so-happy.fr

.fr crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 5465 ms crawled 2026-05-19

US · 45.60.47.39 · AS19551 Incapsula Inc

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: SoHappy
Description: SoHappy, l'application qui vous simplifie la vie au quotidien. Collaborateurs, rechargez votre badge, réservez votre passage self, consultez les menus ou encore commandez vos repas en click and collect ! Parents, accédez au menu de votre enfant, consultez les actualités du restaurant scolaire et gérez vos démarches administratives (factures, réservation des repas...)
Language: fr

Technology

Analytics

Google Tag Manager

Cookie consent

OneTrust

Fonts

Google Fonts

Third-party hosts loaded (8)

geolocation.onetrust.com×2
cdn.cookielaw.org×1
fonts.gstatic.com×1
northeurope-2.in.applicationinsights.azure.com×1
rum.browser-intake-datadoghq.eu×1
www.google.com×1
www.googletagmanager.com×1
www.gstatic.com×1

Registration

Registrar

CSC CORPORATE DOMAINS INC.

Created

2016-07-08

Expires

2027-01-05 230 days left

Updated

2026-01-06

Name servers

dns1.cscdns.net
dns2.cscdns.net

DNS records live

NS

dns1.cscdns.net
dns2.cscdns.net

MX

10 mxa-00009201.gslb.pphosted.com
20 mxb-00009201.gslb.pphosted.com

TXT

00s5q1zt9dk7y0p0vxrrkkntxwsd5yh8
MS=ms38966978

Email authentication strong

SPF

v=spf1 include:sendgrid.net include:sodexo.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxOXVvFa9XfZWzACgdtxDyz0GlpzYbzyOHX3dzCgosExn/3bXMUmHExr20aZpzDR0HgRCH0MQeAV4wEyxr…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDogCkBQMtY8Yf9NnMKfmPA/IPiPNpM9rHk116GX7wRoI2jK+jByh5ziTFwYwUQ1Gykp8ltEaf6cRbQS4myOUesJ/…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-06-10 to 2026-06-25

Expires in 36 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://www.so-happy.fr/

present

x-frame-options

findings

missing HSTS
missing Content Security Policy
weak frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN;ALLOW-FROM https://witco.app;ALLOW-FROM https://*.witco.app;ALLOW-FROM https://*.sodexo.canopee.hamiltonapps.com;ALLOW-FROM https://sodexo.canopee.hamiltonapps.com