nyehjortenteater.no
HTML metadata
Technology
- Server
- nginx
- CMS
- Next.js
Third-party hosts loaded (2)
- forms.markethype.io×1
- policy.app.cookieinformation.com×1
Registration
- Registrar
- WEBHUSET AS
- Created
- 2020-12-15
- Updated
- 2026-03-09
- Name servers
-
- ns.datacenter.no
- ns2.datacenter.no
DNS records live
- NS
-
- ns.datacenter.no
- ns2.datacenter.no
- MX
-
- 10 nyehjortenteater-no.mail.protection.outlook.com
- Verified for
-
- 1Password
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 include:spf.protection.outlook.com a:mx4.eventim.de -allstrict (-all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MP5UcAt6FQ8dTS5T91dqEeAZhUAcXDcbNPMceMkMLK8liRlFfIcakPZt2rUgOxDFb7Gz77NDIlhLf…
selectors probed - selector1:
Certificate (current)
E7
Expires in 32 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
Header values
- referrer-policy
strict-origin-when-cross-origin- permissions-policy
camera=(), microphone=(), geolocation=(), midi=(), magnetometer=(), gyroscope=(), payment=(), fullscreen=(self)- x-content-type-options
nosniff- content-security-policy
default-src 'self'; connect-src *; font-src *; frame-src *; frame-ancestors 'self' https://sanity.io https://www.sanity.io; img-src * data:; media-src *; base-uri 'self'; object-src 'none'; upgrade-insecure-requests; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline';- strict-transport-security
max-age=31536000; includeSubDomains; preload
Links to (5)
- pomo.no×1
- olgas.no×1
- nonspace.no×1
- increo.no×1
- britannia.no×1