perfactive.fr

.fr crawl

First seen 2026-04-21 · Last seen 2026-05-18 · ok HTTP/1.1 200 2041 ms crawled 2026-05-14

US · 172.67.69.25 · AS13335 Cloudflare, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: PERFACTIVE | Logiciel pour professionnels de santé
Description: Logiciel performant pour professionnels de santé | Réservations en ligne, gestion des annulations, suivi patients, facturation.
Language: fr
Canonical: https://perfactive.fr

Open Graph

url: https://perfactive.fr
title: PERFACTIVE | Logiciel pour professionnels de santé
locale: fr_FR
site name: Perfactive
description: Logiciel performant pour professionnels de santé | Réservations en ligne, gestion des annulations, suivi patients, facturation.

Technology

CDN: Cloudflare

Fonts

Google Fonts

Third-party hosts loaded (2)

fonts.googleapis.com×1
www.facebook.com×1

Social

Contact

Phone

+33 4 82 81 01 13

Address

Centre d'aideFormulaire de contact+33 4 82 81 01 13Planifier un appelNouveautés

Registration

Registrar

1API GmbH

Created

2020-06-10

Expires

2026-06-10 22 days left

Updated

2025-11-20

Name servers

addilyn.ns.cloudflare.com
tosana.ns.cloudflare.com

DNS records live

NS

addilyn.ns.cloudflare.com
tosana.ns.cloudflare.com

TXT

google-site-verification=uLmWLpMLAkvqgPYdVqgrUvtjfPON1oDv08ZBc6JW_TY

Email authentication no MX

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-04-17 to 2026-07-16

Expires in 58 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://perfactive.fr/

present

content-security-policy
referrer-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
content-security-policy: base-uri 'self';default-src 'self';form-action 'self';object-src 'self' blob:;connect-src 'self' *.mapbox.com *.pusher.com *.google-analytics.com connect.facebook.net www.facebook.net api-adresse.data.gouv.fr ip2c.org;frame-src 'self' blob: js.stripe.com www.loom.com www.youtube.com perfactive.whereby.com wip-labs.whereby.com challenges.cloudflare.com www.google.com;frame-ancestors 'none';worker-src 'self' blob:;media-src 'self' data:;img-src 'self' blob: data: cdn.jsdelivr.net www.gstatic.com *.googletagmanager.com www.facebook.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' js.stripe.com api.mapbox.com cdn.loom.com js.pusher.com cdnjs.cloudflare.com challenges.cloudflare.com cdn.jsdelivr.net www.google.com www.gstatic.com fonts.googleapis.com *.google-analytics.com *.googletagmanager.com connect.facebook.net;style-src 'self' 'unsafe-inline' api.mapbox.com cdnjs.cloudflare.com cdn.jsdelivr.net fonts.googleapis.com;font-src 'self' data: cdnjs.cloudflare.com fonts.gstatic.com