bancoldex.com

HTML metadata

Title: Inicio | Bancóldex
Description: Banco de Desarrollo Empresarial de Colombia. Conoce nuestras soluciones de crédito, garantías, fondos de inversión y fortalecimiento empresarial.
Language: es
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://www.bancoldex.com/

Technology

CDN: Cloudflare
CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (3)

www.googletagmanager.com×3
cdn.jsdelivr.net×2
cdnapiwebservice.atlanticqi.com×1

Social

Contact

Phone

Registration

Registrar

GoDaddy.com, LLC

Created

1997-03-04

Expires

2027-03-05 289 days left

Updated

2026-02-20

Name servers

lucy.ns.cloudflare.com
steven.ns.cloudflare.com

DNS records live

NS

lucy.ns.cloudflare.com
steven.ns.cloudflare.com

MX

10 bancoldex-com.mail.protection.outlook.com

TXT

Show 13 TXT records

globalsign-domain-verification=6B9CEE9ED6C6050CB39C29F1CA2005A2
globalsign-domain-verification=726ECB4F73B15DB45E6C01E4395DE8FA
globalsign-domain-verification=F094BD385C6DB5BC397BADA7A6712090
google-site-verification=wLUmuvm0zDVhFMapHU1v59PMk7reEbd1kUHtOiKI_4k
hgh5lqwmywzbxdxnbnw3xl0bgv8xvx2s
v=DKIM1; k=rsa; h=sha256; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQYO3R42BabiDN4ouX+NKGySe3sLjejjtEPH8IukMzDtIvTFIBhWbI5n+JsaPqg47Mt2mqPi+M61tTaMrue6q7M8EkjTSt8bLl6ci+NNnlc/dH+KCdD1eRA8cg1cWJdO7QhxyEK9XNmQaX+oCukWbSW0G/c5JOs9fvcXT4b9k9hQIDAQAB
0D/Z1I36nQ9Ma8Qy2ouuTvOvEYdOL4mjHvgTEsyKocDHHOG2ssH5+zxu0z0SEQZktYp9Bh8G+Ymnri7shG36Ow==
575drvl3t4z1g2zdfyrm6bw34vm0r864
93cjsbhb5yqp8w00zsbvlgf6fd4xqbpf
MS=ms99201866
_u7mx4girqkl07oudcaa5st20kzj7g5m
globalsign-domain-verification=0D8E0D1AB063EA4668023B926CB22C6E
globalsign-domain-verification=4D14B3557F89DC1F80C45DFEA88670B6

Email authentication strong

SPF

v=spf1 ip4:10.164.42.0/26 ip4:190.85.159.27 ip4:190.242.0.8 include:sendgrid.net include:_spf.salesforce.com include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:infraestructura@bancoldex.com; ruf=mailto:infraestructura@bancoldex.com; fo=1

policy: quarantine

DKIM

selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDWE6xamafC3oYHfdb+S+0oll/12hgIQOz6D7IubN+xn+FFeIHGqaveHdx3r7K4TTxb70EdfSFwiznljbqr98…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtReuaYrhP6Ti5sxv38JgQLcRl/RMJrV5injUPCYrssTzWWW+ljuiERdWOuDVerZbdNp0+bVAyTqW3KdwM…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzniociH9nqvjE6nnfjz2ZH2TPjUp2yVL2eVSkMiCfrJNNYCZ3UnjzQbXJGhL+HqD9gb8itLW+HXFdg3WV…

selectors probed

Certificate (current)

E8

from 2026-04-20 to 2026-07-19

Expires in 61 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.bancoldex.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), microphone=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://cdn.jsdelivr.net http://cdn.jsdelivr.net https://unpkg.com https://www.google.com https://www.gstatic.com https://cdn.gtranslate.net https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://d335luupugsy2.cloudfront.net https://cdnjs.cloudflare.com https://googleads.g.doubleclick.net https://cdnapiwebservice.atlanticqi.com:850 https://www.google-analytics.com https://connect.facebook.net; object-src 'self'; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net http://cdn.jsdelivr.net https://unpkg.com https://www.gstatic.com https://translate.googleapis.com https://fonts.googleapis.com https://cdnjs.cloudflare.com; img-src 'self' data: https: http://translate.google.com; frame-src 'self' https://www.google.com https://recaptcha.google.com https://www.youtube.com https://translate.google.com https://www.googletagmanager.com; fra
strict-transport-security: max-age=31536000; includeSubDomains; preload