panajou.fr

HTML metadata

Title: Panajou : magasin d'appareils photo - Matériel photo et vidéo
Description: Magasin d'appareils et matériel photo & vidéo à Bordeaux. Maison de la Photographie depuis 1865. Livraison d'appareils photo reflex, hybrides, instantanés.
Language: fr
Canonical: https://www.panajou.fr/

Open Graph

url: https://www.panajou.fr/
title: Panajou : magasin d'appareils photo - Matériel photo et vidéo
site name: Panajou
description: Magasin d'appareils et matériel photo & vidéo à Bordeaux. Maison de la Photographie depuis 1865. Livraison d'appareils photo reflex, hybrides, instantanés.

Technology

Server: Apache

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (5)

www.googletagmanager.com×3
ajax.googleapis.com×1
eu1-config.doofinder.com×1
fonts.gstatic.com×1
www.google.com×1

Social

Contact

Phone

Address

PANAJOUBORDEAUX32 allées de Tourny33000 Bordeaux

Registration

Registrar

OVH

Created

2004-11-17

Expires

2026-11-17 181 days left

Updated

2025-09-07

Name servers

dns10.ovh.net
ns10.ovh.net

DNS records live

NS

dns10.ovh.net
ns10.ovh.net

MX

10 smtp.google.com

TXT

brevo-code:1ea835e0d136474ac87a7c04e7c21cc4
google-site-verification=OPFT7FpM47II-rnQbZpqrD0L4UT65FMs_rcP4LqHThA

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:spf.brevo.com mx ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=100; adkim=s; aspf=s

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCmnserUKc+Qg5ul5El0Tqsch4PQP83cmSsXP7LcfnYljRl4rBmIvvRgNf9mwGiU3FbJ/xgTHPQT7HgZjTrkO…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

E8

from 2026-03-22 to 2026-06-20

Expires in 32 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.panajou.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), geolocation=(self), fullscreen=(), autoplay=(), camera=(), display-capture=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.digitaloceanspaces.com *.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s3-eu-west-1.amazonaws.com/pledg-assets/ cdn.doofinder.com eu1-config.doofinder.com client.crisp.chat embed.tawk.to *.digitaloceanspaces.com *.facebook.net *.intercomcdn.com clippingmagic.com *.intercom.io https://js.hcaptcha.com https://cdn.jsdelivr.net *.instagram.com *.googlesyndication.com *.google.fr *.youtube.com *.doubleclick.net *.googleadservices.com *.googleapis.com *.bing.com *.matomo.cloud *.avis-verifies.com *.pinimg.com *.google-analytics.com *.google.com *.googletagmanager.com *.gstatic.com *.colissimo.fr *.chronopost.fr; style-src 'self' 'unsafe-inline' cdn.doofinder.com embed.tawk.to client.crisp.chat https://cdn.jsdelivr.net *.google-analytics.com *.googletagmanager.com *.googleapis.com *.bootstrapcdn.com *.lyra.com *.onyourmap.com *.mapbox.com; img-src 'self' data: 'unsafe-eval' blob: cdn.doofinder.com image.crisp.chat https://cdn.jsdelivr.net/emojione/ e
strict-transport-security: max-age=31536000

Links to (7)

Linked from (1)

vif-photo.com×2