floapay.es

.es crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 2931 ms crawled 2026-05-18

US · 45.60.115.57 · AS19551 Incapsula Inc

Reputation 100/100

Classifying

HTML metadata

Title

FLOA Pay, la solución de pago en varios plazos

Description

El pago en varios plazos ¿Y si pagar fuera más fácil con el líder en Francia? Probar FLOA FLOA es una filial de BNP Paribas al 100 %, líder de la banca de la Un...

Language

Generator

Joomla! - Open Source Content Management

Canonical

https://www.floapay.es/

Translations

de-de
en-gb
es-es
fr-be
fr-fr
it-it
nl-be
nl-nl
pt-pt

Open Graph

url: https://www.floapay.es/
title: FLOA Pay, la solución de pago en varios plazos
locale: es_ES
site name: Floapay
description: El pago en varios plazos ¿Y si pagar fuera más fácil con el líder en Francia? Probar FLOA FLOA es una filial de BNP Paribas al 100 %, líder de la banca de la Un...

Technology

CDN: Azure Front Door
CMS: Joomla

Third-party hosts loaded (7)

www.floapay.be×2
www.floapay.com×1
www.floapay.de×1
www.floapay.fr×1
www.floapay.it×1
www.floapay.nl×1
www.floapay.pt×1

Social

DNS records live

NS

ns1-07.azure-dns.com
ns2-07.azure-dns.net
ns3-07.azure-dns.org
ns4-07.azure-dns.info

TXT

globalsign-domain-verification=CA03C967ACEA60E31047D1B75E2DA490
_05g7r2nlqpopqxy5xw5vc664pywv3k7
z7202wd1mhqqhb45sc2wrcbnctn4f4v3

Email authentication no MX

SPF: v=spf1 -all
strict (-all)
DMARC: v=DMARC1; p=quarantine
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

GlobalSign Atlas R46 DV TLS CA 2026 Q2

from 2026-05-13 to 2026-08-11

Expires in 83 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.floapay.es/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: floa.com cdn.jsdelivr.net statics.pushaddict.com www.google.tn www.google.com.do eu-cdn.acsbapp.com matomo.floa.com gstatic.com floapay.es www.google.ro www.google.ad *.floapay.es www.google.es cdn.trustcommander.net www.google.com.pe www.google.co.uz widgets.greenbureau.com www.google.com.co www.google.co.uk eu.acsbapp.com www.floapay.es *.licdn.com www.google.ch www.google.nl gjigle.com accesswidget-log-receiver.acsbapp.com www.google.co.ma uploads.greenbureau.com www.floapay.fr www.google.cl *.facebook.net *.gstatic.com www.youtube.com www.google.de notifpush.com livechat.greenbureau.com *.floa.com www.googletagmanager.com wss://livechat.greenbureau.com www.google.se www.google.com.ar www.google.pt www.google.al www.google.it www.google.co.kr eu-backend.acsbapp.com delta.floapay.es preprod.floapay.fr secure-trig.notifadz.com translate.google.com secure-api.notifadz.com secured-pixel.com *.contentsquare.net
strict-transport-security: max-age=31536000; includeSubDomains