Automated public DNS and web checks; results may be incomplete. These are passive observations, not an assessment of the organization.

D67/100

Executive summary

bnpparibas.com

High exposure. Significant weaknesses put the brand, customers and email at risk.

Full coverage: every applicable check was assessed.

2026-11-15 18:20 UTC

Print report / PDF

Useful for your IT provider or a colleague. Anyone with the link can view the report.

Track your progress

Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.

Email security30/30

Good

Spoofing email from this domain is hard.

Encryption & certificate18/25

Needs attention

Encryption is in place, but a gap could expose users.

Browser protections4/30

Critical

Several browser hardening headers are missing, which removes layers of protection against script injection and framing.

DNS infrastructure15/15

Good

The domain's infrastructure is well hardened.

Help someone else check their domain

Share this public report with a colleague. They can review the evidence and check their own domain.

Get the report badge

What to do first

1.
Limit what scripts your pages are allowed to run
This adds one layer of protection against injected scripts.
Who can fix it: Your website developer or web host
How to verify after the fix
```
curl -sIL https://bnpparibas.com/ | grep -i "Content-Security-Policy"
```
2.
Send visitors to the secure version of your site
Visitors who type your address without https may stay on an unprotected connection.
Who can fix it: Your web host
How to verify after the fix
```
curl -sI http://bnpparibas.com/ | grep -iE "^(HTTP|location)"
```

A starting point, not a security guarantee.

What this grade means

Tested hostname: bnpparibas.com
Website request: GET https://bnpparibas.com/
Scan time: 2026-11-15 18:20:44 UTC
Grading method: Version 2How grading works
Unverified or excluded checks: None. Every applicable check was assessed.

This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.

Get the badge

Show the live grade for bnpparibas.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.

Scan shown on this page: ⁦2026-11-15 18:20:44 UTC⁩. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.

Markdown

[![Domain Armor grade](https://getmirror.online/badge/bnpparibas.com.svg)](https://getmirror.online/report/bnpparibas.com)

HTML

<a href="https://getmirror.online/report/bnpparibas.com"><img src="https://getmirror.online/badge/bnpparibas.com.svg" alt="Domain Armor grade"></a>

Badge URL

https://getmirror.online/badge/bnpparibas.com.svg

Scan history

AI fix plan

Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.

Scans to analyze

0 of 6 selected

D67/10011/15/26, 06:20 PMCurrent

The current scan is always included.

AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.

Technical detail

Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.

Email security

30/30

Encryption & certificate

18/25

Browser protections

4/30

DNS infrastructure

15/15

Public DNS records

A	bnpparibas.com	88.221.157.144
AAAA	bnpparibas.com	2600:1405:1000:182::176e 2600:1405:1000:186::176e
MX	bnpparibas.com	5 smtp-in-internet-usr-m.gslb.srv.bnpparibas
NS	bnpparibas.com	ns1.bnpparibas.com ns2.bnpparibas.com ns3.domivesta.net ns4.domivesta.com ns5.bnpparibas.com
TXT	bnpparibas.com	MS=ms40706304 00d0y0000034lvpuay 4j3h9shcltbsmpxh13j1nvyw3s8cr3b _0rgacbyeo40d1d7g623nu29i4c0qf4p _440p6sokqv15ugddpg3a4yvzhl58hiu _5gyg48cu47d5m0nt6y37zm6zmp1u22e _6atfvpxlneo370jv1gu74o8b5nycj74 _9hjdxhln1rmhzr26zmw2o5tzpxjxn2v _f2k4f96ijj5o2l4rgr5e74jnb8oain4 _f7bry75ymsdi8nssabjb6inn2dqy4cm _gtmyda36h5jlfzaz51q6ao9p0m1rp17 _hkhtkyxn68mmsdgjmcvkrt2k9h7h800 _iby7t1ro05pvmxhcscdobx89zzq1460 _iy4anjkssg3sw3q3okhz5t8pzc11uvd _lfpvbunt13w2ab6asb6qdr4fhhza8ne _lxvmkq7jbtwiq5dca6y9ki443q92cqx _ly64jyhb8sggucefbin13dq83mfmeua _p6f2q72dybzzirvur64tkycp3n6wcks _pnlho1sad8viu63u1sdy4zx48p0s9i2 _qw0rxgdrkxap24bguhuq7z8yiqwvlxx _qyzsssg97244spkvigj8vjdwopy9evn _udon67bap756bwzigldm7yypf4gercz _uka13n55gp00ocj0w37z4k9w8tgvshy _x2splkolzf9vl99ttm6i6687o85m19k j9vcz72scp6r30qs74f78cvn91kpxm0g qzts8x924xbgsdytmq5g8nn1stwz261b wm69v1bpj716xhrl3zj3nc8f19fzj5cw ZOOM_verify_Y05SjBAkaVT8WXvkfJZPuP f437e0fb-f02e-4f65-8163-4a559e14e265 Certeurope=aPAYHWcBWbjgdDG8S8PVwasmSjmKc0 0Nz5HlsMafl_KEygLhWD6B1qjXkVXm-YuKaazynu2e nFs0JQXbOXo5WAXjjPT5kp3V4oWdGkXa/HSI4yBjg80= docusign=0f9be6ca-08bc-474e-ad7c-7dc01098a46b docusign=242b1cc7-f8e1-41c4-99f7-070616ac0eae google-gws-recovery-domain-verification=47147640 google-gws-recovery-domain-verification=47319022 bitrise-verification=bde9b2809daef2ec-tev3yWxJ74-3 anthropic-domain-verification-a3d5ja=6rYRcOQ18zYlUAiGGlnv0lA5K +HqpdRnAbVZpMbUeIzrxFLNE9E03A9U8KRUUBvuxrq0UrXTNPOQT06ch2B4ZOUqV KmaP8M9prOga4BxV0/sAm+if/C6ev7K2xzsjkoRwMTnJyaDp04JWlAMZ6J1inejo VN0bRHCa75j1xm/BZoLrqgsEszLMpBOpEmxSQIO9OBILevAKADYfw+gUyuWU6w7r adobe-idp-site-verification=718e4186-c309-41b7-a5f5-4dcd144a43d4 google-site-verification=551k_igwZNlYOV4nnnimp6SDa162BL8HNWTZxHkBl1s google-site-verification=R3qREGoXCVMm6RErdLzAbCfIctzLxnOwrmYWGQu9pAI globalsign-domain-verification=0Nz5HlsMafl_KEygLhWD6B1qjXkVXm-YuKaazynu2e +yy52VtMyacQDG3mMN5ohdLyh8Y+fJR0vZ1eHdJUtR3BvtXmeOh6U/2jXo4onN8K7/U8nVDTE9qPx/IXy4DIXQ== Gu5HyuPp+It75incr+hWgxktnapZdHoV38htyOfuT8x9H8RqfKL3XZfiz4KVtLyTd8m94ccADjFth8yWcR1tmw== cisco-ci-domain-verification=31a6275b55fd9f8bf8026e440d7b4956c37a73d489c4ca857229bffa0b6dd9a7 cisco-ci-domain-verification=73c0614b2653064c13f2b76d32eedfa57b1f623b44a14c97c39bebe00d7997ac atlassian-domain-verification=DcddybXlPBGNcHe7NLFwjMatv5b6aMGraEBjIPHTVtQB3/oSlh8OdtPFNSS9ttIM v=spf1 include:pns._spf.bnpparibas.com include:t._spf.bnpparibas.com include:o._spf.bnpparibas.com -all
TXT	_dmarc.bnpparibas.com	v=DMARC1; p=reject; fo=1; rua=mailto:f1rg2pej@ag.eu.dmarcian.com; ruf=mailto:f1rg2pej@fr.eu.dmarcian.com
CAA	bnpparibas.com	0 iodef "mailto:report-abuse@globalsign.com" 0 issue "d-trust.net" 0 issue "digicert.com" 0 issue "entrust.net" 0 issue "globalsign.com" 0 issue "pki.goog" 0 issuewild ";"
DS	bnpparibas.com	63446 8 2 28f88acae5545108a5aa98d7ee926e7630946210c926db0da648629c0e0e3ac8

Fix priorities

Sorted by risk: severity first, confirmed issues before hardening gaps, then effort and score impact.

1HighHTTP → HTTPS redirectHardening gap+7
2MediumClickjacking protectionHardening gap+5
3MediumHSTS — enforce encryption in the browserHardening gap+4
4MediumCSP — protection from script injectionHardening gap+8
5LowX-Content-Type-OptionsHardening gap+4
6LowReferrer-PolicyHardening gap+3
7LowPermissions-PolicyHardening gap+2

Indicative alignment

Best-practice mapping of public findings to common frameworks. Passive scanning tests public configuration only; it doesn't prove compliance or a violation.

Google & Yahoo sender rulesNo gaps observed
SPF, DKIM and DMARC are required for bulk senders to Gmail and Yahoo; missing them risks rejected or spam-foldered mail.
PCI DSS v4.04 observed gaps
TLS, certificate and browser-header protections relate to PCI DSS v4.0 requirements 4.2 and 6.4 for payment pages.
HTTP → HTTPS redirect HSTS — enforce encryption in the browser CSP — protection from script injection Clickjacking protection
NIS2 / vendor due diligence1 observed gaps
Vendor risk reviews under NIS2/DORA and cyber-insurance questionnaires check these public signals.
HSTS — enforce encryption in the browser
SOC 2 / ISO 27001 baseline4 observed gaps
Baseline external hygiene commonly expected in SOC 2 and ISO 27001 audits.
HSTS — enforce encryption in the browser CSP — protection from script injection Clickjacking protection X-Content-Type-Options

Indicative alignment only, based on public configuration. It doesn't establish whether a framework applies to you, and it isn't legal advice, an audit or a certification.

Head-to-head vs competitor

How do you stack up against competitors?

The check reads public data only and makes no changes to the domain. Recommendations are intended for the domain owner.

Is your domain as secure? Scan it free, no sign-up

All pre-scanned domains

What to do first

Limit what scripts your pages are allowed to run

This adds one layer of protection against injected scripts.

Who can fix it: Your website developer or web host

How to verify after the fix

curl -sIL https://bnpparibas.com/ | grep -i "Content-Security-Policy"

Send visitors to the secure version of your site

Visitors who type your address without https may stay on an unprotected connection.

Who can fix it: Your web host

How to verify after the fix

curl -sI http://bnpparibas.com/ | grep -iE "^(HTTP|location)"

What this grade means

Tested hostname

bnpparibas.com

Website request

GET https://bnpparibas.com/

Scan time

2026-11-15 18:20:44 UTC

Grading method

Version 2How grading works

Unverified or excluded checks

None. Every applicable check was assessed.

Technical detail

Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.

Email security

30/30

Encryption & certificate

18/25

Browser protections

4/30

DNS infrastructure

15/15

Public DNS records

A	bnpparibas.com	88.221.157.144
AAAA	bnpparibas.com	2600:1405:1000:182::176e 2600:1405:1000:186::176e
MX	bnpparibas.com	5 smtp-in-internet-usr-m.gslb.srv.bnpparibas
NS	bnpparibas.com	ns1.bnpparibas.com ns2.bnpparibas.com ns3.domivesta.net ns4.domivesta.com ns5.bnpparibas.com
TXT	bnpparibas.com	MS=ms40706304 00d0y0000034lvpuay 4j3h9shcltbsmpxh13j1nvyw3s8cr3b _0rgacbyeo40d1d7g623nu29i4c0qf4p _440p6sokqv15ugddpg3a4yvzhl58hiu _5gyg48cu47d5m0nt6y37zm6zmp1u22e _6atfvpxlneo370jv1gu74o8b5nycj74 _9hjdxhln1rmhzr26zmw2o5tzpxjxn2v _f2k4f96ijj5o2l4rgr5e74jnb8oain4 _f7bry75ymsdi8nssabjb6inn2dqy4cm _gtmyda36h5jlfzaz51q6ao9p0m1rp17 _hkhtkyxn68mmsdgjmcvkrt2k9h7h800 _iby7t1ro05pvmxhcscdobx89zzq1460 _iy4anjkssg3sw3q3okhz5t8pzc11uvd _lfpvbunt13w2ab6asb6qdr4fhhza8ne _lxvmkq7jbtwiq5dca6y9ki443q92cqx _ly64jyhb8sggucefbin13dq83mfmeua _p6f2q72dybzzirvur64tkycp3n6wcks _pnlho1sad8viu63u1sdy4zx48p0s9i2 _qw0rxgdrkxap24bguhuq7z8yiqwvlxx _qyzsssg97244spkvigj8vjdwopy9evn _udon67bap756bwzigldm7yypf4gercz _uka13n55gp00ocj0w37z4k9w8tgvshy _x2splkolzf9vl99ttm6i6687o85m19k j9vcz72scp6r30qs74f78cvn91kpxm0g qzts8x924xbgsdytmq5g8nn1stwz261b wm69v1bpj716xhrl3zj3nc8f19fzj5cw ZOOM_verify_Y05SjBAkaVT8WXvkfJZPuP f437e0fb-f02e-4f65-8163-4a559e14e265 Certeurope=aPAYHWcBWbjgdDG8S8PVwasmSjmKc0 0Nz5HlsMafl_KEygLhWD6B1qjXkVXm-YuKaazynu2e nFs0JQXbOXo5WAXjjPT5kp3V4oWdGkXa/HSI4yBjg80= docusign=0f9be6ca-08bc-474e-ad7c-7dc01098a46b docusign=242b1cc7-f8e1-41c4-99f7-070616ac0eae google-gws-recovery-domain-verification=47147640 google-gws-recovery-domain-verification=47319022 bitrise-verification=bde9b2809daef2ec-tev3yWxJ74-3 anthropic-domain-verification-a3d5ja=6rYRcOQ18zYlUAiGGlnv0lA5K +HqpdRnAbVZpMbUeIzrxFLNE9E03A9U8KRUUBvuxrq0UrXTNPOQT06ch2B4ZOUqV KmaP8M9prOga4BxV0/sAm+if/C6ev7K2xzsjkoRwMTnJyaDp04JWlAMZ6J1inejo VN0bRHCa75j1xm/BZoLrqgsEszLMpBOpEmxSQIO9OBILevAKADYfw+gUyuWU6w7r adobe-idp-site-verification=718e4186-c309-41b7-a5f5-4dcd144a43d4 google-site-verification=551k_igwZNlYOV4nnnimp6SDa162BL8HNWTZxHkBl1s google-site-verification=R3qREGoXCVMm6RErdLzAbCfIctzLxnOwrmYWGQu9pAI globalsign-domain-verification=0Nz5HlsMafl_KEygLhWD6B1qjXkVXm-YuKaazynu2e +yy52VtMyacQDG3mMN5ohdLyh8Y+fJR0vZ1eHdJUtR3BvtXmeOh6U/2jXo4onN8K7/U8nVDTE9qPx/IXy4DIXQ== Gu5HyuPp+It75incr+hWgxktnapZdHoV38htyOfuT8x9H8RqfKL3XZfiz4KVtLyTd8m94ccADjFth8yWcR1tmw== cisco-ci-domain-verification=31a6275b55fd9f8bf8026e440d7b4956c37a73d489c4ca857229bffa0b6dd9a7 cisco-ci-domain-verification=73c0614b2653064c13f2b76d32eedfa57b1f623b44a14c97c39bebe00d7997ac atlassian-domain-verification=DcddybXlPBGNcHe7NLFwjMatv5b6aMGraEBjIPHTVtQB3/oSlh8OdtPFNSS9ttIM v=spf1 include:pns._spf.bnpparibas.com include:t._spf.bnpparibas.com include:o._spf.bnpparibas.com -all
TXT	_dmarc.bnpparibas.com	v=DMARC1; p=reject; fo=1; rua=mailto:f1rg2pej@ag.eu.dmarcian.com; ruf=mailto:f1rg2pej@fr.eu.dmarcian.com
CAA	bnpparibas.com	0 iodef "mailto:report-abuse@globalsign.com" 0 issue "d-trust.net" 0 issue "digicert.com" 0 issue "entrust.net" 0 issue "globalsign.com" 0 issue "pki.goog" 0 issuewild ";"
DS	bnpparibas.com	63446 8 2 28f88acae5545108a5aa98d7ee926e7630946210c926db0da648629c0e0e3ac8

Indicative alignment

Best-practice mapping of public findings to common frameworks. Passive scanning tests public configuration only; it doesn't prove compliance or a violation.

Google & Yahoo sender rulesNo gaps observed

SPF, DKIM and DMARC are required for bulk senders to Gmail and Yahoo; missing them risks rejected or spam-foldered mail.

PCI DSS v4.04 observed gaps

TLS, certificate and browser-header protections relate to PCI DSS v4.0 requirements 4.2 and 6.4 for payment pages.

HTTP → HTTPS redirect HSTS — enforce encryption in the browser CSP — protection from script injection Clickjacking protection

NIS2 / vendor due diligence1 observed gaps

Vendor risk reviews under NIS2/DORA and cyber-insurance questionnaires check these public signals.

HSTS — enforce encryption in the browser

SOC 2 / ISO 27001 baseline4 observed gaps

Baseline external hygiene commonly expected in SOC 2 and ISO 27001 audits.

HSTS — enforce encryption in the browser CSP — protection from script injection Clickjacking protection X-Content-Type-Options

Indicative alignment only, based on public configuration. It doesn't establish whether a framework applies to you, and it isn't legal advice, an audit or a certification.

bnpparibas.com

Track your progress

Help someone else check their domain

What to do first

What this grade means

Get the badge

Scan history

AI fix plan

Scans to analyze

Technical detail

Email security

Encryption & certificate

Browser protections

DNS infrastructure

Public DNS records

Is your domain as secure? Scan it free, no sign-up

bnpparibas.com

Track your progress

Help someone else check their domain

What to do first

What this grade means

Get the badge

Scan history

AI fix plan

Scans to analyze

Technical detail

Email security

Encryption & certificate

Browser protections

DNS infrastructure

Public DNS records

Is your domain as secure? Scan it free, no sign-up

Agent access & discovery signals