naf.no Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: Microsoft-Azure-Application-Gateway/v2
Date: Mon, 25 Aug 2025 04:55:38 GMT
Content-Type: text/html
Content-Length: 195
Connection: keep-alive
Location: https://naf.no/

HTTP/1.1 301 Moved Permanently
Date: Mon, 25 Aug 2025 04:55:39 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 60
Connection: keep-alive
Location: https://www.naf.no/
Vary: Accept
request-context: appId=cid-v1:c1cf01e8-38e6-463b-887e-892bf3c23514

HTTP/1.1 200 OK
Date: Mon, 25 Aug 2025 04:55:41 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=5
Content-Encoding: gzip
ETag: W/"3dee3-ZxyggIv5RcFgyF1txUEURETrxIQ"
Vary: Accept-Encoding
Strict-Transport-Security: max-age=15552000; includeSubDomains
request-context: appId=cid-v1:c1cf01e8-38e6-463b-887e-892bf3c23514
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(self "https://secure.viewer.zmags.com"), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(self "https://cloudinary.com" "https://*.cloudinary.com"), publickey-credentials-get=(self), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), clipboard-read=(self), clipboard-write=(self), gamepad=(), hid=(self), idle-detection=(self), serial=(self), window-management=(self)
Content-Security-Policy: base-uri 'self';default-src 'self' blob:;font-src 'self' *.naf.no res.cloudinary.com script.hotjar.com fonts.gstatic.com data: designsystem.vipps.io;media-src 'self' *.naf.no res.cloudinary.com blob:;form-action 'self' https://qa-extra2-core.qa.gneis.io https://qa-circlekid-core.qa.gneis.io https://id.circlekeurope.com https://extra.circlekeurope.com https://mtf.pvu.avtalegiro.no https://pvu.avtalegiro.no;frame-src app.vwo.com https://*.visualwebsiteoptimizer.com omny.fm https://*.youtube.com youtube.com stage.id.naf.no id.naf.no embed.acast.com 6680107.fls.doubleclick.net web106.reachmee.com https://*.hotjar.com dntcl.qualaroo.com datawrapper.dwcdn.net consentcdn.cookiebot.com checkout.vipps.no consent.cookiebot.com google.com https://*.google.com google.no https://*.google.no tpc.googlesyndication.com tourstart.org d1omrgmvhbogxk.cloudfront.net td.doubleclick.net secure.viewer.zmags.com sgtm.naf.no;child-src omny.fm https://*.youtube.com youtube.com stage.id.naf.no id.naf.no embed.acast.com 6680107.fls.doubleclick.net web106.reachmee.com vars.hotjar.com static.hotjar.com dntcl.qualaroo.com datawrapper.dwcdn.net consentcdn.cookiebot.com consent.cookiebot.com google.com;style-src 'self' *.naf.no 'unsafe-inline' 'report-sample' https://*.visualwebsiteoptimizer.com s3.amazonaws.com app.vwo.com cdn.pushcrew.com fonts.googleapis.com optimize.google.com translate.googleapis.com https://*.hotjar.com www.googletagmanager.com;img-src 'self' *.naf.no *.visualwebsiteoptimizer.com cdn.pushcrew.com chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com chart.googleapis.com cdn.sanity.io sgtm.naf.no google.ie *.google.ie script.hotjar.com ade.googlesyndication.com data: www.naf.no res.cloudinary.com bildata.ofv.no *.google.com *.google.no *.google.dk *.google.es *.google.se *.google.de *.google.fi *.google.lv *.google.co.th *.google.pl *.google.com.tr *.google.co.uk *.google.co.nz *.google.lk *.google.co.id *.google.pt *.google.ch *.google.be *.googletagmanager.com www.googletagmanager.com *.googleapis.com pagead2.googlesyndication.com 6054118.global.siteimproveanalytics.io www.facebook.com marketing.naf.no *.clarity.ms c.clarity.ms bat.bing.com c.bing.com ad.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net *.gstatic.com img.youtube.com www.googleadservices.com www.analytics-debugger.com imgsct.cookiebot.com *.kjoretoydata.no kjoretoydata.no https://s3.amazonaws.com https://cl.qualaroo.com *.readpeak.com;script-src 'strict-dynamic' 'self' *.naf.no 'unsafe-inline' *.naf.no *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com consent.cookiebot.com consentcdn.cookiebot.com *.sgtm.naf.no sgtm.naf.no 'nonce-q+JQx9BRQGsFRNYrSe4NSw==' script.hotjar.com euwa.puzzel.com connect.facebook.net maps.googleapis.com 'report-sample';script-src-attr 'self' 'unsafe-inline' consent.cookiebot.com m.facebook.com 'report-sample';object-src 'none';connect-src 'self' *.naf.no *.visualwebsiteoptimizer.com app.vwo.com *.ent.northeurope.azure.elastic-cloud.com *.puzzel.com google.com google.ie *.googleadservices.com *.google.ie googleads.g.doubleclick.net *.google.com *.cookiebot.com *.hotjar.io *.hotjar.com *.mouseflow.com vc.hotjar.io pagead2.googlesyndication.com wss://sr-naf-ch-dev.service.signalr.net wss://sr-naf-ch-test.service.signalr.net wss://sr-naf-ch-prod.service.signalr.net sr-naf-ch-dev.service.signalr.net sr-naf-ch-test.service.signalr.net sr-naf-ch-prod.service.signalr.net wss://sigr-nafch-dev.service.signalr.net wss://sigr-nafch-test.service.signalr.net wss://sigr-nafch-prod.service.signalr.net sigr-nafch-dev.service.signalr.net sigr-nafch-test.service.signalr.net sigr-nafch-prod.service.signalr.net res.cloudinary.com in.hotjar.com stats.g.doubleclick.net stage.id.naf.no id.naf.no dev-api2.naf.no test-api2.naf.no api2.naf.no dc.services.visualstudio.com *.sgtm.naf.no sgtm.naf.no api.billan.nordea.no bat.bing.com *.clarity.ms www.clarity.ms wss://*.hotjar.com maps.googleapis.com mapsresources-pa.googleapis.com www.gstatic.com naf.matomo.cloud video-analytics-api.cloudinary.com ws.geonorge.no/ region1.google-analytics.com analytics-api-s.cloudinary.com dev-api2.naf.no test-api2.naf.no api2.naf.no js.monitor.azure.com;frame-ancestors https://*.naf.no https://dev.cms.naf.no https://test.cms.naf.no https://cms.naf.no;upgrade-insecure-requests;worker-src 'self' blob:;manifest-src 'self'
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
X-DNS-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
X-Download-Options: noopen
X-Content-Type-Options: nosniff
Origin-Agent-Cluster: ?1
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Report-To: {"group":"report-endpoint","max_age":10886400,"include_subdomains":true,"endpoints":[{"url":"https://o208856.ingest.sentry.io/api/4504554433085440/security/?sentry_key=e20d599cae73471b86a8402369d3be1d","priority":1}]}
X-Cache: HIT