indexo.dev

ortheo.org

.org ok HTTP/1.1 200 857 ms

First seen 2026-06-14 · Last seen 2026-06-14 · crawled 2026-06-14

CA · 91.136.7.250 · AS9115 Hostpapa UK Ltd.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Orthéo : votre centre de l'appareil locomoteur à St-Etienne
Description
Ortheo, centre de l'appareil locomoteur à St Etienne : chirurgie orthopédique, rééducation, médecine du sport, neurochirurgie.
Language
en
Canonical
https://www.ortheo.org

Open Graph

url
//www.ortheo.org/centre-appareil-locomoteur.html
title
Orthéo : votre centre de l'appareil locomoteur à St-Etienne
description
Ortheo, centre de l'appareil locomoteur à St Etienne : chirurgie orthopédique, rééducation, médecine du sport, neurochirurgie.

Technology

Server
nginx
jQuery
1.12.4 known XSS (<3.5)
JS framework
React
Fonts
  • Google Fonts
Social widgets
  • Vimeo Embed
Third-party hosts loaded (9)
  • img-ie.nccdn.net×109
  • 0501.nccdn.net×13
  • unpkg.com×2
  • ajax.googleapis.com×1
  • code.jquery.com×1
  • design.elixite.com×1
  • fonts.googleapis.com×1
  • player.vimeo.com×1
  • www.google.com×1

DNS records live

NS
  • dns1.hosteur.com
  • dns2.hosteur.com
MX
  • 10 mx1expert.hosteur.net
  • 20 mx2expert.hosteur.net
Verified for
  • Google

Email authentication partial

SPF
v=spf1 include:exchange-swiss.ch ~all
softfail (~all)
DMARC
v=DMARC1; p=none; rua=mailto:postmaster@exchange-swiss.ch
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV R36
from 2025-12-19 to 2026-12-20
Expires in 182 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.ortheo.org/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-content-type-options
nosniff
content-security-policy
default-src * data: blob: 'unsafe-eval' 'unsafe-inline'; object-src 'none';
strict-transport-security
max-age=31536000; includeSubDomains

Links to (2)

Linked from (1)

Use this data via API

Everything on this page for ortheo.org is available as JSON from the indexo.dev REST & MCP API.

curl "https://indexo.dev/api/v1/domains/ortheo.org" \
  -H "X-API-Key: idx_..."

Read the docs & get a free key →

Add a badge to your site

Own ortheo.org? Show it's tracked on indexo.dev and link visitors straight to this page.

indexo.dev — ortheo.org

<a href="https://indexo.dev/ortheo.org" target="_blank" rel="noopener">
  <img src="https://indexo.dev/ortheo.org/badge.svg" alt="indexo.dev — ortheo.org">
</a>