boursobank-group.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 1210 ms crawled 2026-05-18

FR · 57.128.19.22 · AS16276 OVH SAS

Reputation 100/100

Classifying

HTML metadata

Title: Bienvenue sur le site du groupe BoursoBank
Description: Bienvenue sur le site du groupe BoursoBank, pionnier et leader sur ses deux métiers : la banque en ligne, le courtage en ligne et l'information économique et financière en France
Language: fr

Open Graph

url: https://www.boursobank-group.com/fr/
title: Bienvenue sur le site du groupe BoursoBank, pionnier et leader sur ses deux métiers : la banque en ligne, le courtage en ligne et l'information économique et financière en France

Technology

CMS: Gatsby

Social

Registration

Registrar

Nameshield SAS

Created

2025-03-24

Expires

2027-03-24 308 days left

Updated

2026-03-22

Name servers

a1-149.akam.net
a13-67.akam.net
a14-67.akam.net
a28-67.akam.net
a6-67.akam.net
a7-67.akam.net

DNS records live

NS

a1-149.akam.net
a13-67.akam.net
a14-67.akam.net
a28-67.akam.net
a6-67.akam.net
a7-67.akam.net

MX

0 mail001.boursobank.fr
0 mail101.boursobank.fr

TXT

google-site-verification=X8QlLXtwbRhGivqY05MZa3OJEjhm-KjFTLpfeVFhIUI

Email authentication strong

SPF: v=spf1 -all
strict (-all)
DMARC: v=DMARC1;p=reject;aspf=s;sp=reject;ri=86400;rf=afrf;pct=100;rua=mailto:dmarc-rua@boursobank.fr
policy: reject (enforced) · sp=reject
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-03-31 to 2026-10-16

Expires in 149 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.boursobank-group.com/fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-eval' nonce webpack: url: *.axept.io axeptio.imgix.net sg-analytics.fr.world.socgen fonts.gstatic.com *.vimeo.com *.youtube.com; script-src 'self' 'unsafe-eval' 'nonce-a31dbe916fcc2561ab38aee01b49c37e' 'sha256-u6EjqE6QO8DkyTdpvdyvJKJ15kfu6gSa89ftCW5Qjvg=' 'sha256-MsBTaWYlGXmAGbtXoEG1C54sG/MYD/nBsuZDTHSIAu0=' *.axept.io sg-analytics.fr.world.socgen; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.axept.io;font-src 'self' data: fonts.gstatic.com *.axept.io;base-uri 'self';connect-src 'self' webpack: *.axept.io *.axeptio.eu *.axeptio.techimg-src axeptio.imgix.net *.gstatic.com;
strict-transport-security: max-age=15552001; includeSubDomains; preload