lek2collections.com

HTML metadata

Title

Le K2 Collections - Hôtels de Luxe dans les Alpes

Description

Le K2 Collections · Hôtels de Luxe à Courchevel & Val d'Isère · Le K2 Palace, Le K2 Altitude, Le K2 Djola et Le K2 Val d'Isère conjuguent luxe discret et raffinement authentique pour porter le savoir-faire hôtelier et le bien-être au sommet.

Language

en

Canonical

https://lek2collections.com/en/

Translations

en
fr

Open Graph

url: https://lek2collections.com/en/
title: Le K2 Collections - Hôtels de Luxe dans les Alpes
locale: en_GB
site name: Le K2 Collections
description: Le K2 Collections · Hôtels de Luxe à Courchevel & Val d'Isère · Le K2 Palace, Le K2 Altitude, Le K2 Djola et Le K2 Val d'Isère conjuguent luxe discret et raffinement authentique pour porter le savoir-faire hôtelier et le bien-être au sommet.
locale:alternate: fr_FR

Technology

CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (2)

s.w.org×1
www.googletagmanager.com×1

Social

Contact

Phone

+33479400880

Address

Le K2 Collections, P.S. Val238 Rue des Clarines73120Courchevel+33 4 79 40 08 80welcome@lek2palace.com

Registration

Registrar

Register SPA

Created

2016-10-06

Expires

2026-10-06 139 days left

Updated

2026-01-06

Name servers

dns1.plaindns.net
dns2.plaindns.net

DNS records live

NS

dns1.plaindns.net
dns2.plaindns.net

MX

5 asp16.mailinblack.com

TXT

apple-domain-verification=1vIbfTGQiJ7tNe4i
_globalsign-domain-verification=pcWJ1VLTMqqZ109ymgdTRe-HXiC8ndSKlEJHMatdJT
MS=ms60308579

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:spf.synxis.com include:spf.webapps.net include:spf.mailinblack.com a:smtp-www.apicius.com -all

strict (-all)

DMARC

v=DMARC1; p=none

policy: none (monitoring only)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGEEcj0Z0BKh5XH+ljlYBCxdNekFZkxlPirE5bK16CcLWYPrpTi6aH2qJJ2gly/sVARUaWrXf2VIHYR3qi…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCfdSKxw07BF/9BI+GLEXZEftHv17pZuFTyl4dm/IuQ69U8skL8xFDaVKWUrmzc3ozu77nnzDlJSw5Abu4GRtQzD2…

selectors probed

Certificate (current)

R12

from 2026-04-02 to 2026-07-01

Expires in 42 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://lek2collections.com/en/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; connect-src *;font-src * data:;img-src * data:; worker-src blob:; script-src 'unsafe-inline' 'unsafe-eval' *; style-src 'unsafe-inline' *; frame-src *
strict-transport-security: max-age=31536000
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin