osm-s.com
HTML metadata
Technology
- Server
- Apache
- CMS
- WordPress
Third-party hosts loaded (2)
- asset-tidycal.b-cdn.net×3
- gmpg.org×1
Social
Contact
- Phone
- Address
- Wipplingerstraße 33/Top 3.OG, 1010, Vienna, Austria
Registration
- Registrar
- NameCheap, Inc.
- Created
- 2017-02-05
- Expires
- 2027-02-05 261 days left
- Updated
- 2026-01-12
- Name servers
-
- dns1.registrar-servers.com
- dns2.registrar-servers.com
DNS records live
- NS
-
- dns1.registrar-servers.com
- dns2.registrar-servers.com
- MX
-
- 0 osms-com0i.mail.protection.outlook.com
- TXT
-
google-site-verification=oivYI5EKoAVgfdpZlIIWweNIRdKNOPjbTFDuMqCka2k
Email authentication strong
- SPF
-
v=spf1 ip4:168.119.136.66 ip4:162.55.168.123 include:spf.protection.outlook.com -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:admin@osm-s.compolicy: quarantine - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0l0u/tO6WNOyPZO7lWgjz7t39hAbnyY2uz5WpZddhDr5f4oRBXUHasuFvMpoXHoPckBatWmteO/FwZ/63bc… - mail:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCqOnYDn6xYwR5xRhISS2CfRsbUZ0e+4JO/gB8jTym+c5ATEzQGWDoHH79Q1nNn6gSeq7LQ56FzxDziCQgNEY…
selectors probed - selector1:
Certificate (current)
R13
Expires in 32 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
origin-when-cross-origin- x-frame-options
DENY- x-content-type-options
nosniff- content-security-policy
default-src *.osm-s.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.osm-s.com cdnjs.cloudflare.com https://asset-tidycal.b-cdn.net/js/embed.js; style-src 'self' 'unsafe-inline'; img-src 'self' https: data:; font-src 'self' data: fonts.gstatic.com; media-src 'self'; form-action 'self'; frame-src 'self' https://www.youtube.com/embed/ https://www.linkedin.com/video/embed/live/* https://asset-tidycal.b-cdn.net/js/embed.js https://tidycal.com; worker-src 'self' blob:; upgrade-insecure-requests- strict-transport-security
max-age=315360000; includeSubDomains; preload