indexo.dev

ownsport.fr

.fr crawl

First seen 2026-05-07 · Last seen 2026-05-14 · ok HTTP/1.1 200 280 ms crawled 2026-05-14

FR · 46.105.57.43 · AS16276 OVH SAS

Reputation 100/100

sector sports type homepage

HTML metadata

Title
Coach sportif à domicile, N°1 à Paris et partout en France
Description
Coaching sportif à domicile, Ownsport, leader français depuis 2006. + de 12000 coachs dès 19€/h, 50% de réduction d'impôts sur vos cours : 01 42 05 06 10
Language
fr
Canonical
https://www.ownsport.fr/

Technology

Server
Apache
CMS
Next.js
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (2)

  • fonts.gstatic.com×1
  • www.googletagmanager.com×1

Registration

Registrar
OVH
Created
2007-06-27
Expires
2027-02-15 270 days left
Updated
2026-03-31
Name servers
  • dns200.anycast.me
  • ns200.anycast.me

DNS records live

NS
  • dns200.anycast.me
  • ns200.anycast.me
MX
  • 1 smtp2.ownsport.fr
Verified for
  • Brevo
  • Google

Email authentication strong

SPF
v=spf1 mx ip4:217.182.136.170 ip6:2001:41d0:303:22aa::1 include:spf.sendinblue.com -all
strict (-all)
DMARC
v=DMARC1;p=reject;rua=mailto:webmaster@ownsport.fr;aspf=s;
policy: reject (enforced)
DKIM
  • mail: v=DKIM1;h=sha256;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WhGNwGxpPu9tu8YSbxW3ihyltP73EEK3cFt0GUP0/FfkutUFnmBKoV5+99/uebT5+Keq1O…
selectors probed

Certificate (current)

R12
from 2026-05-09 to 2026-08-07
Expires in 79 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.ownsport.fr/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
deny
x-content-type-options
nosniff
content-security-policy
default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
strict-transport-security
max-age=31536000; includeSubDomains; preload

Linked from (2)