parcduverdon.fr

.fr crawl

First seen 2026-04-14 · Last seen 2026-05-16 · ok HTTP/1.1 200 993 ms crawled 2026-05-08

FR · 109.234.166.158 · AS50474 O2switch SAS

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title

Accueil - Parc du Verdon

Language

fr-FR

Generator

WP Rocket 3.21.0.1

Canonical

https://www.parcduverdon.fr/

Feeds

Parc du Verdon » Flux RSS

Open Graph

url: https://www.parcduverdon.fr/
title: Accueil - Parc du Verdon
locale: fr_FR
site name: Parc du Verdon

Technology

Server: o2switch-PowerBoost-v3
CMS: WordPress

Third-party hosts loaded (1)

gmpg.org×1

Social

Contact

Phone

0492746800

Registration

Registrar

OVH

Created

2001-12-04

Expires

2026-11-26 190 days left

Updated

2025-12-31

Name servers

dns110.ovh.net
ns110.ovh.net

DNS records live

NS

dns110.ovh.net
ns110.ovh.net

MX

10 mx01.cloud.vadesecure.com
10 mx02.cloud.vadesecure.com
10 mx03.cloud.vadesecure.com
10 mx04.cloud.vadesecure.com

TXT

google-site-verification=BpnzP4KoWzc8oIZlEc-NX1JopCAkUMvXWWWJexI-fHQ

Email authentication weak

SPF

v=spf1 mx include:mx.ovh.com include:spf.cloud.vadesecure.com include:spf.xsalto.com include:_spf.websenso.com include:_spf.o2switch.inovawork.net -all

strict (-all)

DMARC

not published

DKIM

default: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nHJMywN6hSp/XxVPNUGgm6gK9w6WYnwDZ0FdScx3wUwAwW3vxtvHE3/4OBdLZnLEj8A5zbHofW2Ai7E…

selectors probed

Certificate (current)

R12

from 2026-04-22 to 2026-07-21

Expires in 62 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.parcduverdon.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: fullscreen=*, geolocation=*, camera=*, microphone=*, display-capture=*
x-content-type-options: nosniff
content-security-policy: default-src * https: data: blob: 'unsafe-inline' 'unsafe-eval';
strict-transport-security: max-age=31536000; includeSubDomains; preload