equiliberte.org

.org crawl

First seen 2026-04-20 · Last seen 2026-05-17 · ok HTTP/1.1 200 1118 ms crawled 2026-05-14

US · 172.67.209.58 · AS13335 Cloudflare, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title

ÉquiLiberté

Language

fr-FR

Generator

WordPress 6.9.4

Canonical

https://equiliberte.org/

Feeds

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

fonts.googleapis.com×3
gmpg.org×1
maps.google.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

OVH sas

Created

2010-06-10

Expires

2026-06-10 21 days left

Updated

2025-07-25

Name servers

quentin.ns.cloudflare.com
sunny.ns.cloudflare.com

DNS records live

NS

quentin.ns.cloudflare.com
sunny.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

1|www.equiliberte.org
google-site-verification=c8mnaE_R6jLlWfdRcznfaspwDx3Vn7sWGkZz588Xm_g

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-05-07 to 2026-08-05

Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://equiliberte.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: ambient-light-sensor=*, autoplay=*, camera=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, magnetometer=*, microphone=*, midi=*, payment=*, picture-in-picture=*, speaker=*, sync-xhr=*, usb=*, vr=*
x-content-type-options: nosniff
content-security-policy: default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * data: blob: 'unsafe-inline';
strict-transport-security: max-age=31536000; includeSubDomains; preload