English

LPSID-78722355

LPVID

OptanonConsent

Within the United Kingdom country-code top-level domain (.co.uk), 'www.nationwide.co.uk' is registered and includes subdomain 'www'. The registrable portion 'nationwide' spans 10 characters split between 5 vowels and five consonants. It segments into one word: nationwide. 'nationwide' is most common in Tagalog usage. Secondary signals appear in English and Vietnamese.

html/7b/02/7b02e05a-1dae-43da-afe8-ce2322edfb7b_fallback.html.gz

Mortgage rates | Compare mortgage deals | Nationwide

query

nationwideMortgage

html/7b/02/7b02e05a-1dae-43da-afe8-ce2322edfb7b.html.gz

Guide to base rate changes and your mortgage

Keep your existing Nationwide mortgage deal

the Financial Conduct Authority (FCA) website (opens in a new window)

More about how we use cookies (opens in a new window)

width=device-width, initial-scale=1, shrink-to-fit=no

viewport

color-scheme

msapplication-TileColor

/_next/static/images/mstile-144x144-50c983146e5859b80c5672dee9fcc17a.png

msapplication-TileImage

/_next/static/images/mstile-70x70-072acf9144c97be6a9e78f1dda999705.png

msapplication-square70x70logo

/_next/static/images/mstile-150x150-b285f764f6541540824984830664fafc.png

msapplication-square150x150logo

/_next/static/images/mstile-310x310-325a78ad5cc2c2198140916412b82c79.png

msapplication-square310x310logo

Use our online mortgage rate finder to compare mortgage rates and see available interest rates from across our range of mortgages.

description

connect-src https://api.crownpeak.net https://ad.doubleclick.net https://adservice.google.com https://analytics-fe.digital-cloud-eu-main.medallia.eu https://analytics-fe.digital-cloud-uk.medallia.eu https://c.contentsquare.net https://cdn-ukwest.onetrust.com https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://*.liveperson.net https://*.lpsnmedia.net https://ict.infinity-tracking.net https://k-aeu1.contentsquare.net https://md-scp.kampyle.com https://nationwide.co.uk https://nebula-cdn.kampyle.com https://resources.digital-cloud-uk.medallia.eu  https://sbt-prod.kampyle.com https://signly.azurewebsites.net https://td.doubleclick.net/ https://ubt-lb.digital-cloud-uk.medallia.eu https://udc-neb.kampyle.com https://*.bf.dynatrace.com https://*.contentsquare.net https://*.infinity-tracking.com wss://*.liveperson.net https://dpm.demdex.net https://graph.nationwide.co.uk https://lo.msg.liveperson.net https://lo.tokenizer.liveperson.net https://nationwidebuildingso.tt.omtrdc.net https://pdx-col.eum-appdynamics.com https://privacyportal-uk.onetrust.com 'self' https://accdn.liveperson.net https://cdn.lpsnmedia.net https://lo.v.liveperson.net https://lpcdn.lpsnmedia.net https://*.nationwide.co.uk https://geolocation.onetrust.com wss://lo.msg.liveperson.net; script-src https://cdn.signly.co https://accdn.lpsnmedia.net https://analytics-fe.digital-cloud-eu-main.medallia.eu https://analytics-fe.digital-cloud-uk.medallia.eu https://app.contentsquare.com https://assets.adobedtm.com https://c.contentsquare.net https://cdn-ukwest.onetrust.com https://csxd.contentsquare.net https://dqm.crownpeak.com https://geolocation.onetrust.com https://www.googletagmanager.com https://js-cdn.dynatrace.com https://k-aeu1.contentsquare.net https://l.contentsquare.net https://lo.msg.liveperson.net https://lo.tokenizer.liveperson.net https://lo.v.liveperson.net https://lpcdn.lpsnmedia.net https://lptag.liveperson.net https://md-scp.kampyle.com https://nebula-cdn.kampyle.com https://q-aeu1.contentsquare.net https://r.contentsquare.net https://resources.digital-cloud-uk.medallia.eu https://sbt-prod.kampyle.com https://script.infinity-tracking.com https://scripts.ustudio.com 'self' https://t.contentsquare.net https://udc-neb.kampyle.com 'unsafe-eval' 'unsafe-inline' https://*.nationwide.co.uk https://www.googletagmanager.com https://cdn.lpsnmedia.net; base-uri 'self'; child-src blob:; default-src 'self'; form-action https://graph.nationwide.co.uk; media-src blob: https://cdn.lpsnmedia.net https://lpcdn.lpsnmedia.net 'self' https://cdn.signly.co https://british-sign-language-videos.signly.co/ https://signlymediaservice-ukso1.streaming.media.azure.net https://signlystorageaccount.blob.core.windows.net; worker-src blob:; font-src https://fonts.gstatic.com https://www.googletagmanager.com https://nebula-cdn.kampyle.com https://resources.digital-cloud-uk.medallia.eu 'self' https://*.nationwide.co.uk; frame-src https://csxd.nationwide.co.uk https://embed.ustudio.com https://lo.idp.liveperson.net https://lo.msghist.liveperson.net https://lo.msg.liveperson.net/ https://lo.shiftstatus.liveperson.net https://lo.tokenizer.liveperson.net https://lpcdn.lpsnmedia.net https://nationwide.demdex.net https://nebula-cdn.kampyle.com https://resources.digital-cloud-uk.medallia.com 'self' https://td.doubleclick.net/ https://*.fls.doubleclick.net https://cdn.lpsnmedia.net; img-src https://analytics-fe.digital-cloud-eu-main.medallia.eu https://cdn.signly.co https://ad.doubleclick.net https://analytics-fe.digital-cloud-uk.medallia.eu https://c.contentsquare.net https://cm.everesttech.net data: https://dpm.demdex.net https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://lpcdn.lpsnmedia.net https://md-scp.kampyle.com https://nationwidelive1.112.2o7.net https://nebula-cdn.kampyle.com https://resources.digital-cloud-uk.medallia.eu 'self' https://british-sign-language-videos.signly.co/ https://udc-neb.kampyle.com https://*.contentsquare.net https://*.nationwide.co.uk https://cdn.lpsnmedia.net https://cdn-ukwest.onetrust.com; object-src 'self'; style-src https://cdn.signly.co https://accdn.lpsnmedia.net https://cdn.lpsnmedia.net https://fonts.googleapis.com https://lo.v.liveperson.net https://lpcdn.lpsnmedia.net https://lptag.liveperson.net https://md-scp.kampyle.com https://nebula-cdn.kampyle.com https://resources.digital-cloud-uk.medallia.eu 'self' 'unsafe-inline';

