iefp.pt
HTML metadata
Technology
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- www.google.com×1
- www.googletagmanager.com×1
Social
DNS records live
- NS
-
- ns1-02.azure-dns.com
- ns2-02.azure-dns.net
- ns3-02.azure-dns.org
- ns4-02.azure-dns.info
- MX
-
- 10 iefp-pt.mail.protection.outlook.com
- TXT
-
Show 8 TXT records
adobe-idp-site-verification=845176ec7e237c4a932ada0910b09ebeec7a3a4041d99f9b2ce1c81c4e0cfc32google-site-verification=S6E2hxBhb3aBcY0cIqsuSf9Srbhm_AkwYysY2C5YoMAgoogle-site-verification=OyxY1afPkM2-t0GHLF06qrDuzJc0XlS7h0YkQFpZXqYd16tmz6szryzhsj05ll4jr3cl4vqzncs_n4f6b4f59vxxp6cmyu786bq4gnlekd4adobe-idp-site-verification=b718a4a4b65f8921ecacc4c25e1ba74ae928e140623f588a33a7692942749a2amsfpkey=1r1wsc82lkfl1d2kptjlmrczf_4lu78usdyxk29ygy2eh085cxkrxiofr
Email authentication strong
- SPF
-
v=spf1 a mx ip4:213.205.70.13 ip4:213.205.70.12 include:spf.protection.outlook.com include:_spf.kmitd.com -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:2b70e42b@in.mailhardener.com,mailto:dmarc_agg@vali.email; ruf=mailto:2b70e42b@in.mailhardener.com,mailto:dmarc@iefp.pt; adkim=s; aspf=spolicy: reject (enforced) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYiFBvZylxS3mK2AWgF146OreCtP4NPJpaPmwremCUIJ8enSk5GnkzHayWO3/GZtv2mJgAkRP4pL1pIELX6i… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RHky99QTApDWeqKZzJJuvAANScN8aBwe3o/fPnRl4vO8vKlYgOudYSJsPEeLB81yLj17GuNNeHFsu…
selectors probed - selector1:
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 297 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- weak content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff;- content-security-policy
default-src 'self' blob: *.iefp.pt iefp.pt; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.iefp.pt *.linkedin.com www.googletagmanager.com *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.facebook.net *.twitter.com s.ytimg.com *.openstreetmap.org h5p.org *.youtube.com; img-src 'self' 'unsafe-inline' data: www.w3.org *.iefp.pt iefp.pt lh3.googleusercontent.com i.ytimg.com *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.facebook.net *.twitter.com *.openstreetmap.org clients-liveguide01eu.netop.com liveguide01eu.netop.com lg-eu-files.s3.amazonaws.com h5p.org; style-src 'self' 'unsafe-inline' *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.facebook.net *.twitter.com *.bootstrapcdn.com; font-src 'self' 'unsafe-inline' data: *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.facebook.net *.twitter.com *.bootstrapcdn.com; frame-src 'self' *.iefp.pt *.youtube.com *.google.com *.googleapis.com *.gstatic.com- strict-transport-security
max-age=31536000; includeSubDomains; preload; always;