gastrocanarias.com

.com crawl

First seen 2026-05-27 · Last seen 2026-06-03 · ok HTTP/1.1 200 271 ms crawled 2026-05-30

DE · 162.55.89.36 · AS24940 Hetzner Online GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Revista Digital de gastronomía
Description: Revista Digital de gastronomía
Language: es
Generator: folioePress | CMS Gestor de medios digitales profesional
Canonical: https://gastrocanarias.com/

Open Graph

url: https://gastrocanarias.com/
title: Revista Digital de gastronomía
site name: Gastrocanarias
description: Revista Digital de gastronomía

Technology

Server: Apache
CMS: WordPress
jQuery: 2.1.1 known XSS (<3.5)

Fonts

Google Fonts

Social widgets

Twitter Widget

Third-party hosts loaded (7)

fonts.googleapis.com×2
maxcdn.bootstrapcdn.com×2
ajax.googleapis.com×1
cdnjs.cloudflare.com×1
platform.twitter.com×1
translate.google.com×1
translate.googleapis.com×1

Registration

Registrar

IONOS SE

Created

2010-02-27

Expires

2027-02-27 267 days left

Updated

2026-04-24

Name servers

ns1087.ui-dns.org
ns1094.ui-dns.de
ns1100.ui-dns.biz
ns1120.ui-dns.com

DNS records live

NS

ns1087.ui-dns.org
ns1094.ui-dns.de
ns1100.ui-dns.biz
ns1120.ui-dns.com

MX

10 mx00.ionos.es
10 mx01.ionos.es

Email authentication partial

SPF: v=spf1 include:_spf-eu.ionos.com ~all
softfail (~all)
DMARC: v=DMARC1; p=none;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-04-27 to 2026-11-12

Expires in 160 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://gastrocanarias.com/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
weak content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; style-src 'self' 'unsafe-inline' https: http:; img-src 'self' data: https: http:; font-src 'self' data: https: http:; media-src 'self' data: https: http: blob:; frame-src 'self' https: http:; connect-src 'self' https: http: wss: ws:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self';