high-trail-vanoise.com

.com crawl

First seen 2026-04-20 · Last seen 2026-05-16 · ok HTTP/1.1 200 2197 ms crawled 2026-05-13

FR · 91.194.100.31 · AS43142 ADELI SAS

Reputation 67/100 wrong cert no dmarc policy

Classifying

HTML metadata

Title

High Trail Vanoise

Description

Participez au High Trail Vanoise à Val d’Isère : événement de trail running dans les Alpes avec parcours en montagne et panoramas.

Language

fr-FR

Generator

WordPress 6.9.1

Canonical

https://www.high-trail-vanoise.com/

Translations

Feeds

Open Graph

url: https://www.high-trail-vanoise.com/
title: High Trail Vanoise
locale: fr_FR
site name: High Trail Vanoise
description: Participez au High Trail Vanoise à Val d’Isère : événement de trail running dans les Alpes avec parcours en montagne et panoramas.

Technology

Server: nginx
CMS: WordPress

Fonts

Google Fonts

Third-party hosts loaded (4)

fonts.googleapis.com×2
embeds.fatmap.com×1
gmpg.org×1
widget.weezevent.com×1

Social

Registration

Registrar

Created

2016-08-08

Expires

2026-08-08 79 days left

Updated

2025-08-09

Name servers

dns1.plaindns.net
dns2.plaindns.net

DNS records live

NS

dns1.plaindns.net
dns2.plaindns.net

MX

10 mail-fr.securemail.pro

Email authentication weak

SPF: v=spf1 include:spf.webapps.net ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current) wrong cert

R12

from 2026-04-27 to 2026-07-26

Expires in 66 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.high-trail-vanoise.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: sameorigin
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google.com https://ajax.googleapis.com https://www.gstatic.com https://googleads.g.doubleclick.net https://www.youtube.com https://widget.weezevent.com https://embeds.fatmap.com https://editor-static-bucket.elementor.com https://cdnjs.cloudflare.com https://ams.wpml.org https://static.axept.io https://t.novius.net https://cdn.novius.net; object-src 'self'; worker-src 'self' blob:
strict-transport-security: max-age=31536000; includeSubDomains; preload