monenergie-ca.fr

.fr crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 712 ms crawled 2026-05-18

US · 34.120.242.150 · AS396982 Google LLC

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Simulez votre installation solaire avec Mon Énergie by CA
Description: Le Crédit Agricole vous accompagne pour votre projet d'installation solaire avec Mon Énergie by CA, solution solaire photovoltaïque avec gestion de l'énergie
Language: fr

Open Graph

title: Simulez votre installation solaire avec Mon Énergie by CA
locale: fr
site name: mon énergie by CA
description: Le Crédit Agricole vous accompagne pour votre projet d'installation solaire avec Mon Énergie by CA, solution solaire photovoltaïque avec gestion de l'énergie

Technology

Server: UploadServer

Third-party hosts loaded (1)

www.datocms-assets.com×31

Contact

Phone

Registration

Registrar

GANDI

Created

2025-04-02

Expires

2027-04-02 317 days left

Updated

2026-03-31

Name servers

ns-37-c.gandi.net
ns-50-b.gandi.net
ns-9-a.gandi.net

DNS records live

NS

ns-37-c.gandi.net
ns-50-b.gandi.net
ns-9-a.gandi.net

MX

0 monenergieca-fr02e.mail.protection.outlook.com
10 spool.mail.gandi.net
50 fb.mail.gandi.net

TXT

google-site-verification=Qfwj_HDfw4kf1FhpnEJXi6phDU8oa-y7qu6emaB5e1s
brevo-code:5d5a4765955a7303e117b29b64ad17e0

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:146117604.spf06.hubspotemail.net -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

policy: none (monitoring only)

DKIM

mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

WR3

from 2026-05-03 to 2026-08-01

Expires in 73 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://monenergie-ca.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: geolocation=(), microphone=(), camera=(), fullscreen=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self'; img-src 'self' https://www.datocms-assets.com https://*.datocms-assets.com https://*.matomo.cloud https://track-eu1.hubspot.com https://static.hsappstatic.net https://js-eu1.hsadspixel.net https://connect.facebook.net https://www.facebook.com https://www.google.com https://www.google.fr https://googleads.g.doubleclick.net https://www.googleadservices.com data:; script-src 'self' https://js-eu1.hsadspixel.net https://connect.facebook.net https://www.facebook.com https://hosting.ca-monenergie.fr https://hosting.monenergie-ca.fr https://cdn.tagcommander.com https://cdn.trustcommander.net https://collect.commander1.com https://*.matomo.cloud https://js-eu1.hs-analytics.net https://js-eu1.hs-scripts.com https://js-eu1.hs-banner.com https://static.hsappstatic.net https://o348787.ingest.sentry.io https://*.ingest.sentry.io https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net 'unsafe-inline'; connect-src 'self' https://api-eu
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin