uxer.fr
HTML metadata
Technology
- Server
- Apache
- CMS
- Next.js
Social
Registration
- Registrar
- OVH
- Created
- 2014-10-30
- Expires
- 2026-10-30 162 days left
- Updated
- 2025-11-30
- Name servers
-
- dns200.anycast.me
- ns200.anycast.me
DNS records live
- NS
-
- dns200.anycast.me
- ns200.anycast.me
- MX
-
- 10 mail.protonmail.ch
- 20 mailsec.protonmail.ch
- TXT
-
protonmail-verification=bb53a5845071e5f63586a74d81a61af15f23e339mistral-domain-verification=d2b5efbd2fca902c3daea23f29c5d85d64c0a8adHpr567Mda935
- Verified for
-
Email authentication strong
- SPF
-
v=spf1 include:spf.mailjet.com include:_spf.protonmail.ch include:amazonses.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantinepolicy: quarantine - DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 86 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- cross-origin-opener-policy
- cross-origin-resource-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
sameorigin- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'nonce-ded3aacb7eac4a8d21834b157fcad315' https://*.uxer.fr https://matomo.uxer.fr https://static.hotjar.com https://script.hotjar.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https: blob:; media-src 'self' https://api-admin.uxer.fr; connect-src 'self' https://api-admin.uxer.fr https://matomo.uxer.fr https://*.hotjar.com wss://*.hotjar.com; base-uri 'self'; frame-ancestors 'none'; worker-src 'self';- cross-origin-opener-policy
same-origin- cross-origin-resource-policy
cross-origin