envia.co

.co crawl

First seen 2026-04-20 · Last seen 2026-05-17 · ok HTTP/1.1 200 1310 ms crawled 2026-05-13

US · 34.54.29.156 · AS396982 Google LLC

Reputation 100/100

Classifying

HTML metadata

Language: en

Technology

Analytics

Google Tag Manager

Fonts

Font Awesome
Google Fonts

Third-party hosts loaded (9)

ajax.googleapis.com×3
cdnjs.cloudflare.com×3
vjs.zencdn.net×3
cdn.jsdelivr.net×1
colvanes-n2pcol.ucontactcloud.com×1
fonts.googleapis.com×1
use.fontawesome.com×1
www.facebook.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns63.domaincontrol.com
ns64.domaincontrol.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

google-site-verification=96ekDZ4XFVfRRs-mc5u3iy3HPyLpTkm-BrYIYC7mlPY
t2eqpdjufqvu7q7h4a55rsbgq5
google-site-verification=C6uZeOc9aWTaa2TcHb1YLlBpgmmYERSim1XijxCUZmA

Email authentication strong

SPF

v=spf1 mx ip4:190.26.223.164/32 ip4:200.69.100.69/32 ip4:200.69.100.68/32 include:_spf.aldeamo.com include:email-messaging.com include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:admin@envia.co

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD0Pxvf4JvaNeYKtGR2BGF21n53IC6COqpC2ipv3V5jhaD+a4McE/3SMwrKQ+KM5u/xCFhC8lFQCfM…

selectors probed

Certificate (current)

WR3

from 2026-04-07 to 2026-07-06

Expires in 48 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://envia.co/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), microphone=(self), camera=(self), payment=(), usb=(), fullscreen=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self'; connect-src 'self' https://hub.envia.co https://plausible.io https://colvanes-n2pcol.ucontactcloud.com https://cdnjs.cloudflare.com https://www.google.com https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://vjs.zencdn.net https://colvanes-n2pcol.ucontactcloud.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com https://connect.facebook.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://ajax.googleapis.com https://vjs.zencdn.net https://use.fontawesome.com https://colvanes-n2pcol.ucontactcloud.com; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com; img-src 'self' data: https:; frame-src 'self' htt
strict-transport-security: max-age=31536000; includeSubDomains; preload