relaisdor.fr

.fr crawl

First seen 2026-04-20 · Last seen 2026-05-14 · ok HTTP/1.1 200 1282 ms crawled 2026-05-14

FR · 46.16.42.10 · AS197369 SAS Proginov

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Relais d'Or Miko | Grossiste pour Professionnels de la Restauration
Description: Découvrez nos offres de produits surgelés, frais et notre gamme de glaces. Relais d’Or Miko : fournisseur alimentaire pour professionnels de la restauration
Language: fr

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (2)

www.google.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

GANDI

Created

1998-09-16

Expires

2027-01-20 245 days left

Updated

2025-11-01

Name servers

lp1.proginov.fr
lp2.proginov.fr

DNS records live

NS

lp1.proginov.fr
lp2.proginov.fr
lp3.proginov.fr

MX

5 mx01.cloud.vadesecure.com
5 mx02.cloud.vadesecure.com
5 mx03.cloud.vadesecure.com
5 mx04.cloud.vadesecure.com

TXT

MS=ms91061012
gEaRc6IplVMDLirHnl2QzEWhV+o4YZDKgDiGr8iIYADLhPpRq/22vXKu3HYWczB7wEQtqR6nJwQzsjvQ5oAcmQ==

Email authentication partial

SPF: v=spf1 include:mx.proginov.fr include:spf.cloud.vadesecure.com -all
strict (-all)
DMARC: v=DMARC1;p=none;sp=none;pct=100;rua=mailto:dmarc-report@proginov.com;ruf=mailto:dmarc-report@proginov.com;ri=86400;fo=1
policy: none (monitoring only) · sp=none
DKIM: no key found at common selectors

Certificate (current)

GlobalSign GCC R3 DV TLS CA 2020

from 2026-02-06 to 2027-03-10

Expires in 295 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://webshop.relaisdor.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection
missing Permissions Policy

Header values

referrer-policy: no-referrer, strict-origin-when-cross-origin
x-frame-options: DENY, SAMEORIGIN
x-content-type-options: nosniff, nosniff
content-security-policy: block-all-mixed-content; img-src 'self' data: https://www.google-analytics.com https://maps.googleapis.com https://www.googletagmanager.com https://fonts.gstatic.com https://scontent.cdninstagram.com https://*.cdninstagram.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://sdk.privacy-center.org https://www.google-analytics.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://tag.aticdn.net
strict-transport-security: max-age=31536000; includeSubDomains; preload