indexo.dev

aappma-nivelle-cote-basque.com

.com crawl

First seen 2026-06-01 · Last seen 2026-06-01 · ok HTTP/1.1 200 1349 ms crawled 2026-06-01

FR · 164.132.235.17 · AS16276 OVH SAS

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
AAPPMA Nivelle Côte Basque
Description
Association Agréée de Pêche et de Protection des Milieux Aquatiques de la Nivelle Côte Basque
Language
fr-FR
Generator
WordPress 6.9.4
Canonical
https://www.aappma-nivelle-cote-basque.com/
Feeds

Open Graph

url
https://www.aappma-nivelle-cote-basque.com/
title
AAPPMA Nivelle Côte Basque
locale
fr_FR
site name
AAPPMA Nivelle Côte Basque
description
Association Agréée de Pêche et de Protection des Milieux Aquatiques de la Nivelle Côte Basque

Technology

Server
OVHcloud
CMS
WordPress 6.9.4
PHP
8.2 security-only
jQuery
3.7.1
Analytics
  • Google Tag Manager

Third-party hosts loaded (4)

  • assets.pinterest.com×1
  • gmpg.org×1
  • www.googletagmanager.com×1
  • www.vigicrues.gouv.fr×1

Social

Contact

Phone

Registration

Registrar
OVH sas
Created
2014-02-06
Expires
2027-02-06 248 days left
Updated
2026-02-07
Name servers
  • dns200.anycast.me
  • ns200.anycast.me

DNS records live

NS
  • dns200.anycast.me
  • ns200.anycast.me
MX
  • 1 mx1.mail.ovh.net
  • 100 mx3.mail.ovh.net
  • 5 mx2.mail.ovh.net
TXT
  • 1|www.aappma-nivelle-cote-basque.com

Email authentication weak

SPF
v=spf1 include:mx.ovh.com ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

E7
from 2026-03-29 to 2026-06-27
Expires in 24 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.aappma-nivelle-cote-basque.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
origin-when-cross-origin
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.stripe.com *.google-analytics.com *.typekit.net *.wp.com *.facebook.com *.facebook.net *.instagram.com *.twitter.com *.pinterest.com *.linkedin.com *.calameo.com; media-src 'self' blob:
strict-transport-security
max-age=31536000

Links to (4)

Linked from (1)