Domain > demo-netbank.nordea.fi

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-10-22	2.16.6.4 (ClassC)
2024-11-06	2.21.134.83 (ClassC)
2025-01-22	95.100.98.33 (ClassC)
2025-04-26	2.16.27.84 (ClassC)
2025-09-09	88.221.83.250 (ClassC)
2025-09-21	2.19.176.203 (ClassC)
2025-10-10	104.115.83.9 (ClassC)
2025-10-17	2.16.6.24 (ClassC)
2025-10-24	95.100.133.6 (ClassC)
2025-11-07	95.100.98.104 (ClassC)
2025-11-14	95.100.98.120 (ClassC)
2025-11-18	2.19.176.193 (ClassC)

HTTP/1.1 200 OKContent-Language: en-USExpires: Cache-Control: no-storePragma: Referrer-policy: strict-origin-when-cross-originX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffX-XSS-Protection

!DOCTYPE html>html ng-csp data-channelWEB translateno>head>    meta charsetUTF-8>    meta nameviewport contentviewport-fitcover, widthdevice-width, initial-scale1.0>    meta namecolor-scheme contentlight dark>    meta nameformat-detection contenttelephoneno>    meta namegoogle valuenotranslate>    meta nametheme-color value#00005e>    link relshortcut icon href/favicon.ico typeimage/x-icon/>    title>Nordea/title>    !-- redirect to not supported page, if the browser is IE11 -->    script src/login/not-supported-page/not-supported-redirect.js typetext/javascript noncejQmwg7gtYC33s2keq/X0rQ>/script>    link hrefvendor-efd49516.css relstylesheet typetext/css/>    link hrefcommon-cc12d410.css relstylesheet typetext/css/>    link hrefmodules-de5b5e0d.css relstylesheet typetext/css/>    script src/env.js>/script>/head>body ng-appmainApp classnotranslate>script typetext/javascript noncejQmwg7gtYC33s2keq/X0rQ>var COUNTRY  FI;var SEGMENThousehold;var CHANNELWEB;var PROFILEnd-spa;var ENVPROD;var TRACKING{env:prod, profile:mwa-netbank-spa};var APP_VERSION  3.9.84.2;var CLIENT_ID  NDHWFI;var IS_PILOT  false;var IS_DEMO  true;var utag_data  {};/script>    nd-notification-set typetop>/nd-notification-set>    nd-notification-set typetoast>/nd-notification-set>    div ui-view>/div>    script typeapplication/javascript noncejQmwg7gtYC33s2keq/X0rQ>        // TODO: Temporary, until URL rewrite is added to main web spring app        var GET_PARAMETERS  {};        var params  location.search.slice(1).split(&);        for (var i  0; i  params.length; i++) {            var splitParam  paramsi.split();            GET_PARAMETERSsplitParam0  splitParam1;        }        window.history.replaceState(null, null, window.location.pathname + window.location.hash);    /script>    script typeapplication/javascript noncejQmwg7gtYC33s2keq/X0rQ>        revisitidifp_visitIdundefined,ifp_initViewifp_finalizeViewifp_initUseCaseAndViewifp_finalizeUseCaseAndViewfunction(){var iarguments,ei.length-1;0e&&functiontypeof ie&&ie(undefined)}    /script>    sc

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > demo-netbank.nordea.fi

Is this malicious?

DNS Resolutions

Port 443