banenoreiendom.no

.no crawl

First seen 2026-05-20 · Last seen 2026-05-30 · ok HTTP/1.1 200 999 ms crawled 2026-05-27

SE · 217.114.94.2 · AS30811 Optimizely AB

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Bane NOR Eiendom
Description: Bane NOR Eiendom bidrar til bærekraftig byutvikling ved å utvikle attraktive og effektive kollektivknutepunkt. Vi er Norges ledende knutepunktutvikler.
Language: nb-NO
Canonical: https://www.banenoreiendom.no/

Open Graph

url: /
title: Bane NOR Eiendom

Technology

CDN: Cloudflare

Cookie consent

Cookiebot

Fonts

Adobe Fonts

Third-party hosts loaded (3)

use.typekit.net×3
consent.cookiebot.com×1
p.typekit.net×1

Social

DNS records live

NS

a.ns.isp.as2116.net
b.ns.isp.as2116.net
c.ns.isp.as2116.net
d.ns.isp.as2116.net

MX

10 0.mx.isp.as2116.net

TXT

da043b42517aed0cb430398e77b1d554b1c624e531ce3c47febbaa912bef06dd
_30s90tr2k4t67mu2l2y49zs0em0ufai

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-05-02 to 2026-07-31

Expires in 60 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.banenoreiendom.no/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' ; connect-src 'self' https://dc.services.visualstudio.com/v2/track https://pui.episerver.net/api/telemetryconfig https://maps.googleapis.com https://www.google-analytics.com https://region1.google-analytics.com/g/collect https://esp-eu.aptrinsic.com/ https://*.cookieinformation.com/ https://stats.g.doubleclick.net/j https://pagecorrect.monsido.com/ https://tr-shadow.snapchat.com/ https://tr.snapchat.com/ https://stats.g.doubleclick.net/ https://cdn.linkedin.oribi.io/partner/1648329/ https://vc.hotjar.io/sessions/3312419 https://*.hotjar.com https://*.jotform.com wss://eu-sockets.jotform.io https://oc-cdn-public-eur.azureedge.net/livechatwidget/configs/ ws://localhost:* wss://*.hotjar.com/api/v2/client/ws https://content.hotjar.io/ https://csp.withgoogle.com/csp/ https://*.cookiebot.com/ https://*.silktide.com/ https://js.monitor.azure.com/ ; font-src 'self' https://fonts.gstatic.com/ https://*.cloudfront.net/ https://*.typekit.net/; frame-src 'self' https://policy.ap
strict-transport-security: max-age=63072000; includeSubDomains; preload