apoverlag.at

HTML metadata

Title: OEAVG
Language: de-AT
Generator: TYPO3 CMS
Canonical: https://www.apoverlag.at/

Technology

Server: Apache

Cookie consent

Cookiebot

Third-party hosts loaded (2)

consent.cookiebot.com×1
euc-widget.freshworks.com×1

Social

DNS records live

NS

ns1.nameservice.at
ns2.nameservice.at

MX

0 apoverlag-at.mail.protection.outlook.com

TXT

Show 4 TXT records

swisssign-check=RoL761Drn8LwIkzujbm3TArDluA
MS=41D3561A8F1D55C2B32949C94B80300A9B1CF266
H47-mO6-KL9
q70hgtuisrc7dfccdacsurov99

Verified for

Apple
Atlassian
Brevo
DocuSign
Google
Miro

Email authentication weak

SPF

v=spf1 include:spf.protection.outlook.com mx ip4:62.99.135.1/28 ip4:194.126.208.184 ip4:194.126.208.179 ip4:193.104.82.0/24 ip4:195.3.107.49 ip4:157.90.94.249 include:serv28594448.secure-node.at include:spf-de.emailsignatures365.com -all

strict (-all)

DMARC

not published

DKIM

Show 4 DKIM selectors

default: v=DKIM1; k=rsa; h=sha256; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf8GZWQAI0DnifZNNAtfllOL+Wjv/bb0o2vojqEs+K88ygyDuvhPAkxy4ED2iT9Hwrzf…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pjL861EJEgWnmynbYv0IJGoOl+V16vPE3S3EggzS3PsrMW/rxdLoc0SbC7b1P08QRiLHhfkdc1QlQ…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJBKydBG4X64XNJO2IGOfl/o1tchavmYUuIdZGVcXJtlcXw32f+rEyqfzhpn0/U65NjMIT9Rc5flEe…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

R13

from 2026-05-18 to 2026-08-16

Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.apoverlag.at/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-hashes' 'sha256-8tnX66uZPQc/x0xPMSjbDfJFOh1ys5rYCZOAvT44Ml0=' 'sha256-eh65ft/FLWhSquitmVRey50WJ/FUDjy1q+J6b/eMfQ8=' 'sha256-4Rip+G5xNqA42OtLNRhoV2UzSIVDzL6g+hv20tb3b1U=' 'sha256-8VVT4Do8HEnflLBVS7lqLpgBRx3By8/5ZLtKs4T5zNg=' 'sha256-PipDBblHIwl4UCSJGxOe2HimW3eqO/S9t5GiXoJDHMM=' 'sha256-tGHJwE8Jm0oOUj1EIhG1KiCCQpXq1kJZSkF+uMvCVBE=' 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com *.youtube.com *.vimeo.com *.mailinblue.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com mailworx.marketingsuite.info www2.apoverlag.at *.google.com *.cookiebot.com; style-src 'self' 'unsafe-inline' *.freshworks.com *.freshdesk.com sibforms.com *.apoverlag.at 'report-sample'; script-src-elem 'unsafe-inline' 'self' *.deinegutscheine.at *.apoverlag.at *.deineapotheke.at *.freshworks.com *.freshdesk.com *.google.com *.gstatic.com sibforms.com *.cookiebot.com 'report-sam
strict-transport-security: max-age=15768000