sibelga.be

HTML metadata

Title

Page d'accueil - Sibelga

Language

fr

Generator

Fratello CMS - Marlon bvba

Canonical

https://www.sibelga.be/fr

Translations

en
fr
nl

Open Graph

url: https://www.sibelga.be/fr

Technology

Server: nginx

Third-party hosts loaded (2)

www.energuide.be×3
challenges.cloudflare.com×1

Social

Contact

Phone

DNS records live

NS

ns1.clf.proximus.be
ns2.clf.proximus.be
ns3.clf.proximus.be

MX

20 mx1.hc2200-92.eu.iphmx.com
20 mx2.hc2200-92.eu.iphmx.com

TXT

t1DPemhAUIL0oRJz0uO7+hyMVPiDv7OIDRDUNeZdLRvYnE8sJzHmjSGdiEcluOPhaitHHeJrHvQZA3vdiIpu2g==
v=easydus; cg=45b68d83-aad2-4dbb-996b-430434979e4b
K2ZJUIJ192I9XDT0ZA7AN2U0M1J2HTSD6TK9YV9Q

Verified for

Apple
Atlassian
Microsoft 365

Email authentication strong

SPF

v=spf1 exists:%{i}.spf.hc2200-92.eu.iphmx.com include:spf.mandrillapp.com include:spf.protection.outlook.com include:_spf.eu.mailgun.org include:spf2.sibelga.be include:_spf.salesforce.com include:spf3.sibelga.be -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100; fo=1; ri=3600; rua=mailto:6c60226e@inbox.ondmarc.com; ruf=mailto:6c60226e@inbox.ondmarc.com;

policy: reject (enforced)

DKIM

default: v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6tIO3D+RAmUiMnqXp4DChEgFbdVx7NvMzIAd851npB6VlLhEv48dUqpGMru459BHc8q…
selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQClf0rRLSLMTQSzWfPU+ONRr2mzQH/FKcOS3XOXUwU8fyV8xME0ymP8GBGFrhrlw+QuO5VnTdCnU8sGenKZir…
s1: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo40ZuR3v/sN1pnghWWRlPDZxPTe3sGqEmsl7wm8+r+3XVMMjBJhScA6nYXuXoOzThqcVfjAXf64OcVVMFH1c4…

selectors probed

Certificate (current)

E7

from 2026-05-02 to 2026-07-31

Expires in 60 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.sibelga.be/fr

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline'; block-all-mixed-content; connect-src * https://analytics.tiktok.com https://business-api.tiktok.com https://analytics.tiktokcdn.com; font-src * https://fonts.gstatic.com data: fonts.googleapis.com fonts.gstatic.com; frame-src *.sibelga.be *.youtube.com *.youtube-nocookie.com *.vimeo.com *.services *.hotjar.com *.doubleclick.net *.facebook.com *.facebook.net prod.sibelga2.marlon.be *.google.com https://playplay.com www.google.com www.gstatic.com https://analytics.tiktok.com challenges.cloudflare.com; img-src * 'self' data: cdn-cookieyes.com *.cookieyes.com https://analytics.tiktok.com https://analytics.tiktokcdn.com; manifest-src prod.sibelga2.marlon.be 'self'; script-src *.sibelga.be 'unsafe-inline' 'unsafe-eval' 'self' data: https://cdn.ckeditor.com https://js-agent.newrelic.com https://bam.nr-data.net https://maps.googleapis.com https://cdnjs.cloudflare.com *.google-analytics.com *.facebook.net *.googleapis.com *.marketingautomation.services *.googletagma
strict-transport-security: max-age=31536000; includeSubDomains