loxam-power.com

HTML metadata

Title

Spécialiste de la location de matériel industriel et fourniture d’énergie - Loxam Power

Description

Loxam-power, le spécialiste de la location de matériel industriel et de la fourniture d'énergie. Location de groupe électrogène, de compresseur, de climatiseur...

Language

fr

Translations

da-dk
de-ch
de-de
fr-be
fr-ch
fr-fr
nl-be
nl-nl

Technology

Server: *
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (14)

medias.loxam.com×12
fonts.googleapis.com×5
www.googletagmanager.com×3
www.loxam.be×2
www.loxam.ch×2
firebasestorage.googleapis.com×1
fonts.gstatic.com×1
loxam.api.useinsider.com×1
maps.googleapis.com×1
unpkg.com×1
www.loxam.de×1
www.loxam.dk×1
www.loxam.fr×1
www.loxam.nl×1

Social

Contact

Phone

0826162424

Address

89 Avenue de la Grande Armée, 75219, PARIS Cedex 16, France

Registration

Registrar

SafeBrands SAS

Created

2001-10-26

Expires

2026-10-26 160 days left

Updated

2025-11-20

Name servers

ns1.safebrands.fr
ns2.safebrands.eu
ns3.safebrands.com
ns4.safebrands.org
ns5.safebrands.tech

DNS records live

NS

ns1.safebrands.fr
ns2.safebrands.eu
ns3.safebrands.com
ns4.safebrands.org
ns5.safebrands.tech

MX

10 mx1.loxgroup.com
10 mx2.loxgroup.com

TXT

cisco-ci-domain-verification=46f9454abc88fe52fa999bc0981331f6942b90cd530ce832426e20c9b1337a9c

Email authentication strong

SPF

v=spf1 mx a ip4:109.26.223.93 include:spf.protection.outlook.com include:_spf.salesforce.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100; fo=1; rua=mailto:a.8gvvxcqe@sdmarc.net

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X/hsXCOoXutjM2nxcqnOWKF5Nw8FZH9wvwReDkvkirtwD70H0Ju6qY7cFRCv/WBbGSgrd5LWJz/MS…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA EV R36

from 2026-03-04 to 2027-03-05

Expires in 290 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.loxam-power.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'nonce-4F2TdnmD15DRJo+H/bo4atEZkvgB1Iv94x72w6gHkWA=' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/api.js https://*.loxam.com https://loxam.com https://*.model-t.cc.commerce.ondemand.com https://fonts.googleapis.com https://maps.gstatic.com https://www.googletagmanager.com/gtm.js https://www.google.com/recaptcha/* https://maps.googleapis.com/maps/api/js https://www.gstatic.com/recaptcha/* https://*.useinsider.com https://*.matomo.cloud https://*.evgnet.com https://*.algolia.net https://*.algolianet.com https://widgets.custplace.com/ https://script.hotjar.com https://*.hotjar.com https://halc.iadvize.com https://*.iadvize.com https://stats.webleads-tracker.com https://get.smart-data-systems.com https://*.smart-data-systems.com https://eqy.link https://userlink.ai https://*.userlink.ai https://elfsightcdn.com https://*.elfsight.com ;script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' https:
strict-transport-security: max-age=31536000 ; includeSubDomains