superbock.pt

.pt crawl

First seen 2026-05-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 13149 ms crawled 2026-05-18

NL · 20.8.76.248 · AS8075 Microsoft Corporation

Reputation 94/100 dmarc monitor-only

sector food type homepage

HTML metadata

Title: Super Bock - Sabor Autêntico
Description: Há sabores que ficam para sempre. A cerveja Super Bock acompanha momentos, cria memórias e celebra o que te une aos teus.
Language: pt-PT

Open Graph

title: Super Bock - Sabor Autêntico
description: Há sabores que ficam para sempre. A cerveja Super Bock acompanha momentos, cria memórias e celebra o que te une aos teus.

Technology

CMS: Nuxt

Social

DNS records live

NS

lana.ns.cloudflare.com
sean.ns.cloudflare.com

MX

0 superbock-pt.mail.protection.outlook.com

TXT

MS=ms13843822
brevo-code:58a7c55dfd87ffab42859f8b52fe6b43

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

policy: none (monitoring only)

DKIM

mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-11-28 to 2026-11-29

Expires in 194 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.superbock.pt/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()
x-content-type-options: nosniff
content-security-policy: base-uri 'self'; font-src 'self' https://*.typekit.net; form-action 'self'; frame-ancestors 'self' https://www.google.com/; img-src 'self' data: https://*.cookielaw.org https://*.ytimg.com/ https://*.googletagmanager.com https://*.google.pt https://*.google.com https://*.facebook.com https://*.superbock.pt; object-src 'none'; script-src-attr 'none'; style-src 'self' 'strict-dynamic' 'unsafe-inline' https://*.typekit.net; script-src 'self' 'strict-dynamic' 'nonce-3mhOu0Z/PLfBUnxdYpyBq3lO' 'sha256-hbzNx5PASlAPrSyQhVskU9qXlIum8XhSaey8kKfZmP4=' https://*.googletagmanager.com https://*.cookielaw.org https://*.youtube.com https://*.ytimg.com; upgrade-insecure-requests; default-src 'self'; connect-src 'self' https://*.cookielaw.org https://*.google.com https://*.google.pt https://*.google-analytics.com https://*.youtube.com https://*.onetrust.com https://*.doubleclick.net https://*.tiktok.net https://*.tiktok.com https://*.superbock.pt https://f6-hosting-superbock-api.azurewebsites.net https:
strict-transport-security: max-age=15552000; includeSubDomains
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-site