era.at
HTML metadata
Technology
Third-party hosts loaded (2)
- fify-dynamo-assets.sos-at-vie-1.exo.io×97
- embed.profin.at×2
Social
Contact
- Phone
DNS records live
- NS
-
- ns1.nameservice.at
- ns2.nameservice.at
- MX
-
- 10 mx.mymagenta.business
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 a mx include:_spf.mymagenta.business include:_spf.justimmo.at ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=nonepolicy: none (monitoring only) - DKIM
-
- s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGfEhuZfAI/WNXvvYbxhRyjB9MkejkQHbEsmPA379F1KfsyX4GzqhI9gR2F+edYXzhaowi1kCvRxRsiYP+… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDL3DWELPtnBH027sJHNJlwHmy9o/EImPBVxf/5KdAy2osKRA3QQ1pFkKszfksQU363dmM2jwXH0Pq9WmAqTVoZOl…
selectors probed - s1:
Certificate (current)
E7
Expires in 62 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- permissions-policy
interest-cohort=(),browsing-topics=()- x-content-type-options
nosniff- content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: data: ; img-src 'self' https: data:; font-src 'self' https: data:;- strict-transport-security
max-age=31536000
Links to (2)
Linked from (4)
- eraeurope.com×1
- era-reality.cz×1
- era.nl×1
- era.be×1