runnersworld.no

HTML metadata

Title

Runner’s World - Runner's World Norge

Description

Bloggere på runnersworld.no Oppdag alle bloggerne våre SISTE UTGAVE AV RUNNER’S WORLD I denne utgaven spør vi oss:

Language

nb-NO

Generator

WordPress 6.9.4

Canonical

https://runnersworld.no/

Feeds

Open Graph

url: https://runnersworld.no/
title: Runner’s World - Runner's World Norge
locale: nb_NO
site name: Runner's World Norge
description: Bloggere på runnersworld.no Oppdag alle bloggerne våre SISTE UTGAVE AV RUNNER’S WORLD I denne utgaven spør vi oss:

Technology

Server: nginx
CMS: WordPress 6.9.4
jQuery: 2.2.4 known XSS (<3.5)

Analytics

Google Tag Manager

Ads

Google Ads (DoubleClick)

Fonts

Adobe Fonts

Third-party hosts loaded (6)

checkout.vipps.no×3
ajax.googleapis.com×2
js-eu1.hs-scripts.com×2
use.typekit.net×2
www.googletagmanager.com×2
securepubads.g.doubleclick.net×1

Social

Contact

Email

post@runnersworld.no

Phone

DNS records live

NS

ns1.mainloop.net
ns2.mainloop.net
ns3.mainloop.net
ns4.mainloop.net

MX

5 runnersworld-no.mail.protection.outlook.com

Verified for

Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:146357559.spf10.hubspotemail.net include:spf.mandrillapp.com -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS6KdsHr6ZeNhOIk8z1KsLcGM6tradLeah2wJmseq+HGZPcY9FAkQZnSxeywSBbH+Ap5DM9cbmaG45NFqb…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufr2xMuH6BDBsFAy9+7mcYI037NwYKdeVsJanFfeaqek3O5Q51KEZAyYANp3UEyYu04APvHpriS2sPpYL2…

selectors probed

Certificate (current)

E8

from 2026-04-26 to 2026-07-25

Expires in 51 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://runnersworld.no/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains