indexo.dev

fensaonline.com

.com crawl

First seen 2026-04-15 · Last seen 2026-05-07 · ok HTTP/1.1 200 432 ms crawled 2026-05-11

IE · 20.67.208.9 · AS8075 Microsoft Corporation

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
FENSA Installers Portal
Language
en

Technology

Server
Microsoft-IIS
Fonts
  • Google Fonts

Third-party hosts loaded (1)

  • fonts.googleapis.com×1

Registration

Registrar
Easyspace Limited
Created
2001-11-28
Expires
2026-11-28 192 days left
Updated
2025-10-29
Name servers
  • ns.rackspace.com
  • ns2.rackspace.com

DNS records live

NS
  • ns.rackspace.com
  • ns2.rackspace.com
MX
  • 0 fensaonline-com.mail.protection.outlook.com
TXT
  • MS=ms93218351
  • po69d3d4at491f6fcndrql3os6
  • bhiebg4ngobogf4e4evajff5hv

Email authentication weak

SPF
v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

GeoTrust TLS RSA CA G1
from 2026-04-09 to 2026-10-25
Expires in 158 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://fensaonline.com/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
Header values
referrer-policy
no-referrer-when-downgrade
permissions-policy
interest-cohort=()
x-content-type-options
nosniff
content-security-policy
connect-src 'self' *.google-analytics.com *.googletagmanager.com; font-src 'self' *.googleapis.com *.gstatic.com; frame-src 'self' *.youtube.com https://player.vimeo.com; script-src 'self' *.google-analytics.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com 'unsafe-inline'; frame-ancestors 'self'; img-src 'self' fensaonline.com *.ytimg.com *.google-analytics.com data:; manifest-src 'self'; media-src 'self'; object-src 'self'; worker-src 'self';
strict-transport-security
max-age=31536000; includeSubDomains

Linked from (1)