hexatransfer.com
HTML metadata
Technology
- Server
- nginx
Registration
- Registrar
- Realtime Register B.V.
- Created
- 2026-03-22
- Expires
- 2027-03-22 305 days left
- Updated
- 2026-03-22
- Name servers
-
- ns1.gaprod.fr
- ns2.gaprod.fr
DNS records live
- NS
-
- ns1.cp1.gaprod.fr
- ns2.cp1.gaprod.fr
- Verified for
-
Email authentication no MX
- SPF
-
v=spf1 ip4:5.135.210.9 -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:billy.rousseau@dwenolagroup.com; adkim=s; aspf=spolicy: quarantine - DKIM
-
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhyKDiBsYIXsV4u6w99mYJnUhrHABHCaySZCRangaUE9joCIgceG0wxHgJiQmO7eADlPlfVW5FICGJ… - mail:
v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18GU6tWdVVhJgNH0mCIlmdI4lqrh0U3OdVcYa4qYvMu9H117OjsoK2GAJ4HRctGn7ip8…
selectors probed - default:
Certificate (current)
E8
Expires in 50 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- weak frame protection
- weak content type protection
Header values
- referrer-policy
no-referrer, no-referrer- x-frame-options
DENY, DENY- permissions-policy
camera=(), microphone=(), geolocation=()- x-content-type-options
nosniff, nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'- strict-transport-security
max-age=63072000; includeSubDomains; preload
Links to (1)
Linked from (2)
- dwenola.com×1
- gaprod.fr×1