Skip to content
https://nrk.no

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
78
GRADE
C
FIX
3
REVIEW
1
PASS
5
INFO
0
Probed from Santa Clara, United States
301 Moved Permanently
Checks
9
5 PASS 1 REVIEW 3 FIX
F
IPv6 Readiness
Action
IPv6 records exist but unreachable
FIX
IPv6 records exist but unreachable
Warning::
IPv6 DNS records exist but server is not reachable
Having AAAA records but an unreachable server is worse than no AAAA — clients may experience delays before falling back to IPv4.
Got: 2600:1406:2e00:62::172e:d894, 2600:1406:2e00:62::172e:d89f
Info::
IPv6 connection error
Got: dial tcp6 [2600:1406:2e00:62::172e:d894]:443: connect: network is unreachable
IPv6 Misconfigured
AAAA Records 2600:1406:2e00:62::172e:d894, 2600:1406:2e00:62::172e:d89f Connection UNREACHABLE

Having AAAA records but an unreachable server is worse than no AAAA — clients may experience delays before falling back to IPv4.

Why this matters

Advertising IPv6 (AAAA records) without a reachable server means IPv6-preferring clients silently fail every connection.

Learn more ▾

Modern browsers prefer IPv6 if AAAA exists (Happy Eyeballs algorithm). If the IPv6 server isn't reachable, browsers fall back to IPv4 — but with seconds of added latency per request. Either fix IPv6 reachability or remove the AAAA records.

Source: RFC 8305 (Happy Eyeballs)

D
URL Variants
Action
www/non-www, trailing slash, HTTP→HTTPS
FIX
www/non-www, trailing slash, HTTP→HTTPS
Critical::
Both www and non-www versions serve content
Got: Both variants return 200 Expected: One variant 301-redirects to the other
Critical::
HTTP version does not redirect to HTTPS
Got: HTTP 403 Expected: 301 redirect to HTTPS

www / non-www

200https://www.nrk.no/
200https://nrk.no/

Inconsistent — duplicate content risk

HTTP → HTTPS

403http://nrk.no/

HTTP version does not redirect to HTTPS

D
CDN & Delivery
Action
No CDN detected
FIX
No CDN detected
Warning::
No CDN detected
A CDN can significantly improve load times for users around the world by caching content at edge nodes closer to them.
No CDN detected

Consider using a CDN to improve global delivery speed and reduce origin load.

B
TLS Certificate Expiry & Recommendations
176 days until leaf cert expires — 4 issues to address
REVIEW

Certificate validity

176
days left
0d 30d 60d 90d+

Recommended actions

  • Extend HSTS max-age to at least 31536000 (1 year) to meet the preload list criteria
  • Add includeSubDomains to the HSTS directive
  • Add the preload directive and submit to hstspreload.org once max-age + includeSubDomains are in place
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+
DNS Records
2 A records, 29 ms lookup
PASS
2 A records, 29 ms lookup
Info::
Resolves to 2 IPv4 address(es)
Got: 23.67.33.198, 23.67.33.217
Info::
Has 2 IPv6 (AAAA) record(s)
Got: 2600:1406:2e00:62::172e:d894, 2600:1406:2e00:62::172e:d89f
Info::
6 nameserver(s) configured
Got: a7-64.akam.net, a1-251.akam.net, a10-64.akam.net, a13-65.akam.net, a20-66.akam.net, a26-67.akam.net
Info::
1 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 29 ms
Got: 29 ms
A23.67.33.198, 23.67.33.217
AAAA2600:1406:2e00:62::172e:d894, 2600:1406:2e00:62::172e:d89f
CNAME—
NSa7-64.akam.net, a1-251.akam.net, a10-64.akam.net, a13-65.akam.net, a20-66.akam.net, a26-67.akam.net
MX
1 smtp.google.com
TXT
544da9mu1sq0i6h3efp2f3h367
_azzt4nugyi952ol3hexpdcrh8e9r6ly
krj990q6pc801mcb9x8rstx0jlt389gw
dropbox-domain-verification=gkpn3darv275
apple-domain-verification=pJSDgUfyCf9gYXZI
8FP5SSJ2KTlTx89Q3CN9CUqmHKtGEC/29pHCUkE6LKU=
EHmE06ZCk64fRBb3AmsSzFnW3t23T+ZRR+oyoeqUAHg=
gDaT0LGubORfYggwFzQ/8voOKdKZHBX6rdLUFXthIu4=
o5c93XCFolAiM1QzyWBKetFNgfoeRN6zzgIAuYlj3zk=
qEbtji4AxwAdgpa6EVe4TVEfL8ODbwAdAxJ2B9Kfwn8=
jamf-site-verification=7erMl4Yxm9PFcARJd48_-w
miro-verification=bf07139d5bb3c71c0da10c2dfa2ae47367b4a5bd
mongodb-site-verification=K9WHoU6SEs3tREB0orQMBsaNT7Zd9qwd
facebook-domain-verification=d86dn03mpszdqjao4fz0mfe2i3db7g
teamviewer-sso-verification=a65c5a938c034026be245d6b28203940
05835070bc2407d3862ccccecc45a687dbfd7fd3ca4e9f241a83dc4d1ed25f41
7cbe70e89c0aca10fbc4ebdbb271a20679c4b780e55494524b72f047a2b12e32
adobe-idp-site-verification=53a0402a-0071-4b39-91aa-e457982cccc0
google-site-verification=IoQAXSxN1S1p9GdTNKRD2nPRQG6rG5JpZ57gxpjAFl0
google-site-verification=c4bByN8ULvX5WohvboGDMM9VxZZ3VZHjxCNJFfLz8GM
_globalsign-domain-verification=M5FnzSco_xZynjbrzWi6hU3HbMQ-LMb7aFT2rdyjp_
HoZm4u5ZQjK+DAz6CDhNYdbBI8ndX4hlhYuxXMSneTbPvfbbClL5x11B9h6SruYqC8TLbBfzd2FtQ1oQ...
atlassian-domain-verification=1QHLJJPHaylWA9N5uUTu9D+FH/ic+ZjYIlayCQEY9B9nAluuFp...
SPF v=spf1 mx a ip4:160.67.135.178 ip4:160.67.166.179 ip4:77.94.235.18 ip4:23.253.18...
CAALookup not available with standard resolver
Resolved in 29 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A
Redirect Chain
1 redirect(s), 968 ms total
PASS
1 redirect(s), 968 ms total
Info::
Single redirect
Got: https://nrk.no → https://www.nrk.no/ (301)
Info::
WWW normalization redirect
Info::
Redirect overhead: 968 ms total
Got: 968 ms

