indexo.dev

deltson.com

.com crawl

First seen 2026-05-11 · Last seen 2026-05-11 · ok HTTP/1.1 200 8860 ms crawled 2026-05-17

FR · 178.33.105.241 · AS16276 OVH SAS

Reputation 67/100 wrong cert no dmarc policy

Classifying

Technology

Server
Apache

Registration

Registrar
OVH sas
Created
1998-08-14
Expires
2026-08-13 85 days left
Updated
2025-08-14
Name servers
  • dns12.ovh.net
  • ns12.ovh.net

DNS records live

NS
  • dns12.ovh.net
  • ns12.ovh.net
MX
  • 1 mx0.mail.ovh.net
  • 100 mx3.mail.ovh.net
  • 5 mx1.mail.ovh.net
  • 50 mx2.mail.ovh.net
Verified for
  • Google

Email authentication weak

SPF
v=spf1 a:sweb03.deltson.com ip4:51.38.63.202 include:mx.ovh.com include:spf.mailjet.com include:sweb03.deltson.com -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current) wrong cert

R12
from 2026-04-19 to 2026-07-18
Expires in 59 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked over plain HTTP: http://deltson.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • checked over plain HTTP
  • CSP allows unsafe inline scripts/styles
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
accelerometer=(), autoplay=(), camera=(), encrypted-media=(), geolocation=(self "https://www.paypal.com"), gyroscope=(), magnetometer=(), microphone=(), payment=(), sync-xhr=(self "https://client.ski-loc.com"), usb=(), xr-spatial-tracking=(self)
x-content-type-options
nosniff
content-security-policy
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://checkoutshopper-test.cdn.adyen.com https://checkoutshopper-live.cdn.adyen.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://tag.aticdn.net/piano-analytics.js https://cqmrnlv.pa-cd.com https://code.jquery.com https://api.systempay.fr https://www.paypal.com https://cdnjs.cloudflare.com https://matomo.2lagence.fr https://cdn.jsdelivr.net https://ssl.google-analytics.com https://kit.fontawesome.com https://src.deltson.com https://www.google-analytics.com https://www.google.com https://maps.googleapis.com https:
strict-transport-security
max-age=63072000; includeSubDomains; preload

Linked from (1)