fafo.no

HTML metadata

Technology

Server

Apache

CMS

Joomla

Third-party hosts loaded (1)

• embed.acast.com×1

Social

• facebook
• instagram
• youtube
• linkedin
• bluesky

Contact

Phone

• +47 22 08 86 00

DNS records live

NS

• dns1.itpays.net
• dns2.itpays.net
• dns3.itpays.net
• dns4.itpays.net
• dns5.itpays.net
• dns6.itpays.net

MX

• 0 fafo-no.mail.protection.outlook.com

Email authentication strong

SPF

v=spf1 a mx include:spf.itpays.no include:spf.protection.outlook.com ip4:51.120.82.10 -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;rua=mailto:db4251c5c6@rua.easydmarc.eu;ruf=mailto:db4251c5c6@ruf.easydmarc.eu;fo=1;

policy: quarantine

DKIM

• selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCaV5GBCneo+H8vRAyW7zJXSBQ3E8fP9gyigrtXUPjLbk802VH7vQziT/+NThuj537C3bXDzY8S/bv+xTlCOv…
• selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+SEYjTy7yL/mtCxNOVBXkRqSJC8UY7LdE/Rl3FtmW5Nvt8GO43egkjaCIHhUhvokAqJtrBxZAVGmZl…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://fafo.no/

present

• x-frame-options
• x-content-type-options
• referrer-policy

findings

• missing HSTS
• missing Content Security Policy
• weak content type protection
• missing Permissions Policy

Links to (10)

• youtube.com×1
• openstreetmap.org×1
• nrk.no×1
• linkedin.com×1
• instagram.com×1
• frifagbevegelse.no×1
• fagbladet.no×1
• facebook.com×1
• digit-research.org×1
• bsky.app×1

Linked from (2)

• kompetansekompasset.no×1
• arbeidslivet.no×1