aja.fr

.fr crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 666 ms crawled 2026-05-07

FR · 80.247.235.145 · AS15826 NFrance Conseil

Reputation 100/100

Classifying

HTML metadata

Title: Site officiel de l'AJ Auxerre
Description: Actus, matchs, classements, vidéos... retrouvez toute l'actualité de l'AJ Auxerre sur notre site officiel.
Language: fr-FR
Generator: WP Rocket 3.19.0.1
Canonical: https://www.aja.fr/

Open Graph

url: https://www.aja.fr/
title: Site officiel de l'AJ Auxerre
locale: fr_FR
site name: AJA
description: Actus, matchs, classements, vidéos... retrouvez toute l'actualité de l'AJ Auxerre sur notre site officiel.

Technology

CMS: WordPress

Third-party hosts loaded (6)

i.ytimg.com×3
gmpg.org×1
www.google.com×1
www.gstatic.com×1
www.suivi-matomo.fr×1
www.youtube.com×1

Social

Registration

Registrar

ORANGE

Created

2001-03-13

Expires

2026-10-11 143 days left

Updated

2026-01-27

Name servers

ns01.eolas.fr
ns02.eolas.fr
ns03.eolas-dns.eu

DNS records live

NS

ns01.eolas.fr
ns02.eolas.fr
ns03.eolas-dns.eu

MX

0 mx-mibc-fr-07.mailinblack.com

Verified for

Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf.mailinblack.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine

policy: quarantine

DKIM

default: v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDGmIV8h521Za8i4bO1m4wht/BZyUOnBTlg+6kDoph2jevQaN2zztsWEoLn5G+Dx74yGFyUxbc6nMPO60AkpWbMDL9uw…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAAaTnGSeNhSPPRhUGOoUsPwN7iHXhUvy61Nnqxz6uqwWiQGFu63pX18vtkr1qtltG2kr3e0GTgGsm…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-11-14 to 2026-12-15

Expires in 208 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.aja.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=()
x-content-type-options: nosniff
content-security-policy: img-src 'self' data: *.aja.fr *.webflow.com *.gravatar.com *.gstatic.com *.google.fr *.google.com *.googleapis.com *.google-analytics.com *.twitter.com i.ytimg.com https://wp-rocket.me *.wp-rocket.me ; frame-src 'self' *.twitter.com *.youtube.com *.google.com https://wp-rocket.me *.wp-rocket.me ; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' data: *.twitter.com *.youtube.com *.gstatic.com *.google.fr *.google.com *.googleapis.com *.cloudfront.net *.google-analytics.com *.googletagmanager.com *.suivi-matomo.fr *.opta.net http://widget.cloud.opta.net https://fast.wistia.com/embed/medias/ https://fast.wistia.com/assets/external/ ; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: ; worker-src 'self' blob: *.webqamapps.com ; object-src 'self' ;
strict-transport-security: max-age=16070400; includeSubDomains; preload