edenun.com

.com crawl

First seen 2026-04-15 · Last seen 2026-05-18 · ok HTTP/1.1 200 1509 ms crawled 2026-05-10

FR · 51.254.149.154 · AS16276 OVH SAS

Reputation 69/100 wrong cert dmarc monitor-only

sector b2b services type homepage

HTML metadata

Title: eDenun : Canal de Denuncias para entidades
Description: Canal de Denuncias para entidades. eDenun es un software de alerta y detección de irregularidades que garantiza la protección del informante.
Language: es

Technology

Server: nginx

Fonts

Google Fonts

Third-party hosts loaded (1)

fonts.googleapis.com×1

Registration

Registrar

CSL Computer Service Langenbach GmbH d/b/a joker.com

Created

2023-04-25

Expires

2027-04-25 340 days left

Updated

2026-04-23

Name servers

dns.inittab.org
etc.inittab.org

DNS records live

NS

dns.inittab.org
etc.inittab.org

MX

15 etc.inittab.org

TXT

google-site-verification=qEcFYafyrtGkmEMQz2IbuTv6S9YqZA0Wil_gWmsvvQ8

Email authentication partial

SPF: v=spf1 a mx ip6:2001:41d0:2:234d::31c -all
strict (-all)
DMARC: v=DMARC1;p=none
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current) wrong cert

from 2026-03-21 to 2026-06-19

Expires in 31 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.edenun.com/

present

strict-transport-security
content-security-policy
x-frame-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing content type protection

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: DENY
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
content-security-policy: default-src 'self' fonts.googleapis.com fonts.gstatic.com googletagmanager.com stats.inittab.org 'unsafe-inline' 'unsafe-eval' data: *.www.edenun.com; frame-ancestors 'self'; connect-src 'self' stats.inittab.org; object-src 'none'; img-src 'self' data:;
strict-transport-security: max-age=15552000; includeSubDomains
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-site