cnoo.es

.es crawl

First seen 2026-04-14 · Last seen 2026-05-18 · ok HTTP/1.1 200 2046 ms crawled 2026-05-08

ES · 185.14.57.7 · AS202054 Grupo Sys4net, S.l.

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title

CNOO – Colegio Nacional de Ópticos-Optometristas

Language

Canonical

https://www.cnoo.es/

Feeds

CNOO » Feed RSS
CNOO » Feed de los comentarios RSS

Technology

Server: nginx
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (7)

fonts.googleapis.com×3
cdn.jsdelivr.net×2
cdn.tailwindcss.com×1
fonts.gstatic.com×1
gmpg.org×1
unpkg.com×1
www.googletagmanager.com×1

Social

Contact

Phone

DNS records live

NS

dns106.ovh.net
ns106.ovh.net

MX

10 mtmx01.arsenet.com
10 mtmx02.arsenet.com
20 sclxmx01.arsenet.com

TXT

Show 7 TXT records

p6sd70bm1031ct69dg3zg7h9fy428htk
MS=ms72987901
gsyX+Um3HmrEDN3VdbZ6NjZDr4c=
rQnL1+6C584+Eb6BayMdSHbgnx0=
37xf7xppz8vp6ysmt65w2sxrm6kxwnwx
3dqn4wfxtthylxx6zz4zs0ks82s61w5d
_5pgxbkcqposqyowqasx8vjwnts9m5hn

Email authentication weak

SPF

v=spf1 ip4:185.119.248.18 include:spf.protection.outlook.com include:factoriadeinnovacion.com include:spf.arsenet.com ~all

softfail (~all)

DMARC

not published

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDUkgAM9DQFS+Ti9eYGY4m+IgXclT5+kOwX3/X9py1ePveBJqU4OcuJM6+V86tI8jDfnyTyylutM3T3jXx7kx…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2025-09-17 to 2026-10-09

Expires in 142 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://www.cnoo.es/

present

permissions-policy

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy

Header values

permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")