indexo.dev

natheor.com

.com crawl

First seen 2026-04-20 · Last seen 2026-05-14 · ok HTTP/1.1 200 1488 ms crawled 2026-05-14

FR · 51.178.9.196 · AS16276 OVH SAS

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Bijouterie NathéOr à Riom : bijoux & montres pour tous | NathéOr
Description
Bijouterie NathéOr à Riom. Découvrez une sélection de bijoux et de montres pour toute la famille, des services atelier soignés et un accompagnement attentif au quotidien.
Language
fr
Canonical
https://www.natheor.com/

Open Graph

url
https://www.natheor.com/
title
Bijouterie NathéOr à Riom : bijoux & montres pour tous | NathéOr
description
Bijouterie NathéOr à Riom. Découvrez une sélection de bijoux et de montres pour toute la famille, des services atelier soignés et un accompagnement attentif au quotidien.

Technology

Analytics
  • Google Tag Manager

Third-party hosts loaded (6)

  • images.hbjo-online.com×71
  • scontent-fra3-1.cdninstagram.com×4
  • scontent-fra5-1.cdninstagram.com×4
  • scontent-fra5-2.cdninstagram.com×4
  • scontent-fra3-2.cdninstagram.com×2
  • www.googletagmanager.com×1

Social

Contact

Phone
Address
Rue de l'Horloge63200

Registration

Registrar
OVH sas
Created
2019-01-24
Expires
2028-01-24 614 days left
Updated
2026-02-15
Name servers
  • dns110.ovh.net
  • ns110.ovh.net

DNS records live

NS
  • dns110.ovh.net
  • ns110.ovh.net
MX
  • 1 mx1.mail.ovh.net
  • 100 mx3.mail.ovh.net
  • 5 mx2.mail.ovh.net
TXT
  • brevo-code:2898d692124852b1057ce58f9cce34a3
  • Sendinblue-code:fb071346a57bf149791a3cb13d0d12b5

Email authentication partial

SPF
v=spf1 include:mx.ovh.com include:u7660982.wl233.sendgrid.net include:spf.sendinblue.com -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com
policy: none (monitoring only)
DKIM
  • mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4X+uo0t18stZbVdz3DkmiPzGEIF28JPHCh6Z5ix4H+U+XXXV26G4nHzIlurFRhVb3HPuhEXuxrKRQW3RR…
  • s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr392ElSlXsjj9Uay2QMR1E1v6uxF7I1854oHZ/ikLM85vrwqzWTrBopdLUgabL7hmi3DeCrZkkRkowYqMf…
selectors probed

Certificate (current)

R13
from 2026-04-18 to 2026-07-17
Expires in 58 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.natheor.com/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
Header values
referrer-policy
strict-origin-when-cross-origin
permissions-policy
accelerometer=(),ambient-light-sensor=(),autoplay=(),battery=(),display-capture=(),document-domain=(),encrypted-media=(),fullscreen=(),gamepad=(),gyroscope=(),layout-animations=(self),legacy-image-formats=(self),magnetometer=(),microphone=(),midi=(),oversized-images=(self),picture-in-picture=(),publickey-credentials-get=(),speaker-selection=(),sync-xhr=(self),unoptimized-images=(self),unsized-media=(self),usb=(),screen-wake-lock=(),web-share=(),xr-spatial-tracking=()
x-content-type-options
nosniff
content-security-policy
default-src 'self' ws: data: blob: *.rolex.com *.youtube.com *.metricool.com *.occtoo.com *.dubail.fr *.bulgari.com *.vimeo.com vimeo.com web.gucci.data-solution.ch 'unsafe-eval' 'unsafe-inline' *.demdex.net *.hbjo-online.com i.ytimg.com *.hbjo-online.net *.googleapis.com *.gstatic.com *.cdninstagram.com *.bootstrapcdn.com *.vimeocdn.com *.google-analytics.com *.payline.com *.paypal.com *.avis-verifies.com cdn.jsdelivr.net *.adobedtm.com *.chopard.com *.richemontpartners.com *.richemont.com *.findologic.com *.google.com *.googletagmanager.com *.facebook.net tracker.metricool.com 4cs.gia.edu *.hotjar.io *.hotjar.com www.societe-des-avis-garantis.fr www.facebook.com *.cloudflareinsights.com cdn.occtoo-media.com *.doubleclick.net www.netreviews.eu *.americanexpress.com *.getalma.eu cdn.almapay.com www.googleadservices.com *.mariages.net *.google.fr *.inspify.io *.vaneste.fr *.skeepers.io *.cloudflare.com googleads.g.doubleclick.net *.cadgl.com my.matterport.com analytics.tiktok.com *.cred
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (3)

Linked from (1)