dax.fr

.fr crawl

First seen 2026-04-16 · Last seen 2026-05-16 · ok HTTP/1.1 200 934 ms crawled 2026-05-11

FR · 109.234.164.182 · AS50474 O2switch SAS

Reputation 100/100

Classifying

HTML metadata

Title

Site officiel de la Ville de Dax

Description

Bienvenue sur le site officiel de la ville de Dax. Toutes les informations, actualités et services dont vous avez besoin vous y attendent.

Language

fr-FR

Generator

WP Rocket 3.21.1

Canonical

https://www.dax.fr/

Feeds

Dax » Flux RSS

Open Graph

url: https://www.dax.fr/
title: Site officiel de la Ville de Dax
locale: fr_FR
site name: Dax
description: Bienvenue sur le site officiel de la ville de Dax. Toutes les informations, actualités et services dont vous avez besoin vous y attendent.

Technology

Server: o2switch-PowerBoost-v3
CMS: WordPress

Fonts

Google Fonts

Social widgets

YouTube Embed

Third-party hosts loaded (7)

code.jquery.com×3
fonts.googleapis.com×3
maxcdn.bootstrapcdn.com×3
js.lasso.link×2
www.youtube-nocookie.com×2
gmpg.org×1
www.google.com×1

Social

Contact

Phone

Address

rue Saint Pierre CS 9007

Registration

Registrar

OVH

Created

2001-04-03

Expires

2026-10-20 153 days left

Updated

2025-11-30

Name servers

dns20.ovh.net
ns20.ovh.net

DNS records live

NS

dns20.ovh.net
ns20.ovh.net

MX

5 mx01.cloud.vadesecure.com
5 mx02.cloud.vadesecure.com
5 mx03.cloud.vadesecure.com
5 mx04.cloud.vadesecure.com

TXT

ZOOM_verify_23Os0UtoOrXVs9dQBT89Zg

Email authentication strong

SPF

v=spf1 a:mail.alpi40.net ip4:37.58.135.128/27 ip4:212.129.23.58/32 include:spf.jabatus.fr include:alpi40.fr include:spf.cloud.vadesecure.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:abuse@dax.fr

policy: quarantine

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylvQSp2BecmnODQ15mBmh6BTH0nIitLK/aITQp69c+8UcoAfWwerDoN3hKcm9vNQpPtVK/1bk0VeKK…

selectors probed

Certificate (current)

R12

from 2026-05-01 to 2026-07-30

Expires in 72 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.dax.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: fullscreen=*, geolocation=*, camera=*, microphone=*, display-capture=*
x-content-type-options: nosniff
content-security-policy: default-src * https: data: blob: 'unsafe-inline' 'unsafe-eval';
strict-transport-security: max-age=31536000; includeSubDomains; preload