grazer.at
FDer Grazer - Aktuelle Nachrichten aus Graz: Der Grazer
Aktuelle Nachrichten aus Graz: Alle neuen Infos zu Stadtgeschehen, Politik, Szene, Events, Wirtschaft, Sport und Co. Mit dem Grazer ist man einfach näher dran an Nachrichten aus Graz.
Last scanned 58 min agoCompare with another site →
Built with
Also detected
- Libraries
- Bootstrap · jQuery
- Infrastructure
- Apache
- Third-party services
- Facebook Pixel · Google Analytics · Matomo · OneTrust
Overview
- Status
- alive
- Registered
- unknown (this domain's registry doesn't publish it via RDAP)
- First seen here
- 2026-09-22
- Security grade
- F (40/100, from headers & TLS)
- Privacy score
- 2/100 (8 third-party script hosts, 4 tracking/marketing services)
- Hosting
- conova communications GmbH · AS5404 · Austria
- Server header
Apache- Response time
- 476 ms to first byte, measured from our crawler
- TLS certificate
- Sectigo Limited · TLSv1.3 · expires 2027-01-07
- Language
- de-de
- Mobile-ready
- yes (viewport meta tag)
- Linked to from
- 5 other sites seen so far
Loads scripts from
Third-party domains this page pulls JavaScript or iframes from. Each one can see who visits.
What to fix
- Add Strict-Transport-Security
Header: Strict-Transport-Security: max-age=31536000; includeSubDomains - Add a Content-Security-Policy
Limits which scripts can run, and is the main defense against XSS. Start with Content-Security-Policy-Report-Only to test. - Prevent clickjacking
Header: X-Frame-Options: DENY (or a CSP frame-ancestors directive). - Add a Referrer-Policy
Header: Referrer-Policy: strict-origin-when-cross-origin - Mark cookies Secure and HttpOnly
At least one cookie is sent without these flags, exposing it to interception or scripts.
Security & email signals
- ✓ HTTPS
- ✗ HSTS
- ✗ Content-Security-Policy
- ✓ X-Content-Type-Options
- ✗ X-Frame-Options
- ✗ Referrer-Policy
- ✗ Permissions-Policy
- ✓ SPF record
- ✓ DMARC record
- ✗ DKIM record
- ✗ Cookies set securely
- ✓ Has real content (not an empty shell)
- ✓ Valid TLS certificate
Badge
Show this site's security grade in a README or footer:
<a href="https://webtelemetry.dev/site/grazer.at"><img src="https://webtelemetry.dev/badge/grazer.at.svg" alt="Security grade"></a>
Generated automatically from passive, publicly observable data. Think something here is wrong or want this profile removed? See /bot. Machine-readable: JSON.