cosmetic-valley.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 1502 ms crawled 2026-05-19

US · 172.67.195.4 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

sector beauty type homepage

HTML metadata

Title

Cosmetic Valley - Coeur battant de l'industrie cosmétique mondiale

Description

Cosmetic Valley est le pôle de compétitivité et le coordinateur national de la filière parfumerie cosmétique, véritable référence en Europe et dans le monde.

Language

Generator

Drupal 9 (https://www.drupal.org)

Canonical

https://cosmetic-valley.com/fr

Translations

Technology

CDN: Cloudflare
CMS: Drupal

Third-party hosts loaded (3)

cdn.jsdelivr.net×1
unpkg.com×1
www.google.com×1

Social

Registration

Registrar

Namebay SAM

Created

2000-05-17

Expires

2027-05-17 361 days left

Updated

2026-04-23

Name servers

abby.ns.cloudflare.com
lou.ns.cloudflare.com

DNS records live

NS

abby.ns.cloudflare.com
lou.ns.cloudflare.com

MX

10 cosmeticvalley-com02b.mail.protection.outlook.com

Verified for

Brevo
Google
Microsoft 365

Email authentication partial

SPF

v=spf1 a mx ip4:146.59.234.132 ip4:178.33.198.94 ip4:213.41.75.47 ip4:62.4.23.172 include:spf.mandrillapp.com include:spf.protection.outlook.com include:spf.sendinblue.com include:eu-sender.zohobooks.com include:spf.mailjet.com include:spf.eudonet.com include:sendgrid.net -all

strict (-all)

DMARC

v=DMARC1; p=none; sp=none; rua=mailto:dmarc@mailinblue.com!10m; ruf=mailto:dmarc@mailinblue.com!10m; rf=afrf; pct=100; ri=86400

policy: none (monitoring only) · sp=none

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

WE1

from 2026-05-09 to 2026-08-07

Expires in 79 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://cosmetic-valley.com/fr

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src * data:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; report-uri /report-csp-violation; upgrade-insecure-requests
strict-transport-security: max-age=63072000; includeSubDomains