gritchen-affinity.com

.com crawl

First seen 2026-04-17 · Last seen 2026-05-12 · ok HTTP/1.1 200 2173 ms crawled 2026-05-12

FR · 217.182.91.12 · AS16276 OVH SAS

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Groupe Gritchen - Affinity
Description
Courtier en assurance depuis 2000, nous sommes spécialistes de l'assurance destinée aux domaines du tourisme et des loisirs et nous avons toute la confiance des plus grandes compagnies d'assurance.

Technology

Server
Apache
Fonts
  • Google Fonts

Third-party hosts loaded (2)

  • fonts.googleapis.com×2
  • s7.addthis.com×1

Registration

Registrar
OVH sas
Created
2011-09-22
Expires
2026-09-22 126 days left
Updated
2025-09-23
Name servers
  • dns20.ovh.net
  • ns20.ovh.net

DNS records live

NS
  • dns20.ovh.net
  • ns20.ovh.net
MX
  • 0 aspmx.l.google.com
  • 10 aspmx2.googlemail.com
  • 100 gritchenaffinitaire-com02b.mail.protection.outlook.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
TXT
Show 4 TXT records
  • google-site-verification=bEBb9il8nPmGI4Kh20LBEQzerMBn83Wsa3AnWhbh1vQ
  • google-site-verification=aXR6L_o1OLjAluM1AfpVJkfrcNcdN6ntzPQz9p6-s0g v=spf1 +a +mx -all v=spf1 a mx a:out03.smtpout.orange.fr -all
  • google-site-verification=6ATiQz1RXykbEdSTaD14OsGAIbJyvhU8I3OPtl2-tgk
  • google-site-verification=aXR6L_o1OLjAluM1AfpVJkfrcNcdN6ntzPQz9p6-s0g

Email authentication partial

SPF
v=spf1 include:mx.ovh.com mx a:out03.smtpout.orange.fr include:webspf.gritchen.fr a:gap.gritchen.fr ip4:87.98.163.20 ip6:2001:41d0:a:5538:: include:_spf.google.com include:servers.mcsv.net ~all
softfail (~all)
DMARC
v=DMARC1;p=none;
policy: none (monitoring only)
DKIM
  • k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
selectors probed

Certificate (current)

E7
from 2026-04-15 to 2026-07-14
Expires in 56 days

HTTP security headers

Header hygiene 65/100 Checked live page: https://gritchen-affinity.com/

present
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
same-origin
x-frame-options
sameorigin
x-content-type-options
nosniff
content-security-policy
object-src 'self'; script-src *.dynamo.one *.gritchen.fr *.demo.declare.fr *.penni-connect.io www.clarity.ms client.crisp.chat www.gritchen-affinity.com *.adverline.com img.metaffiliation.com cdn.chatbot.com ajax.googleapis.com *.pinterest.com connect.facebook.net 'self' *.addthisedge.com graph.facebook.com *.addthis.com maps.google.com maps.googleapis.com chat.gritchen-affinity.com www.googletagmanager.com *.gstatic.com www.google-analytics.com www.google.com www.googleadservices.com googleads.g.doubleclick.net *.microsoft.com *.jquery.com 'unsafe-inline' 'unsafe-eval'; font-src data: netdna.bootstrapcdn.com static2.sharepointonline.com client.crisp.chat fonts.gstatic.com 'self' fonts.googleapis.com use.fontawesome.com ; img-src data: *.gritchen-affinity.com client.crisp.chat images.ctfassets.net image.crisp.chat action.metaffiliation.com maps.wikimedia.org maps.google.com *.gstatic.com secure.gravatar.com stats.g.doubleclick.net www.google.fr www.google.com 'self' *.pinterest.co

Links to (9)

Linked from (3)