grandpalais.fr

.fr crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 7717 ms crawled 2026-05-19

FR · 178.237.104.57 · AS15401 Orange Business Services SA

Reputation 100/100

Classifying

HTML metadata

Title

Accueil | Grand Palais

Language

Canonical

https://www.grandpalais.fr/fr

Translations

Technology

CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (3)

www.boutiquesdemusees.fr×8
s.infos.communications.grandpalaisrmn.fr×1
www.googletagmanager.com×1

Social

Registration

Registrar

Orange Business Services SA, direction EOLAS

Created

2007-07-27

Expires

2026-12-28 221 days left

Updated

2026-01-28

Name servers

ns01.eolas.fr
ns02.eolas.fr
ns03.eolas-dns.eu

DNS records live

NS

ns01.eolas.fr
ns02.eolas.fr
ns03.eolas.eu

TXT

_eao7eut6inwfx7c56ijcuwvefji9b4a
fyBroJdqFKZKucTDuN0bz8ul3W25pM9zu3/MG1MWxfk=
_02bji5ogzd2n0oe9jpeb09fhfyvjee6

Verified for

Google
Meta

Email authentication no MX

SPF

v=spf1 a:mx4.eventim.de

no all qualifier

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTDUkvNH+SHLY4tHDR6F4QRw98PmkPwEODhBai4GclUfkkQs+CZYZGaGEZtQcE/DiyQ3gq4Hx/8ruQCrp7…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z7l6FEx0NMdfPHgyGwW9o8zYv4LBbPby9R1AqjsHSAMx2bTHj18JIjpg9GVv+J4GJwZDLfv+Aae2XgTR3…

selectors probed

Certificate (current)

RapidSSL TLS ECC CA G1

from 2025-09-01 to 2026-10-01

Expires in 133 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.grandpalais.fr/fr

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: connect-src 'self' www.googletagmanager.com https://pebed.dm-event.net *.dailymotion.com *.vimeo.com *.facebook.com *.fbcdn.net *.sketchfab.com wss://*.sketchfab.com *.soundcloud.com *.sndcdn.com *.calameo.com *.ina.fr *.worldline-solutions.com *.instagram.com https://*.googleapis.com *.google.com https://*.gstatic.com cdn.cookielaw.org bat.bing.net *.labrmngp.fr privacyportal-fr.onetrust.com *.askmonastudio.com https://analytics.tiktok.com https://business-api.tiktok.com https://analytics-ipv6.tiktokw.us; frame-src 'self' https://www.youtube.com https://www.franceculture.fr *.soundcloud.com *.calameo.com https://s.infos.communications.grandpalaisrmn.fr https://sketchfab.com *.sketchfab.com https://embed.radiofrance.fr *.ina.fr https://kuula.co *.dailymotion.com *.vimeo.com *.facebook.com *.worldline-solutions.com *.instagram.com *.google.com/recaptcha/api2/anchor *.googletagmanager.com *.doubleclick.net https://player.ausha.co *.askmonastudio.com https://soundcloud.com/; object-src 'n
strict-transport-security: max-age=16000000;includeSubDomains;