loisirquebec.com

.com crawl

First seen 2026-04-28 · Last seen 2026-05-18 · ok HTTP/1.1 200 5319 ms crawled 2026-05-06

CA · 52.60.140.239 · AS16509 Amazon.com, Inc.

Reputation 97/100 dmarc monitor-only

Classifying

HTML metadata

Title: Accueil | Conseil québécois du loisir
Language: fr-CA
Generator: Yapla v6.250.0 - CMS Application

Open Graph

url: https://www.loisirquebec.com/fr/
title: Accueil | Conseil québécois du loisir
site name: Conseil québécois du loisir-1

Technology

CDN: Amazon CloudFront
Server: Apache
CMS: Joomla

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (6)

cdn.ca.yapla.com×77
s3.ca-central-1.amazonaws.com×7
fonts.googleapis.com×1
fonts.gstatic.com×1
kit.fontawesome.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

514-252-3132

Registration

Registrar

GoDaddy.com, LLC

Created

2000-05-08

Expires

2028-05-08 719 days left

Updated

2025-05-05

Name servers

ns1.loisirsport.net
ns2.loisirsport.net

DNS records live

NS

ns1.loisirsport.net
ns2.loisirsport.net

MX

0 loisirquebec-com.mail.protection.outlook.com

TXT

MS=ms13564093
MS=3508293BBD15BBC5041E4B0F2B23F7A79888AA6A

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf.cyberimpact.com -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VkGqPHF3Kh5HHdTCcOuXqDoNjkCmhUwDqdDwefXohhbIBXD8P5cF2n0Ic3t9PtD9en1zqw/sfjIjt…

selectors probed

Certificate (current)

R13

from 2026-04-13 to 2026-07-12

Expires in 53 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.loisirquebec.com/fr/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
missing frame protection
weak content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self' http: https: ws: wss: 'unsafe-inline' 'unsafe-eval' data:; child-src 'self' blob: https:; img-src 'self' blob: data: https:; worker-src 'self' blob: https:
strict-transport-security: max-age=31536000; includeSubDomains