42malaga.com

.com crawl

First seen 2026-05-07 · Last seen 2026-05-17 · ok HTTP/1.1 200 1716 ms crawled 2026-05-14

ES · 195.55.75.229 · AS3352 Telefonica De Espana S.a.u.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: Escuela 42 - Escuela 42
Language: es
Generator: All in One SEO Pro (AIOSEO) 4.9.3
Canonical: https://www.42malaga.com/

Open Graph

url: https://www.42malaga.com/
title: Escuela 42 - Escuela 42
locale: en_US
site name: Escuela 42 - Telefónica

Technology

Server: openresty
CMS: WordPress

Fonts

Adobe Fonts

Third-party hosts loaded (3)

unpkg.com×3
use.typekit.net×1
www.google.com×1

Social

Contact

Address: Avenida Sor Teresa Prat, 15Complejo Tabacalera, edificio E32900

Registration

Registrar

Gandi SAS

Created

2019-09-24

Expires

2026-09-24 127 days left

Updated

2025-08-24

Name servers

aaron.ns.cloudflare.com
martha.ns.cloudflare.com

DNS records live

NS

aaron.ns.cloudflare.com
martha.ns.cloudflare.com

MX

10 spool.mail.gandi.net
50 fb.mail.gandi.net

TXT

_globalsign-domain-verification=1T_zwJc5rUflb7CinGYjoT3dZlLpKV4Vg13MTVenEf
_globalsign-domain-verification=1be9hTeBMQ9GxtHfTvDIC6FoxIqWLZdKKVn6mGDQ_w
_globalsign-domain-verification=sdY26V8fyZWObq2jUz6nGrZVqJfRpcdq4MXwIhCfhL

Email authentication strong

SPF: v=spf1 include:_mailcust.gandi.net include:spf.mailjet.com a mx include:spf.slack.com ip4:212.170.131.217 include:spf.42network.org -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; adkim=s; rua=mailto:it@42malaga.com; ruf=mailto:it@42malaga.com; aspf=s
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

from 2026-04-13 to 2026-07-12

Expires in 54 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.42malaga.com/

present

content-security-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.gstatic.com cdn.cookielaw.org www.googletagmanager.com script.crazyegg.com static.cloudflareinsights.com www.clarity.ms unpkg.com www.google-analytics.com region1.google-analytics.com ad.doubleclick.net challenges.cloudflare.com *.cloudflare.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net fonts.bunny.net unpkg.com www.gstatic.com use.typekit.net p.typekit.net; font-src 'self' data: fonts.gstatic.com use.typekit.net fonts.bunny.net; img-src 'self' data: secure.gravatar.com i.ytimg.com t3.gstatic.com www.gstatic.com *.gstatic.com www.google.com www.linkedin.com www.slideshare.net www.googletagmanager.com s.w.org *.googleusercontent.com c.clarity.ms c.bing.com ps.w.org licensing.aioseo.com ad.doubleclick.net adservice.google.com *.cloudflare.com; frame-src 'self' www.youtube.com youtube-nocookie.com www.youtube-nocookie.com player.vimeo.com platform.twitter.com www.slideshare