sandaya.fr
HTML metadata
Technology
- Server
- nginx
- Analytics
-
- Google Analytics
Third-party hosts loaded (7)
- img.sandayagroupe.eu×3
- www.sandaya.co.uk×2
- www.google-analytics.com×1
- www.sandaya.de×1
- www.sandaya.es×1
- www.sandaya.it×1
- www.sandaya.nl×1
Contact
- Phone
Registration
- Registrar
- GANDI
- Created
- 2010-11-10
- Expires
- 2026-11-10 173 days left
- Updated
- 2026-02-11
- Name servers
-
- dns104.ovh.net
- ns104.ovh.net
DNS records live
- NS
-
- dns104.ovh.net
- ns104.ovh.net
- MX
-
- 1 aspmx.l.google.com
- 10 aspmx2.googlemail.com
- 10 aspmx3.googlemail.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- Verified for
-
- Apple
- Atlassian
- Brevo
- GlobalSign
Email authentication strong
- SPF
-
v=spf1 ip4:74.125.82.174 ip4:185.200.165.2 ip4:46.105.44.59 ip4:178.33.40.142 ip4:46.105.56.180 ip4:213.251.167.103 ip4:171.33.72.48 ip4:178.33.44.110 include:_spf.google.com include:spf.sandaya.eu -allstrict (-all) - DMARC
-
v=DMARC1;p=quarantine;rua=mailto:notifications.dsi@sandaya.fr;sp=none;aspf=r;policy: quarantine · sp=none - DKIM
-
- mail:
k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTNqS2vbQCd4eNLvVKKv/FzKIWTlBsXJz8WHzmPdchX5vsDBX0xKfwJQI5I2rgF2HmSMsDBSr70lkMFlcX… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2VGuKomXAdlsoC9lj4+5MDlGbKvywF6D6ij3EBm5a/gn3ADT3qscddV5OgSGrNQZVPV9pmxvxjLIC1zcF…
selectors probed - mail:
Certificate (current)
GlobalSign RSA OV SSL CA 2018
Expires in 72 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
sameorigin- x-content-type-options
nosniff- content-security-policy
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; worker-src blob:; object-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; media-src 'self' https:; frame-src 'self' https:; font-src 'self' https:; connect-src 'self' https: wss:; frame-ancestors 'self'- strict-transport-security
max-age=63072000