universityadmissions.se
HTML metadata
Technology
- Server
- Apache
- CMS
- Gatsby
- Stack
- Java, Django
- Analytics
-
- Plausible
Third-party hosts loaded (2)
- static.queue-it.net×2
- plausible.io×1
DNS records live
- NS
-
- ns01.osl.basefarm.net
- ns01.sth.basefarm.net
- MX
-
- 10 mailin.antagning.se
- Verified for
-
- HARICA
Email authentication strong
- SPF
-
v=spf1 mx ip4:164.40.179.118 ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc.adm@universityadmissions.se; ruf=mailto:dmarc.adm@universityadmissions.se;policy: quarantine - DKIM
-
- dkim:
v=DKIM1; k=rsa; s=email; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzVlVSTcpQKFs9iw++aZ1oL48TifSURJhhaqKrc6AW7CA3NZ5oEKWgB1n1h+le2/11U3Vnd2P0a…
selectors probed - dkim:
Certificate (current)
GEANT TLS RSA 1
Expires in 188 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak content type protection
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(), autoplay=(), camera=(), encrypted-media=(), geolocation=(), gyroscope=(), microphone=(), midi=(), screen-wake-lock=(), usb=(), magnetometer=()- x-content-type-options
nosniff, nosniff- content-security-policy
default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https://plausible.io https://universityadmissions.se https://vanta.antagning.se *.queue-it.net https://dl.episerver.net https://www.gstatic.com/recaptcha/ https://www.recaptcha.net https://www.gstatic.cn/recaptcha/ https://uhrfaq.samres.services https://uhrchatt.samres.services https://www.google.com/recaptcha/; style-src 'report-sample' 'self' 'unsafe-inline' https://uhrfaq.samres.services https://uhrchatt.samres.services; object-src 'none'; connect-src 'self' *.queue-it.net https://plausible.io https://www.recaptcha.net https://uhrfaq.samres.services https://uhrchatt.samres.services; img-src 'self' 'report-sample' data: blob: https://universityadmissions.se; worker-src 'none'; font-src 'self' data: https://uhrfaq.samres.services https://uhrchatt.samres.services; frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://www.recaptcha.net recaptcha.net; base-uri- strict-transport-security
max-age=31536000; includeSubDomains; preload