fnbba.com

.com crawl

First seen 2026-04-19 · Last seen 2026-05-13 · ok HTTP/1.1 200 12278 ms crawled 2026-05-13

US · 67.214.99.2 · AS22747 TulsaConnect

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: First National Bank and Trust Company of Broken Arrow
Description: We're a bank that recognizes the value of an experienced staff, competitive rates and leading-edge conveniences, but most of all, the value of our customers.
Language: en
Canonical: https://www.fnbba.com/

Open Graph

url: https://www.fnbba.com/
title: First National Bank and Trust Company of Broken Arrow
locale: en_US
description: We're a bank that recognizes the value of an experienced staff, competitive rates and leading-edge conveniences, but most of all, the value of our customers.

Technology

Server: Microsoft-IIS
CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (7)

cdnjs.cloudflare.com×2
unpkg.com×2
web11.secureinternetbank.com×2
www.google.com×2
cdn.jsdelivr.net×1
fonts.googleapis.com×1
www.googletagmanager.com×1

Social

Contact

Phone

918-251-5371

Registration

Registrar

GoDaddy.com, LLC

Created

1996-07-30

Expires

2026-07-29 71 days left

Updated

2025-07-29

Name servers

ns1.boitdns.com
ns2.boitdns.com
ns3.boitdns.com

DNS records live

NS

ns1.boitdns.com
ns2.boitdns.com
ns3.boitdns.com

MX

10 all.secureyourmail.com

Email authentication strong

SPF

v=spf1 mx ip4:208.95.203.112/29 ip4:174.47.181.211 ip4:12.108.255.69 ip4:12.108.255.76 ip4:208.235.248.20 ip4:12.145.177.0/24 ip4:208.66.22.33 ip4:76.76.135.138 ip4:66.20.244.76/32 ip4:207.195.176.40/32 include:fnbaa-com.spf.smtp25.com include:spf.cashedge.com -all

strict (-all)

DMARC

v=DMARC1;p=reject;rua=mailto:dmarc@bankonitusa.com;ri=604800;fo=s

policy: reject (enforced)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XhKze7JrgB9WlVlSvbQtnCssGAetPKxWwEzhCbeku9ot+pKSzjz97Hz/9A4LBnkHc9vjEJBKysXQOXpDD…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL6yODrYmwHORE+S/Q+ntuK8WOC+CdDqeIR8mrcKCwgCTS2AlLOcPK2MrT2aGENU0yRKsUPLi5Djde6rJL…

selectors probed

Certificate (current)

R12

from 2026-05-09 to 2026-08-07

Expires in 80 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.fnbba.com/

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy