lascaux.fr

HTML metadata

Title

Lascaux IV: exact replica of the original cave - Official website - Tickets

Description

Lascaux IV, reproduction of the Lascaux cave. Follow in the footsteps of our ancestors. A visit to dream, imagine and immerse yourself. Official website.

Language

en-GB

Generator

WordPress 6.9.4

Canonical

https://lascaux.fr/en/

Translations

en
es
fr

Open Graph

url: https://lascaux.fr/en/
title: Lascaux IV: exact replica of the original cave - Official website - Tickets
locale: en_GB
site name: Lascaux
description: Lascaux IV, reproduction of the Lascaux cave. Follow in the footsteps of our ancestors. A visit to dream, imagine and immerse yourself. Official website.
locale:alternate: es_ES

Technology

Server: Apache
CMS: WordPress 6.9.4
jQuery: 3.6.0

Analytics

Google Tag Manager

Third-party hosts loaded (6)

www.googletagmanager.com×3
code.jquery.com×2
cdn.by.wonderpush.com×1
cdn.wearegenial.com×1
kit.fontawesome.com×1
www.facebook.com×1

Social

Contact

Email

contact@lascaux.fr

Phone

+33553509910

Address

Avenue de Lascaux, 24290, Montignac-Lascaux France, 24290, Montignac, Nouvelle-Aquitaine, France

Registration

Registrar

OVH

Created

2016-02-02

Expires

2027-01-23 247 days left

Updated

2026-02-28

Name servers

dns109.ovh.net
ns109.ovh.net

DNS records live

NS

dns109.ovh.net
ns109.ovh.net

MX

0 lascaux-fr.mail.protection.outlook.com

TXT

1|https://www.ticketsdordogne.com/

Verified for

Brevo
Google
Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.sos-data.fr include:spf.mailjet.com include:_mailcust.gandi.net include:mx.ovh.com include:spf.sendinblue.com include:spf.protection.outlook.com include:mailgun.org ~all

softfail (~all)

DMARC

v=DMARC1; p=none; ruf=mailto:_dmarc@semitour.com; rua=mailto:rua@dmarc.brevo.com

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjimsUcgtV1+oNWQicApBv+7O5YI9UTBkiq0xa8OTxEdWBAcfOzShq+2fQxTYiRjuQ6itaM/8+5biR…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

GandiCert

from 2026-02-27 to 2026-09-14

Expires in 116 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://lascaux.fr/en/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy

Header values

x-frame-options: SAMEORIGIN
permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://*.alienor.net-content ; frame-src 'self' https://factory.wearegenial.com https://www.youtube.com https://www.googletagmanager.com https://static.axept.io https://*.alienor.net-content ;script-src 'self' 'unsafe-eval' 'unsafe-inline' https://kit.fontawesome.com https://cdn.wearegenial.com https://scripts.clarity.ms https://www.clarity.ms https://use.typekit.net https://www.googletagmanager.com/ https://googletagmanager.com/ https://code.jquery.com/ https://static.axept.io https://reservation.secureholiday.net https://analytics.tiktok.com https://connect.facebook.net https://matomo.yproximite.com https://get.smart-data-systems.com https://eqy.link/ https://stats.webleads-tracker.com https://*.alienor.net-content ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://reservation.secureholiday.net https://*.alienor.net-content ; img-src 'self' https://agentbuilder-prod.s3.amazonaws.com https://www.googletagmanager.com https://*.cdninstagram.co
strict-transport-security: max-age=31536000; includeSubDomains