utlegg.app

HTML metadata

Technology

Analytics

• Google Tag Manager

Third-party hosts loaded (1)

• www.googletagmanager.com×1

DNS records live

NS

• ns1-37.azure-dns.com
• ns2-37.azure-dns.net
• ns3-37.azure-dns.org
• ns4-37.azure-dns.info

MX

• 10 inbound-smtp.eu-central-1.amazonaws.com

TXT

• 9pzfxklhqpckp0pcrvs2h1dkdxyf2dmt

Email authentication weak

SPF

not published

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEw6AXhZNdwrVG+wwc0ZTyg0JC9kUZKA+7YyEX3+MFLSsLpyoqMwWnLISAGWBWUCGLtnTtDwyu4LGxJ2EO…
• s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3M+Y4Q/rpUniSNbMoMtV7/uTBU8w0a5JlG1W+1wZmgl3HuUUm36hxV+6w+nvagdbS+slPIa/M63rym839…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://utlegg.app/

present

• strict-transport-security
• x-content-type-options
• referrer-policy

findings

• short HSTS max-age
• missing Content Security Policy
• missing frame protection
• missing Permissions Policy

Linked from (1)

• utleggsappen.no×1