nordeafinance.fi

.fi crawl

First seen 2026-05-21 · Last seen 2026-05-31 · ok HTTP/1.1 200 1031 ms crawled 2026-05-27

FI · 158.233.250.69 · AS201271 Nordea Bank Abp

Reputation 100/100

Classifying

HTML metadata

Title

Tervetuloa Nordea Financeen - palvelut henkilöasiakkaille | Nordea Rahoitus

Description

Nordea Financen laajasta valikoimasta löydät sinulle sopivan rahoituksen talouteesi sopivalla maksuajalla. Tervetuloa asiakkaaksemme!

Language

fi-FI

Canonical

https://www.nordeafinance.fi/

Translations

Open Graph

url: https://www.nordeafinance.fi/
title: Tervetuloa Nordea Financeen - palvelut henkilöasiakkaille
locale: fi_FI
description: Nordea Financen laajasta valikoimasta löydät sinulle sopivan rahoituksen talouteesi sopivalla maksuajalla. Tervetuloa asiakkaaksemme!
locale:alternate: en_FI

Technology

Server: nginx
CMS: Gatsby

Third-party hosts loaded (1)

tags.tiqcdn.com×1

Social

Registration

Created

2009-06-01

Name servers

ns0.nordea.com [ok]
ns1.nordea.com [ok]
spdns3.cscdns.net [ok]
ns2.nordea.com [ok]

DNS records live

NS

ns0.nordea.com
ns1.nordea.com
ns2.nordea.com
spdns3.cscdns.net

Verified for

Adobe
Google

Email authentication no MX

SPF: v=spf1 -all
strict (-all)
DMARC: v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:nordea@rua.agari.com; ruf=mailto:nordea@ruf.agari.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1

from 2026-02-17 to 2027-02-17

Expires in 261 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.nordeafinance.fi/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self';script-src 'nonce-b24ea7c8-b42d-42e5-953c-524ed344d01d' 'strict-dynamic' https: 'unsafe-inline' 'unsafe-eval';connect-src 'nonce-b24ea7c8-b42d-42e5-953c-524ed344d01d' https: 'unsafe-inline';style-src * 'unsafe-inline'; img-src * data:; font-src * data:;frame-src *.demdex.net *.skat.dk;
strict-transport-security: max-age=157680000