saintlouis-hotels.com

HTML metadata

Title

Les Hôtels Saint-Louis | Boutique-Hôtels Paris

Description

SITE OFFICIEL | Les Hôtels Saint-Louis, collection de boutique-hôtels de charme à Paris, allient élégance, authenticité et localisation d'exception dans la capitale.

Language

fr

Canonical

https://saintlouis-hotels.com/

Translations

en
fr

Open Graph

url: https://saintlouis-hotels.com/
title: Les Hôtels Saint-Louis | Boutique-Hôtels Paris
description: SITE OFFICIEL | Les Hôtels Saint-Louis, collection de boutique-hôtels de charme à Paris, allient élégance, authenticité et localisation d'exception dans la capitale.

Technology

Server: openresty
Stack: PHP

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (6)

hapi.mmcreation.com×79
map.hapimap.mmcreation.com×2
cdn.jsdelivr.net×1
fonts.googleapis.com×1
www.googletagmanager.com×1
www.hotelpricexplorer.com×1

Social

Contact

Email

Address

152, boulevard Voltaire, 75011, Paris

Registration

Registrar

French Connexion SARL dba Domaine.fr

Created

2004-04-05

Expires

2029-10-24 1239 days left

Updated

2024-02-14

Name servers

dns2.french-connexion.com
dns60.domaine.fr

DNS records live

NS

dns2.french-connexion.com
dns60.domaine.fr

MX

0 saintlouishotels-com02e.mail.protection.outlook.com

Verified for

Google
Microsoft 365

Email authentication weak

SPF: v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

E8

from 2026-05-16 to 2026-08-14

Expires in 72 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://saintlouis-hotels.com/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles

Header values

referrer-policy: no-referrer, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=*, autoplay=*, camera=*, cross-origin-isolated=*, display-capture=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, keyboard-map=*, magnetometer=*, microphone=*, midi=*, payment=*, picture-in-picture=*, publickey-credentials-get=*, screen-wake-lock=*, sync-xhr=*, usb=*, web-share=*, xr-spatial-tracking=*
x-content-type-options: nosniff
content-security-policy: default-src https: http: blob: 'unsafe-inline' moz-extension: mediastream: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' cspv2.1 ; script-src https: http: blob: 'unsafe-inline' 'unsafe-eval' ; connect-src https: http: blob: 'unsafe-inline' data: ws: wss: ; frame-src https: http: blob: 'unsafe-inline' data: ; style-src https: http: blob: 'unsafe-inline' data: ; font-src https: http: blob: 'unsafe-inline' data: ; img-src https: http: blob: 'unsafe-inline' data: ; frame-ancestors https: http: blob: data: ;