apasec.net
HTML metadata
Technology
- Server
- nginx
Third-party hosts loaded (1)
- tarteaucitron.io×1
Social
Registration
- Registrar
- OVH sas
- Created
- 2017-03-07
- Expires
- 2027-03-07 290 days left
- Updated
- 2026-03-08
- Name servers
-
- dns110.ovh.net
- ns110.ovh.net
DNS records live
- NS
-
- dns110.ovh.net
- ns110.ovh.net
- MX
-
- 0 apasec-net.mail.protection.outlook.com
- TXT
-
1|www.apasec.net
- Verified for
-
- Microsoft 365
Email authentication weak
- SPF
-
v=spf1 include:mx.ovh.com include:spf.protection.outlook.com -allstrict (-all) - DMARC
- not published
- DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudF17wWI5lHYq9ZvGSQklUscCwgJzeROoR476k/H3YfYRIJV4CaRclGPTDI1Hdq4Q87ZTE32IZOPBX… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn4+lDH7YMbFpZLbW6uQ+YvgBXqsOTDTgsdtzrXopcFYXZC+todQa/77nBYY/frBee+/cS9n9hvq3m…
selectors probed - selector1:
Certificate (current)
R13
Expires in 26 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src * 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.tarteaucitron.io cdn.jsdelivr.net plugin-numericdiffusion.legalplus.fr; img-src * 'self' data:; font-src 'self' data: fonts.gstatic.com; connect-src * 'self'; object-src 'none'; frame-src * 'self'; upgrade-insecure-requests- strict-transport-security
max-age=31536000