kleber.es

HTML metadata

Title

Seguridad todo el año| Neumáticos Kleber

Description

Descubre los neumáticos Kleber para tu coche,4X4 o furgoneta. Desde All Season hasta neumáticos de invierno.

Language

en

Canonical

https://www.kleber.es/auto/

Translations

de ×2
en ×2
es ×2
fr ×2
it ×2
nl ×2
hu
pl

Open Graph

url: www.kleber.es/auto/
title: Seguridad todo el año| Neumáticos Kleber
description: Descubre los neumáticos Kleber para tu coche,4X4 o furgoneta. Desde All Season hasta neumáticos de invierno.

Technology

CDN: Azure Front Door

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (14)

aecbmesvcm.cloudimg.io×12
cxf-prod.azureedge.net×4
fonts.googleapis.com×2
www.kleber-reifen.de×2
www.kleber-tyres.com×2
www.kleber.fr×2
www.kleber.it×2
www.kleber.nl×2
fonts.gstatic.com×1
lezs3gcy3n.kameleoon.eu×1
unpkg.com×1
www.googletagmanager.com×1
www.kleber.hu×1
www.kleber.pl×1

Social

DNS records live

NS

edns6.ultradns.biz
edns6.ultradns.com
edns6.ultradns.net
edns6.ultradns.org

MX

30 gk-fr1.michelin.com
30 gk-fr2.michelin.com
30 gk-fr3.michelin.com

TXT

f69g0cfbljsv3yhnybvsc8p1f8p9lyll
spn2wfj9mm8g1v7br40g1lvg5l9mlbfz
_1oan35gqtlecjd0he5lt7dsjb3f2rt8

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

GeoTrust TLS RSA CA G1

from 2025-07-17 to 2026-07-23

Expires in 52 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.kleber.es/auto/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self)
x-content-type-options: nosniff
content-security-policy: default-src kleber-tc.prod-we-dcadcx.michelin.fr 'self'; style-src 'unsafe-inline' kleber-tc.prod-we-dcadcx.michelin.fr 'self' cxf-prod.azureedge.net *.windows.net *.googleapis.com blob:; script-src 'unsafe-inline' 'unsafe-eval' kleber-tc.prod-we-dcadcx.michelin.fr 'self' blob: *.windows.net *.hotjar.com *.kameleoon.eu assets.pixlee.com assets.pxlecdn.com connect.facebook.net cxf-prod.azureedge.net developers.google.com *.googleapis.com pixel.mathtag.com sdk.privacy-center.org *.batch.com *.google-analytics.com *.google.com/recaptcha/ *.googletagmanager.com *.gstatic.com *.youtube.com https://cdnjs.cloudflare.com/ https://unpkg.com *.mouseflow.com *.server-side-tagging-np4i3rqoca-uc.a.run.app amplify.outbrain.com *.outbrain.com; font-src kleber-tc.prod-we-dcadcx.michelin.fr 'self' *.windows.net fonts.gstatic.com cxf-prod.azureedge.net *.mouseflow.com; frame-src 'self' *.kameleoon.eu pixel.mathtag.com *.hotjar.com *.google.com photos.pixlee.co *.youtube.com *.facebook.com *.kameleoon.co
strict-transport-security: max-age=31536000; includeSubDomains; preload