synthesa.at

.at crawl

First seen 2026-05-12 · Last seen 2026-05-18 · ok HTTP/1.1 200 2430 ms crawled 2026-05-18

US · 65.8.131.22 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: SynthesaGruppe: The Power of Surface
Description: Die SynthesaGruppe steht für die Verschmelzung von technologischer Raffinesse, ästhetischer Innovation und funktionaler Intelligenz.
Language: de
Canonical: https://www.synthesa.at/

Open Graph

title: SynthesaGruppe: The Power of Surface
site name: Synthesa
description: Die SynthesaGruppe steht für die Verschmelzung von technologischer Raffinesse, ästhetischer Innovation und funktionaler Intelligenz.

Technology

CDN: Amazon CloudFront

Social

Contact

Address: Dirnbergerstraße 29-31, 4320, Perg, AT

DNS records live

NS

a.ns14.net
b.ns14.net
c.ns14.net
d.ns14.net

MX

10 synthesa-at.mail.protection.outlook.com

TXT

Show 6 TXT records

knowbe4-site-verification=116724fc23293e4e87fce838698b0d26
ymbBMzC4aPE8709q4yhmA+fvgA3JX34IRpVflmUtLQLgTRpUFV3yf5sWST+MOi+FFOuo3YKxqYm+us/kq5ya/g==
e2L0EkFQaOMtzN25GP2LlKprArrCYOVOMe1j913KhUN+Pw+0C/qVsuCQUCqArIEZDpZtqkxarapeDPps0bVnZA==
google-site-verification=JYUp4zIL_V-Aedmk2fOtrWMojA19yaB15YJBa5sbRqw
c6UeDBgb67BT5v8vdDmA8XIg2LOcueh7yuw+LJVz9+QX3adIEfwL4XKdkDSa6N6g81OeuqM/+gKGd0S2tVu5Ow==
MS=ms58141991

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:spf.nl2go.com include:_spf.daw.de ip4:80.120.5.55 ip4:193.186.170.44 include:spf.eu.exclaimer.net -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc@synthesa.at;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Unq/Ps2Wq0OKnbopbOVSYw24vWlQwFSzDNkBdixR0U0+JTQbC6YYHaKKeXwg8r6NLJoJfC/H+71WG…

selectors probed

Certificate (current)

Amazon RSA 2048 M02

from 2025-08-19 to 2026-09-18

Expires in 122 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.synthesa.at/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; media-src 'self' data:; img-src 'self' blob: https://img.synthesa.at https://www.googletagmanager.com https://www.google.com https://www.google.de https://i.ytimg.com https://fonts.gstatic.com https://img.daw-stage.px.at https://*.img.daw-prod.px.at https://img.daw-prod.px.at https://maps.googleapis.com https://maps.gstatic.com https://imgsct.cookiebot.com https://www.facebook.com data:; script-src 'self' 'sha256-AaIcGxzwZcrpBW8mugDmpX6XXsIfidpDQY1vMYXpp1M=' 'sha256-7s0isDle/DqNBvgtMHZd2o67dYnmHyVrQJi1lzr7NPs=' 'sha256-8IhmVU58wzypi8r3XglJmcTpzeqSs6AKzF0QldfPvkQ=' 'strict-dynamic' https:; style-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.youtube.com https://cdn.fonts.net https://fonts.googleapis.com https://maps.googleapis.com https://maps.gstatic.com; font-src 'self' https://fonts.gstatic.com data:; worker-src 'self' blob:; connect-src 'self' blob: https://api.friendlycaptcha.com https://consent.cookiebot.com https://www.youtube.com http
strict-transport-security: max-age=31536000; includeSubDomains