diplomeo.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 4636 ms crawled 2026-05-19

FR · 51.103.19.211 · AS8075 Microsoft Corporation

Reputation 100/100

Classifying

HTML metadata

Title: Diplomeo : le spécialiste de l’Orientation en France
Description: Diplomeo est le 1er site d’Orientation en France. Trouve le diplôme et l’école qui te correspondent le mieux.
Language: fr
Canonical: https://diplomeo.com/

Open Graph

url: https://diplomeo.com/
title: Diplomeo : le spécialiste de l’Orientation en France
locale: fr_FR
site name: Diplomeo
description: Diplomeo est le 1er site d’Orientation en France. Trouve le diplôme et l’école qui te correspondent le mieux.

Technology

Third-party hosts loaded (3)

i.hellowork.com×37
f.hellowork.com×18
try.abtasty.com×1

Registration

Registrar

Gandi SAS

Created

2011-03-13

Expires

2027-03-13 296 days left

Updated

2025-10-27

Name servers

ns-157-b.gandi.net
ns-157-c.gandi.net
ns-49-a.gandi.net

DNS records live

NS

ns-157-b.gandi.net
ns-157-c.gandi.net
ns-49-a.gandi.net

MX

0 diplomeo-com.mail.protection.outlook.com

Verified for

Apple
Google
Microsoft 365
Yahoo

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:hellowork.netensia.net include:hw-spf.interfaces.fr -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc@hellowork.com

policy: reject (enforced)

DKIM

mail: v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4By0eCD6q+t23J6YFurD0pcQeA0gMdkAYDa6ULqoOECcJkcrRcxwyvq7i0F5LKichTbl…

selectors probed

Certificate (current)

GandiCert

from 2026-02-17 to 2027-02-25

Expires in 280 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://diplomeo.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer, strict-origin-when-cross-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: default-src 'none'; block-all-mixed-content; connect-src 'self' *.abtasty.com *.bing.com *.bing.net *.clarity.ms *.google.com *.google.fr *.googleadservices.com *.googlesyndication.com *.googletagmanager.com *.hellowork.com *.infra-hellowork.com *.nr-data.net *.regionsjob.com *.twitter.com api.typeform.eu cdn.jsdelivr.net/gh/magma-app/magma-widget@latest/src/widget-v3.min.js googleads.g.doubleclick.net vimeo.com *.mixpanel.com; font-src 'self' fonts.cdnfonts.com/s/14903/ *.abtasty.com; frame-ancestors 'self'; frame-src 'self' *.abtasty.com *.francetv.fr *.frcapi.com *.googletagmanager.com *.instagram.com *.linkedin.com *.magma.app *.podcasts.apple.com *.slideshare.net *.soundcloud.com *.tiktok.com *.ttwstatic.com *.twitter.com *.vimeo.com *.vimeocdn.com *.youtube-nocookie.com *.youtube.br *.youtube.com form.typeform.eu td.doubleclick.net datawrapper.dwcdn.net; img-src 'self' data: *.abtasty.com *.bing.com *.bing.net *.facebook.com *.google.com *.google.fr *.googleadservices.com *.googl
strict-transport-security: max-age=63072000