visitcyprus.com

HTML metadata

Title

Home Page - Visit Cyprus

Language

en-US

Generator

WordPress 6.9.4

Canonical

https://www.visitcyprus.com/

Feeds

Visit Cyprus » Feed RSS
Visit Cyprus » Comments Feed RSS

Open Graph

url: https://www.visitcyprus.com/
title: Home Page - Visit Cyprus
locale: en_US
site name: Visit Cyprus
description: Cyprus Welcomes You VIEW MORE Cyprus Welcomes You VIEW MORE WELCOME TO THE CYPRUS TOURISM PORTAL Discover an island rich in history and culture, and full of wonderful experiences just […]

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Social widgets

YouTube Embed

Third-party hosts loaded (3)

www.youtube.com×4
cdn.jsdelivr.net×3
www.googletagmanager.com×3

Social

Contact

Phone

+35722691100

Address

st information:[email protected]For tourist complaints:[email protected]T: (+357) 22691

Registration

Registrar

GoDaddy.com, LLC

Created

2002-05-23

Expires

2026-05-23 2 days left

Updated

2025-05-24

Name servers

dante.ns.cloudflare.com
sharon.ns.cloudflare.com

DNS records live

NS

dante.ns.cloudflare.com
sharon.ns.cloudflare.com

MX

10 mail03.gov.cy

Verified for

Brevo
Google
Microsoft 365

Email authentication partial

SPF

v=spf1 ip4:212.31.118.0/24 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

policy: none (monitoring only)

DKIM

Show 4 DKIM selectors

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppWbioAfjfzcS4IaoCZPlek3/OqjMSdjAr1rhJjFD8z9MdWUz76L+BGsd/mrK/KAAyL9t589izfE8TIp55…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszbg1Jnb8i9Z/WrPFjRlHO6HKXuhdBJT/vQAFgUdGtuiAthWx8O6uTdninhkVBidp8iwBfJHR3KcXWiJup…

selectors probed

Certificate (current)

WE1

from 2026-03-27 to 2026-06-25

Expires in 35 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.visitcyprus.com/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
weak frame protection
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: geolocation=(), microphone=(), camera=(), geolocation=(), microphone=(), camera=()
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://s.pinimg.com https://cdn-cookieyes.com https://cdnjs.cloudflare.com https://ct.pinterest.com https://cdn.jotfor.ms https://www.youtube.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' https://secure.gravatar.com data: https://www.google.com.cy https://assets.elementor.com https://cdn-cookieyes.com https://img.youtube.com; frame-src 'self' https://www.youtube.com https://sketchfab.com https://www.googletagmanager.com https://ct.pinterest.com https://form.jotform.com https://visitworldheritage.com; worker-src 'self' blob:; object-src 'none'; connect-src 'self' https://region1.analytics.google.com https://www.google.com https://stats.g.doubleclick.net https://cdn-cookieyes.com https://ct.pinterest.com https://log.cooki