smartbonus.at

.at crawl

First seen 2026-05-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 6143 ms crawled 2026-05-16

US · 172.67.134.89 · AS13335 Cloudflare, Inc.

Reputation 92/100 no dmarc policy

sector media news type blog

HTML metadata

Title: Beste Online Casino Österreich 2026: Top Casinos im Test
Description: Beste Online Casinos Österreich 2026 gründlich geprüft! Alle Lizenzen, Spiele & exklusive Boni. Ihr Top Casino wartet!
Language: de-AT
Canonical: https://smartbonus.at/

Open Graph

url: https://smartbonus.at/
title: Beste Online Casino Österreich 2026: Top Casinos im Test
locale: de-AT
site name: Smartbonus
description: Beste Online Casinos Österreich 2026 gründlich geprüft! Alle Lizenzen, Spiele & exklusive Boni. Ihr Top Casino wartet!
updated time: 2025-09-23T08:18:03+00:00

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (5)

cdnjs.cloudflare.com×4
images.dmca.com×4
certify.gpwa.org×2
www.googletagmanager.com×2
cdn.jsdelivr.net×1

Social

DNS records live

NS

trey.ns.cloudflare.com
tricia.ns.cloudflare.com

MX

10 mx.zoho.eu
20 mx2.zoho.eu
50 mx3.zoho.eu

TXT

Show 4 TXT records

google-site-verification=taBjuys-rpNxqnBRE2IYV21mICsikyhqvmPp1hmFzgI
zoho-verification=zb85620034.zmverify.zoho.eu
google-site-verification=D2yiX_GtQt0_37yf6N1roPpniVr3dghSFhRoKvXaHiU
google-site-verification=W7Q8EkU9ypiCgnQ-w71bZjkqA7rMceLhoKFBnWEyhHA

Email authentication weak

SPF: v=spf1 include:zoho.eu +a +mx +ip4:66.29.146.23 +ip4:66.29.146.24 include:spf.web-hosting.com ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-04-06 to 2026-07-05

Expires in 46 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://smartbonus.at/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' rawgit.com *.sheetjs.com *.hotjar.com *.googletagmanager.com *.trustpilot.com *.dmca.com *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com cdnjs.cloudflare.com cdn.ywxi.net connect.facebook.net certify.gpwa.org certify.gpwa.org; frame-src * data: blob: ; object-src 'self'
strict-transport-security: max-age=63072000; includeSubDomains; preload

Links to (16)

Linked from (3)