bimeh.com

بیمه دات کام: استعلام ،خرید و محاسبه آنلاین قیمت انواع بیمه‌

سایت بیمه؛ خدمات آنلاین و اینترنتی بیمه‌✅ استعلام ، تمدید ، محاسبه قیمت و خرید بیمه شخص ثالث ، بیمه بدنه ، تکمیلی و آتش‌ سوزی⚡ مشاوره 24 ساعته خرید آنلاین بیمه ارزان‌ترین قیمت | بیمه دات کام

https://bimeh.com/Language: faIP: 185.143.233.130

Technologies
20
Scanned
6 hours ago
Compare with…

20 technologies

How we detected these (20)

Each technology is matched against a public fingerprint. Evidence is which part of the page or DNS matched; "implied" means another detected technology requires it. Confidence is the fingerprint's own certainty. Dates are when our scanner first and most recently observed it.

Changes over time

No changes since we first indexed this site on 28 Sept 2026. We re-scan about monthly; additions and removals will appear here.

Security headers

C60 of 100 · 3 of 6 checks need attention

Response headers on the home page that tell browsers how to protect visitors, graded the way securityheaders.com does. They describe the site's own defences, not the technologies on it.

HTTPS enforcement (HSTS)Good · 20/20
Set for six months or more and covering subdomains. Adding preload lets browsers enforce it before the first visit.max-age=31104000; includeSubDomains
Content Security PolicyGood · 25/25
Set and restricts where scripts may come from, the strongest defence against injected content.frame-ancestors 'self' bimeh.com defaced.dev webcache.googleusercontent.com *.googleapis.com *.google.com google.com www.googletagmanager.com analytics.google.com
Clickjacking protectionGood · 15/15
Framing is controlled by the Content Security Policy.ALLOW-FROM bimeh.com, webcache.googleusercontent.com
MIME type sniffingMissing · 0/15
Not set. Add X-Content-Type-Options: nosniff so browsers never reinterpret files as scripts.
Referrer policyMissing · 0/15
Not set, so full page addresses may leak to other sites in the Referer header.
Browser feature permissionsMissing · 0/10
Not set. Embedded content inherits every browser feature; a Permissions-Policy header narrows that.
Other headers seen (2), not counted in the grade
  • Cross-origin isolation (COOP) · Optional. Isolates the window from pages that opened it; mostly matters for sites using SharedArrayBuffer.
  • Legacy XSS filter · Deprecated header; modern browsers ignore it and it could once be abused. A Content Security Policy replaces it.1; mode=block

Found on the page

Share:Stack card imageFirst indexed 28 Sept 2026. How we scan sites