myconvento.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 1448 ms crawled 2026-05-18

FR · 141.94.208.253 · AS16276 OVH SAS

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: myconvento - Sign In
Language: en
Generator: Convento GmbH

Registration

Registrar

CSL Computer Service Langenbach GmbH d/b/a joker.com

Created

2010-12-10

Expires

2026-12-10 204 days left

Updated

2025-07-16

Name servers

x.ns.joker.com
y.ns.joker.com
z.ns.joker.com

DNS records live

NS

x.ns.joker.com
y.ns.joker.com
z.ns.joker.com

MX

30 mx01.myconvento.com

TXT

google-site-verification=d6ba9AGr0c0u8Z0GFibSX0RK_16O0f4vU7hHKpU_y0I

Email authentication partial

SPF

v=spf1 include:spfa.myconvento.com include:spfb.myconvento.com ip4:195.4.139.207 ip4:130.180.74.58 a:merkur.myconvento.cloud -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:it@myconvento.com

policy: none (monitoring only)

DKIM

dkim: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JOeswOWDfynFXhqIWsiy+Ta9LCkCgDDNhbukHILjy1y19mIYXzPcrbhXASIWsBtVsoofRTIg37wGv…

selectors probed

Certificate (current)

R12

from 2026-04-06 to 2026-07-05

Expires in 46 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://myconvento.com/public/login

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' maps.googleapis.com 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * blob:; font-src * fonts.googleapis.com data: blob: 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com www.myconvento.com; style-src 'self' fonts.googleapis.com data: blob: 'unsafe-inline';
strict-transport-security: max-age=31536000; includeSubDomains