voiture-hybride.info

.info crawl

First seen 2026-06-03 · Last seen 2026-06-04 · ok HTTP/1.1 200 2324 ms crawled 2026-06-03

FR · 135.125.231.166 · AS16276 OVH SAS

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Voiture hybride : fonctionnement, avantages et inconvénients
Description: Il existe plusieurs voitures hybrides actuellement disponibles en France. On peut citer : Toyota Prius 4, Yaris HSD, Hybrid4, Mercedes C 300 BlueTec Hybrid…
Language: fr-FR
Canonical: https://www.voiture-hybride.info/

Technology

Server: nginx
CMS: WordPress
jQuery: 3.2.1 known XSS (<3.5)
Stack: PHP

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (5)

cdnjs.cloudflare.com×4
fonts.googleapis.com×2
code.jquery.com×1
fonts.gstatic.com×1
www.googletagmanager.com×1

Registration

Registrar

Namebay SAM

Created

2015-11-27

Expires

2026-11-27 175 days left

Updated

2025-11-16

Name servers

dns1.namebay.com
dns2.namebay.com

DNS records live

NS

dns1.namebay.com
dns2.namebay.com

MX

10 mx1.voiture-hybride.info
10 mx2.voiture-hybride.info

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-05-14 to 2026-08-12

Expires in 68 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.voiture-hybride.info/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
weak frame protection
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin, same-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
permissions-policy: geolocation=(), microphone=(), camera=()
x-content-type-options: nosniff, nosniff, nosniff, nosniff
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';, default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';