carbios.com
HTML metadata
Technology
- Server
- Apache
- CMS
- WordPress
- Social widgets
-
- YouTube Embed
Third-party hosts loaded (2)
- cdn.popt.in×1
- www.youtube.com×1
Social
Contact
- Phone
Registration
- Registrar
- OVH sas
- Created
- 2009-09-13
- Expires
- 2026-09-13 117 days left
- Updated
- 2026-01-22
- Name servers
-
- dns13.ovh.net
- ns13.ovh.net
DNS records live
- NS
-
- dns13.ovh.net
- ns13.ovh.net
- MX
-
- 10 carbios-com.mail.protection.outlook.com
- TXT
-
brevo-code:87dffacac1a1ffd4ceb278cf0ecd7ffbapple-domain-verification=NW0zrmR9bL04jC82MS=ms94440941
Email authentication strong
- SPF
-
v=spf1 a mx ip4:92.222.101.116 include:spf.mailjet.com include:spf.protection.outlook.com ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=quarantine;pct=100;sp=none;aspf=r;policy: quarantine · sp=none - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKb4j5tFFbyqep3TnAMSUqN1L5e34XMDKILWip8/t3GZiHS857v2timrusLuNSsI3WUcK3cLsuRu6Q…
selectors probed - selector1:
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 179 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- missing frame protection
Header values
- referrer-policy
no-referrer-when-downgrade- permissions-policy
geolocation=(self), microphone=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; img-src 'self' data: https://content.presspage.com https://gateway.euronext.com https://www.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://www.youtube-nocookie.com https://content.presspage.com https://api.presspage.com https://cdn.popt.in https://loader.wisepops.com https://wisepops.net https://cdnjs.cloudflare.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://content.presspage.com https://fonts.googleapis.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com; font-src 'self' data: https://content.presspage.com https://fonts.gstatic.com; connect-src 'self' https://api.presspage.com https://region1.google-analytics.com https://www.google-analytics.com https://display.popt.in https://api.mapbox.com https://events.mapbox.com; worker-src 'self' blob:; frame-anc- strict-transport-security
max-age=31536000; includeSubDomains; preload