hamar.kommune.no

.no crawl

First seen 2026-05-28 · Last seen 2026-05-31 · ok HTTP/1.1 200 536 ms crawled 2026-05-31

NO · 37.143.48.140 · AS29492 Eidsiva Digital As

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title

Hamar kommune - Forsiden

Language

Generator

CMS

Canonical

https://www.hamar.kommune.no/

Feeds

Nyheter RSS

Open Graph

url: https://www.hamar.kommune.no/
title: Hamar kommune - Forsiden
locale: no_NO
site name: Hamar kommune

Technology

Server: Apache

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Email

postmottak@hamar.kommune.no

Phone

DNS records live

NS

ns1.nordkapp.net
ns2.nordkapp.net

MX

10 mail2.hedmark-ikt.no
10 mail3.hedmark-ikt.no
30 mail1.hedmark-ikt.no

TXT

Show 8 TXT records

spf2.0/pra
8j47fmjfgncooif12mjr8mm3kh
4f2366e3288da9b62e4e73791e2cfa68f6fa598c3dff14cd3a540dbddd3f5250
0ea379601761daf0a1b6aa96b80d5d6bd94137f66a98c5e01ddb8502b95d900f
DomainVerification=3LG40EQ8L16GJYWDX6UD32SHR0LM26HIWPH1GVQUNG2OYICXCNWBLRQ32OYIE8M5
xl2mhd/XJAzkhvXUcZ1tBL5DCCX/6AhpkHmgpAA2GmVbhe6rgQigHsiAfzKdrZjuU8g0t04D2URRjIx1ti196A==
LMyLrJEMzMpiS8kRJLXvQPNUc0cWZquyjWCIVuzjDBRbzmpVIqImpmiu90hAnak4LovX6tKb+EmQc1P71xbH7w==
d0i8m5p6u5e2e0bjg1vt45p62u

Verified for

Apple
GlobalSign
Meta
Microsoft 365

Email authentication partial

SPF: v=spf1 include:hedmark-ikt.no include:onevoice.no a:scan.evry.com -all
strict (-all)
DMARC: v=DMARC1;p=none;pct=100;aspf=r;adkim=r;rua=mailto:dmarc@hedmark-ikt.no
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

GlobalSign GCC R6 AlphaSSL CA 2025

from 2026-02-12 to 2027-03-16

Expires in 288 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.hamar.kommune.no/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'
strict-transport-security: max-age=157680000