fonction-publique.gouv.fr

.fr crawl

First seen 2026-04-11 · Last seen 2026-05-20 · ok HTTP/1.1 200 972 ms crawled 2026-05-18

US · 45.223.153.83 · AS19551 Incapsula Inc

Reputation 100/100

Classifying

HTML metadata

Title: Accueil | Le portail de la fonction publique
Language: fr
Generator: Drupal 11 (https://www.drupal.org)
Canonical: https://www.fonction-publique.gouv.fr/

Open Graph

url: https://www.fonction-publique.gouv.fr/home

Technology

Server: nginx
CMS: Drupal

Social

Registration

Registrar

ORDIPAT

Created

1997-01-28

Expires

2027-02-03 258 days left

Updated

2025-11-19

Name servers

ns2.as16101.net
ns3.as16101.net
ns51.as16101.net
ns52.as16101.net
ns53.as16101.net

DNS records live

NS

ns2.as16101.net
ns3.as16101.net
ns51.as16101.net
ns52.as16101.net
ns53.as16101.net

MX

10 relaismsg.finances.gouv.fr

TXT

linkedin-site-verification=8bedbe65-487d-42f5-903d-8cd955b3b47b

Verified for

Google

Email authentication strong

SPF: v=spf1 redirect=_spf.prd.finances.gouv.fr -all
strict (-all)
DMARC: v=DMARC1 ; p=reject ; sp=quarantine ; rua=mailto:dmarc-rua@fonction-publique.gouv.fr ; ruf=mailto:dmarc-ruf@fonction-publique.gouv.fr ; fo=1 ; adkim=s ; aspf=s
policy: reject (enforced) · sp=quarantine
DKIM: no key found at common selectors

Certificate (current)

Gandi RSA Domain Validation Secure Server CA 3

from 2026-04-10 to 2026-10-26

Expires in 158 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.fonction-publique.gouv.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src https: 'unsafe-eval' 'unsafe-inline'; object-src https: ; child-src https: platform.twitter.com; img-src https: data:; font-src 'self' data: https:;frame-ancestors 'self' https://*.safire.fonction-publique.gouv.fr;
strict-transport-security: max-age=31536000; includeSubDomains; preload