holmbank.ee

Live preview

This site's Content-Security-Policy restricts embedding to specific origins ("frame-ancestors 'self' https://*.holmbank.ee"), which does not include StatsMyWeb.

Since holmbank.ee can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

private, no-cache, no-store, max-age=0, must-revalidate, no-cache, no-store

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self';base-uri 'self' https://matomo.holmbank.ee;font-src 'self' https://matomo.holmbank.ee;form-action 'self';frame-ancestors 'self' https://*.holmbank.ee;img-src 'self' data: https://*.holmbank.ee https://server.seadform.net https://*.bing.com https://www.facebook.com https://google.com https://www.google.com https://www.google.ee https://www.google.lv https://*.clarity.ms https://googleads.g.doubleclick.net;object-src 'self' blob: https://*.holmbank.ee;script-src 'self' 'nonce-SlO38jJ3VJmaA4UJ1Q55jg==' 'sha256-ztNgtSoJsnfmbxuMwnvKJphcTAVOzhkMd7OPRrtwK8M=' 'sha256-nzv8I5Mf0AZBUKeL70LtQfYBjK/DghfP72B8j+UI49I=' 'sha256-Q9vPNvpI3BYCNwzFpA56s9IESqfHGcA8LabbrsO988U=' 'sha256-f/4JtnUooI1pi8NtNn5dut6agiID8h6eNsMuJcQ6Kx8=' https://matomo.holmbank.ee https://accountscoring.com https://*.accountscoring.com https://*.adform.net https://connect.facebook.net https://www.facebook.com https://*.bing.com https://*.clarity.ms https://*.doubleclick.net https://www.googleadservices.com;script-src-attr 'none';style-src 'self' 'unsafe-inline' https://matomo.holmbank.ee;upgrade-insecure-requests;connect-src 'self' https://sso.holmbank.ee https://*.holmbank.ee https://*.montonio.com https://accountscoring.com https://*.accountscoring.com https://matomo.holmbank.ee https://connect.facebook.net https://www.facebook.com https://*.clarity.ms https://pagead2.googlesyndication.com https://*.bing.com https://google.com https://www.google.com https://www.google.ee https://www.google.lv blob:;media-src https://content.holmbank.ee;frame-src 'self' blob: https://*.holmbank.ee https://*.liisi.ee https://*.typeform.com https://app.recommy.com https://*.doubleclick.net https://*.adform.net

Strict-Transport-Security

max-age=31536000; includeSubDomains

X-Frame-Options

Not sent

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://holmbank.ee/HTTP 301

   → https://www.holmbank.ee/

2. 2.https://www.holmbank.ee/HTTP 308

   → https://www.holmbank.ee/et/eraklient/

3. 3.https://www.holmbank.ee/et/eraklient/HTTP 308

   → https://www.holmbank.ee/et/eraklient

4. 4.https://www.holmbank.ee/et/eraklientHTTP 200

Meta tags

Title

Holm pank | 30 aastat kogemust

Description

Holm panga nimi on inspireeritud Haapsalu holmidest. Tooted on nii era- kui ärikliendile. Usaldusväärne ja professionaalne pank, kes hoolib oma klientidest. Mõistev ja abivalmis suhtumine. Tutvu tingimustega!

Canonical

https://www.holmbank.ee/et/eraklient

Robots

follow, index, max-snippet:-1, max-image-preview:large, max-video-preview:-1

Generator

Not set

Open Graph title

Not set

Open Graph description

Not set

Open Graph image

Not set

Open Graph type

Not set

Twitter card

summary

Twitter title

Holm pank | 30 aastat kogemust

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

1

Disallow rules (other agents)

1

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• WordPresscms

  Found "wp-includes/" in the page's HTML

• Next.jsframework

  Found "_next/static/" in the page's HTML

Related domains