sft.fr
HTML metadata
Technology
- Server
- Apache
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- fonts.googleapis.com×16
- hcaptcha.com×1
- maps.googleapis.com×1
- static.addtoany.com×1
Social
Contact
- Phone
Registration
- Registrar
- SCALEWAY
- Created
- 1997-11-17
- Expires
- 2027-01-20 246 days left
- Updated
- 2026-05-06
- Name servers
-
- ns1.o2switch.net
- ns2.o2switch.net
DNS records live
- NS
-
- ns1.o2switch.net
- ns2.o2switch.net
- MX
-
- 0 sft-fr.mail.protection.outlook.com
- TXT
-
MS=ms44854320google-site-verification=Igx2-XUOxv6zCzaqp1a_4E__wfW3cuYxq4hpXjPsjZ0
Email authentication partial
- SPF
-
v=spf1 ip4:109.234.166.223 +a +mx +include:spf.jabatus.fr include:spf.protection.outlook.com include:_spf.google.com include:_spf.netanswer.fr ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
-
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3URKRcTEp69gSMmo6KPaL4T1ZFWEcH9hDyhrr2bnYd9sjVVWqz1VRb5swe4Ue7eYyvnYv+pQiUNxru…
selectors probed - default:
Certificate (current)
R12
Expires in 71 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src https: 'unsafe-eval' 'unsafe-inline' wss://*.hotjar.com *.hotjar.com data:;img-src * data: blob:; connect-src 'self' wss://*.hotjar.com *.hotjar.com *.hotjar.io *.addthis.com *.pa-cd.com lydia-app.com *.lydia-app.com *.openstreetmap.org maps.googleapis.com *.analytics.google.com *.google-analytics.com *.gstatic.com *.hcaptcha.com *.facebook.com *.raygun.io wss://*.crisp.chat *.cometchat.io *.api-eu.cometchat.io *.widget-eu.cometchat.io wss://*.websocket-eu.cometchat.io cdnjs.cloudflare.com https://app https://sft.matomo.cloud/ ; object-src 'self' https://www.youtube.com https://www.dailymotion.com; frame-ancestors 'self' ; base-uri https://www.sft.fr/; form-action 'self' https://login.microsoftonline.com/ https://netanswer.rpxnow.com https://preprod-tpeweb.e-transactions.fr/ https://tpeweb.e-transactions.fr/ https://paiement.creditmutuel.fr https://systempay.cyberpluspaiement.com https://payment-webinit-mercanet.test.sips-atos.com/paymentInit https://payment-webinit-mercan- strict-transport-security
max-age=63072000; includeSubDomains; preload