indexo.dev

openclawinstall.org

.org crawl

First seen 2026-04-15 · Last seen 2026-05-10 · ok HTTP/1.1 200 2990 ms crawled 2026-05-09

US · 66.33.22.218 · AS400940 Railway

Reputation 95/100 weak security headers

sector tech type landing page

HTML metadata

Title
OpenClaw Install Guide — Step-by-Step Tutorial to Install ClawdBot ($9.9)
Description
Complete OpenClaw install guide with video tutorial. Learn how to install ClawdBot quickly with our step-by-step OpenClaw tutorial. Free tips + premium guide for $9.9.
Language
en
Canonical
https://openclawinstall.org/en
Translations
  • ar
  • da
  • de
  • en
  • es
  • fi
  • fr
  • it
  • ja
  • ko
  • nl
  • no
  • sv
  • zh
  • zhtw

Open Graph

url
https://openclawinstall.org/en
title
OpenClaw Install Guide: Complete Tutorial to Install ClawdBot
locale
en
description
Step-by-step OpenClaw install guide with video tutorial. Learn how to install ClawdBot on Mac, Windows, and Linux for just $9.9.

Technology

Server
railway-edge
CMS
Next.js

Third-party hosts loaded (1)

  • app.pageview.app×1

Registration

Registrar
Cloudflare, Inc.
Created
2026-02-02
Expires
2027-02-02 258 days left
Updated
2026-02-07
Name servers
  • dee.ns.cloudflare.com
  • ethan.ns.cloudflare.com

DNS records live

NS
  • dee.ns.cloudflare.com
  • ethan.ns.cloudflare.com
TXT
  • google-site-verification=Ip9sUb4wxfW9t-hfSlNQM-_-7F7xjlqc3mWnK4wfpgw

Email authentication no MX

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-04-03 to 2026-07-02
Expires in 44 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://openclawinstall.org/

present
  • content-security-policy
  • x-frame-options
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • weak frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
ALLOW-FROM https://scratch.mit.edu
content-security-policy
default-src 'self' * blob: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' * 'unsafe-inline' 'unsafe-eval'; style-src 'self' * 'unsafe-inline'; img-src 'self' * data: blob:; media-src 'self' * blob:; connect-src 'self' *; frame-src 'self' *; worker-src 'self' blob: *; child-src 'self' blob: *; font-src 'self' *;

Linked from (2)