vm-extend.pt
vm-extend.pt
HTML metadata
Technology
- Server
- nginx
- Analytics
-
- Google Analytics
- Google Tag Manager
Third-party hosts loaded (2)
- www.googletagmanager.com×2
- www.google-analytics.com×1
Social
DNS records live
- NS
-
- june.ns.cloudflare.com
- vicente.ns.cloudflare.com
Email authentication no MX
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificates
Loading certificate
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' *.via-mobilis.com api.via-mobilis.com http://media.viamobilis.export.doorlinkenvoorraad.nl https://stockway.pro *.gvt1.com accounts.google.com www.google.com *.googleadservices.com *.calendly.com *.drimify.com *.trustpilot.com *.googlesyndication.com *.googletagservices.com *.googleapis.com *.adtrafficquality.google *.static-viamobilis.com static-viamobilis.com *.ampproject.net https://acdn.adnxs.com/ *.g.doubleclick.net *.doubleclick.net *.criteo.com *.youtube.com youtube.com *.youtu.be youtu.be *.youtube-nocookie.com youtube-nocookie.com *.komoot.de photon.kamoot.de *.komoot.io photon.komoot.io *.hotjar.com *.usersnap.com criteo.net *.criteo.net *.tawk.to cloud.panono.com poulalion.eu *.vimeo.com www.recaptcha.net *.facebook.com https://platform.twitter.com ; img-src * *.google-analytics.com *.googletagmanager.com data: blob: 'self' ; script-src * *.googletagmanager.com *.googleanalytics.com *.google-analytics.com *.googleoptimize.com https://photon.komoot.de/ htt- strict-transport-security
max-age=31536000; includeSubDomains