jinvestislavenir.fr

.fr crawl

First seen 2026-04-12 · Last seen 2026-05-20 · ok HTTP/1.1 200 5876 ms crawled 2026-05-20

FR · 84.55.165.129 · AS15557 Societe Francaise Du Radiotelephone - SFR SA

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: J'investis l'avenir ! | J’investis l’avenir
Language: fr
Canonical: https://www.jinvestislavenir.fr/

Technology

Server: nginx
CMS: Drupal
PHP: 8.2.20 security-only

Fonts

Adobe Fonts

Third-party hosts loaded (1)

use.typekit.net×1

Social

Registration

Registrar

OVH

Created

2020-11-27

Expires

2026-11-27 190 days left

Updated

2025-12-31

Name servers

dns113.ovh.net
ns113.ovh.net

DNS records live

NS

dns113.ovh.net
ns113.ovh.net

MX

0 jinvestislavenir-fr.mail.protection.outlook.com

TXT

_4z11479j8f8qr9e7ybw14o2qotm9jzu

Verified for

Google
Microsoft 365

Email authentication weak

SPF: v=spf1 mx ip4:89.227.193.64/28 ip4:46.218.4.16/29 ip4:89.225.194.88/29 ip4:89.227.193.48 include:spf.protection.outlook.com -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2026-02-10 to 2027-02-13

Expires in 268 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.jinvestislavenir.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

short HSTS max-age
CSP uses wildcard sources
weak frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: connect-src 'self' *.google-analytics.com analytics.tiktok.com opcoatlas.matomo.cloud www.google.com px.ads.linkedin.com *.snapchat.com *.analytics.google.com api.chat.hello-charly.com api-adresse.data.gouv.fr annoncesatlas.opco-atlas.fr https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' use.typekit.net https://opcoatlas.matomo.cloud/; frame-src 'self' consent.youtube.com youtube.com www.youtube.com www.youtube-nocookie.com www.googletagmanager.com *.snapchat.com chat.hello-charly.com labonnealternance.apprentissage.beta.gouv.fr www.google.com *.calameo.com *.ausha.co game.betshot.io story.tl; img-src 'self' data: i.ytimg.com facebook.com px.ads.linkedin.com www.facebook.com *.ads.linkedin.com www.google-analytics.com assets.hello-charly.com code.jquery.com www.googletagmanager.com www.google.fr https://opcoatlas.matomo.cloud/ https://www.google-analytics.com https://www.googletagmanager.com; manifest-src 'self'; media-src 'self'; object-src 'none'; scri
strict-transport-security: max-age=300; includeSubDomains; preload; always;