indexo.dev

carvita.fr

.fr crawl

First seen 2026-04-14 · Last seen 2026-05-07 · ok HTTP/1.1 200 4767 ms crawled 2026-05-07

FR · 51.38.188.199 · AS16276 OVH SAS

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
CarVita | La complémentaire auto pensée pour l'électrique
Description
Bénéficiez d'avantages et d'assistance complémentaires pour votre voiture électrique, avec ou sans abonnement, grâce à CARVITA.
Language
fr-FR
Generator
WordPress 6.7.1
Canonical
https://www.carvita.fr/
Feeds

Open Graph

url
https://www.carvita.fr/
title
CarVita | La complémentaire auto pensée pour l'électrique
locale
fr_FR
site name
CarVita
description
Bénéficiez d'avantages et d'assistance complémentaires pour votre voiture électrique, avec ou sans abonnement, grâce à CARVITA.

Technology

Server
nginx
CMS
WordPress
Analytics
  • Google Tag Manager

Third-party hosts loaded (3)

  • gmpg.org×1
  • www.google.com×1
  • www.googletagmanager.com×1

Contact

Phone

Registration

Registrar
OVH
Created
2024-06-26
Expires
2026-06-26 36 days left
Updated
2025-07-31
Name servers
  • dns104.ovh.net
  • ns104.ovh.net

DNS records live

NS
  • dns104.ovh.net
  • ns104.ovh.net
MX
  • 1 mx1.mail.ovh.net
  • 100 mx3.mail.ovh.net
  • 5 mx2.mail.ovh.net
TXT
  • 1|www.carvita.fr
Verified for
  • Google

Email authentication partial

SPF
v=spf1 include:mx.ovh.com -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-04-11 to 2026-07-10
Expires in 50 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.carvita.fr/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
no-referrer-when-downgrade
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(self)
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob maxcdn.bootstrapcdn.com googletagmanager.com *.googletagmanager.com tagmanager.google.com *.tagmanager.google.com googleapis.com *.googleapis.com gstatic.com *.gstatic.com privacy-center.org *.privacy-center.org privacy-jeanlain.com *.privacy-jeanlain.com matomo.cloud *.matomo.cloud *.jeanlain.matomo.cloud ekonsilio.io *.ekonsilio.io ekonsilio.com *.ekonsilio.com *.ws.ekonsilio.io wisepops.net *.wisepops.net wisepops.com *.wisepops.com gstatic.com *.gstatic.com google.com *.google.com googleadservices.com *.googleadservices.com googletagmanager.com *.googletagmanager.com doubleclick.net *.doubleclick.net *.g.doubleclick.net googlesyndication.com *.googlesyndication.com googletagmanager.com *.googletagmanager.com google.com *.google.com doubleclick.net *.doubleclick.net *.g.doubleclick.net googleadservices.com *.googleadservices.com doubleclick.net *.doubleclick.net *.fls.doubleclick.net googlesyndication.com *.goo
strict-transport-security
max-age=63072000; includeSubDomains

Links to (1)

Linked from (1)