From afa5c9ddeef96aa34ebeec573da00c347dbdab45 Mon Sep 17 00:00:00 2001 From: Social Groovy Bot <45039513+SocialGroovyBot@users.noreply.github.com> Date: Sun, 28 Jul 2024 08:17:08 +0000 Subject: [PATCH] chore: report update --- report.json | 35340 +++++++++++++++++++------------------------------- 1 file changed, 13119 insertions(+), 22221 deletions(-) diff --git a/report.json b/report.json index fd0caa7a87..4034af3e51 100644 --- a/report.json +++ b/report.json @@ -7,217 +7,7 @@ "social", "enfance" ], - "http": { - "url": "https://adoption.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 01:17:31 GMT", - "grade": "D", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Age": "9379", - "Cache-Control": "max-age=10800, public", - "Connection": "keep-alive", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sat, 20 Jul 2024 07:01:47 GMT", - "ETag": "W/\"1721491620-gzip\"", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Last-Modified": "Sat, 20 Jul 2024 16:07:00 GMT", - "Set-Cookie": "BIGipServerpool-handicap-v2.cegedim.cloud-HTTP=3468974346.20480.0000; path=/; Httponly; Secure, TSf3779cae029=087dc22938ab2800a6280085ef950b3caae4941346a21329a5480c315e7ead0a9ddbea354266ad7ca55ce3e0f9d1a5c0; Max-Age=30; Path=/, TS300431cb027=087dc22938ab2000ce690209077cf712a3f8e9bca46cabe5fe43a17ef2ec20e7c4fc27030d14201108a580745811300083eb964dbd67f85fcf887981ece725c086bbbdc795dbb4b1d15dd5115ad0de30f7b97940e1a36004915c5960648a7909; Path=/", - "Transfer-Encoding": "chunked", - "Vary": "Cookie,Accept-Encoding", - "X-Cache": "HIT", - "X-Cache-Hits": "27", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "SAMEORIGIN" - }, - "scan_id": 53615850, - "score": 35, - "start_time": "Sun, 21 Jul 2024 01:17:23 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 3, - "tests_passed": 8, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-handicap-v2.cegedim.cloud-HTTP": { - "domain": "solidarites.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS300431cb027": { - "domain": "solidarites.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TSf3779cae029": { - "domain": "solidarites.gouv.fr", - "expires": 1721524680, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag", - "score_description": "Cookies set without using the Secure flag or set over HTTP", - "score_modifier": -20 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://solidarites.gouv.fr/adopter-un-enfant", - "redirects": true, - "route": [ - "http://adoption.gouv.fr/", - "https://adoption.gouv.fr/", - "https://solidarites.gouv.fr/adopter-un-enfant" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": null, - "includeSubDomains": false, - "max-age": null, - "preload": false, - "preloaded": false - }, - "pass": false, - "result": "hsts-not-implemented", - "score_description": "HTTP Strict Transport Security (HSTS) header not implemented", - "score_modifier": -20 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -563,7 +353,7 @@ "ip": "adoption.gouv.fr/185.194.82.206", "port": "443", "severity": "OK", - "finding": "218 >= 60 days" + "finding": "211 >= 60 days" }, { "id": "cert_notBefore", @@ -1280,7 +1070,7 @@ "ip": "adoption.gouv.fr/185.194.82.206", "port": "443", "severity": "INFO", - "finding": "50" + "finding": "92" } ], "thirdparties": { @@ -1367,7 +1157,7 @@ { "requestedUrl": "https://adoption.gouv.fr/", "finalUrl": "https://solidarites.gouv.fr/adopter-un-enfant", - "fetchTime": "2024-07-21T01:17:02.995Z", + "fetchTime": "2024-07-28T01:17:27.931Z", "runWarnings": [ "The page may not be loading as expected because your test URL (https://adoption.gouv.fr/) was redirected to https://solidarites.gouv.fr/adopter-un-enfant. Try testing the second URL directly." ], @@ -1375,7 +1165,7 @@ "performance": { "title": "Performance", "id": "performance", - "score": 0.13 + "score": 0.12 }, "accessibility": { "title": "Accessibility", @@ -1411,49 +1201,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 13410, + "numericValue": 15109, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 4465, - "firstMeaningfulPaint": 4465, - "largestContentfulPaint": 10571, - "firstCPUIdle": 13310, - "interactive": 13410, - "speedIndex": 17116, - "estimatedInputLatency": 2693, - "totalBlockingTime": 6963, - "maxPotentialFID": 3850, + "firstContentfulPaint": 4838, + "firstMeaningfulPaint": 4952, + "largestContentfulPaint": 11891, + "firstCPUIdle": 14774, + "interactive": 15109, + "speedIndex": 12939, + "estimatedInputLatency": 3104, + "totalBlockingTime": 8413, + "maxPotentialFID": 4364, "cumulativeLayoutShift": 0.004417591094970703, - "cumulativeLayoutShiftAllFrames": 0, + "cumulativeLayoutShiftAllFrames": 0.0032831509908040363, "observedTimeOrigin": 0, - "observedTimeOriginTs": 393555700, + "observedTimeOriginTs": 321787207, "observedNavigationStart": 0, - "observedNavigationStartTs": 393555700, - "observedFirstPaint": 2168, - "observedFirstPaintTs": 395724087, - "observedFirstContentfulPaint": 2168, - "observedFirstContentfulPaintTs": 395724087, - "observedFirstMeaningfulPaint": 2168, - "observedFirstMeaningfulPaintTs": 395724087, - "observedLargestContentfulPaint": 12456, - "observedLargestContentfulPaintTs": 406011312, - "observedTraceEnd": 13322, - "observedTraceEndTs": 406877820, - "observedLoad": 12265, - "observedLoadTs": 405820545, - "observedDomContentLoaded": 2189, - "observedDomContentLoadedTs": 395744450, + "observedNavigationStartTs": 321787207, + "observedFirstPaint": 3634, + "observedFirstPaintTs": 325420859, + "observedFirstContentfulPaint": 3634, + "observedFirstContentfulPaintTs": 325420859, + "observedFirstMeaningfulPaint": 3634, + "observedFirstMeaningfulPaintTs": 325420859, + "observedLargestContentfulPaint": 6746, + "observedLargestContentfulPaintTs": 328533092, + "observedTraceEnd": 7578, + "observedTraceEndTs": 329364769, + "observedLoad": 4595, + "observedLoadTs": 326381827, + "observedDomContentLoaded": 3354, + "observedDomContentLoadedTs": 325141658, "observedCumulativeLayoutShift": 0.004417591094970703, - "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 2178, - "observedFirstVisualChangeTs": 395733700, - "observedLastVisualChange": 12461, - "observedLastVisualChangeTs": 406016700, - "observedSpeedIndex": 9392, - "observedSpeedIndexTs": 402947881 + "observedCumulativeLayoutShiftAllFrames": 0.0032831509908040363, + "observedFirstVisualChange": 3633, + "observedFirstVisualChangeTs": 325420207, + "observedLastVisualChange": 6749, + "observedLastVisualChangeTs": 328536207, + "observedSpeedIndex": 5862, + "observedSpeedIndexTs": 327648894 }, { "lcpInvalidated": false @@ -1475,19 +1265,19 @@ "numScripts": 16, "numStylesheets": 4, "numFonts": 4, - "numTasks": 2705, - "numTasksOver10ms": 23, - "numTasksOver25ms": 8, - "numTasksOver50ms": 4, - "numTasksOver100ms": 3, + "numTasks": 1517, + "numTasksOver10ms": 26, + "numTasksOver25ms": 15, + "numTasksOver50ms": 8, + "numTasksOver100ms": 5, "numTasksOver500ms": 2, - "rtt": 0.313, - "throughput": 3994714.705441381, - "maxRtt": 82.502, - "maxServerLatency": 83.716, - "totalByteWeight": 673420, - "totalTaskTime": 2671.1949999999874, - "mainDocumentTransferSize": 85977 + "rtt": 8.678, + "throughput": 2248856.545818442, + "maxRtt": 153.891, + "maxServerLatency": 142.856, + "totalByteWeight": 674038, + "totalTaskTime": 3342.8790000000067, + "mainDocumentTransferSize": 85971 } ] } @@ -1508,7 +1298,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "D", "testsslExpireSoon": false, "testsslExpireDate": "2025-02-24T22:59:00.000Z", "testsslGrade": "A", @@ -1516,7 +1305,7 @@ "cookiesCount": 0, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.13, + "lighthouse_performance": 0.12, "lighthouse_performanceGrade": "F", "lighthouse_accessibility": 0.94, "lighthouse_accessibilityGrade": "A", @@ -1538,201 +1327,7 @@ "emploi", "formation" ], - "http": { - "url": "https://alternance.emploi.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 01:17:52 GMT", - "grade": "C-", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Cache-Control": "must-revalidate, no-cache, private", - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Length": "8619", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Wed, 17 Jul 2024 15:26:57 GMT", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Keep-Alive": "timeout=5, max=99", - "Link": "; rel=\"canonical\", ; rel=\"shortlink\"", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff, nosniff", - "X-Drupal-Dynamic-Cache": "HIT", - "X-Generator": "Drupal 9 (https://www.drupal.org)", - "X-UA-Compatible": "IE=edge" - }, - "scan_id": 53615856, - "score": 45, - "start_time": "Sun, 21 Jul 2024 01:17:48 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 4, - "tests_passed": 7, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dgefp-pa-v2-prod.cegedim.cloud-HTTP": { - "domain": "alternance.emploi.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://alternance.emploi.gouv.fr/accueil", - "redirects": true, - "route": [ - "http://alternance.emploi.gouv.fr/", - "https://alternance.emploi.gouv.fr/", - "https://alternance.emploi.gouv.fr/accueil" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": { - "https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.0/js/bootstrap.bundle.min.js": { - "crossorigin": null, - "integrity": null - } - } - }, - "pass": false, - "result": "sri-not-implemented-but-external-scripts-loaded-securely", - "score_description": "Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS", - "score_modifier": -5 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff, nosniff" - }, - "pass": false, - "result": "x-content-type-options-header-invalid", - "score_description": "X-Content-Type-Options header cannot be recognized", - "score_modifier": -5 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-frame-options-not-implemented", - "score_description": "X-Frame-Options (XFO) header not implemented", - "score_modifier": -20 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -2078,7 +1673,7 @@ "ip": "alternance.emploi.gouv.fr/185.194.82.123", "port": "443", "severity": "OK", - "finding": "314 >= 60 days" + "finding": "307 >= 60 days" }, { "id": "cert_notBefore", @@ -2239,7 +1834,7 @@ "ip": "alternance.emploi.gouv.fr/185.194.82.123", "port": "443", "severity": "INFO", - "finding": "1721524718" + "finding": "1722129494" }, { "id": "HSTS_time", @@ -2837,7 +2432,7 @@ "ip": "alternance.emploi.gouv.fr/185.194.82.123", "port": "443", "severity": "INFO", - "finding": "51" + "finding": "49" } ], "thirdparties": { @@ -2854,7 +2449,7 @@ "cookies": [ { "name": "BIGipServerpool-dgefp-pa-v2-prod.cegedim.cloud-HTTP", - "value": "!GPwbyFuvft4d7LdWDPlD0yXzT0UGhm3oHrqAwQ95fYymk8p5SZAQ1JEwiTeMzdv2e3AqHgmKMdIQwvL4Ch46WKqpB+2D", + "value": "!