amundi.fr
HTML metadata
Technology
- Server
- nginx
- CMS
- Drupal
Third-party hosts loaded (2)
- static.amundi.com×35
- tag.aticdn.net×1
Social
Registration
- Registrar
- NAMESHIELD
- Created
- 2009-05-28
- Expires
- 2026-12-15 210 days left
- Updated
- 2025-12-18
- Name servers
-
- a1-241.akam.net
- a18-64.akam.net
- a28-65.akam.net
- a5-66.akam.net
- a7-67.akam.net
- a8-64.akam.net
- chenar.credit-agricole.fr
- ramses.credit-agricole.fr
DNS records live
- NS
-
- a1-241.akam.net
- a18-64.akam.net
- a28-65.akam.net
- a5-66.akam.net
- a7-67.akam.net
- a8-64.akam.net
- chenar.credit-agricole.fr
- ramses.credit-agricole.fr
Email authentication no MX
- SPF
-
v=spf1 -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; sp=reject; rua=mailto:rua@dmarc.ca-gip.fr;policy: reject (enforced) · sp=reject - DKIM
- no key found at common selectors
Certificate (current)
Sectigo Public Server Authentication CA OV R36
Expires in 199 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
img-src 'self' https://pbs.twimg.com https://*.amundi.com https://*.intramundi.com https://metrics.brightcove.com https://cf-images.eu-west-1.prod.boltdns.net data: https://logs1412.xiti.com/hit.xiti https://px.ads.linkedin.com https://www.linkedin.com/px/li_sync https://px.ads.linkedin.com/collect https://www.facebook.com https://px4.ads.linkedin.com https://res.cloudinary.com https://*.hotjar.com https://www.google-analytics.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tag.aticdn.net/*/smarttag.js blob: https://view.ceros.com/ cdn.jsdelivr.net https://cdn.amcharts.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.highcharts.com https://static.amundi.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://platform.twitter.com https://*.amundi.com https://*.intramundi.com https://players.brightcove.net https://vjs.zencdn.net https://view.ceros.com https://t- strict-transport-security
max-age=63072000; includeSubDomains; preload