quimacova.org

HTML metadata

Title: QUIMACOVA | Home
Description: desc

Open Graph

url: https://quimacova.org//
title: QUIMACOVA | Home
site name: QUIMACOVA
description: desc

Technology

Server: Apache

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (3)

fonts.googleapis.com×2
cdn.jsdelivr.net×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

Registration

Registrar

Soluciones Corporativas IP, SL

Created

2004-06-02

Expires

2026-06-02 13 days left

Updated

2025-05-31

Name servers

ns1.nunsys.com
ns2.nunsys.com

DNS records live

NS

ns1.nunsys.com
ns2.nunsys.com

MX

0 quimacova-org.mail.protection.outlook.com

TXT

MS=ms92601821

Email authentication strong

SPF

v=spf1 ip4:185.5.236.0/23 include:em1964.quimacova.org include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:ysunodae@ag.eu.dmarcadvisor.com; ruf=mailto:ysunodae@fr.eu.dmarcadvisor.com;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Draamqx5jofEQzreAMDgF0tpMGGetsUVA6EGVDziSTAO7tIRHU6C7WKryHferplo49+Sdmui3pmpC…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6huSFWzMACayV5VXfRgHFwgsU6/GGWE0+BRDiQhBjvVImOxrxbO76xb4eXjAwt6n6RG2tLG18s3ZBLcUP…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC++JMGpA8noZ76CPjvbNYCRDHLgr6R+i/Xp0JYmqO1nJuhBOlVRIghMgsSiNaqk/kaVViqPweiVuyUOVWsXN+Plq…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-02-03 to 2027-03-06

Expires in 290 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://quimacova.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY, SAMEORIGIN
permissions-policy: geolocation=(self), camera=(), microphone=(), geolocation=(), payment=()
x-content-type-options: nosniff, nosniff
content-security-policy: connect-src 'self' cdn.linearicons.com www.google-analytics.com maps.googleapis.com region1.google-analytics.com;default-src 'self' www.google-analytics.com maps.googleapis.com maps.gstatic.com;frame-ancestors 'self' ;font-src 'self' fonts.gstatic.com static.tacdn.com kit-free.fontawesome.com;frame-src 'self' www.google.com www.youtube.com p.travelsmarter.net;media-src 'self' *.example.com;img-src 'self' www.quimacova.org placehold.co image.ibb.co i.ibb.co www.google-analytics.com chart.apis.google.com maps.googleapis.com maps.gstatic.com data: validacion.prodat.es;object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' unpkg.com www.google-analytics.com www.google.com maps.googleapis.com www.gstatic.com googletagmanager.com youtube.com s.ytimg.com www.googletagmanager.com code.jquery.com cdn.jsdelivr.net www.googleapis.com validacion.prodat.es www.jscache.com cdn.datatables.net cdn.linearicons.com kit.fontawesome.com forms.hsforms.com;style-src 'self' 'unsafe-inline' kit-fr
strict-transport-security: max-age=63072000