rolandzeiner.at
HTML metadata
Technology
- CDN
- Cloudflare
- Analytics
-
- Cloudflare Insights
Third-party hosts loaded (1)
- static.cloudflareinsights.com×1
Social
Contact
- Phone
- Address
- Uferpromenade 3, 3250, Wieselburg, Niederösterreich, AT
DNS records live
- NS
-
- craig.ns.cloudflare.com
- zariyah.ns.cloudflare.com
- MX
-
- 10 _dc-mx.b96c8da51d1f.rolandzeiner.at
- Verified for
-
- Brevo
Email authentication partial
- SPF
-
v=spf1 a mx -allstrict (-all) - DMARC
-
v=DMARC1;p=quarantine;sp=none;pct=50;rua=mailto:13767ee389d64bce834b464bb8e26548@dmarc-reports.cloudflare.net;adkim=r;aspf=r;policy: quarantine · pct=50 · sp=none - DKIM
- no key found at common selectors
Certificate (current)
WE1
Expires in 49 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- cross-origin-resource-policy
- findings
-
- CSP allows unsafe inline scripts/styles
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
DENY- permissions-policy
accelerometer=(), autoplay=(), browsing-topics=(), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://static.cloudflareinsights.com; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' data: https://cdnjs.cloudflare.com; connect-src 'self' https://cloudflareinsights.com; frame-src 'self'; frame-ancestors 'none'; form-action 'self'; base-uri 'self'; object-src 'none'; manifest-src 'self'; upgrade-insecure-requests- strict-transport-security
max-age=15552000; includeSubDomains; preload- cross-origin-opener-policy
same-origin- cross-origin-resource-policy
same-origin