bawag.at

HTML metadata

Technology

Analytics

• Google Tag Manager

Third-party hosts loaded (2)

• consent-eu.cookiefirst.com×1
• www.googletagmanager.com×1

Social

• facebook
• instagram
• youtube

DNS records live

NS

• dns1.a1.net
• dns2.a1.net
• dns3.a1.net

MX

• 10 bawag-at.mail.protection.outlook.com

TXT

• B829B26394B03EDF284058E7025CAD82F20278C5FE47509065E1D66FA28ACA6D
• swisssign-check=1qHYRalPhhq0-eMBDAG4U2XIZGg

Verified for

• Atlassian
• Google
• Microsoft 365
• TeamViewer

Email authentication strong

SPF

v=spf1 mx ip4:194.232.25.0/24 ip4:5.132.161.50/32 ip4:194.107.107.213/32 ip4:194.107.107.194/32 ip6:2a01:468:1:1225::/64 ip4:194.187.94.29/32 include:spf.protection.outlook.com ip4:194.107.107.241/32 include:spf2.bawagpsk.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:bawag@rua.netcraft.com; ruf=mailto:bawag@ruf.netcraft.com; sp=reject; fo=1;

policy: reject (enforced) · sp=reject

DKIM

• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqr0AAcMQLTvYwnZ7FJKC34x2AxyoiJ7bBCvn61QcT4DpSS/qRfCL5OMFkaZ/fIl5u0C8RSIh0rqBx…
• selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumiQ8aH8xDz8jYU+7c12L7GDwujiWaEj8rqoI2j7sIUfOlrwJZHfG5wctefE2TSafODsRsMhhygtbL…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.bawag.at/bawag/privatkunden/

present

• strict-transport-security
• x-frame-options
• x-content-type-options

findings

• missing Content Security Policy
• missing Referrer Policy
• missing Permissions Policy

Links to (13)

• apple.com×1
• bawaggroup.com×1
• easybank.at×1
• easybank.de×1
• easyleasing.at×1
• facebook.com×1
• huawei.com×1
• instagram.com×1
• integrityline.app×1
• paylife.at×1
• spardawien.at×1
• xing.com×1
• youtube.com×1

Linked from (3)

• easybank.at×1
• easyleasing.at×1
• bawaggroup.com×1