fremtind.no

HTML metadata

Title: Fremtind Forsikring
Description: Vi er stolt leverandør av forsikring i bank. Vi er her for å hjelpe deg.
Language: no

Technology

CDN: Amazon CloudFront
Server: istio-envoy

Third-party hosts loaded (1)

cdn.sanity.io×12

Social

Contact

Phone

915 651 232

Registration

Registrar

Domeneshop AS

Created

2018-11-02

Updated

2025-10-05

Name servers

ns01.sparebank1.no
ns02.sparebank1.no
ns04.sparebank1.no
ns03.sparebank1.no

DNS records live

NS

ns01.sparebank1.no
ns02.sparebank1.no
ns03.sparebank1.no
ns04.sparebank1.no

MX

10 de-smtp-inbound-1.mimecast.com
10 de-smtp-inbound-2.mimecast.com

TXT

Show 9 TXT records

_ys8aijfwzstkkbt6k2vxibd1qi6mrib
_clwmyj7noj44kc15ls0qvlmi9mny750
46e81535bbb34e4e55bcecfdcec7ff1b2bc7c84a95c04cffc7b25219deae741d
q9msjv4y84h30bzx8tq6r87jzrg0mgx9
_8v5397xabqyg1ljg30i9gatnf19lkox
_kd5vyzvogxuai0ex35zcio6dks77rqb
jetbrains-domain-verification=e3vfa0cksnacqpdsxqz3oibzq
3BlzUj60Dw4tmnLAT8wM08Fr5dDJsoMelPbzbeYJ75hftZWJHfQS+Llqld80oimW9gxJplH7m6JrcCVelusHMA==
mixpanel-domain-verify=96ae20f6-ec79-49b8-a0a8-24fda50dce16

Verified for

Adobe
Atlassian
Slack

Email authentication strong

SPF

v=spf1 ip4:185.68.171.16/28 include:_spf_1.sparebank1.no include:_spf_2.sparebank1.no include:_spf_3.sparebank1.no include:_spf.questback.net include:spf.protection.outlook.com include:de._netblocks.mimecast.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc-reports@sparebank1.no,mailto:7660fc4a-3930-4ce9-8f31-9f9eab955ef3@rsingest.eu; ruf=mailto:dmarc-forensic@sparebank1.no,mailto:7660fc4a-3930-4ce9-8f31-9f9eab955ef3@rsingest.eu; adkim=r; aspf=r; ri=7200;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOgO/2gBKZdOFj9Jd7KEOmo53iZnVvgKKH9os2V9ZSk0cCJfu9T+TuR/BOfm7tFT403Ty/RLD2Wz9nGoWgJp…

selectors probed

Certificate (current)

R12

from 2026-04-22 to 2026-07-21

Expires in 50 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.fremtind.no/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy

Header values

x-frame-options: DENY
permissions-policy: camera=(), display-capture=(), fullscreen=(self), geolocation=(self), microphone=(), screen-wake-lock=(self), web-share=(self)
x-content-type-options: nosniff
content-security-policy: base-uri 'self'; default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'nonce-d54303fc356c3d7eefaed441c169e8b4' blob: http://localhost; img-src 'self' data: https://*.sanity.io http://*.sanity.io https://*.mynewsdesk.com; connect-src 'self' https://*.sentry.io ws: http://localhost https://*.mynewsdesk.com; frame-src https://*.fremtind.no https://*.youtube.com https://youtu.be; frame-ancestors 'self'; report-uri https://o4506218797006848.ingest.sentry.io/api/4506739280510976/security/?sentry_key=2d0288d742ab96cf064745adaa1520a9; report-to csp-endpoint
strict-transport-security: max-age=63072000; includeSubDomains; preload