jean-station.fr
HTML metadata
Technology
- CMS
- Gatsby
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (1)
- www.googletagmanager.com×1
Contact
- Phone
- Address
- st date = new Date(); date.setTime(date.getTime() + days * 24 * 60 * 60 * 1000
Registration
- Registrar
- OVH
- Created
- 2014-02-18
- Expires
- 2027-02-18 272 days left
- Updated
- 2026-03-31
- Name servers
-
- dns1.ethersys.fr
- dns2.ethersys.fr
DNS records live
- NS
-
- dns1.ethersys.fr
- dns2.ethersys.fr
- MX
-
- 1 mx1.mail.ovh.net
- 5 mx2.mail.ovh.net
- 99 mx3.mail.ovh.net
- TXT
-
1|www.jean-station.fr
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 a mx include:_spf.alwaysdata.com include:_spf.google.com include:mx.ovh.com ?allneutral (?all) - DMARC
-
v=DMARC1; p=none; rua=mailto:HIDDEN@dmarc.brevo.compolicy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 23 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN, SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://fonts.gstatic.com https://ws.colissimo.fr https://api.systempay.fr/static/ *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.ca