Norwegian

_sp_ses.4e5a

.AspNetCore.Mvc.CookieTempDataProvider

NrkAntiBot

ab_exp_otp

IdSrvDisplayMode

AKA_A2

_sp_id.4e5a

ncsrf

You're looking at domain 'innlogging.nrk.no' on the Norwegian country-code top-level domain (.no), featuring subdomain 'innlogging'. The second-level label 'nrk' is 3 characters long with 0 vowels and 3 consonants. Splitting it apart reveals 1 word: nrk. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

redirectUrl

encodedRedirectUrl

termsToAccept

termsAddonsToAccept

showLoginConfirmation

registrationContext

clientId

addUser

initialEmail

protectedLoginContextUrl

newUserHashAlgorithm

newUserHashSalt

goBackString

exitUrl

likelyYrOnlyUser

loginUsername

loginPassword

name

lastname

birthYear

username

password

login

default-src 'self' ;  script-src 'self' 'unsafe-inline' https://static.nrk.no https://*.go-mpulse.net ;  style-src 'self' 'unsafe-inline'  https://static.nrk.no ;  font-src 'self' https://static.nrk.no  https://fonts.gstatic.com  https://maxcdn.bootstrapcdn.com ;  img-src 'self' data: https://qr.nrk.no https://static.nrk.no https://avatars.nrk.no https://gfx.nrk.no https://*.akstat.io https://direct.nrk.no ;  connect-src 'self' https://o124059.ingest.us.sentry.io https://nrk-recommendations.appspot.com https://data.nrk.no https://api.pwnedpasswords.com https://*.akstat.io https://*.go-mpulse.net https://*.akamaihd.net ;  frame-src 'self' https://innlogging-cors-validator.nrksuper.no https://preprod-innlogging-cors-validator.nrksuper.no ;  frame-ancestors 'self' ;

appId=cid-v1:3990ef0b-ad6e-47fa-a235-6ff3b66621b7

1ef0162179ba0006f3d55c6ab4a5cdb322f0c63b9ed5fb1248a52e59a4ee061d

c235260f985d8c29c704bc7f1bd47a4c1c59709e41358190f0ea02477172e0fa

8fffe88f9c6815b12fcf3f59c7663b99c102c20909f88dbd63a44516ad2799f5

1e3f40a93d3928bf8e902ee8e218c5ae2b01e2ce7cbb9a1e10bdd4e1ad0c542d

e038d4198d573ee2d0de77d686cee50b713971742eceee2c2f717a79b26d0183

daeccb765bef634555ac917a9b9d7ad1dc52ba12eb05f269acf8c5d31e95199d

7548fb10af7d122f63a724262b6ce48786e25a2747af31ceb1bcd0e9cfd9cdcb

c21be00e2626eb44ff23f0ce53c7feb14dde8e9bccdf0784712a85ed18de9e28

38bfe0c02da69fecbed9e14cb1cfed0de2dd1512cd9985ea940999419e740c89

a86dd8a025f3ba1e23b1202cffea9078c5ffbc28d0ab68eaac4f3ed55200be73

5f42a8b3b899e962e9c004ad9e4384d927a4bee8e7af1a908b85df9a7b7e064f

6e01899d514f65f42e93e9dbbcf4242798f168d43777f250ad273b42c93615b6

85a6e94442de60f23f72eb492be0303f6352bf57c7cd5eaa6a0a315e487ddbc2

ca7e0a003dfdcb14fc77e2333ab8dbbd7a71d6457ed1c5a3073fb40919076604

bf64f9da63b2bdd9e22a6b129156dafc68bbebac556ee960f956c8bc6b7631f0

697bba43569d139e83373bbb5268b144f62edae04194299f0900c59ca423fd65

2c49be2228328985e38d13361a524ef271eb4a672023abaa96116aec975b9899

f69f0bd7c4fed2bf58fbd084f6f29ddadb567e25f63c5c21c2f3ce2ad9584cb0

ae12552fc77aa026b1d698d94d3be53b2fa38479e6baac17c28b5cbcddf47d3c

2baf37dba489b5b5fde48d3feaf2b65d8d006b09ba1e1d94eff0742134b87c01

b90eb89df4b5c2a97b18ddc07752dddb04a0f5954997a418d3515d610d2d7c51

79534af5598bb9857fb9fdd8847bd92d05ebe9acc77045bea8eabbdad64b3a92

36458efe6f2b6340da59d8096820f9d22e2c572eff1d8840d569298cb110a662

c508aebc8e60071df82a76e4e52040a37cd8177d0b019159919196b88490dd4c

08a96955fe07d86f6536bf390fbee7c679e4bcedceb69e2a452bf1044732cf13

d1e53be4e5f3b7f83ad9f1ddf44e6a0445488ba9f907a837d0e549fbebc20b58

07224c6c09373749aa8fbb151add8efb7459789afea6484128fecd60f18929aa

5bef4d31f05db08894190e2bf1a60b2e833ae1549670841aec956958799b8cce

e362e960665e0f8a223e3a70fe4089d221c6c00a3ddc949a82efa514cc1457eb

918d115908e213375a80458f7f6fd858703946835426f05b1058ac0222b1a868

3149d3e8900ac456d5345b982926a029cdeafac88d492188a38ba2dbc34e417f

b91115bd0c4ea6beeb389cf18d6cd838eab1d6804331049389b60a1d10cc4abc

e3fbba2f2c6c4e6693946accaa9051802612018764376d6cfcad72c2ae4c45b3

74a6f2a0f7f7631f67985fb612c9a1e4a5d0d557c4d1bde79ee44bd15166670c

2fa5d9fde4387989f8126bfcd909dd798c4e2d6509bf9f489761463bb2440e11

viewport

description

theme-color

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Domeneshop AS

NRK Hostmaster

nrk.no

NOC United States

ipadmin

Akamai Technologies, Inc.

Steven Jay Schecter

AKAMAI

(window.BOOMR_mq=window.BOOMR_mq||[]).push(["addVar",{"rua.upush":"true","rua.cpush":"false","rua.upre":"true","rua.cpre":"false","rua.uprl":"false","rua.cprl":"false","rua.cprf":"false","rua.trans":"SJ-cc900d95-25a7-40a2-b9f0-508670ad208a","rua.cook":"true","rua.ims":"false","rua.ufprl":"false","rua.cfprl":"false","rua.isuxp":"false","rua.texp":"norulematch","rua.ceh":"false","rua.ueh":"false","rua.ieh.st":"0"}]);


    window.snowplowContext = {"clientId":"","userId":null,"nrkSession":null,"nrkCtx":null,"referringClient":null};
    window.abExperiments = [{"key":"otp","value":"on"}];
  


var logger = new ConsoleLogger();
if(window.doDebug){
  logger.info('Debugging is on!');
}



  function track(action, label) {
    if (window.trackEvent) {
        window.trackEvent('login-register', action, label || window.loginFlow.getCurrentStep().name);
    }
  }



window.loginFlow = new LoginFlow('iwP7ipAN33NC7rMBq0bjFfAhCNwJtKkmezoc-_FKQAE', track, logger);



    ;(function (p, l, o, w, i, n, g) {
      if (!p[i]) {
        p.GlobalSnowplowNamespace = p.GlobalSnowplowNamespace || [];
        p.GlobalSnowplowNamespace.push(i);
        p[i] = function () {
          (p[i].q = p[i].q || []).push(arguments)
        };
        p[i].q = p[i].q || [];
        n = l.createElement(o);
        g = l.getElementsByTagName(o)[0];
        n.async = 1;
        n.src = w;
        g.parentNode.insertBefore(n, g)
      }
    }(window, document, "script", "/content/js/snowplow/plogen.js", "snowplow"));
  

if ('NodeList' in window && !NodeList.prototype.forEach) {
 console.debug('polyfill for IE11 (nodelist.forEach)');
 NodeList.prototype.forEach = function (callback, thisArg) {
 thisArg = thisArg || window;
 for (var i = 0; i < this.length; i++) {
 callback.call(thisArg, this[i], i, this);
 }
 };
 }

 Element.prototype.isVisible = function () {

 function _isVisible(el) {
 var p = el.parentNode;

 if (!_elementInDocument(el)) {
 return false;
 }

 if (9 === p.nodeType) { //top level node (document)
 return true;
 }

 if (
 '0' === _getStyle(el, 'opacity') ||
 'none' === _getStyle(el, 'display') ||
 'hidden' === _getStyle(el, 'visibility')
 ) {
 return false;
 }

