nav.no
HTML metadata
Technology
- CMS
- Next.js
Registration
- Registrar
- Telenor Norge AS
- Created
- 1999-11-14
- Updated
- 2025-11-15
- Name servers
-
- domain1.telenor.net
- domain2.telenor.net
DNS records live
- NS
-
- domain1.telenor.net
- domain2.telenor.net
- MX
-
- 5 mxa-003ba702.gslb.pphosted.com
- 5 mxb-003ba702.gslb.pphosted.com
- TXT
-
Show 16 TXT records
atlassian-domain-verification=t1NTp/dp+GL3+xWubd/pZwdhQJr04G89l8EBEbq8KjSWty88d2hFjyU5ok/JjSDtahrefs-site-verification_bbbb4b9d5bec228c003fd4ce74cd7a0fcce5471cebfabff6efa4bae0512f77deZOOM_verify_YhmZOO2qS7uf9ekePbVHnwms-domain-verification=75e25860-6b3d-41d2-bd90-63f28c6a9fb2google-site-verification=AG3xQzxGB-thc0z6PXDV7yTxX-8OxtsbQsaBeFmdeREms-domain-verification=cb8483ec-234a-4539-8548-98f747c133adfavro-verification=4oyBbUHMOKegI6f7yjWzoGdVe-sRhVzwISX_a0CM94Sr670+0Ee9MeYmVQ9tH7hReyZRvLOUeFfuJMB2UCdkUJgJSQXxv0ZZNTTIu05uZn1jU49NFmUGYzq7O4Qdj3img==apple-domain-verification=PKrXVcADpu4K0wqXteamviewer-sso-verification=342b17a4f8724c05a316eb582b71cccagoogle-site-verification=Gi5H9euPezXzkP2XZ_wpegIBYNj8ruAh1qqiubBcUe84d1a81b4-f361-44fe-abc4-0624bfe70cfbjamf-site-verification=VIhdfH-HUj3MfpDqPJH32winclude:spf.flowmailer.netslack-domain-verification=Nd2dX889OsCFNhJxogpLi7O2reDTxSpATRXH2BJIdocker-verification=182f3aaf-a8b5-4ce7-857c-503ca3939adf
Email authentication strong
- SPF
-
v=spf1 ip4:155.55.50.204 ip4:155.55.50.205 ip4:155.55.50.24 include:spf.protection.outlook.com include:_spf.salesforce.com include:spf-003ba702.pphosted.com a:ai-p-s1-ext.ai.basefarm.net ip4:195.43.63.191/32 ip4:195.43.63.192/32 -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; sp=reject; aspf=r; adkim=r; fo=1; pct=100; rua=mailto:dsm1h58m@ag.dmarcian.com; ruf=mailto:dsm1h58m@fr.dmarcian.compolicy: reject (enforced) · sp=reject - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+hnZwuFJFktQoa4bSeXgpU4NDKKW1W7u9pgd3uhyVtA9RIsXNFx9uYdlAa2iPHuEmM2MUD58ycXCOiGhf3y… - s1:
v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkdl0oIAzZJ2QW4v9aOBK4dIdmsQW2asGY2seMsXavisj5XDg8IBJwxiTi8HfUJqFLNRN8C69d4cq7YknCmSs…
selectors probed - selector1:
Certificate (current)
Sectigo Public Server Authentication CA EV R36
Expires in 282 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src *.nav.no portal-admin.oera.no; script-src *.nav.no portal-admin.oera.no *.tingtun.no termer.no widget.uxsignals.com *.skyra.no *.psplugin.com *.puzzel.com *.taskanalytics.com nav.boost.ai 'unsafe-inline' 'unsafe-eval'; script-src-elem *.nav.no portal-admin.oera.no *.tingtun.no termer.no widget.uxsignals.com *.skyra.no video.qbrick.com play2.qbrick.com analytics.qbrick.com *.ip-only.net blob: *.psplugin.com *.puzzel.com *.taskanalytics.com nav.boost.ai 'unsafe-inline'; worker-src *.nav.no portal-admin.oera.no blob:; style-src *.nav.no portal-admin.oera.no 'unsafe-inline' *.psplugin.com *.googleapis.com *.gstatic.com; font-src *.nav.no portal-admin.oera.no data: video.qbrick.com play2.qbrick.com analytics.qbrick.com *.ip-only.net blob: *.psplugin.com *.skyra.no cdn.nav.no *.googleapis.com *.gstatic.com; img-src *.nav.no portal-admin.oera.no data: video.qbrick.com play2.qbrick.com analytics.qbrick.com *.ip-only.net blob: widget.uxsignals.com *.psplugin.com *.vimeocdn.com *.sky- strict-transport-security
max-age=31536000; includeSubDomains; preload