batiadvisor.fr

HTML metadata

Title

Actualité BTP et annuaire professionnel construction et batiment - Batiadvisor

Description

Batiadvisor permet d'identifier et de voir rapidement les produits et solutions approuvées par les professionnels du batiment.

Language

fr-FR

Generator

Powered by WPBakery Page Builder - drag and drop page builder for WordPress.

Canonical

https://www.batiadvisor.fr/

Feeds

Batiadvisor » Accueil Flux des commentaires RSS

Open Graph

url: https://www.batiadvisor.fr/
title: Infos et annuaire pour les professionnels de la construction et de l’architecture | Batiadvisor
locale: fr_FR
site name: Batiadvisor
description: Permet d'identifier et de voir rapidement les produits-solutions approuvées par les professionnels du métier.

Technology

Server: Apache
CMS: WordPress

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (8)

www.facebook.com×2
2fa4e90d3716407e94c3c45659bb725d.js.ubembed.com×1
cdn.cookielaw.org×1
gmpg.org×1
px.ads.linkedin.com×1
script.crazyegg.com×1
www.google.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

CSC CORPORATE DOMAINS INC.

Created

2021-03-02

Expires

2027-03-02 287 days left

Updated

2026-03-03

Name servers

dns1.cscdns.net
dns2.cscdns.net

DNS records live

NS

dns1.cscdns.net
dns2.cscdns.net

TXT

google-site-verification=ABlw-HaDF2PZOCO5ZkCtM82uAPjiol2PY15AGNQzozc

Email authentication no MX

SPF: v=spf1 -all
strict (-all)
DMARC: v=DMARC1; p=reject; fo=1; pct=100; ri=3600; rua=mailto:reed-elsevier@rua.agari.com; ruf=mailto:reed-elsevier@ruf.agari.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M04

from 2026-03-23 to 2026-10-07

Expires in 141 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.batiadvisor.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(self), battery=(), camera=(), cross-origin-isolated=(), document-domain=(), encrypted-media=(), fullscreen=(), geolocation=(), magnetometer=(), microphone=(), midi=(), screen-wake-lock=(), web-share=(), wake-lock=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://try.abtasty.com https://static.hotjar.com/ https://www.google.com https://rxfrance.piwik.pro https://www.googletagmanager.com https://cdn.cookielaw.org https://securepubads.g.doubleclick.net; script-src-elem 'self' 'unsafe-inline' https://maps.googleapis.com https://reedexpo.automation.webmecanik.com https://script.hotjar.com https://static.hotjar.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://cdn.cookielaw.org https://securepubads.g.doubleclick.net https://script.crazyegg.com https://cdnjs.cloudflare.com https://snap.licdn.com https://connect.facebook.net https://pixel.mathtag.com https://try.abtasty.com https://d.adroll.com https://s.adroll.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://a.quora.com https://img04.en25.com https://img.en25.com https://*.ubembed.com; script-src-attr 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin