nordeafinance.no

.no crawl

First seen 2026-05-23 · Last seen 2026-05-31 · ok HTTP/1.1 200 1069 ms crawled 2026-05-28

FI · 158.233.250.69 · AS201271 Nordea Bank Abp

Reputation 100/100

Classifying

HTML metadata

Title: Nordea Finance privat | Nordea Finans
Description: Nordea Finance
Language: no-NO
Canonical: https://www.nordeafinance.no/

Open Graph

url: https://www.nordeafinance.no/
title: Nordea Finance privat
locale: no_NO
description: Nordea Finance

Technology

Server: nginx
CMS: Gatsby
Stack: Java

Third-party hosts loaded (1)

tags.tiqcdn.com×1

Social

Contact

Phone

924 507 500

Registration

Registrar

Corporation Service Company

Created

2020-07-06

Updated

2025-07-06

Name servers

spdns3.cscdns.net
ns0.nordea.com
ns1.nordea.com
ns2.nordea.com

DNS records live

NS

ns0.nordea.com
ns1.nordea.com
ns2.nordea.com
spdns3.cscdns.net

TXT

jbqct64wxsz7cwd6g4vt8r2bmpqtnylm

Verified for

Adobe
Google

Email authentication no MX

SPF: not published
DMARC: v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:nordea@rua.agari.com; ruf=mailto:nordea@ruf.agari.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1

from 2026-02-17 to 2027-02-17

Expires in 261 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.nordeafinance.no/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self';script-src 'nonce-d6dde781-e9ff-412c-b1cf-4c9df9b76d41' 'strict-dynamic' https: 'unsafe-inline' 'unsafe-eval';connect-src 'nonce-d6dde781-e9ff-412c-b1cf-4c9df9b76d41' https: 'unsafe-inline';style-src * 'unsafe-inline'; img-src * data:; font-src * data:;frame-src *.demdex.net *.skat.dk www.youtube.com;
strict-transport-security: max-age=157680000