indexo.dev

realisti.co

.co ok HTTP/1.1 200 827 ms

First seen 2026-06-04 · Last seen 2026-06-18 · crawled 2026-06-18

IE · 34.243.175.114 · AS16509 Amazon.com, Inc.

Reputation 100/100

sector real estate subsector property portal type blog

HTML metadata

Title
Log in | Realisti.co
Description
The quick, easy and innovative system to create virtual tours of Real Estate properties
Language
en
Canonical
https://viewer.realisti.co/login/
Translations
  • en
  • es
  • it

Open Graph

url
https://partners.casavo.com/
title
Realisti.co
locale
og.locale
site name
Realisti.co
description
The quick, easy and innovative system to create virtual tours of Real Estate properties

Technology

Server
uvicorn
CMS
Gatsby
jQuery
3.6.0
Stack
Django
Fonts
  • Google Fonts

Third-party hosts loaded (1)

  • fonts.googleapis.com×3

DNS records live

NS
  • ns-1348.awsdns-40.org
  • ns-1863.awsdns-40.co.uk
  • ns-355.awsdns-44.com
  • ns-713.awsdns-25.net
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
TXT
  • godaddy-verification= me46a1qdaka28lsn6a2io7bqae
Verified for
  • Google
  • Meta
  • Stripe

Email authentication strong

SPF
v=spf1 include:_spf.google.com include:spf.mandrillapp.com include:servers.mcsv.net include:5259730.spf01.hubspotemail.,net -all
strict (-all)
DMARC
v=DMARC1;p=quarantine;rua=mailto:developer+dmarc@casavo.com;ruf=mailto:developer+dmarc@casavo.com;fo=1;aspf=r
policy: quarantine
DKIM
  • k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
selectors probed

Certificate (current)

Amazon RSA 2048 M01
from 2026-05-26 to 2026-12-10
Expires in 171 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://editor.realisti.co/login/?next=/

present
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • cross-origin-opener-policy
findings
  • missing HSTS
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
same-origin
x-frame-options
DENY
x-content-type-options
nosniff
content-security-policy
default-src 'self' 'unsafe-eval' data: blob: wss://ws.realisti.co *.realisti.co *.casavo.com *.casavo.tech api-js.mixpanel.com api.stripe.com js.stripe.com hooks.stripe.com *.googleapis.com *.gstatic.com *.ggpht.com googleads.g.doubleclick.net *.google-analytics.com *.google.com *.google.it www.googleadservices.com www.googletagmanager.com stats.g.doubleclick.net *.hotjar.com *.hotjar.io wss://*.hotjar.com connect.facebook.net *.facebook.com bam.nr-data.net js-agent.newrelic.com js.hs-analytics.net js.hs-banner.com js.hsadspixel.net js.hsleadflows.net f.hubspotusercontent30.net app.hubspot.com track.hubspot.com js-na1.hs-scripts.com static.hsappstatic.net api.hubspot.com api.hubapi.com forms.hubspot.com cognito-identity.eu-west-1.amazonaws.com *.sentry.io browser.sentry-cdn.com js.sentry-cdn.com sentry.io *.iubenda.com js.usemessages.com cdnjs.cloudflare.com d3js.org *.casavo.com 'unsafe-hashes' 'sha256-1e5RR2OpHhuX2h0Bat19DsNTmqbo4M3T1pqfeTXCHaA=' 'sha256-sqQ5BqGTmfwRRq+kY4kVWR0g1jKdO
cross-origin-opener-policy
same-origin

Links to (1)

Linked from (1)

Use this data via API

Everything on this page for realisti.co is available as JSON from the indexo.dev REST & MCP API.

curl "https://indexo.dev/api/v1/domains/realisti.co" \
  -H "X-API-Key: idx_..."

Read the docs & get a free key →

Add a badge to your site

Own realisti.co? Show it's tracked on indexo.dev and link visitors straight to this page.

indexo.dev — realisti.co

<a href="https://indexo.dev/realisti.co" target="_blank" rel="noopener">
  <img src="https://indexo.dev/realisti.co/badge.svg" alt="indexo.dev — realisti.co">
</a>