epcol.pt
HTML metadata
Technology
- Server
- Microsoft-IIS
- ASP.NET
- 4.0.30319
- jQuery
- 1.9.1 known XSS (<3.5)
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (3)
- ajax.googleapis.com×1
- fonts.googleapis.com×1
- www.googletagmanager.com×1
Social
Contact
DNS records live
- NS
-
- ns1.amenworld.com
- ns2.amenworld.com
- MX
-
- 10 epcol-pt.mail.protection.outlook.com
- Verified for
-
- Microsoft 365
Email authentication weak
- SPF
-
v=spf1 ip4:176.9.51.12 include:spf.protection.outlook.com -allstrict (-all) - DMARC
- not published
- DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35ItfbxzYXlP4dI11ueCxr5UNoQvmaG8VxddAx5CcdOopTT1cPzKvgLTUwRYmNqq8RytvNOzN3XpYf… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW/MGUrZKTHWi3HG/0Yj0UZm/3XyrcNFabnfb3p5RiCIKQEPF4ZDFodv94PeBOTI1erwCNIiZwncCV…
selectors probed - selector1:
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 25 days
HTTP security headers
- findings
-
- missing HSTS
- missing Content Security Policy
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Links to (21)
- bp.pt×1
- cepsa.pt×1
- chane.eu×1
- clc.pt×1
- enilubes.com×1
- fuchs.com×1
- galpenergia.com×1
- lgeshowcase.eu×1
- linkedin.com×1
- moovelub.pt×1
- netmais.com.pt×1
- ozenergia.pt×1
- prioenergy.com×1
- repsol.pt×1
- rubisenergia.pt×1
- saaga.pt×1
- spinerg.com×1
- stocexpo.com×1
- total.pt×1
- x.com×1
- youtube.com×1