xiahdeh.com

.com crawl

First seen 2026-04-23 · Last seen 2026-05-16 · ok HTTP/1.1 200 16625 ms crawled 2026-05-16

US · 172.67.155.140 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: XIAHDEH - Sites internet responsables, performants et sécurisés
Description: Quentin Klymyk, développeur web indépendant en Ile-de-France présente XIAHDEH : Sites internet responsables, performants et sécurisés sous WordPress.
Language: fr-FR
Canonical: https://www.xiahdeh.com/

Open Graph

url: https://www.xiahdeh.com/
title: XIAHDEH - Sites internet responsables, performants et sécurisés
locale: fr_FR
site name: XIAHDEH
description: Quentin Klymyk, développeur web indépendant en Ile-de-France présente XIAHDEH : Sites internet responsables, performants et sécurisés sous WordPress.
updated time: 2026-05-13T00:42:14+02:00

Technology

CDN: Cloudflare
CMS: WordPress

Third-party hosts loaded (2)

cdn.jsdelivr.net×1
static-eu.b-cdn.net×1

Social

Contact

Email

Phone

+33781379729

Registration

Registrar

Infomaniak Network SA

Created

2018-10-31

Expires

2026-10-31 164 days left

Updated

2025-10-17

Name servers

eric.ns.cloudflare.com
heather.ns.cloudflare.com

DNS records live

NS

eric.ns.cloudflare.com
heather.ns.cloudflare.com

MX

5 mta-gw.infomaniak.ch

TXT

google-site-verification=Jybh-5_Tqh8O6ZiM-0L1h7Wu5qxo7zD1_iNFzCvWx2I
brevo-code:0f2dc8db72c515b25cce929f5b9a4e7c

Email authentication strong

SPF

v=spf1 include:spf.infomaniak.ch include:spf.brevo.com mx -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; fo=1; pct=100; adkim=s; aspf=s

policy: quarantine

DKIM

mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

WE1

from 2026-05-10 to 2026-08-08

Expires in 80 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.xiahdeh.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: autoplay=*, camera=*, clipboard-read=*, clipboard-write=*, display-capture=*, encrypted-media=*, fullscreen=*, geolocation=*, microphone=*, payment=*, picture-in-picture=*, screen-wake-lock=*, web-share=*
x-content-type-options: nosniff
content-security-policy: default-src 'self'; font-src 'self' https: data: blob:; img-src 'self' data: https: blob:; media-src 'self' https: blob:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; connect-src 'self' https: blob: wss:; form-action 'self' https:; frame-src 'self' https: data: blob:; child-src 'self' https: data: blob:; object-src 'none'; base-uri 'self'; worker-src 'self' https: blob:; upgrade-insecure-requests;
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin