destinationyvesrocher.com
HTML metadata
Technology
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (4)
- cdntag.tarteaucitron.io×3
- www.google.com×2
- www.googletagmanager.com×2
- js-eu1.hs-scripts.com×1
Social
Contact
Registration
- Registrar
- CSC Corporate Domains, Inc.
- Created
- 2025-03-10
- Expires
- 2027-03-10 293 days left
- Updated
- 2026-03-06
- Name servers
-
- dns1.cscdns.net
- dns2.cscdns.net
DNS records
Email authentication strong
- SPF
-
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.compolicy: reject (enforced) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswvoxRDxdfnqUFJ5jlQk3Fwgo5VWE1aGScPYEM24P+E5bf5eI4uw2XRknSXuDYEyX4SROm55c1GV+K… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7J5qVxAWwDChdxkHSwKCMd8Vjb9OyzhQSoSA9dOPfyMHbNJTofjBV6dGgP95EBRkcdSEhT1QD9crOq…
selectors probed - selector1:
Certificate (current)
E8
Expires in 63 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- cross-origin-embedder-policy
- cross-origin-resource-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(self),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; connect-src *;font-src * data:;img-src * data:; worker-src blob:; script-src 'unsafe-inline' 'unsafe-eval' *; style-src 'unsafe-inline' *; frame-src *- strict-transport-security
max-age=31536000- cross-origin-opener-policy
unsafe-none- cross-origin-embedder-policy
unsafe-none- cross-origin-resource-policy
cross-origin
Links to (31)
- api-and-you.com×2
- cmb.fr×2
- cogedis.com×2
- decathlon.fr×2
- engie.fr×2
- facebook.com×2
- google.com×2
- groupe-legendre.com×2
- groupe-rocher.com×2
- groupeleduff.com×2
- instagram.com×2
- labergerieyvesrocher.com×2
- lagreedeslandes.com×2
- laita.com×2
- laposte.fr×2
- linkedin.com×2
- lpo.fr×2
- maisonyvesrocher.fr×2
- morbihan.com×2
- olga.fr×2
- onepercentfortheplanet.fr×2
- orange.fr×2
- petit-bateau.fr×2
- reservit.com×2
- rives-nature.com×2
- secretbox.fr×2
- sncf-voyageurs.com×2
- themisweb.fr×2
- vorwerk.com×2
- youtube.com×2
- yves-rocher-fondation.org×2