indexo.dev

agencebienvu.com

.com crawl

First seen 2026-04-20 · Last seen 2026-05-10 · ok HTTP/1.1 200 354 ms crawled 2026-05-13

FR · 213.186.33.87 · AS16276 OVH SAS

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Agence Bienvu | Direction de création
Description
Edition & beaux objets / Identité & contenus de marque / UX & UI Design / Set Design & Interior Design / Tendance & Moodboard
Language
fr
Canonical
https://www.agencebienvu.com/

Technology

Server
OVHcloud

Third-party hosts loaded (2)

  • gmpg.org×1
  • stackpath.bootstrapcdn.com×1

Contact

Email
Phone
Address
rue Victoire de la Marne - 52000

Registration

Registrar
OVH sas
Created
2020-02-18
Expires
2027-02-18 274 days left
Updated
2026-02-19
Name servers
  • dns20.ovh.net
  • ns20.ovh.net

DNS records live

NS
  • dns20.ovh.net
  • ns20.ovh.net
MX
  • 1 mx1.mail.ovh.net
  • 100 mx3.mail.ovh.net
  • 5 mx2.mail.ovh.net
TXT
  • 1|www.agencebienvu.com

Email authentication weak

SPF
v=spf1 include:mx.ovh.com ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

E8
from 2026-03-11 to 2026-06-09
Expires in 20 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://agencebienvu.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
sameorigin
x-content-type-options
nosniff
content-security-policy
default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' badge.hotelstatic.com *.googleadservices.com sibautomation.com *.facebook.net *.pinimg.com *.paypal.com *.systempay.fr http://localhost:3000 *.trustindex.io *.googleapis.com *.cloudflare.com *.bootstrapcdn.com *.jsdelivr.net *.google.com *.gstatic.com *.googletagmanager.com *.google-analytics.com platform.twitter.com *.youtube.com; connect-src 'self' *.brevo.com stats.g.doubleclick.net *.analytics.google.com *.facebook.com *.paypal.com *.sendinblue.com *.sandbox.getalma.eu *.pinterest.com *.boxtal.com *.trustindex.io *.digitaloceanspaces.com *.elegantthemes.com *.googleapis.com yoast.com *.google-analytics.com; img-src 'self' blob: *.ytimg.com wpml.org toolset.com *.g.doubleclick.net *.google.fr *.google.be *.google.com *.facebook.com *.paypal.com *.cloudflare.com *.pinterest.com *.paypalobjects.com *.boxtal.com *.systempay.fr *.trustindex.io *.ggpht.com *.googleusercontent.com *
strict-transport-security
max-age=31536000; includeSubDomains

Linked from (1)