finthesis.io
HTML metadata
Technology
- Server
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- res.cloudinary.com×64
- www.googletagmanager.com×2
Contact
- Address
- 17F rue Gustave Nadaud, 69007, Lyon, France
DNS records live
- NS
-
- ns-188-c.gandi.net
- ns-22-b.gandi.net
- ns-50-a.gandi.net
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
Show 5 TXT records
google-site-verification=ITBWlftoxvGN2Hyci-4xgRVCRPaIfDYjId5zqfLHWeYstripe-verification=0dcdd407324eac2bf21a6c40ef859cd2e13235fc6b770de9b5d5c52bc0f210f4google-site-verification=fnyi-6-mg7J5dI8w2klgPjuTiwl-bW6gqIhaAn54tuAgoogle-site-verification=jP6fq_uAL0v_7cmVVVeL-SjOH9sGMxXiUbzZ6ZelB4sgoogle-site-verification=QrqEqKaVMLkow-C4sohaxacE5crypFRLwIMu7vuEYI0
Email authentication strong
- SPF
-
v=spf1 include:_mailcust.gandi.net include:_spf.google.com include:26777485.spf03.hubspotemail.net include:spf.mailjet.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; pct=90; sp=nonepolicy: quarantine · pct=90 · sp=none - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7aikCg+HI3JYrqETvfZwL4t+UALoIdUX3SUMMdIqkSJIRnsTY87Yv/gy/qvDbu3fQsw+REKWiIqj8… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNdqy0ze/aIw6cdj3X8Lv09bBMVtM5hTtT1xIMNJnVoqJeQy2u/5nBYasQWuHVlnB+89pnJJ7i9eySz59i… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlk61jhW5OvujW/EEWdrAU5wdimgYtXbYKeM5/UxK4TSYQPhWdLpIibTG1+4ZltdNz2eeZiX3Im64QIVCE…
selectors probed - google:
Certificate (current)
WR3
Expires in 70 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
deny- x-content-type-options
nosniff- content-security-policy
default-src 'self'; font-src 'self' data: https://*.intercomcdn.com https://*.survicate-cdn.com; connect-src 'self' blob: https://api.finthesis.io https://*.google.com https://*.google.co.uk https://*.google.fr https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://*.stripe.com https://res.cloudinary.com https://*.googletagmanager.com https://www.youtube.com https://*.ytimg.com https://suggestions.pappers.fr https://*.licdn.com https://*.linkedin.com https://cdn.linkedin.oribi.io https://*.adsymptotic.com https://*.intercom.io https://*.intercomcdn.com https://*.intercomcdn.eu wss://*.intercom.io wss://*.intercomcdn.com wss://*.intercomcdn.eu https://*.hs-scripts.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hs-banner.com https://*.hubspot.com https://*.hsforms.com https://*.hsforms.net https://static.hsappstatic.net https://hubspot-forms-static-embed-eu1.s3.amazonaws.com https- strict-transport-security
max-age=63072000; includeSubDomains; preload