Norwegian

_sp_ses.4e5a

.AspNetCore.Mvc.CookieTempDataProvider

NrkAntiBot

ab_exp_otp

IdSrvDisplayMode

AKA_A2

_sp_id.4e5a

ncsrf

You're looking at domain 'innlogging.nrk.no' on the Norwegian country-code top-level domain (.no), featuring subdomain 'innlogging'. The second-level label 'nrk' is 3 characters long with 0 vowels and 3 consonants. Splitting it apart reveals 1 word: nrk. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

html/9b/bd/9bbdb46b-19de-4a7f-a44e-b5a4596f5dcc_fallback.html.gz

Logg på NRK - NRK pålogging

redirectUrl

encodedRedirectUrl

termsToAccept

termsAddonsToAccept

showLoginConfirmation

registrationContext

clientId

addUser

initialEmail

protectedLoginContextUrl

newUserHashAlgorithm

newUserHashSalt

goBackString

exitUrl

likelyYrOnlyUser

loginUsername

loginPassword

name

lastname

birthYear

username

password

login

html/9b/bd/9bbdb46b-19de-4a7f-a44e-b5a4596f5dcc.html.gz

default-src 'self' ;  script-src 'self' 'unsafe-inline' https://static.nrk.no https://*.go-mpulse.net ;  style-src 'self' 'unsafe-inline'  https://static.nrk.no ;  font-src 'self' https://static.nrk.no  https://fonts.gstatic.com  https://maxcdn.bootstrapcdn.com ;  img-src 'self' data: https://qr.nrk.no https://static.nrk.no https://avatars.nrk.no https://gfx.nrk.no https://*.akstat.io https://direct.nrk.no ;  connect-src 'self' https://o124059.ingest.us.sentry.io https://nrk-recommendations.appspot.com https://data.nrk.no https://api.pwnedpasswords.com https://*.akstat.io https://*.go-mpulse.net https://*.akamaihd.net ;  frame-src 'self' https://innlogging-cors-validator.nrksuper.no https://preprod-innlogging-cors-validator.nrksuper.no ;  frame-ancestors 'self' ;

appId=cid-v1:3990ef0b-ad6e-47fa-a235-6ff3b66621b7

79534af5598bb9857fb9fdd8847bd92d05ebe9acc77045bea8eabbdad64b3a92

2fa5d9fde4387989f8126bfcd909dd798c4e2d6509bf9f489761463bb2440e11

c235260f985d8c29c704bc7f1bd47a4c1c59709e41358190f0ea02477172e0fa

8fffe88f9c6815b12fcf3f59c7663b99c102c20909f88dbd63a44516ad2799f5

1e3f40a93d3928bf8e902ee8e218c5ae2b01e2ce7cbb9a1e10bdd4e1ad0c542d

e038d4198d573ee2d0de77d686cee50b713971742eceee2c2f717a79b26d0183

daeccb765bef634555ac917a9b9d7ad1dc52ba12eb05f269acf8c5d31e95199d

7548fb10af7d122f63a724262b6ce48786e25a2747af31ceb1bcd0e9cfd9cdcb

c21be00e2626eb44ff23f0ce53c7feb14dde8e9bccdf0784712a85ed18de9e28

38bfe0c02da69fecbed9e14cb1cfed0de2dd1512cd9985ea940999419e740c89

a86dd8a025f3ba1e23b1202cffea9078c5ffbc28d0ab68eaac4f3ed55200be73

5f42a8b3b899e962e9c004ad9e4384d927a4bee8e7af1a908b85df9a7b7e064f

6e01899d514f65f42e93e9dbbcf4242798f168d43777f250ad273b42c93615b6

85a6e94442de60f23f72eb492be0303f6352bf57c7cd5eaa6a0a315e487ddbc2

ca7e0a003dfdcb14fc77e2333ab8dbbd7a71d6457ed1c5a3073fb40919076604

bf64f9da63b2bdd9e22a6b129156dafc68bbebac556ee960f956c8bc6b7631f0

697bba43569d139e83373bbb5268b144f62edae04194299f0900c59ca423fd65

2c49be2228328985e38d13361a524ef271eb4a672023abaa96116aec975b9899

f69f0bd7c4fed2bf58fbd084f6f29ddadb567e25f63c5c21c2f3ce2ad9584cb0

1ef0162179ba0006f3d55c6ab4a5cdb322f0c63b9ed5fb1248a52e59a4ee061d

36458efe6f2b6340da59d8096820f9d22e2c572eff1d8840d569298cb110a662

ae12552fc77aa026b1d698d94d3be53b2fa38479e6baac17c28b5cbcddf47d3c

2baf37dba489b5b5fde48d3feaf2b65d8d006b09ba1e1d94eff0742134b87c01

b90eb89df4b5c2a97b18ddc07752dddb04a0f5954997a418d3515d610d2d7c51

c508aebc8e60071df82a76e4e52040a37cd8177d0b019159919196b88490dd4c

08a96955fe07d86f6536bf390fbee7c679e4bcedceb69e2a452bf1044732cf13

d1e53be4e5f3b7f83ad9f1ddf44e6a0445488ba9f907a837d0e549fbebc20b58

07224c6c09373749aa8fbb151add8efb7459789afea6484128fecd60f18929aa

5bef4d31f05db08894190e2bf1a60b2e833ae1549670841aec956958799b8cce

e362e960665e0f8a223e3a70fe4089d221c6c00a3ddc949a82efa514cc1457eb

918d115908e213375a80458f7f6fd858703946835426f05b1058ac0222b1a868

3149d3e8900ac456d5345b982926a029cdeafac88d492188a38ba2dbc34e417f

b91115bd0c4ea6beeb389cf18d6cd838eab1d6804331049389b60a1d10cc4abc

e3fbba2f2c6c4e6693946accaa9051802612018764376d6cfcad72c2ae4c45b3

74a6f2a0f7f7631f67985fb612c9a1e4a5d0d557c4d1bde79ee44bd15166670c

viewport

description

theme-color

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Domeneshop AS

NRK Hostmaster

nrk.no

NOC United States

ipadmin

Akamai Technologies, Inc.

Steven Jay Schecter

AKAMAI

(window.BOOMR_mq=window.BOOMR_mq||[]).push(["addVar",{"rua.upush":"true","rua.cpush":"false","rua.upre":"true","rua.cpre":"false","rua.uprl":"false","rua.cprl":"false","rua.cprf":"false","rua.trans":"SJ-cc900d95-25a7-40a2-b9f0-508670ad208a","rua.cook":"true","rua.ims":"false","rua.ufprl":"false","rua.cfprl":"false","rua.isuxp":"false","rua.texp":"norulematch","rua.ceh":"false","rua.ueh":"false","rua.ieh.st":"0"}]);


    window.snowplowContext = {"clientId":"","userId":null,"nrkSession":null,"nrkCtx":null,"referringClient":null};
    window.abExperiments = [{"key":"otp","value":"on"}];
  


var logger = new ConsoleLogger();
if(window.doDebug){
  logger.info('Debugging is on!');
}



  function track(action, label) {
    if (window.trackEvent) {
        window.trackEvent('login-register', action, label || window.loginFlow.getCurrentStep().name);
    }
  }



window.loginFlow = new LoginFlow('iwP7ipAN33NC7rMBq0bjFfAhCNwJtKkmezoc-_FKQAE', track, logger);



    ;(function (p, l, o, w, i, n, g) {
      if (!p[i]) {
        p.GlobalSnowplowNamespace = p.GlobalSnowplowNamespace || [];
        p.GlobalSnowplowNamespace.push(i);
        p[i] = function () {
          (p[i].q = p[i].q || []).push(arguments)
        };
        p[i].q = p[i].q || [];
        n = l.createElement(o);
        g = l.getElementsByTagName(o)[0];
        n.async = 1;
        n.src = w;
        g.parentNode.insertBefore(n, g)
      }
    }(window, document, "script", "/content/js/snowplow/plogen.js", "snowplow"));
  

if ('NodeList' in window && !NodeList.prototype.forEach) {
 console.debug('polyfill for IE11 (nodelist.forEach)');
 NodeList.prototype.forEach = function (callback, thisArg) {
 thisArg = thisArg || window;
 for (var i = 0; i < this.length; i++) {
 callback.call(thisArg, this[i], i, this);
 }
 };
 }

 Element.prototype.isVisible = function () {

 function _isVisible(el) {
 var p = el.parentNode;

 if (!_elementInDocument(el)) {
 return false;
 }

 if (9 === p.nodeType) { //top level node (document)
 return true;
 }

 if (
 '0' === _getStyle(el, 'opacity') ||
 'none' === _getStyle(el, 'display') ||
 'hidden' === _getStyle(el, 'visibility')
 ) {
 return false;
 }

 //-- If we have a parent, let's continue:
 if (p) {
 //-- Let's recursively check upwards:
 return _isVisible(p);
 }
 return true;
 }

 //-- Cross browser method to get style properties:
 function _getStyle(el, property) {
 if (window.getComputedStyle) {
 return document.defaultView.getComputedStyle(el, null)[property];
 }
 if (el.currentStyle) {
 return el.currentStyle[property];
 }
 }

 function _elementInDocument(element) {
 while (element = element.parentNode) {
 if (element === document) {
 return true;
 }
 }
 return false;
 }

 return _isVisible(this);

 };


 function isLocalUrl(url) {
 if (url.length === 0) {
 return true;
 }
 if (url[0] === '/' && !(url.length > 1 && url[1] === '/')) {
 return true;
 }
 if (url[0] === '#') {
 return true;
 }
 try {
 var urlObj = new URL(url, window.location);
 return urlObj.hostname === window.location.hostname;
 } catch (error) {
 return false;
 }
 }


 function enrichLocalUrlsWithContextParams(url) {
 try {

 if (url === null || url === undefined || url.length === 0) {
 return url;
 }
 if (!isLocalUrl(url)) {
 return url;
 }
 var originalAnchor = '';
 if (url.indexOf('#') >= 0) {
 originalAnchor = url.substring(url.indexOf('#') + 1);
 url = url.substring(0, url.indexOf('#'));
 }

 var originalQueryString = '';
 var originalUrlWithoutQueryString = url;
 if (url.indexOf('?') >= 0) {
 originalUrlWithoutQueryString = url.substring(0, url.indexOf('?'));
 originalQueryString = url.substring(url.indexOf('?'));
 }
 var urlParams = new URLSearchParams(originalQueryString);
 var resultUrlParams = urlParams.toString();
 var result = originalUrlWithoutQueryString;
 if (resultUrlParams.length > 0) {
 result += `?${resultUrlParams}`;
 }
 if (originalAnchor.length > 0) {
 result += `#${originalAnchor}`;
 }
 return result;
 } catch (error) {
 return url;
 }
 }

 function placeValidationErrors(errors, guiScope, trackingFunction) {
 guiScope = guiScope || document;
 var inputs = guiScope.querySelectorAll('input');

 var roundupPlacement = null;
 roundupPlacement = guiScope.querySelector('.error-messages');

 if (roundupPlacement === null) {
 inputs.forEach(function (input) {
 if (input.isVisible()) {
 roundupPlacement = input;
 }
 });
 }
 var submits = guiScope.querySelectorAll('.inn-button--primary');
 if (roundupPlacement === null && submits && submits.length > 0) {
 submits.forEach(function (submit) {
 if (submit.isVisible()) {
 roundupPlacement = submit;
 }
 });
 }

 var firstProblem = undefined;
 var unresolved = [];
 errors.forEach(function (error, index) {
 if (trackingFunction && error.trackingKeys) {
 for (var i = 0; i < error.trackingKeys.length; i++) {
 try {
 trackingFunction(error.trackingKeys[i]);
 } catch (error) {
 console.error(error);
 }
 }
 }
 var field = error.field || error.key;
 if (field === undefined || field === '') {
 unresolved.push(error);
 return;
 }
 var matchingInputs = guiScope.querySelectorAll(`#${field}, [name='${field}'], [data-formRole='${field}'], [data-validationKey='${field}']`);
 matchingInputs.forEach(function (match, index) {
 var message = match.insertAdjacentElement('afterend', document.createElement('span'));
 message.className = 'inn-messages inn-messages--error inn-messages--error-naked inn-messages--error-auto';
 message.setAttribute('data-validationMessageFor', field);
 message.innerText = error.message;
 match.setAttribute('aria-invalid', 'true');
 firstProblem = firstProblem || match;
 });
 if (matchingInputs.length === 0) {
 unresolved.push(error);
 }
 });


