sefra.at

.at crawl

First seen 2026-06-02 · Last seen 2026-06-03 · ok HTTP/1.1 200 797 ms crawled 2026-06-03

AT · 217.19.44.215 · AS8245 Video-Broadcast GmbH

Reputation 92/100 weak subdomain policy

Classifying

HTML metadata

Title
Sefra Farben & Tapeten – Profi-Produkte für Wand & Raum
Description
Hochwertige Farben, Lacke & Tapeten für Maler, Handwerker, Architekten & DIY-Projekte. Direkt vom Fachhandel – Sefra steht für Qualität & Innovation.
Language
de

Technology

CMS
Gatsby
Analytics
  • Google Tag Manager

Third-party hosts loaded (2)

  • cdn.priv.center×1
  • www.googletagmanager.com×1

Social

Contact

Phone

DNS records live

NS
  • ns1.konzept.cc
  • ns2.konzept.cc
  • ns3.konzept.cc
MX
  • 10 ex01.sefra.at

Email authentication strong

SPF
v=spf1 mx a:relay02.office-vienna.at a:ex01.sefra.at ip4:93.82.196.66 -all
strict (-all)
DMARC
v=DMARC1; p=quarantine; pct=100; ruf=mailto:dmarc@sefra.at; rua=mailto:dmarc@sefra.at; sp=none; adkim=s; aspf=r
policy: quarantine · sp=none
DKIM
no key found at common selectors

Certificate (current)

YE1
from 2026-05-29 to 2026-08-27
Expires in 83 days

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.sefra.at/de/

present
  • strict-transport-security
  • content-security-policy-report-only
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • missing Content Security Policy
  • weak frame protection
  • weak content type protection
  • missing Permissions Policy
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN, SAMEORIGIN
x-content-type-options
nosniff, nosniff
strict-transport-security
max-age=31536000; includeSubDomains
content-security-policy-report-only
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demde

Links to (2)

Linked from (1)