andratx.es

.es crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 5170 ms crawled 2026-05-19

US · 159.60.154.252 · AS35280 F5 Networks SARL

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title

Inici | Ajuntament d'Andratx

Language

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://andratx.es/ca

Translations

Technology

Server: volt-adc
CMS: Drupal

Fonts

Google Fonts

Third-party hosts loaded (3)

cdnjs.cloudflare.com×2
cdn.jsdelivr.net×1
fonts.googleapis.com×1

Social

Contact

Phone

DNS records live

NS

dns107.ovh.net
ns107.ovh.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

wombat-verification=3KwxVCQV1HEp-aRXRTKKaZ5G0frhk
_ul7nh26hcn6wtcee3i8wbrwxxg4b9cw

Verified for

Google

Email authentication weak

SPF

v=spf1 a:mr-01.gestiona.espublico.com ip4:213.4.82.201 include:_spf.google.com ~all

softfail (~all)

DMARC

not published

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs60E6q/tKUle92wgFG7vzpLw3qaiXt0hthRM3+ECua+WIfkeC0N4kWte8+2Ckz8fJDCP9kpbgyLxFQ…

selectors probed

Certificate (current)

GeoTrust EV RSA CA G2

from 2026-02-24 to 2027-03-08

Expires in 291 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://andratx.es/ca

present

x-frame-options
x-content-type-options
referrer-policy

findings

missing HSTS
missing Content Security Policy
weak frame protection
weak content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff, nosniff, nosniff