santander.de
HTML metadata
Technology
- Cookie consent
-
- Usercentrics
Third-party hosts loaded (4)
- delivery-p133069-e1367961.adobeaemcloud.com×12
- app.usercentrics.eu×3
- api.usercentrics.eu×1
- privacy-proxy.usercentrics.eu×1
Registration
- Updated
- 2018-02-13
- Name servers
-
- eur2.akam.net.
- eur4.akam.net.
- ns1-198.akam.net.
- ns1-216.akam.net.
- usc4.akam.net.
- use1.akam.net.
- use2.akam.net.
- use4.akam.net.
DNS records live
- NS
-
- dns03.akamai.net
- eur2.akam.net
- eur4.akam.net
- ns1-198.akam.net
- ns1-216.akam.net
- usc4.akam.net
- use1.akam.net
- use2.akam.net
- use4.akam.net
- MX
-
- 10 mx1.hc5532-55.iphmx.com
- 10 mx2.hc5532-55.iphmx.com
- 90 mx1.santandergroup.c3s2.iphmx.com
- 90 mx2.santandergroup.c3s2.iphmx.com
- TXT
-
Show 19 TXT records
1734589b-a2d4-4c19-8016-9164d8897570Dynatrace-site-verification=a1fddee5-9d67-49d6-b640-393b56959f36__1ssmfjrtatvtntmdvhrdnma2h7MS=ms86909314gfJn69iqSz/DK84rTjHaYiSfUOQAvmrcYo3kOY1fuqo/9FQ5m40dHKNwfPRFyy1+PBTCPB58pfPv5mFa//8TpA==globalsign-domain-verification=751514ffffd1edc5cd2675583f47162adocusign=2338061e-b015-4a06-8245-c0ff76ea215catlassian-domain-verification=S2A64FB8jpaA1i95v0GaH/ZdvQXsDymjYJfzqf9O0ArV0LJ/aoCYA7WeB2knwiKPatlassian-domain-verification=TFnmCsLwUj4y/ta3Let8OTUy/LAA0o444LEq1oIvcfzM1/BSJ5jdeeKEkTIkTy/xglobalsign-domain-verification=F1D7D3FE4B1F069EFDF465680BBACB2C_knf5x03z13qqijeflmrc14uzaais08pdocusign=eef636a7-6c48-4844-968f-896ddaea7f4badobe-idp-site-verification=50935fffec5a7d86b33deb30987909479eb504502ef8be93f8ac75743b3e1f17_0r061n9z91vypzwsttty9ki8ov3bcqbapple-domain-verification=d8RGFZIuxyPDh40Vapple-domain-verification=fBiblwCnZHzHmmrLDynatrace-site-verification=8b7078c0-df91-4a4a-93c2-d830549ca2a5__19cfrh9s4a52kdoh7b92ft78tawiz-domain-verification=222a9ac8c880a6170431bee5082c264772f1e941c63e6dedd51f596377cec7fc_c5zcwm05afcmlzg2knojijlszd0g2y2globalsign-domain-verification=473DC64B87DE827EF12A940718F34191
Email authentication strong
- SPF
-
v=spf1 exists:%{i}.spf.as.gruposantander.com exists:%{i}.spf.us.gruposantander.com ip4:35.169.47.31 a:relay.santanderbank.de include:spf.fino.digital -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:santander@rua.dmp.cisco.com,mailto:postmanagerdmarc@gsnetcloud.com; ruf=mailto:santander@ruf.dmp.cisco.com,mailto:postmanagerdmarc@gsnetcloud.compolicy: reject (enforced) - DKIM
-
- dkim:
v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxsTt4qmN53596KOMlmhTc0hRmaBSzPf4d8+W8ZWbdauSEcSMYoVTnFJw0S0POqoShvEufiqoVYvMAbHsHXEo… - smtpapi:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…
selectors probed - dkim:
Certificate (current)
Sectigo Public Server Authentication CA EV R36
Expires in 241 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' *.santander.de;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.adform.net *.adsrvr.org *.aklamio.com *.bing.com *.doubleclick.net *.dwin1.com *.dotomi.com *.facebook.com *.facebook.net *.google.com *.google.de *.googleanalytics.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.hotjar.com *.hotjar.io *.usercentrics.eu *.youtube.com api.financingservices.de santander-de.financingservices.de data:;style-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google.com *.google.de santander-de.financingservices.de;img-src 'self' *.adsrvr.org *.aklamio.com *.awin1.com *.bing.com *.doubleclick.net *.facebook.com *.facebook.net *.financeads.net *.google.com *.google.de *.googletagmanager.com *.google-analytics.com *.hotjar.com *.hotjar.io *.usercentrics.eu * santander-de.financingservices.de service.santander.de data:;font-src 'self' data: *.gstatic.com *.hotjar.com *.hotjar.io cloud.email.santander.de;connect-src *.adform.net *.bing.com *.bi- strict-transport-security
max-age=31536000;includeSubDomains
Links to (4)
- aklamio.de×4
- apple.com×4
- autoboerse.de×4
- google.com×4
Linked from (17)
- santanderconsumer.de×7
- santandercib.com×4
- autoboerse.de×4
- owm.de×4
- caraworld.de×4
- santander.com×4
- gruposantander.com×3
- santanderannualreport.com×3
- akademie-fuer-finanzberatung.de×2
- santander-run-fun-mg.de×2
- collective-incubator.de×2
- bvfk.de×2
- mce-bank.eu×2
- automeile-husarenlager.de×1
- baumpaten-deutschland.de×1
- sportwagen-genssler.com×1
- carcredit.de×1