dhika.pt
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress 6.7.1
- PHP
- 8.1.34 end of life
- jQuery
- 3.7.1
- Analytics
-
- Google Analytics
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (7)
- cdnjs.cloudflare.com×3
- www.googletagmanager.com×2
- code.jquery.com×1
- fonts.googleapis.com×1
- fonts.gstatic.com×1
- ssl.google-analytics.com×1
- www.google.com×1
Social
Contact
DNS records live
- NS
-
- aragorn.ns.cloudflare.com
- bonnie.ns.cloudflare.com
- MX
-
- 10 mail.dhika.pt
- Verified for
-
- Meta
Email authentication partial
- SPF
-
v=spf1 include:_spf.loba.pt include:_spf.odoo.com include:eu.zcsend.net include:_spf.cloudkey.pt -allstrict (-all) - DMARC
-
v=DMARC1;p=none;policy: none (monitoring only) - DKIM
-
- default:
v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05+bCQntziR24t/fBt/0LnK/HzhzT6qVexFTqpnmDS1orb9WUcHC30AKldFRxNaOI4bSyvpld/AiJU7WlCJX8…
selectors probed - default:
Certificate (current)
WE1
Expires in 79 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
same-origin- x-frame-options
sameorigin- permissions-policy
accelerometer=(self), autoplay=(self), camera=(self), cross-origin-isolated=(self), display-capture=(self), encrypted-media=(self)- x-content-type-options
nosniff- content-security-policy
script-src 'self' https://* 'unsafe-inline' 'unsafe-eval'; default-src https://* 'unsafe-inline'; style-src https://* 'unsafe-inline' ; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com https://use.fontawesome.com https://cdnjs.cloudflare.com 'unsafe-inline' data: ; img-src https://* data:- strict-transport-security
max-age=63072000; includeSubDomains, max-age=15768000; includeSubDomains
Links to (8)
- facebook.com×1
- instagram.com×1
- linkedin.com×1
- loba.com×1
- santarembasket.pt×1
- threads.net×1
- tiktok.com×1
- x.com×1