legalplace.fr
HTML metadata
Technology
- CDN
- Amazon CloudFront
- Server
- nginx
- CMS
- WordPress
- Analytics
-
- Google Analytics
- Mixpanel
- Ads
-
- Google Ads (DoubleClick)
- Meta Pixel
Third-party hosts loaded (13)
- widget.trustpilot.com×2
- api.mixpanel.com×1
- bat.bing.com×1
- cdn.mxpnl.com×1
- connect.facebook.net×1
- gmpg.org×1
- in-automate.sendinblue.com×1
- s.sib.im×1
- sibautomation.com×1
- stats.g.doubleclick.net×1
- www.google-analytics.com×1
- www.google.com×1
- www.google.fr×1
Contact
- Address
- 60 Rue François 1er, 75008, Paris, Île-de-France, FR
Registration
- Registrar
- OVH
- Created
- 2015-09-14
- Expires
- 2027-09-14 481 days left
- Updated
- 2025-09-06
- Name servers
-
- ns-1055.awsdns-03.org
- ns-1810.awsdns-34.co.uk
- ns-506.awsdns-63.com
- ns-802.awsdns-36.net
DNS records live
- NS
-
- ns-1055.awsdns-03.org
- ns-1810.awsdns-34.co.uk
- ns-506.awsdns-63.com
- ns-802.awsdns-36.net
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
Show 4 TXT records
98a00d9cf3a9182d952e529e4e0be5fbpardot906092=8b6ed478e1eafe8efcd95146b9a11042cb4a20f91417947c9ed0684ed12605a2v=DMARC1; p=none; sp=none; rua=mailto:dmarc@mailinblue.com!10m; ruf=mailto:dmarc@mailinblue.com!10m; rf=afrf; pct=100; ri=864001|www.legalplace.fr
- Verified for
-
- Airtable
- Brevo
- Cursor
- Meta
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 include:spf.mandrillapp.com include:_spf.google.com ip4:188.165.84.145 include:amazonses.com include:_spf.salesforce.com include:email.chargebee.com -allstrict (-all) - DMARC
-
v=DMARC1; p=none; sp=none; rua=mailto:legalplace@dmarc.postmastery.com,mailto:gabrielle.melli+dmarclp@legalplace.fr; ruf=mailto:legalplace@dmarc.postmastery.com,mailto:gabrielle.melli+dmarclp@legalplace.fr; fo=1; rf=afrf; pct=100; ri=86400policy: none (monitoring only) · sp=none - DKIM
-
- mail:
k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveR9DEsJvaMFDSexrOpJ6yzkNhfOt5KcwMaGEkEJsYvlaKTmCbLVHytF7QBdv5DxlF5JHzQDyFg5r2nCVv… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDpCSrKT5CVQv5TDIk1iwPRmh7vPn6/HiNg6bs3MqivpntcVPC0fqY0ZRe1RGxBdxTYuzLFYQyAr5/mWBCGFr6YqU…
selectors probed - mail:
Certificate (current)
Amazon RSA 2048 M04
Expires in 101 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- referrer-policy
- permissions-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing content type protection
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), usb=()- content-security-policy
base-uri 'self'; default-src 'self' https: data:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://*.reddit.com https://*.redditstatic.com https://*.googlesyndication.com https://*.snapchat.com https://*.privacy-center.org https://*.tiktokw.us https://*.tiktok.com https://*.criteo.net https://*.criteo.com; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https: data: https://*.reddit.com https://*.redditstatic.com https://*.googlesyndication.com https://*.snapchat.com https://*.privacy-center.org https://*.tiktokw.us https://*.tiktok.com https://*.criteo.net https://*.criteo.com; img-src 'self' https: data: blob:; object-src 'none'; frame-src 'self' https:; upgrade-insecure-requests;, base-uri 'self'; default-src https: data:; script-src blob: https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; connect-src https://*.crisp.chat https://*.zapier.com https://www.googletagmanager.com https://*.trackjs.com https://*.abtasty.com *.intercom.io *.fa