viajerospiratas.es

.es crawl

First seen 2026-04-14 · Last seen 2026-05-08 · ok HTTP/1.1 200 3843 ms crawled 2026-05-08

US · 104.26.8.133 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: ViajerosPiratas | Ofertas de Viajes, Vuelos, Hoteles y más
Description: Ofertas de viajes baratos, vuelos, vuelos más hotel y hoteles sin tener que buscar en cientos de webs. Vuelos low cost, vacaciones y más
Language: es
Canonical: https://www.viajerospiratas.es/

Open Graph

url: https://www.viajerospiratas.es
title: ViajerosPiratas | Ofertas de Viajes, Vuelos, Hoteles y más
locale: es_ES
site name: ViajerosPiratas
description: Ofertas de viajes baratos, vuelos, vuelos más hotel y hoteles sin tener que buscar en cientos de webs. Vuelos low cost, vacaciones y más

Technology

CDN: Cloudflare

Third-party hosts loaded (3)

media.holidaypirates.group×46
image.urlaubspiraten.de×33
images.ctfassets.net×5

Social

DNS records live

NS

bill.ns.cloudflare.com
elaine.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Verified for

Google
Meta

Email authentication strong

SPF

v=spf1 a mx ip4:144.76.44.26 ip4:136.243.114.82 ip4:176.9.83.102 ip4:176.9.107.7 ip4:176.9.107.22 ip4:54.228.187.132 ip4:144.76.44.5 ip4:148.251.15.8 ip4:144.76.44.21 ip4:148.251.229.98 include:_spf.google.com include:spf.mandrillapp.com include:amazonses.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarcreports@viajerospiratas.es; pct=100; aspf=r; adkim=r;

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqym/u8Kw+x0puk3P9AdQCHh58HlYZ03YXtuD/v0/9SSw06aJI4Db4QbpYZQWg357HBdaI1P6FZiAJO…

selectors probed

Certificate (current)

WE1

from 2026-04-23 to 2026-07-22

Expires in 62 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.viajerospiratas.es

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;script-src * 'unsafe-eval' 'unsafe-inline';script-src-attr 'unsafe-inline';style-src * 'unsafe-inline';img-src * data:;font-src *;connect-src * ;manifest-src data:;frame-ancestors 'self';form-action *;base-uri 'self';object-src 'none'
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin