ap.org

HTML metadata

Title

The Associated Press | Video, Photo, Text, Audio & Data News Agency

Description

Discover a world of unbiased journalism, in-depth analysis, and real-time updates from every corner of the globe.

Language

en

Canonical

https://www.ap.org/

Translations

en
en-us

Feeds

Open Graph

url: https://www.ap.org/
title: The Associated Press | Video, Photo, Text, Audio & Data News Agency
locale: en_US
site name: The Associated Press
description: Discover a world of unbiased journalism, in-depth analysis, and real-time updates from every corner of the globe.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (4)

cdn.cookielaw.org×2
546000564.collect.igodigital.com×1
px.ads.linkedin.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Network Solutions, LLC

Created

1991-07-25

Expires

2028-07-24 796 days left

Updated

2018-07-24

Name servers

a1-212.akam.net
a10-67.akam.net
a11-64.akam.net
a24-65.akam.net
a28-66.akam.net
a9-67.akam.net

DNS records live

NS

a1-212.akam.net
a10-67.akam.net
a11-64.akam.net
a24-65.akam.net
a28-66.akam.net
a9-67.akam.net

MX

0 ap-org.mail.protection.outlook.com

TXT

Show 20 TXT records

adobe-idp-site-verification=2fb0968d90abb55244a76623a7e23a000c7ed65c9bb8bc5f7755d5467026f3af
facebook-domain-verification=c54fplblj1n22ojmp87m5k5iwiixee
MS=ms61186271
d1abxg4eb8icpv.cloudfront.net
_gh-associated-press-e=3c1cc50563
notion-domain-verification=Vh58IvJZs3YSQ3bO8cQlWknfSXbvOAEK5dfgnK8h61R
ZOOM_verify_RDSngob7Si-WxY7IOPTnlg
syTIuJw5ovMUyTyMZ60sceqMz/AJ4BW+kVtXnmrQtjm9Lk9vr0IgCI1B6DYfnSCq45Z11p2p6lC4F4wm/Ir2Pg==
SFMC-unhaPV4oCPGqVKZS3tFUgM0vH0DUjz9XtyvHJLNT
nitro-verification-code=MzYyMjE4MzA2MzI4NDc0NDIwNg==
google-site-verification=JYxnc1rJEOm0NMoUhqLA31mq6P9CXV8wlXPkufNYoz0
1password-site-verification=2X5RZ3S2GVF5BKSRROK7U4S254
pardot_62432_*=90785b7ef6343e2af03f7a86d32aadb62411a36b4171d121e3f215aa3a57a127
SFMC-D9K7bgxSPCMlsyGFNaZ_Meg_PpSjrs2EYrl5QeyL
google-site-verification=VczfNNj91BZbUadyc1h2prnjj_SJg8xNjs9-t2eySD8
cisco-ci-domain-verification=42b5396fc695526347599755c2cfeae8f191e7db6c3b88be2f63c52db8a79b37
apple-domain-verification=BDZq6aj0YvgNFsps
protonmail-verification=fb13cb099c413b21891e99e9d39ed0ce0dc0fc4c
openai-domain-verification=dv-uSG2sRkwXmO4tgr6UMxrYwkw
miro-verification=8b868ce9fe963cecac9b8a736f3c4136dc637f1b

Email authentication strong

SPF

v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzE1Z0LmYnsMZHRAloOqoxPinB0W/XrUEVH6vdFHf8eVDRBG2f/Z6v550XLSY1cJJXO3Ys0MlLb8OJJZjHRx…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0foavvR1JkWxVVMvVivouXZEuznogXKMRZ5khwuXadwfelvFdaPchzR0SrCR59lrAcmyPBN8Dp604CJfxR…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k1RThjtduxT85mFjC364kCqE3Pjo5e6l0UN/Um701VL9i/mne/dF93EBMIPk4E3k8E3rlS2q8aFCt/TTG…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2025-07-15 to 2026-07-15

Expires in 56 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.ap.org/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.pardot.com *.powr.io *.zi-scripts.com *.crazyegg.com *.stackadapt.com *.twitter.com *.googletagmanager.com *.googleapis.com *.marker.io *.cookielaw.org *.licdn.com *.adnxs.com *.collect.igodigital.com *.igodigital.com *.ap.org *.vimeo.com googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' *.stackadapt.com *.cookielaw.org *.googleapis.com; img-src 'self' data: *.powr.io *.stackadapt.com *.w.org *.cookielaw.org *.adnxs.com *.twitter.com *.x.com *.linkedin.com *.gravatar.com *.cookielaw.org *.collect.igodigital.com *.igodigital.com *.google.com google.com googleads.g.doubleclick.net; connect-src 'self' *.powr.io *.zi-scripts.com *.zoominfo.com *.adnxs.com *.crazyegg.com *.stackadapt.com *.cookielaw.org *.onetrust.com yoast.com *.google-analytics.com *.linkedin.com *.marker.io *.vimeo.com vimeo.com *.googletagmanager.com googletagmanager.com *.googleadservices.com googleadservices.com *.google.com google
strict-transport-security: max-age=31536000; includeSubdomain;