fhb.com

HTML metadata

Title

Personal | First Hawaiian Bank

Description

Discover banking made easy with First Hawaiian Bank, the largest Hawaii bank offering personal, private, and business services in Hawaii, Guam, & Saipan.

Language

en

Canonical

https://www.fhb.com/en/personal

Translations

en
ja

Technology

Server: nginx
CMS: Drupal

Fonts

Google Fonts

Third-party hosts loaded (5)

fonts.googleapis.com×3
cdn.jsdelivr.net×1
cds-sdkcfg.onlineaccess1.com×1
data.adxcel-ec2.com×1
r.turn.com×1

Social

Contact

Phone

Address

Registration

Registrar

GoDaddy.com, LLC

Created

1995-05-22

Expires

2026-05-23 4 days left

Updated

2025-05-23

Name servers

daphne.ns.cloudflare.com
remy.ns.cloudflare.com

DNS records live

NS

daphne.ns.cloudflare.com
remy.ns.cloudflare.com

MX

10 fhb-com.mail.protection.outlook.com

TXT

Show 26 TXT records

cncb3auqmg31jr1favaiqqcdnc
docusign=235a1df3-9446-4759-b334-57de493f8cbb
docusign=89190cc4-73dd-421f-8f39-faee91fe7964
f3b410whc6wth7v5k8cgwwzgbzqh1blr
facebook-domain-verification=kd6kh3otbxkrxwiwmbpnviq437ri6n
google-site-verification=npEnFG3GRh6kwszSD21bBziFYgl43BAS5lW6h3FmbWc
google-site-verification=oWJQMPceJMYYydgUS6q8KkmJAcmoIjnyBVpZj7wIuWY
ibmid=41b34861-30e0-41ae-818a-d1f1c5d956bf
ma0n279jevpvn2ijc0ts038l4v
qqtqs6ajdtsmn8cit2deduod8d
rps2mwf994xs8gx7kpmmyy3j67b8lfcs
v1m2tlk9qolkncj1d5ehrm2c52
vsipblfh4a0k63i0dlotedh1vl
wt6glw78948z3nyl5htfrhymslt6ql7y
zZk5zJQ8v4DWbpEjmnOxEJiiSUJsjYsEPO+ud+vsH1avIkFNAVj7LWyqIqtrcgFycFvkB8Pyhtl20oVYUGgTIw==
03xhqyffwnxz1cxyk38np243sg295g9n
3a28rjbbrnt7hbj44klo4mtosn
MS=ms35742314
_rq7d3xm9eg9por8nkig2v3ooxyun6sv
_vupwj34wx2lo6mte9qy58lu6s3777f1
aLmLdu45Kf97ONtiyOE7HtcD9aMfwrof1SJE342yY5Yzeu2gwswFelLP8GzTYFx69w8g5lsJ+GepIHFiyR0XLQ==
amazonses:h0G5I3j3RM0kcdPWdeiAyAD/VSaM28V8kx1WPH7f/aw=
atlassian-domain-verification=vcNP0juEZCXXuoRviSQY5lki2bQEi/N0JgMwzpqQxKOOEE65KpmV7FsnynjlZuL8
bb7do4s32fv7sort1fdsn6dqa0
cisco-ci-domain-verification=33dd459c5268a5dea684224ef5b307380493e7bbbaa042ca28bb96a942c573c1
cisco-ci-domain-verification=45623c12b40ee3a54c4d5de79fca3fe634d895ab5f46fab6c56dc5035089bfe1

Email authentication partial

SPF

v=spf1 ip4:66.97.130.4 ip4:35.80.141.6 ip4:44.229.121.55 ip4:148.59.100.16/28 ip4:205.237.79.25 ip4:209.116.84.134 ip4:209.92.10.197 ip4:208.235.248.20 ip4:12.16.165.35 ip4:205.237.79.55 ip4:205.237.79.56 ip4:205.237.79.57 ip4:63.141.39.57 ip4:205.237.79.59 ip4:63.141.39.59  ip4:147.154.97.253 ip4:54.200.217.100 mx include:spf.cashedge.com include:spf.internet-estatements.com include:spf.protection.outlook.com include:spf.mandrillapp.com include:spf-00140801.pphosted.com -all

strict (-all)

DMARC

v=DMARC1; p=none; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:dmarc_agg@vali.email; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Pa8jkDIeLuvupk0GSM8eb54ft6/KSvjFpd4d2U2hfF5/JYPP+M1RzEi0m33dpZ1M3I1HKoKH6O3XK…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1coTLO2+rF4GK2yU3uqbZ5j9by9Nz+w7ywxubmn9InXK87dpbDvokdL8ur70+m8UTSiYV1D52vbGNBHny1…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7nIsQvxlauEKZGU4IFApU+puOtd1mf9FZQDwVWpuN8qiUBMXFvOghb+eBLuRrBM3Zlg2ZofvEwiCoZZ5VtPagdK…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-10-02 to 2026-10-21

Expires in 155 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.fhb.com/en/personal

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.redditstatic.com www.googleadservices.com fhb-engineering.atlassian.net www.youtube.com cdn.jsdelivr.net builder.lift.acquia.com cdn.lift.acquia.com www.googletagmanager.com www.google-analytics.com production-cdn.lift.acquia.com siteimproveanalytics.com js-agent.newrelic.com bam.nr-data.net www.onlinebanktours.com *.vimeo.com ajax.googleapis.com unpkg.com connect.facebook.net connect.facebook.net/en_US/fbevents.js cdn.segment.com cdn.amplitude.com *.resonate.com *.google-analytics.com *.analytics.google.com www.facebook.com/* bat.bing.com sc-static.net snap.licdn.com *.tpc.googlesyndication.com s.pinimg.com tr.snapchat.com cds-sdkcfg.onlineaccess1.com cdn.timetrade.com api.glia.com *.salemove.com analytics.tiktok.com googleads.g.doubleclick.net ct.pinterest.com *.salemove.com *.glia.com *.visualwebsiteoptimizer.com app.vwo.com *.dotomi.com; object-src 'self'; style-src 'self' 'unsafe-inline' f
strict-transport-security: max-age=1000; includeSubDomains