sumicol.com.co

.co crawl

First seen 2026-04-23 · Last seen 2026-05-17 · ok HTTP/1.1 200 22735 ms crawled 2026-05-17

US · 20.246.5.85 · AS8075 Microsoft Corporation

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title

Sumicol

Language

es-CO

Generator

WordPress 6.9.4

Canonical

https://www.sumicol.com.co/

Feeds

Technology

Server: Apache
CMS: WordPress

Third-party hosts loaded (2)

maxcdn.bootstrapcdn.com×5
gmpg.org×1

Social

Contact

Phone

2024-08-29 02

DNS records live

NS

ns55.domaincontrol.com
ns56.domaincontrol.com

MX

200 ns01.sumicol.com.co
298 ns02.sumicol.com.co

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2026-01-28 to 2027-02-19

Expires in 277 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.sumicol.com.co/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), gamepad=(), serial=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; img-src data: *; media-src * data:; script-src 'unsafe-inline' *; object-src *; base-uri 'self'; style-src 'self' 'unsafe-inline' https://www.gstatic.com/ https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com/ https://cdnjs.cloudflare.com/; font-src 'self' data: https://fonts.gstatic.com/ https://maxcdn.bootstrapcdn.com/ https://cdnjs.cloudflare.com/; frame-src 'self' https://www.youtube.com/; connect-src 'self' https://translate.googleapis.com/ https://maps.googleapis.com/;
strict-transport-security: max-age=31536000; includeSubDomains; preload