norad.no

HTML metadata

Title

Norad | Norad.no

Language

no

Canonical

https://www.norad.no/

Translations

en
no

Open Graph

url: https://www.norad.no/
locale: no
site name: Norad

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Email

postmottak@norad.no

Phone

//+4722304050

Registration

Registrar

MarkMonitor Inc.

Created

1999-11-14

Updated

2026-03-26

Name servers

ed.ns.cloudflare.com
ariadne.ns.cloudflare.com

DNS records live

NS

ariadne.ns.cloudflare.com
ed.ns.cloudflare.com

MX

0 norad-no.mail.protection.outlook.com

TXT

Show 11 TXT records

atlassian-domain-verification=nciKikD9VKN6w4Soi/a64uh8upIqGygC69uvA5UdXCzeZouvnlUyzS7k4KcCeVAe
cisco-ci-domain-verification=3c5af42641258ac2a0c749de5a914f871202fc159ec9d5403799e2d0574c0e70
google-site-verification=DpQaLGMy95VCMoBrf7LjTwxaczFT_dVoHMsFMKekYGM
h2tnckdrlbumn050uqnabregm3
insomnia-validation=76d0dc16f7f74aa39bf6bcb2e4923a5b1422c9423c005c72a7c734666bccddfe
1c6e35713fef369f9d750a3916682b0fceb9a8abe3921859a607ee648d9d40b5
2621cca1f7de424ded028a8a65d47c985487a7c60b42c4ace9907bc7df6e24a4
MS=ms44901708
UzBrvTkCP6jdXdIrEEjs11prEnQaobP7Vlp3c8VMPUQktJYqv62BTlZDYKC3KC+aKNGzdxwOqNO8iP9kAQLhcw==
apple-domain-verification=Jypqkc6O7NqaV0yC
apple-domain-verification=WUqEQjRXRpZl6W4D

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:_spf.anpdm.com include:spf.eu.exclaimer.net include:spf.flowmailer.net include:_spf.machina.no include:sendgrid.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:1qehfzgl@ag.eu.dmarcadvisor.com;

policy: reject (enforced)

DKIM

Show 5 DKIM selectors

default: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCoxSGDfL0lNH4pGL4ZhlxlwVJT hur9ZvurxTJTTK1jeA76FiUpZUDzKTeJsPV/4Puj6UlkftkyKboKUHZ2O…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VdcngoLb6I8Cpfi7OQ5ZYeAMVGE7hgFdpCje4hVUFi6wMKlwAaFkWEn9b4nsDq3Cm3yI/lpqFyexx…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4lgyd9GvhaNAGnLXnqaLlLlAeHsLjMHNWoK87bDGFTUkJEtNPGdrAjlN/JUPsX/A//aMWwXm1b4+0whB5kr…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNg7TNAElCqtbTQc45mvYIVcFZjXsnGAA/jKOONvS3DLm6x+idlpruxQkGm364lwp3rctnFfyyUpkWDC5B…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aerQcUxuSH1aHF/ilPZNq0issH2IrzE+bGkdefIgwb4ihI+ni2aIQFcMJ4uBNZoZqd363eWQVUrK37QuO…

selectors probed

Certificate (current)

E8

from 2026-04-26 to 2026-07-25

Expires in 67 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.norad.no/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), encrypted-media=(), fullscreen=*, geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), usb=()
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; default-src 'self'; style-src 'self' 'unsafe-inline'; connect-src https://www.facebook.com/ https://consent.app.cookieinformation.com/ https://stats.g.doubleclick.net/ https://surveystats.hotjar.io https://region1.analytics.google.com 'self' https://www.google.no https://heatmaps.monsido.com wss://ws.hotjar.com https://vc.hotjar.io https://metrics.hotjar.io https://dc.services.visualstudio.com https://region1.google-analytics.com https://policy.app.cookieinformation.com https://content.hotjar.io https://www.google-analytics.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://ws.hotjar.com https://js.monitor.azure.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://js.monitor.azure.com https://www.google-analytics.com https: ; img-src 'self' data: https://connect.facebook.net https://www.google.no https://tracking.monsido.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://www.googleta
strict-transport-security: max-age=31536000