todoestaenmadrid.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 2928 ms crawled 2026-05-19

DE · 2.21.239.17 · AS20940 Akamai International B.V.

Reputation 100/100

Classifying

HTML metadata

Title

Todo está en Madrid::Todo está en Madrid

Description

Todo está en Madrid

Language

Translations

Technology

CDN: Akamai

Third-party hosts loaded (3)

ef820.efaber.net×1
play.google.com×1
tools.applemediaservices.com×1

Social

Contact

Email

establecimientos@todoestaenmadrid.com

Registration

Registrar

Acens Technologies, S.L.U.

Created

2020-09-29

Expires

2026-09-29 131 days left

Updated

2025-11-19

Name servers

a1-25.akam.net
a11-65.akam.net
a12-67.akam.net
a26-67.akam.net
a4-64.akam.net
a7-65.akam.net

DNS records live

NS

a1-25.akam.net
a11-65.akam.net
a12-67.akam.net
a26-67.akam.net
a4-64.akam.net
a7-65.akam.net

MX

0 todoestaenmadrid-com.mail.protection.outlook.com

Verified for

Google
Microsoft
Microsoft 365

Email authentication strong

SPF

v=spf1 a:mail.efaber.org include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:informesdmarc@todoestaenmadrid.com; ruf=mailto:informesdmarc@todoestaenmadrid.com; fo=1

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6RIomUQt8Gltaf8sxcDEE61OUMoq48R50uxur7JvMu3EAqb3IqjN/FdqIPImTfb6qoAX05myagGs+…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HN56/MPBnvKSAV2XsL1j6W73kQ8hFeRQJObztjw64c+6d53WRPLFQ+fdYqnX8UJM1Vnt3pcAVwsWp…

selectors probed

Certificate (current)

R12

from 2026-04-28 to 2026-07-27

Expires in 68 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://todoestaenmadrid.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'unsafe-inline'; style-src 'self' https: 'unsafe-inline'; connect-src 'self' http: ws: https:
strict-transport-security: max-age=15768000
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin