unge.net

HTML metadata

Title: UNGE - Union Nationale des Géomètres-Experts
Description: UNGE, Syndicat majoritaire des Géomètres-Experts

Technology

Server: Apache
jQuery: 1.11.3 known XSS (<3.5)
Stack: PHP

Analytics

Google Tag Manager

Third-party hosts loaded (2)

www.googletagmanager.com×1
www.youtube.com×1

Social

Contact

Phone

01 45 61 18 08

Registration

Registrar

Gandi SAS

Created

2002-08-27

Expires

2026-08-27 83 days left

Updated

2025-06-28

Name servers

ns-172-b.gandi.net
ns-187-c.gandi.net
ns-227-a.gandi.net

DNS records live

NS

ns-172-b.gandi.net
ns-187-c.gandi.net
ns-227-a.gandi.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Verified for

Brevo
Google

Email authentication partial

SPF

v=spf1 a include:_spf.google.com include:zcsend.net include:transmail.net include:spf.mandrillapp.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:rua@dmarc.brevo.com

policy: none (monitoring only)

DKIM

Show 4 DKIM selectors

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7e1YTO01WlCbOmRksnlWoDuNWj0FGS8dJhlXbRsLTexD6G/WlYCx96UhG4i11cjLC6l03zx4TSl0…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBp9L6NRwKzipN7yDJESaQpUVocwUrJdnTsgcJ5zCN/nmjUPITzgG/VCYpQ8YTPVPzhUus7vUjxd+cwYZe…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RXOimQJT1mOAttDNp6V5rNN2fqw4U0jltdSvL6sPUI0++9DwJxpX6SZQLn2oxna9lD88dlBFaFX40wht1…

selectors probed

Certificates

Loading certificate

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.unge.net/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' forms.zohopublic.com www.youtube.com fonts.googleapis.com fonts.gstatic.com platform.twitter.com syndication.twitter.com ; script-src 'self' 'unsafe-inline' platform.twitter.com www.youtube.com browser-update.org www.googletagmanager.com www.google-analytics.com; object-src 'none'; connect-src 'self' www.google-analytics.com www.googletagmanager.com region1.google-analytics.com; img-src 'self' www.googletagmanager.com data:; frame-ancestors 'self'; frame-src 'self' https://www.youtube.com www.google.com;
strict-transport-security: max-age=31536000; includeSubDomains; preload