 //-- If we have a parent, let's continue:
 if (p) {
 //-- Let's recursively check upwards:
 return _isVisible(p);
 }
 return true;
 }

 //-- Cross browser method to get style properties:
 function _getStyle(el, property) {
 if (window.getComputedStyle) {
 return document.defaultView.getComputedStyle(el, null)[property];
 }
 if (el.currentStyle) {
 return el.currentStyle[property];
 }
 }

 function _elementInDocument(element) {
 while (element = element.parentNode) {
 if (element === document) {
 return true;
 }
 }
 return false;
 }

 return _isVisible(this);

 };


 function isLocalUrl(url) {
 if (url.length === 0) {
 return true;
 }
 if (url[0] === '/' && !(url.length > 1 && url[1] === '/')) {
 return true;
 }
 if (url[0] === '#') {
 return true;
 }
 try {
 var urlObj = new URL(url, window.location);
 return urlObj.hostname === window.location.hostname;
 } catch (error) {
 return false;
 }
 }


 function enrichLocalUrlsWithContextParams(url) {
 try {

 if (url === null || url === undefined || url.length === 0) {
 return url;
 }
 if (!isLocalUrl(url)) {
 return url;
 }
 var originalAnchor = '';
 if (url.indexOf('#') >= 0) {
 originalAnchor = url.substring(url.indexOf('#') + 1);
 url = url.substring(0, url.indexOf('#'));
 }

 var originalQueryString = '';
 var originalUrlWithoutQueryString = url;
 if (url.indexOf('?') >= 0) {
 originalUrlWithoutQueryString = url.substring(0, url.indexOf('?'));
 originalQueryString = url.substring(url.indexOf('?'));
 }
 var urlParams = new URLSearchParams(originalQueryString);
 var resultUrlParams = urlParams.toString();
 var result = originalUrlWithoutQueryString;
 if (resultUrlParams.length > 0) {
 result += `?${resultUrlParams}`;
 }
 if (originalAnchor.length > 0) {
 result += `#${originalAnchor}`;
 }
 return result;
 } catch (error) {
 return url;
 }
 }

 function placeValidationErrors(errors, guiScope, trackingFunction) {
 guiScope = guiScope || document;
 var inputs = guiScope.querySelectorAll('input');

 var roundupPlacement = null;
 roundupPlacement = guiScope.querySelector('.error-messages');

 if (roundupPlacement === null) {
 inputs.forEach(function (input) {
 if (input.isVisible()) {
 roundupPlacement = input;
 }
 });
 }
 var submits = guiScope.querySelectorAll('.inn-button--primary');
 if (roundupPlacement === null && submits && submits.length > 0) {
 submits.forEach(function (submit) {
 if (submit.isVisible()) {
 roundupPlacement = submit;
 }
 });
 }

 var firstProblem = undefined;
 var unresolved = [];
 errors.forEach(function (error, index) {
 if (trackingFunction && error.trackingKeys) {
 for (var i = 0; i < error.trackingKeys.length; i++) {
 try {
 trackingFunction(error.trackingKeys[i]);
 } catch (error) {
 console.error(error);
 }
 }
 }
 var field = error.field || error.key;
 if (field === undefined || field === '') {
 unresolved.push(error);
 return;
 }
 var matchingInputs = guiScope.querySelectorAll(`#${field}, [name='${field}'], [data-formRole='${field}'], [data-validationKey='${field}']`);
 matchingInputs.forEach(function (match, index) {
 var message = match.insertAdjacentElement('afterend', document.createElement('span'));
 message.className = 'inn-messages inn-messages--error inn-messages--error-naked inn-messages--error-auto';
 message.setAttribute('data-validationMessageFor', field);
 message.innerText = error.message;
 match.setAttribute('aria-invalid', 'true');
 firstProblem = firstProblem || match;
 });
 if (matchingInputs.length === 0) {
 unresolved.push(error);
 }
 });


