Domain > hybrid-netbank.nordea.se

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-09-13	158.233.249.230 (ClassC)
2023-09-13	158.233.249.231 (ClassC)
2024-10-05	23.205.106.82 (ClassC)
2024-10-05	23.205.106.89 (ClassC)
2024-10-21	2.16.6.24 (ClassC)
2024-10-21	2.16.6.4 (ClassC)
2024-11-06	2.21.134.83 (ClassC)
2024-11-06	2.21.134.92 (ClassC)
2024-11-21	2.16.6.26 (ClassC)
2024-12-22	95.100.98.33 (ClassC)
2025-02-01	2.16.165.195 (ClassC)
2025-02-01	2.16.165.203 (ClassC)
2025-02-09	23.192.118.24 (ClassC)
2025-02-09	23.192.118.8 (ClassC)
2025-03-24	23.1.254.112 (ClassC)
2025-03-24	23.1.254.114 (ClassC)
2025-04-09	92.122.219.115 (ClassC)
2025-04-09	92.122.219.162 (ClassC)
2025-04-09	95.100.98.104 (ClassC)
2025-04-11	95.100.200.57 (ClassC)
2025-05-08	2.21.35.211 (ClassC)
2025-06-08	92.123.238.98 (ClassC)
2025-06-08	92.123.238.16 (ClassC)
2025-06-10	95.100.98.120 (ClassC)
2025-07-28	173.222.105.46 (ClassC)
2025-08-25	92.123.238.10 (ClassC)
2025-09-10	104.97.14.161 (ClassC)
2025-12-04	88.221.83.250 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlx-content-type-options: nosniffContent-Language: en-USExpires: Cache-Control: no-storePragma: referrer-policy: strict-origin-when-cross-originx-frame-options: SAMEORIGINx-ua-compatible: IEedge,chrome1content-security-policy-report-only: default-src none; block-all-mixed-content ; script-src self nonce-5kt6oozdpgMKBwVakirzDg unsafe-eval identify.nordea.com *.danid.dk tags.tiqcdn.com https://*.adoberesources.net policy.cookiereports.com signal-collector.gemaltodigitalbankingidcloud.com; img-src self data: analytics.nordea.dk analytics.nordea.fi analytics.nordea.se analytics.nordea.no meet.nordea.com meet.nordea.fi meet.nordea.se meet.nordea.dk meet.nordea.no join.nordea.com *.omtrdc.net *.demdex.net www.nordea.se www.nordea.dk www.nordea.fi www.nordea.no *.nordea-prod.magnolia-platform.io; style-src self unsafe-inline *.danid.dk; frame-src self data: identify.nordea.com *.danid.dk e-boks.nordea.dk e-boks.nordea.fi e-boks.nordea.se e-boks.nordea.no *.demdex.net; font-src self; connect-src self https://js.backend.nordea.com/ https://foundation.nordea.com/nccp/firstcard/ https://open.nordea.com/nccp/firstcard/ blob: https://*.danid.dk meet.nordea.com meet.nordea.fi meet.nordea.se meet.nordea.dk meet.nordea.no join.nordea.com *.demdex.net analytics.nordea.dk analytics.nordea.fi analytics.nordea.se analytics.nordea.no *.omtrdc.net signal-collector.gemaltodigitalbankingidcloud.com investor.nordea.dk investor.nordea.fi investor.nordea.no investor.nordea.se https://manual.ebridge.prod.nordea.com; manifest-src selfLast-Modified: Thu, 04 Dec 2025 04:26:08 GMTstrict-transport-security: max-age157680000; includeSubDomainsx-cloud-trace-context: 0eeff8a47498dbbdaeadd7cd554fd194Date: Thu, 04 Dec 2025 21:42:24 GMTContent-Length: 3134Connection: keep-aliveSet-Cookie: web20251204224224-3058770914; ExpiresSun, 02-Dec-2035 21:42:24 GMT; Max-Age315360000; Secure; HttpOnlyAlt-Svc: h3:443; ma93600Akamai-GRN: 0.b753dd58.1764884544.2fbd0deb

!DOCTYPE html>html ng-csp data-channelWEB translateno>head>    meta charsetUTF-8>    meta nameviewport contentviewport-fitcover, widthdevice-width, initial-scale1.0>    meta namecolor-scheme contentlight dark>    meta nameformat-detection contenttelephoneno>    meta namegoogle valuenotranslate>    meta nametheme-color value#00005e>    link relshortcut icon href/favicon.ico typeimage/x-icon/>    title>Nordea/title>    !-- redirect to not supported page, if the browser is IE11 -->    script src/login/not-supported-page/not-supported-redirect.js typetext/javascript nonce5kt6oozdpgMKBwVakirzDg>/script>    link hrefvendor-efd49516.css relstylesheet typetext/css/>    link hrefcommon-cc12d410.css relstylesheet typetext/css/>    link hrefmodules-8bcf97ee.css relstylesheet typetext/css/>    script src/env.js>/script>/head>body ng-appmainApp classnotranslate>script typetext/javascript nonce5kt6oozdpgMKBwVakirzDg>var COUNTRY  SE;var SEGMENThousehold;var CHANNELHYBRID;var PROFILEnd-spa;var ENVPROD;var TRACKING{env:prod, profile:mwa-hybrid-spa};var APP_VERSION  4.35.18;var CLIENT_ID  NDHMSE;var IS_PILOT  false;var IS_DEMO  false;var utag_data  {};var NDBRIDGE_IOS_CALLBACK  NDBridge;/script>    nd-notification-set typetop>/nd-notification-set>    nd-notification-set typetoast>/nd-notification-set>    div ui-view>/div>    script typeapplication/javascript nonce5kt6oozdpgMKBwVakirzDg>        // TODO: Temporary, until URL rewrite is added to main web spring app        var GET_PARAMETERS  {};        var params  location.search.slice(1).split(&);        for (var i  0; i  params.length; i++) {            var splitParam  paramsi.split();            GET_PARAMETERSsplitParam0  splitParam1;        }        window.history.replaceState(null, null, window.location.pathname + window.location.hash);    /script>    script typeapplication/javascript nonce5kt6oozdpgMKBwVakirzDg>        revisitidifp_visitIdundefined,ifp_initViewifp_finalizeViewifp_initUseCaseAndViewifp_finalizeUseCaseAndViewfunction(){var iarguments,ei.length-1;0e&&functiontypeof ie&&ie(undefined)}    /script>    script srcvendor-7eaf188a.js typetext/javascript nonce5kt6oozdpgMKBwVakirzDg>/script>    script srccommon-afdbd1c0.js typetext/javascript nonce5kt6oozdpgMKBwVakirzDg>/script>    script srcse-labels-9ed367bc.js typetext/javascript nonce5kt6oozdpgMKBwVakirzDg>/script>    script srcmodulesndw-d85c98a8.js typetext/javascript nonce5kt6oozdpgMKBwVakirzDg>/script>    script srcprod-a624d44b.js typetext/javascript nonce5kt6oozdpgMKBwVakirzDg>/script>    !-- ndw-netbank-menu web component below -->    script typemodule src/navigation-v2/ndw-netbank-menu/ndw-netbank-menu.esm.js>/script>    script nomodule src/navigation-v2/ndw-netbank-menu/ndw-netbank-menu.js>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > hybrid-netbank.nordea.se

Is this malicious?

DNS Resolutions

Port 443