indexo.dev

giwog.at

.at crawl

First seen 2026-05-30 · Last seen 2026-05-31 · ok HTTP/1.1 200 482 ms crawled 2026-05-31

DE · 18.158.102.247 · AS16509 Amazon.com, Inc.

Reputation 92/100 spf without fallback

Classifying

HTML metadata

Title
Giwog: GIWOG - weil Wohnen Leben ist
Description
Die GIWOG steht für leistbaren Wohnraum, nachhaltige Bauweise, serviceorientierte Begleitung bei der Wohnungssuche sowie professionelle Hausverwaltung in Oberösterreich und der Steiermark.
Language
de
Generator
TYPO3 CMS
Canonical
https://www.giwog.at/

Open Graph

title
GIWOG - weil Wohnen Leben ist
image:url
https://www.giwog.at/fileadmin/user_upload/giwog_logo.jpg
description
Die GIWOG steht für leistbaren Wohnraum, nachhaltige Bauweise, serviceorientierte Begleitung bei der Wohnungssuche sowie professionelle Hausverwaltung in Oberösterreich und der Steiermark.

Technology

CDN
Amazon CloudFront
Server
Apache
jQuery
1.8.3 known XSS (<3.5)

Third-party hosts loaded (1)

  • cdnjs.cloudflare.com×1

Social

Contact

Email

DNS records live

NS
  • dns1.telekom.at
  • dns2.telekom.at
  • dns3.telekom.at
MX
  • 10 mx01.hornetsecurity.com
  • 20 mx02.hornetsecurity.com
  • 30 mx03.hornetsecurity.com
  • 40 mx04.hornetsecurity.com
Verified for
  • Apple
  • Brevo
  • Google
  • Microsoft 365

Email authentication strong

SPF
v=spf1 redirect=giwog.at.spf.hornetdmarc.com
missing all
DMARC
v=DMARC1; p=reject; pct=100; ri=3600; fo=1:0; rua=mailto:a.i63cbd1q@reports.hornetdmarc.com; ruf=mailto:f.i63cbd1q@reports.hornetdmarc.com; adkim=s; aspf=s
policy: reject (enforced)
DKIM
no key found at common selectors

Certificate (current)

E7
from 2026-04-19 to 2026-07-18
Expires in 47 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://www.giwog.at/

present
  • content-security-policy
  • x-content-type-options
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-content-type-options
nosniff
content-security-policy
frame-ancestors 'self'; default-src 'self' data: *.google-analytics.com *.gstatic.com *.googleapis.com *.ggpht.com *.doubleclick.net; img-src 'self' data: *.gstatic.com *.googleapis.com *.googletagmanager.com *.ggpht.com *.giwog.at *.youtube.com; frame-src 'self' *.vimeo.com *.youtube-nocookie.com *.google.com *.ggpht.com *.googlevideo.com *.youtube.com *.lt1.at *.sibforms.com; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.gstatic.com *.googleapis.com *.cloudflare.com *.googletagmanager.com; style-src 'self' 'unsafe-inline'

Links to (3)

Linked from (2)