millenniumbcp.pt

HTML metadata

Title

Millennium bcp | Melhor Banco digital de Portugal

Description

Descubra os produtos e serviços do Millennium para simplificar o seu dia a dia: contas, cartões, créditos, investimentos, poupanças e muito mais.

Language

pt

Canonical

https://www.millenniumbcp.pt/

Translations

en
pt

Open Graph

url: https://www.millenniumbcp.pt/
title: Millennium bcp | Melhor Banco digital de Portugal
description: Descubra os produtos e serviços do Millennium para simplificar o seu dia a dia: contas, cartões, créditos, investimentos, poupanças e muito mais.

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Phone

+351210052424

DNS records live

NS

ns.servibanca.pt
ns1.servibanca.pt
ns2.webside.pt

MX

5 millenniumbcp-pt.mail.protection.outlook.com

TXT

Show 6 TXT records

92rodXh9aBVrCBnZeF02NzcqbFTRYTA9FL2fYboLlSWY0zMpWFvuRT0rKT5nr6GDLCNJch/+tUSQFgz+mqUNHA==
knowbe4-site-verification=45a45651217253b792d6a31e80084ad2
mtc=NDlkNGYzM2MtZjNkMC00YzFjLWExYTctMmE4ZGQxZjdjM2Y2
_qlwall3x5kavv8fej4rhwsj4uz21g11
_kfn74xkf85gpx31isfg1h2okdylq0b4
mtc=YmVlMWIyNmQtOTNmNS00ZDk4LTlhMjQtZWI0OWRhNDE5MzVm

Verified for

Google
Meta
Microsoft
Microsoft 365
OneTrust

Email authentication strong

SPF

v=spf1 redirect=_spf01.bcp.pt

missing all

DMARC

v=DMARC1; p=reject; adkim=s; aspf=s; rua=mailto:millennium-bcp@rua.agari.com,mailto:rua.bcp@millenniumbcp.pt; ruf=mailto:millennium-bcp@ruf.agari.com,mailto:ruf.bcp@millenniumbcp.pt; fo=1; ri=3600; pct=100

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmQs84p3HNn0e4YjJ0JuRkIMykDTJeEpAPMv1FKIrQ/XNKCVsATqP4w+SA/TV0OICHrObgrqa7nxxK…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKmhwlcEQsBPK13VATeGSTiAstpwZGymUAVwedOCHkrx8QVxVRGUYzHw8yPIxHO+IpF1jRzKfERMn+…

selectors probed

Certificate (current)

GeoTrust EV RSA CA G2

from 2026-04-23 to 2026-11-08

Expires in 160 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.millenniumbcp.pt

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.google.com https://*.googletagmanager.com https://tagmanager.google.com https://*.google-analytics.com https://www.googleadservices.com https://*.millenniumbcp.pt https://cdn.cookielaw.org https://maps.gstatic.com https://maps.googleapis.com; style-src 'report-sample' 'self' 'unsafe-inline' https://*.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://*.millenniumbcp.pt ; connect-src 'self' https://www.google.com https://*.onetrust.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://www.google.com https://googleads.g.doubleclick.net https://*.millenniumbcp.pt https://cdn.cookielaw.org https://maps.gstatic.com https://maps.googleapis.com https://ad.doubleclick.net https://www.googleadservices.com https://www.google.pt; font-src 'self' https://fonts.g
strict-transport-security: max-age=31536000; includeSubDomains; preload