casinohex.es
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress 3.21.2 outdated (current 6.8)
- PHP
- 8.4.21
- Stack
- PHP
- Analytics
-
- Google Analytics
- Google Tag Manager
- Microsoft Clarity
- Fonts
-
- Google Fonts
Third-party hosts loaded (7)
- fonts.googleapis.com×5
- images.dmca.com×3
- www.google-analytics.com×3
- www.googletagmanager.com×3
- fonts.gstatic.com×1
- scripts.clarity.ms×1
- www.clarity.ms×1
Social
Contact
- Address
- C. del Príncipe de Vergara, 109, 2ª planta, 28002 Madrid, España, 28002, Madrid, Comunidad de Madrid, España
DNS records live
- NS
-
- matias.ns.cloudflare.com
- melina.ns.cloudflare.com
- MX
-
- 10 zmx33.zimbra.in.ua
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 a mx -allstrict (-all) - DMARC
-
v=DMARC1; p=none; rua=ipm7oge@ar.glockapps.com,mailto:info@casinohex.es; ruf=ipm7oge@fr.glockapps.com; fo=1;policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
WE1
Expires in 38 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
sameorigin- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'none'; default-src 'self'; style-src 'self' 'unsafe-inline' https://accounts.google.com https://*.googleapis.com; script-src 'self' 'unsafe-inline' https://accounts.google.com https://*.googletagmanager.com https://*.clarity.ms https://*.google-analytics.com https://*.googleapis.com https://*.onesignal.com https://*.dmca.com https://*.cloudflareinsights.com https://rum.casinohex.org; frame-src 'self' https://accounts.google.com; connect-src 'self' https://*.googletagmanager.com https://*.clarity.ms https://*.google-analytics.com https://*.google.com https://*.doubleclick.net https://*.googleapis.com https://*.onesignal.com; font-src 'self' https://*.google.com https://*.gstatic.com https://*.googleapis.com data:; img-src 'self' https://*.digitaloceanspaces.com https://*.google-analytics.com https://*.googletagmanager.com https://secure.gravatar.com https://*.dmca.com https://*.wp.com https://*.wordpress.com blob: filesystem: data:; object-src 'none'; base-uri 'self'; f
Links to (13)
- 1xbet.com×3
- apalmadrid.org×3
- atej.org×3
- dmca.com×3
- facebook.com×3
- fejar.org×3
- jdigital.es×3
- jugarbien.es×3
- linkedin.com×3
- ordenacionjuego.es×3
- pinterest.com×3
- twitter.com×3
- youtube.com×3