dieplattform.at
HTML metadata
Technology
- Server
- nginx
- CMS
- Next.js
Third-party hosts loaded (2)
- embeds.acswapp.com×1
- webcachex-eu.datareporter.eu×1
Contact
DNS records live
- NS
-
- nsi1.arz.at
- nsi2.arz.at
- MX
-
- 10 mx01.arz.at
- 10 mx02.arz.at
- TXT
-
swisssign-check=kqfbAqIdc1B3r2dCkT4QYLAQRKE
- Verified for
-
- Brevo
- Cisco
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;policy: reject (enforced) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SsVA2I1IQJz5pVCUGeJ7qlgQcZmVdvXdTOOmqiWMaLlq1jDwpbg0NaLED2gfcka3WT3uDXMJzBCyP… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweWP3QDcFHa/IcIZQYn4mUJy6oZCXfnzDiHf6miiSq69JX97pWe6QzpB7VQHvI3xTY4iaesQZFHr/Z… - mail:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+l…
selectors probed - selector1:
Certificate (current)
E8
Expires in 79 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
ALLOW-FROM https://cms.dieplattform.at- permissions-policy
accelerometer=(), ambient-light-sensor=(), autoplay=(self), battery=(), camera=(), encrypted-media=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), direct-sockets=(), display-capture=(), serial=(), web-share=(), window-management=(), fullscreen=(self), picture-in-picture=(self)- x-content-type-options
nosniff- content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.g.doubleclick.net https://*.datareporter.eu https://*.acswapp.com https://*.acsbapp.com https://*.captcha.eu https://*.google-analytics.com https://*.googletagmanager.com https://www.googleadservices.com https://*.google.com https://*.google.de https://connect.facebook.net ; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://*.dieplattform.at; frame-src https://www.googletagmanager.com https://td.doubleclick.net https://player.vimeo.com;- strict-transport-security
max-age=63072000; includeSubDomains; preload- cross-origin-opener-policy
same-origin