CONTINUOUS INTERNET TELEMETRY24H DRIFT3,167 material changesacross 2,750 domains · -231 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,316 curated domains not answering-6,402 vs yesterdayERRORS10,956 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,167 material changesacross 2,750 domains · -231 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,316 curated domains not answering-6,402 vs yesterdayERRORS10,956 responded with an errorlast probe · 5xx / 404 / 429 / 403

nordea.com

Observed 2026-07-13T00:02:36.904899013+00:00 (6h ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Runs onNordea Bank Abp
Email byMicrosoft 365
Also usesGoogle Search ConsoleFacebook/Meta
push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat nordea.com actually stands on - every host below is a signed observation
nordea.com
A / AAAA
158.233.250.69
Nordea Bank Abpserves the site
NS
ns2.nordea.comns1.nordea.comns0.nordea.comspdns3.cscdns.net
nordea.com + cscdns.netanswers its DNS
MX
nordea-com.mail.protection.outlook.com
Microsoft 365receives its email

DNS Records

A 1

  • 158.233.250.69

MX 1

  • 10nordea-com.mail.protection.outlook.com

TXT 24

  • google-site-verification=DnMLyTX2_3ilgQTqELSx-MLucI9mOMqk1iqDZ_fkRS4
  • google-site-verification=qUrBMTKVwoNsKKLh-J-ZP9JDhrAp7OPH6xBAJgQVyLk
  • mandrill_verify.hrNr2qli9BI70gGhnqdzuQ
  • d365mktkey=eb5MMtisuJuXxaxzwWEPVx4axgQFRm0xxxyTcjWDRccx
  • v=spf1 include:spf-1.nordea.com include:spf-2.nordea.com include:spf-3.nordea.com include:spf-4.nordea.com include:spf-5.nordea.com include:nets1.spf.messagelabs.com include:spf.protection.outlook.com include:spf.mailanyone.net ip4:195.244.107.235 ip4:195.244.107.236 ip4:195.244.107.237 ip4:185.21.40.0/24 ip4:139.116.71.0/25 ip4:212.100.250.16/29 ip4:52.232.27.151 ip4:209.172.40.80/28 ip4:185.136.189.108 ip4:198.2.179.61 ip4:192.254.122.173 ip4:167.89.22.98 ip4:139.113.128.44 ip4:139.113.128.45 -all
  • 88ebf28e-1a96-4f25-9bba-fb32a90688a1
  • brevo-code:57e1f3c042974a6915a607787a2af8a4
  • google-site-verification=38FVaKreu8ri2MPgGY5jJUWjERBPGmSE2mVQcXhXXJI
  • dTMQ6MYZ0PrqqK27cfFpdsS49VMr8UvxpIxdX1Fkiz0s3mcIkkTc3YfEgoXVVOf4sUFMHe+SPi3jBRc0ipZFUg==
  • 2f844f2f66f24d1897b56bf24b1fd0be01596a2717dde88128fd2d8c85ce3c83

NS 4

  • ns2.nordea.com
  • ns1.nordea.com
  • ns0.nordea.com
  • spdns3.cscdns.net

SOA 1

  • ns0.nordea.com dns-admin.nordea.com

CAA 10

  • issue "d-trust.net"
  • iodef "mailto:digiops@nordea.com"
  • iodef "mailto:keymgnt@nordea.com"
  • issue "buypass.com"
  • issue "globalsign.com"
  • issue "sectigo.com"
  • issue "entrust.net"
  • issue "certainly.com"
  • issue "letsencrypt.org"
  • issue "digicert.com"

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for nordea.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for nordea.com <a href="https://domaindrift.io/t/nordea.com"> <img src="https://domaindrift.io/badge/nordea.com.svg" width="300" height="64" alt="DomainDrift signed observations for nordea.com"> </a>

Ed25519 Receipt

Receipt ID
0be7be10-c981-458a-898f-e6aecfe3ec66
Output Hash
45ea7f1ec3448a59fa2fc035c7356339bfa645a13107a434c9f7d6127d80b486
Signature
ed25519:7f40976a98364f0a59e4d79b80ddcea492ab007d62bc033438978b568c5856193d8e04d786ca704b45b7bdf618cf91ae478694d121c410ea50bb640fc846f804
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser