skiforbundet.no — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Skiforbundet | Skiforbundet
Language: no

Open Graph

url: https://www.skiforbundet.no/
title: Skiforbundet
site name: Skiforbundet

Technology

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (2)

fonts.googleapis.com×1
www.googletagmanager.com×1

Registration

Registrar

Norges idrettsforbund og olympiske og paralympiske komité

Created

1999-11-14

Updated

2025-11-15

Name servers

ns1-06.azure-dns.com
ns2-06.azure-dns.net
ns3-06.azure-dns.org
ns4-06.azure-dns.info

DNS records live

NS

ns1-06.azure-dns.com
ns2-06.azure-dns.net
ns3-06.azure-dns.org
ns4-06.azure-dns.info

MX

0 skiforbundet-no.mail.protection.outlook.com

TXT

COB7UGMHRVGDM54EW0EJ0EYTG5ER4Q5SLV7VHIC9

Verified for

Meta
Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:spf.diasp.no include:mailout.osl.basefarm.net include:_spf.sndr.no -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2qdiTxpbfHoovbcBvGPpn9aMSxSimAdyBOYi3mKnAq1cKpxXvhYXH5V204vEp+KgTrqBH84htZtwQ…

selectors probed

Certificate (current)

R13

from 2026-05-11 to 2026-08-09

Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://www.skiforbundet.no/

present

content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing HSTS
missing Content Security Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=*, accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), gamepad=(), gyroscope=(), hid=(), identity-credentials-get(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), screen-wake-lock=(), serial=(), speaker-selection=(), storage-access=(), usb=(), web-share=(), window-management=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy-report-only: default-src 'self' data: 'unsafe-inline' 'unsafe-eval' unpkg.com *.episerver.net *.googletagmanager.com *.imgi.no *.youtube.com siteimproveanalytics.com *.siteimproveanalytics.io *.doubleclick.net localhost:5771 *.snapchat.com *.google.com *.facebook.com js.monitor.azure.com *.facebook.net snap.licdn.com sc-static.net *.tiktok.com px.ads.linkedin.com *.cloudfront.net *.eu1.odp.optimizely.com *.bing.com *.ads.linkedin.com *.services.visualstudio.com *.googlesyndication.com *.aptrinsic.com cdn.siteimprove.net adservice.google.com *.googleapis.com *.gstatic.com