 if (unresolved.length > 0) {
 while (roundupPlacement.parentElement
 && (roundupPlacement.parentElement.tagName === 'LABEL'
 || (roundupPlacement.parentElement.className.indexOf('login-label') >= 0))) {
 roundupPlacement = roundupPlacement.parentElement;
 }
 var isDedicatedRoundupHolder = roundupPlacement.classList.contains('error-messages');
 if (!isDedicatedRoundupHolder) {
 var roundupHolder = roundupPlacement.insertAdjacentElement('afterend', document.createElement('div'));
 roundupHolder.className = 'error-messages';
 roundupPlacement = roundupHolder;
 }
 var roundup = roundupPlacement.appendChild(document.createElement('span'));
 roundup.className = 'inn-messages inn-messages--error inn-messages--error-auto';
 unresolved.forEach(function (error, index) {
 var msg = roundup.appendChild(document.createElement('span'));
 msg.textContent = error.message;
 //msg.insertAdjacentElement('afterend', document.createElement('br'))
 });
 }
 var focalPoint = firstProblem || roundupPlacement;
 if (focalPoint) {
 focalPoint.focus();
 }

 }

 function doAjax(verb, url, body, onSuccess, onFailure, guiScope, trackingFunction) {
 if (onSuccess && typeof onSuccess !== 'function') {
 throw new Error('onSuccess must be a function');
 }
 if (onFailure && typeof onFailure !== 'function') {
 throw new Error('onFailure must be a function');
 }
 if (trackingFunction && typeof trackingFunction !== 'function') {
 throw new Error('trackingFunction must be a function');
 }
 var csrfTokenName = 'ncsrf';
 var csrfTokenValue = 'iwP7ipAN33NC7rMBq0bjFfAhCNwJtKkmezoc-_FKQAE';
 var xhr = new window.XMLHttpRequest();
 guiScope = guiScope || document;

 var inputs = guiScope.querySelectorAll('input');
 inputs.forEach(function (input) {
 input.setAttribute('aria-invalid', 'false')
 });

 var oldErrorMessages = guiScope.querySelectorAll('.inn-messages--error-auto');
 oldErrorMessages.forEach(function (msg) {
 msg.parentNode.removeChild(msg)
 });

 var submits = guiScope.querySelectorAll('.inn-button--primary');
 var busiedSubmits = [];
 submits.forEach(function (submit) {
 if (submit.getAttribute('aria-busy') !== 'true') {
 busiedSubmits.push(submit);
 submit.setAttribute('aria-busy', 'true');
 }
 });

 var response = undefined;
 xhr.onload = function () {
 busiedSubmits.forEach(function (submit) {
 submit.setAttribute('aria-busy', 'false')
 });
 try {
 response = JSON.parse(xhr.responseText || '{}')
 } catch (err) {

 }

 if (!Array.isArray(response.errors)) {
 response.errors = xhr.status >= 400
 ? [{message: 'Noe gikk galt'}]
 : []
 }

 if (response.errors.length) {
 placeValidationErrors(response.errors, guiScope, trackingFunction);

 if (onFailure) {
 onFailure(xhr.status, response.errors, response);
 }
 } else {
 onSuccess(xhr.status, response);
 }
 }
 var urlToUse = window.enrichLocalUrlsWithContextParams(url);
 xhr.open(verb, urlToUse, true);
 xhr.setRequestHeader('Content-Type', 'application/json; charset=utf-8')
 xhr.setRequestHeader('Accept', 'application/json; charset=utf-8')
 if (isLocalUrl(url)) {
 xhr.setRequestHeader(csrfTokenName, csrfTokenValue)
 }
 xhr.send(JSON.stringify(body || {}))
 }

 function http(verb, url, body, onSuccess, onFailure) {
 if (onSuccess && typeof onSuccess !== 'function') {
 throw new Error('onSuccess must be a function');
 }
 if (onFailure && typeof onFailure !== 'function') {
 throw new Error('onFailure must be a function');
 }
 var csrfTokenName = 'ncsrf';
 var csrfTokenValue = 'iwP7ipAN33NC7rMBq0bjFfAhCNwJtKkmezoc-_FKQAE';
 var xhr = new window.XMLHttpRequest();
 var response = undefined;
 xhr.onload = function () {
 try {
 response = JSON.parse(xhr.responseText || '{}')
 } catch (err) {

