indexo.dev

nawy.com

.com crawl

First seen 2026-06-01 · Last seen 2026-06-02 · ok HTTP/1.1 200 1168 ms crawled 2026-06-02

US · 18.165.140.121 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Nawy |Buy, Sell, Rent and Invest in Premium Real Estate in Egypt
Description
Nawy is the Best Real Estate Brokerage company in Egypt. Browse properties for sale or rent in Premium compounds in New Cairo, October, North Coast, etc, with fractional investment & mortgage solutions. Find Your Home Now!
Language
en
Canonical
https://www.nawy.com
Translations
  • ar
  • en

Open Graph

url
https://www.nawy.com
title
Nawy |Buy, Sell, Rent and Invest in Premium Real Estate in Egypt
description
Nawy is the Best Real Estate Brokerage company in Egypt. Browse properties for sale or rent in Premium compounds in New Cairo, October, North Coast, etc, with fractional investment & mortgage solutions. Find Your Home Now!

Technology

CDN
Amazon CloudFront
CMS
Next.js
JS framework
Next.js

Social

Contact

Address
ABC Bank, South 90th, 12345, New cairo, Cairo, EG

Registration

Registrar
GoDaddy.com, LLC
Created
2004-08-18
Expires
2033-08-18 2632 days left
Updated
2023-10-22
Name servers
  • ns-1450.awsdns-53.org
  • ns-1838.awsdns-37.co.uk
  • ns-207.awsdns-25.com
  • ns-734.awsdns-27.net

DNS records live

NS
  • ns-1450.awsdns-53.org
  • ns-1838.awsdns-37.co.uk
  • ns-207.awsdns-25.com
  • ns-734.awsdns-27.net
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
TXT
  • detectify-verification=c1e81a31fde99c1d919a55e8d3321f9a
  • secyour-scanner-verification=mzzbnfIdbrh4PiN5x51qBhwjL1l1tI68ou5817222MYcCyRE-B5KBMSdolD
  • DirectFedAuthUrl=https://portal.sso.eu-central-1.amazonaws.com/saml/assertion/MTUwNTE4NDkyODY1X2lucy05OTNmOTQ5NDllYWYzMGNm
Verified for
  • Canva
  • Google
  • Meta
  • Microsoft 365
  • Zoho

Email authentication strong

SPF
v=spf1 include:_spf.google.com include:amazonses.com ~all
softfail (~all)
DMARC
v=DMARC1; p=reject; pct=100; rua=mailto:dmarc-reports@nawy.com; ruf=mailto:dmarc-reports@nawy.com;
policy: reject (enforced)
DKIM
Show 4 DKIM selectors
  • google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCh1mPc4PBg90nCWbUunui7EODc3uGuET/A0nJ7untTZ4h4ha594fl1dIvnXU/9TEdkqt8BJBfMQfja1K/JZj…
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodifPR730iTZRJ5qx3rBblGNM66RwcWmkDlePCsZZhnNGelU8UAI8HSCktH6DIXQjbRB2MSAsmezB5ONYU…
  • s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VYLNv+9V6T4AZ3tZvzWSwqVR+ndgJ+yPIiZJT/4X4PgA/nNcLzZY+3mzszRNHG8UBxmFFsceOplADJEmM…
selectors probed

Certificate (current)

Amazon RSA 2048 M01
from 2025-12-16 to 2027-01-15
Expires in 225 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.nawy.com/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing Permissions Policy
Header values
referrer-policy
strict-origin-when-cross-origin
x-content-type-options
nosniff
content-security-policy
default-src 'self'; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline'; script-src 'self' https://client.rum.us-east-1.amazonaws.com/1.2.1/cwr.js https://cdnjs.cloudflare.com/ajax/libs/pdf.js/ https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.youtube.com https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/plugins/identity.js https://connect.facebook.net/signals/config/1525576007456708 https://connect.facebook.net/signals/config/1465344211021108 https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://ads.tiktok.com https://static.hotjar.com https://*.clarity.ms https://c.bing.com https://api.mapbox.com 'unsafe-inline' https://connect.facebook.net/signals/config/undefined; frame-src 'self' bytedance: sslocal: https://webapi.nawy.com https://listing-api.nawy.com https://www.facebook.com https://www.googletagmanager.com https://www.youtube.com https://www.google.com https://www.google.com.eg; font-src
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (6)

Linked from (1)