indexo.dev

docaposte-agility.fr

.fr crawl

First seen 2026-04-13 · Last seen 2026-05-07 · ok HTTP/1.1 200 1412 ms crawled 2026-05-07

FR · 51.91.91.174 · AS16276 OVH SAS

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Language
fr

Technology

Fonts
  • Google Fonts

Third-party hosts loaded (1)

  • fonts.googleapis.com×1

Social

Registration

Registrar
OVH
Created
2019-06-03
Expires
2026-06-03 13 days left
Updated
2025-07-31
Name servers
  • dns103.ovh.net
  • ns103.ovh.net

DNS records live

NS
  • dns103.ovh.net
  • ns103.ovh.net
MX
  • 1 smtp.google.com
Verified for
  • Google

Email authentication strong

SPF
v=spf1 ip4:92.222.121.136 include:spf.mailjet.com ~all
softfail (~all)
DMARC
v=DMARC1;p=none;
policy: none (monitoring only)
DKIM
  • mail: v=DKIM1;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0qe7ToJCstj3qfEjzK4HlsGL57+Vcp28V5SaLnHIcPnsFd0OUZjfpBdYTSl4qJ8Yh+pmucpxa3GZ8pEGgkx0W…
selectors probed

Certificate (current)

R12
from 2026-04-05 to 2026-07-04
Expires in 45 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.docaposte-agility.fr/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • missing Permissions Policy
Header values
referrer-policy
same-origin
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'none';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;script-src 'self' 'nonce-8b0b0649-95e7-403d-8ea2-7b4399b11a35' https://matomo.docaposte-agility.tech/ https://www.google.com/;frame-src 'self' https://www.youtube.com/ https://www.dailymotion.com/ https://www.google.com/ https://fr.wikipedia.org;connect-src 'self' https://matomo.docaposte-agility.tech/;font-src 'self' https://fonts.gstatic.com;img-src 'self' https: data:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests
strict-transport-security
max-age=63072000; includeSubDomains; preload

Links to (1)

Linked from (1)