transdev.pt

HTML metadata

Technology

Server

nginx

CMS

Drupal

Analytics

• Google Analytics

Ads

• Google Ads (DoubleClick)

Fonts

• Google Fonts

Third-party hosts loaded (5)

• fonts.googleapis.com×2
• fonts.gstatic.com×2
• stats.g.doubleclick.net×2
• www.google-analytics.com×2
• www.facebook.com×1

Social

• facebook
• instagram
• linkedin
• youtube

DNS records live

NS

• ns-a1.vodafone.pt
• ns-a2.vodafone.pt
• ns-b1.vodafone.pt
• ns-b2.vodafone.pt
• ns.transdev.pt

MX

• 10 transdev-pt.mail.protection.outlook.com

TXT

• ibmid=8e20d893-24d5-447d-a483-5fb07f726941

Verified for

• Dynamics 365
• Microsoft 365

Email authentication strong

SPF

v=spf1 include:amazonses.com include:servers.mcsv.net include:_spf.salesforce.com include:ab.sendgrid.net include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; fo=1; rua=mailto:transdev.rua@emailsecurity.merox.io; ruf=mailto:transdev.ruf@emailsecurity.merox.io, mailto:postmaster@transdev.pt

policy: quarantine

DKIM

Show 6 DKIM selectors

• default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kYoGdiTh4C1CRL4pCrBslZv3evAmfqR2j7fZXjyzp10Ey723ywEUhYhNVTst0leuauCDeoisCPpIG…
• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjGD8TqirKH9leCPq0OCiR2O8SISmjl4So6lQNOgVA6sXQN+sm4YckuskOBFyRMjC8Rg8TeSZeYBRm…
• selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrDBap74YbFr9xoWCDXRh9JpT6NTpuio464GgXOH/oTcseesvNGDqI4SNUBdTpyvRZxieSPBM/teHw…
• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsorPvfn0JnVfTJzn7SsHE93lpMuw9whb1vEJuFy8lX3cCJFMp7oKwYLL04RxPnuxccIscUqTrlJ10mjcWb…
• s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqtUbaHPha3HaL2j+/tmOZBwvIAOoZXuN88S9P146amW+7cabvt65IyQ2GbOxbecVnh5VBsTSHxTWIi9/hjU7Hmy…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://www.transdev.pt/

present

• x-frame-options

findings

• missing HSTS
• missing Content Security Policy
• weak frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (17)

• aveirobus.pt×1
• avemobilidade.pt×1
• barcelos.pt×1
• card4b.pt×1
• cimcavado.pt×1
• covilhamobilidade.pt×1
• facebook.com×1
• instagram.com×1
• linkedin.com×1
• livroreclamacoes.pt×1
• mobiave.pt×1
• mobiviseudaolafoes.pt×1
• nilopartners.pt×1
• rede-expressos.pt×1
• sentidocomum.pt×1
• unirmobilidade.pt×1
• youtube.com×1

Linked from (2)

• aveirobus.pt×1
• transdev.com×1