gcash.com

HTML metadata

Title: GCash - #1 Finance Super App
Description: GCash - Your all-in-one super app for shopping, investing, buying insurance, and more. Pay bills, buy load, and send money in a few taps.
Generator: Webflow

Open Graph

url: https://www.new.gcash.com
title: GCash - #1 Finance Super App
site name: GCash
description: GCash - Your all-in-one super app for shopping, investing, buying insurance, and more. Pay bills, buy load, and send money in a few taps.

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Fonts

Adobe Fonts
Google Fonts

Social widgets

YouTube Embed

Third-party hosts loaded (13)

cdn.prod.website-files.com×99
cdnjs.cloudflare.com×9
cdn.jsdelivr.net×3
code.jquery.com×3
www.googletagmanager.com×3
ajax.googleapis.com×1
d3e54v103j8qbb.cloudfront.net×1
fonts.googleapis.com×1
fonts.gstatic.com×1
use.typekit.net×1
www.facebook.com×1
www.google.com×1
www.youtube.com×1

Social

Contact

Phone

(02)7213-9999

Registration

Registrar

GoDaddy.com, LLC

Created

1998-05-13

Expires

2027-05-12 357 days left

Updated

2026-05-17

Name servers

ns-1381.awsdns-44.org
ns-1930.awsdns-49.co.uk
ns-360.awsdns-45.com
ns-742.awsdns-28.net

DNS records live

NS

ns-1381.awsdns-44.org
ns-1930.awsdns-49.co.uk
ns-360.awsdns-45.com
ns-742.awsdns-28.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 19 TXT records

55b33adf-1de3-4636-aa08-3597302578cc
k5tw1vfwbqpz43whzw3rr0kp1yn88w2d
1r0m1qnj9yldwlp30nxp6wqpc28nhnt6
docusign=a9859111-c669-4c67-a109-e78be9e3ce22
knowbe4-site-verification=eecee2362dbc1a206c756fa73e12d4d5
google-site-verification=3_a3JI2SWihOXLf3estyH9SnFZLmzqCFNYeYVmtXyLw
_q8cytwnhuq8lu5yh6k26yhnz85xwgy3
b24lv0xsnwfg3swb9vkcktrscdv4mlrz
wcmnjgjsjj5tjs5jt5t00b1cv6ch9qy6
d71c26t2hn9s9drrpspq4jf88cncdjsx
apple-domain-verification=uvXl35CrIIYwkqSw
267597004gnh651kdwqbp3p93xb556bw
ZOOM_verify_cpTW8LjVTWa2bUBdW_jnZw
G0L4O12691
_qljzvtojop5xbkgu9k3kdwtfzl17blz
google-site-verification=Q0_uxinuSMRgFZW-yprTa7sThWW4bodWIohd0Ks-fv0
_35vvx2e508j8zr2nfczyy94djptyj1w
canva-site-verification=ztqTJFt0JYU39nug9Vq6PA
fxk2hyrws0851ww410fx3nq0y72smljf

Email authentication strong

SPF

v=spf1 ip4:52.76.114.207/32 ip4:13.214.93.153/32 ip4:52.76.251.84/32 ip4:18.139.203.6/32 ip4:52.76.46.123/32 ip4:3.0.163.187/32 ip4:13.213.216.110/32 ip4:18.136.255.157/32 ip4:3.0.158.188/32 ip4:13.228.165.52/32 ip4:18.142.199.102/32 ip4:13.229.42.13/32 ip4:203.5.77.72/29 include:_spf.google.com include:amazonses.com include:mail.zendesk.com include:spfa.cpmails.com include:spf1.sgdm.aliyun.com include:spf2.sgdm.aliyun.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=reject; fo=1; rua=mailto:dmarc_agg@gcash.com;ruf=mailto:dmarc_forensic@gcash.com; ri=3600

policy: reject (enforced) · sp=reject

DKIM

Show 4 DKIM selectors

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe94XBXMpdb5JhWbcsBtKFOBDDofs/pmnhsnjm+/Z9waacJW+LstuypwGl9uq8+Wx/TFiQx2haxGMP…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9bElwxdG25BmyptyM1jG8OV0ejWYwMsQ63cU8jPvwTLsHx1XJwCiGl3/S8Eekj7z90Spf9QzC/edMUmxs…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphZQ6kW/55xxpzU1Psmd5qcza8r1ijxoIbtanps8FACMp1XeFb/2iMxBgVtyLNqRH/amEMUXrAiXQmoRR1…

selectors probed

Certificate (current)

WE1

from 2026-04-03 to 2026-07-02

Expires in 43 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://gcash.com/

present

strict-transport-security
content-security-policy
x-frame-options

findings

missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
strict-transport-security: max-age=31536000; includeSubDomains