95rfj0nrjm4k50802gn7gz3y2jdc
suH9QuVeRdsOAgG3mD5KvfXgHNU5iFGWRlQLW139fDJChKs59dcbN50iSaSRN+VIlFrpzzPX4HW7VcmULOj/5Q==

Verified for

Meta
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:193.182.234.44 include:mailgun.org include:_spf.100procent.com include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:w07ink25@ag.eu.dmarcian.com; ruf=mailto:w07ink25@fr.eu.dmarcian.com;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCQGxqh5TBDea9VqGmNVEHjXjpF4TKnlquh38ntN5TiKQmch9JJuz6kl39IUVskCK5d23NmUgTOZsbMcS1Alj…
s1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8QW05qXshQXx0KEUA85c0rX/6Ov6PcJVKlTJ46mawdP50gHccAdcL7rAZmgGa8/SVZWByBxogBNNAsq24uyNbYQI+cSQ…

selectors probed

Certificate (current)

R13

from 2026-05-08 to 2026-08-06

Expires in 66 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.tomtit.se/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP uses wildcard sources
weak frame protection
missing Referrer Policy

Header values

x-frame-options: ALLOW-FROM https://play.mediaflow.com
permissions-policy: accelerometer=(), autoplay=(), camera=(), encrypted-media=(), fullscreen=*, geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), usb=()
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' https://*.cloudfront.net https://www.googletagmanager.com https://cdn.jsdelivr.net https://*.cookiebot.com/ https://*.inviewer.se https://*.mediaflow.com https://m.mediaflow.com https://*.mediaflowpro.com https://*.facebook.net https://*.facebook.com https://*.google.com https://*.google.se https://*.doubleclick.net https://tb.de17a.com https://mfstatic.com; connect-src 'self' https://*.cloudfront.net https://www.googletagmanager.com https://cdn.jsdelivr.net https://*.cookiebot.com/ https://*.inviewer.se https://*.mediaflow.com https://m.mediaflow.com https://*.mediaflowpro.com https://*.facebook.net https://*.facebook.com https://*.google.com https://*.google.se https://*.doubleclick.net https://tb.de17a.com https://mfstatic.com; object-src 'none'; block-all-mixed-content; img-src 'self' data: https://*.cloudfront.net https://www.googletagmanager.com https://cdn.jsdelivr.net https://*.cookiebot.com/ https://*.inviewer.se https://*.mediaflow.com https://m.mediafl
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin

Links to (13)

Linked from (1)

telge.se×1