12 technologies4 categories
naf.no is built on Sanity with Material UI and MailChimp.
The frontend relies on Material UI. Analytics are handled by Azure Monitor. Infrastructure includes Amazon S3 and Amazon Web Services.
Tech Stack Highlights
Core Platform1
Sanity
CMS
75%
1 evidence signal
Header
cdn\.sanity\.io: base-uri 'self';default-src 'self' blob:;font-src 'self' *.naf.no res.cloudinary.com script.hotjar.com fonts.gstatic.com data: designsystem.vipps.io;media-src 'self' *.naf.no res.cloudinary.com blob:;form-action 'self' https://www.naf.no https://test.naf.no https://nye.naf.no https://test.nye.naf.no https://qa-extra2-core.qa.gneis.io https://qa-circlekid-core.qa.gneis.io https://id.circlekeurope.com https://extra.circlekeurope.com http://extra.circlekeurope.com;frame-src app.vwo.com https://*.visualwebsiteoptimizer.com omny.fm https://*.youtube.com youtube.com stage.id.naf.no id.naf.no embed.acast.com 6680107.fls.doubleclick.net web106.reachmee.com https://*.hotjar.com dntcl.qualaroo.com datawrapper.dwcdn.net checkout.vipps.no consentcdn.cookiebot.com consent.cookiebot.com consentcdn.cookiebot.eu google.com https://*.google.com google.no https://*.google.no tpc.googlesyndication.com tourstart.org d1omrgmvhbogxk.cloudfront.net td.doubleclick.net secure.viewer.zmags.com sgtm.naf.no;child-src omny.fm https://*.youtube.com youtube.com stage.id.naf.no id.naf.no embed.acast.com 6680107.fls.doubleclick.net web106.reachmee.com vars.hotjar.com static.hotjar.com dntcl.qualaroo.com datawrapper.dwcdn.net consentcdn.cookiebot.com consent.cookiebot.com google.com;style-src 'self' *.naf.no 'unsafe-inline' 'report-sample' https://*.visualwebsiteoptimizer.com s3.amazonaws.com app.vwo.com cdn.pushcrew.com fonts.googleapis.com optimize.google.com translate.googleapis.com https://*.hotjar.com www.googletagmanager.com;img-src 'self' *.naf.no *.visualwebsiteoptimizer.com cdn.pushcrew.com chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com chart.googleapis.com cdn.sanity.io sgtm.naf.no google.ie *.google.ie script.hotjar.com ade.googlesyndication.com data: www.naf.no res.cloudinary.com bildata.ofv.no *.google.com *.google.no *.google.dk *.google.es *.google.se *.google.de *.google.fi *.google.lv *.google.co.th *.google.pl *.google.com.tr *.google.co.uk *.google.co.nz *.google.lk *.google.co.id *.google.pt *.google.ch *.google.be *.googletagmanager.com www.googletagmanager.com *.googleapis.com pagead2.googlesyndication.com 6054118.global.siteimproveanalytics.io www.facebook.com marketing.naf.no *.clarity.ms c.clarity.ms bat.bing.com c.bing.com ad.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net *.gstatic.com img.youtube.com www.googleadservices.com www.analytics-debugger.com imgsct.cookiebot.com *.kjoretoydata.no kjoretoydata.no https://s3.amazonaws.com https://cl.qualaroo.com *.readpeak.com;script-src 'strict-dynamic' 'self' 'wasm-unsafe-eval' *.naf.no 'unsafe-inline' *.naf.no *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com consent.cookiebot.com consentcdn.cookiebot.com *.sgtm.naf.no sgtm.naf.no 'nonce-w7X7S5hwY367rHRfEmsb5Q==' script.hotjar.com euwa.puzzel.com connect.facebook.net maps.googleapis.com 'report-sample';script-src-attr 'self' 'unsafe-inline' consent.cookiebot.com m.facebook.com 'report-sample';object-src 'none';connect-src 'self' data: *.naf.no *.visualwebsiteoptimizer.com app.vwo.com *.ent.northeurope.azure.elastic-cloud.com *.puzzel.com google.com google.ie *.googleadservices.com *.google.ie googleads.g.doubleclick.net *.google.com *.cookiebot.com *.cookiebot.eu *.hotjar.io *.hotjar.com *.mouseflow.com vc.hotjar.io pagead2.googlesyndication.com wss://sr-naf-ch-dev.service.signalr.net