gewiss.com

HTML metadata

Title

Homepage EN | Gewiss

Language

en

Canonical

https://www.gewiss.com/ww/en/

Translations

de
de-ch
de-de
en
en-al
en-gb
es
es-cl
es-es
fr
fr-be
fr-ch
fr-fr
he-il
hu-hu
it
it-al
it-ch
it-it
nl-be
nl-nl
pl-pl
ro-ro
tr-tr

Open Graph

url: https://www.gewiss.com/ww/en/
title: Homepage EN | Gewiss
site name: Gewiss Digital Experience

Technology

Server: Apache

Social

Contact

Phone

00385040167

Registration

Registrar

Register SPA

Created

1997-04-14

Expires

2027-04-15 331 days left

Updated

2026-04-16

Name servers

ns1-03.azure-dns.com
ns2-03.azure-dns.net
ns3-03.azure-dns.org
ns4-03.azure-dns.info

DNS records live

NS

ns1-03.azure-dns.com
ns2-03.azure-dns.net
ns3-03.azure-dns.org
ns4-03.azure-dns.info

MX

10 gewiss-com.mail.protection.outlook.com

TXT

Show 12 TXT records

google-site-verification=SKCKQEzVUAcVndTBBDw8LBaVhZqwadK7YWpPmMJK334
pinterest-site-verification=f4b443f15742bcb884c6564a810e7631
google-site-verification=RSQrC8J_ToO2kkU_9_4kEUbJpIZDMIfkrHYtoZlb-HU
notion-domain-verification=2pgPc9vinevrJeAdXMsX21LSGL70cXKwALXKo8agT8f
d365mktkey=XAvH6kTKT0Se8UgJH7dxLNvbXZvKxDlXmQBtP5GRhDQx
have-i-been-pwned-verification=dweb_fofk9m5rky2ydpm25n6pcbrq
google-site-verification=gH8KxPj8e62FvIfLSf91OrN04AxQQPTIPPoyFyne3O0
lx+qJVr6yxTMCziYkNorNjomjXfT5KAiznXxPAiUZLXWu9nPHi60C26YoD3+Rhy+WldzYmyRVKiuszZBioeF5A==
MS=ms64439708
dm7ILjRbfrj/UqRF3ky1MRuKW4q+ka3xkeI+t1wLTScMDV0zfSkDJll79tNxvt3Lec6fM31hpnaiRjObEtJnkQ==
bc827wb8lj3jwmwm9h81trtmvw6b70pg
888NHzP2qNB2lHT4Ygofdiy6HaHnRjB694SiMdlzTD44Ek303JqT3UYptuUpELDVjkWXf0e7Lvuz5JWwaA+V8A==

Email authentication partial

SPF

v=spf1 ip4:217.61.34.154 include:spf.protection.outlook.com include:mktomail.com include:_spf-customers.eventboost.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:60a22d0324f9.a@dmarcinput.com

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6DveyIwVpzFs2tH3Gei2jZN7OzdRsOB6fLVGcaWc0uh1HVqikt9Jytri+ylo+OGXqiN7lz0wyKMZr…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hv6wtvte+3XlD5/LBJ4402/5P3ta6NdK55hkbY+TFJ9oo9Uregf7KaleasV5EmaGA1xdPxg0lHN9G…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6Q/xaypmzXzAgwg4NUviR6ybPTme8TAGNZSEuNBXbCPsSXuqdCC7P6jEINBD7vYLiVZo4vM1IYH2GB4MQ…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc3FCtNClnHQ8uJw3zVTzT0R+98Z8JqH3eogQfHhgJw8SafMuywJT0RSAdsbAyB2XSAX0PQPy8mdtYkGmy…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-11-13 to 2026-12-04

Expires in 199 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.gewiss.com/ww/en/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' https://*.gewiss.com; frame-src 'self' https://www.trackads.eu https://gtm.gewiss.com https://td.doubleclick.net https://www.googletagmanager.com https://www.google.com/ https://consent.cookiebot.com https://consentcdn.cookiebot.com/ https://www.youtube.com https://www.youtube-nocookie.com https://gectotem.gewiss.com https://fastcalc.dialux.com https://www.facebook.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://analytics.tiktok.com https://scripts.clarity.ms https://cxppeur1rdrect01sa02cdn.blob.core.windows.net https://cdnjs.cloudflare.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://td.doubleclick.net https://pagead2.googlesyndication.com https://gewissipt-assets.isitetv.net https://ge/googlewissipt-assets.isitetv.net https://static.isitetv.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.clarity.ms https://snap.licdn.com htt
strict-transport-security: max-age=63072000; includeSubDomains