dhlexpress.fr
HTML metadata
Technology
- Server
- nginx
- Fonts
-
- Google Fonts
Third-party hosts loaded (5)
- fonts.googleapis.com×2
- fonts.gstatic.com×1
- maps.googleapis.com×1
- www.dhl.com×1
- www.google.com×1
Social
Registration
- Registrar
- KEY-SYSTEMS GmbH
- Created
- 2017-02-17
- Expires
- 2026-07-30 70 days left
- Updated
- 2025-11-22
- Name servers
-
- ns01.brandshelter.com
- ns02.brandshelter.net
DNS records live
- NS
-
- ns01.brandshelter.com
- ns02.brandshelter.net
- MX
-
- 10 dhlexpress.fr
- 20 dev.dhlexpress.fr
- 30 prod.dhlexpress.fr
- TXT
-
v=BIMI1;l=https://www.dhl.com/dhl-email-logo/dpdhl_bimi.svg
- Verified for
-
- GlobalSign
Email authentication strong
- SPF
-
v=spf1 mx ip4:46.105.111.126 ip4:51.75.141.188 ip4:87.98.179.2 ip4:51.210.12.230 ip4:51.210.10.229 ip4:51.210.13.242 ip4:51.210.13.246 ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; fo=0; rua=mailto:dmarc-reports@dhl.com;policy: reject (enforced) - DKIM
- no key found at common selectors
Certificate (current)
DHL Global TLS CA I6
Expires in 142 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP uses wildcard sources
- weak frame protection
- weak content type protection
Header values
- referrer-policy
no-referrer, strict-origin-when-cross-origin, strict-origin-when-cross-origin- x-frame-options
DENY, SAMEORIGIN- permissions-policy
accelerometer=(),autoplay=(),camera=(),display-capture=(),document-domain=(),encrypted-media=(),fullscreen=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),screen-wake-lock=(),sync-xhr=(self),usb=(),web-share=(),xr-spatial-tracking=()- x-content-type-options
nosniff, nosniff- content-security-policy
default-src 'self'; connect-src 'self' https://demo-1.conversionsapigateway.com https://mpc-prod-17-s6uit34pua-wl.a.run.app https://mpc2-prod-25-is5qnl632q-wl.a.run.app https://*.analytics.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://maps.googleapis.com https://*.dhl.com https://bat.bing.com https://www.youtube.com https://img.youtube.com https://*.mktoresp.com https://*.linkedin.com https://www.google.com https://tools.google.com https://analytics.google.com https://www.googletagmanager.com https://www.google.fr https://*.doubleclick.net https://www.facebook.com https://graph.facebook.com https://t.co https://analytics.twitter.com; font-src 'self' data: https://fonts.gstatic.com; frame-ancestors 'self'; frame-src 'self' https://www.googletagmanager.com https://*.doubleclick.net https://www.google.com https://www.youtube.com https://www.facebook.com https://www.linkedin.com https://*.dhl.com; img-src 'self' data: https://maps.googleapis.com https- strict-transport-security
max-age=63072000
Links to (8)
- dhl.com×2
- dhl.fr×2
- facebook.com×2
- instagram.com×2
- laposte.fr×2
- linkedin.com×2
- outdatedbrowser.com×2
- twitter.com×2
Linked from (2)
- carbonapp.fr×2
- stade.fr×2