indexo.dev

francetravail.io

.io crawl

First seen 2026-04-15 · Last seen 2026-05-13 · ok HTTP/1.1 200 357 ms crawled 2026-05-10

FR · 185.215.64.119 · AS205461 Pole emploi

Reputation 100/100

Classifying

HTML metadata

Title
francetravail.io
Language
fr

Technology

Third-party hosts loaded (2)

  • cdn.francetravail.fr×1
  • cdn.tagcommander.com×1

DNS records live

NS
  • dns1.pole-emploi.fr
  • dns2.pole-emploi.fr
  • nsa.perf1.fr
  • nsb.perf1.com
  • nsc.perf1.com
MX
  • 10 smtp1.pole-emploi.fr
Verified for
  • Brevo
  • Google

Email authentication strong

SPF
v=spf1 ip4:185.215.65.0/24 -all
strict (-all)
DMARC
v=DMARC1; p=reject; adkim=s; rua=mailto:francetravail.rua@emailsecurity.merox.io
policy: reject (enforced)
DKIM
  • mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
selectors probed

Certificate (current)

Sectigo Public Server Authentication CA EV R36
from 2025-12-29 to 2026-12-30
Expires in 223 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://francetravail.io/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
Sameorigin
permissions-policy
fullscreen=(*), clipboard-write=(self), geolocation=(), camera=(), microphone=(), payment=(), usb=(), accelerometer=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' *.francetravail.fr *.pole-emploi.fr *.pole-emploi.intra *.pe-qvr.fr *.ft-qvr.fr https://guidances-applicatives.pole-emploi.fr https://guidances-applicatives.pe-qvr.fr https://cdn.tagcommander.com https://tag.aticdn.net https://collect.mopinion.com https://deploy.mopinion.com *.dynatrace.com 'unsafe-inline'; style-src 'self' 'unsafe-inline' *.pe-qvr.fr *.ft-qvr.fr *.francetravail.fr *.pole-emploi.fr *.pole-emploi.intra https://fonts.mopinion.com; img-src 'self' data: blob: *.pole-emploi.intra https://www.francetravail.io https://manager.tagcommander.com; font-src 'self' data: *.ft-qvr.fr *.pe-qvr.fr *.francetravail.fr *.pole-emploi.fr *.pole-emploi.intra https://gstatic.mopinion.com https://fonts.gstatic.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' *.pole-emploi.intra *.ft-qvr.io https://francetravail.io; frame-src 'self' https://videotheque.francetravail.tv https://www.youtube.com https://e.infogram.com; connect-src 'self' *.fran
strict-transport-security
max-age=31536000; includeSubDomains

Linked from (3)