simulateur-prêt-immobilier.com

.com crawl

First seen 2026-05-20 · Last seen 2026-06-01 · ok HTTP/1.1 200 2964 ms crawled 2026-05-27

FR · 178.32.112.65 · AS16276 OVH SAS

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Simulateur de prêt immobilier
Description: Le simulateur de prêt immobilier est un outil qui offre de nombreuses possibilités à ses utilisateurs. Il permet d’estimer le pouvoir d’achat, le montant, la durée etc.
Language: fr-FR
Canonical: https://www.xn--simulateur-prt-immobilier-ejc.com/

Technology

Server: nginx
CMS: WordPress
jQuery: 3.2.1 known XSS (<3.5)
Stack: PHP

Fonts

Google Fonts

Third-party hosts loaded (3)

cdnjs.cloudflare.com×4
code.jquery.com×1
fonts.googleapis.com×1

Registration

Registrar

Namebay SAM

Created

2012-05-27

Expires

2027-05-27 359 days left

Updated

2026-05-11

Name servers

dns1.namebay.com
dns2.namebay.com

DNS records live

NS

dns1.namebay.com
dns2.namebay.com

MX

10 mx1.xn--simulateur-prt-immobilier-ejc.com
10 mx2.xn--simulateur-prt-immobilier-ejc.com

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-03-16 to 2026-06-14

Expires in 12 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.xn--simulateur-prt-immobilier-ejc.com/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
weak frame protection
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin, same-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
permissions-policy: geolocation=(), microphone=(), camera=()
x-content-type-options: nosniff, nosniff, nosniff, nosniff
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';, default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';