indexo.dev

jawg.io

.io crawl

First seen 2026-04-13 · Last seen 2026-05-02 · ok HTTP/1.1 200 1860 ms crawled 2026-05-07

FR · 188.165.50.3 · AS16276 OVH SAS

Reputation 95/100 weak security headers

Classifying

HTML metadata

Generator
Gatsby 4.25.7

Technology

CDN
Cloudflare
CMS
Gatsby
Analytics
  • Google Tag Manager

Third-party hosts loaded (1)

  • www.googletagmanager.com×1

DNS records live

NS
  • ns-104-b.gandi.net
  • ns-125-a.gandi.net
  • ns-66-c.gandi.net
MX
  • 1 aspmx.l.google.com
  • 10 aspmx2.googlemail.com
  • 10 aspmx3.googlemail.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
Verified for
  • Brevo
  • Google
  • Stripe

Email authentication strong

SPF
v=spf1 include:_spf.mlsend.com include:spf.mailjet.com include:_spf.google.com include:8979381.spf10.hubspotemail.net include:m.ghost.io -all
strict (-all)
DMARC
v=DMARC1; p=quarantine; rua=mailto:dmarc@jawg.io; ruf=mailto:dmarc@jawg.io
policy: quarantine
DKIM
  • google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCfTs84LSgatCAkhI7GTMIAR3bkGXKnUmNVt6TL6WB/UU4pSSXWGB71VV7ueFGTVCUrlkKwDgeAMmgnUq/i9S…
selectors probed

Certificate (current)

E8
from 2026-03-26 to 2026-06-24
Expires in 34 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.jawg.io/

present
  • x-frame-options
findings
  • missing HSTS
  • missing Content Security Policy
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
deny

Linked from (1)