https://nrk.no

42 ms · HTTP/1.1

301

https://www.nrk.no/

926 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://nrk.no30142 msHTTP/1.1
2https://www.nrk.no/200926 msHTTP/1.1

See the visual redirect chain in the HTTP Probe tab →

A+
Crawlability
robots.txt present, sitemap with 500 URLs
PASS
robots.txt present, sitemap with 500 URLs
Info::
robots.txt is present
Got: 3480 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 500 entries
Info::
Sitemap index with 500 child sitemaps
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 3480 B Sitemaps referenced 1 User-agents AppleNewsBot, Googlebot-News, cohere-ai, Diffbot, iAskBot, Meta-ExternalAgent, mistral.ai, anthropic-ai, Google-Extended, OAI-SearchBot, PerplexityBot, Scrapy, PanguBot, CCBot, Gemini-Deep-Research, GPTBot, LinerBot, WARDBot, WrtnBot, Bedrock-bot, Amazonbot, SeekrBot, VelenPublicWebCrawler, AI2Bot, Bytespider, ChatGPT-User, FacebookBot, omgili, Claude-User, Google-CloudVertexBot, ProRataInc, *, peer39_crawler/1.0, PerplexityUser, ChatGLM-Spider, Claude-SearchBot, EchoboxBot, QualifiedBot, TikTokSpider, Applebot-Extended, ClaudeBot, Cotoyogi, DeepSeek, Kunato, Meta-ExternalFetcher, MistralAI-User, WPBot, Claude-Web, ImagesiftBot, NewsNow, news-please, peer39_crawler, amazon-kendra, DuckAssistBot, ICC-Crawler, omgilibot Blocking No — crawling allowed
# NRK does not permit use of our content for the purpose of text and datamining, including training of large language models or other artificial intelligence technology,
# without express written permission from NRK.

User-agent: *
Sitemap: http://www.nrk.no/sitemap.xml
Disallow: /sok/
Disallow: /testmappe/
Disallow: /_/
Disallow: /pyro/
Disallow: /programmer/radio/filmpolitiet/
Disallow: /p3/article/
Disallow: /p3/program/
Disallow: /p3tv/
Disallow: /Urort/search/Browse.aspx
Disallow: /urort/user/video.aspx
Disallow: /urort/WebResource.axd
Disallow: /urort/ScriptResource.axd
Disallow: /Urort/WebResource.axd
Disallow: /Urort/ScriptResource.axd
Disallow: /front/?pp-content-id=2.6642
Disallow: */wp-admin/
Disallow: */wp-includes/
Disallow: */wp-content/plugins/
Disallow: */wp-content/cache/
Disallow: */wp-content/themes/
Disallow: */trackback/
Disallow: */feed/
Disallow: */comments/
Disallow: */category/*/*
Disallow: */trackback/
Disallow: */feed/
Disallow: */comments/
Disallow: /programmer/
Disallow: /nyheter/bakgrunn/
Disallow: /logginn/
Disallow: /video/nrk-tv_nrktv*
Disallow: /video/PS*56957
Disallow: /innlandet/glamourmodell-blir-yrkessoldat-1.6152571
Disallow: /video/hva-jobber-aina-med_53104
Disallow: /video/hjemme-hos-ane_177823
Disallow: /dokumentar/liv-fikk-et-vapen-mot-strupen-1.11028290
Disallow: /vestland/tidlegare-krabbefabrikk-eigar-vann-forsikringskrangel-1.16561748

