creditoagricola.pt

HTML metadata

Title: Crédito Agrícola | O Banco Nacional com pronúncia local.
Description: O Crédito Agrícola oferece soluções completas de crédito, poupança, investimento e para a gestão do dia-a-dia de particulares e empresas. Descubra todas as vantagens! O Banco Nacional com presença local.
Language: pt-pt

Open Graph

url: https://www.creditoagricola.pt/
title: Crédito Agrícola | O Banco Nacional com pronúncia local.
locale: pt_PT
site name: Crédito Agrícola
description: O Crédito Agrícola oferece soluções completas de crédito, poupança, investimento e para a gestão do dia-a-dia de particulares e empresas. Descubra todas as vantagens! O Banco Nacional com presença local.

Technology

Stack: ASP.NET

Analytics

Google Tag Manager

Cookie consent

OneTrust

Fonts

Google Fonts

Third-party hosts loaded (7)

cdn.cookielaw.org×2
fonts.googleapis.com×2
cdnjs.cloudflare.com×1
fonts.gstatic.com×1
maps.googleapis.com×1
www.google.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns1.ptempresas.pt
ns10.ptempresas.pt
ns2.ptempresas.pt

MX

10 creditoagricola-pt.mail.protection.outlook.com

TXT

Show 5 TXT records

2Z/fDXla2LInqJMigojS8DGQwWPPsv4Ke+KLqlO0YHbHLm0csB8L1mk8rG4OQjtde11i1axe4a0Tf0TiawBsGA==
mtc=MjM2MmM1NzMtZjE5Yy00OTVhLTkyOTEtODlmYzM3NDUxMGYy
+Yv3QcmNe5yj3sWSXf1QUEmQANhuKdoHDBkYXPgfa7uh9F502+fEPYxAEHv7ZTxZqnbc2/lqtk0lEqC/OSjorQ==
04d46905869d440281efe2f70dfb7a3c
014ly8kgc5zzltglnjnrpzngx4p45td4

Verified for

Dynatrace
Google
Microsoft
OneTrust

Email authentication strong

SPF

v=spf1 ip4:51.104.146.194 ip4:20.76.180.190 ip4:193.27.11.111 include:_spfrlo.altice-empresas.pt include:spf.protection.outlook.com include:bmsend.com include:_spf.kmitd.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; ruf=mailto:ca.servicos.grs@creditoagricola.pt; fo=1

policy: reject (enforced)

DKIM

Show 5 DKIM selectors

default: v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq36l1Tsz4KCyAI2V+Vr90C3BKm1cE1SPSG8i+nlmptIgdEdG87qoHht/VnC1GYqKS6fI…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qtue56O1XhchWn5wSQtakdKWjibNL+VxJAhc8lcV5oLhdD17eLRVsDSamya3PI5whWLgKJHAcZ4qn…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAremE+7ANZwWYlRid4vexvFaQh0GoBEOB2U2wr7uliGEJlFeHbdTxPKZGcm6/GGCe7tRLwobcZ/lWQO…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscX7L38ckszhbZ4fMaDornaIFx9woOK68NubXZcgc4yL/BAUqhiyF5iMRqFDuo3Phg5nNPqRCIcyMpRV4T…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QaXu+/K0S/gvsHfrZn7527Iyt8GvJrMYMblCAT7zh5vBjPTfmNMAIpH8sWhM7JMq8f+Jk3MrKjd+L9VTv…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2026-04-23 to 2026-11-08

Expires in 160 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.creditoagricola.pt/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src * data: 'self' 'unsafe-inline';img-src * data:;style-src-elem 'self' 'unsafe-inline' https://cdn.cookielaw.org https://pr-cb-bot.azurewebsites.net https://fonts.googleapis.com https://optanon.blob.core.windows.net;script-src * 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com/ https://www.google-analytics.com https://connect.facebook.net https://cdn.cookielaw.org https://code.jquery.com/ https://cdnjs.cloudflare.com https://geolocation.onetrust.com https://maps.googleapis.com https://ajax.googleapis.com https://www.google.com/recaptcha/api.js https://www.youtube.com/iframe_api https://s.ytimg.com/yts/jsbin/www-widgetapi-vflE2z392/www-widgetapi.js https://www.gstatic.com/recaptcha/api2/v1563777128698/recaptcha__pt.js https://platform-api.sharethis.com/js/sharethis.js;frame-src https://www.creditoagricola.pt https://www.youtube.com https://youtu.be/ https://www.facebook.com https://www.googletagmanager.com https://www.google.com/ https://vars.hotjar.com h
strict-transport-security: max-age=31536000; includeSubDomains