espacegramont.com
HTML metadata
Technology
Third-party hosts loaded (2)
- storage.googleapis.com×2
- plugins.flockler.com×1
Social
Contact
- Address
- 2 Chemin de Gabardie, 31200, Toulouse, France
Registration
- Registrar
- OVH sas
- Created
- 2009-06-26
- Expires
- 2026-06-26 38 days left
- Updated
- 2025-06-27
- Name servers
-
- dns101.ovh.net
- ns101.ovh.net
DNS records live
- NS
-
- dns101.ovh.net
- ns101.ovh.net
- MX
-
- 10 mx1.nfrance.com
- TXT
-
Show 8 TXT records
4W5MN0J/0wwmjPgxJQ5dUQsHBb3MrLNj4eygY+kF7lw=C205IEDVH2l81fGlvgV0YuauboAu9xwQst5tooxdoQQ=c7zywm71l41jxwqb56v2p2pmtvj9vxk9rrl68h0lz1km3hm951xhdccqxtpqwy5jk7gm928fn1z0kphcj07n4f1hvrkfjyb8pcs9tszh254zffh4pyxsxbhwfp3y4kyzgoogle-site-verification=SCprWqxbNmVyATWGXeqY-7MBz9JvZW3P-39F-JNLfv8globalsign-domain-verification=1Omn3tc1sZyLl5UQxrilmx0sneJvY_yGN0a_2VJ9Fp
Email authentication weak
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
Trust Provider B.V. TLS RSA CA G1
Expires in 169 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; media-src 'self' blob: https://www.youtube.com; font-src 'self' data: https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sdk.privacy-center.org https://api.privacy-center.org https://*.instagram.com http://www.googletagmanager.com http://www.google-analytics.com http://securepubads.g.doubleclick.net https://www.google.com https://www.google.fr https://www.instagram.com https://www.gstatic.com https://tag.aticdn.net https://wbbbmtm.pa-cd.com https://*.flockler.com https://storage.googleapis.com; style-src 'self' 'unsafe-inline' https://*.instagram.com https://www.instagram.com https://fonts.googleapis.com https://storage.googleapis.com; child-src 'self' blob: https://*.instagram.com http://www.google-analytics.com https://www.google.com https://www.google.fr https://www.instagram.com https://www.youtube.com https://*.flockler.com https://*.tiktok.com https://*.wizville.fr; img-src 'self' data: https://*.instagram.com http://*.doublecli- strict-transport-security
max-age=31536000;