proteccion.com

HTML metadata

Title: Protección: Pensiones, Cesantías, Ahorro e Inversión
Description: Protección - Pensiones, Cesantías, Ahorro e Inversión
Language: es

Technology

CDN: Amazon CloudFront
CMS: Next.js

Analytics

Google Analytics
Google Tag Manager

Third-party hosts loaded (4)

images.ctfassets.net×1
www.google-analytics.com×1
www.googletagmanager.com×1
www.youtube.com×1

Registration

Registrar

Moniker Online Services LLC

Created

1998-10-04

Expires

2030-10-03 1596 days left

Updated

2025-11-25

Name servers

birlocha.une.net.co
nsbog01.une.net.co

DNS records live

NS

birlocha.une.net.co
lauta.une.net.co
nsbog01.une.net.co

MX

0 proteccion-com-co.mail.protection.outlook.com

TXT

v07rbd1o37l0r22st28gjh0r1o
50c90gtbzj5xb8z80z76k54fv209dnlc
g65ui6s5k3t3rgqanhb525nq4v

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 a include:spf.protection.outlook.com ip4:200.16.79.26 ip4:13.82.139.190 ip4:200.13.244.243 include:iestrategias.ip-zone.com include:spf.masterbase.com include:email-od.com include:_spf.salesforce.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K+5yb1OphV3QK3KCOEMcv3WkwK+YZZG0yOy2gEQ/cua7zI4oQs5QJq5HSa7oyC6amqhI+Q38YXu5S…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCZecUAVRFkw/4shuITrCj0lbR+6Dd/QUuC/AYYrO1q/pLWH81ni4kbwgdjMrdObEzupWQXQphJqxDNc2Rbcw…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-05-27 to 2026-06-09

Expires in 19 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.proteccion.com/contenidos/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://downloads.ctfassets.net/ *.gstatic.com *.proteccion.com assets.ctfassets.net d10o2ofpymhfmh.cloudfront.net *.wufoo.com contenidos-proteccion.s3.amazonaws.com *.proteccion.com.co cdnjs.cloudflare.com *.api.ipify.org videos.ctfassets.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.ads-twitter.com/uwt.js parly-webchat-proteccion-pronto.1jp7e8ua8ne3.us-east.codeengine.appdomain.cloud script.crazyegg.com https://js.hs-scripts.com https://js.hscollectedforms.net https://js.hs-banner.com https://js.hs-analytics.net *.clarity.ms/ *.googleoptimize.com partner.googleadservices.com *.ipdialbox.com *.wolkvox.com kit.fontawesome.com widget.spreaker.com connect.facebook.net *.youtube.com *.proteccion.com *.gstatic.com www.google-analytics.com *.googletagmanager.com *.google.com *.googleapis.com cdnjs.cloudflare.com pratech-chatbot-cdn-proteccion.mybluemix.net static.ads-twitter.com cdn.perfdrive.com client.rum.us-east-1.amazonaws.com; img-src
strict-transport-security: max-age:31536000; includeSubdomain; preload