caisse-epargne-ile-de-france.fr
HTML metadata
Technology
Third-party hosts loaded (1)
- js.hcaptcha.com×1
Social
Registration
- Registrar
- CSC CORPORATE DOMAINS INC.
- Created
- 2016-06-06
- Expires
- 2027-06-06 381 days left
- Updated
- 2025-03-23
- Name servers
-
- dns1.cscdns.net
- dns2.cscdns.net
DNS records live
- NS
-
- dns1.cscdns.net
- dns2.cscdns.net
- MX
-
- 10 smtp1.speednames.com
- 20 smtp2.speednames.com
- TXT
-
_m6rgpav3c8kjpofndsydgvybasau25u_7rpy1vred09g8ilqr4qkv4nfryqxwvr_jexbpbkml4bcp27qg20tr5ybnix1fi8
Email authentication weak
- SPF
- not published
- DMARC
-
v=DMARC1; p=none; pct=100; sp=none; rua=mailto:2478bdc8@inbox.eu.redsift.cloud; ruf=mailto:2478bdc8@inbox.eu.redsift.cloud; adkim=r; aspf=r; fo=1; rf=afrf; ri=3600policy: none (monitoring only) · sp=none - DKIM
- no key found at common selectors
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 211 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.dom101.mapres *.dom101.intres *.dom101.prdres hcaptcha.com *.hcaptcha.com *.tiqcdn.com my.tealiumiq.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.youtube.com youtube.com *.ausha.co; connect-src *.dom101.mapres *.dom101.intres *.dom101.prdres 'self' hcaptcha.com *.hcaptcha.com *.tealiumiq.com *.2o7.net; img-src data: 'self' hcaptcha.com *.hcaptcha.com *.gravatar.com *.2o7.net *.googleapis.com *.groupebpce.fr *.intrabpce.fr; style-src 'self' hcaptcha.com *.hcaptcha.com 'unsafe-inline'; font-src data: 'self'; frame-ancestors *.dom101.mapres *.dom101.intres *.dom101.prdres 'self'; frame-src https: *; script-src-attr 'unsafe-inline'; worker-src *.bluecoat.com; report-uri https://www.csp.bpce.fr/v1/record?id=SIUAS; media-src 'self';- strict-transport-security
max-age=31536000;includeSubDomains;preload