naturalizaeducacion.org

.org crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 6721 ms crawled 2026-05-19

NL · 104.40.130.225 · AS8075 Microsoft Corporation

Reputation 100/100

Classifying

HTML metadata

Title: Ecoembes Naturaliza | Proyecto de Educación Ambiental
Description: Descubre cómo Naturaliza de Ecoembes integra la educación ambiental en las aulas a través de actividades que conectan a los niños con la naturaleza.
Language: es-ES
Canonical: https://www.naturalizaeducacion.org

Open Graph

url: https://www.naturalizaeducacion.org
title: Ecoembes Naturaliza | Proyecto de Educación Ambiental
locale: es_ES
site name: Ecoembes Naturaliza | Proyecto de Educación Ambiental
description: Descubre cómo Naturaliza de Ecoembes integra la educación ambiental en las aulas a través de actividades que conectan a los niños con la naturaleza.

Technology

Server: nginx

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (9)

cdn.jsdelivr.net×6
fonts.googleapis.com×2
cdnjs.cloudflare.com×1
code.jquery.com×1
dev.visualwebsiteoptimizer.com×1
fonts.gstatic.com×1
plugins.gobalo.es×1
www.google.com×1
www.googletagmanager.com×1

Social

Contact

Address: Calle de Cardenal Marcelo Spinola 14, 28016, Madrid, Madrid, Spain

Registration

Registrar

Nominalia Internet SL

Created

2018-04-30

Expires

2027-04-30 345 days left

Updated

2026-03-14

Name servers

ns-cloud-a4.googledomains.com
ns-cloud-a1.googledomains.com
ns-cloud-a3.googledomains.com
ns-cloud-a2.googledomains.com

DNS records live

NS

ns-cloud-a1.googledomains.com
ns-cloud-a2.googledomains.com
ns-cloud-a3.googledomains.com
ns-cloud-a4.googledomains.com

Verified for

Google

Email authentication no MX

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Entrust DV TLS Issuing RSA CA 2

from 2025-09-29 to 2026-10-09

Expires in 142 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.naturalizaeducacion.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com *.doubleclick.net *.google-analytics.com www.googletagmanager.com www.google.com www.gstatic.com www.youtube.com cdn.datatables.net cdn.jsdelivr.net code.jquery.com *.fontawesome.com cdnjs.cloudflare.com plugins.gobalo.es *.cookiebot.com *.hotjar.com static.hotjar.com *.clarity.ms connect.facebook.net analytics.tiktok.com static.ads-twitter.com secure-ds.serving-sys.com; connect-src 'self' dev.visualwebsiteoptimizer.com *.google.com *.doubleclick.net region1.google-analytics.com *.clarity.ms analytics.tiktok.com *.tiktokw.us googleads.g.doubleclick.net pagead2.googlesyndication.com *.fontawesome.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.cookiebot.com connect.facebook.net *.facebook.com static.ads-twitter.com analytics.twitter.com https://t.co *.serving-sys.com; img-src 'self' data: blob: https:; frame-src 'self' www.google.com www.youtube.com www.youtu
strict-transport-security: max-age=31536000; includeSubDomains