indexo.dev

btcbillpay.com

.com crawl

First seen 2026-04-30 · Last seen 2026-05-08 · ok HTTP/1.1 200 6984 ms crawled 2026-05-08

US · 66.11.240.138 · AS36545 Bledsoe Telephone Cooperative Corporation

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Login - Bledsoe Telephone Cooperative Inc.

Technology

Server
web

Contact

Phone

Registration

Registrar
The Registry at Info Avenue, LLC d/b/a Spirit Communications
Created
2007-01-02
Expires
2027-01-02 227 days left
Updated
2025-12-04
Name servers
  • ns1.bledsoe.net
  • ns2.bledsoe.net

DNS records live

NS
  • ns1.bledsoe.net
  • ns2.bledsoe.net
MX
  • 10 mx.btcbillpay.com
  • 20 mx.btcbillpay.com
TXT
  • spf2.0/pra mx a:mx2.bledsoe.net a:mx1.bledsoe.net a:mx3.bledsoe.net a:mx4.bledsoe.net a:mail.bledsoe.net a:smtp.bledsoe.net a:mail2.bledsoe.net -all

Email authentication weak

SPF
v=spf1 mx a:mx2.bledsoe.net a:mx1.bledsoe.net a:mx3.bledsoe.net a:mx4.bledsoe.net include:infoave.net a:mail.bledsoe.net a:smtp.bledsoe.net a:mail2.bledsoe.net -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV R36
from 2025-07-18 to 2026-08-14
Expires in 86 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.btcbillpay.com/ebpp/Login?ReturnUrl=%2Febpp

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self'; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://ssl.google-analytics.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://*.cardconnect.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://maps.googleapis.com;
strict-transport-security
max-age=31536000; includeSubDomains

Links to (1)

Linked from (2)