aquopolis.es

HTML metadata

Title

Parques acuáticos en España | Aquopolis

Description

Disfruta de un día inolvidable con tu familia o amigos en nuestros parques de atracciones de agua de Aquopolis.

Language

es

Canonical

https://www.aquopolis.es

Translations

en
es

Open Graph

url: https://www.aquopolis.es
title: Parques acuáticos en España | Aquopolis
locale: es
site name: Aquopolis
description: Disfruta de un día inolvidable con tu familia o amigos en nuestros parques de atracciones de agua de Aquopolis.

Technology

Cookie consent

OneTrust

Third-party hosts loaded (3)

cdn.cookielaw.org×2
maps.googleapis.com×1
www.google.com×1

DNS records live

NS

ns01.parquesreunidos.com
ns02.parquesreunidos.com
ns03.parquesreunidos.com

MX

10 mxa-0078a701.gslb.pphosted.com
10 mxb-0078a701.gslb.pphosted.com

TXT

knowbe4-site-verification=2dbfaa24e4a8b8964e32ba22e7f17987

Verified for

Atlassian
Microsoft 365

Email authentication strong

SPF

v=spf1 mx ip4:194.30.92.146 ip4:217.172.65.104 ip4:194.140.132.172 ip4:195.55.102.181 ip4:195.76.213.51 ip4:89.140.47.174 ip4:195.140.184.0/22 ip4:91.192.40.0/22 ip4:194.140.132.162 ip4:213.206.105.71 ip4:194.140.143.80 ip4:178.79.170.45 ip4:176.58.111.134 ip4:185.2.4.75 ip4:172.104.149.195 ip4:139.162.166.78 include:relays.esferize.com include:customers.clickdimensions.com include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; sp=quarantine; fo=1; adkim=r; aspf=r; pct=100; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;

policy: quarantine · sp=quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEivLJ2yY/eAOnW2yXBvcZW9RxfAYeaYChQ/eiymNw29yytd14qKJBdwowXYw5wbUjeF06NQon+8GF…
mail: v=DKIM1; h=sha256; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzWQ3V1NZX+kStPbJTafOfh3/o66idHL6/EZ3k1qckU3EQ7E8fwcYt79G5d8QHZCeQMffFW8qq…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2026-03-04 to 2027-04-05

Expires in 319 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.aquopolis.es/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; object-src 'self' blob:; frame-ancestors 'self' flex.cybersource.com; worker-src blob: ; frame-src 'self' blob: *; media-src *; img-src * 'self' data: https: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' api.brainsins.com mw.brainsins.com d2xkqxdy6ewr93.cloudfront.net *.cloudfront.net cdn.pushassist.com trc.taboola.com *.collect.igodigital.com resources.convious-app.com client.convious-app.com cdn.taboola.com 510001631.collect.igodigital.com script.hotjar.com 510001630.collect.igodigital.com static.hotjar.com launch-9151dc1e0eb6-development mstat.acestream.net www.gstatic.com flex.cybersource.com pe-kw.store.kennywood.com pe-cp.store.castlepark.com www.google.com connect.facebook.net googleads.g.doubleclick.net www.googleadservices.com www.googletagmanager.com www.google-analytics.com *.parquesreunidos.es *.optickssecurity.com *.opticksstatic.com *.opticksprotection.com opticksprotection.com assets.adobedtm.com amplify.review-alerts.com static-eu.payme
strict-transport-security: max-age=31557600