next-head-count

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

Abuse contact

CSC Corporate Domains, Inc

nationwide.co.uk

{"props":{"pageProps":{"layoutData":{"sitecore":{"context":{"pageEditing":false,"site":{"name":"nationwidecouk","rootItemName":"nationwidecouk"},"pageState":"normal","language":"en","itemPath":"/mortg


//We are setting this flag to keep a count of the number of times wa_view has been called, this is to help us know when to set referrer so we make sure it is correct for marketing channels

var waVie

_satellite["_runScript1"](function(event, target, Promise) {
window.wa_consent = (function () {_satellite.track('wa_consent')})
});

_satellite["_runScript2"](function(event, target, Promise) {
window.wa_view = (function() {
	_satellite.track('wa_view');

	_satellite.setVar("page|wa_view called", true);
  
    ++window.waViewCalled

_satellite["_runScript3"](function(event, target, Promise) {
window.wa_action = (function(action) {
	_satellite.track('wa_action', {
      arrayLength: nbs_ddl?.action?.length,
      actionName: "cust

_satellite["_runScript4"](function(event, target, Promise) {
var lpSiteID = "";

if (_satellite.getVar('environment stage') === "development" || _satellite.getVar('environment stage') === "staging"){


_satellite["_runScript5"](function(event, target, Promise) {
function lp_fallback() {
  let lp_fail_flag = _satellite.getVar("lp_function_undefined");

  if(lp_fail_flag === true){
      let lp_sectio

_satellite["_runScript6"](function(event, target, Promise) {
function mEvent(name, action) {
window.addEventListener('MDigital_' + name, function(mdEvent) {
  let mdDetail = mdEvent.detail;
  let data

_satellite["_runScript7"](function(event, target, Promise) {
_satellite.setVar("library load consent status", _satellite.getVar('cookie consent|category|user experience'));
});

_satellite["_runScript8"](function(event, target, Promise) {
function lptrack(data, eventInfo){
    if(window.console && window.JSON){
          
		var lpaction = {type:eventInfo.appName, 
           

_satellite["_runScript9"](function(event, target, Promise) {
var lvpsec=[_satellite.getVar("page|name (pagename)")];"function"==typeof lpTag.newPage?(lpTag.newPage(window.location.href,{section:lvpsec

_satellite["_runScript10"](function(event, target, Promise) {
var cdomain;window.location.hostname.match(/nationwide.co.uk/)&&(cdomain=".nationwide.co.uk"),_satellite.cookie.remove("cmpid",{domain:cdo

_satellite["_runScript11"](function(event, target, Promise) {
var cdomain;window.location.hostname.match(/nationwide.co.uk/)&&(cdomain=".nationwide.co.uk"),_satellite.cookie.remove("referralID",{domai

Requests	IP Address	Location	AS Autonomous System
59	13.107.246.45	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
12	104.18.32.137	United States	AS13335CLOUDFLARENET
9	13.107.213.45	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
4	95.100.185.90	Frankfurt am Main, Hesse, Germany	AS16625AKAMAI-AS
4	172.64.155.119	United States	AS13335CLOUDFLARENET
4	34.120.154.120	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
4	2.23.212.226	Madrid, Madrid, Spain	AS16625AKAMAI-AS
4	178.249.97.70	United States	AS11054LIVEPERSON
4	2a06:98c1:310d::ac40:9b77	United States	AS13335CLOUDFLARENET
4	2a02:26f0:3500:58f::1e80	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
89	21	-	-

Security Scan Report: www.nationwide.co.uk

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History