indexo.dev

viajescolsubsidio.com

.com crawl

First seen 2026-05-15 · Last seen 2026-05-20 · ok HTTP/1.1 200 3313 ms crawled 2026-05-20

US · 34.237.155.98 · AS14618 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Hoteles económicos y planes turísticos | Viajes Colsubsidio
Description
Descubre los mejores planes turísticos. Aprovecha tarifas preferenciales para afiliados. ¡Tu destino soñado con el respaldo de Colsubsidio!
Language
es-ES

Technology

jQuery
1.3.2 known XSS (<3.5)
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts
Third-party hosts loaded (9)
  • d14xsmsn4vzz2n.cloudfront.net×6
  • dnnprod.s3.amazonaws.com×2
  • fonts.googleapis.com×2
  • cdnjs.cloudflare.com×1
  • code.iconify.design×1
  • fonts.gstatic.com×1
  • static.placetopay.com×1
  • www.facebook.com×1
  • www.googletagmanager.com×1

Social

Contact

Phone

Registration

Registrar
Hello Internet Corp
Created
2021-04-19
Expires
2028-04-19 699 days left
Updated
2026-04-07
Name servers
  • nameserver01.mi.com.co
  • nameserver02.mi.com.co
  • nameserver03.mi.com.co
  • nameserver04.mi.com.co

DNS records live

NS
  • nameserver01.mi.com.co
  • nameserver02.mi.com.co
  • nameserver03.mi.com.co
  • nameserver04.mi.com.co

Email authentication no MX

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-05-12 to 2026-08-10
Expires in 82 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.viajescolsubsidio.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
same-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(), microphone=(), camera=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)
x-content-type-options
nosniff
content-security-policy
default-src 'self' https: localhost:* 'unsafe-inline' 'unsafe-eval'; img-src * data:; media-src * data:; connect-src https: wss:;
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (9)

Linked from (1)