indexo.dev

kirchham.de

.de ok HTTP/1.1 200 433 ms

First seen 2026-06-02 · Last seen 2026-06-17 · crawled 2026-06-17

DE · 185.166.22.75 · AS15817 Mittwald CM Service GmbH & Co. KG

Reputation 100/100

sector travel type homepage

HTML metadata

Title
Gäste
Description
Kirchham ist der staatlich anerkannte Kurort bei Bad Füssing. Verbringen Sie entspannte Tage in Europas größter Thermenlandschaft und nutzen Sie das Gesundheits- und Kurangebot.
Language
de
Canonical
https://www.kirchham.de/

Technology

jQuery
2.1.4 known XSS (<3.5)
Analytics
  • Google Tag Manager

Third-party hosts loaded (1)

  • www.googletagmanager.com×1

Social

Registration

Updated
2024-10-16
Name servers
  • ns01.dns-bb.de.
  • ns02.dns-bb.de.
  • ns03.dns-bb.de.
  • ns04.dns-bb.de.

DNS records live

NS
  • ns01.dns-bb.de
  • ns02.dns-bb.de
  • ns03.dns-bb.de
  • ns04.dns-bb.de
MX
  • 10 uceprotect.landkreis-passau.de
TXT
  • v=DMARC1; p=reject; aspf=r; pct=100; fo=s; rua=mailto:rathaus@kirchham.de

Email authentication strong

SPF
v=spf1 mx a:mailout.landkreis-passau.de include:bayern.de include:agenturserver.de include:spf.crsend.com -all
strict (-all)
DMARC
v=DMARC1; p=reject; aspf=r; adkim=r; pct=100; fo=s; rua=mailto:dmarc@landkreis-passau.de
policy: reject (enforced)
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-05-15 to 2026-08-13
Expires in 53 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.kirchham.de/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • cross-origin-opener-policy
findings
  • CSP allows unsafe inline scripts/styles
  • weak content type protection
  • missing Permissions Policy
Header values
referrer-policy
strict-origin
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff, nosniff
content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval' data:;
strict-transport-security
max-age=31536000, max-age=15768000; includeSubDomains; preload
cross-origin-opener-policy
same-origin

Links to (12)

Linked from (1)

Use this data via API

Everything on this page for kirchham.de is available as JSON from the indexo.dev REST & MCP API.

curl "https://indexo.dev/api/v1/domains/kirchham.de" \
  -H "X-API-Key: idx_..."

Read the docs & get a free key →

Add a badge to your site

Own kirchham.de? Show it's tracked on indexo.dev and link visitors straight to this page.

indexo.dev — kirchham.de

<a href="https://indexo.dev/kirchham.de" target="_blank" rel="noopener">
  <img src="https://indexo.dev/kirchham.de/badge.svg" alt="indexo.dev — kirchham.de">
</a>