engie-na.com
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress
- Fonts
-
- Google Fonts
- Social widgets
-
- YouTube Embed
Third-party hosts loaded (8)
- fonts.googleapis.com×6
- cdn.jsdelivr.net×4
- assets.design.digital.engie.com×2
- cdn.amcharts.com×1
- fonts.gstatic.com×1
- gmpg.org×1
- widget.tagembed.com×1
- www.youtube.com×1
Social
Registration
- Registrar
- SafeBrands SAS
- Created
- 2015-04-20
- Expires
- 2027-04-20 335 days left
- Updated
- 2026-03-20
- Name servers
-
- ns-104.awsdns-13.com
- ns-1417.awsdns-49.org
- ns-1633.awsdns-12.co.uk
- ns-667.awsdns-19.net
DNS records live
- NS
-
- ns-104.awsdns-13.com
- ns-1417.awsdns-49.org
- ns-1633.awsdns-12.co.uk
- ns-667.awsdns-19.net
- MX
-
- 0
- TXT
-
p4224idlffavomt5acgdumav5mpardot925073=671a09bb1b53e0a684405c4821e7afeb11148f201bfe0eb047709efbc03581bb
Email authentication strong
- SPF
-
v=spf1 -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; sp=reject; fo=1; aspf=s; adkim=s; pct=100; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.compolicy: reject (enforced) · sp=reject - DKIM
- no key found at common selectors
Certificate (current)
GlobalSign Atlas R3 DV TLS CA 2026 Q1
Expires in 54 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
sameorigin- permissions-policy
document-domain=self- x-content-type-options
nosniff- content-security-policy
default-src 'self' *.google-analytics.com *.analytics.google.com https://gateway.zscloud.net:* http://fonts.googleapis.com:* https://fonts.gstatic.com:* https://cdnjs.cloudflare.com:* https://maxcdn.bootstrapcdn.com:* https://www.tidio.com:* wss://socket.tidio.co:* 'unsafe-inline' 'unsafe-eval' blob: https: data:;worker-src 'self' blob:; child-src https://www.youtube.com:* https://vimeo.com:*; object-src 'none'; frame-src 'self' https://solutions.engie-na.com:* https://www.google.com:* https://player.vimeo.com:* https://www.youtube.com:* https://app.mailjet.com:* https://www.joomunited.com:* https://go.engieresources.com:* https://www.tidio.com:* https://api.tagembed.com:* https://widget.tagembed.com:* https://platform.twitter.com:*; frame-ancestors 'self'; form-action 'self' https://webto.salesforce.com:*; upgrade-insecure-requests;- strict-transport-security
max-age=31536000; includeSubDomains