herbitas.com

HTML metadata

Title

▷ Herbitas ® | Material de Podología | Material Médico

Description

✅ Líderes en venta de MATERIAL de PODOLOGÍA , material médico y equipamiento.Especialistas con más de 30 años de experiencia en el sector de la podología.

Language

es

Canonical

https://herbitas.com/

Translations

en
es
fr
it
pt

Technology

Server: nginx
CMS: WordPress

Analytics

Google Tag Manager

Cookie consent

Termly

Fonts

Google Fonts

Third-party hosts loaded (8)

www.googletagmanager.com×3
www.sociedad-de-opiniones-contrastadas.es×2
app.termly.io×1
cdn.reskyt.com×1
cdnjs.cloudflare.com×1
eu1-config.doofinder.com×1
fonts.googleapis.com×1
www.google.com×1

Social

Contact

Email

Phone

+34 96 362 79 00

Address

Periodista Badía, 13B, 46134, Valencia, Valencia, España

Registration

Registrar

Interdominios, Inc.

Created

1999-03-25

Expires

2027-03-25 310 days left

Updated

2026-03-11

Name servers

ns-1055.awsdns-03.org
ns-1602.awsdns-08.co.uk
ns-420.awsdns-52.com
ns-682.awsdns-21.net

DNS records live

NS

ns-1055.awsdns-03.org
ns-1602.awsdns-08.co.uk
ns-420.awsdns-52.com
ns-682.awsdns-21.net

MX

10 poster1i.iberlayer.com
20 poster4i.iberlayer.com
30 poster2i.iberlayer.com
40 poster3i.iberlayer.com

TXT

brevo-code:f004f19a8d608403fbf6c987ee35d868
google-site-verification=y9UTfTv_2YwOXv94em5GWjNRtbu3fRajK5bKmBWuDxM

Email authentication partial

SPF

v=spf1 include:spf.ipzmarketing.com mx a ip4:18.100.22.93 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

policy: none (monitoring only)

DKIM

mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

Amazon RSA 2048 M02

from 2025-08-13 to 2026-09-12

Expires in 116 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://herbitas.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: ALLOW-FROM http://app.reskyt.com/
permissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-content-type-options: nosniff
content-security-policy: font-src *.googleapis.com *.gstatic.com *.fontawesome.com https://cdnjs.cloudflare.com *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.google.com *.youtube.com maps.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.google.com *.youtube.com maps.googleapis.com 'self' 'unsafe-inline'; frame-ancestors *.herbitas.com app.reskyt.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommer
strict-transport-security: max-age=31536000