vr.se
HTML metadata
Social
Contact
- Phone
DNS records live
- NS
-
- ephemera.nmugroup.se
- origo.nmugroup.com
- unit.nmugroup.com
- vertex.nmugroup.se
- TXT
-
Show 5 TXT records
apple-domain-verification=DCayAXEf7e3eE2y9MS=8C5CA0B86B0787EBC638EDB242138E775DADDF12google-site-verification=8BBvwxQ0y2kCwq-An6VoPDXFnWI3PVyWB3JsvM4fhQkMS=ms70261768HARICA-Yrd0f1lPFqfW7LCDuyV
Email authentication partial
- SPF
-
v=spf1 mx include:_spf.ungapped.io include:servers.mcsv.net ip4:193.10.44.226 ip4:81.93.173.201 include:_spf.staysecuregroup.com ip4:83.241.254.81 ip4:83.241.254.75 ip4:193.10.44.13 include:mail.sitevision-cloud.net include:spf.protection.outlook.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=nonepolicy: none (monitoring only) - DKIM
-
Show 4 DKIM selectors
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApENuSDfuByk0LSvUULhw3HzPdzEV/yJ/MCxIhy2qwy+fQCljRHYfvLyWTzm6e3GqrOYIe/teC1kE+a… - k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtje7SOSAOo+RTQcdrrSFcXwxMS5yHkkdSYZ4vhqi6alfnZvTVEmXcKxN7K5j7DQztQxi47TNQEGuasFVH8… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQ72X2elizmERa6U48P8+Yom6SDVoqgExxcioDy+VPuiAzpCI3NjpKlwFlm/VgsEMr7Q8Con0+aSs6eHI/Nw1n1A…
selectors probed - selector1:
Certificate (current)
R12
Expires in 73 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' https://*.vr.se; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://tm.vr.se/ https://api.kltr.nordu.net https://*.reachmee.com https://validation.sitevision.se/w3c-validator/check; style-src 'self' 'unsafe-inline'; font-src * 'self' data:; img-src 'self' data: blob: https://*.vr.se https://www.googletagmanager.com; frame-ancestors 'none'; frame-src 'self' https://tm.vr.se https://play.vr.se https://api.kaltura.nordu.net https://api.kltr.nordu.net https://*.reachmee.com; object-src 'none'; connect-src 'self' https://www.googletagmanager.com https://tm.vr.se https://api.kltr.nordu.net https://swecris-api.vr.se; base-uri 'self';- strict-transport-security
max-age=31536000