fitosoil.com

HTML metadata

Title: Fitosoil Laboratorios, S.L.
Description: Fitosoil is a leading agri-food and environmental analysis laboratory based in Murcia, Spain. We deliver the latest analytical technology to address stringent legislative controls and for the detection and quantification of chemical and biological agents.
Language: en
Canonical: https://fitosoil.com/en

Open Graph

url: https://fitosoil.com/
title: Fitosoil Laboratorios, S.L.
description: Fitosoil is a leading agri-food and environmental analysis laboratory based in Murcia, Spain. We deliver the latest analytical technology to address stringent legislative controls and for the detection and quantification of chemical and biological agents.

Technology

Server: Vox

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Phone

+34968883271

Registration

Registrar

OVH sas

Created

2001-10-17

Expires

2026-10-17 150 days left

Updated

2025-10-18

Name servers

dns12.ovh.net
ns12.ovh.net

DNS records live

NS

dns12.ovh.net
ns12.ovh.net

MX

0 fitosoil-com.mail.protection.outlook.com

TXT

Show 5 TXT records

61grvqdphnpcb8fnkiqm0ohubk
1|149.202.105.228
1s9c79t6nen5t61v6qpdr5s3gi
dsa6l68ipbe9pn5768trfit1mk
MS=ms48893836

Email authentication strong

SPF

v=spf1 include:rw5vgb0z61.powerspf.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:ngxlwxdeek@rua.powerdmarc.com; ruf=mailto:ngxlwxdeek@ruf.powerdmarc.com; pct=50; fo=1;

policy: quarantine · pct=50

DKIM

Show 5 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjvTjzhiL3soHdtLXsMVuqzKzhndd0Ye6NKgEVm6Ml4KxvCvr1wRzt5FM2yHlNOsVpeaVu/qOZivyW…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtadOY/n2n6hA1Jq8OTSJhex32thsGod1HIuQhbk3O4OUuaX4xuauTjAbWsqrfNjihavJPSLFx4Mma+…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteHTqa1NJcGxlSFU1sc1E5YVeRFO5wf14EHob61rydFfpSU3ffjy933hEaO0vZDbiHTST5da4rB+reru4Oj0w…
s2: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot/idTgi5Ney0jvzI3HOwSKfleDAeMWQ2jsA2l/DOgh8TeWsMakMsHAZ5M0lc0QcIjrbe9KGP4xU5uMlJMnVP…

selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2026-04-09 to 2026-10-24

Expires in 157 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://fitosoil.com/en

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
weak frame protection
weak content type protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://fitosoil.com https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://code.jquery.com https://fonts.googleapis.com https://fonts.gstatic.com https://ajax.aspnetcdn.com https://cdnjs.cloudflare.com https://googlemaps.github.io https://maps.googleapis.com https://unpkg.com https://www.youtube.com https://www.youtube-nocookie.com https://stackpath.bootstrapcdn.com https://i.ytimg.com https://www.google.com https://maps.gstatic.com https://www.gstatic.com https://wati-integration-service.clare.ai https://fonts.intercomcdn.com https://cotecna-cdn.b-cdn.net https://cotecna-cdn-test.b-cdn.net https://cotecna-kairos.my.site.com https://cotecna-kairos.my.salesforce-scrt.com https://pre-prod-cotecna.voxteneo.com https://cdn.shopify.com https://widget.intercom.io https://js.intercomcdn.com https://user-images.githubusercontent.com https://api-iam.intercom.io https://cotecna-national-cdn-
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy-report-only: default-src 'self' http: https: data: blob: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self';