unicajabanco.es

HTML metadata

Title

Unicaja | Particulares

Description

Descubre la Banca Online de Unicaja para particulares. Disfruta de todos los beneficios y facilidades que te ofrece.

Language

es

Canonical

https://www.unicajabanco.es/es/particulares

Translations

ca
en
es

Open Graph

url: https://www.unicajabanco.es/es/particulares
title: Particulares
locale: es_ES
site name: UNICAJA

Technology

CDN: Akamai

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (4)

cdnjs.cloudflare.com×2
cdn.cookielaw.org×1
rum.hlx.page×1
www.googletagmanager.com×1

Social

Contact

Phone

DNS records live

NS

a1-53.akam.net
a10-64.akam.net
a13-66.akam.net
a18-65.akam.net
a2-65.akam.net
a9-64.akam.net

TXT

Show 15 TXT records

_ngdfiqrlagerxarf10lgrg6qqc0ezph
jcx0tqlx45g6r1zqhyyyzrjgldf5r14q
5538c557-ec7f-4750-9db6-c26fb020ba27
1709541085723
1678978736512
m3r81d17rvty2m5m7hgwqngwpcm7gn1n
google-site-verification=gVZfYr8rOf7Lryf8PMtA79YInGK8Gwy_DfyjqIAaoSI
google-site-verification=g17EexrZYOOgmr-qzrg1UOUxruRLWM851j-lcg1Ig2U
rpb0k15msh4qh6t5rk52fqp8d37vjtnc
facebook-domain-verification=hon9153jqv1t1g8qf6l56oss7ga2ps
k0vcjf5bb941hxj95nc95f8r22nnmpsx
globalsign-domain-verification=D6F274893DF1F45B4CA8DB80B58BA9C1
_f5sfsy0pmzhg93gvoouvxoocgq0jw2y
ae1376aa-89d9-4f09-9896-29306be0b267
_up15svnc36web1qkexge0st77hq3yvx

Email authentication no MX

SPF

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;

policy: reject (enforced)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIAxHZHi0F+WYSURSRsa1PK+0ZQJNLNqRfk+xE1hb2kbGkJwuTJucp4CHOpLAxgItk3o9O4wiiaMh91ANV…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxFJBRsIBAssbBf9uyx79/4KmV4vxqiTXf5apscfs4CgFjGdMj0C0xkkUEFqfWxXA7+ipx/yJm+Tw5V5va…

selectors probed

Certificate (current)

GeoTrust EV RSA CA G2

from 2025-12-03 to 2027-01-04

Expires in 229 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.unicajabanco.es/es/particulares

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: frame-ancestors *; default-src 'self'; frame-src 'self' unicaja.webfg.com unicaja-uat.webfg.com www.liberbank.es www.tarjetaplaystation.com univia.unicaja.es univiapru.unicaja.es hola.unicajabanco.es *.doubleclick.net 8020496.fls.doubleclick.net 8499384.fls.doubleclick.net googleads.g.doubleclick.net stats.g.doubleclick.net pagead2.googlesyndication.com region1.analytics.google.com adservice.google.com www.google.es www.youtube.com www.google.com asp.quefondos.com unicajabanco-backend.flumotion.com player.vimeo.com www.facebook.com connect.facebook.net *.teads.tv track.adform.net vars.hotjar.com optimize.google.com *.weborama.fr *.qualtrics.com data.unicajabanco.es *.tiktok.com analytics-ipv6.tiktokw.us *.afi.es *.outbrain.com *.tradedoubler.com a.imgstatics.com *.taboola.com *.clarity.ms *.criteo.com *.adtraction.com *.audire.fm; media-src *; img-src 'self' *.contentsquare.net *.qualtrics.com data: *; script-src 'self' 'unsafe-eval' 'unsafe-inline' fonts.gstatic.com www.gstatic.com *
strict-transport-security: max-age=15768000 ; includeSubDomains