indexo.dev

cesa2020.es

.es crawl

First seen 2026-05-12 · Last seen 2026-05-18 · ok HTTP/1.1 200 2560 ms crawled 2026-05-18

NL · 35.214.245.157 · AS43515 Google Ireland Limited

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Web Campeonato de España de Selecciones Autonómicas de Balonmano
Description
Página web del Campeonato de España de Selecciones Autonómicas de Balonmano que se celebra en Cantabria durante la primera semana de enero de 2020
Language
es
Generator
Divi v.4.27.4
Canonical
https://www.cesa2020.es/esp/
Feeds

Open Graph

url
https://www.cesa2020.es/esp/
title
Web Campeonato de España de Selecciones Autonómicas de Balonmano
locale
es_ES
site name
CESA BM 2020
description
Página web del Campeonato de España de Selecciones Autonómicas de Balonmano que se celebra en Cantabria durante la primera semana de enero de 2020

Technology

Server
nginx
CMS
WordPress
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts
Social widgets
  • YouTube Embed
Third-party hosts loaded (7)
  • i0.wp.com×70
  • c0.wp.com×10
  • fonts.googleapis.com×2
  • stats.wp.com×2
  • fonts.gstatic.com×1
  • www.googletagmanager.com×1
  • www.youtube.com×1

Social

Contact

Email
Phone

DNS records live

NS
  • ns1.siteground.net
  • ns2.siteground.net
MX
  • 10 mx10.antispam.mailspamprotection.com
  • 20 mx20.antispam.mailspamprotection.com
  • 30 mx30.antispam.mailspamprotection.com

Email authentication partial

SPF
v=spf1 +a +mx +a:es44.siteground.eu include:cesa2020.es.spf.auto.dnssmarthost.net ~all
softfail (~all)
DMARC
v=DMARC1; p=none; aspf=r; adkim=r;
policy: none (monitoring only)
DKIM
  • default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gFk/EWu/1uY5/o/YTvb2prFLi8cEbSshoqpEev1Mmv7ooV7Cgte5j/brmUegt3QziwvpQBLnjLYA0…
selectors probed

Certificate (current)

R12
from 2026-04-05 to 2026-07-04
Expires in 45 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.cesa2020.es/esp/

present
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-resource-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(), microphone=(), camera=(), payment=(self), usb=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: blob:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' https: blob:; frame-src 'self' https: blob:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; object-src 'none'; worker-src 'self' blob:; upgrade-insecure-requests
cross-origin-opener-policy
same-origin-allow-popups
cross-origin-resource-policy
cross-origin

Links to (49)

Linked from (1)