wss://sr-naf-ch-test.service.signalr.net wss://sr-naf-ch-prod.service.signalr.net sr-naf-ch-dev.service.signalr.net sr-naf-ch-test.service.signalr.net sr-naf-ch-prod.service.signalr.net wss://sigr-nafch-dev.service.signalr.net wss://sigr-nafch-test.service.signalr.net wss://sigr-nafch-prod.service.signalr.net sigr-nafch-dev.service.signalr.net sigr-nafch-test.service.signalr.net sigr-nafch-prod.service.signalr.net res.cloudinary.com in.hotjar.com stats.g.doubleclick.net stage.id.naf.no id.naf.no dev-api2.naf.no test-api2.naf.no api2.naf.no dc.services.visualstudio.com *.sgtm.naf.no sgtm.naf.no api.billan.nordea.no bat.bing.com *.clarity.ms www.clarity.ms wss://*.hotjar.com *.googleapis.com mapsresources-pa.googleapis.com *.gstatic.com naf.matomo.cloud video-analytics-api.cloudinary.com ws.geonorge.no region1.google-analytics.com analytics-api-s.cloudinary.com dev-api2.naf.no test-api2.naf.no api2.naf.no js.monitor.azure.com;frame-ancestors https://*.naf.no https://dev.cms.naf.no https://test.cms.naf.no https://cms.naf.no;upgrade-insecure-requests;worker-src 'self' blob: *.googleapis.com;manifest-src 'self'Frameworks & Languages3
Material UI
UI frameworks
100%
2 evidence signals
HTML
MuiTypography-rootDOM
mui-buttonReact
JavaScript frameworks
75%
1 evidence signal
HTML
implied by MUIPrimeReact
UI frameworks
75%
1 evidence signal
HTML
p-componentAnalytics & Marketing4
M
MailChimp
Marketing automation
100%
1 evidence signal
dns
DKIM selector: k1M
Microsoft 365
Email
100%
1 evidence signal
dns
MX: naf-no.mail.protection.outlook.comS
SendGrid
Email
100%
1 evidence signal
dns
DKIM selector: s1Azure Monitor
Analytics
75%
1 evidence signal
Header
js\.monitor\.azure\.com: base-uri 'self';default-src 'self' blob:;font-src 'self' *.naf.no res.cloudinary.com script.hotjar.com fonts.gstatic.com data: designsystem.vipps.io;media-src 'self' *.naf.no res.cloudinary.com blob:;form-action 'self' https://www.naf.no https://test.naf.no https://nye.naf.no https://test.nye.naf.no https://qa-extra2-core.qa.gneis.io https://qa-circlekid-core.qa.gneis.io https://id.circlekeurope.com https://extra.circlekeurope.com http://extra.circlekeurope.com;frame-src app.vwo.com https://*.visualwebsiteoptimizer.com omny.fm https://*.youtube.com youtube.com stage.id.naf.no id.naf.no embed.acast.com 6680107.fls.doubleclick.net web106.reachmee.com https://*.hotjar.com dntcl.qualaroo.com datawrapper.dwcdn.net checkout.vipps.no consentcdn.cookiebot.com consent.cookiebot.com consentcdn.cookiebot.eu google.com https://*.google.com google.no https://*.google.no tpc.googlesyndication.com tourstart.org d1omrgmvhbogxk.cloudfront.net td.doubleclick.net secure.viewer.zmags.com sgtm.naf.no;child-src omny.fm https://*.youtube.com youtube.com stage.id.naf.no id.naf.no embed.acast.com 6680107.fls.doubleclick.net web106.reachmee.com vars.hotjar.com static.hotjar.com dntcl.qualaroo.com datawrapper.dwcdn.net consentcdn.cookiebot.com consent.cookiebot.com google.com;style-src 'self' *.naf.no 'unsafe-inline' 'report-sample' https://*.visualwebsiteoptimizer.com s3.amazonaws.com app.vwo.com cdn.pushcrew.com fonts.googleapis.com optimize.google.com translate.googleapis.com https://*.hotjar.com www.googletagmanager.com;img-src 'self' *.naf.no *.visualwebsiteoptimizer.com cdn.pushcrew.com chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com chart.googleapis.com cdn.sanity.io sgtm.naf.no google.ie *.google.ie script.hotjar.com ade.googlesyndication.com data: www.naf.no res.cloudinary.com bildata.ofv.no *.google.com *.google.no *.google.dk *.google.es *.google.se *.google.de *.google.fi *.google.lv *.google.co.th *.google.pl *.google.com.tr *.google.co.uk *.google.co.nz *.google.lk *.google.co.id *.google.pt *.google.ch *.google.be *.googletagmanager.com www.googletagmanager.com *.googleapis.com pagead2.googlesyndication.com 6054118.global.siteimproveanalytics.io www.facebook.com marketing.naf.no *.clarity.ms c.clarity.ms bat.bing.com c.bing.com ad.