nordea.no

HTML metadata

Title: Velkommen til Nordea - bank for privat- og bedriftskunder | Nordea
Description: I Nordea kan du søke om boliglån og lån, spare til pensjon, investere i aksjer og fond, kjøpe forsikring og få rådgivning. Kontakt oss via chat eller telefon.
Language: no-NO
Canonical: https://www.nordea.no/

Open Graph

url: https://www.nordea.no/
title: Velkommen til Nordea - bank for privat- og bedriftskunder
locale: no_NO
description: I Nordea kan du søke om boliglån og lån, spare til pensjon, investere i aksjer og fond, kjøpe forsikring og få rådgivning. Kontakt oss via chat eller telefon.

Technology

Server: nginx
CMS: Gatsby
Stack: Java

Third-party hosts loaded (1)

tags.tiqcdn.com×1

Social

Contact

Phone

920058817

Registration

Registrar

Corporation Service Company

Created

2022-01-06

Updated

2026-01-06

Name servers

spdns3.cscdns.net
ns0.nordea.com
ns1.nordea.com
ns2.nordea.com

DNS records live

NS

ns0.nordea.com
ns1.nordea.com
ns2.nordea.com
spdns3.cscdns.net

MX

10 nordea-no.mail.protection.outlook.com

TXT

Show 10 TXT records

bv50ytl9jxlq2w4vkt8h81d74vn9cjc5
8q3gj6hcd9615jx0pmdxtr2r84fthbss
83628c502f8945994b97a6639d4abf34bfad39c56a98856b42b899f423bc89b6
8Ln8qI2G0D6gAM2kkZ3iHw+EQZItTn1tAs0JVQDZXAKUZKjIqxooHXJquNewC8EvuLzAARyt8Ys+BLndReEp6Q==
49b8ea62bbb6ed536eee1f5a28bd3ae42368b1fa2215510a2056cf6a90fad563
ez5npyx6U8kAV07VTnl/LDwB7j4jGgXwU+U2xkzJX7B7JlrNhOUYApY8W2/xzpsw2wVOp5mktuyCx5OzEqMY4w==
88ebf28e-1a96-4f25-9bba-fb32a90688a1
mandrill_verify.n32G3m7tFNt4c92V_r0d8g
47dmq0gp06ks7hz1t0pg7xbj5zrb01xb
6b486fa2139fd7f9dcc6af4edaf755b5fd104900867d42f00334864c5a59fdb1

Verified for

Adobe
Apple
Google
Meta
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.messagelabs.com ip4:192.254.122.173 ip4:167.89.22.98 include:_spf.anpdm.com include:spf.mailanyone.net ip4:141.193.32.19 ip4:139.117.104.4 ip4:139.116.71.0/25 ip4:212.18.128.128/25 ip6:2a02:9c8:0:1001::/64 ip4:185.94.12.21 ip4:185.94.12.22 include:_spf.sndr.no include:mailout.osl.basefarm.net include:spf.protection.outlook.com include:spf.mandrillapp.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=none; fo=1; ri=3600; rua=mailto:nordea@rua.agari.com; ruf=mailto:nordea@ruf.agari.com

policy: reject (enforced) · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDr0cEdREWCkX4+NIUsetwHnNkSct2SVTPLO0MC68W7fkq/m+UD0GfHYrrvI5IdpjD+fN28uql1jdt4+sYzq…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSyw11KUFQ9lv+3Nob2XXCbGXUv0ffi5fC+qLGrL0fRAFCD5vN4EjIVpWQ3OMCNo2PoqUHRv+GCZIZ3YCx…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCunzWhCPJ4qqnSOsqSd4EI9CZICihFXuZnX9Mht9evTO1TZRc44JFO570JsA5rWRMKrMNEpdWS/ue6iIV0Mvxftm…

selectors probed

Certificate (current)

Entrust OV TLS Issuing RSA CA 1

from 2025-07-02 to 2026-07-17

Expires in 46 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.nordea.no/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self';script-src 'nonce-f26bbea8-dd3e-4593-9771-6caa4ded153c' 'strict-dynamic' https: 'unsafe-inline' 'unsafe-eval';connect-src 'nonce-f26bbea8-dd3e-4593-9771-6caa4ded153c' https: 'unsafe-inline';style-src * 'unsafe-inline'; img-src * data:; font-src * data:;frame-src *.demdex.net *.skat.dk;
strict-transport-security: max-age=157680000