indexo.dev

xact.se

.se crawl

First seen 2026-05-25 · Last seen 2026-05-25 · ok HTTP/1.1 200 1744 ms crawled 2026-05-29

IE · 13.69.228.2 · AS8075 Microsoft Corporation

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Välkommen till XACT
Description
Xact, smarta fonder till låg kostnad
Language
sv
Translations
  • en
  • sv

Technology

Server
Microsoft-IIS
Fonts
  • Adobe Fonts

Third-party hosts loaded (3)

  • images.ctfassets.net×10
  • kit.fontawesome.com×1
  • use.typekit.net×1

DNS records live

NS
  • a.dns.tele2.net
  • b.dns.tele2.net
  • c.dns.tele2.net
  • ns1.handelsbanken.se
  • ns2.handelsbanken.se
  • ns3.handelsbanken.se
TXT
Show 8 TXT records
  • 2hpv9rzm90gcmvf1wqq8cwy565xpxxjq
  • 46jlzzmqch4wc3130ssc7hxk5p4pc83m
  • _299h4xt5pvivf586q1zfl0sh63z6v1w
  • _ivxqnhid2245seyuz7rcis8f0ec0kee
  • _kpa6yy49xcodkudytkwv9r9ho3607jh
  • gbtxz2hw72xmp7b81hv34h7ygklm6fst
  • k5nhjn7120g5m3trz2k62q753t6r1xs7
  • shb-xact.azurewebsites.net

Email authentication no MX

SPF
v=spf1 -all
strict (-all)
DMARC
v=DMARC1; p=reject; rua=mailto:handelsbanken@rua.netcraft.com; ruf=mailto:handelsbanken@ruf.netcraft.com; fo=1;
policy: reject (enforced)
DKIM
no key found at common selectors

Certificate (current)

DigiCert EV RSA CA G2
from 2025-11-12 to 2026-12-11
Expires in 193 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://xact.se/

present
  • strict-transport-security
findings
  • short HSTS max-age
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
strict-transport-security
max-age=2592000

Links to (8)

Linked from (1)