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net *.gstatic.com img.youtube.com www.googleadservices.com www.analytics-debugger.com imgsct.cookiebot.com *.kjoretoydata.no kjoretoydata.no https://s3.amazonaws.com https://cl.qualaroo.com *.readpeak.com;script-src 'strict-dynamic' 'self' 'wasm-unsafe-eval' *.naf.no 'unsafe-inline' *.naf.no *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com consent.cookiebot.com consentcdn.cookiebot.com *.sgtm.naf.no sgtm.naf.no 'nonce-w7X7S5hwY367rHRfEmsb5Q==' script.hotjar.com euwa.puzzel.com connect.facebook.net maps.googleapis.com 'report-sample';script-src-attr 'self' 'unsafe-inline' consent.cookiebot.com m.facebook.com 'report-sample';object-src 'none';connect-src 'self' data: *.naf.no *.visualwebsiteoptimizer.com app.vwo.com *.ent.northeurope.azure.elastic-cloud.com *.puzzel.com google.com google.ie *.googleadservices.com *.google.ie googleads.g.doubleclick.net *.google.com *.cookiebot.com *.cookiebot.eu *.hotjar.io *.hotjar.com *.mouseflow.com vc.hotjar.io pagead2.googlesyndication.com wss://sr-naf-ch-dev.service.signalr.net wss://sr-naf-ch-test.service.signalr.net wss://sr-naf-ch-prod.service.signalr.net sr-naf-ch-dev.service.signalr.net sr-naf-ch-test.service.signalr.net sr-naf-ch-prod.service.signalr.net wss://sigr-nafch-dev.service.signalr.net wss://sigr-nafch-test.service.signalr.net wss://sigr-nafch-prod.service.signalr.net sigr-nafch-dev.service.signalr.net sigr-nafch-test.service.signalr.net sigr-nafch-prod.service.signalr.net res.cloudinary.com in.hotjar.com stats.g.doubleclick.net stage.id.naf.no id.naf.no dev-api2.naf.no test-api2.naf.no api2.naf.no dc.services.visualstudio.com *.sgtm.naf.no sgtm.naf.no api.billan.nordea.no bat.bing.com *.clarity.ms www.clarity.ms wss://*.hotjar.com *.googleapis.com mapsresources-pa.googleapis.com *.gstatic.com naf.matomo.cloud video-analytics-api.cloudinary.com ws.geonorge.no region1.google-analytics.com analytics-api-s.cloudinary.com dev-api2.naf.no test-api2.naf.no api2.naf.no js.monitor.azure.com;frame-ancestors https://*.naf.no https://dev.cms.naf.no https://test.cms.naf.no https://cms.naf.no;upgrade-insecure-requests;worker-src 'self' blob: *.googleapis.com;manifest-src 'self'Infrastructure & Security4
HSTS
Security
75%
1 evidence signal
Header
max-age=15552000; includeSubDomainsAmazon S3
CDN
75%
1 evidence signal
Header
s3[^ ]*amazonaws\.com: base-uri 'self';default-src 'self' blob:;font-src 'self' *.naf.no res.cloudinary.com script.hotjar.com fonts.gstatic.com data: designsystem.vipps.io;media-src 'self' *.naf.no res.cloudinary.com blob:;form-action 'self' https://www.naf.no https://test.naf.no https://nye.naf.no https://test.nye.naf.no https://qa-extra2-core.qa.gneis.io https://qa-circlekid-core.qa.gneis.io https://id.circlekeurope.com https://extra.circlekeurope.com http://extra.circlekeurope.com;frame-src app.vwo.com https://*.visualwebsiteoptimizer.com omny.fm https://*.youtube.com youtube.com stage.id.naf.no id.naf.no embed.acast.com 6680107.fls.doubleclick.net web106.reachmee.com https://*.hotjar.com dntcl.qualaroo.com datawrapper.dwcdn.net checkout.vipps.no consentcdn.cookiebot.com consent.cookiebot.com consentcdn.cookiebot.eu google.com https://*.google.com google.no https://*.google.no tpc.googlesyndication.com tourstart.org d1omrgmvhbogxk.cloudfront.net td.doubleclick.net secure.viewer.zmags.com sgtm.naf.no;child-src omny.fm https://*.youtube.com youtube.com stage.id.naf.no id.naf.no embed.acast.com 6680107.fls.doubleclick.net web106.reachmee.com vars.hotjar.com static.hotjar.com dntcl.qualaroo.com datawrapper.dwcdn.net consentcdn.cookiebot.com consent.cookiebot.com google.com;style-src 'self' *.naf.no 'unsafe-inline' 'report-sample' https://*.visualwebsiteoptimizer.com s3.amazonaws.com app.vwo.com cdn.pushcrew.com fonts.googleapis.com optimize.google.com translate.googleapis.com https://*.hotjar.com www.googletagmanager.com;img-src 'self' *.naf.no *.visualwebsiteoptimizer.com cdn.pushcrew.com chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com chart.googleapis.com cdn.sanity.io sgtm.naf.no google.ie *.google.ie script.hotjar.com ade.googlesyndication.com data: www.naf.no res.cloudinary.com bildata.ofv.no *.google.com *.google.no *.google.dk *.google.es *.google.se *.google.de *.google.fi *.google.lv *.google.co.th *.google.pl *.google.com.tr *.google.co.uk *.google.co.nz *.google.lk *.google.co.id *.google.pt *.google.ch *.google.be *.googletagmanager.com www.googletagmanager.com *.googleapis.com pagead2.googlesyndication.com 6054118.global.siteimproveanalytics.io www.facebook.com marketing.naf.no *.clarity.ms c.clarity.ms bat.bing.com c.bing.com ad.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net *.gstatic.com img.youtube.com www.googleadservices.com www.analytics-debugger.com imgsct.cookiebot.com *.kjoretoydata.no kjoretoydata.no https://s3.amazonaws.com https://cl.qualaroo.com *.readpeak.com;script-src 'strict-dynamic' 'self' 'wasm-unsafe-eval' *.naf.no 'unsafe-inline' *.naf.no *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com consent.cookiebot.com consentcdn.cookiebot.com *.sgtm.naf.no sgtm.naf.no 'nonce-w7X7S5hwY367rHRfEmsb5Q==' script.hotjar.com euwa.puzzel.com connect.facebook.net maps.googleapis.com 'report-sample';script-src-attr 'self' 'unsafe-inline' consent.cookiebot.com m.facebook.com 'report-sample';object-src 'none';connect-src 'self' data: *.naf.no *.visualwebsiteoptimizer.com app.vwo.com *.ent.northeurope.azure.elastic-cloud.com *.puzzel.com google.com google.ie *.googleadservices.com *.google.ie googleads.g.doubleclick.net *.google.com *.cookiebot.com *.cookiebot.eu *.hotjar.io *.hotjar.com *.mouseflow.com vc.hotjar.io pagead2.googlesyndication.com wss://sr-naf-ch-dev.service.signalr.net wss://sr-naf-ch-test.service.signalr.net wss://sr-naf-ch-prod.service.signalr.net sr-naf-ch-dev.service.signalr.net sr-naf-ch-test.service.signalr.net sr-naf-ch-prod.service.signalr.net wss://sigr-nafch-dev.service.signalr.net wss://sigr-nafch-test.service.signalr.net wss://sigr-nafch-prod.service.signalr.net sigr-nafch-dev.service.signalr.net sigr-nafch-test.service.signalr.net sigr-nafch-prod.service.signalr.net res.cloudinary.com in.hotjar.com stats.g.doubleclick.net stage.id.naf.no id.naf.no dev-api2.naf.no test-api2.naf.no api2.naf.no dc.services.visualstudio.com *.sgtm.naf.no sgtm.naf.no api.billan.nordea.no bat.bing.com *.clarity.ms www.clarity.ms wss://*.hotjar.com *.googleapis.com mapsresources-pa.googleapis.com *.gstatic.com naf.matomo.cloud video-analytics-api.cloudinary.com ws.geonorge.no region1.google-analytics.com analytics-api-s.cloudinary.com dev-api2.naf.no test-api2.naf.no api2.naf.no js.monitor.azure.com;frame-ancestors https://*.naf.no https://dev.cms.naf.no https://test.cms.naf.no https://cms.naf.no;upgrade-insecure-requests;worker-src 'self' blob: *.googleapis.com;manifest-src 'self'Amazon Web Services
PaaS
50%
1 evidence signal
HTML
implied by Amazon S3Azure
PaaS
50%
1 evidence signal
HTML
implied by Azure Monitor