palmapictures.es

HTML metadata

Technology

Server

nginx

CMS

WordPress

Analytics

• Google Tag Manager

Fonts

• Google Fonts

Third-party hosts loaded (3)

• fonts.googleapis.com×3
• gmpg.org×1
• www.googletagmanager.com×1

DNS records live

NS

• ns1.eurodns.com
• ns2.eurodns.com
• ns3.eurodns.com
• ns4.eurodns.com

MX

• 0 palmapictures-es.mail.protection.outlook.com

TXT

• 0k87x4t37m0lywv0wrgq943fj9jll6y9
• 45qzspwsdkvmgd9sny816k3mdp9myv7z
• MS=ms19336291

Email authentication partial

SPF

v=spf1 a mx include:spf.joopbox.com a:www.palmapictures.es a:www2.palmapictures.es include:spf.protection.outlook.com include:_spf.mlsend.com -all

strict (-all)

DMARC

v=DMARC1; p=none; sp=none; pct=100; fo=1; rua=mailto:reports-dmarc@joopbox.com; ruf=mailto:reports-dmarc-forensic@joopbox.com

policy: none (monitoring only) · sp=none

DKIM

• selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNE+5xuC1rjBoD3UhdzRGH6rxPr/Wd8dOZm79UFnsVMmlkTR+sK8pdrvQlGLqQpv++hIacCmvkHivyjHgevr…

selectors probed

Certificate (current) wrong cert

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.palmapictures.es

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Linked from (1)

• profilm.es×4