+FuUzhnFLslvFCBWDPlD0yXzT0UGhjsipsSOMlyMRMbxhEOUA/Jwcu6s9tU+reqRquGR5PWZNnjBbnLP+ldiB7yXI3uf", "domain": "alternance.emploi.gouv.fr", "path": "/", "expires": -1, @@ -2874,7 +2469,7 @@ "content-length": "8619", "content-type": "text/html; charset=UTF-8", "content-language": "fr", - "date": "Wed, 17 Jul 2024 15:26:57 GMT", + "date": "Mon, 22 Jul 2024 15:48:02 GMT", "expires": "Sun, 19 Nov 1978 05:00:00 GMT", "keep-alive": "timeout=5, max=99", "link": "; rel=\"canonical\", ; rel=\"shortlink\"", @@ -3157,7 +2752,7 @@ { "requestedUrl": "https://alternance.emploi.gouv.fr/", "finalUrl": "https://alternance.emploi.gouv.fr/accueil", - "fetchTime": "2024-07-21T01:17:09.279Z", + "fetchTime": "2024-07-28T01:17:19.948Z", "runWarnings": [ "The page may not be loading as expected because your test URL (https://alternance.emploi.gouv.fr/) was redirected to https://alternance.emploi.gouv.fr/accueil. Try testing the second URL directly." ], @@ -3165,7 +2760,7 @@ "performance": { "title": "Performance", "id": "performance", - "score": 0.54 + "score": 0.6 }, "accessibility": { "title": "Accessibility", @@ -3201,49 +2796,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 10565, + "numericValue": 9855, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 3287, - "firstMeaningfulPaint": 3287, - "largestContentfulPaint": 4589, - "firstCPUIdle": 5069, - "interactive": 10565, - "speedIndex": 9550, - "estimatedInputLatency": 16, - "totalBlockingTime": 145, - "maxPotentialFID": 250, + "firstContentfulPaint": 3091, + "firstMeaningfulPaint": 3091, + "largestContentfulPaint": 5120, + "firstCPUIdle": 4830, + "interactive": 9855, + "speedIndex": 5299, + "estimatedInputLatency": 13, + "totalBlockingTime": 43, + "maxPotentialFID": 119, "cumulativeLayoutShift": 0.0025224609374999997, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 300177070, + "observedTimeOriginTs": 344736327, "observedNavigationStart": 0, - "observedNavigationStartTs": 300177070, - "observedFirstPaint": 1250, - "observedFirstPaintTs": 301426673, - "observedFirstContentfulPaint": 1250, - "observedFirstContentfulPaintTs": 301426673, - "observedFirstMeaningfulPaint": 1250, - "observedFirstMeaningfulPaintTs": 301426673, - "observedLargestContentfulPaint": 1272, - "observedLargestContentfulPaintTs": 301448983, - "observedTraceEnd": 12629, - "observedTraceEndTs": 312805857, - "observedLoad": 11302, - "observedLoadTs": 311479331, - "observedDomContentLoaded": 1382, - "observedDomContentLoadedTs": 301558659, + "observedNavigationStartTs": 344736327, + "observedFirstPaint": 1234, + "observedFirstPaintTs": 345970478, + "observedFirstContentfulPaint": 1234, + "observedFirstContentfulPaintTs": 345970478, + "observedFirstMeaningfulPaint": 1234, + "observedFirstMeaningfulPaintTs": 345970478, + "observedLargestContentfulPaint": 1234, + "observedLargestContentfulPaintTs": 345970478, + "observedTraceEnd": 2824, + "observedTraceEndTs": 347560548, + "observedLoad": 1681, + "observedLoadTs": 346417754, + "observedDomContentLoaded": 1274, + "observedDomContentLoadedTs": 346010722, "observedCumulativeLayoutShift": 0.0025224609374999997, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 1244, - "observedFirstVisualChangeTs": 301421070, - "observedLastVisualChange": 11593, - "observedLastVisualChangeTs": 311770070, - "observedSpeedIndex": 4523, - "observedSpeedIndexTs": 304700312 + "observedFirstVisualChange": 1199, + "observedFirstVisualChangeTs": 345935327, + "observedLastVisualChange": 1899, + "observedLastVisualChangeTs": 346635327, + "observedSpeedIndex": 1469, + "observedSpeedIndexTs": 346205485 }, { "lcpInvalidated": false @@ -3265,18 +2860,18 @@ "numScripts": 10, "numStylesheets": 5, "numFonts": 4, - "numTasks": 2316, - "numTasksOver10ms": 10, - "numTasksOver25ms": 2, + "numTasks": 1091, + "numTasksOver10ms": 9, + "numTasksOver25ms": 3, "numTasksOver50ms": 1, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 2.2039999999999997, - "throughput": 8273450.599031457, - "maxRtt": 95.493, - "maxServerLatency": 8.445, - "totalByteWeight": 814889, - "totalTaskTime": 482.9449999999947, + "rtt": 5.494, + "throughput": 8301023.4154507965, + "maxRtt": 90.245, + "maxServerLatency": 10.050999999999998, + "totalByteWeight": 815771, + "totalTaskTime": 348.4259999999982, "mainDocumentTransferSize": 9301 } ] @@ -3298,7 +2893,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "C-", "testsslExpireSoon": false, "testsslExpireDate": "2025-05-31T21:59:00.000Z", "testsslGrade": "A+", @@ -3306,7 +2900,7 @@ "cookiesCount": 1, "trackersGrade": "B", "trackersCount": 1, - "lighthouse_performance": 0.54, + "lighthouse_performance": 0.6, "lighthouse_performanceGrade": "C", "lighthouse_accessibility": 0.94, "lighthouse_accessibilityGrade": "A", @@ -3327,199 +2921,7 @@ "sante", "dicom" ], - "http": { - "url": "https://arretonslesviolences.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 01:17:36 GMT", - "grade": "B", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Access-Control-Allow-Origin": "*", - "Cache-Control": "max-age=43200, public", - "Connection": "Upgrade, Keep-Alive", - "Content-Encoding": "gzip", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sun, 21 Jul 2024 01:17:35 GMT", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Keep-Alive": "timeout=5, max=100", - "Last-Modified": "Sat, 20 Jul 2024 18:51:36 GMT", - "Set-Cookie": "BIGipServerpool-arlv-production.cegedim.cloud-TCP80=!1ryIb3CrPuEEQIlWDPlD0yXzT0UGhpMVxuOgjjXZJQPWBcKjS5DsoaCYGcdAid8yGBaJrXFZjyVMB3iqkddEcqwbxQ4=; path=/; Httponly; Secure", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Transfer-Encoding": "chunked", - "Upgrade": "h2,h2c", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff, nosniff", - "X-Drupal-Cache": "HIT", - "X-Drupal-Dynamic-Cache": "HIT", - "X-Frame-Options": "SAMEORIGIN", - "X-Generator": "Drupal 10 (https://www.drupal.org)" - }, - "scan_id": 53615854, - "score": 70, - "start_time": "Sun, 21 Jul 2024 01:17:33 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 2, - "tests_passed": 9, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-arlv-production.cegedim.cloud-TCP80": { - "domain": "arretonslesviolences.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": "*", - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-implemented-with-public-access", - "score_description": "Public content is visible via cross-origin resource sharing (CORS) Access-Control-Allow-Origin header", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://arretonslesviolences.gouv.fr/", - "redirects": true, - "route": [ - "http://arretonslesviolences.gouv.fr/", - "https://arretonslesviolences.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff, nosniff" - }, - "pass": false, - "result": "x-content-type-options-header-invalid", - "score_description": "X-Content-Type-Options header cannot be recognized", - "score_modifier": -5 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -3865,7 +3267,7 @@ "ip": "arretonslesviolences.gouv.fr/185.194.82.152", "port": "443", "severity": "OK", - "finding": "241 >= 60 days" + "finding": "234 >= 60 days" }, { "id": "cert_notBefore", @@ -4026,7 +3428,7 @@ "ip": "arretonslesviolences.gouv.fr/185.194.82.152", "port": "443", "severity": "INFO", - "finding": "1721524703" + "finding": "1722129569" }, { "id": "HSTS_time", @@ -4638,7 +4040,7 @@ "ip": "arretonslesviolences.gouv.fr/185.194.82.152", "port": "443", "severity": "INFO", - "finding": "54" + "finding": "92" } ], "thirdparties": { @@ -4646,7 +4048,7 @@ "cookies": [ { "name": "BIGipServerpool-arlv-production.cegedim.cloud-TCP80", - "value": "!DKJqV1RXYK9W7I9WDPlD0yXzT0UGhkKAJ7ufv7txCVcdnp1NNTA1/ZjSMojyaR6NoND6Aaff/sV8fmXmKAPgbJHfhDw=", + "value": "!w4vyjAMuwLczoj5WDPlD0yXzT0UGhrjpvy6mdClVclbHQNw1nmKkSsKqaJy9VMGN09oiiuicHPwW8g+S3FiLZJaDIqE=", "domain": "arretonslesviolences.gouv.fr", "path": "/", "expires": -1, @@ -4666,18 +4068,18 @@ "content-encoding": "gzip", "content-type": "text/html; charset=UTF-8", "content-language": "fr", - "date": "Sun, 21 Jul 2024 01:17:50 GMT", + "date": "Sun, 28 Jul 2024 01:18:30 GMT", "expires": "Sun, 19 Nov 1978 05:00:00 GMT", "keep-alive": "timeout=5, max=100", - "last-modified": "Sat, 20 Jul 2024 18:51:36 GMT", - "set-cookie": "BIGipServerpool-arlv-production.cegedim.cloud-TCP80=!DKJqV1RXYK9W7I9WDPlD0yXzT0UGhkKAJ7ufv7txCVcdnp1NNTA1/ZjSMojyaR6NoND6Aaff/sV8fmXmKAPgbJHfhDw=; path=/; Httponly; Secure", + "last-modified": "Sat, 27 Jul 2024 06:22:19 GMT", + "set-cookie": "BIGipServerpool-arlv-production.cegedim.cloud-TCP80=!w4vyjAMuwLczoj5WDPlD0yXzT0UGhrjpvy6mdClVclbHQNw1nmKkSsKqaJy9VMGN09oiiuicHPwW8g+S3FiLZJaDIqE=; path=/; Httponly; Secure", "strict-transport-security": "max-age=31536000; includeSubDomains", "transfer-encoding": "chunked", "upgrade": "h2,h2c", "vary": "Accept-Encoding", "x-content-type-options": "nosniff\nnosniff", "x-drupal-cache": "HIT", - "x-drupal-dynamic-cache": "HIT", + "x-drupal-dynamic-cache": "MISS", "x-frame-options": "SAMEORIGIN", "x-generator": "Drupal 10 (https://www.drupal.org)" }, @@ -4919,13 +4321,13 @@ { "requestedUrl": "https://arretonslesviolences.gouv.fr/", "finalUrl": "https://arretonslesviolences.gouv.fr/", - "fetchTime": "2024-07-21T01:16:57.466Z", + "fetchTime": "2024-07-28T01:17:39.284Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.58 + "score": 0.57 }, "accessibility": { "title": "Accessibility", @@ -4961,49 +4363,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 21676, + "numericValue": 29674, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 1962, - "firstMeaningfulPaint": 2561, - "largestContentfulPaint": 3920, - "firstCPUIdle": 3591, - "interactive": 21676, - "speedIndex": 33370, + "firstContentfulPaint": 1958, + "firstMeaningfulPaint": 2575, + "largestContentfulPaint": 3930, + "firstCPUIdle": 4046, + "interactive": 29674, + "speedIndex": 35375, "estimatedInputLatency": 13, - "totalBlockingTime": 19, - "maxPotentialFID": 82, + "totalBlockingTime": 108, + "maxPotentialFID": 161, "cumulativeLayoutShift": 0, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 292045308, + "observedTimeOriginTs": 342589454, "observedNavigationStart": 0, - "observedNavigationStartTs": 292045308, - "observedFirstPaint": 1179, - "observedFirstPaintTs": 293224565, - "observedFirstContentfulPaint": 1179, - "observedFirstContentfulPaintTs": 293224565, - "observedFirstMeaningfulPaint": 1179, - "observedFirstMeaningfulPaintTs": 293224565, - "observedLargestContentfulPaint": 1179, - "observedLargestContentfulPaintTs": 293224565, - "observedTraceEnd": 11456, - "observedTraceEndTs": 303501776, - "observedLoad": 10400, - "observedLoadTs": 302445284, - "observedDomContentLoaded": 1141, - "observedDomContentLoadedTs": 293186358, + "observedNavigationStartTs": 342589454, + "observedFirstPaint": 1815, + "observedFirstPaintTs": 344404714, + "observedFirstContentfulPaint": 1815, + "observedFirstContentfulPaintTs": 344404714, + "observedFirstMeaningfulPaint": 1815, + "observedFirstMeaningfulPaintTs": 344404714, + "observedLargestContentfulPaint": 1815, + "observedLargestContentfulPaintTs": 344404714, + "observedTraceEnd": 12234, + "observedTraceEndTs": 354823236, + "observedLoad": 11176, + "observedLoadTs": 353765402, + "observedDomContentLoaded": 1729, + "observedDomContentLoadedTs": 344318332, "observedCumulativeLayoutShift": 0, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 1176, - "observedFirstVisualChangeTs": 293221308, - "observedLastVisualChange": 10742, - "observedLastVisualChangeTs": 302787308, - "observedSpeedIndex": 9121, - "observedSpeedIndexTs": 301166786 + "observedFirstVisualChange": 1813, + "observedFirstVisualChangeTs": 344402454, + "observedLastVisualChange": 11746, + "observedLastVisualChangeTs": 354335454, + "observedSpeedIndex": 10057, + "observedSpeedIndexTs": 352646894 }, { "lcpInvalidated": false @@ -5025,19 +4427,19 @@ "numScripts": 7, "numStylesheets": 3, "numFonts": 4, - "numTasks": 1489, - "numTasksOver10ms": 4, - "numTasksOver25ms": 2, + "numTasks": 1770, + "numTasksOver10ms": 8, + "numTasksOver25ms": 4, "numTasksOver50ms": 0, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 95.584, - "throughput": 42150448.44149978, - "maxRtt": 95.584, - "maxServerLatency": 1.4429999999999978, - "totalByteWeight": 10625421, - "totalTaskTime": 282.551999999998, - "mainDocumentTransferSize": 10572 + "rtt": 148.375, + "throughput": 15344290.230511975, + "maxRtt": 148.375, + "maxServerLatency": 0.9639999999999986, + "totalByteWeight": 10625437, + "totalTaskTime": 418.2769999999971, + "mainDocumentTransferSize": 10588 } ] } @@ -5058,7 +4460,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B", "testsslExpireSoon": false, "testsslExpireDate": "2025-03-19T22:59:00.000Z", "testsslGrade": "A+", @@ -5066,7 +4467,7 @@ "cookiesCount": 1, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.58, + "lighthouse_performance": 0.57, "lighthouse_performanceGrade": "C", "lighthouse_accessibility": 0.81, "lighthouse_accessibilityGrade": "B", @@ -5087,199 +4488,7 @@ "travail", "emploi" ], - "http": { - "url": "https://bonusmalus.travail-emploi.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 01:34:47 GMT", - "grade": "C", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Length": "1331", - "Content-Type": "text/html", - "Date": "Sun, 21 Jul 2024 01:34:46 GMT", - "ETag": "\"e38-5f28966ff4500-gzip\"", - "Keep-Alive": "timeout=2, max=100", - "Last-Modified": "Wed, 18 Jan 2023 13:00:36 GMT", - "Referrer-Policy": "strict-origin", - "Set-Cookie": "BIGipServerpool-dgefp-aspe.cegedim.cloud-HTTP=!qFYXOh6atTFxD41WDPlD0yXzT0UGhoLjBoXTO4m8gZFU/JZHj3ZCVt3s2JH5g20rkHy+FtyHmM471vJVntFonGCGEuk=; path=/; Httponly; Secure", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-XSS-Protection": "1; mode=block" - }, - "scan_id": 53616122, - "score": 55, - "start_time": "Sun, 21 Jul 2024 01:34:44 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 2, - "tests_passed": 9, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dgefp-aspe.cegedim.cloud-HTTP": { - "domain": "bonusmalus.travail-emploi.