cnap.fr

.fr crawl

First seen 2026-04-14 · Last seen 2026-05-18 · ok HTTP/1.1 200 2848 ms crawled 2026-05-08

FR · 185.145.32.247 · AS50812 Axess OnLine SARL

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Accueil | Cnap
Description: Le Centre national des arts plastiques (Cnap), est l’un des opérateurs de la politique du ministère de la Culture. Il a pour missions de soutenir et de promouvoir la création contemporaine dans sa plus grande diversité, tant du point de vue des disciplines que des parcours professionnels.
Language: fr
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://www.cnap.fr/

Technology

CMS: Drupal

Social

Contact

Address: rue d’Aubervilliers75018

Registration

Registrar

OVH

Created

2002-09-22

Expires

2026-10-13 146 days left

Updated

2025-11-30

Name servers

dns112.ovh.net
ns112.ovh.net

DNS records live

NS

dns112.ovh.net
ns112.ovh.net

MX

1 antispam.icti.fr

TXT

brevo-code:9befc0f2f8359059aa113085d0c2dd8e

Email authentication partial

SPF

v=spf1 ip4:185.145.32.0/24 ip4:87.238.146.219/32 ip4:77.72.93.42/32 ip4:77.72.93.43/32 ip4:185.107.232.248/32 ip4:185.80.177.38/32 include:spf.sendinblue.com include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

policy: none (monitoring only)

DKIM

mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

R13

from 2026-04-27 to 2026-07-26

Expires in 68 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.cnap.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: ALLOW-FROM https://collection.cnap.fr
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' piwik.cnap.fr www.navigart.fr; style-src 'self' 'unsafe-inline'; img-src 'self' https://images.navigart.fr/; frame-src 'self' player.vimeo.com youtube.com www.youtube.com www.youtube-nocookie.com youtu.be www.navigart.fr *.sibforms.com; frame-ancestors 'self' https://collection-preprod.cnap.fr https://collection.cnap.fr; child-src 'self'; connect-src 'self' piwik.cnap.fr
strict-transport-security: max-age=1000; includeSubDomains