automaze.io

.io crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 2898 ms crawled 2026-05-19

DE · 49.12.130.6 · AS24940 Hetzner Online GmbH

Reputation 100/100

Classifying

HTML metadata

Title: Automaze / Technical Co-Founder & CTO as a Service
Language: en

Open Graph

url: https://automaze.io
title: Automaze Technical Co-Founder & CTO as a Service
description: The zero-equity way for founders to bring their idea to life, attract early users, and achieve product-market fit.

Technology

Server: nginx
CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (3)

fonts.googleapis.com×3
fonts.gstatic.com×2
www.googletagmanager.com×1

Social

DNS records live

NS

dns1.registrar-servers.com
dns2.registrar-servers.com

MX

1 smtp.google.com

TXT

Show 4 TXT records

google-site-verification=6Qa039gImvBokJ7-YitQcsqJAw470DBkwpwbF3eHP-E
google-site-verification=a4hII5IvZNcoZOr9iurH0p3oA4m_DXhWSTaGK4hzjEs
google-site-verification=l1_zQxffdBJlROgW4Z-aGf5vxclkRzo7xWIHB5e1xyc
apple-domain-verification=sSCbfKb5tnq9pUxEf8BtRYkbT3Fs_f2-iIJPrcbF5A0

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:27038758.spf04.hubspotemail.net ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:reports+uwp2q7rtwqx8vqqlpkwzr@dmarc.toolbox.campaignrefinery.com;

policy: reject (enforced)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JGwzP4uL0+qfA/Nj4pzSSI7bHiha++p9k367A+MqAQtN6nImAOy0e6uBlArUFKVr6bZKKl5O/OjEz…

selectors probed

Certificate (current)

R12

from 2026-04-10 to 2026-07-09

Expires in 51 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://automaze.io/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self)
x-content-type-options: nosniff
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';