club-commerce-connecte.com
HTML metadata
Technology
- Server
- Apache
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (3)
- fonts.googleapis.com×3
- gmpg.org×1
- www.googletagmanager.com×1
Social
Registration
- Registrar
- Namebay SAM
- Created
- 2015-10-22
- Expires
- 2027-10-22 519 days left
- Updated
- 2026-02-12
- Name servers
-
- dns1.namebay.com
- dns2.namebay.com
DNS records live
- NS
-
- dns1.namebay.com
- dns2.namebay.com
- MX
-
- 10 spool.mail.gandi.net
- 50 fb.mail.gandi.net
Email authentication weak
- SPF
-
v=spf1 include:spf.mailjet.com include:_mailcust.gandi.net ?allneutral (?all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 32 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
no-referrer- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(), geolocation=(self), fullscreen=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(self)- x-content-type-options
nosniff- content-security-policy
default-src 'self' data: 'unsafe-inline' *.vimeo.com *.digital-aquitaine.com *.googleapis.com *.google.com *.cdn.ampproject.org *.google-analytics.com *.ampproject.org *.stories.studio; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.net *.googleapis.com *.gstatic.com *.google.com *.google.fr *.google-analytics.com *.googletagmanager.com *.my.join-stories.com *.ampproject.org; style-src 'self' 'unsafe-inline' *.googletagmanager.com *.googleapis.com *.ampproject.org; img-src 'self' data: s.w.org *.googleapis.com *.ytimg.com *.join-stories.com digital-aquitaine.com *.digital-aquitaine.com *.club-commerce-connecte.com *.smart4d.org *.ticsante-na.com *.topos-aquitaine.org *.iadatascience.fr *.googletagmanager.com *.gstatic.com *.vimeocdn.com *.gravatar.com *.google-analytics.com *.gouv.fr *.analytics.google.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.goog- strict-transport-security
max-age=31536000; includeSubdomains;preload