thermes-saint-gervais.com

.com crawl

First seen 2026-04-23 · Last seen 2026-05-17 · ok HTTP/1.1 200 3811 ms crawled 2026-05-18

FR · 5.135.63.163 · AS16276 OVH SAS

Reputation 100/100

Classifying

HTML metadata

Title: Thermes Saint-Gervais Mont Blanc | Cure thermale et Spa
Description: Une eau aux propriétés exceptionnelles, exploitée pour la première fois en 1807 et reconnue par l’Académie nationale de médecine de France. À ce jour, chacun peut bénéficier autant de ses vertus thérapeutiques qu’hédonistiques.
Language: fr
Canonical: https://thermes-saint-gervais.com/

Technology

Cookie consent

Cookiebot

Fonts

Google Fonts

Third-party hosts loaded (3)

fonts.googleapis.com×2
consent.cookiebot.com×1
fonts.gstatic.com×1

Social

Registration

Registrar

Nameshield SAS

Created

2004-05-19

Expires

2028-11-10 904 days left

Updated

2025-12-11

Name servers

ns1-a.nadns1.fr
ns1-b.nadns1.com
ns1-c.nadns1.com

DNS records live

NS

ns1-a.nadns1.fr
ns1-b.nadns1.com
ns1-c.nadns1.com

Verified for

Brevo
Google

Email authentication no MX

SPF

v=spf1 include:spf.brevo.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

policy: none (monitoring only)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsigFiuFYRkGk49zq2W4RBZXhMP8EAfKX33m2CNwNZ3gVzYtM0n4CLbHz4dsrHv0caDPgMHYI74p+c6OvbK…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtjTCXH0fHsAhXo6/h12VgCTjWghceByhENqEnA+mwL0XzETSVSlLvYCbcaZFIjVFOHzfkRpkbDlsAHFofrwAnx3…

selectors probed

Certificate (current)

GandiCert

from 2025-10-27 to 2026-10-28

Expires in 160 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://thermes-saint-gervais.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: DENY
permissions-policy: geolocation=(), microphone=()
x-content-type-options: nosniff
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:;
strict-transport-security: max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin