hopital-saint-joseph.fr

.fr crawl

First seen 2026-04-11 · Last seen 2026-05-20 · ok HTTP/1.1 200 8029 ms crawled 2026-05-19

FR · 141.94.21.47 · AS16276 OVH SAS

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Accueil
Language: fr
Canonical: https://www.hopital-saint-joseph.fr/

Open Graph

url: https://www.hopital-saint-joseph.fr/
title: Accueil

Technology

Server: nginx

Third-party hosts loaded (1)

cdnjs.cloudflare.com×1

Social

Registration

Registrar

SAFEBRANDS

Created

1998-04-21

Expires

2027-03-26 308 days left

Updated

2026-03-17

Name servers

ns1.safebrands.fr
ns2.safebrands.eu
ns3.safebrands.com
ns4.safebrands.org
ns5.safebrands.tech

DNS records live

NS

ns1.safebrands.fr
ns2.safebrands.eu
ns3.safebrands.com
ns4.safebrands.org
ns5.safebrands.tech

MX

0 hopitalsaintjoseph-fr01i1c.mail.protection.outlook.com

Verified for

Atlassian

Email authentication partial

SPF

v=spf1 ip4:92.173.192.112 include:spf.protection.outlook.com include:spf.mailjet.com -all

strict (-all)

DMARC

v=DMARC1; p=none

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQWJ8lw9lyxL2QX8gdXmiryXXBgKJYJZipWqHW2XTP5hKKIM2rSQ7EiWaZW2fjWQ9sz91M9Y9sobp3…
mail: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAAGgw7DKJ+mdtERipCM3lauy3Pq906FQQniq2hxMZaat7dCDOmB+eZaYC53t9LBiFo+niN9jULQi2…

selectors probed

Certificate (current)

from 2026-05-14 to 2026-08-12

Expires in 83 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.hopital-saint-joseph.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: fullscreen=*, picture-in-picture=*, idle-detection=*
x-content-type-options: nosniff
content-security-policy: base-uri 'self'; default-src *; img-src * 'self' data: https: blob:; script-src * 'self' data: 'unsafe-inline'; worker-src 'self' blob: 'self'; object-src 'none'; frame-src * data: blob:; child-src * data: blob:; style-src * 'self' 'unsafe-inline'; font-src * data: 'self'; frame-ancestors 'self'
strict-transport-security: max-age=63072000; includeSubDomains; preload