bluedart.com

HTML metadata

Title

Blue Dart Express Limited- India’s Most Innovative and Awarded Express logistics company. - Bluedart

Description

Blue Dart Express Limited- India’s Most Innovative and Awarded Express logistics company.

Language

en-US

Canonical

https://bluedart.com

Translations

en

Open Graph

url: https://bluedart.com
title: Blue Dart Express Limited- India’s Most Innovative and Awarded Express logistics company. - Bluedart
locale: en_US
image:url: https://bluedart.com/documents/20182/0/BD_Seamless%20Deliveries_Banner-3%20%281%29.png/f6588c99-bb2f-010c-6ce6-76f606884132?version=1.0&t=1733141846269&imagePreview=1
site name: Bluedart
description: Blue Dart Express Limited- India’s Most Innovative and Awarded Express logistics company.
locale:alternate: en_US

Technology

Stack: Java

Third-party hosts loaded (1)

cdnjs.cloudflare.com×2

Social

Registration

Registrar

Key-Systems GmbH

Created

1996-07-23

Expires

2028-07-22 793 days left

Updated

2025-11-30

Name servers

ns2.dhl.com
ns2b.dhl.com
ns4.dhl.com
ns4b.dhl.com
ns6.dhl.com
ns6b.dhl.com

DNS records live

NS

ns2.dhl.com
ns2b.dhl.com
ns4.dhl.com
ns4b.dhl.com
ns6.dhl.com
ns6b.dhl.com

MX

5 dhl-com.fortimailcloud.com

TXT

Show 7 TXT records

DKIM bluedart._domainkey.bluedart.com
DKIM bluedart-dkim._domainkey.bluedart.com
DKIM default._domainkey.bluedart.com
DKIM acls02._domainkey.bluedart.com
DKIM default._domainkey.mail.bluedart.com
MS=CBFEE0BF939565336FF46E98093A53861CDA006B
dtm-domain-verification=zWuUBey_U3jmknytv_KHmVpRjcfqEfP_r3pgm4vWDXc

Verified for

Apple
Atlassian
GlobalSign
Google
Microsoft 365
OneTrust

Email authentication strong

SPF

v=spf1 include:dpdhl._spf.dhl.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; sp=reject; fo=1; rua=mailto:dmarc-reports@dhl.com;

policy: quarantine · sp=reject

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4VemQwyTFW519ZKYm77qUgKgxWG23hPG/SQjtcRO7RPAydwFoz+f14HS2duIcy0PLQ6sYO2W5K0wh5VeT…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNELtpIegoWaGM1R2JfNo1mPTLC5Wx9chvCANtf6G3BpTpPWxNSvJQ4QSl0YEeNW6MFuClj+/TMPa3Rvqq…

selectors probed

Certificate (current)

DPDHL Global TLS CA - I5

from 2025-09-05 to 2026-09-05

Expires in 107 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://bluedart.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy

Header values

x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(self), ambient-light-sensor=(self), autoplay=(self), battery=(self), camera=(self), cross-origin-isolated=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), execution-while-not-rendered=(self), execution-while-out-of-viewport=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), keyboard-map=(self), magnetometer=(self), microphone=(self), midi=(self), navigation-override=(self), payment=(self), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self), usb=(self), web-share=(self), xr-spatial-tracking=(self)
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bdtracking.fareye.co https://*.paytmpayments.com https://*.bluedart.com https://csi.gstatic.com https://ajax.googleapis.com https://maps.googleapis.com http://maps.googleapis.com http://www.google-analytics.com https://bluedartomcpoc-bluedarttrial.itom2.management.europe.oraclecloud.com https://cdnjs.cloudflare.com https://*.gstatic.com https://cdn.datatables.net https://securegw-stage.paytm.in https://static-staging.paytm.in https://*.paytm.com https://*.paytm.in https://*.razorpay.com https://fonts.googleapis.com https://www.googletagmanager.com https://cdn.what3words.com https://gateway.zscaler.net https://connect.facebook.net https://snap.licdn.com https://googleads.g.doubleclick.net;
strict-transport-security: max-age=31536000; includeSubDomains