indexo.dev

uvesco.es

.es crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 944 ms crawled 2026-05-18

ES · 194.30.13.76 · AS3262 SAREnet, S.A.

Reputation 100/100

Classifying

HTML metadata

Title
UVESCO
Description
Uvesco se fundó en 1.993 fruto de la unión de dos empresas con larga tradición en el sector de la distribución: Unialco SL (empresa guipuzcoana creada en la década de los sesenta) y Ves SL (empresa centenaria con actividad en Cantabria).
Language
es

Technology

Server
openresty
Fonts
  • Google Fonts

Third-party hosts loaded (3)

  • www.bmsupermercados.es×4
  • fonts.googleapis.com×1
  • fonts.gstatic.com×1

DNS records live

NS
  • ns1.sarenet.es
  • ns2.sarenet.es
TXT
  • r7k0kgfh8sbn43m9nlmyrdhwhzh32pw5

Email authentication no MX

SPF
v=spf1 include:spf.mailjet.com include:spf.protection.outlook.com ip4:194.30.7.132 -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

Thawte TLS RSA CA G1
from 2026-02-09 to 2027-03-10
Expires in 294 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://uvesco.es/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self';base-uri 'self';object-src 'none';style-src 'self' 'unsafe-inline' fonts.googleapis.com;font-src 'self' fonts.gstatic.com;img-src 'self' *.bmsupermercados.es *.uvesco.es *.youtube.com maps.googleapis.com maps.gstatic.com data: *.google.es *.google.com *.google-analytics.com storage.googleapis.com maps.googleapis.com maps.gstatic.com *.ggpht.com *.googletagmanager.com *.googleapis.com;frame-src 'self' www.youtube.com *.doubleclick.net *.google.com;connect-src 'self' *.analytics.google.com *.google-analytics.com maps.googleapis.com *.doubleclick.net;script-src 'strict-dynamic' 'self' 'nonce-RUwtTk9OQ0UqJkFZQU1BNDEzNjE5OTY1' 'unsafe-inline' www.google-apis.com www.googletagmanager.com;script-src-elem 'self' 'unsafe-inline' *.googletagmanager.com *.googleadservices.com www.youtube.com *.google-analytics.com googleads.g.doubleclick.net maps.googleapis.com;frame-ancestors 'self'
strict-transport-security
max-age=63072000; includeSubDomains; preload

Links to (4)

Linked from (3)