Domain Risk HeatMap

frutasalomar.es

9/22/2026, 8:41:24 AM

3/10 tests performed · 7 failed · 7 issues reported
Critical 3High 2Low 2
Not detectedMissing step
drag, scroll, click a node

Indicators

Restricted information

Some findings are hidden in this public report because they may include technical details that could facilitate abuse, competitor action, or unnecessary security and reputational exposure. Verify domain ownership to unlock the full report.

Critical

Details are protected until domain ownership is verified to avoid exposing sensitive technical information publicly

Critical

Details are protected until domain ownership is verified to avoid exposing sensitive technical information publicly

Critical

Details are protected until domain ownership is verified to avoid exposing sensitive technical information publicly

High

Details are protected until domain ownership is verified to avoid exposing sensitive technical information publicly

High

Details are protected until domain ownership is verified to avoid exposing sensitive technical information publicly

Low

domain-profile › El dominio publica SPF, pero la política es permisiva o incompleta

Hay SPF, pero tal como está autoriza más de lo debido o no cubre a todos tus remitentes.

DomainEmailDNS
Solution:

Revisa y ajusta el registro SPF:

  • Incluye todos los servicios legítimos que envían tu correo.
  • Elimina mecanismos obsoletos o duplicados.
  • Evita +all y ?all; usa ~all durante la transición y -all al terminar.
  • Mantente por debajo del límite de 10 consultas DNS.
Low

dns-email-reputation › An SPF record is present, but the policy is weak or may not provide effective sender authorization: No final "all" mechanism

The domain has some email authentication in place, but the current SPF policy may still allow poorly controlled or unauthorized sending patterns. This can reduce trust with email providers and quietly affect newsletters, sales outreach and transactional communications.

DomainEmailDNS
Solution:

Review and harden the SPF configuration:

  • Confirm that all legitimate sending services are included in the SPF record.
  • Remove obsolete, duplicated or unnecessary include, a, mx or ip4/ip6 mechanisms.
  • Avoid permissive mechanisms such as +all or ?all.
  • Prefer a controlled policy ending in ~all during transition and -all once all senders are verified.
  • Keep the SPF record within the DNS lookup limit of 10.
  • Validate the final record with an SPF syntax checker before publishing.
Info

dns-email-reputation › No validated DNSSEC delegation was found for the domain: No DS records in the parent zone

DNS responses for this domain cannot be cryptographically validated, leaving some exposure to DNS spoofing or cache poisoning in vulnerable network paths. This is a common configuration across the web and is rarely a critical issue on its own, but enabling DNSSEC adds a meaningful layer of trust for domains handling logins or sensitive customer data.

DomainDNS
Solution:

Enable DNSSEC signing for the domain.

Recommended technical actions:

  1. Confirm DNSSEC support with the current DNS hosting provider or registrar.
  2. Enable DNSSEC signing on the authoritative DNS zone.
  3. Publish the resulting DS record with the domain registrar so the parent zone can delegate trust.
  4. Verify propagation and validate the chain of trust with an external DNSSEC validation tool.
  5. Monitor key rotation schedules if the provider does not automate them.

What to do now?

Choose the option that best fits your situation.

Free

Fix it in-house

Ideal if you have a developer, agency, or technical team available.

  • Prioritised action plan.
  • Explanation of each issue.
  • Step-by-step remediation guide.

Free access for verified domain owners: Verify ownership with an email from this domain to unlock the protected findings, technical evidence, and remediation guide.

Verify domain & unlock full report
Recommended

Request an advanced audit

Recommended if the site generates significant revenue or you need complete information to decide.

  • Manually verifies all findings.
  • Rules out false positives.
  • Analyses configurations that cannot be checked automatically.
  • Evaluates platform-specific risks (Shopify, WooCommerce, PrestaShop, Magento…).
  • Prioritises issues by business impact.
  • Delivers an executive report and remediation plan.
We can also implement fixes or coordinate them with your provider.
15 min

Not sure what to do?

Request a 15-minute review where we will analyse your audit results and tell you:

  • Which issues are genuinely important.
  • Which ones can wait.
  • Which are likely false positives.
  • The most cost-effective way to resolve them.

What is behind this report?

Built to detect the kind of issues that silently affect sales, trust, checkout confidence, campaign performance, and operational continuity.

  • A system designed to prevent your website and digital marketing from failing.
  • A team with over 25 years of experience building digital projects for businesses.
  • Thousands of automated audits run during platform training and validation.
  • Dozens of technical indicators analysed on every execution.
  • Multiple data sources combined — DNS, TLS, HTTP, performance, reputation, email, legal compliance, SEO, and more.
  • AI specialised in interpreting business impact, not just technical results.

About this audit

This report is provided for informational and prioritisation purposes only. It reflects automated observations obtained from publicly available information at the time of analysis. The findings are not definitive proof of a vulnerability, legal breach, security incident, performance failure, reputational damage, or business loss. They highlight indicators that may deserve review because improving them can help reduce exposure, strengthen digital operations, and support customer trust. Risk estimates are decision-support indicators, not predictions of specific events. Automated analysis cannot verify every technical, legal, operational, or business context. Expert review may be required to validate results, rule out false positives, and determine actual impact before making significant remediation or compliance decisions.