indexo.dev

openki.net

.net crawl

First seen 2026-05-31 · Last seen 2026-06-01 · ok HTTP/1.1 200 193 ms crawled 2026-06-01

CH · 92.42.187.72 · AS29691 Nine Internet Solutions AG

Reputation 92/100 no dmarc policy

Classifying

Technology

Server
nginx

Registration

Registrar
Gandi SAS
Created
2015-02-03
Expires
2028-02-03 610 days left
Updated
2026-05-27
Name servers
  • ns-188-c.gandi.net
  • ns-208-b.gandi.net
  • ns-76-a.gandi.net

DNS records live

NS
  • ns-188-c.gandi.net
  • ns-208-b.gandi.net
  • ns-76-a.gandi.net
MX
  • 10 malta.metanet.ch
Verified for
  • Brave
  • Google

Email authentication weak

SPF
v=spf1 include:servers.mcsv.net include:_spf.sui-inter.net +mx +a -all
strict (-all)
DMARC
not published
DKIM
  • default: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UjkURkfjjL3yChqWLJh5qxzC+9Z//1hLJxuV82xLVHt32+fMrvD4WwS8vguoGeP9EEdAYer9uPXZeMKik30Q…
  • k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
selectors probed

Certificate (current)

R13
from 2026-05-07 to 2026-08-05
Expires in 64 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://openki.net/

present
  • strict-transport-security
  • content-security-policy
  • cross-origin-opener-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'none'; connect-src 'self' https://analytics.openki.net wss://openki.net https://nominatim.openstreetmap.org https://ipinfo.io https://*.c3nav.de/; font-src 'self'; img-src 'self' blob: data: https://analytics.openki.net https://*.tile.openstreetmap.org/ https://*.tile.openstreetmap.fr/ https://*.tile.openstreetmap.de/ https://*.c3nav.de/ https://cz42.objectstorage.nineapis.ch/ https://cz42.objects.nineapis.ch/ https://es34.objects.nineapis.ch/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://analytics.openki.net https://cdn.polyfill.io; style-src 'self' 'unsafe-inline'; worker-src blob: data:; report-uri https://csp.estada.ch/report/EYBIuaji7LaaMMGMhnbviUNvUcG33JWAqWr5EFK0Tsd0bkcB2ItwBa3e57r5m
strict-transport-security
max-age=31536000; includeSubDomains
cross-origin-opener-policy
same-origin-allow-popups

Linked from (2)