gruposermicro.com
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress
Third-party hosts loaded (5)
- cdn.jsdelivr.net×1
- cdnjs.cloudflare.com×1
- code.jquery.com×1
- s.w.org×1
- www.google.com×1
Registration
- Registrar
- Soluciones Corporativas IP, SL
- Created
- 2017-03-08
- Expires
- 2027-03-08 291 days left
- Updated
- 2026-03-06
- Name servers
-
- ns1.dondominio.com
- ns2.dondominio.com
DNS records live
- NS
-
- ns1.dondominio.com
- ns2.dondominio.com
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- Verified for
-
- GlobalSign
Email authentication weak
- SPF
-
v=spf1 include:amazonses.com -allstrict (-all) - DMARC
- not published
- DKIM
-
- s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIRwju0urDa9juD7V7iZBn0a1A/b35cXwhQv14sOhnlUUgTUDP8Jx61bnWq9wCY3JtEupA8UUQspW/zAxh… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkPmWIFJSlXvnoRBkxdw6bDODAue76P30fZTtXsnc2snOPds82F/oeeKy2sXD/TJDudWebqgX8hnrbzASL…
selectors probed - s1:
Certificate (current)
GlobalSign Atlas R3 DV TLS CA 2026 Q2
Expires in 76 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- short HSTS max-age
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
Header values
- referrer-policy
strict-origin-when-cross-origin, strict-origin-when-cross-origin- x-frame-options
DENY, SAMEORIGIN- permissions-policy
accelerometer=(), ambient-light-sensor=(), autoplay=(), camera=(), encrypted-media=(), fullscreen=(self), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), speaker=(self), sync-xhr=(), usb=(), vibrate=(), vr=(), geolocation=(self);midi=(none);notifications=(self);push=(self);sync-xhr=(self);microphone=(none);camera=(none);magnetometer=(none);gyroscope=(none);speaker=(none);vibrate=(none);fullscreen=(self);payment=(none);- x-content-type-options
nosniff- content-security-policy
default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';frame-ancestors 'self';, upgrade-insecure-requests;- strict-transport-security
max-age=10886400