norva24.se

HTML metadata

Title: Norva24 - Teknisk infrastruktur under & ovan mark sedan 2015
Description: Norva24 Sverige hjälper kommuner, företag och fastigheter med VA, avlopp, underhåll och miljötjänster över hela landet. Ta del av innehållet & läs mer här!
Language: sv-SE
Generator: WordPress 6.9.4
Canonical: https://norva24.se/

Open Graph

url: https://norva24.se/
title: Norva24 - Teknisk infrastruktur under & ovan mark sedan 2015
locale: sv_SE
site name: Norva24
description: Norva24 Sverige hjälper kommuner, företag och fastigheter med VA, avlopp, underhåll och miljötjänster över hela landet. Ta del av innehållet & läs mer här!
updated time: 2026-04-27T17:30:30+02:00

Technology

Server: LiteSpeed
CMS: WordPress

Cookie consent

Cookiebot

Fonts

Google Fonts

Third-party hosts loaded (5)

cdn.jsdelivr.net×3
cdnjs.cloudflare.com×3
consent.cookiebot.com×1
fonts.googleapis.com×1
fonts.gstatic.com×1

Social

Contact

Phone

2025-08-26 21

DNS records live

NS

ns1.hyp.net
ns2.hyp.net
ns3.hyp.net

MX

0 norva24-se.mail.protection.outlook.com

TXT

atlassian-domain-verification=CwyJKtaadSxlj24pb8dcdL8ZwgGRJDTZW7TPH5Rppa69fGsnXM/9wAAd/BdISYHW
v=DMARC1;pct=20;p=quarantine;sp=reject;adkim=r;aspf=r

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:mailgun.org a:smtp.enivest.net a:smtp-b-out.enivest.net ip4:212.91.154.20 -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:iukb7lpq1f@rua.powerdmarc.pointtaken.no; ruf=mailto:iukb7lpq1f@ruf.powerdmarc.pointtaken.no; pct=100; fo=1;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBLAeEqojH0azFdNkIHyVNi95uPMdvcSFjVj4WIQv533at058KWEVaYJHEHh/eATG8SVMjw/gUPX6O…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKyDD9mTd1th+eBYYmuz7D/zIMfIVJfHNpbchE3M41MsSGalCEzv93fLwaaOW8hxKJSOuDRgR68vqG…

selectors probed

Certificate (current)

E7

from 2026-04-06 to 2026-07-05

Expires in 46 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://norva24.se/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: worker-src 'self' blob:; form-action 'self' https://gansub.com; upgrade-insecure-requests;, default-src 'self' https: data: blob:; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:; connect-src 'self' https:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; frame-src 'self' https:; worker-src 'self' blob:; upgrade-insecure-requests
strict-transport-security: max-age=63072000, max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: unsafe-none; report-to='default'
cross-origin-resource-policy: cross-origin