covea-finance.fr

.fr crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 2633 ms crawled 2026-05-19

FR · 217.115.161.204 · AS8723 Its Integra SAS

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title

Société de gestion de portefeuille | Covea Finance

Description

Covéa Finance est la société de gestion de portefeuille de Covéa, groupe réunissant les marques MAAF, MMA et GMF.

Language

Generator

Drupal 11 (https://www.drupal.org)

Canonical

https://www.covea-finance.fr/

Translations

Technology

Server: Unknown
CMS: Drupal

Fonts

Google Fonts

Third-party hosts loaded (6)

www.amcharts.com×4
unpkg.com×2
cdn.jsdelivr.net×1
code.jquery.com×1
fonts.googleapis.com×1
fundkis.com×1

Registration

Registrar

AURIC

Created

2006-06-16

Expires

2027-12-02 560 days left

Updated

2026-01-27

Name servers

dns1.sdv.fr
dns2.sdv.fr

DNS records live

NS

dns1.sdv.fr
dns2.sdv.fr

MX

10 covea-finance-fr-1.fortimailcloud.com
20 covea-finance-fr-2.fortimailcloud.com

TXT

pardot1002401=41459970393ff7738045fd7ef5b5fecb508c6d4835ff37eefb749beda8153675
sending_domain1002401=a2ac23a4aad28c86bd0f9452be0123e41ba7ab27d9ff2fdf425d6f76f2be1c44

Verified for

Microsoft 365

Email authentication partial

SPF

v=spf1 ip4:81.252.129.94 include:aspmx.pardot.com include:_spf.fortimailcloud.com -all

strict (-all)

DMARC

v=DMARC1; p=none; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;

policy: none (monitoring only)

DKIM

selector1: t=y; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoZq5RsZ3mYDbAzak64BHVN8rrWsGXqsr5x0O1at7pQXmtQT5Y0yuRcU0LmwMHo2bUIDlXLqBZmeBogHbH…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2025-12-09 to 2026-12-10

Expires in 203 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.covea-finance.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://unpkg.com https://cdn-static.fundkis.com https://fundkis.com https://code.jquery.com https://vjs.zencdn.net https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://www.youtube.com https://ad.doubleclick.net https://www.gstatic.com https://www.google.com https://covea-finance.matomo.cloud https://www.amcharts.com; style-src 'self' 'unsafe-inline' https://unpkg.com https://fonts.googleapis.com https://www.gstatic.com https://vjs.zencdn.net https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; img-src 'self' data: https://cdn-static.fundkis.com https://vjs.zencdn.net/ https://cdn.jsdelivr.net https://*.adnxs.com https://www.google.com https://www.google.fr https://stats.g.doubleclick.net https://ad.doubleclick.net https://adservice.google.fr https://adservice.google.com https://ssl.gstatic.com h
strict-transport-security: max-age=31536000; includeSubDomains