natoil.com website report

HTTP/2 200 
date: Tue, 29 Sep 2026 00:16:26 GMT
content-type: text/html; charset=utf-8
age: 24
cache-control: public, max-age=0, must-revalidate
content-security-policy: default-src 'self' 'unsafe-inline' www-nov-preview.vercel.app *.bing1.com *.cloudflareaccess.com *.doubleclick.net *.google-analytics.com *.google.com *.nov.com *.vercel-scripts.com va.vercel-scripts.com *.vercel-analytics.com *.vercel-insights.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' http://127.0.0.1:5500 *.convertexperiments.com *.clarity.ms cdn.vev.design embed.vev.design embed.vev.page js.vev.design vercel.live toolsdevstatic.z21.web.core.windows.net *.loopanalytics.com bat.bing.com *.zdassets.com *.adsymptotic.com *.azureedge.net *.b0e8.com *.ceros.com *.cloudflareaccess.com *.doubleclick.net *.dynamics.com *.mountain.com *.eloqua.com *.en25.com *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.licdn.com *.nov.com *.pixel.ad *.plot.ly *.simpli.fi *.workamajig.com *.xg4ken.com *.youtube.com *.vercel-scripts.com *.vercel-analytics.com *.vercel-insights.com *.vercel.com https://*.activeiq.co api.smooch.io; worker-src 'self' blob:; object-src 'self' 'unsafe-inline' *.nov.com; style-src 'self' 'unsafe-inline' use.typekit.net *.amazonaws.com *.azureedge.net *.cloudflare.com *.dynamics.com *.en25.com cdn.vev.design embed.vev.design embed.vev.page *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.nov.com *.zdassets.com *.youtube.com; img-src 'self' 'unsafe-inline' data: blob: https://*.activeiq.co https://image.mux.com *.eyeota.net *.fwmrm.net *.unrulymedia.com *.adsrvr.org *.bing.com *.clarity.ms www.google.co.in cdn.bfldr.com *.ad.smaato.net p.alcmpn.com pbid.pro-market.net login.dotomi.com sync.mathtag.com p.zpa-auth.net ad.360yield.com x.bidswitch.net sync.1rx.io live.primis.tech u.openx.net *.media.net *.smartadserver.com *.casalemedia.com *.yieldmo.com *.omnitagjs.com *.loopanalytics.com *.googletagmanager.com bat.bing.com d.agkn.com *.intentiq.com pippio.com eb2.3lift.com simplifi.partners.tremorhub.com pixel.tapad.com *.pubmatic.com aa.agkn.com sync.intentiq.com ads.stickyadstv.com fei.pro-market.net loadm.exelator.com sync.bfmio.com stags.bluekai.com ups.analytics.yahoo.com bcp.crwdcntrl.net ce.lijit.com idsync.rlcdn.com pixel.rubiconproject.com sync.search.spotxchange.com ib.adnxs.com us-u.openx.net *.adsymptotic.com *.azurewebsites.net *.b0e8.com *.cloudflareaccess.com *.doubleclick.net *.dynamics.com *.eloqua.com *.en25.com *.google-analytics.com *.google.com *.googleadservices.com *.gstatic.com *.linkedin.com *.nov.com *.simpli.fi static.brandfolder.com *.sitescout.com *.webdamdb.com *.youtube.com *.zscalertwo.net *.zdassets.com *.zendesk.com storage-us-gcs.bfldr.com www.google.com www.google.com.pe www.googleadservices.com www.googletagmanager.com cdn.vev.design embed.vev.design embed.vev.page; media-src 'self' 'unsafe-inline' *.amazonaws.com *.nov.com cdn.vev.design stream.mux.com; frame-src 'self' 'unsafe-inline' https://forms.cloud.microsoft vercel.live *.azurewebsites.net *.ceros.com brandfolder.com *.doubleclick.net *.dynamics.com embed.vev.design embed.vev.page *.google.com *.googleapis.com *.googletagmanager.com *.hotjar.com *.nov.com *.office.com *.sitescout.com *.soundcloud.com *.webdamdb.com *.workamajig.com *.youtube.com *.zscalertwo.net *.nov.com *.zdassets.com *.powerappsportals.com fgswarrantyregistration.powerappsportals.com; connect-src 'self' 'unsafe-inline' *.clarity.ms *.azureedge.net *.licdn.com *.linkedin.com *.adsymptotic.com *.linkedin.oribi.io *.googlesyndication.com bat.bing.com cdn.linkedin.oribi.io *.azurewebsites.net *.doubleclick.net *.dynamics.com raw.githubusercontent.com *.google-analytics.com wss://*.hotjar.com *.hotjar.com *.hotjar.io *.nov.com *.linkedin.com *.youtube.com *.zdassets.com *.zendesk.com *.vercel-scripts.com va.vercel-scripts.com *.vercel-analytics.com *.vercel-insights.com *.vercel.com *.contentful.com cdn.contentful.com *.algolia.net bgof7x3rp1-dsn.algolia.net *.algolianet.com *.google.com analytics.google.com www.google.com www.google.com.pe www.googleadservices.com www.googletagmanager.com cdn.vev.design embed.vev.design embed.vev.page js.vev.design https://*.activeiq.co *.powerappsportals.com fgswarrantyregistration.powerappsportals.com wss://api.smooch.io; font-src 'self' 'unsafe-inline' 'unsafe-eval' data: cdnjs.cloudflare.com *.gstatic.com *.nov.com cdn.vev.design fonts.vev.design; frame-ancestors 'self' https://*.nov.com https://app.contentful.com https://*.vercel.app https://*.azurewebsites.net https://*.figma.site https://*.figma.com;
expect-ct: max-age=86400, enforce
permissions-policy: interest-cohort=()
referrer-policy: same-origin
server: cloudflare
set-cookie: x-locale=en-US; Path=/; Expires=Wed, 29 Sep 2027 00:16:26 GMT; Max-Age=31536000; Secure; SameSite=lax
strict-transport-security: max-age=18410000; includeSubDomains
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-matched-path: /[[...slug]]
x-mkt-shortlink-bypass-reason: homepage
x-mkt-shortlink-classification: bypass
x-mkt-shortlink-result: bypass
x-nextjs-prerender: 1
x-nextjs-stale-time: 300
x-pathname: /
x-vercel-cache: HIT
x-vercel-id: cdg1::iad1::dtx4j-1790640985902-df56dc65d59f
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
cf-ray: a426cc91cd33ebb0-CDG