tbwa.es

.es crawl

First seen 2026-04-14 · Last seen 2026-05-16 · ok HTTP/1.1 200 567 ms crawled 2026-05-07

DE · 184.86.103.202 · AS20940 Akamai International B.V.

Reputation 100/100

sector other type homepage

HTML metadata

Title: TBWA\España - The Disruption® Company - Una empresa del grupo Omnicom
Language: en

Open Graph

url: https://tbwa.es/
name: TBWA\España - The Disruption® Company
title: TBWA España - The Disruption® Company
description: Creamos ideas que impulsan el crecimiento de tu negocio.¿Cómo te podemos ayudar?

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

DNS records live

NS

pdns82.ultradns.biz
pdns82.ultradns.com
pdns82.ultradns.net
pdns82.ultradns.org

Email authentication no MX

SPF

v=spf1 -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:rc7yjbis@ag.us.dmarcian.com;

policy: reject (enforced)

DKIM

Show 12 DKIM selectors

default: v=DKIM1; p=
google: v=DKIM1; p=
selector1: v=DKIM1; p=
selector2: v=DKIM1; p=
k1: v=DKIM1; p=
k2: v=DKIM1; p=
mail: v=DKIM1; p=
dkim: v=DKIM1; p=
s1: v=DKIM1; p=
s2: v=DKIM1; p=
mxvault: v=DKIM1; p=
smtpapi: v=DKIM1; p=

selectors probed

Certificate (current)

from 2026-03-13 to 2026-06-11

Expires in 22 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://tbwa.es/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' *.tbwa.es *.googleapis.com *.google-analytics.com *.youtube.com *.gstatic.com *.googletagmanager.com *.vimeo.com;font-src 'self' https://fonts.gstatic.com;frame-src 'self';img-src 'self' *.google-analytics.com;manifest-src 'self';media-src 'self';
strict-transport-security: max-age=86400