indexo.dev

apit-barcelona.org

.org crawl

First seen 2026-05-07 · Last seen 2026-05-14 · ok HTTP/1.1 200 2968 ms crawled 2026-05-14

IT · 81.88.53.52 · AS39729 Register S.p.A.

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title
APIT BARCELONA Visites guiades Barcelona Catalunya
Description
APIT BARCELONA Visites guiades Barcelona Catalunya per guies professionals. Sagrada familia, Gaudí, camp nou, Parc Güell,..
Language
ca
Generator
WordPress 6.9.4
Canonical
https://apit-barcelona.org/
Translations
  • ca
  • en
  • es
Feeds

Open Graph

url
https://apit-barcelona.org/
title
APIT BARCELONA Visites guiades Barcelona Catalunya
locale
ca_ES
site name
APIT
description
APIT BARCELONA Visites guiades Barcelona Catalunya per guies professionals. Sagrada familia, Gaudí, camp nou, Parc Güell,..

Technology

Server
nginx
CMS
WordPress
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (2)

  • fonts.googleapis.com×2
  • www.googletagmanager.com×2

Contact

Email
Phone

Registration

Registrar
Arsys Internet, S.L. dba NICLINE.COM
Created
2001-09-03
Expires
2026-09-03 105 days left
Updated
2025-10-18
Name servers
  • dns1.servidoresdns.net
  • dns2.servidoresdns.net

DNS records live

NS
  • dns1.servidoresdns.net
  • dns2.servidoresdns.net
MX
  • 10 mx.serviciodecorreo.es

Email authentication weak

SPF
v=spf1 include:_spf.serviciodecorreo.es ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

E8
from 2026-03-12 to 2026-06-10
Expires in 20 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://apit-barcelona.org/

present
  • permissions-policy
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
Header values
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")

Linked from (1)