indexo.dev

ocahotels.com

.com crawl

First seen 2026-04-23 · Last seen 2026-05-17 · ok HTTP/1.1 200 15862 ms crawled 2026-05-17

FR · 51.254.41.98 · AS16276 OVH SAS

Reputation 87/100 weak security headers no dmarc policy

sector travel type homepage

HTML metadata

Title
Oca Hotels | Cadena Hotelera en España, Portugal y Brasil
Description
Oca Hotels, cadena hotelera en España, Portugal y Brasil con hoteles, apartamentos, spa, balnearios, golf y más. Descúbrenos y haz tu reserva.
Language
es
Canonical
https://www.ocahotels.com/
Translations
  • en
  • es
  • pt

Technology

Server
nginx
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (4)

  • images.neobookings.com×12
  • fonts.googleapis.com×4
  • cdn.neobookings.com×2
  • www.googletagmanager.com×1

Social

Contact

Email
Phone
Address
C/ Miguel Ferro Caaveiro, s/n, 15703, Santiago de Compostela

Registration

Registrar
Dinahosting s.l.
Created
2002-06-22
Expires
2026-06-22 33 days left
Updated
2025-06-13
Name servers
  • ns.dinahosting.com
  • ns2.dinahosting.com
  • ns4.dinahosting.com

DNS records live

NS
  • ns.dinahosting.com
  • ns2.dinahosting.com
  • ns4.dinahosting.com
MX
  • 10 aspmx.l.google.com
  • 20 alt1.aspmx.l.google.com
  • 30 aspmx3.googlemail.com
  • 40 aspmx2.googlemail.com
  • 50 alt2.aspmx.l.google.com
TXT
  • globalsign-domain-verification=KVZAdreobtGBYhW_VHUerZHB4IfYC8o1583NCKsIHr
  • google-site-verification=puxHVlXlXqiUAvaC0KNPrlZI_9WmWyoIa7HpKldyrRU

Email authentication weak

SPF
v=spf1 include:_spf.google.com ~all
softfail (~all)
DMARC
not published
DKIM
  • default: v=DKIM1; g=*; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC72E2odUyARBj5hq4H00I8r63c2GxzeCPEbuschES2S5d/EpAbuv3M2PybjRahsReI0EqmN+cGR0Hy0…
selectors probed

Certificate (current)

R13
from 2026-04-29 to 2026-07-28
Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.ocahotels.com/

findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy

Links to (5)

Linked from (2)