skyss.no

HTML metadata

Title: Alt om kollektivtilbodet i Vestland
Description: Her finn du reisetider, prisar, korleis kjøpe billettar og anna informasjon du treng når du skal reise kollektivt med buss, bybane, båt og ferje i Vestland.
Language: nn-NO

Open Graph

url: https://www.skyss.no/
title: Alt om kollektivtilbodet i Vestland
description: Her finn du reisetider, prisar, korleis kjøpe billettar og anna informasjon du treng når du skal reise kollektivt med buss, bybane, båt og ferje i Vestland.

Technology

CDN: Cloudflare
jQuery: 3.6.0

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Third-party hosts loaded (2)

consent.cookiebot.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns1.vlfk.no
ns2.vlfk.no

MX

5 skyss-no.mail.protection.outlook.com

TXT

DomainVerification=XJPJBN21TLBIBRJ75UGIYWDYBH50DH3OV3IZ5GLCLRNSMJJRY82B38OBCIAKPLKS
e2u+vTrY+w4k1O8otMQv3a9zHTU4uM2vVUB/GVMz5Z6cyTgCiV9/IJTw88fdN2ibgDwoDgkgURDrTbRuOvwD5A==
hes=4245eacc38a6d01fb6ea5b3080b40911

Verified for

Atlassian
Microsoft 365

Email authentication strong

SPF

v=spf1 mx ip4:178.21.134.86 ip4:191.233.77.196 ip4:213.161.165.194 ip4:195.225.27.32 include:spf.mailjet.com include:_spf.atlassian.net include:sendgrid.net  include:spf.mandrillapp.com  include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:2peyusk1@ag.dmarcian-eu.com; ruf=mailto:dmarc@skyss.no; ri=7200

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCpmQMq4cPJTOaU17kBRkJQdcvLcLeNX/rEZfupCDzD1YqeqjywbvZJ8PyP8t1xZ/cilZjjWCp2PAO8mZjo/S…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf08PvifvfIwsaQRudNKtH9QE1CKlcyDGH0BAEBmkE+vDPKue87lYgIeg3Rl1i09WN9eQO7h66sxyg66v3…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0KhDkvuI6bgxJ3nz/37PjBnORBW5Ag2GTv0wOAxI0hzUW9pJrJPXhCXt58RvjSNwI5GuoQm+lY+ROkxtk1+30QO…

selectors probed

Certificate (current)

WE1

from 2026-04-22 to 2026-07-21

Expires in 46 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.skyss.no/

present

strict-transport-security
content-security-policy
x-frame-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
missing content type protection

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: sameorigin
permissions-policy: geolocation=(self), microphone=(), camera=(), usb=(), display-capture=(), payment=()
content-security-policy: default-src https: 'self' wss: 'self'; script-src https: https://reiseplanlegger-web-module.transhub.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src https: 'self' 'unsafe-inline'; img-src https: 'self' data:;
strict-transport-security: max-age=62208000; includeSubDomains