indexo.dev

portatour.com

.com crawl

First seen 2026-05-15 · Last seen 2026-05-20 · ok HTTP/1.1 200 11486 ms crawled 2026-05-20

DE · 93.90.202.187 · AS8560 IONOS SE

Reputation 89/100 weak security headers dmarc monitor-only

sector b2b services type homepage

HTML metadata

Title
portatour® - Your comprehensive field sales software
Description
Plan and optimize your routes and territories with the field service software of portatour®! Save time ✓ Increase efficiency ✓ Reach more customers ✓.
Language
en
Canonical
https://www.portatour.com/en
Translations
  • de
  • es
  • fr
  • it
  • pt

Open Graph

url
https://www.portatour.com/en?ptinref=eyJ1cmwiOiJodHRwczpcL1wvcG9ydGF0b3VyLmNvbSIsInQiOiIyMDI2LTA1LTIwIDEzOjU3OjI5LDQxODE4NyJ9
title
portatour® - Your comprehensive field sales software

Technology

Server
Apache
Analytics
  • Google Analytics
Cookie consent
  • Usercentrics

Third-party hosts loaded (2)

  • www.google-analytics.com×2
  • web.cmp.usercentrics.eu×1

Social

Contact

Phone

Registration

Registrar
World4You Internet Services GmbH
Created
2011-05-11
Expires
2027-05-11 355 days left
Updated
2026-05-12
Name servers
  • ns1.world4you.at
  • ns2.world4you.at

DNS records live

NS
  • ns1.world4you.at
  • ns2.world4you.at
MX
  • 10 mail.portatour.com
  • 5 portatour-com.mail.protection.outlook.com
TXT
  • atlassian-sending-domain-verification=01c8af77-8630-460b-a552-65ffeb86a84b
Verified for
  • Anthropic
  • Atlassian
  • Google

Email authentication partial

SPF
v=spf1 mx include:spf.w4ymail.at include:spf.mailjet.com include:spf.mandrillapp.com include:spf.protection.outlook.com include:_spf.psm.knowbe4.com -all
strict (-all)
DMARC
v=DMARC1; p=none; ruf=mailto:dmarc-ruf@portatour.com; rua=mailto:dmarc-rua@portatour.com
policy: none (monitoring only)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1cfntJwHuamE72Dbod2SEh+rGjvUCxDVV08YQYyhr/PM+j7b739iA8w8CtPXN0RvUiyOjrfCNQQVN…
selectors probed

Certificate (current)

R12
from 2026-05-15 to 2026-08-13
Expires in 85 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.portatour.com/en?ptinref=eyJ1cmwiOiJodHRwczpcL1wvcG9ydGF0b3VyLmNvbSIsInQiOiIyMDI2LTA1LTIwIDEzOjU3OjI5LDQxODE4NyJ9

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self' www.portatour.com cdn.portatour.com my.portatour.net *.zendesk.com wss://*.zendesk.com *.zdassets.com *.zopim.com wss://*.zopim.com zendesk-eu.my.sentry.io; form-action 'self' www.portatour.com cdn.portatour.com my.portatour.net *.google-analytics.com *.googletagmanager.com www.bing.com platform.linkedin.com *.mollie.com 'self' www.portatour.com cdn.portatour.com my.portatour.net *.zendesk.com wss://*.zendesk.com *.zdassets.com *.zopim.com wss://*.zopim.com zendesk-eu.my.sentry.io; script-src 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' 'wasm-unsafe-eval' *.usercentrics.eu *.google-analytics.com *.googletagmanager.com tagmanager.google.com www.gstatic.com *.google.com www.bing.com platform.linkedin.com www.linkedin.com www.youtube-nocookie.com www.youtube.com 'self' www.portatour.com cdn.portatour.com my.portatour.net *.zendesk.com wss://*.zendesk.com *.zdassets.com *.zopim.com wss://*.zopim.com zendesk-eu.my.sentry.io; style-src 'unsafe-inline' 'unsafe-hashes' data

Links to (4)

Linked from (2)