chu-toulouse.fr

.fr crawl dns

First seen 2026-04-13 · Last seen 2026-05-16 · ok HTTP/1.1 200 3156 ms crawled 2026-05-14

FR · 46.183.49.127 · AS48426 OVER-LINK s.a.s.

Reputation 94/100 dmarc monitor-only

sector health type homepage

HTML metadata

Title

Centre hospitalier universitaire (CHU) de Toulouse - Engagé·es ensemble pour votre santé

Description

CHU de Toulouse : consultations spécialisées, hospitalisation, et services en ligne sur 5 sites (Purpan, Rangueil, Hôtel-Dieu, La Grave, (…)

Language

Generator

SPIP

Canonical

https://www.chu-toulouse.fr/

Feeds

Syndiquer tout le site RSS

Open Graph

url: https://www.chu-toulouse.fr/
title: Centre hospitalier universitaire (CHU) de Toulouse
locale: fr_FR
description: CHU de Toulouse : consultations spécialisées, hospitalisation, et services en ligne sur 5 sites (Purpan, Rangueil, Hôtel-Dieu, La Grave, Salies-du-Salat et Oncopole). Ressources et actualités pour patients, familles, professionnels, étudiants et chercheurs.

Technology

Server: http-server

Social

Contact

Phone

Registration

Registrar

GIP RENATER

Created

1997-01-19

Expires

2027-03-10 293 days left

Updated

2026-04-30

Name servers

dnsadv.univ-toulouse.fr
ns1.chu-toulouse.fr
ns2.chu-toulouse.fr

DNS records live

NS

dnssla.univ-toulouse.fr
ns1.chu-toulouse.fr
ns2.chu-toulouse.fr

MX

10 mib.chu-toulouse.fr

Verified for

Microsoft 365

Email authentication partial

SPF: v=spf1 mx a ip4:193.57.201.2 ip4:193.57.201.136 ip4:193.57.201.137 ip4:193.57.201.121/29 ip4:46.183.49.130 ip4:46.183.49.101 ip4:46.183.49.127 ip4:54.36.91.62 include:_spf.datapressepremium.com -all
strict (-all)
DMARC: v=DMARC1; p=none; rua=mailto:abuse@chu-toulouse.fr; ruf=mailto:abuse@chu-toulouse.fr; fo=1
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-04-21 to 2026-07-20

Expires in 60 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.chu-toulouse.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
permissions-policy

findings

CSP allows unsafe inline scripts/styles
missing Referrer Policy

Header values

x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), camera=(),display-capture=(), cross-origin-isolated=(), encrypted-media=(), fullscreen=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), sync-xhr=(self), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://www.chu-toulouse.fr;font-src 'self';img-src 'self' blob: data: https://statistiques.chu-toulouse.fr https://www.gstatic.com https://tile.openstreetmap.org/;script-src 'sha256-bLlTWyhCXMpvY0qISCjl98ALtZ7QWJbNw3Madev72jM=' 'sha256-l6XDslsw9JSbKKQIGTfS0g9y9EjrKOepFWVN3wnlL44=' 'self' https://statistiques.chu-toulouse.fr;style-src 'self' 'unsafe-inline';frame-src https://youtube.com https://www.youtube.com https://www.youtube-nocookie.com https://38d3b6a7.sibforms.com;connect-src 'self' https://statistiques.chu-toulouse.fr https://stats.g.doubleclick.net https://region1.google-analytics.com https://region1.analytics.google.com;object-src 'none';frame-ancestors 'none';base-uri 'self';form-action 'self';worker-src 'none';upgrade-insecure-requests
strict-transport-security: max-age=31536000; includeSubDomains; preload