Domain > beta.partnerhub.equipment.nordeafinance.no

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-01-18	99.84.160.34 (ClassC)
2021-10-13	52.84.145.43 (ClassC)
2025-08-28	18.161.6.63 (ClassC)

HTTP/1.1 301 Moved PermanentlyServer: CloudFrontDate: Thu, 28 Aug 2025 18:42:24 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveLocation: https://beta.partnerhub.equipment.nordeafinance.no/X-Cache: Redirect from cloudfrontVia: 1.1 8731d2a1a7d15f67b588bf58f652f9f0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P1Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: HQDJ3aZPlqiUszhn3Hrut0_TNbI8-Z2Wb2JhV9LstE_DqVaJ9l3zbwX-XSS-Protection: 1; modeblockX-Frame-Options: DENYReferrer-Policy: same-originContent-Security-Policy: default-src none; connect-src self https://*.nordeafinance.no https://*.nordeafinance.local https://nordea.d3.sc.omtrdc.net https://adobedc.demdex.net https://edge.adobedc.net; script-src self https://tags.tiqcdn.com https://policy.cookiereports.com https://cdn1.adoberesources.net; style-src self unsafe-inline; img-src self https://*.nordeafinance.no data:; font-src self; object-src none; base-uri self; manifest-src self; upgrade-insecure-requests; block-all-mixed-content; frame-ancestors https://*.superoffice.com https://*.crm4.dynamics.com;

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>CloudFront/center>/body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1274Connection: keep-aliveDate: Thu, 28 Aug 2025 18:42:25 GMTLast-Modified: Tue, 26 Aug 2025 13:52:29 GMTETag: 383016b17f35444f731b47b3997307a6x-amz-server-side-encryption: AES256Cache-Control: no-storeAccept-Ranges: bytesServer: AmazonS3X-Cache: Miss from cloudfrontVia: 1.1 304b956e2039e07753fa39109152d594.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P1Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: DNkZG6ZZ2xhWxj7GWA8GhEk8gdJ_VAWDKnbgbYsQ7sLxZqWmzSbGCgX-XSS-Protection: 1; modeblockX-Frame-Options: DENYReferrer-Policy: same-originContent-Security-Policy: default-src none; connect-src self https://*.nordeafinance.no https://*.nordeafinance.local https://nordea.d3.sc.omtrdc.net https://adobedc.demdex.net https://edge.adobedc.net; script-src self https://tags.tiqcdn.com https://policy.cookiereports.com https://cdn1.adoberesources.net; style-src self unsafe-inline; img-src self https://*.nordeafinance.no data:; font-src self; object-src none; base-uri self; manifest-src self; upgrade-insecure-requests; block-all-mixed-content; frame-ancestors https://*.superoffice.com https://*.crm4.dynamics.com;Strict-Transport-Security: max-age63072000; includeSubDomains; preload

!DOCTYPE html>html langen>meta charsetutf-8>meta http-equivx-ua-compatible contentieedge>meta nameviewport contentwidthdevice-width, initial-scale1, shrink-to-fitno>meta namegoogle contentnotranslate>meta nametheme-color content#00005E>meta namedescription contentNordea Finances self service portal for partners offering financing products to their customers.>title>PartnerHub/title>link relicon href/assets/5bcfa71d02/favicon.83b2636a.ico sizesany>link relicon href/assets/5bcfa71d02/icon.a3c0fd1a.svg typeimage/svg+xml>link relapple-touch-icon href/assets/5bcfa71d02/192x192.e6dd5cb6.png>link relstylesheet mediaprint data-lazytrue href/assets/5bcfa71d02/public.4b0a3c4a.css>link relmanifest href/assets/5bcfa71d02/manifest.webmanifest>body>    script typeapplication/json idapp-config>{API_HOST:/api,AUTH0_CLIENT_ID:TuMTt6siZ9MdOBP9PyjXqIfbJWcrJ7bR,AUTH0_DOMAIN:auth0.equipment.nordeafinance.no,ENVIRONMENT:Production,OBSERVE_API_KEY:faro_production,OBSERVE_ENDPOINT:https://observe.equipment.nordeafinance.no/collect}/script>    noscript> You need to enable JavaScript to run this app. /noscript>    script typemodule async src/assets/5bcfa71d02/public.39ecc4d7.js>/script>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > beta.partnerhub.equipment.nordeafinance.no

Is this malicious?

DNS Resolutions

Port 80

Port 443