fondationlaposte.org

.org crawl

First seen 2026-04-13 · Last seen 2026-05-16 · ok HTTP/1.1 200 539 ms crawled 2026-05-06

FR · 178.213.64.110 · AS35676 La Poste S.A.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: Fondation la Poste
Language: fr
Canonical: http://fondationlaposte.org/

Open Graph

url: http://fondationlaposte.org/
site name: Fondation la Poste

Technology

CMS: Drupal

Fonts

Google Fonts

Third-party hosts loaded (3)

fonts.googleapis.com×2
piwik.extra.laposte.fr×1
sibforms.com×1

Social

Registration

Registrar

Nameshield SAS

Created

2000-08-16

Expires

2026-08-16 88 days left

Updated

2026-04-15

Name servers

ns2.laposte.net
ns3.laposte.net
ns1.laposte.fr
ns6.laposte.org

DNS records live

NS

ns1.laposte.fr
ns2.laposte.net
ns3.laposte.net
ns6.laposte.org

MX

TXT

fcssjls1bvcyft4fwv6qdnt6z7c3zqmw
x6qymsz4r3402k4s0dzj09kw4b3nmsr5

Verified for

GlobalSign

Email authentication strong

SPF

v=spf1 -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100; rua=mailto:laposte.rua@emailsecurity.merox.io

policy: reject (enforced)

DKIM

Show 12 DKIM selectors

default: v=DKIM1; p=;
google: v=DKIM1; p=;
selector1: v=DKIM1; p=;
selector2: v=DKIM1; p=;
k1: v=DKIM1; p=;
k2: v=DKIM1; p=;
mail: v=DKIM1; p=;
dkim: v=DKIM1; p=;
s1: v=DKIM1; p=;
s2: v=DKIM1; p=;
mxvault: v=DKIM1; p=;
smtpapi: v=DKIM1; p=;

selectors probed

Certificate (current)

GlobalSign RSA OV SSL CA 2018

from 2025-07-18 to 2026-08-19

Expires in 91 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://fondationlaposte.org/

present

content-security-policy-report-only
x-frame-options
x-content-type-options

findings

missing HSTS
missing Content Security Policy
weak content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff, nosniff
content-security-policy-report-only: img-src 'self' https://piwik.extra.laposte.fr; script-src 'self' https://piwik.extra.laposte.fr https://www.gstatic.com https://www.google.com https://cdnjs.cloudflare.com https://sibforms.com; script-src-elem 'self' https://piwik.extra.laposte.fr https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdnjs.cloudflare.com https://sibforms.com https://www.google.com; style-src 'self' 'unsafe-inline' https://piwik.extra.laposte.fr fonts.googleapis.com https://cdnjs.cloudflare.com