indexo.dev

cno.org.co

.co crawl

First seen 2026-05-27 · Last seen 2026-05-30 · ok HTTP/1.1 200 1833 ms crawled 2026-05-30

US · 35.84.47.65 · AS16509 Amazon.com, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Consejo nacional de operación del sector eléctrico CNO |
Description
El Consejo Nacional de Operación del sector eléctrico, es un organismo que tiene como función principal acordar los aspectos técnicos para garantizar que la operación del Sistema Interconectado Nacional (SIN) sea segura, confiable y económica y ser el ejecutor del Reglamento de Operación
Language
es
Generator
Drupal 10 (https://www.drupal.org)
Canonical
https://www.cno.org.co/
Feeds

Technology

Server
nginx
CMS
Drupal

Third-party hosts loaded (2)

  • cnostatic.s3.amazonaws.com×63
  • www.google.com×1

Contact

Email

DNS records live

NS
  • ns05.domaincontrol.com
  • ns06.domaincontrol.com
MX
  • 0 cno-org-co.mail.protection.outlook.com
TXT
  • k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDX3HI+eIb5dP3hFvVE83DnQWTNUzPA10h7iaoBz68FiRwYfmyW8TzTiM5xESzRhla3aH0l1n0+9gDPt8sbilYatQFRXbmoTmAA2nvAj1L7TZ2/0i2eCKXksjlpYK5RzNj0mCHq+huMsHyuWuoCi4wACKQD/7w1upIf74U4iQzywQIDAQAB
  • 3paadaj7taqmc1vfiiki7qe4jo
Verified for
  • Google
  • Microsoft 365

Email authentication weak

SPF
v=spf1 include:secureserver.net -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-04-19 to 2026-07-18
Expires in 44 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.cno.org.co/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-embedder-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
same-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(), camera=(), geolocation=(), microphone=(), encrypted-media=('self'), autoplay=('self')
x-content-type-options
nosniff
content-security-policy
img-src 'self' data: https://cnostatic.s3.amazonaws.com https://accounts.zoho.com https://zcff-zgfl.maillist-manage.com https://campaigns.zoho.com; font-src 'self' data: https://www.cno.org.co; script-src-elem 'self' 'unsafe-inline' https://ajax.googleapis.com https://www.google.com https://www.gstatic.com https://zcff-zgfl.maillist-manage.com https://maillist-manage.com https://unpkg.com www.cno.org.co https://cnostatic.s3.amazonaws.com; default-src 'self' https://www.cno.org.co; frame-src 'self' https://docs.google.com https://www.youtube.com https://www.google.com https://www.gstatic.com https://*.s3.amazonaws.com; style-src 'self' https://unpkg.com 'unsafe-inline' 'unsafe-hashes'; style-src-elem 'self' https://unpkg.com 'unsafe-inline' 'unsafe-hashes'; form-action 'self'; object-src 'none'; script-src 'self' https://unpkg.com https://www.recaptcha.net https://googleads.g.doubleclick.net https://static.doubleclick.net 'unsafe-inline' 'unsafe-hashes'; upgrade-insecure-requests; style
strict-transport-security
max-age=63072000; includeSubdomains; preload
cross-origin-opener-policy
cross-origin
cross-origin-embedder-policy
cross-origin
cross-origin-resource-policy
cross-origin

Links to (11)

Linked from (1)