parcoursup.fr

Technology

Server: Apache

Registration

Registrar

AVENIR TELEMATIQUE

Created

2017-10-30

Expires

2026-10-30 163 days left

Updated

2025-11-30

Name servers

dnsexts01.phm.education.gouv.fr
dnsexts02.phm.education.gouv.fr
dnsexts03.phm.education.gouv.fr
dnsexts04.phm.education.gouv.fr

DNS records live

NS

dnsexts01.phm.education.gouv.fr
dnsexts02.phm.education.gouv.fr
dnsexts03.phm.education.gouv.fr
dnsexts04.phm.education.gouv.fr

MX

0 mail.parcoursup.fr

TXT

google-site-verification=BuFyZuOYoDDIuD5kwx6rwpJtMOdmKMCFcK5AQ4qzQ9g

Email authentication strong

SPF: v=spf1 mx ip4:193.54.151.229 ip4:193.54.151.230 ip4:193.54.151.231 ip4:193.54.151.232 ip4:193.54.151.233 ip4:193.54.151.234 ip4:194.167.72.229 ip4:194.167.72.230 ip4:194.167.72.231 ip4:194.167.72.232 ip4:194.167.72.233 ip4:194.167.72.234 -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc-rua@parcoursup.fr; ruf=mailto:dmarc-ruf@parcoursup.fr; fo=1; ri=3600; adkim=r; aspf=r; rf=afrf
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

GEANT TLS RSA 1

from 2025-11-13 to 2026-11-13

Expires in 177 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://parcoursup.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: speaker=(self "https://*.twitter.com" "https://*.dailymotion.com" "https://www.youtube-nocookie.com"), autoplay=(self "https://*.twitter.com" "https://*.dailymotion.com" "https://www.youtube-nocookie.com"), fullscreen=(self "https://*.twitter.com" "https://*.dailymotion.com" "https://www.youtube-nocookie.com"), geolocation=(self), payment=(self "https://*.paybox.com"), accelerometer=(), ambient-light-sensor=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), gyroscope=(), layout-animations=(), legacy-image-formats=(), magnetometer=(), microphone=(), midi=(), notifications=(), oversized-images=(), picture-in-picture=(), publickey-credentials-get=(), push=(), sync-xhr=(self), usb=(), vibrate=(), wake-lock=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'none' ; img-src 'self' *.parcoursup.fr *.parcoursup-nouvelle-caledonie.fr *.paybox.com ; media-src 'self' *.parcoursup.fr *.parcoursup-nouvelle-caledonie.fr *.paybox.com ; script-src 'unsafe-hashes' 'self' *.parcoursup.fr *.parcoursup-nouvelle-caledonie.fr *.paybox.com 'sha256-sI5v5bWVC19T46mBXAQNfZL5g/VIjJO4pxHjTHBGRTo=' 'sha256-bclIzK3SfP1ClS25sRLJ0l5THuIWcyKh/XRhHiIjoP8=' 'sha256-U3q5KwDyUdJs6mZtsTFTCPoNZs6DKhq9G8ZvSKs+sqM=' ; font-src 'self' *.parcoursup.fr *.parcoursup-nouvelle-caledonie.fr *.paybox.com ; frame-ancestors 'self' ; style-src-elem 'self' 'sha256-UG3e5GMK0p75fYUzpG+gQ7w8C5Xiho/3IN1lN4MygSs=' 'sha256-LCCG8b1oYMgCStLhXjw2+M/3LsNjoavZBaIwEMJ6Kdg=' 'sha256-e1gMlZC9QqOMyeY/9Z/NZIBDrlArAo46JAbkLbBDm1Q=' 'sha256-UrGjHcu2Sr3l23rKhEgVKMijbWMN2Pell/Dz/a4DGiw='; frame-src 'self' ; style-src 'self' 'sha256-lbk0T9Eqn9FZGhCh9MPwvsW4o8mfHGljEvl4Z7A1CXw=' 'sha256-zq27PiVE3uKYaCuZd8TdzyuSD1F45+67IRQlUZDK41c=' 'sha256-3DuTxsT+isLRFfaBwfLTvkqwl+5WCvVBwlXHNtnEjR8=' 'sha256-n
strict-transport-security: max-age=31536000; includeSubDomains; preload