bmf.gv.at

.at crawl

First seen 2026-05-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 10038 ms crawled 2026-05-16

AT · 95.131.199.38 · AS8692 Bundesrechenzentrum GmbH

Reputation 100/100

Classifying

HTML metadata

Title: Das Bundesministerium für Finanzen
Description: Die Website des Bundesministeriums für Finanzen der Republik Österreich.
Language: de

Open Graph

url: https://bmf.gv.at/public.html
title: Das Bundesministerium für Finanzen
locale: de_DE
image:url: https://www.bmf.gv.at/dam/jcr:3a4383e2-eac6-49d5-8406-19dc07a97758/logo_og%20image.jpg
description: Die Website des Bundesministeriums für Finanzen der Republik Österreich.

Technology

Server: Apache

Third-party hosts loaded (1)

static.etracker.com×1

Social

DNS records live

NS

cna-gdwi-0.cna.at
cna-gdwi-1.cna.at
cna-gdwi-2.cna.at
sec1.rcode0.net
sec2.rcode0.net

MX

10 mailx20.cna.at
10 mailx21.cna.at
10 mailx22.cna.at
10 mailx23.cna.at

TXT

Show 4 TXT records

google-site-verification=iukQ7RYZD0_0sqCn4Io3pFOfM0-IMxiCIyITnsZLVNY
ZA=tEhF+NN650DyRJXbiH+qoQ==
HARICA-ZU3MhjdJXbqWDTxKcqB
MS=51D4592975FD2D18099E71D0C29E6225A86A915D

Email authentication strong

SPF: v=spf1 include:_spf.cna.at include:_spfm.cna.at include:_spfq.cna.at -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@brz.gv.at; ri=86400; fo=1
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

GEANT TLS RSA 1

from 2025-09-11 to 2026-09-11

Expires in 114 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.bmf.gv.at/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' chat.bmf.gv.at; script-src 'self' service.bmf.gv.at bksuche.brz.gv.at chat.bmf.gv.at static.etracker.com www.etracker.de code.etracker.com 'unsafe-eval' 'unsafe-inline'; img-src data: 'self' www.etracker.de; connect-src 'self' www.etracker.de bksuche.brz.gv.at wss://chat.bmf.gv.at; style-src 'self' 'unsafe-inline'; frame-ancestors 'self'; child-src 'self'; frame-src *; form-action 'self'; font-src 'self' chat.bmf.gv.at data:; block-all-mixed-content; upgrade-insecure-requests;
strict-transport-security: max-age=31536000; includeSubDomains