insst.es

.es crawl

First seen 2026-04-13 · Last seen 2026-05-20 · ok HTTP/1.1 200 2926 ms crawled 2026-05-07

ES · 192.148.211.189 · AS200521 Ministerio de Transformacion Digital y de la Funcion Publica

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Instituto Nacional de Seguridad y Salud en el Trabajo - INSST
Description: Órgano científico técnico especializado en prevención de riesgos laborales (PRL) y seguridad y salud en el trabajo de la Administración General del Estado
Language: es-ES
Canonical: https://www.insst.es

Open Graph

url: https://www.insst.es
title: Instituto Nacional de Seguridad y Salud en el Trabajo - INSST - Portal INSST - INSST
locale: es_ES
image:url: https://www.insst.es/documents/20197/690715/logo-portal.svg/d2fd49f3-f2d8-441e-bbc2-35bb1a4ea9ad?version=1.5&t=1644306211537&imagePreview=1
site name: Portal INSST
description: Órgano científico técnico especializado en prevención de riesgos laborales (PRL) y seguridad y salud en el trabajo de la Administración General del Estado
locale:alternate: es_ES

Technology

Server: Apache

Analytics

Google Tag Manager

Third-party hosts loaded (2)

cdn.jsdelivr.net×1
www.googletagmanager.com×1

Social

Contact

Phone

Address

C/ Torrelaguna 73, 28027, Madrid, Madrid, ES

DNS records live

NS

ns1.age.gob.es
ns2.age.gob.es

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 11 TXT records

insst.es- 140997701
insst.es-012468486
insst.es-483193471
insst.es-986532
n74stwvbf6npntqfd3xz8hk3jpmsqglf
q30170h761shzjrvy9p92ndhx7c1tgn3
www.insst.es-483193471
zdwmmn96rfzw9g41gxtn8pq728gvxy4d
021293876
250101546
286h83l1b9vsmpcdgmk0ct2jcgw6lqrj

Verified for

Google

Email authentication partial

SPF: v=spf1 mx ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

FNMT-RCM

from 2026-02-02 to 2027-02-02

Expires in 257 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.insst.es/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'self' 'unsafe-inline' https: data: blob:; img-src 'self' https: data: blob:; font-src 'self' https: data: blob:; connect-src 'self' https: wss: data: blob:; frame-src 'self' https: data: blob:; frame-ancestors 'self'; media-src 'self' https: data: blob:; worker-src 'self' https: data: blob:; form-action 'self' https:; object-src 'none'; base-uri 'self'; upgrade-insecure-requests;
strict-transport-security: max-age=63072000; includeSubdomains;