bai-bao.fr
HTML metadata
Technology
- Server
- OVHcloud
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (1)
- www.googletagmanager.com×1
Social
Contact
- Phone
- Address
- 67 rue Saint-Jacques75005 Paris
Registration
- Registrar
- OVH
- Created
- 2010-12-20
- Expires
- 2026-12-20 213 days left
- Updated
- 2026-01-31
- Name servers
-
- dns17.ovh.net
- ns17.ovh.net
DNS records live
- NS
-
- dns17.ovh.net
- ns17.ovh.net
- MX
-
- 0 mx0.mail.ovh.net
- 100 mx3.mail.ovh.net
- 200 mx4.mail.ovh.net
- 5 mx1.mail.ovh.net
- 50 mx2.mail.ovh.net
- TXT
-
v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCYdaVre1efbQooNq4HCS3f8YubKigv3MTeFPkG2oqWFhVynO+isM8HWPbUIhj6OPbpo0mS2EiiNMvjUxFunpStfI/4SqS2iN79NvKSACxl+VJPuSKtVh2IBj1IVz4xZk3jHhBl/PkdB22BnMc6CJaJ6rLT3gsWAmBdRg+SisB2dwIDAQAB;t=s;
- Verified for
-
- Apple
Email authentication strong
- SPF
-
v=spf1 a mx include:_spf.google.com include:mx.ovh.com include:spf.mailjet.com -allstrict (-all) - DMARC
-
v=DMARC1;p=quarantine;pct=100;rua=mailto:adminwp@bai-bao.fr;sp=none;aspf=s;policy: quarantine · sp=none - DKIM
- no key found at common selectors
Certificate (current)
E8
Expires in 54 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
same-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=self, vibrate=none- x-content-type-options
nosniff- content-security-policy
upgrade-insecure-requests; img-src 'self' data: https://*.w.org https://mooseoom.foxthemes.me https://library.elementor.com https://import.foxthemes.me https://*.tile.openstreetmap.org https://secure.gravatar.com https://www.googletagmanager.com https://region1.google-analytics.com https://www.google-analytics.com https://ninjaforms.com https://really-simple-ssl.com https://translate.google.com https://*.basemaps.cartocdn.com https://ssl.google-analytics.com; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.googletagmanager.com https://www.gstatic.com https://www.google.com https://connect.facebook.net https://ssl.google-analytics.com; script-src-elem 'self' 'unsafe-inline' https://app.mailjet.com https://maps.googleapis.com https://unpkg.com https://graph.instagram.com https://js.stripe.co- strict-transport-security
max-age=63072000; includeSubDomains; preload
Links to (3)
Linked from (1)
- celsa.fr×2