indexo.dev

onoff.app

.app crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 547 ms crawled 2026-05-18

US · 141.193.213.21 · AS209242 Cloudflare London, LLC

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Onoff Accueil
Description
Pour vos besoins pro ou perso, un second numéro sans carte SIM ni téléphone supplémentaire, le tout dans une seule application avec Onoff.
Language
fr-FR
Generator
WPML ver:4.6.3 stt:1,4;
Canonical
https://www.onoff.app/fr/
Translations
  • en
  • fr
Feeds

Open Graph

url
https://www.onoff.app/fr/
title
Onoff Accueil
locale
fr_FR
description
Pour vos besoins pro ou perso, un second numéro sans carte SIM ni téléphone supplémentaire, le tout dans une seule application avec Onoff.

Technology

CDN
Cloudflare
CMS
WordPress
Analytics
  • Google Tag Manager
Third-party hosts loaded (7)
  • 139792509.fs1.hubspotusercontent-eu1.net×1
  • gmpg.org×1
  • static.addtoany.com×1
  • welcome.onoffbusiness.com×1
  • widget.trustpilot.com×1
  • www.facebook.com×1
  • www.googletagmanager.com×1

Social

DNS records live

NS
  • ns-1392.awsdns-46.org
  • ns-191.awsdns-23.com
  • ns-1954.awsdns-52.co.uk
  • ns-924.awsdns-51.net
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
TXT
Show 8 TXT records
  • Sendinblue-code:0a4482a7205a3e25a86509329c7a098b
  • _globalsign-domain-verification=RTAwYb1YRUMDpBQBm2u2W8GFrWYi0p8F9dxymehWz_
  • _globalsign-domain-verification=uWvvARoVkSSvR9EBrPTQz9BPQBz7ypZ0x-MBm7mPNW
  • globalsign-domain-verification=7144397792b66302370db45ddae86067
  • google-site-verification=PwBrC4LYGCWqJWr6hZbycn25KdrV18eoa6g6erpAr7o
  • google-site-verification=U5aEvHqo5kx_ZlFRGErgDiiMXu7kZW7wexM1dQpaypc
  • google-site-verification=o-IL_brApnmGi0L6fDE1v40FZlJjp_Vc9wgYYBUusS4
  • google-site-verification=yFw0w2ZFP0Bge6Rgka6g_uoG_bSk3BHueKHlXMRNaAk

Email authentication strong

SPF
v=spf1 include:spf.mailjet.com include:_spf.google.com include:amazonses.com include:servers.mcsv.net include:datadrivenemail.com include:mailgun.org include:spf.sendinblue.com mx ~all
softfail (~all)
DMARC
v=DMARC1; p=quarantine; rua=mailto:alerts@onoffapp.com
policy: quarantine
DKIM
  • google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nEj0cQRS1aUuez2RCIwYTOVrznyQSkGnAVdItB7kzPgC4AK/gz2chPgAuZPlJbBqs0eULvu0n3saa…
  • k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
  • mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
selectors probed

Certificate (current)

WE1
from 2026-04-18 to 2026-07-17
Expires in 58 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://onoff.app/

findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy

Links to (4)

Linked from (2)