umbelino.pt
HTML metadata
Technology
- Server
- nginx
- jQuery
- 3.7.1
- Analytics
-
- Google Analytics
- Google Tag Manager
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (6)
- www.googletagmanager.com×2
- ajax.googleapis.com×1
- px.ads.linkedin.com×1
- use.typekit.net×1
- www.facebook.com×1
- www.google-analytics.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- dns1.cscdns.net
- dns2.cscdns.net
- MX
-
- 0 umbelino-pt.mail.protection.outlook.com
- Verified for
-
- DocuSign
- Microsoft 365
- TeamViewer
Email authentication strong
- SPF
-
v=spf1 a:spf.edilians.com include:spf.protection.outlook.com include:_spf.kmitd.com -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:edilians.rua@emailsecurity.merox.io; ruf=mailto:edilians.ruf@emailsecurity.merox.iopolicy: reject (enforced) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJmuti4OlzRwtbPupHul8lBD+2+nHBf2S5DkQFn+DfrQryAKbxzdJb6xoGYoBKIbGHy2U/APWzLxEg… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjJFDBz0vKSzwwbx625emH3W24D7fpLVXRKxQRmtrJsermQR3a+YDcSE3/3RxenSPUErQPpHxw/9wn…
selectors probed - selector1:
Certificate (current)
R13
Expires in 61 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'none';media-src 'self';base-uri 'self';font-src 'self' *.typekit.net *.googleapis.com *.gstatic.com embed.tawk.to data:;img-src 'self' *.tawk.to cdn.jsdelivr.net *.googleapis.com *.youtube.com *.google-analytics.com *.gstatic.com *.google.com data: *.googletagmanager.com *.ads.linkedin.com *.facebook.com;style-src 'self' 'unsafe-inline' *.typekit.net *.googleapis.com cdn.jsdelivr.net embed.tawk.to *.px4.ads.linkedin.com;script-src 'self' 'unsafe-eval' 'nonce-4b825895943835257789ce3bf50321da' *.cloudflare.com *.ytimg.com *.unpkg.com *.youtube.com *.googleapis.com *.google.com *.cdnjs.cloudflare.com *.google-analytics.com *.gstatic.com *.googletagmanager.com *.facebook.net *.cdn.jsdelivr.net embed.tawk.to va.tawk.to *.licdn.com cdn.jsdelivr.net *.goadopt.io;frame-src 'self' *.youtube.com *.youtube-nocookie.com *.google.com *.facebook.com; form-action 'self' *.facebook.com; frame-ancestors 'self' *.google.com;connect-src 'self' wss://*.tawk.to *.google.com *.google-analytics- strict-transport-security
max-age=31536000