indexo.dev

al-in.fr

.fr crawl

First seen 2026-05-27 · Last seen 2026-05-27 · ok HTTP/1.1 200 347 ms crawled 2026-05-30

FR · 185.34.140.30 · AS200102 BE YS Cloud France SASU

Reputation 100/100

Classifying

HTML metadata

Title
AL'in, la plateforme locative entièrement digitalisée
Language
fr

Technology

Fonts
  • Adobe Fonts
  • Font Awesome

Third-party hosts loaded (2)

  • use.fontawesome.com×1
  • use.typekit.net×1

Registration

Registrar
OVH
Created
2020-04-20
Expires
2027-04-20 321 days left
Updated
2026-04-20
Name servers
  • dns200.anycast.me
  • ns200.anycast.me

DNS records live

NS
  • dns200.anycast.me
  • ns200.anycast.me
TXT
Show 4 TXT records
  • 2qhs567x061g499rtfw8q5jd4f03rqlx
  • _njw20jdsvjirb16tmfjm55lk3tdd0h1
  • spf2.0/mfrom include:completel.fr ~all
  • w509ksfbbqjx3gg29ph913pnzvj9j13b
Verified for
  • GlobalSign

Email authentication no MX

SPF
v=spf1 a:mailoutimmo.soprasteria.com ip4:194.206.174.198 include:spfa.alinto.net ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

Thawte TLS RSA CA G1
from 2025-11-25 to 2026-12-17
Expires in 197 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://al-in.fr/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self' *.al-in.fr *.be-idys.com *.be-ys.com *.gouv.fr *.typekit.net *.fontawesome.com *.actionlogement.fr *.googletagmanager.com *.cookiefirst.com *.google-analytics.com 'unsafe-inline'; img-src 'self' data: https: ; object-src 'self'; script-src 'self' *.googletagmanager.com *.cookiefirst.com *.google-analytics.com *.al-in.fr 'unsafe-inline'; style-src 'self' *.typekit.net *.fontawesome.com *.cookiefirst.com 'unsafe-inline'; connect-src 'self' https: http: ;
strict-transport-security
max-age=31536000; includeSubDomains; preload

Linked from (1)