finpay.es

HTML metadata

Technology

Analytics

• Google Tag Manager

Third-party hosts loaded (1)

• www.googletagmanager.com×1

DNS records live

NS

• dns105.ovh.net
• ns105.ovh.net

MX

• 1 mail.finpay.es

TXT

• c6reu50742nilovim8b8necp85
• _vmyq74o6fe01mx9nqsr2g72wobx9fqq
• MS=ms95897990

Email authentication partial

SPF

v=spf1 a mx a:mail.mihostingseguro.com ip4:90.161.233.251 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1;p=none;rua=mailto:cto@finpay.es;

policy: none (monitoring only)

DKIM

• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3VWojozA05vc7Re8modwZI3eXeB3WJwuHNlA/07SQpGnfOZFmJMLDFVK8z9xsXZWI/Py1oYAWJqd2B9d5…
• s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCnW+1waxcVB0a4IrwgvTiVe3xnuRAm2bFSxkTnvUbURYTq3dE5L5ojA/wH1GU7wcK5B/SR/TnORBfoOByMBU05dk…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://www.finpay.es/

present

• strict-transport-security
• x-content-type-options
• referrer-policy

findings

• short HSTS max-age
• missing Content Security Policy
• missing frame protection
• missing Permissions Policy

Linked from (1)

• rubiblanc.com×1