ocbc.com

HTML metadata

Title: OCBC - Personal Banking, Business Banking, Wealth Management
Description: Discover a world of financial services with OCBC, the best trusted and established Singapore bank. Explore our range of banking solutions today.
Canonical: https://www.ocbc.com/group/gateway.page

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (2)

assets.adobedtm.com×1
www.googletagmanager.com×1

Social

Contact

Phone

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2000-07-20

Expires

2026-07-20 59 days left

Updated

2026-04-15

Name servers

a1-177.akam.net
a10-66.akam.net
a11-67.akam.net
a16-64.akam.net
a24-65.akam.net
a5-66.akam.net
secdns.starhub.net.sg
secdns2.starhub.net.sg

DNS records live

NS

a1-177.akam.net
a10-66.akam.net
a11-67.akam.net
a16-64.akam.net
a24-65.akam.net
a5-66.akam.net
secdns.starhub.net.sg
secdns2.starhub.net.sg

MX

10 ocbcimail1.ocbc.com
20 ocbcimaila.ocbc.com
30 ocbcimail.ocbc.com
40 ocbcimail1a.ocbc.com

TXT

Show 9 TXT records

4d7nyl1sb5tgpjf3j953mpg30wmn8g7
paloaltonetworks-site-verification=dd0c9f8900fb295e6c14b054b2c18aae5f99f4c83d194eba43f3a74636f1ad45
r9ndt77kbnsvlmm1cm4hw0fy7wxprxk4
_u7sph7x5ui99qjg8cuiqe8gs1sxquci
MS=8445FAC7169DB6DBD4223087ABC6F551778324EC
_7a22qhxt5eh5ztyd31tla35iiv0yaiu
zcwb50qnp1js762fygft6xj0qscclh5m
5eYLwc6EyF7s3YSa2tHAgSGGez5yALQCRcrwetMQa5poV4K5FYj9kB5mC5AeBvpSOmUaWCvliMGW6pqM4hwCeQ==
alidnscheck=c656d03ed4c24642b5ef58ee333751ca

Verified for

Adobe
Anthropic
Apple
Cisco
DocuSign
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:_spf6.ocbc.com include:_spf7.ocbc.com include:_spf-ogs.ocbc.com include:mail.zendesk.com include:spf_c.oraclecloud.com include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;rua=mailto:4dbc397a7755587@rep.dmarcanalyzer.com,mailto:DMARC.it@ocbc.com;ruf=mailto:4dbc397a7755587@for.dmarcanalyzer.com,mailto:DMARC.it@ocbc.com;fo=1;

policy: quarantine

DKIM

dkim: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkyNMr+nJ31H8gkEy6gyTOHUZI73jsPKP/pQWOwmVNC02b0MpEY8yEiBydevfMaCdewnZLWnqaQx6x6E…

selectors probed

Certificate (current)

DigiCert EV RSA CA G2

from 2026-01-20 to 2027-02-21

Expires in 275 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.ocbc.com/group/gateway

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' data: blob: *.qualtrics.com *.redditstatic.com *.quora.com *.quantcount.com *.quantserve.com *.ocbc.com *.ocbc.local; img-src 'self' data: blob: *;style-src 'self' 'unsafe-inline' 'unsafe-eval' *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.redditstatic.com *.quora.com *.quantcount.com *.quantserve.com *.ocbc.local *.ocbc.com *.ocbc.com.my *.sc.omtrdc.net *.adobedtm.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.doubleclick.net *.google.com *.youtube.com *.tiqcdn.com *.facebook.net *.facebook.com *.pages07.net *.greateasterngeneral.com *.ibmmarketingcloud.com dpm.demdex.net *.everestjs.net *.mookie1.com https://anchor.fm *.sqreemtech.com *.adsrvr.org *.qualtrics.com *.ytimg.com *.licdn.com *.outbrain.com *.oraclecloud.com;object-src 'self' *.ocbc.com *.ocbc.com.my;font-src 'self' *;frame-src 'self' *.ocbc.com *.ocbc.local https://5376815.fls.doubleclick.net https://9036546.fls.doubleclick.net *.youtube.com *.tiqcdn.com https://ocbc
strict-transport-security: max-age=31536000;includeSubDomains;preload

Links to (8)

Linked from (1)

thedigitalbanker.com×1