casareal.es

.es crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 948 ms crawled 2026-05-18

ES · 212.128.109.8 · AS200521 Ministerio de Transformacion Digital y de la Funcion Publica

Reputation 100/100

Classifying

HTML metadata

Title: InicioCastellano - Casa Real
Description: Casa Real
Language: es
Generator: Microsoft SharePoint
Canonical: http://www.casareal.es:80/ES/Paginas/home.aspx

Technology

Analytics

Google Tag Manager

Social widgets

YouTube Embed

Third-party hosts loaded (4)

cdn1.readspeaker.com×1
consent.cookiefirst.com×1
www.googletagmanager.com×1
www.youtube-nocookie.com×1

Social

DNS records live

NS

artemis.ttd.net
minerva.ttd.net

MX

1 mxa-0085c402.gslb.pphosted.com
2 mxb-0085c402.gslb.pphosted.com

TXT

google-site-verification=R22ub2nG5FHUB1D0WnTpLAD5GGMfyWio-TCm4tODEn0

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com ip4:217.124.155.49/32 ip4:194.179.47.226/32 include:spf-0085c402.pphosted.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:clean.mail@casareal.es; ruf=mailto:clean.mail@casareal.es

policy: reject (enforced)

DKIM

selector1: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGepi3ycugCnHNU39SyP92lRVVHTkGnmktLkNhXchodcHxqKxuhKteQK8z0MJZPIPbsyLR+1mllai8kDQokZe…

selectors probed

Certificate (current)

GlobalSign GCC R3 EV TLS CA 2025

from 2026-03-10 to 2027-04-11

Expires in 327 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.casareal.es/ES/Paginas/home.aspx/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;
strict-transport-security: max-age=31536000; includeSubDomains; preload