fbbva.es

HTML metadata

Title

Fundación BBVA: impulso a la investigación y a las actividades culturales

Description

Encuentra convocatorias de premios y de ayudas y becas para proyectos de investigación y creación cultural e infórmate sobre conciertos y conferencias.

Language

es

Canonical

https://www.fbbva.es/

Translations

en
es

Open Graph

url: https://www.fbbva.es/
title: Fundación BBVA: impulso a la investigación y a las actividades culturales
locale: es_ES
site name: Fundación BBVA
description: Encuentra convocatorias de premios y de ayudas y becas para proyectos de investigación y creación cultural e infórmate sobre conciertos y conferencias.
locale:alternate: en_US

Technology

CDN: Amazon CloudFront
CMS: WordPress

Fonts

Google Fonts

Third-party hosts loaded (4)

www.youtube.com×2
d3l7jhiu2gy1zw.cloudfront.net×1
fonts.googleapis.com×1
s.w.org×1

Social

Contact

Email

informacion@fbbva.es

Phone

Address

Paseo de Recoletos, 10, 28001, Madrid, Madrid, ES

DNS records live

NS

a1-166.akam.net
a22-65.akam.net
a3-66.akam.net
a4-67.akam.net
a6-64.akam.net
a7-65.akam.net
ns1.bbvaedge.com
ns2.bbvaedge.com

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
40 alt3.aspmx.l.google.com
40 alt4.aspmx.l.google.com

TXT

Show 7 TXT records

v=spf1 include:_spf.google.com ip4:210.177.227.245 ip4:91.209.243.250 include:sendgrid.net include:_bbvaspf.bbva.net include:mailcontrol.com -all
adobe-idp-site-verification=45f2d3d2-deda-4c54-8877-d1a0e7a51fa8
cisco-ci-domain-verification=201b895c1fb329c950f8f2c09a6a6e077e092b0374c4038515ebf8f9af91b061
firebase=au-bbva-fbbvagc-private
google-site-verification=1nPbGYlHSOzPaOvQOP7DqDPxwdqdDYP3zit_BiSeNtw
miro-verification=9336bd279de9ae74f560f1d96b87f25f219de402
openai-domain-verification=dv-g8Z2GhruvjuPOJ6ecT7j1EQ1

Certificate (current)

Amazon RSA 2048 M01

from 2026-03-03 to 2026-09-17

Expires in 120 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.fbbva.es/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: deny
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: assets.adobedtm.com bbva.d3.sc.omtrdc.net dpm.demdex.net *.googleapis.com fonts.gstatic.com addtocalendar.com youtube.com www.youtube.com www.youtube-nocookie.com cdn.cookielaw.org cdn-od.world-television.com od.world-television.com cdn-streamstudio-ondemand.world-television.com cdn-wowzacoder-node11.world-television.com cdn-wowzacoder-node12.world-television.com cdn-wowzacoder-node13.world-television.com cdn-wowzacoder-node14.world-television.com cdn-wowza.world-television.com cdn-wowza2.world-television.com cdn-wowza4.world-television.com cdn-wowza5.world-television.com cdn-wowza-zur-cn.worldtelevision.cn cdn-wowza2-zur-cn.worldtelevision.cn streamstudio.world-television.com streamstudio-static.world-television.com streamstudio-static-cloudflare cdn-streamstudio-china.worldtelevision.cn cdn-streamstudio.world-television.com gaia.world-television.com stats.world-television.com d3l7jhiu2gy1zw.cloudfront.net d3rheyut2722wp.cloudfron
strict-transport-security: max-age=31536000; includeSubdomains;