indexo.dev

espaceavantages.fr

.fr crawl

First seen 2026-04-16 · Last seen 2026-05-08 · ok HTTP/1.1 200 2726 ms crawled 2026-05-11

US · 143.204.185.79 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
ReducCE
Language
fr

Technology

CDN
Amazon CloudFront
Server
AmazonS3

Third-party hosts loaded (1)

  • challenges.cloudflare.com×1

Registration

Registrar
OVH
Created
2018-09-11
Expires
2026-09-11 114 days left
Updated
2025-10-31
Name servers
  • dns112.ovh.net
  • ns112.ovh.net

DNS records live

NS
  • dns112.ovh.net
  • ns112.ovh.net
MX
  • 1 mx1.mail.ovh.net
  • 100 mx3.mail.ovh.net
  • 5 mx2.mail.ovh.net
TXT
  • brevo-code:d2ec098289ef6b620339224eb33a967c

Email authentication partial

SPF
v=spf1 include:spf.mailjet.com include:mx.ovh.com ~all
softfail (~all)
DMARC
v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

Amazon RSA 2048 M04
from 2025-09-23 to 2026-10-23
Expires in 156 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://espaceavantages.fr/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
DENY
content-security-policy
default-src 'self' *.reducce.fr *.skiloisirsdiffusion.com; script-src 'self' 'unsafe-inline' *.reducce.fr *.skiloisirsdiffusion.com challenges.cloudflare.com *.zendesk.com *.zdassets.com; style-src 'self' 'unsafe-inline' *.reducce.fr *.skiloisirsdiffusion.com *.zendesk.com *.zdassets.com; img-src 'self' data: blob: *.reducce.fr *.skiloisirsdiffusion.com *.zendesk.com *.zdassets.com challenges.cloudflare.com; font-src 'self' data: *.reducce.fr *.skiloisirsdiffusion.com *.zendesk.com *.zdassets.com; connect-src 'self' *.reducce.fr *.skiloisirsdiffusion.com fcm.googleapis.com fcmregistrations.googleapis.com firebaseinstallations.googleapis.com you-place-e2a36.firebaseio.com you-place-e2a36.firebaseapp.com *.zendesk.com *.zdassets.com *.zopim.com wss://*.reducce.fr wss://*.skiloisirsdiffusion.com wss://*.zopim.com wss://*.execute-api.eu-west-3.amazonaws.com challenges.cloudflare.com; media-src 'self' static.zdassets.com; frame-src 'self' *.reducce.fr *.monetico.fr *.zendesk.com *.zdassets.
strict-transport-security
max-age=63072000

Linked from (1)