User-agent: AppleNewsBot
Disallow: /satiriks/

User-agent: Googlebot-News
Disallow: /satiriks/

User-agent: Amazonbot
Disallow: /

User-agent: anthropic-ai
Disallow: /

User-agent: Bytespider
Disallow: /

User-agent: ChatGPT-User
Disallow: /

User-agent: Claude-Web
Disallow: /

User-agent: cohere-ai
Disallow: /

User-agent: Diffbot
Disallow: /

User-agent: FacebookBot
Disallow: /

User-agent: Google-Extended
Disallow: /

User-agent: ImagesiftBot
Disallow: /


User-agent: NewsNow
Disallow: /

User-agent: news-please
Disallow: /

User-agent: OAI-SearchBot  
Disallow: /

User-agent: omgili
Disallow: /

User-agent: omgilibot
Disallow: /

User-agent: peer39_crawler
User-agent: peer39_crawler/1.0
Disallow: /

User-agent: PerplexityBot
Disallow: /

User-agent: PerplexityUser
Disallow: /

User-agent: Scrapy
Disallow: /

User-agent: AI2Bot
Disallow: /

User-agent: amazon-kendra
Disallow: /

User-agent: Applebot-Extended
Disallow: /

User-agent: Bedrock-bot
Disallow: /

User-agent: CCBot
Disallow: /

User-agent: ChatGLM-Spider
Disallow: /

User-agent: Claude-SearchBot
Disallow: /

User-agent: Claude-User
Disallow: /

User-agent: ClaudeBot
Disallow: /

User-agent: Cotoyogi
Disallow: /

User-agent: DeepSeek
Disallow: /

User-agent: DuckAssistBot
Disallow: /

User-agent: EchoboxBot
Disallow: /

User-agent: Gemini-Deep-Research
Disallow: /

User-agent: Google-CloudVertexBot
Disallow: /

User-agent: GPTBot
Disallow: /

User-agent: iAskBot
Disallow: /

User-agent: ICC-Crawler
Disallow: /


User-agent: Kunato
Disallow: /

User-agent: LinerBot
Disallow: /

User-agent: Meta-ExternalAgent
Disallow: /

User-agent: Meta-ExternalFetcher
Disallow: /

User-agent: mistral.ai
Disallow: /

User-agent: MistralAI-User
Disallow: /

User-agent: PanguBot
Disallow: /

User-agent: ProRataInc
Disallow: /

User-agent: QualifiedBot
Disallow: /

User-agent: SeekrBot
Disallow: /

User-agent: TikTokSpider
Disallow: /

User-agent: VelenPublicWebCrawler
Disallow: /

User-agent: WARDBot
Disallow: /

User-agent: WPBot
Disallow: /

User-agent: WrtnBot
Disallow: /


# Served by akamai
sitemap.xml 200 OK
Type Sitemap Index URLs 500 entries Valid XML Yes
Child Sitemaps:
A+
Domain Intelligence
nrk.no — via Domeneshop AS, 26 years, 9 months old, hosted on Akamai
PASS
nrk.no — via Domeneshop AS, 26 years, 9 months old, hosted on Akamai
Info::
DNSSEC is enabled
Info::
Registrar: Domeneshop AS
Info::
Hosting: Akamai
Got: AS20940
Domain expiry

Unknown

SSL certificate

176 days

Issued by DigiCert Inc

Domain age

26 years, 9 months

Registered November 14, 1999

DNSSEC

Enabled

Protects against DNS spoofing

Hosting

Akamai

ASN AS20940

23.67.33.198

Registrar

Domeneshop AS

Lock status unknown 6 NS records
Expiry timeline
Today
+1 year
SSL expiry Danger zone (≤30 days)
Registrar Domeneshop AS
Created November 14, 1999 (26 years, 9 months ago)
Last Updated October 17, 2025
Name Servers a1-251.akam.net, a10-64.akam.net, a13-65.akam.net, a20-66.akam.net, a26-67.akam.net, a7-64.akam.net
DNSSEC Enabled
Hosting
IP Address 23.67.33.198
ASN AS20940 (AKAMAI-ASN1, NL)
Provider Akamai
Data source: rdap (0.9s)
A+
HTTP Probe Timing
Total 121 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
8 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
2 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
15 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
121 ms
Total Time Total request time from DNS lookup through full response.
121 ms

Connection waterfall

DNS Lookup 8 ms TCP Connect 2 ms TLS Handshake 15 ms Server Processing 96 ms Content Transfer 0 ms
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback