indexo.dev

lavozdelasierra.es

.es crawl

First seen 2026-04-30 · Last seen 2026-05-19 · ok HTTP/1.1 200 2098 ms crawled 2026-05-08

ES · 34.175.233.253 · AS396982 Google LLC

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
La Voz de la Sierra
Description
Noticias de la Sierra de Madrid
Language
es
Generator
Powered by WPBakery Page Builder - drag and drop page builder for WordPress.
Canonical
https://lavozdelasierra.es/

Open Graph

url
https://lavozdelasierra.es/
title
La Voz de la Sierra
locale
es_ES
site name
La Voz de la Sierra
description
Noticias de la Sierra de Madrid

Technology

Server
nginx
CMS
WordPress
Analytics
  • Cloudflare Insights
Ads
  • Google Ads (DoubleClick)
Fonts
  • Google Fonts
Third-party hosts loaded (17)
  • fonts.gstatic.com×11
  • liveradio.com.es×5
  • youtube.com×4
  • 20423.live.streamtheworld.com×2
  • consent.youtube.com×2
  • google.com×2
  • googleads.g.doubleclick.net×2
  • i.ytimg.com×2
  • icegram.com×2
  • img.youtube.com×2
  • static.cloudflareinsights.com×2
  • static.doubleclick.net×2
  • youtu.be×2
  • yt3.ggpht.com×2
  • feed.mikle.com×1
  • gmpg.org×1
  • nodo102.liveradio.com.es×1

Social

DNS records live

NS
  • ns1.siteground.net
  • ns2.siteground.net
MX
  • 10 mx10.antispam.mailspamprotection.com
  • 20 mx20.antispam.mailspamprotection.com
  • 30 mx30.antispam.mailspamprotection.com
Verified for
  • Google

Email authentication partial

SPF
v=spf1 +a +mx +ip4:34.175.233.253 include:lavozdelasierra.es.spf.auto.dnssmarthost.net ~all
softfail (~all)
DMARC
v=DMARC1; p=none; aspf=r; adkim=r;
policy: none (monitoring only)
DKIM
  • default: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDuhJLTGR3v1EYCToGuxTG0F6TuRooppEz7TrTZ7pRBu/EJn31EiozzAh3ANXURYhvrLDmqVTewNho7eQDyuw…
selectors probed

Certificate (current)

R13
from 2026-03-12 to 2026-06-10
Expires in 21 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://lavozdelasierra.es/

present
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-resource-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(), microphone=(), camera=(), payment=(self), usb=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: blob:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' https: blob:; frame-src 'self' https: blob:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; object-src 'none'; worker-src 'self' blob:; upgrade-insecure-requests
cross-origin-opener-policy
same-origin-allow-popups
cross-origin-resource-policy
cross-origin

Links to (8)

Linked from (2)