fiawec.com

HTML metadata

Title: FIA WEC - Official website of the World Endurance Championship
Description: Follow the FIA World Endurance Championship on the official FIA WEC website: news, live timing, calendar, results, standings, teams and drivers.
Language: en
Canonical: https://www.fiawec.com/en/

Technology

Server: nginx

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (4)

i.ytimg.com×18
static.rolex.com×3
use.typekit.net×1
www.googletagmanager.com×1

Social

Registration

Registrar

Lexsynergy Limited

Created

2010-07-29

Expires

2026-07-29 70 days left

Updated

2025-06-29

Name servers

ns1.lexsynergy.net
ns2.lexsynergy.us
ns3.lexsynergy.info

DNS records live

NS

ns1.lexsynergy.net
ns2.lexsynergy.us
ns3.lexsynergy.info

MX

10 vade-mx-fr01.hornetsecurity.com
10 vade-mx-fr02.hornetsecurity.com
20 vade-mx-eu-fallback01.hornetsecurity.com
20 vade-mx-eu-fallback02.hornetsecurity.com

TXT

Show 11 TXT records

autodesk-domain-verification=0G8SDroHNVY921a-QXhV
logmein-verification-code=BMwfChZzghVihrIDaHNFnimsp
jamf-site-verification=dev-iLd_xzOqxGTas4ByxA
1password-site-verification=6VDNUJ7UXJGMXO6E4TVNN5CGBE
MS=ms22575717
google-site-verification=1HQ7gDpdya_V_Fks0vhz4cTCPE6m4tZ6BI-pPy2touI
wty3q6zkjk84hxrrwrc30lvj5bqdts4b
protonmail-verification=f01907b9d605fe5e094bf96b8e888ba0ffbbc5b3
ywyt6sj5c0dvthgfw2445jrjf3xrvl3d
facebook-domain-verification=urydsvd1n8lhdtt1f5lcidkbetg3cy
google-site-verification=a_ewmNgwTTIYdy6uDkMg4an0C8f4v94jnnGOEdS8OLU

Email authentication strong

SPF

v=spf1 redirect=fiawec.com.spf.hornetdmarc.com

no all qualifier

DMARC

v=DMARC1; p=reject; pct=100; rua=mailto:a.nnnpcxy8@reports.hornetdmarc.com,mailto:dmarc@fiawec.com; ruf=mailto:dmarc@fiawec.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCImnyeVWy9kllD2aiZuB/PVQU6JS9bETryU8bGHUf1kMytJIOiqZrCAXNpC8Uw9yXy6oZW9kKWm6pMJpv6Rq…

selectors probed

Certificate (current)

WR3

from 2026-05-05 to 2026-08-03

Expires in 76 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.fiawec.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer, strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy: default-src https://api.typeform.com http://embed.typeform.com/next/embed.js https://embed.typeform.com 'self' 'unsafe-inline' https://data.fiawec.com https://storage.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://fiawec.com https://hatscripts.github.io https://flagcdn.com https://static.rolex.com https://www.youtube.com https://storage.googleapis.com https://www.fiawec.com https://i.ytimg.com https://www.youtube.com http://www.youtube.com https://play.google.com data: https://*.cdninstagram.com https://www.googletagmanager.com https://sdk.privacy-center.org https://api.privacy-center.org https://www.google.com; block-all-mixed-content; connect-src http://embed.typeform.com/next/embed.js https://embed.typeform.com https://api.typeform.com 'self' https://region1.google-analytics.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://storage.g
strict-transport-security: max-age=31536000