hero-era.com

HTML metadata

Title: HERO-ERA | Historic Car Rallying - HERO-ERA
Description: A one stop shop platform for historic motoring that is friendly, professional and delivers real value
Language: en
Canonical: https://heroera-web.azurewebsites.net

Open Graph

title: HERO-ERA | Historic Car Rallying - HERO-ERA
description: A one stop shop platform for historic motoring that is friendly, professional and delivers real value

Technology

Server: Microsoft-IIS

Analytics

Google Analytics
Google Tag Manager

Third-party hosts loaded (3)

www.googletagmanager.com×2
heroera-web.azurewebsites.net×1
www.google-analytics.com×1

Social

Contact

Email

Phone

00441869254979

Registration

Registrar

GoDaddy.com, LLC

Created

2020-07-15

Expires

2030-10-28 1622 days left

Updated

2022-11-01

Name servers

miles.ns.cloudflare.com
zelda.ns.cloudflare.com

DNS records live

NS

miles.ns.cloudflare.com
zelda.ns.cloudflare.com

MX

0 heroera-com01b.mail.protection.outlook.com

TXT

google-site-verification=T9Ebz8BPMX-GnAwpQyiZLKsQbqFAVRgXa8vcBpSKZgs
mscid=aL6ES7CuCOmTK2b7mA5a7d2uItXSaMkw0zOYlmk2XyrwhHG59RTjw+1WetpnUpJSQJ9BwSUQHOiObI1/11gNKg==

Email authentication strong

SPF

v=spf1 ip4:193.117.252.74 include:spf.protection.outlook.com include:sendgrid.net include:26968872.spf07.hubspotemail.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc.cyber@pisys.net

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBuJDvGytRUt5GuQDs1MUKikP8XCthneonrk5KduGa99jP4ZAk1L2LeD/fHyTUxAwPE9R19VM5ebAw…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFEYVl18GZ1ySZUDedStZgcJRc5nvd1ZBdjr9Psy5uW6+FK9398IxGGay76RdxOk2Jf6ldYNccalMCKc13…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD1Cz9teSrvAEmBoeg4rVWxvsUNepljy61amWaK3KrmFtEQPdym2weqUEAzf5B9MB+/7OjxSv0IntPGs9mS7R68HK…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-02-14 to 2026-08-15

Expires in 87 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.hero-era.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src https; media-src 'self'; font-src 'self' https://fonts.gstatic.com/; style-src https 'self' 'unsafe-inline' http://fast.fonts.net https://platform.twitter.com/ https://fonts.googleapis.com https://cdnjs.cloudflare.com/; manifest-src 'self'; connect-src 'self' http: https: wss: https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com/ https://our.umbraco.com https://graph.facebook.com/; frame-src https 'self' https://www.google.com https://www.youtube.com https://player.vimeo.com https://platform.twitter.com https://syndication.twitter.com/ https://www.facebook.com/ https://form.typeform.com/; img-src https: data: 'self' https://www.google.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.co.uk https://syndication.twitter.com https://platform.twitter.com/ https://pbs.twimg.com/ https://px.ads.linkedin.com https://www.linkedin.com https://www.facebook.com https://www.gravatar.co
strict-transport-security: max-age=31536000; includeSubDomains