beapi.fr

HTML metadata

Title

Agence WordPress - Création et maintenance de sites WordPress

Description

Be API, Agence WordPress #1 en France. Nous sommes 30 experts WordPress à votre écoute pour créer votre expérience digitale innovante.

Language

fr-FR

Generator

wpLingua 2.11.0

Canonical

https://beapi.fr

Translations

en
fr

Open Graph

url: https://beapi.fr
title: Agence WordPress - Création et maintenance de sites WordPress
locale: fr_FR
description: Be API, Agence WordPress #1 en France. Nous sommes 30 experts WordPress à votre écoute pour créer votre expérience digitale innovante.

Technology

Server: Apache
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (4)

stats.apigrowth.net×2
www.googletagmanager.com×2
client.crisp.chat×1
snap.licdn.com×1

Social

Registration

Registrar

GANDI

Created

2009-06-17

Expires

2032-06-17 2221 days left

Updated

2026-03-10

Name servers

ns-101-b.gandi.net
ns-185-c.gandi.net
ns-204-a.gandi.net

DNS records live

NS

ns-101-b.gandi.net
ns-185-c.gandi.net
ns-204-a.gandi.net

MX

Show 7 MX records

1 aspmx.l.google.com
3 alt1.aspmx.l.google.com
3 alt2.aspmx.l.google.com
5 aspmx2.googlemail.com
5 aspmx3.googlemail.com
5 aspmx4.googlemail.com
5 aspmx5.googlemail.com

TXT

Show 6 TXT records

MS=F8BCB3A9A07E6621B2D0D64028BD2C7083810696
apple-domain-verification=ahwWuOmEj3qIRTpC
Hdn281GFwA
jamf-site-verification=EdHv2KpbP5Tj0Oiq17fj-g
irozl7kKtxU+Pf2Gu0VbuLRI/a8G5PAXx4MA0FpFrCs=
cursor-domain-verification-938zgh=Dh6iu2iFwdGDPvKSgquuReano

Email authentication strong

SPF

v=spf1 a include:spf.mailjet.com include:_spf.google.com include:sendgrid.net include:spf.jabatus.fr ~all

softfail (~all)

DMARC

v=DMARC1;p=quarantine;pct=100;rua=mailto:re+c0kslqseaff@dmarc.postmarkapp.com;sp=quarantine;aspf=r;

policy: quarantine · sp=quarantine

DKIM

Show 5 DKIM selectors

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLHWB6EFjoqejcsUVRaRGuxMCOmcgcEaOYuaMpP3cbwFpp/QY9Lirf8Yd9dnSF2cqnIwj7Unout0+R…
google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDlAzTpALZFFjkG/P6Jhr6E7v7wk5WkJ62C9qrLaCU4w8/LLRp8WndxUlhxkPXeVeXXgwGgq4OTeXhYFkA866…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9g1ihXg6VDwBabROHByhkJwHdrxn8A4Udzksz0PViyHcoCgRd8MEu3ZK6OJPZY6eFKNRi4e5bD8Vov3Xh…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDcFjZkmX5ApXNoIVZVOoezlZhjxruhZBvYQfmOa3+FgWC5qMdJg+Xb/GtvrD1KzqBOIlo1M/T5JpXBtqm2uPPZ85…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

R13

from 2026-03-28 to 2026-06-26

Expires in 38 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://beapi.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), geolocation=(), fullscreen=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' *.clarity.ms client.crisp.chat stats.apigrowth.net *.googletagmanager.com snap.licdn.com *.googleadservices.com 'unsafe-inline'; style-src 'self' client.crisp.chat 'unsafe-inline'; img-src 'self' image.crisp.chat *.googletagmanager.com secure.gravatar.com px.ads.linkedin.com data:; font-src 'self' client.crisp.chat data:; connect-src 'self' *.clarity.ms stats.apigrowth.net client.crisp.chat client.relay.crisp.chat wss://client.relay.crisp.chat *.google.com px.ads.linkedin.com sentry.beapi.fr *.googleadservices.com *.google.fr; media-src 'self'; frame-src 'self' *.googletagmanager.com videopress.com; manifest-src 'self'; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self';
strict-transport-security: max-age=31536000; includeSubDomains; preload