bvsport.com

.com crawl

First seen 2026-04-21 · Last seen 2026-05-17 · ok HTTP/1.1 200 3132 ms crawled 2026-05-14

FR · 91.121.239.233 · AS16276 OVH SAS

Reputation 94/100 dmarc monitor-only

sector sports type ecommerce

HTML metadata

Title

Vente Manchons de compression, chaussettes de contention, booster, cuissards, socquettes | BV SPORT

Description

BV SPORT | La référence dans la contention compression du sportif pour la performance et la récupération. chaussettes de contention, booster, compression ...

Language

fr-FR

Translations

en-us
fr-fr
it-it

Technology

Server: nginx

Fonts

Google Fonts

Third-party hosts loaded (4)

ajax.googleapis.com×1
cl.avis-verifies.com×1
connect.nosto.com×1
fonts.gstatic.com×1

Social

Contact

Email

Phone

0477521147

Registration

Registrar

OVH sas

Created

2000-05-11

Expires

2027-05-11 357 days left

Updated

2026-05-12

Name servers

dns101.ovh.net
ns101.ovh.net

DNS records live

NS

dns101.ovh.net
ns101.ovh.net

MX

0 bvsport-com.mail.protection.outlook.com

TXT

MS=ms25538726

Email authentication partial

SPF

v=spf1 include:hebergement.groupecfi.com include:spf.mailjet.com include:sendgrid.net include:spf.shpmid.net include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFZxq1ro1T+/mQ5JtoKYmCw8ZtjSMGw1qcdjsWIz5h5hsKCC94wzl7TWbYbjLgC/pXhbKXkZnkM6tJ…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

R13

from 2026-03-29 to 2026-06-27

Expires in 39 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.bvsport.com/fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src https:; connect-src https: wss:; font-src https: data:; img-src https: data: blob:; frame-src https:; frame-ancestors 'self'; worker-src blob: https: data: 'unsafe-inline' 'unsafe-eval'; form-action https: javascript:; script-src https: data: 'unsafe-inline' 'unsafe-eval';style-src https: data: 'unsafe-inline'; base-uri 'self';
strict-transport-security: max-age=63072000; includeSubDomains; preload