aege.fr
HTML metadata
Technology
- CDN
- Cloudflare
- Fonts
-
- Google Fonts
Third-party hosts loaded (2)
- fonts.googleapis.com×12
- hcaptcha.com×1
Social
Registration
- Registrar
- OVH
- Created
- 2008-02-26
- Expires
- 2026-12-05 200 days left
- Updated
- 2026-01-31
- Name servers
-
- merlin.ns.cloudflare.com
- shaz.ns.cloudflare.com
DNS records live
- NS
-
- merlin.ns.cloudflare.com
- shaz.ns.cloudflare.com
- MX
-
- 10 mx0.netanswer.fr
- 20 mx0.netanswer.fr
- TXT
-
google-site-verification=ygvR2Io449YeSLtfPf2c1lZJ3XlteCHIyKR7GdLtlL0
Email authentication strong
- SPF
-
v=spf1 a mx ip4:195.154.191.249 ip4:91.109.120.29 ip4:91.109.120.62 ip4:91.109.120.25 ip4:91.109.120.26 include:_spf.netanswer.fr include:_spf.tem.scaleway.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:dmarc@aege.fr;policy: reject (enforced) - DKIM
-
- default:
v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dZUfrXpA3OWhel/zEUxQmVD8IWdrM5TClD1j2KXucTFjDpP/+eZi0y34JLw8tZ+/bAh…
selectors probed - default:
Certificate (current)
WE1
Expires in 51 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src https: 'unsafe-eval' 'unsafe-inline' wss://*.hotjar.com *.hotjar.com data:;img-src * data: blob:; connect-src 'self' wss://*.hotjar.com *.hotjar.com *.hotjar.io *.addthis.com *.pa-cd.com lydia-app.com *.lydia-app.com *.openstreetmap.org maps.googleapis.com *.analytics.google.com *.google-analytics.com *.gstatic.com *.hcaptcha.com *.facebook.com *.raygun.io wss://*.crisp.chat *.cometchat.io *.api-eu.cometchat.io *.widget-eu.cometchat.io wss://*.websocket-eu.cometchat.io cdnjs.cloudflare.com https://app ; object-src 'self' https://www.youtube.com https://www.dailymotion.com; frame-ancestors 'self' ; base-uri https://aege.fr/; form-action 'self' https://login.microsoftonline.com/ https://aege.rpxnow.com https://preprod-tpeweb.e-transactions.fr/ https://tpeweb.e-transactions.fr/ https://paiement.creditmutuel.fr https://systempay.cyberpluspaiement.com https://payment-webinit-mercanet.test.sips-atos.com/paymentInit https://payment-webinit-mercanet.test.sips-services.com/payment- strict-transport-security
max-age=63072000; includeSubDomains; preload
Links to (5)
- ege.fr×2
- facebook.com×2
- linkedin.com×2
- twitter.com×2
- youtube.com×2
Linked from (1)
- ege.fr×2