calallevado.com

.com crawl

First seen 2026-04-15 · Last seen 2026-05-10 · ok HTTP/1.1 200 1734 ms crawled 2026-05-10

FR · 141.95.150.159 · AS16276 OVH SAS

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title

Camping Tossa de Mar en España en la Costa Brava | Camping España 4 estrellas

Description

Bienvenido a España, al camping 4 estrellas Cala Llevado, su camping en Tossa de Mar, en la Costa Brava, para unas vacaciones inolvidables junto al mar.

Language

Canonical

https://calallevado.com/es/

Translations

Open Graph

url: https://calallevado.com/es/
title: Camping Tossa de Mar en España en la Costa Brava | Camping España 4 estrellas
video: https://calallevado.com/es/videos/header-cala-v2-mp4.mp4
locale: es
site name: Sunêlia
description: Bienvenido a España, al camping 4 estrellas Cala Llevado, su camping en Tossa de Mar, en la Costa Brava, para unas vacaciones inolvidables junto al mar.
locale:alternate: ca

Technology

Analytics

Google Tag Manager

Social widgets

YouTube Embed

Third-party hosts loaded (6)

business.secureholiday.net×1
drive.google.com×1
matomo.sunelia.com×1
tile.openstreetmap.org×1
www.googletagmanager.com×1
www.youtube-nocookie.com×1

Social

Contact

Phone

Address

Ctra. GI-682 de Tossa a Lloret pk. 18.9, 17320, Tossa de Mar, ES

Registration

Registrar

OVH sas

Created

1998-01-23

Expires

2027-01-22 247 days left

Updated

2026-01-23

Name servers

dns113.ovh.net
ns113.ovh.net

DNS records live

NS

dns113.ovh.net
ns113.ovh.net

MX

1 mx0.mail.ovh.net
100 mx3.mail.ovh.net
5 mx1.mail.ovh.net
50 mx2.mail.ovh.net

TXT

1|www.calallevado.com

Email authentication weak

SPF: v=spf1 include:mx.ovh.com ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

from 2026-04-21 to 2026-07-20

Expires in 61 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://calallevado.com/es/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self "https://maps.googleapis.com"), microphone=(), camera=(), payment=()
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self', default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *; img-src 'self' data: https: *; font-src 'self' data: https: *; connect-src 'self' https: *; frame-src 'self' https: *; base-uri 'self'; object-src 'none'; media-src 'self' https://media.sunelia.com;
strict-transport-security: max-age=63072000; includeSubDomains; preload