ecocito.com

.com crawl

First seen 2026-04-21 · Last seen 2026-05-14 · ok HTTP/1.1 200 1605 ms crawled 2026-05-18

FR · 20.74.108.74 · AS8075 Microsoft Corporation

Reputation 100/100

Classifying

HTML metadata

Title: Ecocito - Usagers
Language: en

Technology

Third-party hosts loaded (2)

code.jquery.com×1
stackpath.bootstrapcdn.com×1

Registration

Registrar

Scaleway SAS

Created

2010-10-11

Expires

2027-10-11 508 days left

Updated

2026-05-08

Name servers

ns1.ovea.com
ns2.ovea.com
ns3.ovea.com
ns4.ovea.com

DNS records live

NS

ns1.ovea.com
ns2.ovea.com
ns3.ovea.com
ns4.ovea.com

MX

10 mx6.mit.ovea.com
20 mx7.mit.ovea.com

Verified for

Brevo
GlobalSign
Google

Email authentication strong

SPF

v=spf1 include:spf.mailjet.com include:spf.ovea.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:2dlwvlcr@ag.eu.dmarcian.com; ruf=mailto:2dlwvlcr@fr.eu.dmarcian.com;

policy: quarantine

DKIM

mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

GlobalSign GCC R3 DV TLS CA 2020

from 2025-05-12 to 2026-06-13

Expires in 23 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://ecocito.com/Erreur/General?description=Aucune%20collectivit%C3%A9%20ne%20correspond%20%C3%A0%20l%20adresse%20web%20utilis%C3%A9e%20%20%20https%20%20%20ecocito.com&urlSource=%2FUsager%2FProfil%2FConnexion&zone=Usager

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.gstatic.com code.jquery.com cdn.tiny.cloud js.devexpress.com stackpath.bootstrapcdn.com popper.js.org; style-src 'self' 'unsafe-inline' fonts.googleapis.com fontawesome.com getbootstrap.com cdn.tiny.cloud stackpath.bootstrapcdn.com; img-src 'self' data: ecocitopublic.blob.core.windows.net www.ecocito.com maps.googleapis.com lottie.host sp.tinymce.com res.cloudinary.com *.googleusercontent.com; connect-src 'self' api-preprod.ecocito.com www.payfip.gouv.fr cdn.tiny.cloud www.google.com secure.payzen.eu paiement.systempay.fr preprod-tpeweb.e-transactions.fr tpeweb.e-transactions.fr franceconnect.gouv.fr; font-src 'self' fonts.gstatic.com fontawesome.com; frame-src 'self' www.google.com maps.google.com www.microsoft.com www.youtube.com www.youtube-nocookie.com lottie.host franceconnect.gouv.fr; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'none';
strict-transport-security: max-age=31536000; includeSubdomains; preload