groupechopard.com
HTML metadata
Technology
- Server
- Apache
- CMS
- Nuxt
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- cdn.jsdelivr.net×1
- www.googletagmanager.com×1
Social
Contact
- Address
- Rue Gérard Mantion25000
Registration
- Registrar
- Namebay SAM
- Created
- 2012-08-22
- Expires
- 2027-08-22 459 days left
- Updated
- 2026-05-04
- Name servers
-
- ns01.eolas.fr
- ns02.eolas.fr
- ns03.eolas-dns.eu
DNS records live
- NS
-
- ns01.eolas.fr
- ns02.eolas.fr
- ns03.eolas-dns.eu
- MX
-
- 10 vade-mx-fr01.hornetsecurity.com
- 10 vade-mx-fr02.hornetsecurity.com
- 20 vade-mx-eu-fallback01.hornetsecurity.com
- 20 vade-mx-eu-fallback02.hornetsecurity.com
- TXT
-
Show 5 TXT records
yandex-verification: 32a5b84ee53d8ddcbrevo-code:45a215d6d387fc338be8e4c9f884b3c2google-site-verification=43kBSRS25Uyts6Hc9IBF4RxKNQk6-uld0bQqxpyde2sMS=ms15805844v=spf1 include:spf.protection.outlook.com include:spf.hornetsecurity.com include:spf.cloud.vadesecure.com ip4:207.54.67.165 ip4:207.54.65.189 ip4:37.235.93.96 ip4:91.223.240.206 ip4:91.223.240.207 ip4:195.6.66.14 ip4:90.102.172.105 include:amazonses.com include:spf.mail.digicontacts.cloud include:eskerondemand.com -all
Certificate (current)
GandiCert
Expires in 169 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-resource-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- permissions-policy
camera=(), display-capture=(), fullscreen=(*), geolocation=(self), microphone=(), accelerometer=(), autoplay=(), encrypted-media=(), gyroscope=(), magnetometer=(), midi=(), payment=(self https://checkout.getalma.eu https://authentication-devices.checkout.com), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()- x-content-type-options
nosniff- content-security-policy
base-uri 'none'; font-src 'self' https: data:; form-action 'self' https://*.vivafi.fr; frame-ancestors 'self'; img-src 'self' data: *.ekonsilio.io https://maps.googleapis.com https://maps.gstatic.com https://www.google.com https://*.ytimg.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.fr https://googleads.g.doubleclick.net https://*.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://www.facebook.com/ https://*.contentsquare.net https://back.prod.groupechopard.com; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' *.ekonsilio.io https://fonts.googleapis.com https://back.prod.groupechopard.com; script-src 'self' 'unsafe-eval' *.ekonsilio.io blob:* https://googleads.g.doubleclick.net https://*.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com; upgrade-insecure-requests; default-src 'self'; script-src-elem 'self' 'unsafe-inline' *.ekonsilio.io- strict-transport-security
max-age=15552000; includeSubDomains- cross-origin-resource-policy
same-origin