pulidores.eu

HTML metadata

Technology

Server

nginx

PHP

5.6.40 end of life

jQuery

3.3.1 known XSS (<3.5)

Fonts

• Google Fonts

Third-party hosts loaded (4)

• ajax.googleapis.com×1
• fonts.googleapis.com×1
• www.facebook.com×1
• www.google.com×1

Social

• facebook
• twitter
• instagram
• youtube

Contact

Email

• info@pulidores.eu

DNS records live

NS

• ns1.idwebserver.com.pulidores.eu
• ns2.idwebserver.com.pulidores.eu

MX

• 10 mail.pulidores.eu

Email authentication strong

SPF

v=spf1 a mx a:server97.idweb.es -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc@pulidores.eu; ruf=mailto:dmarc@pulidores.eu; pct=100; sp=reject

policy: reject (enforced) · sp=reject

DKIM

• default: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC5GhsLyKZ5uyizMHJBZ19YWV89O9rzMcj+sm/eoHjSrkXBtQSBF9cbvw9/t3wiZK8SbHzOc+eC4ZxC1s8MFu…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://pulidores.eu/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (32)

• abrasivosaguila.com×3
• abrasivosalicante.com×3
• abrasivoselche.es×3
• abrasivosnovelda.com×3
• barlesa.com×3
• blastrac.es×3
• blogspot.com.es×3
• bonastre-system.com×3
• bordadiamant.com×3
• cimaser.com×3
• comercial-lozano.com×3
• coorkleever.com×3
• facebook.com×3
• foroactivo.com×3
• gscle.com×3
• husqvarnacp.com×3
• idweb.es×3
• instagram.com×3
• kimrock.es×3
• mapulim.com×3
• masquemaquinas.com×3
• mitramiss.gob.es×3
• morteroshenares.com×3
• mrhelper.es×3
• neoquim.com×3
• quimicasnovelda.com×3
• simpardiamant.com×3
• tecnan-nanomat.es×3
• tiendadeproductosdelimpieza.com×3
• twitter.com×3
• viudezpuerta.com×3
• youtube.com×3

Linked from (1)

• construmat.com×3