vy.no Review

 N/A

HTTP/1.1 301 Moved Permanently
Date: Mon, 25 Aug 2025 23:09:42 GMT
Content-Length: 0
Connection: close
Location: https://www.vy.no
Server: DNSME HTTP Redirection

HTTP/1.1 403 HTTP Forbidden
Content-Type: text/html;charset=utf-8
Content-Length: 733
Connection: keep-alive
Server: CloudFront
Date: Mon, 25 Aug 2025 23:09:43 GMT
x-datadome: protected
accept-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
charset: utf-8
cache-control: max-age=0, private, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-credentials: true
access-control-expose-headers: x-dd-b, x-set-cookie
access-control-allow-origin: http://vy.no
x-datadome-cid: AHrlqAAAAAMA67TIy7HglY4AnQe4Hg==
x-dd-b: 1
set-cookie: datadome=ewaN~4ECbnBReJZFGnYX5YGg~liCpmf36KlpnhAQVvi3eCjTT4Ii49te8j_51VQMZKKGN5GJLiwV1kNAjkvojQt4MdwMI_q5uF4X_S281tlKY04TNFZS15wCK3o7bwG5; Max-Age=31536000; Domain=.vy.no; Path=/; Secure; SameSite=Lax
X-Cache: LambdaGeneratedResponse from cloudfront
Via: 1.1 a149f4f5bbee293b9be1b5cd1f06e872.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HIO52-P3
X-Amz-Cf-Id: tnGirXwFa4qr_ok9QhXdReQNIKQa7Ux2Tp5FJCbXNLWcIaA7s-0cUw==
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Content-Security-Policy: default-src 'self' https:; style-src 'self' 'unsafe-inline' vytag.humany.net entur.humany.net wds.ace.teliacompany.com tagmanager.google.com fonts.googleapis.com; script-src blob: 'self' 'unsafe-inline' 'unsafe-eval' dd.cloud.vy.no js.api.here.com ct.captcha-delivery.com az416426.vo.msecnd.net wds.ace.teliacompany.com connect.facebook.net *.googletagmanager.com tagmanager.google.com www.googleadservices.com *.hotjar.com bat.bing.com cdn.moengage.com *.openstreetmap.org; connect-src blob: 'self' *.cloud.vy.no *.cloud.vy.se *.adyen.com *.hereapi.com js.api.here.com *.ace.teliacompany.net dc.services.visualstudio.com/v2/track stats.g.doubleclick.net www.facebook.com/tr/ vytag.humany.net entur.humany.net *.hotjar.com *.hotjar.io bat.bing.com www.google.com google.com adservice.google.com api.bring.com cloudflare-dns.com sdk-02.moengage.com wss://*.hotjar.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com eyx1eny7.apicdn.sanity.io; img-src data: images.vy.no ts.tradetracker.net *.openstreetmap.org js.api.here.com 'self' *.adyen.com cdn.sanity.io view-components.cloud.nsb.no moe-email-campaigns.s3.amazonaws.com image.moengage.com www.googletagmanager.com ssl.gstatic.com www.gstatic.com *.googletagmanager.com *.google-analytics.com www.google.no googleads.g.doubleclick.net www.google.com bat.bing.com www.facebook.com/tr/ ad.doubleclick.net; font-src 'self' *.vy.no js.api.here.com vytag.humany.net entur.humany.net ace-knowledge-cdn.teliacompany.net fonts.gstatic.com *.hotjar.com; frame-src 'self' *.id.vy.no id.vy.no *.adyen.com geo.captcha-delivery.com wds.ace.teliacompany.com *.hotjar.com *.doubleclick.net www.facebook.com cdn.moengage.com; frame-ancestors 'self' registration.vulog.center; report-uri /web-services/web-logger
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000