indexo.dev

trastad.se

.se crawl

First seen 2026-05-27 · Last seen 2026-05-30 · ok HTTP/1.1 200 386 ms crawled 2026-05-30

SE · 193.234.103.234 · AS51821 Cloudist AB

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title
Hem | Trästad Sverige
Generator
WordPress 6.3.8
Canonical
https://www.trastad.se/

Open Graph

url
https://www.trastad.se/
title
Hem | Trästad Sverige
locale
sv_SE
site name
Trästad Sverige

Technology

Server
nginx
CMS
WordPress 6.3.8
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts
Social widgets
  • YouTube Embed

Third-party hosts loaded (3)

  • fonts.gstatic.com×1
  • www.googletagmanager.com×1
  • www.youtube.com×1

Social

Contact

Email
Phone

DNS records live

NS
  • ns1.loopia.se
  • ns2.loopia.se
MX
  • 10 trastad-se.mail.protection.outlook.com
  • 20 smtp05.svensktnaringsliv.se
  • 20 smtp06.svensktnaringsliv.se
TXT
  • spp/kNO48uWk1QWyaoauVC4+Fy7dd79Zcu2pFfgaUylKasNH+XB91I50CB6yzOhRDHwD09Yk/2XNw8ZgFxq94A==
Verified for
  • Microsoft 365

Email authentication partial

SPF
v=spf1 mx include:spf.protection.outlook.com include:_spf.hellodialog.com ~all
softfail (~all)
DMARC
v=DMARC1; p=none; rua=mailto:dmarc@svensktnaringsliv.se; adkim=s; aspf=s;
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

E8
from 2026-05-20 to 2026-08-18
Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.trastad.se/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'

Links to (3)

Linked from (1)