leka.kommune.no

HTML metadata

Title: Leka kommune
Language: nb

Technology

CMS: Joomla
jQuery: 1.12.4 known XSS (<3.5)
Stack: ASP.NET

Third-party hosts loaded (2)

cdn.jsdelivr.net×1
translate.google.com×1

Social

Contact

Email

Phone

Registration

Registrar

Domeneshop AS

Created

2000-05-19

Updated

2026-04-24

Name servers

ns1.bdm.microsoftonline.com
ns2.bdm.microsoftonline.com
ns3.bdm.microsoftonline.com
ns4.bdm.microsoftonline.com

DNS records live

NS

ns1.bdm.microsoftonline.com
ns2.bdm.microsoftonline.com
ns3.bdm.microsoftonline.com
ns4.bdm.microsoftonline.com

MX

1 leka-kommune-no.mail.protection.outlook.com
5 naroysund.in.tmes.trendmicro.eu

TXT

Show 5 TXT records

mscid=otLZgRj45n2IYA7IR1RfM6PUBNXnAaMv6AWQWzPI0nP/ri9436YED2jwz2M8Xwj2bs/7wlMUrivZPH3XqP6ACw==
8j9g7T2Gu/JsycoxKfkSpnu3yJ+MRQWnT0dYw8IjyYOlUlszw/t7iOBLQqDd8Kcz7oaWda3z/oUOuBVFymnlzw==
tmes=d3818d31a4337f26205ddbd067c564ca
DomainVerification=18SY5NJE5BRMLRTIVIPP4AQI5XXKPMQI3NO8T2NTUGHQ0JF6E6D33X29V8CP7M82
DomainVerification=6YYLWDV1B4FGR552LIFFK9CO20KKS1LHGHTE7L3FLF0JCTS68F6CW5Q0MQJ9DURZ

Verified for

GlobalSign
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:msg-out._spf.onevoice.no include:sendgrid.net include:utpost.acos.no include:spf.mailjet.com ip4:84.16.209.205 -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email; ruf=mailto:dmarc@ynks.onmicrosoft.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtpUiC1PyrV0rxrkU1oDh6/kXZycua12BByUS4B0KmKkMl5OfMIlo5e19ZTCxpabXUrnW8Y/E5oTe7/crSWd…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf08PvifvfIwsaQRudNKtH9QE1CKlcyDGH0BAEBmkE+vDPKue87lYgIeg3Rl1i09WN9eQO7h66sxyg66v3…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0KhDkvuI6bgxJ3nz/37PjBnORBW5Ag2GTv0wOAxI0hzUW9pJrJPXhCXt58RvjSNwI5GuoQm+lY+ROkxtk1+30QO…

selectors probed

Certificate (current)

R12

from 2026-04-22 to 2026-07-21

Expires in 47 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.leka.kommune.no/

present

strict-transport-security
content-security-policy
x-frame-options

findings

missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self';
strict-transport-security: max-age=157680000