aquilenet.fr

Accueil | Aquilenet

L'Internet libre en Aquitaine Aquilenet propose de défendre la culture d'un Internet local et respectueux du principe des communs, du partage, ouvert et neutre.

Last scanned 44 min agoCompare with another site →

Built with

No platform, CMS or framework detected. Detection is passive: it only sees what a site exposes in its HTML, headers and cookies, so custom or well-hidden stacks show up as nothing rather than as a guess.

Also detected

Infrastructure: Nginx
Third-party services: Matomo

Overview

Status: alive
Registered: 2009-08-11 (17 years ago)
First seen here: 2026-09-22
Security grade: F (55/100, from headers & TLS)
Privacy score: 84/100 (0 third-party script hosts, 1 tracking/marketing services)
Hosting: AQUILENET · AS198985 · France
Server header: nginx/1.22.1
Response time: 96 ms to first byte, measured from our crawler
TLS certificate: Let's Encrypt · TLSv1.3 · expires 2026-12-13
Language: fr
Mobile-ready: yes (viewport meta tag)
RSS / Atom feed: yes
Linked to from: 2 other sites seen so far

What to fix

Add a Content-Security-Policy
Limits which scripts can run, and is the main defense against XSS. Start with Content-Security-Policy-Report-Only to test.
Add X-Content-Type-Options
Header: X-Content-Type-Options: nosniff
Add a Referrer-Policy
Header: Referrer-Policy: strict-origin-when-cross-origin
Mark cookies Secure and HttpOnly
At least one cookie is sent without these flags, exposing it to interception or scripts.

Security & email signals

✓ HTTPS
✓ HSTS
✗ Content-Security-Policy
✗ X-Content-Type-Options
✓ X-Frame-Options
✗ Referrer-Policy
✗ Permissions-Policy
✓ SPF record
✓ DMARC record
✗ DKIM record
✗ Cookies set securely
✓ Has real content (not an empty shell)
✓ Valid TLS certificate

Badge

Show this site's security grade in a README or footer:

<a href="https://webtelemetry.dev/site/aquilenet.fr"><img src="https://webtelemetry.dev/badge/aquilenet.fr.svg" alt="Security grade"></a>

Generated automatically from passive, publicly observable data. Think something here is wrong or want this profile removed? See /bot. Machine-readable: JSON.