nordea.dk

HTML metadata

Title: Nordea Bank - din online bank og lokale filial | Nordea
Description: Nordea Bank - Tilbyder online bank, forsikringsprodukter samt information til investorer. Opret dig online som kunde i Nordea Bank allerede i dag.
Language: da-DK
Canonical: https://www.nordea.dk/

Open Graph

url: https://www.nordea.dk/
title: Nordea Bank - din online bank og lokale filial
locale: da_DK
description: Nordea Bank - Tilbyder online bank, forsikringsprodukter samt information til investorer. Opret dig online som kunde i Nordea Bank allerede i dag.

Technology

Server: nginx
CMS: Gatsby

Third-party hosts loaded (1)

tags.tiqcdn.com×1

Social

DNS records live

NS

ns0.nordea.com
ns1.nordea.com
ns2.nordea.com
spdns3.cscdns.net

MX

10 nordea-dk.mail.protection.outlook.com

TXT

Show 9 TXT records

mandrill_verify.pVOgMMmdZOKICoXipPjoqQ
7dzj1lzc7c70h7nctsn0pn4v7lx8qf4d
88ebf28e-1a96-4f25-9bba-fb32a90688a1
rNjI3DUiCb2CsAuvF/eYOJDOUChDvoB3X2SqXlHnn+aJxh2mdH53XV0EHr2B/yHK8DOxQ7C2pC4GjR1uIC4sDg==
6kx8wmr7ymwsx5mkw1gcwpn07b3692yy
nhw0cqqgmr6vz3w6nnq6mxgtr3b4jqky
1h3py6zg88j6h6kml6s69m3f2q3l24g9
3p50vy9khp8xwhvl0kghqvdnk5cwnfrt
9jX+6TbcwiwWb3qZ+nN8VjKgJI7NXtQNzlZDz3Fwnj0M7mfC74RZYC+7FaBtoW4Cen+IuvBDHoC66aBAbqB6oA==

Verified for

Adobe
Apple
Google
Meta
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.messagelabs.com include:_spf.anpdm.com ip6:2603:1000::/24 ip4:207.46.108.0/25 ip4:157.56.87.192/26 ip4:157.56.120.0/25 ip4:157.56.116.0/25 ip4:23.103.132.0/22 ip4:134.170.171.0/24 ip4:134.170.101.0/24 ip4:23.103.144.0/20 ip4:23.103.136.0/21 ip4:157.55.133.0/25 ip4:193.234.184.22/31 include:spf.protection.outlook.com include:spf.mailanyone.net include:_spf-dc12.successfactors.com  include:spf.mandrillapp.com  -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:nordea@rua.agari.com; ruf=mailto:nordea@ruf.agari.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCnEsyHWV5bKX5CvFIkk68EzMkAqDstyXIai24ruJt1diDdAqm9/UxUImqzIlANHrYqbNqtMrcWg3oPsBBK2Q…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08e4qP4m0SGJDqIkw1afiFtJbhLl1Bn7hpa63BQ7fpy6RxWBXLtJO0tURh/O8cLMT7lArZwg0vNwan…

selectors probed

Certificate (current)

DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1

from 2025-12-15 to 2026-12-15

Expires in 197 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.nordea.dk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self';script-src 'nonce-55bed486-02fc-4b16-9d3a-8724507e4555' 'strict-dynamic' https: 'unsafe-inline' 'unsafe-eval';connect-src 'nonce-55bed486-02fc-4b16-9d3a-8724507e4555' https: 'unsafe-inline';style-src * 'unsafe-inline'; img-src * data:; font-src * data:;frame-src *.demdex.net *.skat.dk;
strict-transport-security: max-age=157680000