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://bonusmalus.travail-emploi.gouv.fr/", - "redirects": true, - "route": [ - "http://bonusmalus.travail-emploi.gouv.fr/", - "https://bonusmalus.travail-emploi.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": "strict-origin", - "http": true, - "meta": false - }, - "pass": true, - "result": "referrer-policy-private", - "score_description": "Referrer-Policy header set to \"no-referrer\", \"same-origin\", \"strict-origin\" or \"strict-origin-when-cross-origin\"", - "score_modifier": 5 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": { - "https://code.jquery.com/jquery-3.4.1.min.js": { - "crossorigin": "anonymous", - "integrity": "sha256-CSXorXvZcTkaix6Yvo6HppcZGetbYMGWSFlBw8HfCJo=" - } - } - }, - "pass": true, - "result": "sri-implemented-and-external-scripts-loaded-securely", - "score_description": "Subresource Integrity (SRI) is implemented and all scripts are loaded securely", - "score_modifier": 5 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-frame-options-not-implemented", - "score_description": "X-Frame-Options (XFO) header not implemented", - "score_modifier": -20 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": "1; mode=block" - }, - "pass": true, - "result": "x-xss-protection-enabled-mode-block", - "score_description": "Deprecated X-XSS-Protection header set to \"1; mode=block\"", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -5625,7 +4834,7 @@ "ip": "bonusmalus.travail-emploi.gouv.fr/185.194.82.150", "port": "443", "severity": "OK", - "finding": "78 >= 60 days" + "finding": "71 >= 60 days" }, { "id": "cert_notBefore", @@ -5786,7 +4995,7 @@ "ip": "bonusmalus.travail-emploi.gouv.fr/185.194.82.150", "port": "443", "severity": "INFO", - "finding": "1721525732" + "finding": "1722130608" }, { "id": "HSTS_time", @@ -6377,7 +5586,7 @@ "ip": "bonusmalus.travail-emploi.gouv.fr/185.194.82.150", "port": "443", "severity": "INFO", - "finding": "54" + "finding": "52" } ], "thirdparties": { @@ -6418,7 +5627,7 @@ "cookies": [ { "name": "BIGipServerpool-dgefp-aspe.cegedim.cloud-HTTP", - "value": "!6IXcc3PONLDRGx5WDPlD0yXzT0UGhiHso5pU1n8XY2HKdfZld4S2Yjf4wOkXPIX2K6I+se1S3yeqPy2KIGZ588ktCrM=", + "value": "!RJ1jXEsrwNRg93tWDPlD0yXzT0UGhkP+CZ9LRip2LmqHMZdxa7YGWO8HtW35HSppl143FO1avW6ibz0MQAYe4OARoyo=", "domain": "bonusmalus.travail-emploi.gouv.fr", "path": "/", "expires": -1, @@ -6435,14 +5644,14 @@ "accept-ranges": "bytes", "connection": "Keep-Alive", "content-encoding": "gzip", - "content-length": "1331", + "content-length": "1330", "content-type": "text/html", - "date": "Sun, 21 Jul 2024 01:35:00 GMT", - "etag": "\"e38-5f28966ff4500-gzip\"", + "date": "Sun, 28 Jul 2024 01:36:18 GMT", + "etag": "\"e38-61e26630311c0-gzip\"", "keep-alive": "timeout=2, max=100", - "last-modified": "Wed, 18 Jan 2023 13:00:36 GMT", + "last-modified": "Fri, 26 Jul 2024 13:21:19 GMT", "referrer-policy": "strict-origin", - "set-cookie": "BIGipServerpool-dgefp-aspe.cegedim.cloud-HTTP=!6IXcc3PONLDRGx5WDPlD0yXzT0UGhiHso5pU1n8XY2HKdfZld4S2Yjf4wOkXPIX2K6I+se1S3yeqPy2KIGZ588ktCrM=; path=/; Httponly; Secure", + "set-cookie": "BIGipServerpool-dgefp-aspe.cegedim.cloud-HTTP=!RJ1jXEsrwNRg93tWDPlD0yXzT0UGhkP+CZ9LRip2LmqHMZdxa7YGWO8HtW35HSppl143FO1avW6ibz0MQAYe4OARoyo=; path=/; Httponly; Secure", "strict-transport-security": "max-age=31536000; includeSubDomains", "vary": "Accept-Encoding", "x-content-type-options": "nosniff", @@ -6507,8 +5716,14 @@ }, { "hostname": "fonts.googleapis.com", - "ip": "142.250.191.202", + "ip": "142.251.16.95", "geoip": { + "city": { + "geoname_id": 5116931, + "names": { + "en": "Farmingdale" + } + }, "continent": { "code": "NA", "geoname_id": 6255149, @@ -6539,9 +5754,13 @@ }, "location": { "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" + "latitude": 40.7306, + "longitude": -73.4313, + "metro_code": 501, + "time_zone": "America/New_York" + }, + "postal": { + "code": "11735" }, "registered_country": { "geoname_id": 6252001, @@ -6556,7 +5775,23 @@ "ru": "США", "zh-CN": "美国" } - } + }, + "subdivisions": [ + { + "geoname_id": 5128638, + "iso_code": "NY", + "names": { + "de": "New York", + "en": "New York", + "es": "Nueva York", + "fr": "New York", + "ja": "ニューヨーク州", + "pt-BR": "Nova Iorque", + "ru": "Нью-Йорк", + "zh-CN": "纽约州" + } + } + ] } }, { @@ -6648,7 +5883,7 @@ }, { "hostname": "fonts.gstatic.com", - "ip": "142.250.190.3", + "ip": "64.233.180.94", "geoip": { "continent": { "code": "NA", @@ -6807,13 +6042,13 @@ { "requestedUrl": "https://bonusmalus.travail-emploi.gouv.fr/", "finalUrl": "https://bonusmalus.travail-emploi.gouv.fr/", - "fetchTime": "2024-07-21T01:34:39.711Z", + "fetchTime": "2024-07-28T01:34:59.724Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.95 + "score": 0.93 }, "accessibility": { "title": "Accessibility", @@ -6825,7 +6060,7 @@ "best-practices": { "title": "Best Practices", "id": "best-practices", - "score": 0.93 + "score": 0.87 }, "seo": { "title": "SEO", @@ -6849,49 +6084,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 2488, + "numericValue": 2659, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 2488, - "firstMeaningfulPaint": 2488, - "largestContentfulPaint": 2488, - "firstCPUIdle": 2488, - "interactive": 2488, - "speedIndex": 2572, + "firstContentfulPaint": 2659, + "firstMeaningfulPaint": 2659, + "largestContentfulPaint": 2659, + "firstCPUIdle": 2659, + "interactive": 2659, + "speedIndex": 2659, "estimatedInputLatency": 13, "totalBlockingTime": 0, "maxPotentialFID": 16, - "cumulativeLayoutShift": 0.005299709743923612, + "cumulativeLayoutShift": 0.0018116421169704858, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 320875312, + "observedTimeOriginTs": 432113634, "observedNavigationStart": 0, - "observedNavigationStartTs": 320875312, - "observedFirstPaint": 723, - "observedFirstPaintTs": 321597938, - "observedFirstContentfulPaint": 723, - "observedFirstContentfulPaintTs": 321597938, - "observedFirstMeaningfulPaint": 723, - "observedFirstMeaningfulPaintTs": 321597938, - "observedLargestContentfulPaint": 723, - "observedLargestContentfulPaintTs": 321597938, - "observedTraceEnd": 1882, - "observedTraceEndTs": 322757449, - "observedLoad": 800, - "observedLoadTs": 321675263, - "observedDomContentLoaded": 725, - "observedDomContentLoadedTs": 321600018, - "observedCumulativeLayoutShift": 0.005299709743923612, + "observedNavigationStartTs": 432113634, + "observedFirstPaint": 718, + "observedFirstPaintTs": 432831236, + "observedFirstContentfulPaint": 718, + "observedFirstContentfulPaintTs": 432831236, + "observedFirstMeaningfulPaint": 718, + "observedFirstMeaningfulPaintTs": 432831236, + "observedLargestContentfulPaint": 718, + "observedLargestContentfulPaintTs": 432831236, + "observedTraceEnd": 1864, + "observedTraceEndTs": 433977834, + "observedLoad": 730, + "observedLoadTs": 432844065, + "observedDomContentLoaded": 706, + "observedDomContentLoadedTs": 432819481, + "observedCumulativeLayoutShift": 0.0018116421169704858, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 728, - "observedFirstVisualChangeTs": 321603312, - "observedLastVisualChange": 1045, - "observedLastVisualChangeTs": 321920312, - "observedSpeedIndex": 741, - "observedSpeedIndexTs": 321616801 + "observedFirstVisualChange": 702, + "observedFirstVisualChangeTs": 432815634, + "observedLastVisualChange": 1035, + "observedLastVisualChangeTs": 433148634, + "observedSpeedIndex": 706, + "observedSpeedIndexTs": 432820020 }, { "lcpInvalidated": false @@ -6913,19 +6148,19 @@ "numScripts": 5, "numStylesheets": 4, "numFonts": 1, - "numTasks": 157, - "numTasksOver10ms": 1, - "numTasksOver25ms": 0, + "numTasks": 153, + "numTasksOver10ms": 5, + "numTasksOver25ms": 2, "numTasksOver50ms": 0, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 1.598, - "throughput": 36833482.97535796, - "maxRtt": 94.698, - "maxServerLatency": 14.235000000000003, - "totalByteWeight": 66664, - "totalTaskTime": 50.87700000000001, - "mainDocumentTransferSize": 1978 + "rtt": 5.339, + "throughput": 36609869.313712135, + "maxRtt": 82.124, + "maxServerLatency": 19.342, + "totalByteWeight": 64159, + "totalTaskTime": 148.19599999999986, + "mainDocumentTransferSize": 1977 } ] } @@ -6946,7 +6181,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "C", "testsslExpireSoon": false, "testsslExpireDate": "2024-10-07T21:59:00.000Z", "testsslGrade": "A+", @@ -6954,11 +6188,11 @@ "cookiesCount": 1, "trackersGrade": "C", "trackersCount": 4, - "lighthouse_performance": 0.95, + "lighthouse_performance": 0.93, "lighthouse_performanceGrade": "A", "lighthouse_accessibility": 0.71, "lighthouse_accessibilityGrade": "B", - "lighthouse_best-practices": 0.93, + "lighthouse_best-practices": 0.87, "lighthouse_best-practicesGrade": "A", "lighthouse_seo": 0.91, "lighthouse_seoGrade": "A", @@ -6976,222 +6210,7 @@ "emploi", "formation" ], - "http": { - "url": "https://boussole.jeunes.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 01:35:38 GMT", - "grade": "D-", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Access-Control-Allow-Origin": "*", - "Cache-Control": "max-age=0, must-revalidate, private", - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Type": "text/html; charset=UTF-8", - "Date": "Sun, 21 Jul 2024 01:35:35 GMT", - "Expires": "Sun, 21 Jul 2024 01:35:35 GMT", - "Host": "boussole.jeunes.gouv.fr", - "Keep-Alive": "timeout=5, max=100", - "Referrer-Policy": "strict-origin-when-cross-origin", - "Set-Cookie": "PHPSESSID=jkins7480ukqj06f7kco3l4ej3; path=/; secure; httponly; samesite=lax, BIGipServerpool-djepva-boussole2.cegedim.cloud-HTTP=!1pawiQlYPHhRd/9WDPlD0yXzT0UGhj8qytb7fhD3/PuiXudc/KVQ/rssuN7jmXpnE1QwTMGskV5Lbc16cla0VOca19vh; path=/; Httponly; Secure", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Transfer-Encoding": "chunked", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "sameorigin" - }, - "scan_id": 53616156, - "score": 25, - "start_time": "Sun, 21 Jul 2024 01:35:33 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 2, - "tests_passed": 9, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-djepva-boussole2.cegedim.cloud-HTTP": { - "domain": "boussole.jeunes.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "PHPSESSID": { - "domain": "boussole.jeunes.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": "Lax", - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": "*", - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-implemented-with-public-access", - "score_description": "Public content is visible via cross-origin resource sharing (CORS) Access-Control-Allow-Origin header", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://boussole.jeunes.gouv.fr/", - "redirects": true, - "route": [ - "http://boussole.jeunes.gouv.fr/", - "https://boussole.jeunes.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": "strict-origin-when-cross-origin", - "http": true, - "meta": false - }, - "pass": true, - "result": "referrer-policy-private", - "score_description": "Referrer-Policy header set to \"no-referrer\", \"same-origin\", \"strict-origin\" or \"strict-origin-when-cross-origin\"", - "score_modifier": 5 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": { - "//cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js": { - "crossorigin": null, - "integrity": null - }, - "https://cdn.jsdelivr.net/npm/@popperjs/core@2.11.6/dist/umd/popper.min.js": { - "crossorigin": "anonymous", - "integrity": "sha384-oBqDVmMz9ATKxIep9tiCxS/Z9fNfEXiDAYTujMAeBAsjFuCZSmKbSSUnQlmh/jp3" - }, - "https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.min.js": { - "crossorigin": "anonymous", - "integrity": "sha384-cuYeSxntonz0PPNlHhBs68uyIAVpIIOZZ5JqeqvYYIcEL727kskC66kF92t6Xl2V" - }, - "https://code.jquery.com/jquery-3.5.1.min.js": { - "crossorigin": "anonymous", - "integrity": "sha256-9/aliU8dGd2tb6OSsuzixeV4y/faTqgFtohetphbbj0=" - } - } - }, - "pass": false, - "result": "sri-not-implemented-and-external-scripts-not-loaded-securely", - "score_description": "Subresource Integrity (SRI) not implemented, and external scripts are loaded over HTTP or use protocol-relative URLs via src=\"//...