indexo.dev

onlinecasinoroxypalace.com

.com crawl

First seen 2026-05-12 · Last seen 2026-05-12 · ok HTTP/1.1 200 947 ms crawled 2026-05-18

US · 138.197.224.27 · AS14061 DigitalOcean, LLC

Reputation 100/100

Classifying

HTML metadata

Title
Expect an Action-Packed Experience When You Arrive at Roxy Palace Casino
Description
Roxy Palace Casino delivers a slick and impressive homepage, as you’ll see when you land there. But what else will you find past that point? Is there enough to persuade you to hang around? You can read our casino review to find out more about this online casino.
Language
en
Canonical
https://onlinecasinoroxypalace.com/

Technology

Server
nginx
CMS
Nuxt

Third-party hosts loaded (1)

  • service.nyc3.cdn.digitaloceanspaces.com×21

Registration

Registrar
Dynadot Inc
Created
2022-08-05
Expires
2026-08-05 76 days left
Updated
2025-09-15
Name servers
  • ns01.webpropertiesmanagment.com
  • ns02.webpropertiesmanagment.com

DNS records live

NS
  • ns01.webpropertiesmanagment.com
  • ns02.webpropertiesmanagment.com

Email authentication no MX

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-05-14 to 2026-08-12
Expires in 83 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://onlinecasinoroxypalace.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-embedder-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
Header values
referrer-policy
no-referrer
x-frame-options
SAMEORIGIN
permissions-policy
camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()
x-content-type-options
nosniff
content-security-policy
base-uri 'none'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: https://service.nyc3.cdn.digitaloceanspaces.com; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline'; upgrade-insecure-requests;
strict-transport-security
max-age=15552000; includeSubDomains
cross-origin-opener-policy
same-origin
cross-origin-embedder-policy
credentialless
cross-origin-resource-policy
same-origin

Linked from (1)