pannatura.at

.at crawl

First seen 2026-05-29 · Last seen 2026-05-31 · ok HTTP/1.1 200 365 ms crawled 2026-05-31

BE · 185.175.196.10 · AS34762 Combell NV

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title

Startseite - PANNATURA

Language

Generator

All in One SEO (AIOSEO) 4.9.7.2

Canonical

https://pannatura.at/

Feeds

PANNATURA » Feed RSS
PANNATURA » Kommentar-Feed RSS
PANNATURA » Kommentar-Feed zu Startseite RSS

Open Graph

url: https://pannatura.at/
title: Startseite – PANNATURA
locale: de_DE
site name: PANNATURA

Technology

Server: nginx
CMS: WordPress
jQuery: 3.7.1

Analytics

Google Tag Manager

Third-party hosts loaded (4)

www.googletagmanager.com×2
cloud.mail.panevent.at×1
gmpg.org×1
www.google.com×1

Social

Contact

Email

Phone

2026-04-05 02

DNS records live

NS

dns1.a1.net
dns2.a1.net
dns3.a1.net

MX

10 email.esterhazy.at

TXT

hevtccqillerrtj8qrf7glsjoo
spqah0hnqld24r2v3l970c68pv
m55ol007seiclg2qs6gim4e29v

Verified for

Google
Meta

Email authentication partial

SPF: v=spf1 mx ip4:91.112.84.28/32 ip4:91.112.84.30/32 ip4:213.33.87.17/32 -all
strict (-all)
DMARC: v=DMARC1; p=none;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-04-26 to 2026-07-25

Expires in 55 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://pannatura.at/

present

strict-transport-security
x-content-type-options
permissions-policy

findings

missing Content Security Policy
missing frame protection
missing Referrer Policy

Header values

permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload