weleda.es

HTML metadata

Title

Cosmética Natural, Ecológica y BIO de Weleda - Weleda

Description

Cosmética Natural Certificada para toda la familia. Descubre los mejores cosméticos con ingredientes 100% naturales, ecológicos, BIO y sostenibles.

Language

es-ES

Canonical

https://www.weleda.es

Translations

de ×3
fr ×3
en ×2
nl ×2
es
it

Open Graph

url: https://www.weleda.es
title: Cosmética Natural, Ecológica y BIO de Weleda - Weleda
site name: Weleda
description: Cosmética Natural Certificada para toda la familia. Descubre los mejores cosméticos con ingredientes 100% naturales, ecológicos, BIO y sostenibles.

Technology

CDN: Amazon CloudFront
CMS: Nuxt

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (14)

assets.weleda.com×9
cdn.cookielaw.org×2
www.googletagmanager.com×2
www.weleda.be×2
www.weleda.ch×2
gb.preview.ecom.weleda.com×1
www.google.com×1
www.gstatic.com×1
www.weleda.at×1
www.weleda.com×1
www.weleda.de×1
www.weleda.fr×1
www.weleda.it×1
www.weleda.nl×1

Social

Contact

Address: Manuel Tovar 1 – 6pl, 28034, Madrid, Madrid, ES

DNS records live

NS

ns1.brandshelter.com
ns2.brandshelter.de
ns3.brandshelter.info
ns4.brandshelter.net
ns5.brandshelter.us

MX

0 weleda-es.mail.protection.outlook.com

Verified for

Apple
Google
Meta
Microsoft 365
Pinterest

Email authentication partial

SPF: v=spf1 mx a ptr ip4:88.198.221.123 ip4:195.81.34.89 ip4:23.103.224.0/19 ip4:206.191.224.0/19 ip4:40.103.0.0/16 ip4:18.153.184.0/27 ip6:2a05:d014:b6d:df06::1000/124 include:spf.protection.outlook.com include:mad.weleda.es include:spf.ipzmarketing.com include:spf.sosafe.de -all
strict (-all)
DMARC: v=DMARC1; p=none;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-04-03 to 2026-07-02

Expires in 43 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.weleda.es/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), display-capture=(), fullscreen=('self' https://*.youtube.com), geolocation=(), microphone=()
x-content-type-options: nosniff
content-security-policy: base-uri 'none'; font-src 'self' data: https://fonts.gstatic.com https://applepay.cdn-apple.com https://cdn.mouseflow.com; form-action 'self' https://*.adyen.com https://www.facebook.com; frame-ancestors 'self' https://*.weleda.bloomreach.cloud; img-src 'self' data: https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin