alju.es

HTML metadata

Technology

Server

Sucuri

DNS records live

NS

• dns13.servidoresdns.net
• dns14.servidoresdns.net

MX

Show 9 MX records

• 1 mx-01-eu-central-1.prod.hydra.sophos.com
• 10 aspmx.l.google.com
• 20 alt1.aspmx.l.google.com
• 20 alt2.aspmx.l.google.com
• 30 aspmx2.googlemail.com
• 30 aspmx3.googlemail.com
• 30 aspmx4.googlemail.com
• 30 aspmx5.googlemail.com
• 5 mx-02-eu-central-1.prod.hydra.sophos.com

TXT

• google-site-verification=Prw5V4I9Yx8loZYlfCYwOjLy34ttT5s-CZQqSXu_13Q
• sophos-domain-verification=3ce385273b7d0d50cec7ca6544a3a97b028e4f2d569880b21b1409c63c0419cd

Email authentication partial

SPF

v=spf1 +ip4:217.76.142.237 include:_spf.google.com include:_spf_eucentral1.prod.hydra.sophos.com-all

permissive (+all) — anyone can send as this domain

DMARC

v=DMARC1; p=quarantine

policy: quarantine

DKIM

• google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXg9aZaSrzq54Rm7G+GMTz49UGeLyVF4eJltUOn+v3vpPIh9k7IjmwqJWJvDEO1s7ZUprjAYLY4fwn…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://alju.es/

present

• content-security-policy
• x-frame-options
• x-content-type-options

findings

• missing HSTS
• missing Referrer Policy
• missing Permissions Policy

Linked from (1)

• pedeca.es×2