portgas.pt
HTML metadata
Technology
- Server
- Microsoft-IIS
- jQuery
- 3.0.0 known XSS (<3.5)
- Analytics
-
- Google Tag Manager
- Cookie consent
-
- Cookiebot
Third-party hosts loaded (7)
- ajax.aspnetcdn.com×3
- cdn-eu.readspeaker.com×1
- consent.cookiebot.com×1
- maps.googleapis.com×1
- unpkg.com×1
- www.google.com×1
- www.googletagmanager.com×1
Social
Contact
DNS records live
- NS
-
- ns1.portgas.pt
- ns2.portgas.pt
- MX
-
- 10 mail1.portgas.pt
- 10 mail2.portgas.pt
- 10 mail3.portgas.pt
- TXT
-
_21zdjcvo8mt60pi2jqblq03o91hox6yuvuP3ncbzT7UD+5iraO0R2vuhCejKadrKtYboho34bjg0eddK2jmlnEHATMip8sHtCNfuSLDOlBcxCJrQjHFsw==autodesk-domain-verification=wcBJf5HqAXnRvkQxQbEh
- Verified for
-
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 include:spf.protection.outlook.com ip4:185.165.105.44 ip4:185.165.105.46 ip4:185.165.105.36 ip4:185.165.107.36 ip4:185.165.105.37 ip4:185.165.107.37 -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:r47pww93@ag.eu.dmarcadvisor.com; ruf=mailto:r47pww93@fr.eu.dmarcadvisor.com;policy: quarantine - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlmGW4s/QMDV0kcIU1fBdx7brNpyRq/w5oFCUEu0FPkPmEUF6D6svfG+RfJ4r7DL8yFuH3YpWxZC8R…
selectors probed - selector1:
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 288 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://cdnjs.cloudflare.com https://qas-nv.portgas.pt https://ren.matomo.cloud https://cdn.matomo.cloud https://unpkg.com/@googlemaps/markerclusterer/dist/index.min.js https://www.google.com https://www.google-analytics.com https://www.youtube.com https://connect.facebook.net https://maps.googleapis.com https://fonts.gstatic.com https://www.googletagmanager.com https://ajax.aspnetcdn.com https://cdn-eu.readspeaker.com https://cdn-na.readspeaker.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://cdn.jsdelivr.net https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://gateway.zscloud.net; style-src 'self' 'unsafe-inline' https://cdn-eu.readspeaker.com https://cdn-na.readspeaker.com https://gateway.zscloud.net; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://www.google.com https://maps.googleapis.com https://fonts.gstatic.co- strict-transport-security
max-age=31536000; includeSubDomains