caixabanktech.com
HTML metadata
Technology
- Server
- istio-envoy
Registration
- Registrar
- EuroDNS S.A.
- Created
- 2021-01-26
- Expires
- 2028-01-26 617 days left
- Updated
- 2024-12-20
- Name servers
-
- ns1.lacaixa.com
- ns2.lacaixa.com
DNS records live
- NS
-
- ns1.lacaixa.com
- ns2.lacaixa.com
- MX
-
- 10 mxa-0027ec02.gslb.pphosted.com
- 10 mxb-0027ec02.gslb.pphosted.com
- TXT
-
Show 10 TXT records
google-site-verification=sN190he4HnKGgOH0qYsWUHgGIRDTNaXG7LgOeatWj2s91a26ee4-bf38-4583-bfba-fe5e78fb2515mongodb-site-verification=824SmSNxI7ip5VdTpyL560JQinZ7D1SdGckd9M0plBeg6z6wUzGqm+K5zuD+Bv9+ro7QMSv24Gm6tDCkP0jbOwqTV+mn7Pk/fQWXyNBm3v7BxWrgMJHSJQ==/zAR6iDlePdpLsnCOF4vG8Dkb6QUJ3aWjZyANDLjaOdMr+Xk/8STZ4atlbTaniH7TiyvoOriWAX/FSH2j6Z7fQ==samsung-domain-verification=9c70ede6-22c1-4485-be11-9bc1b1aad0db00D3H0000008rZ2=1TBUB0000000EPZcisco-ci-domain-verification=15a1ad1e5b3fb77bb15958363c9d5f40735cd3a76ef2d2c4a9c58114351596ef00D68000004EGzl=1TBTs00000001sDMS=ms48391756
Email authentication strong
- SPF
-
v=spf1 include:_spf.salesforce.com include:spf-0027ec02.pphosted.com include:spf-0027ec03.pphosted.com -allstrict (-all) - DMARC
-
v=DMARC1;p=reject;fo=1;rua=mailto:caixa-bank@rua.agari.com,mailto:dmarc_rua@emaildefense.proofpoint.com;ruf=mailto:caixa-bank@ruf.agari.com,mailto:dmarc_ruf@emaildefense.proofpoint.compolicy: reject (enforced) - DKIM
-
- s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc5Yh37gRxtyucwfz2SA5NLZWYmtjUabPM/9tmvrjOBAvB1QeJxyZJSdfQzaETnLfOM/MBi486ZojPfbOw… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqkhpjflGa47aICKAahruW/8DMgChcS1pYZ4R3dTSRm3eFB6FAsDRf2Uy1Ku/0EqczmWpJnLRGWXB/cRsK…
selectors probed - s1:
Certificates
Loading certificate
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
same-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' https://*.agrobankhub.es https://*.caixabank.es;script-src 'self' 'unsafe-inline' blob: https://*.agrobankhub.es https://*.caixabank.es https://googleads.g.doubleclick.net https://td.doubleclick.net https://www.googleadservices.com https://px.ads.linkedin.com https://snap.licdn.com https://lacaixa.data.adobedc.net https://connect.facebook.net https://www.facebook.com https://www.google.com https://www.google.es https://bat.bing.com https://cdn1.adoberesources.net https://lacaixa.tt.omtrdc.net https://www.googletagmanager.com https://collect.tealiumiq.com https://tags.tiqcdn.com https://players.brightcove.net https://vjs.zencdn.net https://maps.googleapis.com;connect-src 'self' https://caixabanktech.com https://dpm.demdex.net https://*.agrobankhub.es https://*.caixabank.es https://googleads.g.doubleclick.net https://td.doubleclick.net https://www.googleadservices.com https://px.ads.linkedin.com https://snap.licdn.com https://lacaixa.data.adobedc.net https://connect.f