 if (unresolved.length > 0) {
 while (roundupPlacement.parentElement
 && (roundupPlacement.parentElement.tagName === 'LABEL'
 || (roundupPlacement.parentElement.className.indexOf('login-label') >= 0))) {
 roundupPlacement = roundupPlacement.parentElement;
 }
 var isDedicatedRoundupHolder = roundupPlacement.classList.contains('error-messages');
 if (!isDedicatedRoundupHolder) {
 var roundupHolder = roundupPlacement.insertAdjacentElement('afterend', document.createElement('div'));
 roundupHolder.className = 'error-messages';
 roundupPlacement = roundupHolder;
 }
 var roundup = roundupPlacement.appendChild(document.createElement('span'));
 roundup.className = 'inn-messages inn-messages--error inn-messages--error-auto';
 unresolved.forEach(function (error, index) {
 var msg = roundup.appendChild(document.createElement('span'));
 msg.textContent = error.message;
 //msg.insertAdjacentElement('afterend', document.createElement('br'))
 });
 }
 var focalPoint = firstProblem || roundupPlacement;
 if (focalPoint) {
 focalPoint.focus();
 }

 }

 function doAjax(verb, url, body, onSuccess, onFailure, guiScope, trackingFunction) {
 if (onSuccess && typeof onSuccess !== 'function') {
 throw new Error('onSuccess must be a function');
 }
 if (onFailure && typeof onFailure !== 'function') {
 throw new Error('onFailure must be a function');
 }
 if (trackingFunction && typeof trackingFunction !== 'function') {
 throw new Error('trackingFunction must be a function');
 }
 var csrfTokenName = 'ncsrf';
 var csrfTokenValue = 'iwP7ipAN33NC7rMBq0bjFfAhCNwJtKkmezoc-_FKQAE';
 var xhr = new window.XMLHttpRequest();
 guiScope = guiScope || document;

 var inputs = guiScope.querySelectorAll('input');
 inputs.forEach(function (input) {
 input.setAttribute('aria-invalid', 'false')
 });

 var oldErrorMessages = guiScope.querySelectorAll('.inn-messages--error-auto');
 oldErrorMessages.forEach(function (msg) {
 msg.parentNode.removeChild(msg)
 });

 var submits = guiScope.querySelectorAll('.inn-button--primary');
 var busiedSubmits = [];
 submits.forEach(function (submit) {
 if (submit.getAttribute('aria-busy') !== 'true') {
 busiedSubmits.push(submit);
 submit.setAttribute('aria-busy', 'true');
 }
 });

 var response = undefined;
 xhr.onload = function () {
 busiedSubmits.forEach(function (submit) {
 submit.setAttribute('aria-busy', 'false')
 });
 try {
 response = JSON.parse(xhr.responseText || '{}')
 } catch (err) {

 }

 if (!Array.isArray(response.errors)) {
 response.errors = xhr.status >= 400
 ? [{message: 'Noe gikk galt'}]
 : []
 }

 if (response.errors.length) {
 placeValidationErrors(response.errors, guiScope, trackingFunction);

 if (onFailure) {
 onFailure(xhr.status, response.errors, response);
 }
 } else {
 onSuccess(xhr.status, response);
 }
 }
 var urlToUse = window.enrichLocalUrlsWithContextParams(url);
 xhr.open(verb, urlToUse, true);
 xhr.setRequestHeader('Content-Type', 'application/json; charset=utf-8')
 xhr.setRequestHeader('Accept', 'application/json; charset=utf-8')
 if (isLocalUrl(url)) {
 xhr.setRequestHeader(csrfTokenName, csrfTokenValue)
 }
 xhr.send(JSON.stringify(body || {}))
 }

 function http(verb, url, body, onSuccess, onFailure) {
 if (onSuccess && typeof onSuccess !== 'function') {
 throw new Error('onSuccess must be a function');
 }
 if (onFailure && typeof onFailure !== 'function') {
 throw new Error('onFailure must be a function');
 }
 var csrfTokenName = 'ncsrf';
 var csrfTokenValue = 'iwP7ipAN33NC7rMBq0bjFfAhCNwJtKkmezoc-_FKQAE';
 var xhr = new window.XMLHttpRequest();
 var response = undefined;
 xhr.onload = function () {
 try {
 response = JSON.parse(xhr.responseText || '{}')
 } catch (err) {

