sporting.pt

.pt crawl

First seen 2026-05-28 · Last seen 2026-05-31 · ok HTTP/1.1 200 746 ms crawled 2026-05-31

IE · 20.166.105.115 · AS8075 Microsoft Corporation

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title

HOME | Site oficial do Sporting Clube de Portugal

Description

Bem vindo ao Site Oficial do Sporting Clube Portugal. Aqui poderá encontrar toda a informação relativa ao Clube.

Language

pt-pt

Translations

Open Graph

url: https://www.sporting.pt/
title: HOME
updated time: 2018-08-10T09:48:24+01:00

Technology

Server: Apache
CMS: Drupal
jQuery: 2.1 known XSS (<3.5)

Analytics

Google Tag Manager

Third-party hosts loaded (4)

scpconteudos.pt×153
cdnjs.cloudflare.com×2
desporto_stats.imgs.sapo.pt×1
www.googletagmanager.com×1

Social

DNS records live

NS

cass.ns.cloudflare.com
yisroel.ns.cloudflare.com

MX

10 sporting-pt.mail.protection.outlook.com

TXT

klaviyo-site-verification=TGDzrn
MS=6604B0EB4376A1900F840715163954951A3F15CC

Verified for

Microsoft 365

Email authentication partial

SPF

v=spf1 mx:mail.sporting.pt ip4:194.65.16.4 include:_spf.kmitd.com include:spf.mandrillapp.com include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:ciberseguranca@sporting.pt; ruf=mailto:ciberseguranca@sporting.pt; fo=1

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CZaQH9u1OIYNCmYBgzvVzPVXvKN2lQ/yA7DdTbn6pwvx8dGRczZUofXenqoTC27W/Q7mnN8yNhgv8…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBte9QgP7OFxjvbQvdzQ6rbZ5q7t3kKw7jeeRxUsKyWnNfx1GtN+Bse860PtVBw/hY5aFU61etsEZQ…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-08-05 to 2026-08-06

Expires in 66 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.sporting.pt/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; frame-ancestors 'self';
strict-transport-security: max-age=31536000; includeSubDomains; preload