popular.com

HTML metadata

Title: Banco Popular - Servicios financieros en Puerto Rico
Description: Popular te ofrece la red más extensa de sucursales y cajeros automáticos en Puerto Rico. Conoce nuestros productos y servicios para individuos y negocios.
Language: es
Canonical: https://www.popular.com/

Open Graph

description: Popular te ofrece la red más extensa de sucursales y cajeros automáticos en Puerto Rico. Conoce nuestros productos y servicios para individuos y negocios.

Technology

Server: Sucuri

Analytics

Google Analytics
Google Tag Manager

Ads

Meta Pixel

Third-party hosts loaded (7)

www.googletagmanager.com×4
c.la4-c4-ph2.salesforceliveagent.com×3
service.force.com×3
bancopopular.my.site.com×1
cdn.evgnet.com×1
connect.facebook.net×1
www.google-analytics.com×1

Social

Contact

Phone

Registration

Registrar

MarkMonitor Inc.

Created

1995-02-22

Expires

2028-02-23 645 days left

Updated

2026-01-22

Name servers

ns-128.awsdns-16.com
ns-1387.awsdns-45.org
ns-1583.awsdns-05.co.uk
ns-623.awsdns-13.net

DNS records live

NS

ns-128.awsdns-16.com
ns-1387.awsdns-45.org
ns-1583.awsdns-05.co.uk
ns-623.awsdns-13.net

MX

0 popular-com.mail.protection.outlook.com

TXT

Show 18 TXT records

_pxdrict1lt3ey2f0828lb8qxmbxrkmn
_xj2u6l89g34j41lir6xecbna1ej1jey
16rq5yvl59cwymhdq9nmqw5hbt8608mn
successfactors-site-verification=OGQ3OGVkYjg1N2JlZDRkMGJiYTNkMjFmYWUwM2NmMTExMDUwMjU4ZmIzZTNkZjBhMGNiM2E4NzcwZmVjNGQxYg==
cisco-ci-domain-verification=6319c5fa406e79e8d85e04faa6c2827771eb3cbe775c84d83fd520717575b603
973dxh7m3fdbndgts9wsqd6048xjnd6s
onetrust-domain-verification=7214625eff0c42ef9255a31d7d88808f
yvzwrtfcfg4ynngvkt8w4825fhtlhhrh
amazonses:o3MB5/YMZZRdmCF/gQcwVSvkpjQErRgLKI3Y0Uqss3E=
irfbo763373n3na4rm1rhebft7
atlassian-domain-verification=yagPPZasWPMqRXCaGaX6pHid/ZoYr4tEFGTjge/YR810/CcXuTs7hNarJLRojhAz
atlassian-domain-verification=jbRpvW/9Ygvf6dCo5bbV8IBiG8Jybau24V8f3kQN211Zl4MFN4U5RBbrU3cxNT9f
LTObGDq6fdcWUI4/OEmf9knAlQGYfsje02mOLRZQdibRODMj2/kcMxDs0NAayDSrJKTnjdsU/QnjZfTOrYi6JA==
docusign=aa9afb5f-d8c3-4eb8-bd81-55c2f1211774
hcp-domain-verification=37e09249d0775a840a5e23bf2830752ea78b458bb95ea36c3ea9ef5e2aa8f258
/C5rXW0cQ7Oj4NabYWagHlHTQWWf3z4iPwyzwKfM7YEOtZy8H94vdK6z9ZDlPsT/XM2gNxjyuSJcQ6Jr+9SQ1w==
docusign=ee4b756f-408f-4f00-81e7-11da18890877
apple-domain-verification=VDILNYykkBRA9epA

Email authentication strong

SPF

v=spf1 include:%{d}.9d.spf-protect.agari.com exists:%{i}._i.%{d}._d.espf.agari.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:banco-popular@rua.agari.com; ruf=mailto:banco-popular@ruf.agari.com,mailto:bancopopular-dmarc@datafeeds.phishlabs.com

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9k2MjEDaJskO7QVW37DSocH6oQOcjSLy7/G6p3tF34Nv61WcAk4X+IZO0yBAkTEvMHbCqTlyU6DtTJ…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH11XfYhwMq89KA5EQm8pO3kZdkXe5NsZD8PeaT3pNRgeHHDMBDJylsO7OWWhojN8Fe0kum6bocjmY…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweyLRjXhA4JF653HNI2skuSIYXwpygu8f3F5fhTbt0hTojy6h2yqvUs9QAJi1Ch6BdTXPhxX1MWbUn1aIl…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJqCugif+hUoagGsGhXupqemOistlh0Ra7Mv/xGfko6WWHPGAxIJEDAIxFCJj1OWoAHpcjBs/fXajr3faa…

selectors probed

Certificate (current)

Starfield Secure Certificate Authority - G2

from 2026-03-18 to 2026-10-02

Expires in 136 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.popular.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), microphone=()
x-content-type-options: nosniff
content-security-policy: default-src * data: 'unsafe-inline' 'unsafe-eval'; connect-src * javascript: data: 'unsafe-inline' 'unsafe-eval'; img-src * data: blob: 'unsafe-inline'
strict-transport-security: max-age=31536000; includeSubdomains