indexo.dev

biwinevillages.com

.com crawl

First seen 2026-06-02 · Last seen 2026-06-02 · ok HTTP/1.1 200 931 ms crawled 2026-06-02

PT · 94.46.130.103 · AS24768 Almouroltec Servicos De Informatica E Internet Lda

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Beira Interior Wine Villages
Description
Explore the wine regions of Beiras and Serra da Estrela and Beira Baixa, where wine, heritage and gastronomy combine with a landscape of singular beauty.
Language
en
Canonical
https://biwinevillages.com/en

Open Graph

url
https://biwinevillages.com/en
title
Beira Interior Wine Villages
locale
en_US
site name
Beira Interior Wine Villages
description
Explore the wine regions of Beiras and Serra da Estrela and Beira Baixa, where wine, heritage and gastronomy combine with a landscape of singular beauty.

Technology

Server
Microsoft-IIS

Third-party hosts loaded (1)

  • maps.googleapis.com×1

Contact

Email
Phone

Registration

Registrar
PDR Ltd. d/b/a PublicDomainRegistry.com
Created
2024-09-16
Expires
2026-09-16 103 days left
Updated
2025-08-20
Name servers
  • ns1.bomsite.com
  • ns2.bomsite.com

DNS records live

NS
  • ns1.bomsite.com
  • ns2.bomsite.com
MX
  • 10 mx1.cleanmx.pt
  • 20 mx2.cleanmx.pt
Verified for
  • Google

Email authentication weak

SPF
v=spf1 +a +mx +ip4:94.46.175.209 include:_spf.cleanmx.pt ~all
softfail (~all)
DMARC
not published
DKIM
  • default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryjYwLVjZg3HWBu4/hVvbjTj90QxkG/Mi5srW1wi1gqzaeVVeqd2+ZrFjNEU+Yo/5YnbceGuPB3LTb…
selectors probed

Certificate (current)

R12
from 2026-04-10 to 2026-07-09
Expires in 35 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://biwinevillages.com/en

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
camera=(self), geolocation=(none), microphone=(none), fullscreen=(self), payment=(none), accelerometer=(none), ambient-light-sensor=(none), autoplay=(self), clipboard-read=(self), clipboard-write=(self), gyroscope=(none), magnetometer=(none), midi=(none), notifications=(none), push=(none), sync-xhr=(self)
x-content-type-options
nosniff
content-security-policy
default-src 'self' data: *.youtube.com *.googleapis.com *.gstatic.com *.doubleclick.net *.g.doubleclick.net *.google-analytics.com; script-src 'self' 'unsafe-inline' *.googleapis.com *.googletagmanager.com *.google-analytics.com *.google.com *.gstatic.com *.doubleclick.net *.g.doubleclick.net; style-src 'self' 'unsafe-inline' *.googleapis.com; frame-src 'self' *.google.com *.youtube.com *.doubleclick.net *.g.doubleclick.net
strict-transport-security
max-age=31536000

Links to (8)

Linked from (1)