Skip to content
https://vg.no

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
94
GRADE
A
FIX
0
REVIEW
2
PASS
7
INFO
0
Probed from New York, United Stated
301 Moved Permanently
Checks
9
7 PASS 2 REVIEW
B
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
REVIEW
www/non-www, trailing slash, HTTP→HTTPS
Critical::
Both www and non-www versions serve content
Got: Both variants return 200 Expected: One variant 301-redirects to the other
Info::
HTTP correctly 301-redirects to HTTPS

www / non-www

200https://www.vg.no/
200https://vg.no/

Inconsistent — duplicate content risk

HTTP → HTTPS

301http://vg.no/ → https://vg.no/

Consistent

B
TLS Certificate Expiry & Recommendations
129 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

129
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+
DNS Records
4 A records, 20 ms lookup
PASS
4 A records, 20 ms lookup
Info::
Resolves to 4 IPv4 address(es)
Got: 3.168.73.22, 3.168.73.23, 3.168.73.119, 3.168.73.27
Info::
Has 8 IPv6 (AAAA) record(s)
Got: 2600:9000:2801:1200:e:682f:1700:93a1, 2600:9000:2801:4400:e:682f:1700:93a1, 2600:9000:2801:c200:e:682f:1700:93a1, 2600:9000:2801:8200:e:682f:1700:93a1, 2600:9000:2801:6400:e:682f:1700:93a1, 2600:9000:2801:f800:e:682f:1700:93a1, 2600:9000:2801:f000:e:682f:1700:93a1, 2600:9000:2801:a800:e:682f:1700:93a1
Info::
4 nameserver(s) configured
Got: ns-1270.awsdns-30.org, ns-1702.awsdns-20.co.uk, ns-415.awsdns-51.com, ns-572.awsdns-07.net
Info::
5 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 20 ms
Got: 20 ms
A3.168.73.22, 3.168.73.23, 3.168.73.119, 3.168.73.27
AAAA2600:9000:2801:1200:e:682f:1700:93a1, 2600:9000:2801:4400:e:682f:1700:93a1, 2600:9000:2801:c200:e:682f:1700:93a1, 2600:9000:2801:8200:e:682f:1700:93a1, 2600:9000:2801:6400:e:682f:1700:93a1, 2600:9000:2801:f800:e:682f:1700:93a1, 2600:9000:2801:f000:e:682f:1700:93a1, 2600:9000:2801:a800:e:682f:1700:93a1
CNAME—
NSns-1270.awsdns-30.org, ns-1702.awsdns-20.co.uk, ns-415.awsdns-51.com, ns-572.awsdns-07.net
MX
1 aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com
10 alt4.aspmx.l.google.com
10 alt3.aspmx.l.google.com
TXT
1password-site-verification=OMZZCX32ABEJFANQJEZIDV24YM
MS=ms58603718
YbAMQjB2yzXf6DTU9dR9LYMQNGptykV9gN251w0knS5h2Iu4Nhk9kw6s1nzmgOCFnvxo/lekGs1PSCy3...
_varnish-cdn-verify=HDE7KlwrXuRjAf0ZTR6RVI
_varnish-cdn-verify=HDE7KlwrXuRjAf0ZTR6RXK
astro-domain-verification=cmivtccwb1m0001ndjl1iztiv
atlassian-domain-verification=73PL1GfNmV1AxBDVgP2myjKgwuPWrvUuHeM8MOKAOiwPtjVr/G...
atlassian-domain-verification=T5IChTF3ZKTnWvAaklZlegxf60QcBh8c11dnQa0rehmgPfEBKr...
docker-verification=ab84c6ca-d2b1-4aca-a2b4-e39155b6c1bd
fastly-domain-delegation-29tfXEmvnByNT8JY-442665-2021-10-26
google-site-verification=1pgyIHHF6q_XtdnSiBJFZiJrXtcg-vpNdfWzhJtb8pM
google-site-verification=CvJrFeKFUvWtMd11AkMfLIwBCKnMr2e4f6dzowPw32A
google-site-verification=LyzhGgOsJB-JpC1mIPb_3uHZnrL399W8jgPVrIVJE1U
google-site-verification=uRwOU1tXpvCsRXnHyApK_yaMeXiTmni8cIW2KelXWO8
miro-verification=eff9412c1aa1655d0a279f7d6704841b6a02b591
openai-domain-verification=dv-Ch3hqu8uKY999lSI95laAO0X
SPF v=spf1 include:_u.vg.no._spf.smart.ondmarc.com ~all
wiz-domain-verification=0d1ca40c73f3acaac00205197ba9f96c34b47cf912732aa7eff00097...
CAALookup not available with standard resolver
Resolved in 20 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A
Redirect Chain
1 redirect(s), 527 ms total
PASS
1 redirect(s), 527 ms total
Info::
Single redirect
Got: https://vg.no → https://www.vg.no/ (301)
Info::
WWW normalization redirect
Info::
Redirect overhead: 527 ms total
Got: 527 ms

https://vg.no

394 ms · HTTP/1.1

301

https://www.vg.no/

133 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://vg.no301394 msHTTP/1.1nginx
2https://www.vg.no/200133 msHTTP/1.1nginx

See the visual redirect chain in the HTTP Probe tab →

A+
IPv6 Readiness
IPv6 reachable (2 ms)
PASS
IPv6 reachable (2 ms)
Info::
IPv6 is configured and reachable at 2600:9000:2801:1200:e:682f:1700:93a1, 2600:9000:2801:4400:e:682f:1700:93a1, 2600:9000:2801:c200:e:682f:1700:93a1, 2600:9000:2801:8200:e:682f:1700:93a1, 2600:9000:2801:6400:e:682f:1700:93a1, 2600:9000:2801:f800:e:682f:1700:93a1, 2600:9000:2801:f000:e:682f:1700:93a1, 2600:9000:2801:a800:e:682f:1700:93a1
Got: 2 ms connect
IPv6 Ready
AAAA Records 2600:9000:2801:1200:e:682f:1700:93a1, 2600:9000:2801:4400:e:682f:1700:93a1, 2600:9000:2801:c200:e:682f:1700:93a1, 2600:9000:2801:8200:e:682f:1700:93a1, 2600:9000:2801:6400:e:682f:1700:93a1, 2600:9000:2801:f800:e:682f:1700:93a1, 2600:9000:2801:f000:e:682f:1700:93a1, 2600:9000:2801:a800:e:682f:1700:93a1 Connection Reachable (2 ms)
A+
Crawlability
robots.txt present, sitemap with 269 URLs
PASS
robots.txt present, sitemap with 269 URLs
Info::
robots.txt is present
Got: 2145 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 269 entries
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 2145 B Sitemaps referenced 3 User-agents Scrapy, SemrushBot-SWA, YouBot, *, ICC-Crawler, SemrushBot-OCOB, Timpibot, ClaudeBot, Claude-Web, FriendlyCrawler, Meta-ExternalAgent, Sidetrade indexer bot, Webzio-Extended, Amazonbot, cohere-training-data-crawler, img2dataset, Kangaroo Bot, PanguBot, OAI-SearchBot, Googlebot-News, Ai2Bot-Dolma, anthropic-ai, Applebot-Extended, Google-Extended, ImagesiftBot, omgilibot, cohere-ai, Diffbot, VelenPublicWebCrawler, AI2Bot, FacebookBot, iaskspider/2.0, omgili, Bytespider, CCBot, Crawlspace, PerplexityBot, PetalBot Blocking No — crawling allowed
# All crawlers and Open AI Search BOT rules
User-agent: *
User-agent: OAI-SearchBot
Disallow: /sok*?*
Disallow: /tegneserier/salesposter
Disallow: /poll
Disallow: /informasjon/redaksjonelle-avgjorelser/182
Disallow: /informasjon/redaksjonelle-avgjorelser/212
Disallow: /preview
Disallow: /?vcheck=1
Disallow: /?_escaped_fragment_=/kategori/144/bolig-tv
Disallow: /?_escaped_fragment_=/kategori
Disallow: /hei
Disallow: /rabattkode/
Allow: /

# Google Bot News rules
User-agent: Googlebot-News
Disallow: /annonsorinnhold/
Disallow: /kommersielt-innhold/
Disallow: /innstikk/
Disallow: /?embed=true
Disallow: /arkiv/
Disallow: /front/
Disallow: /ads/prewarm/

# Start AI crawler block
#
# VG does not permit unlicensed use of our content for training large language models.
# All use, reproductions and extractions of our content for such purposes require specific 
# approval by VG. We explicitly disallow text and data mining and other technical means 
# designed to or with the effect that they enable unlicensed use of our content for training 
# AI models.
User-agent: AI2Bot
User-agent: Ai2Bot-Dolma
User-agent: Amazonbot
User-agent: anthropic-ai
User-agent: Applebot-Extended
User-agent: Bytespider
User-agent: CCBot
User-agent: Claude-Web
User-agent: ClaudeBot
User-agent: cohere-ai
User-agent: cohere-training-data-crawler
User-agent: Crawlspace
User-agent: Diffbot
User-agent: FacebookBot
User-agent: FriendlyCrawler
User-agent: Google-Extended
User-agent: iaskspider/2.0
User-agent: ICC-Crawler
User-agent: ImagesiftBot
User-agent: img2dataset
User-agent: Kangaroo Bot
User-agent: Meta-ExternalAgent
User-agent: omgili
User-agent: omgilibot
User-agent: PanguBot
User-agent: PerplexityBot
User-agent: PetalBot
User-agent: Scrapy
User-agent: SemrushBot-OCOB
User-agent: SemrushBot-SWA
User-agent: Sidetrade indexer bot
User-agent: Timpibot
User-agent: VelenPublicWebCrawler
User-agent: Webzio-Extended
User-agent: YouBot
Disallow: /
# End AI crawler block

# Start Sitemaps
Sitemap: https://www.vg.no/sitemaps/files/articles-48hrs.xml
Sitemap: https://www.vg.no/sitemap.xml
Sitemap: https://www.vg.no/dinepenger/sitemap.xml
# End Sitemaps
sitemap.xml 200 OK
Type URL Set URLs 269 entries Valid XML Yes
Sample URLs:
A+
Domain Intelligence
vg.no — via Domeneshop AS, 15 years, 1 months old
PASS
vg.no — via Domeneshop AS, 15 years, 1 months old
Info::
DNSSEC is not enabled
DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.
Info::
Registrar: Domeneshop AS
Domain expiry

Unknown

SSL certificate

129 days

Issued by Amazon

Domain age

15 years, 1 months

Registered June 10, 2011

DNSSEC

Not enabled

Protects against DNS spoofing

Hosting

Unknown

2600:9000:24f9:bc00:e:682f:1700:93a1

Registrar

Domeneshop AS

Lock status unknown 4 NS records
Expiry timeline
Today
+1 year
SSL expiry Danger zone (≤30 days)
Recommended actions
  • Enable DNSSEC to protect visitors from DNS spoofing
Registrar Domeneshop AS
Created June 10, 2011 (15 years, 1 months ago)
Last Updated May 26, 2025
Name Servers ns-415.awsdns-51.com, ns-1270.awsdns-30.org, ns-572.awsdns-07.net, ns-1702.awsdns-20.co.uk
DNSSEC Not enabled
Hosting
IP Address 2600:9000:24f9:bc00:e:682f:1700:93a1
Data source: rdap (0.3s)

DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.

Why this matters

Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.

Learn more ▾

DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.

Source: ICANN / RFC 4033

A+
HTTP Probe Timing
Total 123 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
13 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
1 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
4 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
123 ms
Total Time Total request time from DNS lookup through full response.
123 ms

Connection waterfall

DNS Lookup 13 ms TCP Connect 1 ms TLS Handshake 4 ms Server Processing 105 ms Content Transfer 0 ms
A
CDN & Delivery
AWS CloudFront (Miss from cloudfront)
PASS
AWS CloudFront (Miss from cloudfront)
Info::
Site is served via AWS CloudFront CDN (edge: JFK50-P3)
Got: x-amz-cf-id: 0vRhGDIMKmQZpN-FV9vBFSWZE_yNsPqIWxNeQAtzKWUvmHm4ACEi5g==
Info::
CDN cache status: Miss from cloudfront
CDN Detected: AWS CloudFront
Provider AWS CloudFront Cache Status Miss from cloudfront Evidence x-amz-cf-id: 0vRhGDIMKmQZpN-FV9vBFSWZE_yNsPqIWxNeQAtzKWUvmHm4ACEi5g==
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback