annecy.fr

HTML metadata

Language: fr

Technology

Server: Apache
CMS: Nuxt

Registration

Registrar

NUXIT

Created

2001-02-12

Expires

2027-12-23 582 days left

Updated

2026-02-18

Name servers

ns1.cp.hegerys.com
ns2.cp.hegerys.com

DNS records live

NS

ns1.cp.hegerys.com
ns2.cp.hegerys.com

MX

0 annecy-fr.mail.protection.outlook.com

TXT

Show 17 TXT records

Sendinblue-code:59619bbeede0c5d2b9336ccca06df3e0
j1q00qydgmjmkb68rc1yh1dbk87wkqtd
google-site-verification=3rNF2S9ObOApQKxZ7vaGQKe2CmRvrmT_ylkGygKK4WU
_4bm2syblmrk295s4u8lpc8i2fb6up2v
6chmtnn2sr6whsn4bk0mymf34cpqxhkj
brevo-code:606e77be287c11d84abab54b68596c36
apple-domain-verification=LdaEbLGmtoYoEzun
archivesmunicipales=ab2eb38548f4b2c0a08c7d37addac09e
jn58k2v70w5dsw6g3p7ts4kz8ysbd5gz
brevo-code:fe465469e7a872334229ce77c0d8e48c
3l5kxwk6tvyr22wt46fn2npd1bgqf4fl
5lvsy87tq5jysjpv2hw533pczmf2zbwp
_yrw0aff9toppncx3ushcn61unikk0vy
pptwhqy720ds99441xvmjxnw2qb9bnny
djc92hxnrcjwrdh85r4mktkcjp1f6mq2
smw8z66m81h57t80t15t8lkj81vq64r0
p80821wzhdv26d6bdmlks1w6b1hm1f37

Email authentication strong

SPF

v=spf1 ip4:46.18.228.214/29 ip4:46.18.228.222/29 ip4:176.31.192.214 include:spf.protection.outlook.com include:spf.cap-collectif.com include:spf.ingenie.fr include:spf.tipimail.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; sp=quarantine; rua=mailto:postmaster@annecy.fr; ruf=mailto:postmaster@annecy.fr; rf=afrf; pct=100; ri=86400

policy: quarantine · sp=quarantine

DKIM

selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDo5RAc1XyTgdcTRFj5zRO7PGFFZuqBFfOOaI8EhX6uOy6/BdRPOrQ5NlwUB5fUkT+QK0mMkIrPnDDFK71tCM…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

E8

from 2026-03-24 to 2026-06-22

Expires in 33 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.annecy.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection

Header values

referrer-policy: origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()
x-content-type-options: nosniff
content-security-policy: base-uri 'none'; font-src 'self' https: data:; form-action 'self' *.for-system.com *.synbird.com; frame-ancestors 'self'; img-src 'self' data: *.cimeos.dev *.annecy.fr *.open-system.fr *.for-system.com *.geopf.fr img.youtube.com *.vimeocdn.com *.synbird.com *.synbird.fr cartodb-basemaps-c.global.ssl.fastly.net; object-src 'none'; script-src-attr 'self' *.cimeos.dev *.annecy.fr 'unsafe-inline' *.open-system.fr *.for-system.com; style-src 'self' https: 'unsafe-inline'; script-src 'self' *.cimeos.dev *.annecy.fr 'unsafe-eval' *.res.office.com res.public.onecdn.static.microsoft; upgrade-insecure-requests; connect-src 'self' *.cimeos.dev *.annecy.fr *.geopf.fr *.synbird.com *.hcaptcha.com *.for-system.com; default-src 'self' *.annecy.fr *.synbird.fr *.synbird.com; frame-src *.cimeos.dev *.annecy.fr www.marches-publics.info *.youtube.com *.youtube-nocookie.com *.vimeo.com *.hcaptcha.com www.atmo-auvergnerhonealpes.fr www.facebook.com omnibook.com annecy.requea.com outlook.office.com *.res.of
strict-transport-security: max-age=16000000; includeSubDomains; preload;
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin