42barcelona.com

.com crawl

First seen 2026-05-11 · Last seen 2026-05-17 · ok HTTP/1.1 200 20964 ms crawled 2026-05-17

ES · 195.55.75.229 · AS3352 Telefonica De Espana S.a.u.

Reputation 89/100 weak security headers dmarc monitor-only

sector education type landing page

HTML metadata

Title: Escuela 42_ca - Escuela 42
Language: es
Generator: All in One SEO Pro (AIOSEO) 4.9.3
Canonical: https://www.42barcelona.com/

Open Graph

url: https://www.42barcelona.com/
title: Escuela 42_ca - Escuela 42
locale: ca_ES
site name: Escuela 42 - Telefónica

Technology

Server: openresty
CMS: WordPress

Fonts

Adobe Fonts

Third-party hosts loaded (3)

unpkg.com×3
use.typekit.net×1
www.google.com×1

Social

Contact

Phone

2025-01-14 08

Registration

Registrar

Gandi SAS

Created

2019-09-24

Expires

2026-09-24 128 days left

Updated

2025-08-24

Name servers

aaron.ns.cloudflare.com
martha.ns.cloudflare.com

DNS records live

NS

aaron.ns.cloudflare.com
martha.ns.cloudflare.com

MX

25 spool.mail.gandi.net
50 fb.mail.gandi.net

TXT

_globalsign-domain-verification=FBJQYRMa1bZSYxGeZ4oAbqqnQ0iT8nGHRxuV00H78i
_globalsign-domain-verification=OBp1wxfW8tgUo4LI0NV4iDobwAa6Hqeu4BuqnuxUe9
google-site-verification=Dzpk1gWYIveT1akQoHmJTxXLbpC6awXqlu4z5T8h_vQ

Email authentication partial

SPF: v=spf1 include:spf.mailjet.com include:spf.42network.org include:_mailcust.gandi.net include:spf.slack.com ip4:195.55.43.194 ~all
softfail (~all)
DMARC: v=DMARC1; p=none; rua=mailto:it@42barcelona.com; ruf=mailto:it@42barcelona.com; fo=1; sp=none
policy: none (monitoring only) · sp=none
DKIM: no key found at common selectors

Certificate (current)

from 2026-02-20 to 2026-05-21

Expires in 2 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.42barcelona.com/

present

content-security-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.gstatic.com cdn.cookielaw.org www.googletagmanager.com script.crazyegg.com static.cloudflareinsights.com www.clarity.ms unpkg.com www.google-analytics.com region1.google-analytics.com ad.doubleclick.net challenges.cloudflare.com *.cloudflare.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net fonts.bunny.net unpkg.com www.gstatic.com use.typekit.net p.typekit.net; font-src 'self' data: fonts.gstatic.com use.typekit.net fonts.bunny.net; img-src 'self' data: secure.gravatar.com i.ytimg.com t3.gstatic.com www.gstatic.com *.gstatic.com www.google.com www.linkedin.com www.slideshare.net www.googletagmanager.com s.w.org *.googleusercontent.com c.clarity.ms c.bing.com ps.w.org licensing.aioseo.com ad.doubleclick.net adservice.google.com *.cloudflare.com; frame-src 'self' www.youtube.com youtube-nocookie.com www.youtube-nocookie.com player.vimeo.com platform.twitter.com www.slideshare