academiaalba.es

HTML metadata

Technology

Server

nginx

PHP

8.3.31 security-only

jQuery

3.4.1 known XSS (<3.5)

Stack

PHP

Fonts

• Google Fonts

Third-party hosts loaded (5)

• maxcdn.bootstrapcdn.com×2
• cdn.jsdelivr.net×1
• code.jquery.com×1
• fonts.googleapis.com×1
• stackpath.bootstrapcdn.com×1

Contact

Phone

• 958261159
• 615834365
• 952303553
• 692926952
• 957492259

DNS records live

NS

• dns103.ovh.net
• ns103.ovh.net

MX

• 1 alt1.aspmx.l.google.com
• 10 alt2.aspmx.l.google.com
• 20 alt3.aspmx.l.google.com
• 30 alt4.aspmx.l.google.com

TXT

• 1|www.academiaalba.es

Email authentication weak

SPF

v=spf1 a mx include:_spf.google.com -all

strict (-all)

DMARC

not published

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://academiaalba.es/public/login

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (4)

• academia-murcia.es×1
• academia-malaga.es×1
• academia-granada.es×1
• academia-cordoba.es×1

Linked from (1)

• academia-murcia.es×1