raiffeisen.it

.it crawl

First seen 2026-05-12 · Last seen 2026-05-19 · ok HTTP/1.1 200 3656 ms crawled 2026-05-18

DE · 95.101.27.96 · AS20940 Akamai International B.V.

Reputation 100/100

Classifying

HTML metadata

Title

Raiffeisen RGO

Language

de-DE

Generator

TYPO3 CMS

Canonical

https://www.raiffeisen.it/de/rgo.html

Translations

de-de
it-it

Technology

Server: KV

Third-party hosts loaded (1)

a9.com×1

Social

Contact

Phone

800031031

DNS records live

NS

a1-40.akam.net
a22-67.akam.net
a28-67.akam.net
a3-66.akam.net
a6-67.akam.net
a9-64.akam.net

MX

0 raiffeisen-it.mail.protection.outlook.com

TXT

Show 9 TXT records

ZOOM_verify_5R6t_vt9Sp6PDOJeFbNrOA
kj+JgKGJrJfJcS4QxRpf7OhE2OLx4itfR5+0fkns9uw=
_35uzo1ffsrgw6nlt7cnnmu24io5hdk5
j5p5479qz9fczwplcg02291739m5h5j7
d365mktkey=c5loAJLBPT7i41t1KuNBnjSiZd0nwmJuezFhSdcp0QIx
kj+JgKGJrJfJcS4QxRpf7G5l2io7HKekCAr4luHQ5rQ=
ZA=fDs4ePcGVuRJq/LkBUfdDw==
1v0jq576p9w4zfv9ydt13npjsr12py6v
kj+JgKGJrJfJcS4QxRpf7EAEAJwttRg3SfXpr4zHUNY=

Email authentication strong

SPF

v=spf1 ip4:195.254.224.198 include:spf.protection.outlook.com include:eur.pb-dynmktge.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=reject; pct=100; rua=mailto:qzey94r6h9@rua.powerdmarc.com; adkim=r; aspf=r

policy: reject (enforced) · sp=reject

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptsjsgrSfyxCElLxEyFZoFiEF2V1asRG0XhdTj/xZV2yTq5Lgp0rZY8SegRRKs5l2RIfciHkUQO0NT…

selectors probed

Certificate (current)

DigiCert Global G3 TLS ECC SHA384 2020 CA1

from 2025-09-28 to 2026-09-30

Expires in 133 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.raiffeisen.it/de/rgo.html

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.tawk.to https://www.google-analytics.com 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.net players.yumpu.com googleads.g.doubleclick.net *.youtube.c *.youtube.com *.googleadservices.com e.issuu.com *.tawk.to https://code.jquery.com/jquery-3.6.0.min.js https://cdn.jsdelivr.net https://connect.facebook.net https://maps.googleapis.com https://www.gstatic.com https://www.google-analytics.com www.googletagmanager.com https://ssl.google-analytics.com https://jira.nyx.raiffeisen.net/ https://hcaptcha.com https://*.hcaptcha.com https://t--1.0.0--i6nnxym9p9wb--f.tirolerjobs.at https://cdn1.onboard.org/ https://take.quiz-maker.com https://player.podigee-cdn.net https://cdn.podigee.com https://cdn.livechatinc.com/ https://widget.eu.surveymonkey.com/ https://ajax.googleapis.com/ https://cxppusa1formui01cdnsa01-endpoint.azureedge.net; style-src 'unsafe-inline' *.tawk.to *.mapbox.com fonts.googleapis.com 'self' https://hcaptcha.com https://*.hcaptc
strict-transport-security: max-age=31536000