indexo.dev

bmw-public-charging.com

.com crawl

First seen 2026-05-30 · Last seen 2026-05-31 · ok HTTP/1.1 200 592 ms crawled 2026-05-31

NL · 20.31.32.100 · AS8075 Microsoft Corporation

Reputation 100/100

Classifying

HTML metadata

Title
BMW Charging | BMW:si latausverkosto | Suomi
Description
Käytä erästä maailman laajimmista latausverkostoista BMW Charging:lla - löydä latausasemat kätevästi, lataa sähköä sovelluksella tai kortilla ja maksa - rekisteröidy nyt!
Language
fi-FI
Translations
  • de ×4
  • fr ×4
  • en ×3
  • it ×2
  • nl ×2
  • cs
  • da
  • el
  • es
  • et
  • fi
  • hu
  • ja
  • lt
  • lv
  • nb
  • pl
  • pt
  • sk
  • sl
  • sv

Technology

Third-party hosts loaded (1)

  • static.digitalchargingsolutions.com×13

Registration

Registrar
CSC Corporate Domains, Inc.
Created
2020-03-17
Expires
2027-03-17 289 days left
Updated
2026-03-13
Name servers
  • ns1-09.azure-dns.com
  • ns2-09.azure-dns.net
  • ns3-09.azure-dns.org
  • ns4-09.azure-dns.info

DNS records live

NS
  • ns1-09.azure-dns.com
  • ns2-09.azure-dns.net
  • ns3-09.azure-dns.org
  • ns4-09.azure-dns.info
MX
  • 0 bmwpubliccharging-com0i1e.mail.protection.outlook.com
Verified for
  • GlobalSign
  • Google
  • Microsoft 365

Email authentication strong

SPF
v=spf1 include:spf.mailjet.com include:spf.protection.outlook.com include:mail.zendesk.com -all
strict (-all)
DMARC
v=DMARC1; p=reject; adkim=s; aspf=r; pct=100;
policy: reject (enforced)
DKIM
no key found at common selectors

Certificate (current)

Starfield Secure Certificate Authority - G2
from 2026-02-26 to 2027-02-26
Expires in 270 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://bmw-public-charging.com/web/fi/bmw-fi

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
content-security-policy
default-src 'self' 'unsafe-inline' https://static.digitalchargingsolutions.com https://api.mixpanel.com https://api-js.mixpanel.com https://api-eu.mixpanel.com https://cdn.mxpnl.com https://*.adyen.com https://*.cdn.adyen.com https://*.paypal.com https://pay.google.com https://google.com https://*.google.com https://applepay.cdn-apple.com https://*.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pay.datatrans.com/ https://static.digitalchargingsolutions.com https://*.googleapis.com https://*.gstatic.com https://*.ggpht.com https://api.mixpanel.com https://api-js.mixpanel.com https://api-eu.mixpanel.com https://cdn.mxpnl.com https://*.adyen.com https://*.cdn.adyen.com https://*.paypal.com https://pay.google.com https://google.com https://*.google.com https://applepay.cdn-apple.com ; frame-src 'self' https://pay.sandbox.datatrans.com https://*.adyen.com https://*.cdn.adyen.com https://*.paypal.com https://pay.google.com https://google.com https://*.google.com htt
strict-transport-security
max-age=31536000; includeSubDomains

Links to (5)

Linked from (1)