bnpparibas.co.uk

HTML metadata

Title: BNP Paribas in the UK - BNP Paribas United Kingdom
Language: en-GB
Canonical: https://www.bnpparibas.co.uk/en/

Open Graph

url: https://www.bnpparibas.co.uk/en/
title: BNP Paribas in the UK - BNP Paribas United Kingdom
locale: en_GB
site name: United Kingdom
description: BNP Paribas: one of the largest banks in the Eurozone, serving the UK for over 150 years. We are a trusted partner to UK businesses, institutions and have been for over 150 years. We are dealmakers and market makers, fusing innovative ideas, people and businesses to help UK firms create growth, jobs and opportunity. We […]

Technology

CMS: WordPress

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (2)

cdn.cookielaw.org×2
www.googletagmanager.com×2

Social

Contact

Phone

2026-05-06 16

Registration

Registrar

Nameshield SAS

Created

2001-05-16

Expires

2027-05-16 360 days left

Updated

2026-05-15

Name servers

ns1.bnpparibas.com.
ns2.bnpparibas.com.
ns3.domivesta.net.
ns4.domivesta.com.

DNS records live

NS

ns1.bnpparibas.com
ns2.bnpparibas.com
ns3.domivesta.net
ns4.domivesta.com

TXT

Show 9 TXT records

_2qf5ptgcmrtg0c9r6b56c7zneoh9r6i
_qnd5o0muh4u3exg5heeerisx28xkabg
67cnqnlr3mr8hlr0s5zqkqqylyl9nxfv
_kqoje9fpvkiuwidxcpiemri92mxnu6h
_ci580yri8f44fet7lig4df0gas3jrvk
_is5j9x360lqt1vrl1scmiwsxbntbkrv
_7mz4ea4qk6maj2cwyoxsgtp61r50bly
_i04xtpesu15q6ylvewit2ryvx2nbwng
58D3-7F31-5F2E-DC91-ECDF-4523-DDE4-6234

Email authentication no MX

SPF: v=spf1 -all
strict (-all)
DMARC: v=DMARC1; p=reject; fo=1; rua=mailto:f1rg2pej@ag.eu.dmarcian.com; ruf=mailto:f1rg2pej@fr.eu.dmarcian.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

DigiCert Global G3 TLS ECC SHA384 2020 CA1

from 2026-04-29 to 2026-11-14

Expires in 177 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.bnpparibas.co.uk/en/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), geolocation=(), fullscreen=(), autoplay=(), camera=(), display-capture=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://cdn.cookielaw.org https://www.bnpparibas.de https://brasil.bnpparibas; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fast.wistia.com https://beacon-v2 https://analyticsgroupcom.bnpparibas.com https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas ajax.googleapis.com www.googletagmanager.com googletagmanager.com tagmanager.google.com; style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com https://www.gstatic.com https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas fonts.googleapis.com www.googletagmanager.com tagmanager.google.com; img-src 'self' data: https://s.w.org https://wp-rocket.me https://c.tile.openstreetmap.org https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org blob: https://www.google.com/pagead/landing https://ade.googlesyndication.com https://pagead2.googlesyndication.com https://ad.doubleclick.n
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://cdn.cookielaw.org https://www.bnpparibas.de https://brasil.bnpparibas; script-src 'self' 'unsafe-eval' https://fast.wistia.com https://beacon-v2 https://analyticsgroupcom.bnpparibas.com https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas ajax.googleapis.com www.googletagmanager.com googletagmanager.com tagmanager.google.com 'sha256-F+QMJISS2IIkRUd2a+c+u1owMqMSoidCaHFDAmzUgOo=' 'sha256-iqOPaRlwwgtNy7J3vh/+LSW9/QVdN+Fl+YfMS8+GcPo=' 'sha256-yZHeusBmoqYSsqdm5ylf993dfqVyosFaYa5gueKZDsA=' 'sha256-rjfSUjIA2A20p4lATAefLLG7Fy7VJssnkJ+SnJ2TXNo=' 'sha256-AgTl8Go9WFl+lprCLuWNLfmORUij6C8Lv3fUmWcnPPI=' 'sha256-RWn1w3BKiDlDNbD6vM1kYLpeWCwwWPkob0LMWJ2gKJk=' 'sha256-HJadkmSCTB54DnuYc0Dfziccj4NBLLmhsmXP/H8HpL4=' 'sha256-fPXetwWx4258jL256OrNtQQyvFVR4/BotkeZKtfk54Q=' 'sha256-yElBEKucE35qwHf8qWcAvqD25zOJ7TqTptcHyzGhOxw=' 'sha256-XcJhjhQeT3IZrXbvjXS7FdDB0mGtErY7S1qu8mAIatM=' 'sha256-qcT/R0HkWUs2DMxvtvcMo