hotelflore.fr
HTML metadata
Technology
- Server
- openresty
- Stack
- PHP
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- hapi.mmcreation.com×71
- fonts.googleapis.com×2
- cdn.jsdelivr.net×1
- www.hotelpricexplorer.com×1
Social
Contact
- Phone
- Address
- 108, rue Lamarck, 75018, Paris
Registration
- Registrar
- FRANCHE COMTE NET
- Created
- 2006-02-22
- Expires
- 2026-10-17 136 days left
- Updated
- 2025-11-30
- Name servers
-
- dns.apicius.com
- dns2.apicius.com
- dns3.apicius.com
- dns4.apicius.com
DNS records live
- NS
-
- dns.apicius.com
- dns2.apicius.com
- dns3.apicius.com
- dns4.apicius.com
- MX
-
- 0 mx1.api-and-you.com
- 0 mx2.api-and-you.com
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 include:spf_external.api-and-you.com ip4:178.170.74.44/30 ip4:178.170.74.94 ip4:178.170.125.76/31 ip4:178.170.125.110 ip4:178.170.125.68 include:spf.reservit.com include:message-business.com -allstrict (-all) - DMARC
-
v=DMARC1;p=none;pct=100;rua=mailto:dmarc_aggrep@hotelflore.fr; ruf=mailto:dmarc_authfail@hotelflore.frpolicy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
E7
Expires in 38 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
Header values
- referrer-policy
no-referrer, strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=*, autoplay=*, camera=*, cross-origin-isolated=*, display-capture=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, keyboard-map=*, magnetometer=*, microphone=*, midi=*, payment=*, picture-in-picture=*, publickey-credentials-get=*, screen-wake-lock=*, sync-xhr=*, usb=*, web-share=*, xr-spatial-tracking=*- x-content-type-options
nosniff- content-security-policy
default-src https: http: blob: 'unsafe-inline' moz-extension: mediastream: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' cspv2.1 ; script-src https: http: blob: 'unsafe-inline' 'unsafe-eval' ; connect-src https: http: blob: 'unsafe-inline' data: ws: wss: ; frame-src https: http: blob: 'unsafe-inline' data: ; style-src https: http: blob: 'unsafe-inline' data: ; font-src https: http: blob: 'unsafe-inline' data: ; img-src https: http: blob: 'unsafe-inline' data: ; frame-ancestors https: http: blob: data: ;