arena-lievin.fr

.fr crawl

First seen 2026-04-12 · Last seen 2026-05-19 · ok HTTP/1.1 200 1773 ms crawled 2026-05-06

FR · 5.135.66.9 · AS16276 OVH SAS

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Accueil
Language: fr
Canonical: https://www.arena-lievin.fr/

Open Graph

url: https://www.arena-lievin.fr
title: Accueil
site name: ARENA STADE COUVERT - SYNDICAT MIXTE POUR L’EXPLOITATION DE LA REGIE

Technology

Server: Apache

Analytics

Google Tag Manager

Third-party hosts loaded (2)

cdnnen.proxi.tools×30
www.googletagmanager.com×1

Social

Contact

Email

Phone

03 21 44 02 44

Registration

Registrar

OVH

Created

2015-05-04

Expires

2027-05-04 348 days left

Updated

2026-05-04

Name servers

dns13.ovh.net
ns13.ovh.net

DNS records live

NS

dns13.ovh.net
ns13.ovh.net

MX

0 arenalievin-fr01c.mail.protection.outlook.com

TXT

1|www.arena-lievin.fr
D66D2530525D972002BC304BF59C740531B9DC16

Verified for

Microsoft 365

Email authentication partial

SPF: v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-04-11 to 2026-07-10

Expires in 50 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.arena-lievin.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), camera=(), microphone=(), payment=(), fullscreen=(self)
x-content-type-options: nosniff
content-security-policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
strict-transport-security: max-age=31536000;