bancolombia.com

HTML metadata

Title

Bancolombia Personas

Description

Conoce nuestra oferta de valor para las personas naturales. Encuentra productos como créditos de financiación, tarjetas de crédito, inversiones, cuentas de ahorro, cuentas de nómina y muchos más. ¡Ingresa aquí!

Language

en

Canonical

https://www.bancolombia.com/personas

Translations

es-co

Open Graph

url: https://www.bancolombia.com/personas
title: Bancolombia Personas
site name: Bancolombia
description: Conoce nuestra oferta de valor para las personas naturales. Encuentra productos como créditos de financiación, tarjetas de crédito, inversiones, cuentas de ahorro, cuentas de nómina y muchos más. ¡Ingresa aquí!

Technology

CDN: Amazon CloudFront

Analytics

Google Tag Manager

Third-party hosts loaded (5)

cdn.dynamicyield.com×2
rcom.dynamicyield.com×2
st.dynamicyield.com×2
cdnjs.cloudflare.com×1
www.googletagmanager.com×1

Social

Contact

Phone

Registration

Registrar

CCI REG S.A.

Created

1997-10-09

Expires

2027-10-08 506 days left

Updated

2026-04-27

Name servers

ns1.bluecatdns.com
ns1.bluecatdns.net
ns1.bluecatdns.org

DNS records live

NS

ns1.bluecatdns.com
ns1.bluecatdns.net
ns1.bluecatdns.org

MX

0 bancolombia-com.mail.protection.outlook.com

TXT

Show 31 TXT records

_globalsign-domain-verification=5eq0CKmgBwKjTXf_IC7nlGsTgjbj7E-ZIL4sRwJNGS
lS2TM0XYe1jVdBe470xwz0zKbxvKnszRNPR1dYo4FxduwSNucMW9rkwwiES0QyhJCIjAw3QlfTElsg3ULiu1Yg==
gzmv8tqfyxf1hb16fft739prkzl6qlfy
MTWUg1DRYTPkk+UPADTXBLRyijdNY7Rf78yZ5eVSxKDU4VlO+WzokbEFLoGxoSdBAk4wTp6ADXTtmrSiCrQFDg==
NJNpWXClQl8Xuc4bZG/sUsKqaJQ7OWlEsnX+QHaZP2o=
paloaltonetworks-site-verification=ff5a69a758a5f24ccd7efc28bf32701df11e8721ea61bf1648ebc24d1a48efc9
globalsign-domain-verification=71A2FC72F5014FB0557939BC242F7901
p157wg2n9wqx91327n78yzc0ldcnz2nz
google-site-verification=9e1oBRklw7qcq24UzbE0ympFt5oanxvXzILSsr14Hyg
MMFuwlZ1F5cGB3WxrLwOryL0qqaDHURByqKR6dw1i2o=
gkmrw6cm6n9rc04lqwjhgrr933rxj2sr
globalsign-domain-verification=C71ECAD3841385D8AE91E28E1AF7ED79
l6dfdc830rm872qtm1fkf2p9ldh99s55
globalsign-domain-verification=a2d7bb9e6c797aa8b1b767a0ef2f4858
globalsign-domain-verification=006EF67BE8F7B3D3B401BFE0936599C5
globalsign-domain-verification=fb655aecb26ba3b84ef22886c7460f4d
ciscocidomainverification=7be9938909728852fe484b1329434e4ba4c418aa6af9db16d02f9bd9224c9380
globalsign-domain-verification=73083EF488F4656DE002CA89151CEE60
Dynatrace-site-verification=4d561207-18fe-46f4-9c95-80fb16aea537__316glsull7ar09h0gimejgsft6
apple-domain-verification=T3dFWr7AdKPHUJ2h
l088799krzp5z58r24vvmrl91w9lxx56
_globalsign-domain-verification=zXSbdpizY4RP68RrHUf92V9dniW-lF1anerw2HLgwY
_bettermode-site.comunidad
cisco-ci-domain-verification=12fcd519f67a031446747698f1fa8a7877c6810dc775cb82fe7acf6cf1f85179
google-site-verification=QMnxcmAw783PKiQVjtEKf6tCg2xrXEXf7X4Ct1ah3GE
snndfpbg3gh5xsg1292g106m3mfvy73l
google-site-verification=eTPlT54RQ8Cl7GWlhxDSbxl3vSAIFXUBCvFeMswwvTU
globalsign-domain-verification=3DFB3FC6A2D71D7EAE6D3067F2781FFE
google-site-verification=dNM-RL3zz9YaC61f6ngjwTuydfOxbKM0XJej2-sL_bM
_globalsign-domain-verification=dZ_QbJ6Vao_Fsu2F_vMmwjSMnRrUFkuusXP5jrpSH9
MS=ms90399885

Email authentication strong

SPF

v=spf1 exists:%{i}._i.%{d}._d.espf.agari-dns.net include:%{d}.23.spf-protect.agari-dns.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; ri=86400; rua=mailto:bancolombia@rua.agari.com; ruf=mailto:bancolombia@ruf.agari.com,mailto:dmarc@bancolombia.com.co

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGrstCR/JAxWFEnaRNTs+UyFBi425WSyr59AknSqKAKsl1hH6Gql26hsz0MEIzcJ9yaX72M6rOOn1T…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDAhzSPFOscZ/K+e8VO9ld120Y60hwhyeUii47ckSuhhJOrZgyooCLNdW9zVFulxt7wmr2nWtxdXScRFuOU1o…

selectors probed

Certificate (current)

GlobalSign GCC R3 EV TLS CA 2025

from 2026-03-04 to 2027-04-05

Expires in 320 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.bancolombia.com/personas

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://play.vidyard.com *.vidyard.com *.onesignal.com *.segment.com *.ambientesbc.com *.bancolombia.com *.google.com *.googletagmanager.com *.googleadservices.com *.facebook.com *.linkedin.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.spotifycdn.com *.mypurecloud.com *.cobrowse.io www.pages03.net *.doubleclick.net *.frontify.com *.groovinads.com *.creativecdn.com *.visualwebsiteoptimizer.com *.ambientesbc.com *.bancolombia.com https://widget.sndcdn.com *.sndcdn.com https://js-agent.newrelic.com *.newrelic.com https://bam.nr-data.net *.nr-data.net *.googleadservices.com *.tags.bkrtx.com *.tags.bluekai.com *.amazonaws.com https://s3.amazonaws.com https://static.opentok.com https://static.opentok.com *.opentok.com https://browseranalytic.com *.browseranalytic.com https://widget.sndcdn.com *.sndcdn.com https://js.hsforms.net *.hsforms.net https://scp.kampyle.com *.individeo.com *.kampyle.com https://tpbancolombia.teleperformance.co *.teleperformance.co https://s
strict-transport-security: max-age=31536000;