hachette.fr

.fr crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 611 ms crawled 2026-05-19

FR · 81.92.95.55 · AS20756 Nameshield SAS

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Hachette.fr | Vos envies de lecture commencent ici
Description: Site officiel du groupe Hachette Livre. Découvrez nos maisons d’édition, nos auteurs, nos publications et notre actualité.
Language: fr
Canonical: https://www.hachette.fr/

Open Graph

url: https://www.hachette.fr/
title: Hachette.fr | Vos envies de lecture commencent ici
description: Site officiel du groupe Hachette Livre. Découvrez nos maisons d’édition, nos auteurs, nos publications et notre actualité.

Technology

CDN: Amazon CloudFront
Server: AmazonS3
CMS: Next.js

Fonts

Google Fonts

Third-party hosts loaded (1)

fonts.gstatic.com×1

Social

Contact

Address: Immeuble Louis Hachette58 rue Jean Bleuzen92178 Vanvesquestion_answerQuestions fréquentes

Registration

Registrar

NAMESHIELD

Created

2004-03-23

Expires

2027-03-23 306 days left

Updated

2026-03-26

Name servers

nsa.perf1.fr
nsb.perf1.com
nsc.perf1.com
nsz.perf1.com
nsz.perf1.fr

DNS records live

NS

nsa.perf1.fr
nsb.perf1.com
nsc.perf1.com
nsz.perf1.com
nsz.perf1.fr

MX

10 hlmail2.hachette-livre.fr
50 hlmail1.hachette-livre.fr

Verified for

Google

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Encryption Everywhere DV TLS CA - G2

from 2025-09-04 to 2026-09-04

Expires in 106 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.hachette.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic'; frame-ancestors 'none'; font-src * 'self' data: https://fonts.gstatic.com; script-src * data: blob: 'unsafe-inline' 'unsafe-eval' https://plugins.flockler.com https://sdk.privacy-center.org/ https://api.privacy-center.org/ https://www.googleadservices.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.googletagmanager.com; style-src * 'self' 'unsafe-inline' https://fonts.googleapis.com https://sdk.privacy-center.org/ https://api.privacy-center.org/
strict-transport-security: max-age=63072000; includeSubdomains; preload