\"", - "score_modifier": -50 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "sameorigin" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -7537,7 +6556,7 @@ "ip": "boussole.jeunes.gouv.fr/185.194.82.191", "port": "443", "severity": "OK", - "finding": "263 >= 60 days" + "finding": "256 >= 60 days" }, { "id": "cert_notBefore", @@ -7691,14 +6710,14 @@ "ip": "boussole.jeunes.gouv.fr/185.194.82.191", "port": "443", "severity": "INFO", - "finding": "-1 seconds from localtime" + "finding": "-2 seconds from localtime" }, { "id": "HTTP_headerTime", "ip": "boussole.jeunes.gouv.fr/185.194.82.191", "port": "443", "severity": "INFO", - "finding": "1721525802" + "finding": "1722130750" }, { "id": "HSTS_time", @@ -8303,7 +7322,7 @@ "ip": "boussole.jeunes.gouv.fr/185.194.82.191", "port": "443", "severity": "INFO", - "finding": "61" + "finding": "104" } ], "thirdparties": { @@ -8390,7 +7409,7 @@ }, { "type": "youtube", - "url": "https://www.youtube.com/s/player/d60b0ef9/www-player.css", + "url": "https://www.youtube.com/s/player/1f8742dc/www-player.css", "details": { "id": "youtube", "message": "Dont embed youtube scripts, use peertube" @@ -8398,7 +7417,7 @@ }, { "type": "youtube", - "url": "https://www.youtube.com/s/player/d60b0ef9/player_ias.vflset/en_US/embed.js", + "url": "https://www.youtube.com/s/player/1f8742dc/player_ias.vflset/en_US/embed.js", "details": { "id": "youtube", "message": "Dont embed youtube scripts, use peertube" @@ -8406,15 +7425,7 @@ }, { "type": "youtube", - "url": "https://www.youtube.com/s/player/d60b0ef9/www-embed-player.vflset/www-embed-player.js", - "details": { - "id": "youtube", - "message": "Dont embed youtube scripts, use peertube" - } - }, - { - "type": "youtube", - "url": "https://www.youtube.com/s/player/d60b0ef9/player_ias.vflset/en_US/base.js", + "url": "https://www.youtube.com/s/player/1f8742dc/www-embed-player.vflset/www-embed-player.js", "details": { "id": "youtube", "message": "Dont embed youtube scripts, use peertube" @@ -8436,6 +7447,14 @@ "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" } }, + { + "type": "youtube", + "url": "https://www.youtube.com/s/player/1f8742dc/player_ias.vflset/en_US/base.js", + "details": { + "id": "youtube", + "message": "Dont embed youtube scripts, use peertube" + } + }, { "type": "google fonts", "url": "https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2", @@ -8486,7 +7505,7 @@ }, { "type": "youtube", - "url": "https://www.youtube.com/s/player/d60b0ef9/player_ias.vflset/en_US/remote.js", + "url": "https://www.youtube.com/s/player/1f8742dc/player_ias.vflset/en_US/remote.js", "details": { "id": "youtube", "message": "Dont embed youtube scripts, use peertube" @@ -8494,7 +7513,7 @@ }, { "type": "google", - "url": "https://www.google.com/js/th/d6WzJaofU1kne-aGzzhRfrvQvcguvwwbKAzGVw0Fi1w.js", + "url": "https://www.google.com/js/th/1AiCzlAXOvKBjKQ6-ZkwShm4tpQuZWMhqjO5xqGcWBk.js", "details": { "id": "google", "message": "Use hosted Matomo instance" @@ -8526,7 +7545,7 @@ }, { "type": "google", - "url": "https://play.google.com/log?format=json&hasfast=true&authuser=0", + "url": "https://www.gstatic.com/cv/js/sender/v1/cast_sender.js", "details": { "id": "google", "message": "Use hosted Matomo instance" @@ -8542,7 +7561,7 @@ }, { "type": "google", - "url": "https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT", + "url": "https://play.google.com/log?format=json&hasfast=true&authuser=0", "details": { "id": "google", "message": "Use hosted Matomo instance" @@ -8558,7 +7577,7 @@ }, { "type": "google", - "url": "https://play.google.com/log?format=json&hasfast=true&authuser=0", + "url": "https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT", "details": { "id": "google", "message": "Use hosted Matomo instance" @@ -8574,7 +7593,7 @@ }, { "type": "google", - "url": "https://www.gstatic.com/cv/js/sender/v1/cast_sender.js", + "url": "https://play.google.com/log?format=json&hasfast=true&authuser=0", "details": { "id": "google", "message": "Use hosted Matomo instance" @@ -8582,7 +7601,7 @@ }, { "type": "youtube", - "url": "https://www.youtube.com/generate_204?gAGzQw", + "url": "https://www.youtube.com/generate_204?ersDrw", "details": { "id": "youtube", "message": "Dont embed youtube scripts, use peertube" @@ -8608,7 +7627,7 @@ "cookies": [ { "name": "BIGipServerpool-djepva-boussole2.cegedim.cloud-HTTP", - "value": "!Fy8yA+xoUKVjQtVWDPlD0yXzT0UGhkCdJ3xArLN7WP0+7aOAgNpkCrdY+FWxS3t4nfoIyXGaq6vqBkFreOX+eBZs+cqq", + "value": "!0JhHyZ2x0gtT67VWDPlD0yXzT0UGhkWO6hhQTFj8JKDdgKJJ5MjADQ2GjxOvVc4LclVh7baOSr+GAgddf7riH0PL+Ut3", "domain": "boussole.jeunes.gouv.fr", "path": "/", "expires": -1, @@ -8622,7 +7641,7 @@ }, { "name": "PHPSESSID", - "value": "374l1orket64l8gn806r2imm67", + "value": "m49g7anv1b5kvgnqhoafhlerak", "domain": "boussole.jeunes.gouv.fr", "path": "/", "expires": -1, @@ -8642,12 +7661,12 @@ "connection": "Keep-Alive", "content-encoding": "gzip", "content-type": "text/html; charset=UTF-8", - "date": "Sun, 21 Jul 2024 01:35:53 GMT", - "expires": "Sun, 21 Jul 2024 01:35:53 GMT", + "date": "Sun, 28 Jul 2024 01:37:51 GMT", + "expires": "Sun, 28 Jul 2024 01:37:51 GMT", "host": "boussole.jeunes.gouv.fr", "keep-alive": "timeout=5, max=100", "referrer-policy": "strict-origin-when-cross-origin", - "set-cookie": "PHPSESSID=374l1orket64l8gn806r2imm67; path=/; secure; httponly; samesite=lax\nBIGipServerpool-djepva-boussole2.cegedim.cloud-HTTP=!Fy8yA+xoUKVjQtVWDPlD0yXzT0UGhkCdJ3xArLN7WP0+7aOAgNpkCrdY+FWxS3t4nfoIyXGaq6vqBkFreOX+eBZs+cqq; path=/; Httponly; Secure", + "set-cookie": "PHPSESSID=m49g7anv1b5kvgnqhoafhlerak; path=/; secure; httponly; samesite=lax\nBIGipServerpool-djepva-boussole2.cegedim.cloud-HTTP=!0JhHyZ2x0gtT67VWDPlD0yXzT0UGhkWO6hhQTFj8JKDdgKJJ5MjADQ2GjxOvVc4LclVh7baOSr+GAgddf7riH0PL+Ut3; path=/; Httponly; Secure", "strict-transport-security": "max-age=31536000; includeSubDomains", "transfer-encoding": "chunked", "vary": "Accept-Encoding", @@ -8713,7 +7732,7 @@ }, { "hostname": "code.jquery.com", - "ip": "151.101.130.137", + "ip": "151.101.66.137", "geoip": { "city": { "geoname_id": 5391959, @@ -8800,48 +7819,20 @@ }, { "hostname": "cdn.jsdelivr.net", - "ip": "104.18.186.31", - "geoip": { - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - } - } - }, - { - "hostname": "cdnjs.cloudflare.com", - "ip": "104.17.25.14", + "ip": "151.101.41.229", "geoip": { - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", + "city": { + "geoname_id": 5392171, "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" + "de": "San José", + "en": "San Jose", + "es": "San José", + "fr": "San José", + "ja": "サンノゼ", + "pt-BR": "San José", + "ru": "Сан-Хосе" } - } - } - }, - { - "hostname": "www.youtube.com", - "ip": "142.250.190.14", - "geoip": { + }, "continent": { "code": "NA", "geoname_id": 6255149, @@ -8871,11 +7862,51 @@ } }, "location": { - "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" + "accuracy_radius": 20, + "latitude": 37.1835, + "longitude": -121.7714, + "metro_code": 807, + "time_zone": "America/Los_Angeles" + }, + "postal": { + "code": "95141" }, + "registered_country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "subdivisions": [ + { + "geoname_id": 5332921, + "iso_code": "CA", + "names": { + "de": "Kalifornien", + "en": "California", + "es": "California", + "fr": "Californie", + "ja": "カリフォルニア州", + "pt-BR": "Califórnia", + "ru": "Калифорния", + "zh-CN": "加州" + } + } + ] + } + }, + { + "hostname": "cdnjs.cloudflare.com", + "ip": "104.17.24.14", + "geoip": { "registered_country": { "geoname_id": 6252001, "iso_code": "US", @@ -8892,9 +7923,89 @@ } } }, + { + "hostname": "www.youtube.com", + "ip": "142.251.46.174", + "geoip": { + "city": { + "geoname_id": 5116931, + "names": { + "en": "Farmingdale" + } + }, + "continent": { + "code": "NA", + "geoname_id": 6255149, + "names": { + "de": "Nordamerika", + "en": "North America", + "es": "Norteamérica", + "fr": "Amérique du Nord", + "ja": "北アメリカ", + "pt-BR": "América do Norte", + "ru": "Северная Америка", + "zh-CN": "北美洲" + } + }, + "country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "location": { + "accuracy_radius": 1000, + "latitude": 40.7306, + "longitude": -73.4313, + "metro_code": 501, + "time_zone": "America/New_York" + }, + "postal": { + "code": "11735" + }, + "registered_country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "subdivisions": [ + { + "geoname_id": 5128638, + "iso_code": "NY", + "names": { + "de": "New York", + "en": "New York", + "es": "Nueva York", + "fr": "New York", + "ja": "ニューヨーク州", + "pt-BR": "Nova Iorque", + "ru": "Нью-Йорк", + "zh-CN": "纽约州" + } + } + ] + } + }, { "hostname": "fonts.gstatic.com", - "ip": "172.217.0.163", + "ip": "142.250.191.35", "geoip": { "continent": { "code": "NA", @@ -8948,7 +8059,7 @@ }, { "hostname": "googleads.g.doubleclick.net", - "ip": "142.250.190.130", + "ip": "142.250.189.226", "geoip": { "continent": { "code": "NA", @@ -9002,7 +8113,7 @@ }, { "hostname": "static.doubleclick.net", - "ip": "142.250.190.70", + "ip": "172.217.164.102", "geoip": { "continent": { "code": "NA", @@ -9056,8 +8167,14 @@ }, { "hostname": "jnn-pa.googleapis.com", - "ip": "172.217.5.10", + "ip": "142.251.46.234", "geoip": { + "city": { + "geoname_id": 5116931, + "names": { + "en": "Farmingdale" + } + }, "continent": { "code": "NA", "geoname_id": 6255149, @@ -9088,9 +8205,13 @@ }, "location": { "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" + "latitude": 40.7306, + "longitude": -73.4313, + "metro_code": 501, + "time_zone": "America/New_York" + }, + "postal": { + "code": "11735" }, "registered_country": { "geoname_id": 6252001, @@ -9105,13 +8226,35 @@ "ru": "США", "zh-CN": "美国" } - } + }, + "subdivisions": [ + { + "geoname_id": 5128638, + "iso_code": "NY", + "names": { + "de": "New York", + "en": "New York", + "es": "Nueva York", + "fr": "New York", + "ja": "ニューヨーク州", + "pt-BR": "Nova Iorque", + "ru": "Нью-Йорк", + "zh-CN": "纽约州" + } + } + ] } }, { "hostname": "www.google.com", - "ip": "172.217.4.36", + "ip": "142.251.46.228", "geoip": { + "city": { + "geoname_id": 5116931, + "names": { + "en": "Farmingdale" + } + }, "continent": { "code": "NA", "geoname_id": 6255149, @@ -9142,9 +8285,13 @@ }, "location": { "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" + "latitude": 40.7306, + "longitude": -73.4313, + "metro_code": 501, + "time_zone": "America/New_York" + }, + "postal": { + "code": "11735" }, "registered_country": { "geoname_id": 6252001, @@ -9159,12 +8306,28 @@ "ru": "США", "zh-CN": "美国" } - } + }, + "subdivisions": [ + { + "geoname_id": 5128638, + "iso_code": "NY", + "names": { + "de": "New York", + "en": "New York", + "es": "Nueva York", + "fr": "New York", + "ja": "ニューヨーク州", + "pt-BR": "Nova Iorque", + "ru": "Нью-Йорк", + "zh-CN": "纽约州" + } + } + ] } }, { "hostname": "i.ytimg.com", - "ip": "142.250.190.118", + "ip": "142.250.189.182", "geoip": { "continent": { "code": "NA", @@ -9218,8 +8381,14 @@ }, { "hostname": "yt3.ggpht.com", - "ip": "142.250.191.129", + "ip": "142.251.46.193", "geoip": { + "city": { + "geoname_id": 5116931, + "names": { + "en": "Farmingdale" + } + }, "continent": { "code": "NA", "geoname_id": 6255149, @@ -9250,9 +8419,13 @@ }, "location": { "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" + "latitude": 40.7306, + "longitude": -73.4313, + "metro_code": 501, + "time_zone": "America/New_York" + }, + "postal": { + "code": "11735" }, "registered_country": { "geoname_id": 6252001, @@ -9267,13 +8440,35 @@ "ru": "США", "zh-CN": "美国" } - } + }, + "subdivisions": [ + { + "geoname_id": 5128638, + "iso_code": "NY", + "names": { + "de": "New York", + "en": "New York", + "es": "Nueva York", + "fr": "New York", + "ja": "ニューヨーク州", + "pt-BR": "Nova Iorque", + "ru": "Нью-Йорк", + "zh-CN": "纽约州" + } + } + ] } }, { - "hostname": "play.google.com", - "ip": "142.250.191.206", + "hostname": "www.gstatic.com", + "ip": "142.251.32.35", "geoip": { + "city": { + "geoname_id": 5116931, + "names": { + "en": "Farmingdale" + } + }, "continent": { "code": "NA", "geoname_id": 6255149, @@ -9304,9 +8499,13 @@ }, "location": { "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" + "latitude": 40.7306, + "longitude": -73.4313, + "metro_code": 501, + "time_zone": "America/New_York" + }, + "postal": { + "code": "11735" }, "registered_country": { "geoname_id": 6252001, @@ -9321,13 +8520,35 @@ "ru": "США", "zh-CN": "美国" } - } + }, + "subdivisions": [ + { + "geoname_id": 5128638, + "iso_code": "NY", + "names": { + "de": "New York", + "en": "New York", + "es": "Nueva York", + "fr": "New York", + "ja": "ニューヨーク州", + "pt-BR": "Nova Iorque", + "ru": "Нью-Йорк", + "zh-CN": "纽约州" + } + } + ] } }, { - "hostname": "www.gstatic.com", - "ip": "172.217.4.35", + "hostname": "play.google.com", + "ip": "142.251.46.238", "geoip": { + "city": { + "geoname_id": 5116931, + "names": { + "en": "Farmingdale" + } + }, "continent": { "code": "NA", "geoname_id": 6255149, @@ -9358,9 +8579,13 @@ }, "location": { "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" + "latitude": 40.7306, + "longitude": -73.4313, + "metro_code": 501, + "time_zone": "America/New_York" + }, + "postal": { + "code": "11735" }, "registered_country": { "geoname_id": 6252001, @@ -9375,7 +8600,23 @@ "ru": "США", "zh-CN": "美国" } - } + }, + "subdivisions": [ + { + "geoname_id": 5128638, + "iso_code": "NY", + "names": { + "de": "New York", + "en": "New York", + "es": "Nueva York", + "fr": "New York", + "ja": "ニューヨーク州", + "pt-BR": "Nova Iorque", + "ru": "Нью-Йорк", + "zh-CN": "纽约州" + } + } + ] } } ] @@ -9682,13 +8923,13 @@ { "requestedUrl": "https://boussole.jeunes.gouv.fr/", "finalUrl": "https://boussole.jeunes.gouv.fr/", - "fetchTime": "2024-07-21T01:35:14.231Z", + "fetchTime": "2024-07-28T01:36:10.323Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.39 + "score": 0.26 }, "accessibility": { "title": "Accessibility", @@ -9724,49 +8965,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 15698, + "numericValue": 19546, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 3168, - "firstMeaningfulPaint": 9235, - "largestContentfulPaint": 43371, - "firstCPUIdle": 11722, - "interactive": 15698, - "speedIndex": 9221, - "estimatedInputLatency": 84, - "totalBlockingTime": 346, - "maxPotentialFID": 281, - "cumulativeLayoutShift": 0.039742075602213545, + "firstContentfulPaint": 3593, + "firstMeaningfulPaint": 9773, + "largestContentfulPaint": 48497, + "firstCPUIdle": 12243, + "interactive": 19546, + "speedIndex": 12511, + "estimatedInputLatency": 145, + "totalBlockingTime": 647, + "maxPotentialFID": 476, + "cumulativeLayoutShift": 0.03791216532389323, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 388704379, + "observedTimeOriginTs": 375354582, "observedNavigationStart": 0, - "observedNavigationStartTs": 388704379, - "observedFirstPaint": 762, - "observedFirstPaintTs": 389466030, - "observedFirstContentfulPaint": 762, - "observedFirstContentfulPaintTs": 389466030, - "observedFirstMeaningfulPaint": 1052, - "observedFirstMeaningfulPaintTs": 389755955, - "observedLargestContentfulPaint": 10297, - "observedLargestContentfulPaintTs": 399001421, - "observedTraceEnd": 11333, - "observedTraceEndTs": 400037539, - "observedLoad": 10273, - "observedLoadTs": 398977255, - "observedDomContentLoaded": 1275, - "observedDomContentLoadedTs": 389979173, - "observedCumulativeLayoutShift": 0.039742075602213545, + "observedNavigationStartTs": 375354582, + "observedFirstPaint": 1163, + "observedFirstPaintTs": 376518022, + "observedFirstContentfulPaint": 1163, + "observedFirstContentfulPaintTs": 376518022, + "observedFirstMeaningfulPaint": 1710, + "observedFirstMeaningfulPaintTs": 377064576, + "observedLargestContentfulPaint": 17808, + "observedLargestContentfulPaintTs": 393162595, + "observedTraceEnd": 18843, + "observedTraceEndTs": 394197773, + "observedLoad": 17786, + "observedLoadTs": 393140801, + "observedDomContentLoaded": 1873, + "observedDomContentLoadedTs": 377227231, + "observedCumulativeLayoutShift": 0.03791216532389323, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 763, - "observedFirstVisualChangeTs": 389467379, - "observedLastVisualChange": 10296, - "observedLastVisualChangeTs": 399000379, - "observedSpeedIndex": 1950, - "observedSpeedIndexTs": 390654207 + "observedFirstVisualChange": 1163, + "observedFirstVisualChangeTs": 376517582, + "observedLastVisualChange": 17813, + "observedLastVisualChangeTs": 393167582, + "observedSpeedIndex": 3184, + "observedSpeedIndexTs": 378538525 }, { "lcpInvalidated": false @@ -9788,19 +9029,19 @@ "numScripts": 12, "numStylesheets": 7, "numFonts": 4, - "numTasks": 2313, - "numTasksOver10ms": 9, - "numTasksOver25ms": 5, + "numTasks": 3176, + "numTasksOver10ms": 12, + "numTasksOver25ms": 8, "numTasksOver50ms": 4, - "numTasksOver100ms": 0, + "numTasksOver100ms": 2, "numTasksOver500ms": 0, - "rtt": 1.4580000000000002, - "throughput": 6451576.356703875, - "maxRtt": 73.795, - "maxServerLatency": 22.790999999999997, - "totalByteWeight": 7910787, - "totalTaskTime": 672.9709999999984, - "mainDocumentTransferSize": 123017 + "rtt": 0.8640000000000003, + "throughput": 4751855.716312014, + "maxRtt": 115.809, + "maxServerLatency": 84.928, + "totalByteWeight": 10150651, + "totalTaskTime": 918.9219999999939, + "mainDocumentTransferSize": 123071 } ] } @@ -9821,7 +9062,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "D-", "testsslExpireSoon": false, "testsslExpireDate": "2025-04-10T21:59:00.000Z", "testsslGrade": "A+", @@ -9829,8 +9069,8 @@ "cookiesCount": 2, "trackersGrade": "F", "trackersCount": 37, - "lighthouse_performance": 0.39, - "lighthouse_performanceGrade": "D", + "lighthouse_performance": 0.26, + "lighthouse_performanceGrade": "E", "lighthouse_accessibility": 0.91, "lighthouse_accessibilityGrade": "A", "lighthouse_best-practices": 0.8, @@ -9851,199 +9091,7 @@ "emploi", "formation" ], - "http": { - "url": "https://certificationprofessionnelle.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 01:35:31 GMT", - "grade": "F", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "content-encoding": "gzip", - "content-type": "text/html; charset=UTF-8", - "date": "Sun, 21 Jul 2024 01:35:26 GMT", - "last-modified": "Sat, 20 Jul 2024 16:29:29 GMT", - "server": "nginx/1.24.0", - "strict-transport-security": "max-age=63072000", - "transfer-encoding": "chunked", - "x-content-type-options": "nosniff", - "x-server": "web02", - "x-xss-protection": "1; mode=block" - }, - "scan_id": 53616155, - "score": 0, - "start_time": "Sun, 21 Jul 2024 01:35:24 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 4, - "tests_passed": 7, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": null, - "sameSite": null - }, - "pass": true, - "result": "cookies-not-found", - "score_description": "No cookies detected", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://www.francecompetences.fr/", - "redirects": true, - "route": [ - "http://certificationprofessionnelle.fr/", - "https://www.francecompetences.fr/" - ], - "status_code": 301 - }, - "pass": false, - "result": "redirection-off-host-from-http", - "score_description": "Initial redirection from HTTP to HTTPS is to a different host, preventing HSTS", - "score_modifier": -5 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=63072000", - "includeSubDomains": false, - "max-age": 63072000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": { - "//www.francecompetences.fr/app/uploads/pum/pum-site-scripts.js?defer&generated=1716481430&ver=1.18.5": { - "crossorigin": null, - "integrity": null - }, - "https://app2.kapitaliser.com/antilop/app/teambrain/externalApp/front/extAccess/dist/tb-external-v1.js?v=1.0&s=c0M1TTFwNGdTSnpucWV4ZS9RZ3N0OXdxWkliY0ZlcHpndEZKeHlFbk5Kaz0=&c=OXlJZ3BoSDZpK0lzeUEzUGFxWFBpVFp6V3JpOGVnNnR2TmpWbE1LcmttdFR3N2JpR0FQSmJYcHJ1YTJ3TnQydg==&app=SW1LaUM1cVk5RWxuZEZ0Q21QRFZ1Zz09&t=eEZBcnR4N1dkaXNZZDBGRnBiN1MyUT09&key=c0M1TTFwNGdTSnpucWV4ZS9RZ3N0NFphWStKRUtiRm1oY0RWOXRZNS9OQjJya1lzeVEzK1A4OGk3TFlVekZidE1VQUpzU0dYdmNmbXdsMVdOSW1rM1lWZVM1VTh4NTRFZHdMNFdCdjQvM3M9": { - "crossorigin": null, - "integrity": null - }, - "https://cdn.jsdelivr.net/npm/jquery-captcha@2.3.2/dist/jquery-captcha.min.js": { - "crossorigin": null, - "integrity": null - }, - "https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.13/js/select2.min.js": { - "crossorigin": null, - "integrity": null - }, - "https://code.jquery.com/jquery-3.7.1.min.js": { - "crossorigin": null, - "integrity": null - } - } - }, - "pass": false, - "result": "sri-not-implemented-and-external-scripts-not-loaded-securely", - "score_description": "Subresource Integrity (SRI) not implemented, and external scripts are loaded over HTTP or use protocol-relative URLs via src=\"//...\"", - "score_modifier": -50 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-frame-options-not-implemented", - "score_description": "X-Frame-Options (XFO) header not implemented", - "score_modifier": -20 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": "1; mode=block" - }, - "pass": true, - "result": "x-xss-protection-enabled-mode-block", - "score_description": "Deprecated X-XSS-Protection header set to \"1; mode=block\"", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -10256,7 +9304,7 @@ "ip": "certificationprofessionnelle.fr/217.70.184.55", "port": "443", "severity": "INFO", - "finding": "valid for 300 seconds only (= 60 days" + "finding": "324 >= 60 days" }, { "id": "cert_notBefore", @@ -11134,7 +10182,7 @@ "ip": "certificationprofessionnelle.fr/217.70.184.55", "port": "443", "severity": "INFO", - "finding": "53" + "finding": "54" } ], "thirdparties": { @@ -11157,11 +10205,11 @@ }, { "type": "unknown", - "url": "https://www.francecompetences.fr/app/uploads/pum/pum-site-styles.css?generated=1716481429&ver=1.18.5" + "url": "https://www.francecompetences.fr/app/uploads/pum/pum-site-styles.css?generated=1721914231&ver=1.19.0" }, { "type": "unknown", - "url": "https://www.francecompetences.fr/app/themes/france-competences/public/css/app.55222d.css" + "url": "https://www.francecompetences.fr/app/themes/france-competences/public/css/app.fedc0d.css" }, { "type": "unknown", @@ -11191,10 +10239,6 @@ "message": "Host files locally" } }, - { - "type": "unknown", - "url": "https://app2.kapitaliser.com/antilop/app/teambrain/externalApp/front/extAccess/dist/tb-external-v1.js?v=1.0&s=c0M1TTFwNGdTSnpucWV4ZS9RZ3N0OXdxWkliY0ZlcHpndEZKeHlFbk5Kaz0=&c=OXlJZ3BoSDZpK0lzeUEzUGFxWFBpVFp6V3JpOGVnNnR2TmpWbE1LcmttdFR3N2JpR0FQSmJYcHJ1YTJ3TnQydg==&app=SW1LaUM1cVk5RWxuZEZ0Q21QRFZ1Zz09&t=eEZBcnR4N1dkaXNZZDBGRnBiN1MyUT09&key=c0M1TTFwNGdTSnpucWV4ZS9RZ3N0NFphWStKRUtiRm1oY0RWOXRZNS9OQjJya1lzeVEzK1A4OGk3TFlVekZidE1VQUpzU0dYdmNmbXdsMVdOSW1rM1lWZVM1VTh4NTRFZHdMNFdCdjQvM3M9" - }, { "type": "cloudflare", "url": "https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.13/css/select2.min.css", @@ -11211,6 +10255,10 @@ "message": "Host files locally" } }, + { + "type": "unknown", + "url": "https://app2.kapitaliser.com/antilop/app/teambrain/externalApp/front/extAccess/dist/tb-external-v1.js?v=1.0&s=c0M1TTFwNGdTSnpucWV4ZS9RZ3N0OXdxWkliY0ZlcHpndEZKeHlFbk5Kaz0=&c=OXlJZ3BoSDZpK0lzeUEzUGFxWFBpVFp6V3JpOGVnNnR2TmpWbE1LcmttdFR3N2JpR0FQSmJYcHJ1YTJ3TnQydg==&app=SW1LaUM1cVk5RWxuZEZ0Q21QRFZ1Zz09&t=eEZBcnR4N1dkaXNZZDBGRnBiN1MyUT09&key=c0M1TTFwNGdTSnpucWV4ZS9RZ3N0NFphWStKRUtiRm1oY0RWOXRZNS9OQjJya1lzeVEzK1A4OGk3TFlVekZidE1VQUpzU0dYdmNmbXdsMVdOSW1rM1lWZVM1VTh4NTRFZHdMNFdCdjQvM3M9" + }, { "type": "google fonts", "url": "https://fonts.googleapis.com/css?family=Montserrat:500", @@ -11257,7 +10305,7 @@ }, { "type": "unknown", - "url": "https://www.francecompetences.fr/app/uploads/pum/pum-site-scripts.js?defer&generated=1716481430&ver=1.18.5" + "url": "https://www.francecompetences.fr/app/uploads/pum/pum-site-scripts.js?defer&generated=1721914231&ver=1.19.0" }, { "type": "unknown", @@ -11301,7 +10349,7 @@ }, { "type": "unknown", - "url": "https://www.francecompetences.fr/app/themes/france-competences/public/js/app.65a4c1.js" + "url": "https://www.francecompetences.fr/app/themes/france-competences/public/js/app.9b2119.js" }, { "type": "unknown", @@ -11459,6 +10507,10 @@ "type": "unknown", "url": "https://www.francecompetences.fr/app/themes/france-competences/public/fonts/Marianne-Bold.702e12.woff2" }, + { + "type": "unknown", + "url": "https://www.francecompetences.fr/app/themes/france-competences/public/fonts/Marianne-Bold.702e12.woff2" + }, { "type": "unknown", "url": "https://www.francecompetences.fr/app/themes/france-competences/public/images/arrows/arrow--point--blue.42c531.svg" @@ -11475,10 +10527,6 @@ "type": "unknown", "url": "https://www.francecompetences.fr/app/themes/france-competences/public/fonts/Marianne-Medium.3d17f2.woff2" }, - { - "type": "unknown", - "url": "https://www.francecompetences.fr/app/themes/france-competences/public/fonts/Marianne-Bold.702e12.woff2" - }, { "type": "unknown", "url": "https://www.francecompetences.fr/app/themes/france-competences/public/fonts/Marianne-Regular.4349f0.woff2" @@ -11509,7 +10557,7 @@ }, { "type": "unknown", - "url": "https://matomo.francecompetences.fr/matomo.php?action_name=Accueil%20-%20France%20comp%C3%A9tences&idsite=6&rec=1&r=601980&h=1&m=35&s=46&url=https%3A%2F%2Fwww.francecompetences.fr%2F&_id=3690d4c3a187a237&_idn=1&send_image=0&_refts=0&cookie=1&res=800x600&pv_id=EEPhnR&pf_net=175&pf_srv=164&pf_tfr=12&uadata=%7B%22fullVersionList%22%3A%5B%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22%22%2C%22platformVersion%22%3A%22%22%7D" + "url": "https://matomo.francecompetences.fr/matomo.php?action_name=Accueil%20-%20France%20comp%C3%A9tences&idsite=6&rec=1&r=809815&h=1&m=37&s=52&url=https%3A%2F%2Fwww.francecompetences.fr%2F&_id=5dde776a52b52997&_idn=1&send_image=0&_refts=0&cookie=1&res=800x600&pv_id=rh1di6&pf_net=180&pf_srv=170&pf_tfr=11&uadata=%7B%22fullVersionList%22%3A%5B%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22%22%2C%22platformVersion%22%3A%22%22%7D" } ], "cookies": [ @@ -11518,7 +10566,7 @@ "value": "1", "domain": "www.francecompetences.fr", "path": "/", - "expires": 1721527546, + "expires": 1722132472, "size": 15, "httpOnly": false, "secure": false, @@ -11530,10 +10578,10 @@ }, { "name": "_pk_id.6.c493", - "value": "3690d4c3a187a237.1721525747.", + "value": "5dde776a52b52997.1722130672.", "domain": "www.francecompetences.fr", "path": "/", - "expires": 1755480947, + "expires": 1756085872, "size": 41, "httpOnly": false, "secure": false, @@ -11547,13 +10595,13 @@ "headers": { "content-encoding": "gzip", "content-type": "text/html; charset=UTF-8", - "date": "Sun, 21 Jul 2024 01:35:45 GMT", - "last-modified": "Sat, 20 Jul 2024 16:29:29 GMT", + "date": "Sun, 28 Jul 2024 01:37:50 GMT", + "last-modified": "Sat, 27 Jul 2024 17:29:28 GMT", "server": "nginx/1.24.0", "strict-transport-security": "max-age=63072000", "transfer-encoding": "chunked", "x-content-type-options": "nosniff", - "x-server": "web01", + "x-server": "web02", "x-xss-protection": "1; mode=block" }, "endpoints": [ @@ -11671,7 +10719,7 @@ }, { "hostname": "code.jquery.com", - "ip": "151.101.194.137", + "ip": "151.101.66.137", "geoip": { "city": { "geoname_id": 5391959, @@ -11776,9 +10824,29 @@ } } }, + { + "hostname": "cdnjs.cloudflare.com", + "ip": "104.17.24.14", + "geoip": { + "registered_country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + } + } + }, { "hostname": "app2.kapitaliser.com", - "ip": "54.77.188.246", + "ip": "46.137.31.59", "geoip": { "city": { "geoname_id": 2964574, @@ -11823,7 +10891,7 @@ } }, "location": { - "accuracy_radius": 200, + "accuracy_radius": 20, "latitude": 53.3379, "longitude": -6.2591, "time_zone": "Europe/Dublin" @@ -11832,17 +10900,18 @@ "code": "D02" }, "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", + "geoname_id": 2963597, + "is_in_european_union": true, + "iso_code": "IE", "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" + "de": "Irland", + "en": "Ireland", + "es": "Irlanda", + "fr": "Irlande", + "ja": "アイルランド", + "pt-BR": "Irlanda", + "ru": "Ирландия", + "zh-CN": "爱尔兰" } }, "subdivisions": [ @@ -11859,26 +10928,6 @@ ] } }, - { - "hostname": "cdnjs.cloudflare.com", - "ip": "104.17.25.14", - "geoip": { - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - } - } - }, { "hostname": "fonts.googleapis.com", "ip": "142.251.111.95", @@ -12060,7 +11109,7 @@ "type": "dns", "host": "certificationprofessionnelle.fr.", "matched-at": "certificationprofessionnelle.fr", - "timestamp": "2024-07-21T01:37:11.428460075Z", + "timestamp": "2024-07-28T01:39:16.054601708Z", "matcher-status": true }, { @@ -12092,7 +11141,7 @@ "extracted-results": [ "v=spf1 include:_mailcust.gandi.net ?all\"" ], - "timestamp": "2024-07-21T01:37:11.640954255Z", + "timestamp": "2024-07-28T01:39:16.179423645Z", "matcher-status": true }, { @@ -12130,7 +11179,7 @@ "extracted-results": [ "\"v=spf1 include:_mailcust.gandi.net ?all\"" ], - "timestamp": "2024-07-21T01:37:11.641076619Z", + "timestamp": "2024-07-28T01:39:16.179529302Z", "matcher-status": true }, { @@ -12163,11 +11212,11 @@ "host": "certificationprofessionnelle.fr.", "matched-at": "certificationprofessionnelle.fr", "extracted-results": [ - "ns-82-b.gandi.net.", + "ns-122-c.gandi.net.", "ns-37-a.gandi.net.", - "ns-122-c.gandi.net." + "ns-82-b.gandi.net." ], - "timestamp": "2024-07-21T01:37:12.424647818Z", + "timestamp": "2024-07-28T01:39:16.308795785Z", "matcher-status": true }, { @@ -12204,10 +11253,10 @@ "host": "certificationprofessionnelle.fr.", "matched-at": "certificationprofessionnelle.fr", "extracted-results": [ - "50 fb.mail.gandi.net.", - "10 spool.mail.gandi.net." + "10 spool.mail.gandi.net.", + "50 fb.mail.gandi.net." ], - "timestamp": "2024-07-21T01:37:12.508354017Z", + "timestamp": "2024-07-28T01:39:17.068734629Z", "matcher-status": true }, { @@ -12238,7 +11287,7 @@ "host": "https://certificationprofessionnelle.fr", "matched-at": "https://www.francecompetences.fr/", "ip": "217.70.184.55", - "timestamp": "2024-07-21T01:37:54.065964421Z", + "timestamp": "2024-07-28T01:40:00.228079591Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://certificationprofessionnelle.fr'", "matcher-status": true }, @@ -12277,15 +11326,15 @@ "cvss-metrics": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N" } }, - "extractor-name": "registrantPhone", + "extractor-name": "expirationDate", "type": "http", "host": "https://certificationprofessionnelle.fr", "matched-at": "https://rdap.nic.fr/domain/certificationprofessionnelle.fr", "extracted-results": [ - "+33.181690140" + "2025-04-01T13:41:53Z" ], "ip": "64.176.191.126", - "timestamp": "2024-07-21T01:38:09.048977061Z", + "timestamp": "2024-07-28T01:40:15.604582735Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.rdap.net/domain/certificationprofessionnelle.fr'", "matcher-status": true }, @@ -12324,17 +11373,15 @@ "cvss-metrics": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N" } }, - "extractor-name": "nameServers", + "extractor-name": "registrantOrg", "type": "http", "host": "https://certificationprofessionnelle.fr", "matched-at": "https://rdap.nic.fr/domain/certificationprofessionnelle.fr", "extracted-results": [ - "ns-37-a.gandi.net", - "ns-122-c.gandi.net", - "ns-82-b.gandi.net" + "France Competences" ], "ip": "64.176.191.126", - "timestamp": "2024-07-21T01:38:09.049029087Z", + "timestamp": "2024-07-28T01:40:15.604633479Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.rdap.net/domain/certificationprofessionnelle.fr'", "matcher-status": true }, @@ -12373,15 +11420,15 @@ "cvss-metrics": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N" } }, - "extractor-name": "registrationDate", + "extractor-name": "registrantPhone", "type": "http", "host": "https://certificationprofessionnelle.fr", "matched-at": "https://rdap.nic.fr/domain/certificationprofessionnelle.fr", "extracted-results": [ - "2019-04-01T13:41:53Z" + "+33.181690140" ], "ip": "64.176.191.126", - "timestamp": "2024-07-21T01:38:09.049049525Z", + "timestamp": "2024-07-28T01:40:15.60464978Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.rdap.net/domain/certificationprofessionnelle.fr'", "matcher-status": true }, @@ -12420,15 +11467,18 @@ "cvss-metrics": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N" } }, - "extractor-name": "expirationDate", + "extractor-name": "registrantAddress", "type": "http", "host": "https://certificationprofessionnelle.fr", "matched-at": "https://rdap.nic.fr/domain/certificationprofessionnelle.fr", "extracted-results": [ - "2025-04-01T13:41:53Z" + "11 Rue Scribe", + "Paris", + "75009", + "FR" ], "ip": "64.176.191.126", - "timestamp": "2024-07-21T01:38:09.049069311Z", + "timestamp": "2024-07-28T01:40:15.604689273Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.rdap.net/domain/certificationprofessionnelle.fr'", "matcher-status": true }, @@ -12467,15 +11517,17 @@ "cvss-metrics": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N" } }, - "extractor-name": "registrantName", + "extractor-name": "nameServers", "type": "http", "host": "https://certificationprofessionnelle.fr", "matched-at": "https://rdap.nic.fr/domain/certificationprofessionnelle.fr", "extracted-results": [ - "France Competences" + "ns-37-a.gandi.net", + "ns-82-b.gandi.net", + "ns-122-c.gandi.net" ], "ip": "64.176.191.126", - "timestamp": "2024-07-21T01:38:09.04908488Z", + "timestamp": "2024-07-28T01:40:15.60470874Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.rdap.net/domain/certificationprofessionnelle.fr'", "matcher-status": true }, @@ -12514,15 +11566,15 @@ "cvss-metrics": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N" } }, - "extractor-name": "registrantOrg", + "extractor-name": "secureDNS", "type": "http", "host": "https://certificationprofessionnelle.fr", "matched-at": "https://rdap.nic.fr/domain/certificationprofessionnelle.fr", "extracted-results": [ - "France Competences" + "false" ], "ip": "64.176.191.126", - "timestamp": "2024-07-21T01:38:09.049098676Z", + "timestamp": "2024-07-28T01:40:15.604725761Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.rdap.net/domain/certificationprofessionnelle.fr'", "matcher-status": true }, @@ -12561,15 +11613,15 @@ "cvss-metrics": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N" } }, - "extractor-name": "registrantEmail", + "extractor-name": "status", "type": "http", "host": "https://certificationprofessionnelle.fr", "matched-at": "https://rdap.nic.fr/domain/certificationprofessionnelle.fr", "extracted-results": [ - "ae8a7d192ed3e16975adf16140c425e5-12583060@contact.gandi.net" + "active" ], "ip": "64.176.191.126", - "timestamp": "2024-07-21T01:38:09.049111409Z", + "timestamp": "2024-07-28T01:40:15.604740599Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.rdap.net/domain/certificationprofessionnelle.fr'", "matcher-status": true }, @@ -12608,18 +11660,15 @@ "cvss-metrics": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N" } }, - "extractor-name": "registrantAddress", + "extractor-name": "lastChangeDate", "type": "http", "host": "https://certificationprofessionnelle.fr", "matched-at": "https://rdap.nic.fr/domain/certificationprofessionnelle.fr", "extracted-results": [ - "75009", - "FR", - "11 Rue Scribe", - "Paris" + "2024-03-12T13:58:49.455956Z" ], "ip": "64.176.191.126", - "timestamp": "2024-07-21T01:38:09.049124493Z", + "timestamp": "2024-07-28T01:40:15.604755126Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.rdap.net/domain/certificationprofessionnelle.fr'", "matcher-status": true }, @@ -12658,15 +11707,15 @@ "cvss-metrics": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N" } }, - "extractor-name": "registrantCountry", + "extractor-name": "registrantName", "type": "http", "host": "https://certificationprofessionnelle.fr", "matched-at": "https://rdap.nic.fr/domain/certificationprofessionnelle.fr", "extracted-results": [ - "FR" + "France Competences" ], "ip": "64.176.191.126", - "timestamp": "2024-07-21T01:38:09.04913869Z", + "timestamp": "2024-07-28T01:40:15.604768912Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.rdap.net/domain/certificationprofessionnelle.fr'", "matcher-status": true }, @@ -12705,15 +11754,15 @@ "cvss-metrics": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N" } }, - "extractor-name": "secureDNS", + "extractor-name": "registrantEmail", "type": "http", "host": "https://certificationprofessionnelle.fr", "matched-at": "https://rdap.nic.fr/domain/certificationprofessionnelle.fr", "extracted-results": [ - "false" + "ae8a7d192ed3e16975adf16140c425e5-12583060@contact.gandi.net" ], "ip": "64.176.191.126", - "timestamp": "2024-07-21T01:38:09.049157294Z", + "timestamp": "2024-07-28T01:40:15.604782888Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.rdap.net/domain/certificationprofessionnelle.fr'", "matcher-status": true }, @@ -12752,15 +11801,15 @@ "cvss-metrics": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N" } }, - "extractor-name": "status", + "extractor-name": "registrantCountry", "type": "http", "host": "https://certificationprofessionnelle.fr", "matched-at": "https://rdap.nic.fr/domain/certificationprofessionnelle.fr", "extracted-results": [ - "active" + "FR" ], "ip": "64.176.191.126", - "timestamp": "2024-07-21T01:38:09.049170368Z", + "timestamp": "2024-07-28T01:40:15.604797355Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.rdap.net/domain/certificationprofessionnelle.fr'", "matcher-status": true }, @@ -12799,15 +11848,15 @@ "cvss-metrics": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N" } }, - "extractor-name": "lastChangeDate", + "extractor-name": "registrationDate", "type": "http", "host": "https://certificationprofessionnelle.fr", "matched-at": "https://rdap.nic.fr/domain/certificationprofessionnelle.fr", "extracted-results": [ - "2024-03-12T13:58:49.455956Z" + "2019-04-01T13:41:53Z" ], "ip": "64.176.191.126", - "timestamp": "2024-07-21T01:38:09.049183903Z", + "timestamp": "2024-07-28T01:40:15.60481099Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.rdap.net/domain/certificationprofessionnelle.fr'", "matcher-status": true }, @@ -12841,35 +11890,35 @@ "host": "https://certificationprofessionnelle.fr", "matched-at": "https://www.francecompetences.fr/", "extracted-results": [ + "https://www.francecompetences.fr/wp/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6", + "https://www.francecompetences.fr/wp/wp-includes/js/jquery/jquery.min.js?ver=3.7.1", "https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.13/js/select2.min.js", + "https://app2.kapitaliser.com/antilop/app/teambrain/externalApp/front/extAccess/dist/tb-external-v1.js?v=1.0&s=c0M1TTFwNGdTSnpucWV4ZS9RZ3N0OXdxWkliY0ZlcHpndEZKeHlFbk5Kaz0=&c=OXlJZ3BoSDZpK0lzeUEzUGFxWFBpVFp6V3JpOGVnNnR2TmpWbE1LcmttdFR3N2JpR0FQSmJYcHJ1YTJ3TnQydg==&app=SW1LaUM1cVk5RWxuZEZ0Q21QRFZ1Zz09&t=eEZBcnR4N1dkaXNZZDBGRnBiN1MyUT09&key=c0M1TTFwNGdTSnpucWV4ZS9RZ3N0NFphWStKRUtiRm1oY0RWOXRZNS9OQjJya1lzeVEzK1A4OGk3TFlVekZidE1VQUpzU0dYdmNmbXdsMVdOSW1rM1lWZVM1VTh4NTRFZHdMNFdCdjQvM3M9", + "https://www.francecompetences.fr/app/themes/france-competences/public/scripts/components/modalNavigation.6bb733.js", + "https://www.francecompetences.fr/app/themes/france-competences/public/scripts/components/modalNavigationMobile.b1211f.js", + "https://www.francecompetences.fr/wp/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0", + "https://www.francecompetences.fr/wp/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1", "https://www.francecompetences.fr/app/themes/france-competences/public/scripts/blocks/homeBannerNavigation.3842fd.js", - "https://www.francecompetences.fr/app/themes/france-competences/public/scripts/blocks/blockDocuments.256f6c.js", "https://www.francecompetences.fr/app/themes/france-competences/public/scripts/components/modal.1f0fcc.js", - "https://www.francecompetences.fr/app/plugins/safe-svg/dist/safe-svg-block-frontend.js?ver=556b801b5c62d7bda047", "https://www.francecompetences.fr/wp/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0", - "https://www.francecompetences.fr/wp/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18", "https://www.francecompetences.fr/wp/wp-includes/js/dist/api-fetch.min.js?ver=4c185334c5ec26e149cc", - "https://cdn.jsdelivr.net/npm/jquery-captcha@2.3.2/dist/jquery-captcha.min.js", - "https://www.francecompetences.fr/app/themes/france-competences/public/scripts/components/modalNavigation.6bb733.js", - "https://www.francecompetences.fr/wp/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0", - "https://www.francecompetences.fr/wp/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6", - "https://www.francecompetences.fr/wp/wp-includes/js/dist/url.min.js?ver=421139b01f33e5b327d8", - "https://www.francecompetences.fr/app/plugins/glossary-by-codeat-premium/public/assets/js/off-screen.js?ver=1.8.7", - "https://www.francecompetences.fr/wp/wp-includes/js/jquery/jquery.min.js?ver=3.7.1", + "https://www.francecompetences.fr/app/themes/france-competences/public/js/app.9b2119.js", "https://code.jquery.com/jquery-3.7.1.min.js", - "//www.francecompetences.fr/app/uploads/pum/pum-site-scripts.js?defer&generated=1716481430&ver=1.18.5", - "https://www.francecompetences.fr/app/themes/france-competences/public/js/259.7edc5d.js", + "https://cdn.jsdelivr.net/npm/jquery-captcha@2.3.2/dist/jquery-captcha.min.js", + "https://www.francecompetences.fr/wp/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2", + "https://www.francecompetences.fr/wp/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18", "https://www.francecompetences.fr/app/themes/france-competences/public/js/735.bbf4c0.js", - "https://www.francecompetences.fr/app/themes/france-competences/public/js/app.65a4c1.js", - "https://www.francecompetences.fr/wp/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1", - "https://app2.kapitaliser.com/antilop/app/teambrain/externalApp/front/extAccess/dist/tb-external-v1.js?v=1.0&s=c0M1TTFwNGdTSnpucWV4ZS9RZ3N0OXdxWkliY0ZlcHpndEZKeHlFbk5Kaz0=&c=OXlJZ3BoSDZpK0lzeUEzUGFxWFBpVFp6V3JpOGVnNnR2TmpWbE1LcmttdFR3N2JpR0FQSmJYcHJ1YTJ3TnQydg==&app=SW1LaUM1cVk5RWxuZEZ0Q21QRFZ1Zz09&t=eEZBcnR4N1dkaXNZZDBGRnBiN1MyUT09&key=c0M1TTFwNGdTSnpucWV4ZS9RZ3N0NFphWStKRUtiRm1oY0RWOXRZNS9OQjJya1lzeVEzK1A4OGk3TFlVekZidE1VQUpzU0dYdmNmbXdsMVdOSW1rM1lWZVM1VTh4NTRFZHdMNFdCdjQvM3M9", + "https://www.francecompetences.fr/app/themes/france-competences/public/js/259.7edc5d.js", + "https://www.francecompetences.fr/app/plugins/glossary-by-codeat-premium/public/assets/js/off-screen.js?ver=1.8.7", + "https://www.francecompetences.fr/app/themes/france-competences/public/scripts/blocks/blockDocuments.256f6c.js", "https://www.francecompetences.fr/app/themes/france-competences/public/scripts/blocks/homeBannerNavigationMobile.150fec.js", - "https://www.francecompetences.fr/app/themes/france-competences/public/scripts/components/modalNavigationMobile.b1211f.js", + "https://www.francecompetences.fr/app/plugins/safe-svg/dist/safe-svg-block-frontend.js?ver=556b801b5c62d7bda047", "https://www.francecompetences.fr/wp/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2", - "https://www.francecompetences.fr/wp/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2" + "//www.francecompetences.fr/app/uploads/pum/pum-site-scripts.js?defer&generated=1721914231&ver=1.19.0", + "https://www.francecompetences.fr/wp/wp-includes/js/dist/url.min.js?ver=421139b01f33e5b327d8" ], "ip": "217.70.184.55", - "timestamp": "2024-07-21T01:38:14.034468737Z", + "timestamp": "2024-07-28T01:40:21.024699564Z", "curl-command": "curl -X 'GET' -d '' -H 'Host: certificationprofessionnelle.fr' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://certificationprofessionnelle.fr/'", "matcher-status": true }, @@ -12916,7 +11965,7 @@ "host": "https://certificationprofessionnelle.fr", "matched-at": "https://www.francecompetences.fr/", "ip": "217.70.184.55", - "timestamp": "2024-07-21T01:38:21.462021151Z", + "timestamp": "2024-07-28T01:40:28.800877405Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://certificationprofessionnelle.fr'", "matcher-status": true }, @@ -12947,7 +11996,7 @@ "Gandi" ], "ip": "217.70.184.55", - "timestamp": "2024-07-21T01:40:11.066715589Z", + "timestamp": "2024-07-28T01:42:09.101438681Z", "matcher-status": true }, { @@ -12977,7 +12026,7 @@ "certificationprofessionnelle.fr" ], "ip": "217.70.184.55", - "timestamp": "2024-07-21T01:40:11.066948881Z", + "timestamp": "2024-07-28T01:42:09.101558404Z", "matcher-status": true }, { @@ -13008,7 +12057,7 @@ "tls12" ], "ip": "217.70.184.55", - "timestamp": "2024-07-21T01:40:21.153027817Z", + "timestamp": "2024-07-28T01:42:10.386905004Z", "matcher-status": true }, { @@ -13039,7 +12088,7 @@ "tls13" ], "ip": "217.70.184.55", - "timestamp": "2024-07-21T01:40:31.011161867Z", + "timestamp": "2024-07-28T01:42:10.600757225Z", "matcher-status": true } ], @@ -13047,7 +12096,7 @@ { "requestedUrl": "https://certificationprofessionnelle.fr/", "finalUrl": "https://www.francecompetences.fr/", - "fetchTime": "2024-07-21T01:35:11.746Z", + "fetchTime": "2024-07-28T01:36:23.598Z", "runWarnings": [ "The page may not be loading as expected because your test URL (https://certificationprofessionnelle.fr/) was redirected to https://www.francecompetences.fr/. Try testing the second URL directly." ], @@ -13062,7 +12111,7 @@ "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", "id": "accessibility", - "score": 0.84 + "score": 0.82 }, "best-practices": { "title": "Best Practices", @@ -13091,49 +12140,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 9274, + "numericValue": 9205, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 6828, - "firstMeaningfulPaint": 6828, - "largestContentfulPaint": 20066, - "firstCPUIdle": 6828, - "interactive": 9274, - "speedIndex": 6828, + "firstContentfulPaint": 6773, + "firstMeaningfulPaint": 6773, + "largestContentfulPaint": 20180, + "firstCPUIdle": 6773, + "interactive": 9205, + "speedIndex": 6773, "estimatedInputLatency": 13, - "totalBlockingTime": 7, - "maxPotentialFID": 64, + "totalBlockingTime": 4, + "maxPotentialFID": 57, "cumulativeLayoutShift": 0.0066760525173611114, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 396016451, + "observedTimeOriginTs": 379022306, "observedNavigationStart": 0, - "observedNavigationStartTs": 396016451, - "observedFirstPaint": 1058, - "observedFirstPaintTs": 397074420, - "observedFirstContentfulPaint": 1099, - "observedFirstContentfulPaintTs": 397115499, - "observedFirstMeaningfulPaint": 1099, - "observedFirstMeaningfulPaintTs": 397115499, - "observedLargestContentfulPaint": 1766, - "observedLargestContentfulPaintTs": 397782649, - "observedTraceEnd": 3337, - "observedTraceEndTs": 399353667, - "observedLoad": 2281, - "observedLoadTs": 398297306, - "observedDomContentLoaded": 2079, - "observedDomContentLoadedTs": 398095162, + "observedNavigationStartTs": 379022306, + "observedFirstPaint": 1097, + "observedFirstPaintTs": 380119574, + "observedFirstContentfulPaint": 1137, + "observedFirstContentfulPaintTs": 380159432, + "observedFirstMeaningfulPaint": 1137, + "observedFirstMeaningfulPaintTs": 380159432, + "observedLargestContentfulPaint": 1915, + "observedLargestContentfulPaintTs": 380936810, + "observedTraceEnd": 3371, + "observedTraceEndTs": 382393676, + "observedLoad": 2316, + "observedLoadTs": 381337837, + "observedDomContentLoaded": 2221, + "observedDomContentLoadedTs": 381243386, "observedCumulativeLayoutShift": 0.0066760525173611114, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 1100, - "observedFirstVisualChangeTs": 397116451, - "observedLastVisualChange": 2550, - "observedLastVisualChangeTs": 398566451, - "observedSpeedIndex": 1358, - "observedSpeedIndexTs": 397374771 + "observedFirstVisualChange": 1145, + "observedFirstVisualChangeTs": 380167306, + "observedLastVisualChange": 2695, + "observedLastVisualChangeTs": 381717306, + "observedSpeedIndex": 1485, + "observedSpeedIndexTs": 380507112 }, { "lcpInvalidated": false @@ -13155,19 +12204,19 @@ "numScripts": 28, "numStylesheets": 9, "numFonts": 3, - "numTasks": 1705, - "numTasksOver10ms": 5, - "numTasksOver25ms": 2, + "numTasks": 1779, + "numTasksOver10ms": 6, + "numTasksOver25ms": 1, "numTasksOver50ms": 0, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 1.4090000000000007, - "throughput": 36423085.74148431, - "maxRtt": 82.381, - "maxServerLatency": 81.18299999999999, - "totalByteWeight": 5282183, - "totalTaskTime": 364.81699999999705, - "mainDocumentTransferSize": 36672 + "rtt": 5.505000000000001, + "throughput": 33886201.5476632, + "maxRtt": 85.943, + "maxServerLatency": 83.34000000000002, + "totalByteWeight": 5294889, + "totalTaskTime": 324.753999999997, + "mainDocumentTransferSize": 36286 } ] } @@ -13188,7 +12237,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "F", "testsslExpireSoon": false, "testsslExpireDate": "2025-06-17T23:59:00.000Z", "testsslGrade": "A", @@ -13198,8 +12246,8 @@ "trackersCount": 88, "lighthouse_performance": 0.42, "lighthouse_performanceGrade": "D", - "lighthouse_accessibility": 0.84, - "lighthouse_accessibilityGrade": "A", + "lighthouse_accessibility": 0.82, + "lighthouse_accessibilityGrade": "B", "lighthouse_best-practices": 0.87, "lighthouse_best-practicesGrade": "A", "lighthouse_seo": 0.75, @@ -13216,194 +12264,7 @@ "tags": [ "social" ], - "http": { - "url": "https://cnaop.