indexo.dev

conizi.io

.io crawl

First seen 2026-04-14 · Last seen 2026-05-08 · ok HTTP/1.1 200 1066 ms crawled 2026-05-08

DE · 62.146.3.234 · AS15598 NorthC Deutschland GmbH

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Log in
Language
en

Technology

Server
Kestrel

DNS records live

NS
  • ns01.eikona.de
  • ns02.eikona.de
  • ns03.eikona.de
MX
  • 0 eikon-mx01.eikona-server.de
TXT
  • 8kakMI+RC2DeH3uQYbUCuHsJi1oCebl2rVvDdNsXVfs1JBFXLKwSiUu13flcdFeYkaC9qYkzFKMttOsXT4xXWA==
Verified for
  • Microsoft 365

Email authentication weak

SPF
v=spf1 mx ip4:62.146.73.99/32 ip4:62.146.73.103/32 include:spf.mailjet.com include:spf.protection.outlook.com include:spf.emailsignatures365.com -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-03-15 to 2026-06-13
Expires in 23 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://id.conizi.io/Account/LogIn?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3DConizi.Portal%26redirect_uri%3Dhttps%253A%252F%252Fconizi.io%252Fsignin-oidc%26response_type%3Dcode%26scope%3Dopenid%2520profile%2520offline_access%2520impersonation%2520ocora.telematics.read%2520ocora.telematics.edit%2520permissions.read%2520ocora.notification.read%26code_challenge%3DsliiJCV16Ix2DWCFvEDyNW5cHu56jkzhymuFiOq8bbQ%26code_challenge_method%3DS256%26response_mode%3Dform_post%26nonce%3D639137892076743120.NjI0MDcxODctZTU1ZC00MzgyLTk4NGMtYmJkNzAwNGE4ZDIwNmMwNGM2OGItMmVjZi00Y2UwLWIzNjMtZWQwZDZhNmNmODBk%26state%3DCfDJ8KGX17ot9lZFk8H50n9rNKdQfq5cTS3DbS9a717hd89Je3qiXkh1lTzcA0qk_nacKUdm8wvGJRsPExhMx5TSmDstF2rxx2NiXg-yTbu8t9JozUUEr13efkxVFpqHOH8BrYd-r76TiH6gXKWz6A9QOUw8bBsK3yyX_PMqggDJv7pcYLvC7eCz-GDclPqLgubENEd284G8VV34U4Bexp2vbIIHYKCEictO1IXtNehu4MzCS89bxOLjIKfgL7ds-Nq4TlsXFfiffZvnOAMv8MhP7kn7LtQXZbxkc9CfAOWQPKVkGWj7GHd_5cYDm12r7zqwr_Cu3DRo7ktCi3UP6A_KcDT6pdFCw5TqDqm6B5_Oirfs%26x-client-SKU%3DID_NETSTANDARD2_0%26x-client-ver%3D6.10.0.0

present
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self' 'nonce-a21993ca33934ed0a0b4679487a8bdbe' 'unsafe-eval' https://conizi.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://conizi.io; font-src 'self' https://fonts.gstatic.com https://conizi.io data:; img-src 'self' https://conizi.io data:

Links to (1)

Linked from (1)