geovelo.app
HTML metadata
Technology
- CMS
- Gatsby
Third-party hosts loaded (2)
- new-geovelo.cdn.prismic.io×4
- static.cdn.prismic.io×3
Social
Contact
DNS records live
- NS
-
- ns-248-a.gandi.net
- ns-30-c.gandi.net
- ns-43-b.gandi.net
- MX
-
- 10 spool.mail.gandi.net
- 50 fb.mail.gandi.net
- Verified for
-
Email authentication weak
- SPF
-
v=spf1 include:_mailcust.gandi.net ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 42 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(self "https://geovelo.app"), microphone=(), browsing-topics=()- x-content-type-options
nosniff- content-security-policy
default-src 'self' *.geovelo.fr; frame-src 'self' *.geovelo.fr js-eu1.hsforms.net accounts.google.com new-geovelo.prismic.io geovelo-fr-geovelo.firebaseapp.com www.youtube.com impactco2.fr webforms.pipedrive.com platform.twitter.com www.facebook.com www.welcometothejungle.com; connect-src 'self' *.geovelo.fr data.geopf.fr wss://client.relay.crisp.chat/ px.ads.linkedin.com px4.ads.linkedin.com client.crisp.chat data: geovelo.matomo.cloud *.ingest.sentry.io mo.cloud s3.fr-par.scw.cloud www.facebook.com wxs.ign.fr wmts10.geo.admin.ch www.ign.es identitytoolkit.googleapis.com firebasedynamiclinks.googleapis.com accounts.google.com http://new-geovelo.cdn.prismic.io/ api.eu.amplitude.com sr-client-cfg.eu.amplitude.com securetoken.googleapis.com www.google-analytics.com wss://client.relay.crisp.chat client.crisp.chat stats.g.doubleclick.net www.welcomekit.co; style-src 'self' *.geovelo.fr api.mapbox.com fonts.googleapis.com cdn.tiny.cloud https://accounts.google.com/gsi/ client.crisp.chat pl- strict-transport-security
max-age=31536000; includeSubDomains