bm-grenoble.fr

.fr crawl

First seen 2026-04-15 · Last seen 2026-05-10 · ok HTTP/1.1 200 816 ms crawled 2026-05-10

FR · 185.226.96.130 · AS212140 Grenoble-Alpes Metropole EPCI

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Bibliothèque Municipale de Grenoble - Réseau des bibliothèques
Description: Portail de la Bibliothèque Municipale de Grenoble
Language: fr-FR
Canonical: https://bm-grenoble.fr/default/accueil-portal.aspx?_lg=fr-FR

Open Graph

url: https://bm-grenoble.fr/default/accueil-portal.aspx?_lg=fr-FR
title: Bibliothèque Municipale de Grenoble
locale: fr_FR
description: Portail de la Bibliothèque Municipale de Grenoble

Technology

Third-party hosts loaded (1)

covers.syracuse.cloud×12

Social

Contact

Phone

Address

boulevard Maréchal LyauteyBP 10953

Registration

Registrar

OVH

Created

1997-04-28

Expires

2027-04-03 318 days left

Updated

2026-04-03

Name servers

ns1.grenoblealpesmetropole.fr
ns2.grenoblealpesmetropole.fr

DNS records live

NS

ns1.grenoblealpesmetropole.fr
ns2.grenoblealpesmetropole.fr

MX

10 mx1.bm-grenoble.fr
20 mx2.bm-grenoble.fr

Email authentication partial

SPF: v=spf1 mx a ip4:185.226.96.0/24 ip4:185.205.71.0/24 ip4:193.56.103.0/24 -all
strict (-all)
DMARC: v=DMARC1; p=none; sp=none; rua=mailto:dmarc-reports@grenoblealpesmetropole.fr; ruf=mailto:dmarc-reports@grenoblealpesmetropole.fr
policy: none (monitoring only) · sp=none
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2026-02-12 to 2027-02-22

Expires in 278 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://bm-grenoble.fr/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy: default-src 'self' https: blob: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; style-src https: 'self' 'unsafe-inline'; img-src https: http://gallica.bnf.fr 'self' data: blob:; font-src 'self' data: https:; frame-src 'self' https:; frame-ancestors 'self' https: ; connect-src 'self' http:
strict-transport-security: max-age=63072000; includeSubDomains; preload