phishen-impossible.at
FMachen wir PHISHEN IMPOSSIBLE!
Phishing bedeutet Datendiebstahl. Hier erfährst du, wie du deine Passwörter, Bankdaten oder andere sensible Informationen vor Betrügern schützen kannst.
Last scanned 1 h agoCompare with another site →
Built with
- Backend
- PHP
Also detected
- Libraries
- jQuery
Overview
- Status
- alive
- Registered
- unknown (this domain's registry doesn't publish it via RDAP)
- First seen here
- 2026-09-22
- Security grade
- F (45/100, from headers & TLS)
- Privacy score
- 90/100 (0 third-party script hosts, 0 tracking/marketing services)
- Hosting
- A1 Telekom Austria AG · AS8447 · Austria
- Response time
- 800 ms to first byte, measured from our crawler
- TLS certificate
- DigiCert Inc · TLSv1.3 · expires 2027-02-13
- Language
- de
- Mobile-ready
- yes (viewport meta tag)
- Linked to from
- 6 other sites seen so far
What to fix
- Add a Content-Security-Policy
Limits which scripts can run, and is the main defense against XSS. Start with Content-Security-Policy-Report-Only to test. - Add X-Content-Type-Options
Header: X-Content-Type-Options: nosniff - Prevent clickjacking
Header: X-Frame-Options: DENY (or a CSP frame-ancestors directive). - Add a Referrer-Policy
Header: Referrer-Policy: strict-origin-when-cross-origin - Mark cookies Secure and HttpOnly
At least one cookie is sent without these flags, exposing it to interception or scripts. - Publish an SPF record
A DNS TXT record listing who may send email for this domain, which prevents spoofing. - Publish a DMARC record
A TXT record at _dmarc.<domain>; start with v=DMARC1; p=none; to monitor.
Security & email signals
- ✓ HTTPS
- ✓ HSTS
- ✗ Content-Security-Policy
- ✗ X-Content-Type-Options
- ✗ X-Frame-Options
- ✗ Referrer-Policy
- ✗ Permissions-Policy
- ✗ SPF record
- ✗ DMARC record
- ✗ DKIM record
- ✗ Cookies set securely
- ✓ Has real content (not an empty shell)
- ✓ Valid TLS certificate
Badge
Show this site's security grade in a README or footer:
<a href="https://webtelemetry.dev/site/phishen-impossible.at"><img src="https://webtelemetry.dev/badge/phishen-impossible.at.svg" alt="Security grade"></a>
Generated automatically from passive, publicly observable data. Think something here is wrong or want this profile removed? See /bot. Machine-readable: JSON.