nevers.fr

.fr crawl

First seen 2026-04-20 · Last seen 2026-05-14 · ok HTTP/1.1 200 2655 ms crawled 2026-05-14

FR · 212.39.130.171 · AS15557 Societe Francaise Du Radiotelephone - SFR SA

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: | nevers.fr
Language: fr
Generator: Drupal 8 (https://www.drupal.org)
Canonical: https://www.nevers.fr/

Technology

Server: nginx
CMS: Drupal

Third-party hosts loaded (1)

storage.openagenda.com×3

Social

Contact

Phone

Registration

Registrar

GANDI

Created

2004-04-29

Expires

2027-04-29 344 days left

Updated

2026-03-18

Name servers

ns-30-c.gandi.net
ns-33-b.gandi.net
ns-84-a.gandi.net

DNS records live

NS

ns-30-c.gandi.net
ns-33-b.gandi.net
ns-84-a.gandi.net

MX

5 mail.nevers.fr

TXT

v=DMARC1; p=none; sp=none; rua=mailto:dmarc@mailinblue.com!10m; ruf=mailto:dmarc@mailinblue.com!10m; rf=afrf; pct=100; ri=86400
Sendinblue-code:1796d20ee4077ac8a84b0435b4430558
MS=F028D1D73B9C96615DA82CB372E6595A3A8037DB

Email authentication partial

SPF

v=spf1 a mx ip4:212.39.130.132 ip4:212.39.130.139 include:spf.sendinblue.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none

policy: none (monitoring only)

DKIM

dkim: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lYYzyklDRrPlfCP69iAE9g9CCfmb3OOVd4u9UuOrpekrtKhDtqBzUmW3wSCdWBcVRf8B4kvmkvjYINr6++rV…

selectors probed

Certificate (current)

Gandi RSA Domain Validation Secure Server CA 3

from 2025-05-13 to 2026-05-27

Expires in 7 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.nevers.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
weak content type protection

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: interest-cohort=()
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: stats.nevers.fr npnru-banlay.nevers.fr cibul.s3.amazonaws.com cdn-media.web-view.net v.calameo.com code.jquery.com clicrdv-assets.s3.amazonaws.com https://www.google.com/maps/d/embed?mid=1lA-CBNGH9NnG0R-0pYWJK84y8OFVjT42&ehbc=2E312F https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true https://agglonevers.maps.arcgis.com https://juicebox.net https://www.youtube.com https://umap.openstreetmap.fr https://player.vimeo.com marches.ternum-bfc.fr https://owncloud.ac-dijon.fr/index.php/s/XSZP2GGsEgKE8Ma/download/Pr%C3%A9sentation%20CHAM.mp4i nevers.visite360.vectuel.com;
strict-transport-security: max-age=31536000; includeSubDomains; preload