pfbc-cbfp.org

.org crawl

First seen 2026-05-08 · Last seen 2026-05-16 · ok HTTP/1.1 200 6464 ms crawled 2026-05-15

FR · 164.132.219.235 · AS16276 OVH SAS

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title

PFBC-CBFP

Language

fr-FR

Generator

TYPO3 CMS

Canonical

https://pfbc-cbfp.org/fr/

Translations

en-us
fr-fr

Technology

Server: Apache

Third-party hosts loaded (3)

tarteaucitron.io×3
sibforms.com×2
cdn.jsdelivr.net×1

Social

Registration

Registrar

RegistryGate GmbH

Created

2010-11-10

Expires

2026-11-10 174 days left

Updated

2026-03-19

Name servers

ns5.kasserver.com
ns6.kasserver.com

DNS records live

NS

ns5.kasserver.com
ns6.kasserver.com

MX

10 w010a793.kasserver.com

TXT

google-site-verification=VsAHTlkuAMBKgqPntY3gFhQ4ARzFGgIUfDPoaZYNISQ

Email authentication partial

SPF: v=spf1 a mx include:spf.kasserver.com ~all
softfail (~all)
DMARC: v=DMARC1; p=none;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

from 2026-05-03 to 2026-08-01

Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://pfbc-cbfp.org/fr/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

missing Content Security Policy
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=(), payment=()
x-content-type-options: nosniff, nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
content-security-policy-report-only: default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https: