kino.no

HTML metadata

Title

Forsiden - Film & Kino

Description

Kino.no er nettsiden til Film & Kino - foreningen for kinobransjen i Norge.

Language

nb-NO

Generator

All in One SEO (AIOSEO) 4.9.6.2

Canonical

https://kino.no/

Feeds

Film & Kino » strøm RSS
Film & Kino » kommentarstrøm RSS

Open Graph

url: https://kino.no/
title: Forsiden - Film & Kino
locale: nb_NO
site name: Film & Kino -
description: Kino.no er nettsiden til Film & Kino - foreningen for kinobransjen i Norge.

Technology

Server: nginx-rc
CMS: WordPress
jQuery: 3.7.1

Analytics

Google Analytics
Google Tag Manager

Third-party hosts loaded (3)

gmpg.org×1
www.google-analytics.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

GLOBALCONNECT AS

Created

2012-09-27

Updated

2025-09-27

Name servers

a.ns.isp.as2116.net
b.ns.isp.as2116.net
c.ns.isp.as2116.net
d.ns.isp.as2116.net

DNS records live

NS

a.ns.isp.as2116.net
b.ns.isp.as2116.net
c.ns.isp.as2116.net
d.ns.isp.as2116.net

MX

0 kino-no.mail.protection.outlook.com

Verified for

Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:_spf.sndr.no ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkSHcrclVIT0K28/6eNirMvkZi2DrwtmhnAQ0597HAJmLGkmB4mW8ou6YuxQ1QqsOAvCP1xxaOHKY1…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC19r7pbTSSWqjoqoGtNS4GCYSxRUeTldprigTaAYd3ulFTxdJdYOI0WRXQ8YWp/k9YdMdEDTuFqtnUwFi/iW…

selectors probed

Certificate (current)

R13

from 2026-03-14 to 2026-06-12

Expires in 12 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://kino.no/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), interest-cohort=(), browsing-topics=()
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://use.typekit.net https://www.youtube.com https://player.vimeo.com https://platform.twitter.com https://www.instagram.com https://unpkg.com https://api.mapbox.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://unpkg.com https://api.mapbox.com; img-src 'self' data: https: https://www.google-analytics.com https://www.googletagmanager.com https://i.ytimg.com https://*.tile.openstreetmap.org https://unpkg.com https://api.mapbox.com https://*.tiles.mapbox.com; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://typekit.com https://fresnel.vimeocdn.com https://unpkg.com https://api.mapbox.com https://events.mapbox.com; frame-src '