 }

 if (!Array.isArray(response.errors)) {
 response.errors = xhr.status >= 400
 ? [{message: 'Noe gikk galt'}]
 : []
 }

 if (response.errors.length) {
 if (onFailure) {
 onFailure(xhr.status, response.errors, response);
 }
 } else {
 onSuccess(xhr.status, response);
 }
 }

 var urlToUse = enrichLocalUrlsWithContextParams(url);
 xhr.open(verb, urlToUse, true);
 xhr.setRequestHeader('Content-Type', 'application/json; charset=utf-8');
 xhr.setRequestHeader('Accept', 'application/json; charset=utf-8');
 xhr.setRequestHeader(csrfTokenName, csrfTokenValue);
 xhr.send(JSON.stringify(body || {}));
 }

 function coreToggleCollapseSiblings(event) {
 var target = event.target;
 var siblings = target.parentElement.querySelectorAll('.collapsibleSibling');
 var siblings2 = target.parentElement.parentElement.querySelectorAll('.collapsibleSibling');
 if (target.hidden) {
 return; //don't do anything when collapsing
 }
 event.stopPropagation();
 siblings2.forEach(function (sibling) {
 if (sibling !== target) {
 sibling.hidden = true;
 }
 });
 }

 function testPwnedPassword(password, onConclusion) {
 try {
 var msgUint8 = new TextEncoder().encode(password);
 if (crypto && crypto.subtle && crypto.subtle.digest) {
 crypto.subtle.digest('SHA-1', msgUint8).then(function (hashBuffer) {
 var hashArray = Array.from(new Uint8Array(hashBuffer));
 var sha1 = hashArray.map(b => b.toString(16).padStart(2, '0')).join('');
 var sha1Prefix = sha1.substring(0, 5);
 var sha1Suffix = sha1.substring(5);

 var xhr = new window.XMLHttpRequest();

 xhr.onload = function () {
 try {
 var lines = xhr.responseText.split('\n');
 var found = false;
 for (var i = 0; i < lines.length; i++) {
 var line = lines[i];
 var parts = line.split(':');
 if (parts[0] == sha1Suffix.toUpperCase()) {
 found = true;
 break;
 }
 }
 if (found) {
 onConclusion(true);
 } else {
 onConclusion(false);
 }
 } catch (err) {
 console.error('could not test for pwned password', err);
 onConclusion(undefined);
 }
 }

 xhr.open('GET', 'https://api.pwnedpasswords.com/range/' + sha1Prefix, true);
 xhr.send();
 });
 } else {
 onConclusion(undefined);
 }
 } catch (err) {
 console.error('could not test for pwned password', err);
 onConclusion(undefined);
 }
 }

 function copyToClipBoard(text) {
 if (navigator.clipboard) {
 return navigator.clipboard.writeText(text)
 } else {
 return new Promise(function (resolve, reject) {
 var textarea = document.createElement('textarea');
 textarea.value = text;

 // Avoid scrolling to bottom
 textarea.style.top = "0";
 textarea.style.left = "0";
 textarea.style.position = "fixed";

 document.body.appendChild(textarea);
 textarea.focus();
 textarea.select();

 try {
 var success = document.execCommand('copy');
 if (success) {
 resolve();
 } else {
 reject("Copy failed");
 }
 } catch (err) {
 reject(err);
 }
 document.body.removeChild(textarea);
 });
 }
 }

Vi har sendt en e-post til om hvordan du kan endre passordet ditt.

For å slette brukeren din må du skrive inn passordet.
Da vil også alle dine data bli fjernet

Passordet du skrev stemmer ikke for e-postadressen:

Synd å miste deg. Du kan selvsagt fortsatt bruke NRK uten å være pålogget

<h1>Hei,</h1>

Du må godta våre nye brukervilkår for å fortsette som innlogget bruker.

Vi har sendt en e-post til  om hvordan du kan endre passordet ditt.

For å slette brukeren din må du skrive inn passordet.
Da vil også alle dine data bli fjernet

Passordet du skrev stemmer ikke for e-postadressen: 

# Hei, 

**Du må godta våre nye brukervilkår for å fortsette som innlogget bruker.**

Requests	IP Address	Location	AS Autonomous System
28	184.24.77.26	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
7	184.24.77.8	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
7	23.50.131.202	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	184.24.77.7	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	23.50.131.200	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	35.244.162.126	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
2	184.24.77.21	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	2a02:26f0:7100:59a::11a6	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	2a02:26f0:7100:594::11a6	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	2a02:26f0:7100:b8e::11a6	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
43	19	-	-

Security Scan Report: innlogging.nrk.no

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History