helsedirektoratet.no

HTML metadata

Title: Helsedirektoratet
Description: Helsedirektoratet gir råd og veiledning til helse- og omsorgstjenestene i Norge. Vi jobber for god folkehelse, forebygging og likeverdige helsetjenester for alle.
Language: nb

Open Graph

url: https://www.helsedirektoratet.no/
title: Helsedirektoratet
locale: nb
site name: Helsedirektoratet
description: Helsedirektoratet gir råd og veiledning til helse- og omsorgstjenestene i Norge. Vi jobber for god folkehelse, forebygging og likeverdige helsetjenester for alle.

Technology

Server: Apache
CMS: Gatsby

Analytics

Google Analytics
Google Tag Manager

Third-party hosts loaded (3)

unpkg.com×2
www.google-analytics.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Norsk Helsenett SF

Created

2008-01-29

Updated

2026-01-29

Name servers

nsx1.nhn.no
nsx2.nhn.no

DNS records live

NS

nsx1.nhn.no
nsx2.nhn.no

MX

0 helsedirektoratet-no.mail.protection.outlook.com

TXT

Show 8 TXT records

d3540a76d895405a391fbdd44c08c506d712fe3c2319850736aa51b69b12b67c
postal-verification FD5DS6F5BJM7SXl7qYbO79cbObsrwk6J
e30326af4c5d0e278d22aa14bc6a58322b5e1619fe79370c8b15adc63e3b4ffb
91A9xJ9yBP7VkGiLN6K68IFJAty+zkI1wFdBESvRDCx2zDbRclmQixKXO6Y3zjPga6lR+imGLJN2fM+Wdkv3FQ==
bd3b85eea9f0723f68e6f3c941735a64dbbe919091a8d3ad08a830b762df2bc5
827aef53cc0818b5ee478338382d78f978d232caeafcabe09f4ad6c730970392
7f91b8e5c59872cddbcff9472e99d7ba817fdf0342fbebf5fb682ed5b0300796
39a4e37e1c7fa51f4fba01d2f09e81904e368d0f4f7063aa1b6370d5abfe33e1

Verified for

Atlassian
Google
Microsoft

Email authentication strong

SPF

v=spf1 include:spf1.helsedirektoratet.no include:spf2.helsedirektoratet.no ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc@nhn.no,mailto:dsm1h58m@ag.dmarcian.com; ruf=mailto:dmarcparked@nhn.no

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4sw+Xd2WjI6TysnqVOPNMU9WG0Ko/zGKne5yBQLJ6MUEp4j/bkSYywKubTVpSb2bdxDLmOVpvgR64sQX50E…

selectors probed

Certificate (current)

R12

from 2026-04-27 to 2026-07-26

Expires in 66 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.helsedirektoratet.no/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: base-uri 'self' *.uxtweak.com ;default-src 'self' *.tagmanager.google.com *.googletagmanager.com;font-src 'self' fonts.gstatic.com data:;form-action 'self' 'unsafe-inline' export.highcharts.com/ data:;frame-src 'self' *.brightcove.net bcove.video *.youtube.com *.vimeo.com *.powerbi.com *.google.com statistikk.helsedirektoratet.no https://app-folkehelseprofiler-frontend-prod-apbqh2hhgdhua3dr.norwayeast-01.azurewebsites.net/ data: blob:;img-src 'self' *.google-analytics.com *.tagmanager.google.com *.googletagmanager.com *.vimeocdn.com *.uxtweak.com data: blob:;object-src 'none';script-src 'self' 'unsafe-inline' code.highcharts.com/;style-src 'self' 'unsafe-inline' *.tagmanager.google.com https://parsleyjs.org/src/parsley.css https://fonts.googleapis.com;script-src-elem 'self' 'unsafe-inline' https://www.google-analytics.com https://www.googletagmanager.com *.silktide.com *.uxtweak.com code.highcharts.com/ https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https:
strict-transport-security: max-age=31557600