weleda.fr

HTML metadata

Title

Site en ligne Weleda® France

Description

Cosmétiques naturels et bio disponibles sur weleda.fr : Soins visage & corps, Maman & bébé, sport, santé. Livraison offerte dès 45€d'achat

Language

fr-FR

Canonical

https://www.weleda.fr

Translations

de-at
de-ch
de-de
en-gb
en-us
es-es
fr-be
fr-ch
fr-fr
it-it
nl-be
nl-nl

Open Graph

url: https://www.weleda.fr
title: Site en ligne Weleda® France
site name: Weleda
description: Cosmétiques naturels et bio disponibles sur weleda.fr : Soins visage & corps, Maman & bébé, sport, santé. Livraison offerte dès 45€d'achat

Technology

CDN: Amazon CloudFront
CMS: Nuxt

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (14)

assets.weleda.com×7
cdn.cookielaw.org×2
www.googletagmanager.com×2
www.weleda.be×2
www.weleda.ch×2
gb.preview.ecom.weleda.com×1
www.google.com×1
www.gstatic.com×1
www.weleda.at×1
www.weleda.com×1
www.weleda.de×1
www.weleda.es×1
www.weleda.it×1
www.weleda.nl×1

Social

Contact

Address: 9 rue Eugène Jung, 68331, Huningue, Grand Est, FR

Registration

Registrar

GANDI

Created

2000-02-14

Expires

2028-06-03 746 days left

Updated

2025-11-24

Name servers

ns-100-c.gandi.net
ns-114-b.gandi.net
ns-141-a.gandi.net

DNS records live

NS

ns-100-c.gandi.net
ns-114-b.gandi.net
ns-141-a.gandi.net

MX

5 mail.weleda.fr

TXT

Show 10 TXT records

google-site-verification=kJpVyksWMDYgei4utOMEs--1KG-JXpIy9Yj_ZdM19Rc
facebook-domain-verification=wqhrw30x6gks021qxbdo97vdpjdjpa
neurodoron=f897cb878b7e2ad989c7ab8a4bf79f96
RSlbC/LhM7pplfHDPYTmf+HxtXgYqfm2QcgkRvBwyQ+yp+BFmrmFlnwyhBUODBuzvIf8u6teDJwEdOUty/3rcQ==
apple-domain-verification=m5v0Mp4cjhraipqU
duo_sso_verification=pjjUii9QkuslFSE4PGuhy8Jhz4AazXU8fRKowhshAe8kEUaK7JcqmFyS5V93GOpq
domila=6f59693fb7464e1fbbe54f6f9738aba1
google-site-verification=Xd6_HaEA6h8aciyhHlpNbMOS0BpGyiFwTQbOhBUqPQc
asap-site-verification-238f20c0-cea6-4731-bb62-2322c6d2ea34
brevo-code:73bc92274d4c3ce509c5c3a9355a13f2

Email authentication strong

SPF

v=spf1 a mx ptr:onehippo.com ptr:weleda.fr include:spfa_bo.touch-sell.net.weleda.fr include:spfb_eskerondemand.com.weleda.fr include:spfc_anpdm.com.weleda.fr include:spfd_cegid.com.weleda.fr include:spfe_cegedim.com.weleda.fr ip4:80.77.225.1 -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:report.dmarc@weleda.fr; ruf=mailto:report.dmarc@weleda.fr; fo=1; pct=10;

policy: reject (enforced) · pct=10

DKIM

mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
dkim: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJEaI4QjZEwg7u2hx+eQTvZBeQjAZfZ4BEIvwaTxO6cdCtuuC7Xj4P53vkMWHjB8dTPFEup9cdhyCP3wgm7nl…

selectors probed

Certificate (current)

R13

from 2026-04-30 to 2026-07-29

Expires in 71 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.weleda.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), display-capture=(), fullscreen=('self' https://*.youtube.com), geolocation=(), microphone=()
x-content-type-options: nosniff
content-security-policy: base-uri 'none'; font-src 'self' data: https://fonts.gstatic.com https://applepay.cdn-apple.com https://cdn.mouseflow.com; form-action 'self' https://*.adyen.com https://www.facebook.com; frame-ancestors 'self' https://*.weleda.bloomreach.cloud; img-src 'self' data: https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin