abanca.com

HTML metadata

Title

ABANCA banca online para particulares y empresas | ABANCA

Description

ABANCA, la banca para particulares y negocios. Cuenta online, cuenta nómina, cuenta joven, hipotecas, depósitos, fondos, seguros y mucho más. Banco ABANCA.

Language

es

Canonical

https://www.abanca.com/es/

Translations

ca
en
es
eu
gl

Open Graph

url: https://www.abanca.com/es/
locale: es_ES
locale:alternate: en_EN

Technology

Server: volt-adc

Cookie consent

OneTrust

Third-party hosts loaded (2)

cdn.cookielaw.org×2
assets.adobedtm.com×1

Social

Contact

Address: Cantón Claudino Pita 2, 15300, A Coruña, ES

Registration

Registrar

Acens Technologies, S.L.U.

Created

1998-09-01

Expires

2026-08-31 104 days left

Updated

2025-11-21

Name servers

dns1.cloudunificado.com
dns2.cloudunificado.com
ns2.abanca.com

DNS records live

NS

dns1.cloudunificado.com
dns2.cloudunificado.com
ns2.abanca.com

MX

10 mx1.hc1547-45.eu.iphmx.com
20 mx2.hc1547-45.eu.iphmx.com

TXT

Show 18 TXT records

mistral-domain-verification=0c74b0c6c015e1916bb7478f59af406e090629a1
globalsign-domain-verification=B933826F40CC1247E09D96697A30310D
dvzzd3k7cdwbpkt72gs1sh0zd6j3lwbv
mongodb-site-verification=FskQ05EtzaFFcH1pKzwDgc0lzIEMd68f
paloaltonetworks-site-verification=b37445c6b341668d34762ac6e23afdfe852b897f1a13de826fa1729c68e59a98
onetrust-domain-verification=a8aad59e7864442e8bbaf4cdaac5dabf
google-site-verification=MQLkFFD60vodckvOjkHNJWv9VXie-D7_k7Uz0r4FNaI
adobe-idp-site-verification=a9761e6bf4d22de255bc0b75187d84a8d4a2c62bb68d126926008c042d7133b8
tvt2fj6m7gg6gg7r3bskwbncrhrjt5yg
onetrust-domain-verification=633e33363c3842be889ac6be87a63654
facebook-domain-verification=6xqd1vxvrwnpfwvpk5aehx2elfmcl2
_a4oc3kwtlqzxg98actdwxn5nwpovcow
globalsign-domain-verification=RYSA2sSkzsgARvXSRAJzrgMhyQVXI4U1dGyfFewcKa
BK2fNbALdzFIf5ZlvQMvtMSugY6RA6E7/i8MXUFnXiE=
MS=ms85269880
cisco-ci-domain-verification=6e8a2d50f99706fb083e383c1f8f055feec80d96aeac63e1bc8321d499db7799
neuraltrust-verify-616acc06-f9a1-4722-9b83-ec322cde8a9e
_v69zf6bj94jvkos8v0mfw3synyfy8xx

Email authentication strong

SPF

v=spf1 ip4:80.68.128.18/31 include:_spf.confirmsign.com include:_spf.salesforce.com include:_spf.google.com exists:%{i}.spf.hc1547-45.eu.iphmx.com -all

strict (-all)

DMARC

v=DMARC1;p=reject;pct=100;fo=1;ri=3600;rua=mailto:9daca0ba@inbox.ondmarc.com,mailto:dmarcrua@abanca.com;ruf=mailto:9daca0ba@inbox.ondmarc.com,mailto:dmarcruf@abanca.com;

policy: reject (enforced)

DKIM

default: v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCm5dwZFJwcRdtvLuq0h3PRj/ELfPcaZViDLquIozVIhaE2li5HXUCHl8TPkt6IFd3H/ZU9AeFfxs63gnBpNQL/…
google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3/bGcHvQonmUnE4RkSuz7fpMmEiJdL9uYOkmfin1nUkG4ToL9q1o5Y7M4wRfw83U9o7UpzYaDlFg/…

selectors probed

Certificate (current)

DigiCert EV RSA CA G2

from 2026-05-05 to 2026-11-20

Expires in 185 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.abanca.com/es/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=(), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.abanca.io llamamegratis.es/ suite.conver.fit/ privacyportal-de.onetrust.com https://abancawt.infobolsa.es https://abancawt.bmeinntech.es *.2o7.net *.omtrdc.net *.tt.omtrdc.net https://assets.adobedtm.com *.adobe.com smetrics.abanca.com metrics.abanca.com smetrics.cuentasclaras.es metrics.cuentasclaras.es target.abanca.com target.cuentasclaras.com https://c.bing.com *.clarity.ms *.mouseflow.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googlesyndication.com *.abanca.io www.youtube.com llamamegratis.es/ suite.conver.fit/ www.google-analytics.com maps.googleapis.com cdnjs.cloudflare.com abanca.inbenta.com www.googletagmanager.com cdn.cookielaw.org code.jquery.com cstatic.weborama.fr www.google-analytics.com www.googleadservices.com static.ads-twitter.com bat.bing.com connect.facebook.net analytics.twitter.com googleads.g.doubleclick.net optimize.google.com platform.twitter.com cdn.syndication.twimg.com tagmanager.google.com ssl.google-analytics.com www.google.
strict-transport-security: max-age=31536000; includeSubDomains