indexo.dev

xlenergies.fr

.fr crawl

First seen 2026-04-26 · Last seen 2026-05-20 · ok HTTP/1.1 200 10482 ms crawled 2026-05-20

FR · 185.153.11.39 · AS199758 SAS Nexylan

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Fournisseur de Carburant et Combustible à Béthune - XL Energies
Description
Votre partenaire de confiance pour carburant et combustible à Béthune. Services fiables, livraison rapide et tarifs compétitifs.
Language
fr-FR
Generator
WordPress 6.9
Canonical
https://www.xlenergies.fr/
Feeds

Open Graph

url
https://www.xlenergies.fr/
title
Fournisseur de Carburant et Combustible à Béthune - XL Energies
locale
fr_FR
site name
Carburant & Combustible Béthune - Pellet, Gazole, Fioul, GNR, Huile
description
Votre partenaire de confiance pour carburant et combustible à Béthune. Services fiables, livraison rapide et tarifs compétitifs.

Technology

Server
Apache
CMS
WordPress 6.9
jQuery
3.7.1
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (4)

  • fonts.googleapis.com×5
  • www.googletagmanager.com×2
  • fonts.gstatic.com×1
  • gmpg.org×1

Social

Contact

Phone

Registration

Registrar
OVH
Created
2015-11-16
Expires
2026-11-16 179 days left
Updated
2025-12-31
Name servers
  • ns1.bdm.microsoftonline.com
  • ns2.bdm.microsoftonline.com
  • ns3.bdm.microsoftonline.com
  • ns4.bdm.microsoftonline.com

DNS records live

NS
  • ns1.bdm.microsoftonline.com
  • ns2.bdm.microsoftonline.com
  • ns3.bdm.microsoftonline.com
  • ns4.bdm.microsoftonline.com
MX
  • 10 mx-mibc-fr-06.mailinblack.com
TXT
  • mscid=/ryPTYNuiKdm2OiIxmArMncNzvJcnPw9YKBaYxY4RWpw+9p8BX0+ga5iNwEwB1wwxAaud+PV/FSPpYVaW2VM3w==
Verified for
  • Google

Email authentication weak

SPF
v=spf1 include:spf.protection.outlook.com include:mx.ovh.com -all
strict (-all)
DMARC
not published
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QiPHOxPelDCIIKOJlQ6D3JcHMSpK3E4FWcGi4PkYNkF0LOVhYaKbEDxGgekZYRQz4d05WsLEB6sY1…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48QXGhpqndcgaejBCMakdBo7OG+G2QRn+lMA2MpeMdrNnkArVoEwLizYyYv0IPyc3DI6pmaLRhXvQR…
selectors probed

Certificate (current)

R12
from 2026-05-15 to 2026-08-13
Expires in 84 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.xlenergies.fr/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
same-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(),camera=()
x-content-type-options
nosniff
content-security-policy
default-src data: 'unsafe-inline' 'unsafe-eval' 'self' *.xlenergies.lemoni.fr https://editor-static-bucket.elementor.com https://cdn.jsdelivr.net *.elementor.com www.googletagmanager.com *.youtube.com *.avis-verifies.com *.gstatic.com https://cdnjs.cloudflare.com https://s.w.org https://ps.w.org https://secure.gravatar.com https://api-eu.mixpanel.com https://yoast.com https://fonts.googleapis.com *.static.axept.io https://axeptio.imgix.net *.google.com *.google-analytics.com *.bat.bing.com *.axept.io *.facebook.com *.bing.com *.cloudfront.net *.googleapis.com *.google.fr *.facebook.net *.hotjar.com blob: wss: *.gid *.outbrain wp-rocket.me *.wp-rocket.me *.wordpress.org https https://player.vimeo.com https://platform.twitter.com https://fast.wistia.com https://beacon-v2.helpscout.net https://distillery.wistia.com https://beaconapi.helpscout.net; img-src 'self' data: https://fast.wistia.com https://embed-ssl.wistia.com https://fennik.la-studioweb.com https://s.w.org https://updates.theme
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (4)

Linked from (2)