cm-silves.pt

HTML metadata

Technology

CMS

Joomla

jQuery

1.9.1 known XSS (<3.5)

Stack

ASP.NET

Analytics

• Google Tag Manager

Third-party hosts loaded (5)

• assets.juicer.io×2
• i.ytimg.com×1
• s7.addthis.com×1
• www.google.com×1
• www.googletagmanager.com×1

Social

• youtube
• instagram
• facebook

Contact

Email

• expediente@cm-silves.pt

Phone

• +351 282 440 800

DNS records live

NS

• ns1.dnspro.pt
• ns2.dnspro.pt
• ns3.dnspro.pt
• ns4.dnspro.pt

MX

• 5 spamfilter.cloudlink.pt

TXT

• MS=B226984EAB4D4AE97610EE1E2A75739B7D3C8FC3

Email authentication strong

SPF

v=spf1 ip4:195.23.188.179 include:spf.cloudlink.pt include:amazonses.com include:_spf.kmitd.com include:mailgun.org -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;rua=mailto:85a195a3@in.mailhardener.com,mailto:dmarc@cm-silves.pt;ruf=mailto:dmarc@cm-silves.pt;ri=86400;fo=1

policy: quarantine

DKIM

• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg1oT0E6R12g5DPu17aCC9uk2rBotdq7gnXUUZpj16F1on3aufizHUUz477TxsyGdh7q58JQTDzV54sQX9…
• s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyABMbXzEBE5mQVFp9rhNzVwjJgK8/hasG6a62M0CTRwQLKB0/ph97dbVbuhAIrFm+KEkzk5p5G5Qz+fghi…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.cm-silves.pt/pt/Default.aspx

present

• strict-transport-security
• x-frame-options
• x-content-type-options
• referrer-policy

findings

• missing Content Security Policy
• missing Permissions Policy

Links to (9)

• youtube.com×1
• w3.org×1
• livroreclamacoes.pt×1
• issuu.com×1
• instagram.com×1
• ina.pt×1
• geoparquealgarvensis.pt×1
• facebook.com×1
• autarquia360.com×1

Linked from (4)

• algarve7.pt×1
• cultalg.gov.pt×1
• padre2020.pt×1
• amal.pt×1