indexo.dev

bochk.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 5147 ms crawled 2026-05-19

HK · 202.127.174.52 · AS24396 Bank Of ChinaHong Kong Limited

Reputation 75/100 wrong cert

Classifying

HTML metadata

Title
Bank of China (Hong Kong) Limited
Language
en

Registration

Registrar
Network Solutions, LLC
Created
1996-08-08
Expires
2027-08-07 444 days left
Updated
2022-02-26
Name servers
  • a1-59.akam.net
  • a10-65.akam.net
  • a11-67.akam.net
  • a16-67.akam.net
  • a22-67.akam.net
  • a5-64.akam.net
  • ns4.netvigator.com
  • ns5.imsbiz.com
  • ns5.netvigator.com
  • ns6.imsbiz.com

DNS records live

NS
  • a1-59.akam.net
  • a10-65.akam.net
  • a11-67.akam.net
  • a16-67.akam.net
  • a22-67.akam.net
  • a5-64.akam.net
  • ns4.netvigator.com
  • ns5.imsbiz.com
  • ns5.netvigator.com
  • ns6.imsbiz.com
MX
  • 10 mail.bochk.com
  • 10 mail3.bochk.com
  • 10 mailmetro.bochk.com
  • 10 newmta.bochk.com
TXT
  • google-site-verification=WVC1YfEvmFyrqhyPmovTmgPC17SwPL3PB-z0ptXz_-M
  • fortinet-fortiphish-site-verification=NeiwP8C3St7qS6MSpYr24Z
  • google-site-verification=xQtg1TPX1sO21nQymLgwePeNMpzf8qqlG3jzIhtc568

Email authentication strong

SPF
v=spf1 ip4:202.127.168.0/21 ~all
softfail (~all)
DMARC
v=DMARC1;p=quarantine;pct=100;rua=mailto:dmarc_rua@bochk.com;ruf=mailto:dmarc_ruf@bochk.com
policy: quarantine
DKIM
  • selector2: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5/V9P5FCnf3FWFfCPHVc9fu2SL4E+Hl8Z5Fr0cXptlyMKezEwbFN4bcTw2L/+FXvLxmZ2THBvbBveVeKBIbq…
selectors probed

Certificate (current) wrong cert

DigiCert EV RSA CA G2
from 2026-04-01 to 2026-10-17
Expires in 150 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.bochk.com/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
findings
  • CSP uses wildcard sources
  • missing frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-content-type-options
nosniff
content-security-policy
upgrade-insecure-requests;frame-ancestors 'self' *.bochk.com *.bocgroup.com *.ftcwifi.com *.posangonline.com
strict-transport-security
max-age=31536000;includeSubDomains;preload

Linked from (2)