namdalnf.no

.no crawl

First seen 2026-06-02 · Last seen 2026-06-03 · ok HTTP/1.1 200 443 ms crawled 2026-06-03

DE · 146.0.231.246 · AS29066 velia.net Internetdienste GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Forside
Language: no

Open Graph

url: https://namdalnf.no/forside
title: Forside

Technology

Server: Apache
jQuery: 3.6.0
Stack: PHP

Cookie consent

Cookiebot

Third-party hosts loaded (1)

consent.cookiebot.com×1

Social

Contact

Email

10marte@namdalnf.no

Registration

Registrar

DCODE WEBSOLUTIONS AS

Created

2019-06-07

Updated

2025-06-07

Name servers

ns2.123onweb.no
ns1.123onweb.no
ns3.123onweb.no

DNS records live

NS

ns1.123onweb.no
ns2.123onweb.no
ns3.123onweb.no

MX

10 namdalnf-no.mail.protection.outlook.com

TXT

5c97d16ef17c49b10994c7a5d6f0a6c7

Email authentication partial

SPF: v=spf1 include:spf.protection.outlook.com include:_spf.getynetmail.com -all
strict (-all)
DMARC: v=DMARC1; p=none; rua=mailto:d05b66f663ab4699b5610fa1420ed70f@dmarc-reports.cloudflare.net
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

from 2026-05-18 to 2026-08-16

Expires in 73 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://namdalnf.no/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: manifest-src 'self'; frame-ancestors 'none'; frame-src 'self' *.cookiebot.com https://event.getynet.com https://boardportal.getynet.com; default-src 'self' https://player.vimeo.com; media-src 'self' https://*.vimeo.com https://*.vimeocdn.com https://*.youtube.com https://*.youtube-nocookie.com; script-src 'self' 'nonce-f717501e6d09d609336dbc8509866cd19322fa3b5c5e1889e07e59ccf2a751b3' 'unsafe-eval' 'unsafe-inline' *.cookiebot.com https://www.youtube.com; connect-src 'self' *.cookiebot.com https://*.pusher.com; img-src 'self' *.cookiebot.com https://event.getynet.com https://boardportal.getynet.com https://s16.getynet.com https://*.cloudfront.net/; style-src 'self' 'unsafe-inline' stackpath.bootstrapcdn.com fonts.googleapis.com; base-uri 'self'; form-action 'self'; font-src 'self' stackpath.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com;
strict-transport-security: max-age=63072000; includeSubDomains; preload