nexo-sa.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (5)
- euc-widget.freshworks.com×1
- fonts.googleapis.com×1
- gmpg.org×1
- www.google.com×1
- www.googletagmanager.com×1
Social
Registration
- Registrar
- Gandi SAS
- Created
- 1997-07-09
- Expires
- 2026-07-08 48 days left
- Updated
- 2025-06-07
- Name servers
-
- ns3.hexanet.fr
- ns4.hexanet.fr
- ns5.hexanet.fr
DNS records live
- NS
-
- ns3.hexanet.fr
- ns4.hexanet.fr
- ns5.hexanet.fr
- MX
-
- 0 mx.hexanet.fr
- 0 mx2.hexanet.fr
- 0 mx3.hexanet.fr
- TXT
-
42h8644428uli12v9atc6189bd
Email authentication weak
- SPF
-
v=spf1 ip4:188.94.200.101 -allstrict (-all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
WE1
Expires in 58 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
DENY- x-content-type-options
nosniff- content-security-policy
frame-src 'self' www.nexo-sa.com nexosadev.wpengine.com www.google.com www.youtube.com e.issuu.com mc.us18.list-manage.com; base-uri 'self' www.nexo-sa.com nexosadev.wpengine.com; object-src 'self' www.nexo-sa.com mc.us18.list-manage.com; img-src 'self' www.nexo-sa.com nexosadev.wpengine.com data: ajax.googleapis.com secure.gravatar.com ps.w.org memberpress.com cdn.datatables.net maps.gstatic.com www.googletagmanager.com maps.googleapis.com www.w3.org s.w.org gravatar.com static.gleap.io downloads.mailchimp.com wpengine.com plugin-updates.wpengine.com connect.advancedcustomfields.com mcusercontent.com; script-src 'self' www.nexo-sa.com nexosadev.wpengine.com 'unsafe-inline' 'unsafe-eval' blob: www.googletagmanager.com stats.wp.com static.hotjar.com www.google.com script.hotjar.com chimpstatic.com downloads.mailchimp.com mc.us18.list-manage.com www.gstatic.com cdnjs.cloudflare.com maps.googleapis.com khms.googleapis.com unpkg.com cdn.datatables.net sdk.gleap.io euc-widget.freshworks.com- strict-transport-security
max-age=63072000; includeSubDomains;