northwesternbank.com

.com crawl

First seen 2026-04-28 · Last seen 2026-05-16 · ok HTTP/1.1 200 2054 ms crawled 2026-05-05

US · 188.114.97.3 · AS13335 Cloudflare, Inc.

Reputation 100/100

sector finance type homepage

HTML metadata

Title: Northwestern Bank | Chippewa Valley Banking
Description: We're a community bank with all the services of a big bank in a personalized friendly size.
Language: en

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (7)

cdn.jsdelivr.net×2
use.typekit.net×2
ajax.googleapis.com×1
cdn.userway.org×1
script.crazyegg.com×1
www.google.com×1
www.googletagmanager.com×1

Social

Contact

Phone

091801234

Registration

Registrar

Network Solutions, LLC

Created

1997-10-06

Expires

2028-10-05 870 days left

Updated

2023-08-06

Name servers

dion.ns.cloudflare.com
vera.ns.cloudflare.com

DNS records live

NS

dion.ns.cloudflare.com
vera.ns.cloudflare.com

MX

10 usa.mx1.mailanyone.net
20 usa.mx2.mx25.net
30 usa.mx3.mailanyone.net
40 usa.mx4.mx25.net

TXT

Show 9 TXT records

solarwinds-service0desk-verification=7d04caf3b2c4655b787ff39924975848
v=spf1 a mx ip4:149.72.147.186 ip4:167.89.101.239 include:spf.jbsystemsllc.com include:spf.beavercreekcampaigns.com include:spf.mailanyone.net include:spf.usa.net include:transmail.net include:spf.cashedge.com include:spf.protection.outlook.com -all
33rsjb63fovj2nfd6lh2gfp8r3
5dg3rstgdrk2s76lt93np9iotc
5t78gsqmr3cdf0l5ucohota9bp
5ug4vin3arc8jafp3u2tlbr1sh
MS=ms32605856
_ijindd4bqn5qxmj0uhe2ipktizih8cm
fk29er8son8717v57ppmsafo2g

Certificate (current)

WE1

from 2026-03-08 to 2026-06-07

Expires in 19 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.northwesternbank.com/

present

content-security-policy
x-frame-options
x-content-type-options

findings

missing HSTS
CSP allows unsafe inline scripts/styles
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src https: data:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'