ista.ac.at

.at crawl

First seen 2026-05-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 5127 ms crawled 2026-05-16

AT · 81.223.84.195 · AS8412 T-Mobile Austria GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title

ISTA

Description

ISTA is a PhD-granting research institution dedicated to cutting-edge research in the physical, mathematical, computer, and life sciences.

Language

Generator

WordPress 6.9.4

Canonical

https://ist.ac.at/en/home/

Translations

Open Graph

url: https://ista.ac.at
title: ISTA Homepage
locale: en_US
image:url: https://ista.ac.at/wp-content/uploads/2024/03/AtAGlance_heroV6_ok.jpg
site name: Institute of Science and Technology Austria (ISTA)
description: Institute of Science and Technology Austria

Technology

Server: Apache
CMS: WordPress

Third-party hosts loaded (2)

icp.ist.ac.at×8
ist.ac.at×3

Social

DNS records live

NS

ns10.univie.ac.at
ns5.univie.ac.at

MX

10 mx1.ist.ac.at

TXT

Show 12 TXT records

d365mktkey=6eUxLqIUiR0WrsMEOhDAhWoUi5OswdWbtpNL75ofVkgx
MS=ms38809653
canva-site-verification=FaprvcPfa8Nk1LdBgRZr9Q
HARICA-Z5xFfBK80UhTinDnnC0
1password-site-verification=YMOPFCK245FPZLGZGX73KEBXDE
apple-domain-verification=AL7tMP0zuxOQRtIu
d365mktkey=BKzln4OX5Xxin6JMV5TJaxirlP3aJTm5a9jScRCmvLQx
google-site-verification=Q-BNT9IwD72jjB1qFIJtj7W9iRU7cYBz4aLzICD5Y3c
52VF0y2wQfVnbK1s7ph3lXSFDl/y9jjJ1YI1dTKSUoO2RHF18THqnQknhuPTs37iCMqBrTFGyhw2xRSjILjmWw==
MS=ms80049713
google-site-verification=H25vcyRlAtPq4xnxoK69nfRIXFcag7vI0YSDFxbOgeE
atlassian-domain-verification=ldVtLy1YNtiu6C/LBOaX9vWXuZVzR8NL3jAGpOmuyDH5aDnM7bmCrkUHKjo9Tf3g

Email authentication partial

SPF: v=spf1 mx ip4:81.223.84.226/32 include:_spf.cna.at include:_spf.pretix.eu include:_spf.itandtel.at a:smtpw.cytric.net include:spf.protection.outlook.com -all
strict (-all)
DMARC: v=DMARC1; p=none; rua=mailto:it-control@ista.ac.at; ruf=mailto:it-control@ist.ac.at; fo=1
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

GEANT TLS RSA 1

from 2026-05-06 to 2026-11-21

Expires in 186 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://ista.ac.at/home

present

content-security-policy
x-frame-options
x-content-type-options

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: sameorigin
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.ist.ac.at *.ista.ac.at *.google-analytics.com *.azureedge.net *.dynamics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.ist.ac.at *.ista.ac.at https://www.google-analytics.com https://www.googletagmanager.com *.azureedge.net *.dynamics.com; style-src 'self' *.googleapis.com *.ist.ac.at *.ista.ac.at *.azureedge.net *.dynamics.com 'unsafe-inline'; img-src 'self' data: *.ist.ac.at *.ista.ac.at *.googletagmanager.com https://secure.gravatar.com *.azureedge.net *.dynamics.com; font-src 'self' fonts.gstatic.com *.ist.ac.at *.ista.ac.at data:; connect-src 'self' *.ist.ac.at *.ista.ac.at *.google-analytics.com *.azureedge.net *.dynamics.com; media-src 'self' *.ist.ac.at *.ista.ac.at; object-src 'none'; base-uri 'self'; frame-ancestors 'self' *.ist.ac.at *.ista.ac.at;