indexo.dev

cartepara.com

.com crawl

First seen 2026-04-12 · Last seen 2026-05-19 · ok HTTP/1.1 200 515 ms crawled 2026-05-19

FR · 57.128.27.153 · AS16276 OVH SAS

Reputation 94/100 dmarc monitor-only

sector other type homepage

HTML metadata

Title
Cartepara.com
Language
fr

Technology

Server
Apache

Registration

Registrar
OVH sas
Created
2017-09-27
Expires
2026-09-27 129 days left
Updated
2025-09-28
Name servers
  • dns107.ovh.net
  • ns107.ovh.net

DNS records live

NS
  • dns107.ovh.net
  • ns107.ovh.net
MX
  • 1 cartepara.com
  • 2 marketing.cartepara.com
Verified for
  • Google
  • Microsoft 365

Email authentication partial

SPF
v=spf1 a mx ip4:80.94.184.13 include:mesavantagespara.com include:spf.mailjet.com -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:dmarc-reports@cartepara.com; ruf=mailto:dmarc-reports@cartepara.com; fo=1
policy: none (monitoring only)
DKIM
  • dkim: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC1/Lg5gvl549QyvYBBfl/QYWGrA/Pfh99Xezprfk0tub4DbIogiZty2vXvUadfp2hcr/U0dZgnyEAaB5gyjN…
selectors probed

Certificate (current)

E7
from 2026-04-16 to 2026-07-15
Expires in 55 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://cartepara.com/

present
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
DENY
x-content-type-options
nosniff
content-security-policy
base-uri 'self'; connect-src 'self' https://maps.googleapis.com http://cartepara.com; default-src 'none'; font-src 'self'; form-action 'self' http://cartepara.com; frame-ancestors 'self'; frame-src 'self' https://www.google.com; img-src 'self' data: * blob: *; media-src 'none'; object-src 'none'; script-src 'unsafe-eval' 'unsafe-inline' 'self' https://www.google.com https://www.gstatic.com; style-src 'unsafe-inline' 'self';

Linked from (1)