agefiph-handinnov.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 422 ms crawled 2026-05-18

US · 104.17.4.91 · AS13335 Cloudflare, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Agefiph HANDINNOV – Appels à projets et consultations innovation
Description: Participez aux appels à projets Innovation et aux consultations organisés par l’Agefiph
Language: fr
Canonical: https://agefiph-handinnov.com/

Open Graph

url: https://agefiph-handinnov.com/
title: Agefiph HANDINNOV – Appels à projets et consultations innovation
site name: Agefiph HANDINNOV – Appels à projets et consultations innovation
description: Participez aux appels à projets Innovation et aux consultations organisés par l’Agefiph

Technology

CDN: Cloudflare
CMS: Drupal

Analytics

Cloudflare Insights

Third-party hosts loaded (3)

maps.googleapis.com×1
stackpath.bootstrapcdn.com×1
static.cloudflareinsights.com×1

Social

Registration

Registrar

OVH sas

Created

2018-10-10

Expires

2026-10-10 142 days left

Updated

2025-08-29

Name servers

clint.ns.cloudflare.com
ines.ns.cloudflare.com

DNS records live

NS

clint.ns.cloudflare.com
ines.ns.cloudflare.com

MX

1 redirect.ovh.net

TXT

1|www.agefiph-handinnov.com

Email authentication weak

SPF: v=spf1 include:mx.ovh.com ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

from 2026-05-11 to 2026-08-09

Expires in 81 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://agefiph-handinnov.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: no-referrer-when-downgrade
permissions-policy: xr-spatial-tracking=(self), geolocation=(self), midi=(), sync-xhr=(), microphone=(self), camera=(self), magnetometer=(), gyroscope=(), fullscreen=(self), payment=()
x-content-type-options: nosniff
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: https://* 'unsafe-inline' 'unsafe-eval'; worker-src blob:; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ;frame-ancestors 'self'; style-src * data: https://* 'unsafe-inline';
strict-transport-security: max-age=15768000