indexo.dev

doffin.no

.no crawl

First seen 2026-05-29 · Last seen 2026-05-29 · ok HTTP/1.1 200 372 ms crawled 2026-05-31

NO · 51.120.98.193 · AS8075 Microsoft Corporation

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Doffin, database for offentlige innkjøp
Description
Doffin, database for offentlige innkjøp
Language
nb

Technology

Server
nginx
Fonts
  • Google Fonts

Third-party hosts loaded (1)

  • fonts.googleapis.com×1

Registration

Registrar
Domeneshop AS
Created
2021-04-28
Updated
2026-03-31
Name servers
  • ns1.hyp.net
  • ns3.hyp.net
  • ns2.hyp.net

DNS records live

NS
  • ns1.hyp.net
  • ns2.hyp.net
  • ns3.hyp.net
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
TXT
  • ikf6vh3haapbijgorvjc21nu94
  • l6ls9ctguvu65h36tosrvdeeut
Verified for
  • Atlassian
  • Google

Email authentication partial

SPF
v=spf1 include:eu-supply.com include:_spf.atlassian.net include:_spf.google.com ~all
softfail (~all)
DMARC
v=DMARC1; p=none
policy: none (monitoring only)
DKIM
  • google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCsWKcW/byOfBJig2q2tEyG6i28zQJugWhi/JKtiN61hB/8zv2/DY2asl2bz+g8CNoedn642HW1wbzbmh/zzV…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1gU64wM331J2x42nJ5l0VWV9mz2yyXOQwlgqvQ5eOkANWTV43m7GSCUU9MBBKHDpm6+8o9nY+5vm506tZ…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8tvSmzHnj/KkHIVAuonmai05ZFiat3Js8GETYTxg0Pfb3773i53A56TIx89vrodwSgVPFTQFqQ1Tg/KOpQM6YlC…
selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2
from 2025-09-24 to 2026-10-05
Expires in 126 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://doffin.no/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(), microphone=(), camera=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' https://sporing.dfo.no; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self' https://api.doffin.no https://betaapi.doffin.no https://dof-notices-test-api.azure-api.net https://dof-webclient-prod-app-staging.azurewebsites.net/ https://dof-notices-prod-app.azurewebsites.net https://dof-search-notices-prod-app.azurewebsites.net https://dof-notices-dev-app.azurewebsites.net https://dof-search-notices-dev-app.azurewebsites.net https://dof-notices-test-app.azurewebsites.net https://dof-search-notices-test-app.azurewebsites.net https://sporing.dfo.no; frame-src 'self' https://app.powerbi.com https://msit.powerbi.com https://login.microsoftonline.com https://player.vimeo.com; base-uri 'self'; form-action 'self'; object-src '
strict-transport-security
max-age=31536000; includeSubDomains

Linked from (1)