anacofi.asso.fr

HTML metadata

Title: Anacofi : l'Association Nationale des Conseils Financiers
Description: Associations professionnelles des CIF (Finance), IOBSP (Banque), IAS (assurance), Intermédiaire Porteur de Carte Loi Hoguet/ALUR (Immobilier/foncier)
Language: fr-FR
Generator: dominant-color-images 1.2.1
Canonical: https://www.anacofi.asso.fr/

Open Graph

url: https://www.anacofi.asso.fr/
title: Anacofi : l'Association Nationale des Conseils Financiers
locale: fr_FR
site name: Anacofi
description: Associations professionnelles des CIF (Finance), IOBSP (Banque), IAS (assurance), Intermédiaire Porteur de Carte Loi Hoguet/ALUR (Immobilier/foncier)
updated time: 2026-05-04T10:45:35+02:00

Technology

Server: nginx
CMS: WordPress

Analytics

Google Analytics
Google Tag Manager

Fonts

Google Fonts

Social widgets

YouTube Embed

Third-party hosts loaded (9)

pbs.twimg.com×4
fonts.googleapis.com×3
cdn-cookieyes.com×2
fonts.gstatic.com×2
www.google.com×2
www.googletagmanager.com×2
www.youtube.com×2
www.google-analytics.com×1
www.gstatic.com×1

Social

Contact

Phone

Address

rue d’Amsterdam 75009

Registration

Registrar

AMEN / Agence des Médias Numériques

Created

2005-01-26

Expires

2027-01-26 250 days left

Updated

2026-02-28

Name servers

ns1.amen.fr
ns2.amen.fr

DNS records live

NS

ns1.amen.fr
ns2.amen.fr

MX

0 anacofi-asso-fr.mail.protection.outlook.com

Verified for

Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf1.webapps.net include:spf2.webapps.net include:spf.eudonet.com include:servers.mcsv.net include:spf.protection.outlook.com include:sendgrid.net ip4:90.83.168.90 ip4:93.188.174.202 ip4:212.83.169.214 ip4:212.83.133.183 ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=100; sp=quarantine;

policy: quarantine · sp=quarantine

DKIM

Show 5 DKIM selectors

default: v=DKIM1; h=sha256;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZutsCn/H6KdHUJHiBfL8wJzRwv6OQZR14r1fQL/Wxd/55+qh4m9oWVspwQ1VD70LnmC39…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g7M1yqcgYpjPsJPmuy49fjbKR6WrbZfQLq9vn6kRgullczhxDZuZngSPsHT4Q2VzNZlKoOTcSH1L2…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUOwTWvR8XuOJghsGQWzH2HRIqiAtITrQ4bhi6LXVIyNmXBJaQ2eWyhcdCli3lPMB0UhMOkDFc6YTHznKb…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/uai/P6GoYaZyjBkUmGb8TxoyLQxDiILmxh+RCAH1t33+FZz6ZU+IKEmec3I54j2q/2wVxqsa8t38t80H…

selectors probed

Certificate (current)

E7

from 2026-05-01 to 2026-07-30

Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.anacofi.asso.fr/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: no-referrer-when-downgrade
permissions-policy: autoplay=(), encrypted-media=(), fullscreen=(), geolocation=(), microphone=(), midi=()
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.anacofi.asso.fr *.3octets.fr *.google.com *.tradedoubler.com *.sharethis.com *.cdn-cookieyes.com *.moatads.com *.addthisedge.com *.googletagmanager.com *.facebook.com *.twitter.com t.co *.gstatic.com *.hotjar.com *.smartlook.com *.w.org *.facebook.net *.ads-twitter.com *.licdn.com *.sk.ht *.cloudflare.com *.jquery.com *.bootstrapcdn.com *.gravatar.com *.googleapis.com *.jsdelivr.net *.printfriendly.com *.kxcdn.com *.vimeocdn.com *.hs-analytics.net *.securitymetrics.com *.google-analytics.com; style-src 'self' 'unsafe-inline' blob: *.jsdelivr.net *.googleapis.com *.bootstrapcdn.com *.gstatic.com *.typekit.net *.cloudflare.com *.icons8.com *.vimeocdn.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.anacofi.asso.fr wpml.org toolset.com *.eudonet.com *.3octets.fr *.cdninstagram.com *.twimg.com *.facebook.com t.co *.gstatic.com *.google.com *.google.fr *.doubleclick.net *.googleapis.com *.linkedin.com *.printfriendly.com *.w.org *.
strict-transport-security: max-age=31536000; includeSubDomains