plusultra.com
HTML metadata
Technology
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- fonts.googleapis.com×2
- js.hs-scripts.com×1
- js.hscta.net×1
- try.abtasty.com×1
Social
Registration
- Registrar
- Realtime Register B.V.
- Created
- 2002-05-13
- Expires
- 2029-05-13 1089 days left
- Updated
- 2026-04-15
- Name servers
-
- ps1.hostinet.com
- ps2.hostinet.com
DNS records live
- NS
-
- ps1.hostinet.com
- ps2.hostinet.com
- MX
-
- 10 plusultra-com.mail.protection.outlook.com
- TXT
-
google-site-verification=nirieVjKvIToYA1ZeWF3mAUjxH4NnvV2ydZJsijmrHA
Email authentication partial
- SPF
-
v=spf1 include:spf.protection.outlook.com include:servers.mcsv.net ip4:213.39.59.7 ip4:213.39.59.25 ip4:195.81.194.28 ip4:195.81.194.236 ip4:52.212.19.177 ip4:52.17.62.50 -allstrict (-all) - DMARC
-
v=DMARC1; p=none; rua=mailto:j.cuellar@plusultra.compolicy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IGZ3vCFDF5zBbbPkXbLX9/GSu45JjgWhaszp4dO008qolyUqWjXYQ2mvMjfsDqLTP+4BI8yo8AeBB… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqURsJIVpe47kbvEpq3go811PPJc9dtQVSoJmT8xdsjc03ca+M4BSnP2+SWGzKmjsePkFwsNnVhkew5… - k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
selectors probed - selector1:
Certificate (current)
Don Dominio RSA DV SSL CA 2
Expires in 166 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
camera=(), microphone=(), geolocation=(self), payment=(self), fullscreen=(self)- x-content-type-options
nosniff- content-security-policy
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; script-src * 'unsafe-inline' 'unsafe-eval' blob: data:; style-src * 'unsafe-inline' blob: data:; img-src * data: blob:; font-src * data:; media-src *; connect-src *; manifest-src *; worker-src * blob:; frame-src *;- strict-transport-security
max-age=16000000; includeSubDomains; preload;