Technical Information
| HTTP Status Code | 403 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 52.222.201.3 |
| CDN | AWS CloudFront |
|
🚫 🟡 HTTP 403 Error | The server returned a 403 error. Check the access configuration. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 403
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 52.222.201.3
CDN AWS CloudFront
🚫 🟡 HTTP 403 Error The server returned a 403 error. Check the access configuration.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Performance
| DNS Lookup | 1.3 ms |
| TCP Connect | 2.3 ms |
| TLS Handshake | 4.1 ms |
| Time To First Byte (TTFB) | 20.1 ms |
| Content Download | 0 ms |
| Total Response Time | 20.2 ms |
DNS Lookup 1.3 ms
TCP Connect 2.3 ms
TLS Handshake 4.1 ms
Time To First Byte (TTFB) 20.1 ms
Content Download 0 ms
Total Response Time 20.2 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=15768000 |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ⚠ Not configured |
| Referrer Policy | no-referrer-when-downgrade |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=15768000
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ⚠ Not configured
Referrer Policy no-referrer-when-downgrade
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
Title leboncoin.fr
HTTP Headers
| Content-type | text/html;charset=utf-8 |
| Content-length | 771 |
| Date | Tue, 28 Jul 2026 05:51:11 GMT |
| Set-cookie | datadome=cvitEEQn4U715asc_s~nnSpyxfMkg4mG6X6tkjXRH5FnroZZ4FkYmmrdY3FNzOP8yLJEH8gpgLM0mc6~nZCWAqhdZ2s4MCyySVjPe~y3GVVntmFLN_6cmu1d~feKxNSr; Max-Age=31536000; Domain=.leboncoin.fr; Path=/; Secure; SameSite=Lax |
| Strict-transport-security | max-age=15768000 |
| Referrer-policy | no-referrer-when-downgrade |
| Content-security-policy | frame-ancestors *.leboncoin.fr *.leboncoin.io *.leboncoin.ci; report-uri https://api.leboncoin.fr/api/csp-report/v1/report/; |
| Content-security-policy-report-only | object-src *.leboncoin.fr *.leboncoin.io *.leboncoin.ci; frame-ancestors *.leboncoin.fr *.leboncoin.io *.leboncoin.ci; report-uri https://api.leboncoin.fr/api/csp-report/v1/report/; |
| X-datadome | protected |
| Accept-ch | Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory |
| Charset | utf-8 |
| Cache-control | max-age=0, private, no-cache, no-store, must-revalidate |
| Pragma | no-cache |
| Access-control-allow-credentials | true |
| Access-control-expose-headers | x-dd-b, x-set-cookie |
| Access-control-allow-origin | * |
| X-datadome-cid | AHrlqAAAAAMAIRQEOAF3pGwANC_MAg== |
| X-dd-b | 1 |
| X-cache | Error from cloudfront |
| Via | 1.1 2ba5677785db2f66bc73820b2a261476.cloudfront.net (CloudFront) |
| X-amz-cf-pop | CDG50-P2 |
| X-amz-cf-id | HeDCOKXdk0zSwl8edTHvyKfPiLnFLkKrNsfhcSx-XKkBXg6tSWhQlg== |
Content-type text/html;charset=utf-8
Content-length 771
Date Tue, 28 Jul 2026 05:51:11 GMT
Set-cookie datadome=cvitEEQn4U715asc_s~nnSpyxfMkg4mG6X6tkjXRH5FnroZZ4FkYmmrdY3FNzOP8yLJEH8gpgLM0mc6~nZCWAqhdZ2s4MCyySVjPe~y3GVVntmFLN_6cmu1d~feKxNSr; Max-Age=31536000; Domain=.leboncoin.fr; Path=/; Secure; SameSite=Lax
Strict-transport-security max-age=15768000
Referrer-policy no-referrer-when-downgrade
Content-security-policy frame-ancestors *.leboncoin.fr *.leboncoin.io *.leboncoin.ci; report-uri https://api.leboncoin.fr/api/csp-report/v1/report/;
Content-security-policy-report-only object-src *.leboncoin.fr *.leboncoin.io *.leboncoin.ci; frame-ancestors *.leboncoin.fr *.leboncoin.io *.leboncoin.ci; report-uri https://api.leboncoin.fr/api/csp-report/v1/report/;
X-datadome protected
Accept-ch Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Charset utf-8
Cache-control max-age=0, private, no-cache, no-store, must-revalidate
Pragma no-cache
Access-control-allow-credentials true
Access-control-expose-headers x-dd-b, x-set-cookie
Access-control-allow-origin *
X-datadome-cid AHrlqAAAAAMAIRQEOAF3pGwANC_MAg==
X-dd-b 1
X-cache Error from cloudfront
Via 1.1 2ba5677785db2f66bc73820b2a261476.cloudfront.net (CloudFront)
X-amz-cf-pop CDG50-P2
X-amz-cf-id HeDCOKXdk0zSwl8edTHvyKfPiLnFLkKrNsfhcSx-XKkBXg6tSWhQlg==
