indexo.dev

sto.es

.es crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 5268 ms crawled 2026-05-18

DE · 212.184.115.71 · AS3320 Deutsche Telekom AG

Reputation 100/100

Classifying

HTML metadata

Title
ES
Language
es

Technology

Server
nginx
Cookie consent
  • Usercentrics

Third-party hosts loaded (2)

  • static.sto-net.com×4
  • web.cmp.usercentrics.eu×1

DNS records live

NS
  • dns.sto.com
  • ns5.xc-ns.de
TXT
  • 00d2p0000012lhteaa
  • google-site-verification=AltnTJXkEwEh5OWYkwqmVaJhWudlrRrV57NV5WiPBII
  • pardot849663=79b284df6db4270d8e3686edc3dc12eb15e81e92e28c0b7b3a743b07dc10d07b

Email authentication no MX

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

E8
from 2026-05-03 to 2026-08-01
Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.sto.es/s/?language=es

present
  • strict-transport-security
  • content-security-policy
  • content-security-policy-report-only
  • x-content-type-options
findings
  • missing frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-content-type-options
nosniff
content-security-policy
upgrade-insecure-requests, frame-ancestors 'self' https://sto.e-spirit.hosting/; report-uri /_/commcsp?disposition=enforce
strict-transport-security
max-age=63072000; includeSubDomains
content-security-policy-report-only
script-src 'unsafe-inline' 'self' https://payments.salesforce.com/ https://www.googleadservices.com https://checkoutshopper-test.adyen.com/ https://www.facebook.com https://pal-test.adyen.com https://pi.pardot.com https://px.ads.linkedin.com/ https://*.usercentrics.eu https://googleads.g.doubleclick.net https://checkoutshopper-live.adyen.com/ https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/ https://connect.facebook.net https://pay.google.com https://www.gstatic.com/recaptcha/ https://uip.canary.lwc.dev https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ blob: https://sto.e-spirit.hosting https://*.licdn.com https://www.google.com/recaptcha/ https://js.stripe.com/ https://marketing.sto.es https://*.googletagmanager.com import: https://*.google-analytics.com *.salesforce.com https://www.paypal.com/sdk/js https://cdn.linkedin.oribi.io/ 'report-sample' https://service.force.com/embeddedservice/ 'unsafe-eval'; report-to sfdc-csp-ep; report-uri https://ebsone.lightning.force.com/_/ContentDom

Linked from (4)