frivillig.no

.no crawl

First seen 2026-05-30 · Last seen 2026-06-03 · ok HTTP/1.1 200 562 ms crawled 2026-05-31

US · 107.178.254.230 · AS396982 Google LLC

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Frivillig.no
Description
Bli frivillig i organisasjoner, lag og foreninger over hele landet!
Language
en

Open Graph

url
https://frivillig.no/
title
Frivillig.no
description
Fritid.no er en digital oversikt over frivillig oppdrag for hele landet der du bor.

Technology

Analytics
  • Plausible

Third-party hosts loaded (5)

  • cdnjs.cloudflare.com×2
  • fast.fonts.net×1
  • maps.googleapis.com×1
  • plausible.io×1
  • upload-widget.cloudinary.com×1

DNS records live

NS
  • ns-cloud-e1.googledomains.com
  • ns-cloud-e2.googledomains.com
  • ns-cloud-e3.googledomains.com
  • ns-cloud-e4.googledomains.com
MX
  • 1 frivillig-no.mail.protection.outlook.com
Verified for
  • Google
  • Meta
  • Microsoft 365

Email authentication partial

SPF
v=spf1 a mx include:spf.protection.outlook.com include:_spf.google.com include:servers.mcsv.net include:sendgrid.net include:_spf.sndr.no ~all
softfail (~all)
DMARC
v=DMARC1; p=none; rua=mailto:dmarc_agg@vali.email
policy: none (monitoring only)
DKIM
Show 4 DKIM selectors
  • google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDFK5Z1L2hZ/ir6BUB+raC9NmhN69WwlTDCSV8KfuogmRsstRRHoXzo9keSHADdJIYdOkSwyvc90FgFvCVxdE…
  • k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64FfcnaF1KDGMHb8LBk1aGQ94v+56OEkBpC64wNWNyncr9MqhjVaohCK7V9CoRsmjfN1gaSnWvw/1vbbd/…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3MbKNcgY4dVVbfqbZ4VBjeHddY5SwqbwbEs0+/to8EJ1NZOxjf0FEYwAP1E97Sj21uU+h4TSzoWplfeV06ySOxD…
selectors probed

Certificate (current)

WR3
from 2026-05-22 to 2026-08-20
Expires in 77 days

HTTP security headers

Header hygiene 85/100 Checked live page: https://frivillig.no/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • cross-origin-opener-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
no-referrer
x-frame-options
DENY
x-content-type-options
nosniff
content-security-policy
default-src 'self' https://cdn.livechatinc.com;script-src 'self' localhost:3011 https://www.googleapis.com/auth/analytics.readonly https://maps.googleapis.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com/ https://maps.googleapis.com/ https://cdn.livechatinc.com https://livechatinc.com https://*.livechatinc.com https://upload-widget.cloudinary.com https://connect.facebook.net https://sc-static.net https://*.googletagmanager.com https://www.googletagmanager.com/gtm.js https://www.google-analytics.com https://www.google-analytics.com/analytics.js https://sdk.letshare.app/sdk.js https://*.doubleclick.net https://stats.g.doubleclick.net https://www.googleadservices.com https://www.youtube.com https://cdnjs.cloudflare.com https://tr.snapchat.com/ https://consent.cookiebot.com https://consentcdn.cookiebot.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: https://res.cloudinary.com https:
strict-transport-security
max-age=31536000; includeSubDomains
cross-origin-opener-policy
same-origin

Linked from (5)