sit.no
HTML metadata
Technology
- Server
- nginx
- CMS
- Next.js
- JS framework
- Next.js
Third-party hosts loaded (2)
- cdn.sanity.io×5
- policy.app.cookieinformation.com×1
DNS records live
- NS
-
- ns1.hyp.net
- ns2.hyp.net
- ns3.hyp.net
- MX
-
- 0 sit-no.mail.protection.outlook.com
- TXT
-
wRwfm8Th/6m6AbAkHY5Q0Dms2n4PdvIrH+mzE2MuaOMOPKH02z3+UdToMJj8MaNawycxibx3rVcLeUzOsx56og==_acme-challenge.www.sit.no TXT uSkip4_UFIe37pWAe0SRMHbzyjjMGKiV3lUDV8du7Nkmandrill_verify.gg1KAyng5HSaTSbkFk0QAw
- Verified for
-
- Adobe
- Apple
- Meta
Email authentication strong
- SPF
-
v=spf1 ip4:129.241.45.0 ip4:129.241.76.250 ip4:141.193.33.98 include:spf.protection.outlook.com include:sendgrid.net include:_spf.questback.com include:eu.mailgun.org include:spf.logiq.no include:_spf.google.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email; ruf=mailto:dmarc_forensic@vali.email;policy: quarantine - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCmKpRImHhiK41Tt8E2XBNjVEDWH49l9U9Nz2OvsPf0+286SbZfYMCV1yIjYskXObdRmMhlxaGuPYvcE552QN…
selectors probed - selector1:
Certificate (current)
E7
Expires in 70 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
Header values
- referrer-policy
strict-origin-when-cross-origin- permissions-policy
camera=(), microphone=(), geolocation=(), midi=(), magnetometer=(), gyroscope=(), payment=(), fullscreen=(self)- x-content-type-options
nosniff- content-security-policy
default-src 'self'; connect-src *; font-src *; frame-src *; frame-ancestors 'self' https://sanity.io https://www.sanity.io; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline';- strict-transport-security
max-age=31536000; includeSubDomains; preload