grandespagosgallegos.com

HTML metadata

Title

Grandes Pagos Gallegos. Tienda de Vino y Enoturismo

Description

Un proyecto vitivinícola de respeto por nuestro origen, nuestra tierra y su regeneración. Quinta Couselo, Pazo Casanova y Fragas do Lecer.

Language

es

Generator

Site Kit by Google 1.174.0

Canonical

https://www.grandespagosgallegos.com/

Feeds

Open Graph

url: https://www.grandespagosgallegos.com/
title: Grandes Pagos Gallegos. Tienda de Vino y Enoturismo
locale: es_ES
site name: Grandes Pagos Gallegos
description: Un proyecto vitivinícola de respeto por nuestro origen, nuestra tierra y su regeneración. Quinta Couselo, Pazo Casanova y Fragas do Lecer.

Technology

Server: nginx
CMS: WordPress
jQuery: 3.7.1

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (6)

fonts.googleapis.com×4
secure.gravatar.com×2
www.googletagmanager.com×2
cdn-cookieyes.com×1
cdnjs.cloudflare.com×1
fonts.gstatic.com×1

Social

Contact

Email

hola@grandespagosgallegos.com

Phone

Registration

Registrar

Dinahosting s.l.

Created

2014-04-08

Expires

2027-04-08 306 days left

Updated

2026-04-01

Name servers

ns.gestiondecuenta.com
ns2.gestiondecuenta.com
ns3.gestiondecuenta.com
ns4.gestiondecuenta.com

DNS records live

NS

ns.gestiondecuenta.com
ns2.gestiondecuenta.com
ns3.gestiondecuenta.com
ns4.gestiondecuenta.com

MX

10 mail.grandespagosgallegos.com

Verified for

Microsoft 365

Email authentication weak

SPF

v=spf1 a mx ~all

softfail (~all)

DMARC

not published

DKIM

default: v=DKIM1; g=*; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIJmOQj1ZLXakMZTZL29E04aymo0n3bV8CLc/sL741vIn5ZvMByMW/iHeNY0udw5UIdccSTVfZF2d2V…

selectors probed

Certificate (current)

R12

from 2026-05-26 to 2026-08-24

Expires in 80 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.grandespagosgallegos.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), encrypted-media=(), geolocation=(), gyroscope=(), hid=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), serial=(), usb=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:; upgrade-insecure-requests
strict-transport-security: max-age=63072000;preload
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin