groupemach.com

HTML metadata

Title: Espace commercial et bureau à louer | MACH
Description: Propriétaire, développeur et gestionnaire immobilier, MACH crée des milieux durables et performants où se conjuguent innovation, valeur et impact collectif.
Language: fr
Canonical: https://www.groupemach.com/

Open Graph

url: https://www.groupemach.com/
title: Espace commercial et bureau à louer | MACH
locale: fr_CA
site name: Groupe Mach
description: Propriétaire, développeur et gestionnaire immobilier, MACH crée des milieux durables et performants où se conjuguent innovation, valeur et impact collectif.

Technology

Analytics

Google Analytics
Google Tag Manager

Third-party hosts loaded (6)

www.googletagmanager.com×3
ajax.googleapis.com×2
www.google-analytics.com×2
api.byscuit.com×1
cdnjs.cloudflare.com×1
static.addtoany.com×1

Social

Contact

Email

medias@groupemach.com

Phone

5143746224

Address

Groupe MACH inc.630, rue Saint-Paul O.Bureau 600MontréalQCH3C 1L9514 374-6224

Registration

Registrar

NameCheap, Inc.

Created

2007-01-25

Expires

2027-01-25 250 days left

Updated

2025-12-26

Name servers

dns1.registrar-servers.com
dns2.registrar-servers.com

DNS records live

NS

dns1.registrar-servers.com
dns2.registrar-servers.com

MX

10 d402587.a.ess.ca.barracudanetworks.com
20 d402587.b.ess.ca.barracudanetworks.com

TXT

druide-validation-domaine=a980fa4797c1a45fac7de92e00cb0074
t2eqq2nblvqvcenafffdciku9f
apple-domain-verification=WK1Lhs8PNsqTHn30

Email authentication partial

SPF

v=spf1 ip4:64.187.185.214 ip4:74.91.88.119 ip4:52.235.63.164 ip4:70.35.221.210 ip4:52.232.131.215 ip4:99.209.89.178 ip4:70.54.183.163 include:spf.protection.outlook.com include:spf-ca.emailsignatures365.com include:spf.vortexsolution.com include:spf.ess.ca.barracudanetworks.com include:asp-spf1.yardi.com include:asp-spf2.yardi.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; fo=1; rua=mailto:dmarcreports@groupemach.com,mailto:rua+groupemach.com@dmarc.barracudanetworks.com; ruf=mailto:ruf+groupemach.com@dmarc.barracudanetworks.com

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC065LuACnSOEwoi5X1Zr15DPsO5lPyyMgVQghdmFpY+aIM16sGTVGsr6MPC1H7R42oOw2QdYCcPlWzJ4CDvx…

selectors probed

Certificate (current)

R12

from 2026-04-13 to 2026-07-12

Expires in 54 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.groupemach.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak content type protection

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), autoplay=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), camera=(), clipboard-write=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), display-capture=(self), encrypted-media=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), fullscreen=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), gamepad=(self), geolocation=(self), gyroscope=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), magnetometer=(self), microphone=(), midi=(self), payment=(), picture-in-picture=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), compute-pressure=(self), publickey-credentials-get=(), sync-xhr=(self), usb=(), screen-wake-lock=(), web-share=(self "https://www.youtube.com" "https:
x-content-type-options: nosniff, Nosniff
content-security-policy: default-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://maps.googleapis.com https://maps.gstatic.com https://bat.bing.com https://www.clarity.ms https://api.byscuit.com https://*; script-src 'self' 'strict-dynamic' 'unsafe-inline' 'nonce-2C0B52C2DD16B9A62BB12DCEB184A4A3' https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://api.byscuit.com https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://www.clarity.ms https://vortexlisting.vortexsolution.com https://www.youtube.com https://static.addtoany.com https://www.google.com/recaptcha/ htt
strict-transport-security: max-age=31536000; includeSubDomains; preload