indexo.dev

bauimpulse.app

.app crawl

First seen 2026-04-13 · Last seen 2026-05-02 · ok HTTP/1.1 200 302 ms crawled 2026-05-06

AT · 77.244.254.35 · AS47692 Nessus GmbH

Reputation 97/100 dmarc monitor-only

Classifying

HTML metadata

Title
Bauimpulse
Language
en

Technology

Server
Apache
CMS
Gatsby

DNS records live

NS
  • ns1.dns-parking.com
  • ns2.dns-parking.com
MX
  • 10 smtp1.tmbp.at
  • 20 smtp1.tmbp.at
TXT
  • _globalsign-domain-verification=Z6puZOrjBjVfokrbordayiITpJcV5za8gUtqFxRT7m
  • apple-domain-verification=fzytG5qH0fDuY4Lf

Email authentication strong

SPF
v=spf1 mx a ip4:82.218.164.128/27 include:spf.protection.outlook.com ~all
softfail (~all)
DMARC
v=DMARC1; p=none;
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

GlobalSign GCC R6 AlphaSSL CA 2025
from 2025-11-03 to 2026-12-05
Expires in 200 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://bauimpulse.app/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-content-type-options
nosniff
content-security-policy
default-src 'self' blob:; style-src 'self' 'unsafe-inline'; img-src 'self' https://apiv2-bauimpulse.locci.cc https://apiv2.locci.cc https://locci.cc https://chat.locci.cc:1895 https://chat.locci.cc https://cdnimg.locci.cc https://*.picsum.photos/ https://picsum.photos https://sample-videos.com https://login-staging.worldofwienerberger.app https://apiv2-staging.locci.cc https://*.tile.openstreetmap.org https://unpkg.com/leaflet@1.7.1/ http://locciv2-web.tmbp.at https://locidev.tmbp.at https://locciv2-web.tmbp.at https://www.locci.cc data: blob:; connect-src 'self' blob:
strict-transport-security
max-age=31536000; includeSubDomains; preload

Linked from (1)