 }

 if (!Array.isArray(response.errors)) {
 response.errors = xhr.status >= 400
 ? [{message: 'Noe gikk galt'}]
 : []
 }

 if (response.errors.length) {
 if (onFailure) {
 onFailure(xhr.status, response.errors, response);
 }
 } else {
 onSuccess(xhr.status, response);
 }
 }

 var urlToUse = enrichLocalUrlsWithContextParams(url);
 xhr.open(verb, urlToUse, true);
 xhr.setRequestHeader('Content-Type', 'application/json; charset=utf-8');
 xhr.setRequestHeader('Accept', 'application/json; charset=utf-8');
 xhr.setRequestHeader(csrfTokenName, csrfTokenValue);
 xhr.send(JSON.stringify(body || {}));
 }

 function coreToggleCollapseSiblings(event) {
 var target = event.target;
 var siblings = target.parentElement.querySelectorAll('.collapsibleSibling');
 var siblings2 = target.parentElement.parentElement.querySelectorAll('.collapsibleSibling');
 if (target.hidden) {
 return; //don't do anything when collapsing
 }
 event.stopPropagation();
 siblings2.forEach(function (sibling) {
 if (sibling !== target) {
 sibling.hidden = true;
 }
 });
 }

 function testPwnedPassword(password, onConclusion) {
 try {
 var msgUint8 = new TextEncoder().encode(password);
 if (crypto && crypto.subtle && crypto.subtle.digest) {
 crypto.subtle.digest('SHA-1', msgUint8).then(function (hashBuffer) {
 var hashArray = Array.from(new Uint8Array(hashBuffer));
 var sha1 = hashArray.map(b => b.toString(16).padStart(2, '0')).join('');
 var sha1Prefix = sha1.substring(0, 5);
 var sha1Suffix = sha1.substring(5);

 var xhr = new window.XMLHttpRequest();

 xhr.onload = function () {
 try {
 var lines = xhr.responseText.split('\n');
 var found = false;
 for (var i = 0; i < lines.length; i++) {
 var line = lines[i];
 var parts = line.split(':');
 if (parts[0] == sha1Suffix.toUpperCase()) {
 found = true;
 break;
 }
 }
 if (found) {
 onConclusion(true);
 } else {
 onConclusion(false);
 }
 } catch (err) {
 console.error('could not test for pwned password', err);
 onConclusion(undefined);
 }
 }

 xhr.open('GET', 'https://api.pwnedpasswords.com/range/' + sha1Prefix, true);
 xhr.send();
 });
 } else {
 onConclusion(undefined);
 }
 } catch (err) {
 console.error('could not test for pwned password', err);
 onConclusion(undefined);
 }
 }

 function copyToClipBoard(text) {
 if (navigator.clipboard) {
 return navigator.clipboard.writeText(text)
 } else {
 return new Promise(function (resolve, reject) {
 var textarea = document.createElement('textarea');
 textarea.value = text;

 // Avoid scrolling to bottom
 textarea.style.top = "0";
 textarea.style.left = "0";
 textarea.style.position = "fixed";

 document.body.appendChild(textarea);
 textarea.focus();
 textarea.select();

 try {
 var success = document.execCommand('copy');
 if (success) {
 resolve();
 } else {
 reject("Copy failed");
 }
 } catch (err) {
 reject(err);
 }
 document.body.removeChild(textarea);
 });
 }
 }

Vi har sendt en e-post til om hvordan du kan endre passordet ditt.

For å slette brukeren din må du skrive inn passordet.
Da vil også alle dine data bli fjernet

Passordet du skrev stemmer ikke for e-postadressen:

Synd å miste deg. Du kan selvsagt fortsatt bruke NRK uten å være pålogget

<h1>Hei,</h1>

Du må godta våre nye brukervilkår for å fortsette som innlogget bruker.

Vi har sendt en e-post til  om hvordan du kan endre passordet ditt.

For å slette brukeren din må du skrive inn passordet.
Da vil også alle dine data bli fjernet

Passordet du skrev stemmer ikke for e-postadressen: 

# Hei, 

**Du må godta våre nye brukervilkår for å fortsette som innlogget bruker.**

Requests	IP Address	Location	AS Autonomous System
28	184.24.77.26	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
7	184.24.77.8	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
7	23.50.131.202	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	184.24.77.7	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	23.50.131.200	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	35.244.162.126	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
2	184.24.77.21	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	2a02:26f0:7100:59a::11a6	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	2a02:26f0:7100:594::11a6	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	2a02:26f0:7100:b8e::11a6	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
43	19	-	-

Security Scan Report: innlogging.nrk.no

Summary

AI Security Verdict

Safe Website

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History