indexo.dev

bthemattic.com

.com crawl

First seen 2026-06-01 · Last seen 2026-06-01 · ok HTTP/1.1 200 486 ms crawled 2026-06-01

FR · 51.255.150.201 · AS16276 OVH SAS

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Bthemattic
Description
B Thinker
Language
en
Generator
Free UnderConstructionPage plugin for WordPress

Technology

Server
nginx
CMS
WordPress

Third-party hosts loaded (1)

  • fonts.bunny.net×1

Registration

Registrar
Arsys Internet, S.L. dba NICLINE.COM
Created
2011-06-08
Expires
2027-06-08 370 days left
Updated
2026-05-31
Name servers
  • dns1.nsgmc.com
  • dns2.nsgmc.com

DNS records live

NS
  • dns1.nsgmc.com
  • dns2.nsgmc.com
MX
  • 10 mx.gmediac.com

Email authentication weak

SPF
v=spf1 a ip4:109.200.5.220 ip4:109.200.5.221 ip4:109.169.93.199 ip4:88.150.182.37 ip4:54.38.13.232 mx ptr ~all
softfail (~all)
DMARC
not published
DKIM
  • default: p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCt2Flk02IxbtdGJvrvf+v9OYHriXgqif0hcisL86AxOTiI+ebO41wDXm4Oc53+Wy61iJ6x4DP78zv5H7cU9CtxS333XTuqR2maCF…
selectors probed

Certificate (current)

E8
from 2026-04-28 to 2026-07-27
Expires in 55 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://bthemattic.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(self "https://maps.google.com"), fullscreen=*
x-content-type-options
nosniff
content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://*; img-src data: https://*; font-src 'self' data: https://*;
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (1)

Linked from (1)