indexo.dev

vaillant.at

.at crawl

First seen 2026-05-14 · Last seen 2026-05-19 · ok HTTP/1.1 200 2783 ms crawled 2026-05-19

DE · 195.179.164.18 · AS61157 PlusServer GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Wärmepumpen und andere Heizungen - Vaillant Österreich
Description
Finden Sie alles Wissenswerte zum Thema Wärmepumpe und Heizen ✓ Informieren Sie sich über unser Sortiment an Heizungen!
Language
de
Translations
  • de-at

Open Graph

url
http://www.vaillant.at/privatanwender/
country-name
de_AT

Technology

Third-party hosts loaded (4)

  • cdn01l.vaillant-group.com×5
  • cdn.optimizely.com×2
  • cdn.consentmanager.net×1
  • logx.optimizely.com×1

Social

Contact

Phone
Address
Clemens-Holzmeister-Straße 6, 1100, Wien, Wien, Österreich

DNS records live

NS
  • a.prim-ns.de
  • a.sec-ns.net
  • c.sec-ns.de
  • m.sec-ns.de
  • n.sec-ns.net
MX
  • 10 vaillant-at.mail.protection.outlook.com
TXT
Show 6 TXT records
  • _8jcmbcnwdwe6x86x7nmdlmn2wzqplln
  • brevo-code:2a5849fea4ba4b792e953f69400cd80c
  • _globalsign-domain-verification=Se_IWSe75hkKnUI4UL9PdxmTDGlF8uiWS4EZAQ7oqs
  • 429xx2c8vg55j214qcyqz30fkjdvhf59
  • MS=ms87196479
  • rD6DbfQNpHckUvMbxvTPMa4JHiTwv/38J0vQ4906+MkInDsx5mhKSGt7PhMD3IP33EATp/X6a0dTgSVSNuQKHQ==

Email authentication partial

SPF
v=spf1 mx ip4:57.66.132.25 ip4:57.66.132.26 ip4:57.66.132.12 ip4:57.66.211.122 ip4:57.66.211.126 ip4:57.66.211.130 ip4:57.66.211.134 include:spf.protection.outlook.com -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

GlobalSign GCC R6 AlphaSSL CA 2025
from 2026-02-18 to 2027-03-22
Expires in 306 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.vaillant.at/privatanwender/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
no-referrer-when-downgrade
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(self "https://cat.vaillant.it" "https://cat.hermann-saunierduval.it")
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: cdn01l.vaillant-group.com *.adalyser.com *.adform.com *.adform.net *.adroll.com *.bing.com *.consentmanager.net *.contentsquare.net *.criteo.com *.doubleclick.net *.facebook.com *.facebook.net *.g.doubleclick.net *.glp8.net *.google.ad *.google.ae *.google.al *.google.am *.google.as *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bi *.google.bj *.google.bs *.google.bt *.google.by *.google.ca *.google.cat *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.ck *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.vi *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af
strict-transport-security
max-age=63072000; preload

Links to (6)

Linked from (1)