indexo.dev

kaerntnerfamilienkarte.at

.at crawl

First seen 2026-06-01 · Last seen 2026-06-01 · ok HTTP/1.1 200 692 ms crawled 2026-06-02

US · 150.171.109.34 · AS8075 Microsoft Corporation

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title
Kärnten Familienkarte - Aktuelles
Description
Bleibe auf dem Laufenden mit den neuesten Nachrichten und Updates rund um die Kärntner Familienkarte.
Language
de
Canonical
https://kaerntnerfamilienkarte.at/de/aktuelles
Translations
  • de
  • en

Technology

CDN
Azure Front Door
CMS
Next.js

Social

DNS records live

NS
  • ns1-05.azure-dns.com
  • ns2-05.azure-dns.net
  • ns3-05.azure-dns.org
  • ns4-05.azure-dns.info
MX
  • 5 mail.kaerntnerfamilienkarte.at
Verified for
  • Google

Email authentication weak

SPF
not published
DMARC
not published
DKIM
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1
from 2026-03-11 to 2026-09-12
Expires in 101 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://kaerntnerfamilienkarte.at/de/aktuelles

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self'; script-src 'self' 'nonce-MzM2NjE1YjUtZmM4OC00ZjQwLWI0NDUtYzAzMTZkZmE3NzBi' 'strict-dynamic' 'unsafe-inline'; style-src 'self' 'unsafe-inline' maps.googleapis.com fonts.googleapis.com; img-src 'self' maps.googleapis.com maps.gstatic.com data: blob:; font-src 'self' fonts.gstatic.com; connect-src 'self' localhost:4318 westeurope-5.in.applicationinsights.azure.com westeurope.livediagnostics.monitor.azure.com js.monitor.azure.com matomo.kaerntnerfamilienkarte.at maps.googleapis.com fonts.googleapis.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' localhost:8055; frame-src 'self' https://www.google.com/; upgrade-insecure-requests;

Links to (2)

Linked from (1)