fogafin.gov.co

HTML metadata

Title

Fogafín | Entidad que protege los ahorros de los colombianos | Fogafin

Language

es

Generator

Drupal 11 (https://www.drupal.org)

Canonical

https://www.fogafin.gov.co/

Translations

en
es

Technology

CDN: Cloudflare
CMS: Drupal

Fonts

Google Fonts

Third-party hosts loaded (8)

cse.google.com×2
unpkg.com×2
app-script.monsido.com×1
cariai.com×1
cdn.jsdelivr.net×1
cdnjs.cloudflare.com×1
fonts.googleapis.com×1
static.addtoany.com×1

Social

Contact

Phone

DNS records live

NS

ns1-06.azure-dns.com
ns2-06.azure-dns.net
ns3-06.azure-dns.org
ns4-06.azure-dns.info

MX

0 fogafin-gov-co.mail.protection.outlook.com

TXT

Show 6 TXT records

4UES8QQ1JMD81PJFPUH1H9EFAR0J98IZRN2PXMNB
qviqrcuormp0gbcsp76ukm2o49
ntt9igqdnc0ru247fj4vv86is6
HYCmVYSoAFwiasBTzI+dg6sD5LSNUTAiCP7Efb7Jos1X92xmhlFXK5tQ0J+zdg5PQfHYUHaOVhMThf9KngHLDg==
vft790lbhorb7dce67c81eoqr0
i9uiaovm5qnp90br2re3p00eor

Verified for

GlobalSign
Google

Email authentication strong

SPF

v=spf1 ip4:40.65.211.253 ip4:192.168.40.81 ip4:179.1.89.94 ip4:179.1.89.82 ip4:190.60.227.162 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine ; pct=100; rua=mailto:seguridaddigital@fogafin.gov.co; ruf=mailto:seguridaddigital@fogafin.gov.co

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQJ/3PjxJ+r2qmfpiKolJOBlhJjrpmapPQCeuFezWpSqRehICFNI/dF7ExiJWmrUGCheR+yyh4Opmh4UtxBK…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu9YRejXaWS5kqj702SvpXZ08nPjfflQTu5cN4qeT0jLSufGu8D0T0sPyUPZhs5qzq1ALQz8E9wA5Y…

selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2025-07-17 to 2026-08-17

Expires in 88 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.fogafin.gov.co/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: bluetooth=(), camera=(), geolocation=(), microphone=(), usb=(), web-share=(self "https://static.addtoany.com")
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cariai.com https://app-script.monsido.com https://unpkg.com https://static.addtoany.com https://cdn.gtranslate.net https://cdn.jsdelivr.net https://www.youtube.com https://vimeo.com https://player.vimeo.com https://cdnjs.cloudflare.com https://cdn.gtranslate.net https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://www.google.com https://cse.google.com https://heatmaps.monsido.com https://cdn.monsido.com https://challenges.cloudflare.com https://ep2.adtrafficquality.google https://ep2.adtrafficquality.google/sodar https://clients1.google.com; object-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdn.userway.org https://static.canva.com https://cdnjs.clo
strict-transport-security: max-age=31536000; includeSubDomains