Nordnet.fi

Server: nginx
Date: Sun, 20 Aug 2023 10:22:03 GMT
Location: https://www.nordnet.fi/
Strict-Transport-Security: max-age=31536000
Connection: Keep-Alive
Content-Length: 0

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 20 Aug 2023 10:22:04 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 37
Connection: keep-alive
Vary-CH: UA-Platform Viewport-Width Sec-CH-Prefers-Color-Scheme Sec-CH-Prefers-Contrast
Accept-CH: UA-Platform Viewport-Width Sec-CH-Prefers-Color-Scheme Sec-CH-Prefers-Contrast
Critical-CH: UA-Platform Viewport-Width Sec-CH-Prefers-Color-Scheme Sec-CH-Prefers-Contrast
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Pragma: no-cache
Expires: 0
Set-Cookie: NEXT=d1db2bb01d9358028cfc78b2a5fbaf3a4ab3c962; Max-Age=3600; Path=/; Expires=Sun, 20 Aug 2023 11:22:04 GMT; HttpOnly; Secure; SameSite=None
Set-Cookie: lang=fi; Domain=.nordnet.fi; Path=/; Secure
Location: /fi
Vary: Accept
Content-Security-Policy: default-src 'none'; report-uri /next-external/log/csp/violations; report-to csp-violations; connect-src 'self' wss://www.nordnet.fi https://analytics.prod.nntech.io https://cdn.prod.nntech.io https://api.prod.nntech.io https://api.test.nntech.io https://experimentation.public.prod.nntech.io https://nordnet.humany.net https://www.google-analytics.com https://adservice.google.com https://www.google.com https://storage.googleapis.com https://www.recaptcha.net; font-src 'self' https://cdn.prod.nntech.io https://nordnet.humany.net; frame-src https://10961666.fls.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://w.soundcloud.com https://embed.acast.com https://link.tink.com https://www.tv2.no https://checkout.trustly.com https://www.recaptcha.net https://t.email.nordnet.fi; img-src 'self' https://analytics.prod.nntech.io https://cdn.prod.nntech.io data: blob: https://www.google-analytics.com https://shareville-static.s3.amazonaws.com https://shareville-media.s3.amazonaws.com https://www.googletagmanager.com https://nordnet.humany.net  https://humany.blob.core.windows.net https://cdn.tink.se https://images.ctfassets.net https://i.vimeocdn.com https://img.youtube.com https://www.recaptcha.net https://www.gstatic.com https://blogi.nordnet.fi; manifest-src 'self'; media-src https://cdn.prod.nntech.io https://videos.ctfassets.net; object-src 'self'; script-src 'self' 'unsafe-eval' 'nonce-e82b385800699c6bdf462ec4909ef729' https://analytics.prod.nntech.io https://cdn.prod.nntech.io https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://www.recaptcha.net; script-src-attr 'none'; style-src 'unsafe-inline' 'self' https://cdn.prod.nntech.io https://nordnet.humany.net https://www.gstatic.com; worker-src 'none'; base-uri 'none'; form-action 'self' https://www.shareville.se https://pvu.nets.no https://online.alandsbanken.fi https://verkkopankki.danskebank.fi https://verkkomaksu.handelsbanken.fi https://epmt.nordea.fi https://identify.nordea.com https://verkkomaksu.poppankki.fi https://verkkomaksu.saastopankki.fi https://online.s-pankki.fi https://auth.aktia.fi; frame-ancestors https://app.contentful.com;
Report-To:: {"group": "csp-reports","max_age":86400,"endpoints":[{"url":"/next-external/log/csp/reports"}],"include_subdomains":true},{"group": "csp-violations","max_age":86400,"endpoints":[{"url":"/next-external/log/csp/violations"}],"include_subdomains":true}
Referrer-Policy: same-origin
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-Download-Options: noopen
Permissions-Policy: interest-cohort=()

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 20 Aug 2023 10:22:05 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Vary-CH: UA-Platform Viewport-Width Sec-CH-Prefers-Color-Scheme Sec-CH-Prefers-Contrast
Accept-CH: UA-Platform Viewport-Width Sec-CH-Prefers-Color-Scheme Sec-CH-Prefers-Contrast
Critical-CH: UA-Platform Viewport-Width Sec-CH-Prefers-Color-Scheme Sec-CH-Prefers-Contrast
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Pragma: no-cache
Expires: 0
set-cookie: NEXT=1e38dfb4506fcc00f804328b8230b784d3ac623a; Max-Age=3600; Path=/; Expires=Sun, 20 Aug 2023 11:22:04 GMT; HttpOnly; Secure; SameSite=None
set-cookie: lang=fi; Domain=.nordnet.fi; Path=/; Secure
set-cookie: _csrf=8JSv9Nt-Q_22BKbT03DNgpVq; Path=/; HttpOnly; Secure; SameSite=Strict
Content-Security-Policy: default-src 'none'; report-uri /next-external/log/csp/violations; report-to csp-violations; connect-src 'self' wss://www.nordnet.fi https://analytics.prod.nntech.io https://cdn.prod.nntech.io https://api.prod.nntech.io https://api.test.nntech.io https://experimentation.public.prod.nntech.io https://nordnet.humany.net https://www.google-analytics.com https://adservice.google.com https://www.google.com https://storage.googleapis.com https://www.recaptcha.net; font-src 'self' https://cdn.prod.nntech.io https://nordnet.humany.net; frame-src https://10961666.fls.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://w.soundcloud.com https://embed.acast.com https://link.tink.com https://www.tv2.no https://checkout.trustly.com https://www.recaptcha.net https://t.email.nordnet.fi; img-src 'self' https://analytics.prod.nntech.io https://cdn.prod.nntech.io data: blob: https://www.google-analytics.com https://shareville-static.s3.amazonaws.com https://shareville-media.s3.amazonaws.com https://www.googletagmanager.com https://nordnet.humany.net  https://humany.blob.core.windows.net https://cdn.tink.se https://images.ctfassets.net https://i.vimeocdn.com https://img.youtube.com https://www.recaptcha.net https://www.gstatic.com https://blogi.nordnet.fi; manifest-src 'self'; media-src https://cdn.prod.nntech.io https://videos.ctfassets.net; object-src 'self'; script-src 'self' 'unsafe-eval' 'nonce-21fb25b248ccc3c90f40d0466c60d06f' https://analytics.prod.nntech.io https://cdn.prod.nntech.io https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://www.recaptcha.net; script-src-attr 'none'; style-src 'unsafe-inline' 'self' https://cdn.prod.nntech.io https://nordnet.humany.net https://www.gstatic.com; worker-src 'none'; base-uri 'none'; form-action 'self' https://www.shareville.se https://pvu.nets.no https://online.alandsbanken.fi https://verkkopankki.danskebank.fi https://verkkomaksu.handelsbanken.fi https://epmt.nordea.fi https://identify.nordea.com https://verkkomaksu.poppankki.fi https://verkkomaksu.saastopankki.fi https://online.s-pankki.fi https://auth.aktia.fi; frame-ancestors https://app.contentful.com;
Report-To:: {"group": "csp-reports","max_age":86400,"endpoints":[{"url":"/next-external/log/csp/reports"}],"include_subdomains":true},{"group": "csp-violations","max_age":86400,"endpoints":[{"url":"/next-external/log/csp/violations"}],"include_subdomains":true}
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000