wdreams.com

.com crawl dns

First seen 2026-04-23 · Last seen 2026-05-20 · ok HTTP/1.1 200 8879 ms crawled 2026-05-17

FR · 54.38.246.252 · AS16276 OVH SAS

Reputation 100/100

Classifying

HTML metadata

Title: Diseño web y software a medida en Huesca
Description: WebDreams es una empresa tecnológica con amplia experiencia en el sector. Desde sencillos diseños webs hasta creación y gestión de sistemas de Tarjeta Ciudadana, todo es posible.

Technology

Server: Microsoft-IIS

Fonts

Google Fonts

Third-party hosts loaded (2)

ajax.googleapis.com×2
fonts.googleapis.com×1

Social

Contact

Email

Registration

Registrar

Nominalia Internet SL

Created

2000-06-14

Expires

2026-06-14 24 days left

Updated

2025-06-15

Name servers

ns1.e-osca.com
ns2.e-osca.com
ns3.e-osca.com

DNS records live

NS

ns1.e-osca.com
ns2.e-osca.com
ns3.e-osca.com

MX

10 de0f1129.21.ik2.com
20 de0f1129.22.ik2.io

Email authentication strong

SPF: v=spf1 include:spf.ipzmarketing.com ip4:82.223.79.216 ip4:82.223.74.208 ip4:82.223.135.132 ip4:193.238.52.38 ip4:23.88.107.2 -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; rua=mailto:sistemas@wdreams.com; ruf=mailto:sistemas@wdreams.com; sp=quarantine
policy: quarantine · sp=quarantine
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-05-13 to 2026-08-11

Expires in 83 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.wdreams.com

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=*
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.googleapis.com *.sharethis.com *.google-analytics.com *.google.com *.googletagmanager.com *.gstatic.com; style-src 'unsafe-inline' 'self' *.googleapis.com *.sharethis.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://l.sharethis.com https://region1.google-analytics.com https://www.google-analytics.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://ws.sharethis.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com; img-src 'self' https://ws.sharethis.com; manifest-src 'self'; media-src 'self';
strict-transport-security: max-age=2592000