agriculture-dromoise.fr

.fr crawl

First seen 2026-04-23 · Last seen 2026-05-18 · ok HTTP/1.1 200 9328 ms crawled 2026-05-17

US · 172.67.212.27 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Accueil | L'Agriculture Drômoise
Language: fr
Canonical: https://www.agriculture-dromoise.fr/

Technology

CDN: Cloudflare

Social widgets

YouTube Embed

Third-party hosts loaded (3)

youtube.com×7
www.youtube.com×3
tarteaucitron.io×1

Social

Registration

Registrar

GANDI

Created

2000-07-04

Expires

2026-07-04 44 days left

Updated

2025-06-21

Name servers

jocelyn.ns.cloudflare.com
sid.ns.cloudflare.com

DNS records live

NS

jocelyn.ns.cloudflare.com
sid.ns.cloudflare.com

MX

10 mx-01-eu-central-1.prod.hydra.sophos.com
50 mx-02-eu-central-1.prod.hydra.sophos.com

TXT

sophos-domain-verification=b9b8b6dec9468e180c50c59ed5963e7f18602d06

Verified for

Brevo

Email authentication partial

SPF

v=spf1 include:_mailcust.gandi.net include:spf.mailjet.com ?all

neutral (?all)

DMARC

V=DMARC1; p=none; rua=mailto: rua@dmarc.brevo.com

policy: none (monitoring only)

DKIM

mail: k=rsa;p=MIGfMA0GCSqGS[b3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JSNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5eyOnRBH0ZVxp+1smTxid2Y2z…

selectors probed

Certificate (current)

WE1

from 2026-04-05 to 2026-07-04

Expires in 45 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.agriculture-dromoise.fr/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src * 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.tarteaucitron.io cdn.jsdelivr.net plugin-numericdiffusion.legalplus.fr; img-src * 'self' data:; font-src 'self' data: fonts.gstatic.com; connect-src * 'self'; object-src 'none'; frame-src * 'self'; upgrade-insecure-requests
strict-transport-security: max-age=31536000