indexo.dev

bufalo.es

.es crawl

First seen 2026-04-12 · Last seen 2026-05-19 · ok HTTP/1.1 200 982 ms crawled 2026-05-04

DE · 91.99.165.34 · AS24940 Hetzner Online GmbH

Reputation 75/100 listed in spam blocklist

Classifying

HTML metadata

Title
Bufalo España
Language
de
Generator
WordPress 6.8.2
Canonical
https://bufalo.es/
Translations
  • en
  • es
  • pt
Feeds

Technology

Server
Apache
CMS
WordPress

Third-party hosts loaded (1)

  • consent.werner-mertz.de×1

Social

DNS records live

NS
  • ns.udag.de
  • ns.udag.net
  • ns.udag.org
MX
  • 10 mx00.udag.de
  • 20 mx01.udag.de
TXT
  • v=spf1 ip4:93.180.157.35 ~all
Verified for
  • Google

Certificate (current)

E7
from 2026-05-01 to 2026-07-30
Expires in 71 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://bufalo.es/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
same-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-content-type-options
nosniff
content-security-policy
default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (3)

Linked from (1)