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 01:51:00 GMT", - "grade": "B", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Length": "5412", - "Content-Type": "text/html; charset=utf-8", - "Date": "Sun, 21 Jul 2024 01:50:58 GMT", - "Keep-Alive": "timeout=2, max=100", - "Last-Modified": "Sun, 21 Jul 2024 01:50:58 GMT", - "Referrer-Policy": "strict-origin", - "Set-Cookie": "BIGipServerpool-dicom-cnaop-preprod.cegedim.cloud-HTTP=!GaQOBnyHtXnDUPJWDPlD0yXzT0UGhu+Ln2PNh63N06fG7C8EgmB0hz81Ssr3MM24wbKW6iK2HZOzRp8f/zYKG4jmyvE=; path=/; Httponly; Secure", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "sameorigin", - "X-Spip-Cache": "86400", - "X-XSS-Protection": "1; mode=block" - }, - "scan_id": 53616283, - "score": 75, - "start_time": "Sun, 21 Jul 2024 01:50:57 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 1, - "tests_passed": 10, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dicom-cnaop-preprod.cegedim.cloud-HTTP": { - "domain": "cnaop.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://cnaop.gouv.fr/", - "redirects": true, - "route": [ - "http://cnaop.gouv.fr/", - "https://cnaop.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": "strict-origin", - "http": true, - "meta": false - }, - "pass": true, - "result": "referrer-policy-private", - "score_description": "Referrer-Policy header set to \"no-referrer\", \"same-origin\", \"strict-origin\" or \"strict-origin-when-cross-origin\"", - "score_modifier": 5 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "sameorigin" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": "1; mode=block" - }, - "pass": true, - "result": "x-xss-protection-enabled-mode-block", - "score_description": "Deprecated X-XSS-Protection header set to \"1; mode=block\"", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -13749,7 +12610,7 @@ "ip": "cnaop.gouv.fr/185.194.82.142", "port": "443", "severity": "OK", - "finding": "321 >= 60 days" + "finding": "314 >= 60 days" }, { "id": "cert_notBefore", @@ -13910,7 +12771,7 @@ "ip": "cnaop.gouv.fr/185.194.82.142", "port": "443", "severity": "INFO", - "finding": "1721526709" + "finding": "1722131598" }, { "id": "HSTS_time", @@ -14508,7 +13369,7 @@ "ip": "cnaop.gouv.fr/185.194.82.142", "port": "443", "severity": "INFO", - "finding": "68" + "finding": "67" } ], "thirdparties": { @@ -14523,7 +13384,7 @@ }, { "type": "google analytics", - "url": "https://ssl.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=2004087146&utmhn=cnaop.gouv.fr&utmcs=UTF-8&utmsr=800x600&utmvp=800x600&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Conseil%20national%20d%27acc%C3%A8s%20aux%20origines%20personnelles%20(CNAOP)&utmhid=963633024&utmr=-&utmp=%2F&utmht=1721526677284&utmac=UA-5713943-1&utmcc=__utma%3D70848450.689790292.1721526677.1721526677.1721526677.1%3B%2B__utmz%3D70848450.1721526677.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=2073382354&utmredir=1&utmu=DAAAAAAAAAAAAAAAAAAAAAAE~", + "url": "https://ssl.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=559822895&utmhn=cnaop.gouv.fr&utmcs=UTF-8&utmsr=800x600&utmvp=800x600&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Conseil%20national%20d%27acc%C3%A8s%20aux%20origines%20personnelles%20(CNAOP)&utmhid=748594291&utmr=-&utmp=%2F&utmht=1722131566637&utmac=UA-5713943-1&utmcc=__utma%3D70848450.1213898478.1722131567.1722131567.1722131567.1%3B%2B__utmz%3D70848450.1722131567.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=438333945&utmredir=1&utmu=DAAAAAAAAAAAAAAAAAAAAAAE~", "details": { "id": "google analytics", "message": "Use hosted Matomo instance" @@ -14533,10 +13394,10 @@ "cookies": [ { "name": "__utmz", - "value": "70848450.1721526677.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)", + "value": "70848450.1722131567.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)", "domain": ".cnaop.gouv.fr", "path": "/", - "expires": 1737294677, + "expires": 1737899566, "size": 75, "httpOnly": false, "secure": false, @@ -14561,11 +13422,11 @@ }, { "name": "__utma", - "value": "70848450.689790292.1721526677.1721526677.1721526677.1", + "value": "70848450.1213898478.1722131567.1722131567.1722131567.1", "domain": ".cnaop.gouv.fr", "path": "/", - "expires": 1784598677, - "size": 59, + "expires": 1785203566, + "size": 60, "httpOnly": false, "secure": false, "session": false, @@ -14578,7 +13439,7 @@ "value": "1", "domain": ".cnaop.gouv.fr", "path": "/", - "expires": 1721527277, + "expires": 1722132166, "size": 7, "httpOnly": false, "secure": false, @@ -14589,10 +13450,10 @@ }, { "name": "__utmb", - "value": "70848450.1.10.1721526677", + "value": "70848450.1.10.1722131567", "domain": ".cnaop.gouv.fr", "path": "/", - "expires": 1721528477, + "expires": 1722133366, "size": 30, "httpOnly": false, "secure": false, @@ -14603,7 +13464,7 @@ }, { "name": "BIGipServerpool-dicom-cnaop-preprod.cegedim.cloud-HTTP", - "value": "!dnVUBq9MkpeK6wlWDPlD0yXzT0UGhkTXE31Qe9D/t0yrybV5zUZAeOmtdYZg+zmlL/gSSG9bTE1YkYmn8QQfzupS2Fo=", + "value": "!TlKkMqjMaXk37sRWDPlD0yXzT0UGhpOrzkcooZgtO4a4NKY60rJ1RZRE7U1kUnFnJVYlRe632i8Umq/d3ejmG8mRWAs=", "domain": "cnaop.gouv.fr", "path": "/", "expires": -1, @@ -14619,13 +13480,13 @@ "headers": { "connection": "Keep-Alive", "content-encoding": "gzip", - "content-length": "5412", + "content-length": "5417", "content-type": "text/html; charset=utf-8", - "date": "Sun, 21 Jul 2024 01:51:16 GMT", + "date": "Sun, 28 Jul 2024 01:52:45 GMT", "keep-alive": "timeout=2, max=100", - "last-modified": "Sun, 21 Jul 2024 01:51:16 GMT", + "last-modified": "Sun, 28 Jul 2024 01:52:45 GMT", "referrer-policy": "strict-origin", - "set-cookie": "BIGipServerpool-dicom-cnaop-preprod.cegedim.cloud-HTTP=!dnVUBq9MkpeK6wlWDPlD0yXzT0UGhkTXE31Qe9D/t0yrybV5zUZAeOmtdYZg+zmlL/gSSG9bTE1YkYmn8QQfzupS2Fo=; path=/; Httponly; Secure", + "set-cookie": "BIGipServerpool-dicom-cnaop-preprod.cegedim.cloud-HTTP=!TlKkMqjMaXk37sRWDPlD0yXzT0UGhpOrzkcooZgtO4a4NKY60rJ1RZRE7U1kUnFnJVYlRe632i8Umq/d3ejmG8mRWAs=; path=/; Httponly; Secure", "strict-transport-security": "max-age=31536000; includeSubDomains", "vary": "Accept-Encoding", "x-content-type-options": "nosniff", @@ -14692,7 +13553,7 @@ }, { "hostname": "ssl.google-analytics.com", - "ip": "142.250.190.40", + "ip": "172.253.115.97", "geoip": { "continent": { "code": "NA", @@ -14978,13 +13839,13 @@ { "requestedUrl": "https://cnaop.gouv.fr/", "finalUrl": "https://cnaop.gouv.fr/", - "fetchTime": "2024-07-21T01:50:50.798Z", + "fetchTime": "2024-07-28T01:51:25.190Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.54 + "score": 0.61 }, "accessibility": { "title": "Accessibility", @@ -15020,49 +13881,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 5525, + "numericValue": 4734, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 5525, - "firstMeaningfulPaint": 5525, - "largestContentfulPaint": 5645, - "firstCPUIdle": 5525, - "interactive": 5525, - "speedIndex": 6539, + "firstContentfulPaint": 4734, + "firstMeaningfulPaint": 4734, + "largestContentfulPaint": 5307, + "firstCPUIdle": 4734, + "interactive": 4734, + "speedIndex": 5540, "estimatedInputLatency": 13, "totalBlockingTime": 0, "maxPotentialFID": 16, "cumulativeLayoutShift": 0.0591103629453924, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 401477230, + "observedTimeOriginTs": 392485680, "observedNavigationStart": 0, - "observedNavigationStartTs": 401477230, - "observedFirstPaint": 1199, - "observedFirstPaintTs": 402676318, - "observedFirstContentfulPaint": 1199, - "observedFirstContentfulPaintTs": 402676318, - "observedFirstMeaningfulPaint": 1199, - "observedFirstMeaningfulPaintTs": 402676318, - "observedLargestContentfulPaint": 1199, - "observedLargestContentfulPaintTs": 402676318, - "observedTraceEnd": 2345, - "observedTraceEndTs": 403822155, - "observedLoad": 1188, - "observedLoadTs": 402665713, - "observedDomContentLoaded": 1172, - "observedDomContentLoadedTs": 402648848, + "observedNavigationStartTs": 392485680, + "observedFirstPaint": 922, + "observedFirstPaintTs": 393407582, + "observedFirstContentfulPaint": 922, + "observedFirstContentfulPaintTs": 393407582, + "observedFirstMeaningfulPaint": 922, + "observedFirstMeaningfulPaintTs": 393407582, + "observedLargestContentfulPaint": 988, + "observedLargestContentfulPaintTs": 393473393, + "observedTraceEnd": 2132, + "observedTraceEndTs": 394618108, + "observedLoad": 981, + "observedLoadTs": 393466368, + "observedDomContentLoaded": 940, + "observedDomContentLoadedTs": 393426126, "observedCumulativeLayoutShift": 0.0591103629453924, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 1189, - "observedFirstVisualChangeTs": 402666230, - "observedLastVisualChange": 1523, - "observedLastVisualChangeTs": 403000230, - "observedSpeedIndex": 1194, - "observedSpeedIndexTs": 402671226 + "observedFirstVisualChange": 931, + "observedFirstVisualChangeTs": 393416680, + "observedLastVisualChange": 1265, + "observedLastVisualChangeTs": 393750680, + "observedSpeedIndex": 936, + "observedSpeedIndexTs": 393421929 }, { "lcpInvalidated": false @@ -15084,19 +13945,19 @@ "numScripts": 17, "numStylesheets": 8, "numFonts": 0, - "numTasks": 365, - "numTasksOver10ms": 1, - "numTasksOver25ms": 1, + "numTasks": 340, + "numTasksOver10ms": 0, + "numTasksOver25ms": 0, "numTasksOver50ms": 0, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 2.0250000000000004, - "throughput": 5393966.247216871, - "maxRtt": 93.198, - "maxServerLatency": 5.488000000000014, - "totalByteWeight": 273911, - "totalTaskTime": 116.06100000000002, - "mainDocumentTransferSize": 6079 + "rtt": 6.651, + "throughput": 6174854.457023937, + "maxRtt": 79.318, + "maxServerLatency": 7.039999999999949, + "totalByteWeight": 273915, + "totalTaskTime": 97.66700000000006, + "mainDocumentTransferSize": 6084 } ] } @@ -15117,7 +13978,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B", "testsslExpireSoon": false, "testsslExpireDate": "2025-06-07T21:59:00.000Z", "testsslGrade": "A+", @@ -15125,7 +13985,7 @@ "cookiesCount": 6, "trackersGrade": "B", "trackersCount": 2, - "lighthouse_performance": 0.54, + "lighthouse_performance": 0.61, "lighthouse_performanceGrade": "C", "lighthouse_accessibility": 0.96, "lighthouse_accessibilityGrade": "A", @@ -15145,228 +14005,7 @@ "tags": [ "social" ], - "http": { - "url": "https://cnle.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 01:52:44 GMT", - "grade": "D", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Age": "7820", - "Cache-Control": "max-age=10800, public", - "Connection": "keep-alive", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sat, 20 Jul 2024 06:02:57 GMT", - "ETag": "W/\"1721514459-gzip\"", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Last-Modified": "Sat, 20 Jul 2024 22:27:39 GMT", - "Set-Cookie": "TSf3779cae029=087dc22938ab2800c5350d32202c8ee630447e8c2ed1b31648dccc7079e437649e7a62d0757183b743d259345aee3a9f; Max-Age=30; Path=/, TS300431cb027=087dc22938ab20007097ef38d36d29510d3e3626b6f6f36173f8888e299386a092cff27b9214f92c086d7557cf1130004ccbf4d202cd1fb425616595196e9899e2448a3456363655acbd2a955535660d9d15167bc70f5c5a551af736ef243c00; Path=/", - "Transfer-Encoding": "chunked", - "Vary": "Cookie,Accept-Encoding", - "X-Cache": "HIT", - "X-Cache-Hits": "17", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "SAMEORIGIN" - }, - "scan_id": 53616292, - "score": 35, - "start_time": "Sun, 21 Jul 2024 01:52:38 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 3, - "tests_passed": 8, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dicom-cnle-preprod.cegedim.cloud-HTTP": { - "domain": "cnle.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "BIGipServerpool-handicap-v2.cegedim.cloud-HTTP": { - "domain": "solidarites.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS300431cb027": { - "domain": "solidarites.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TSf3779cae029": { - "domain": "solidarites.gouv.fr", - "expires": 1721526794, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag", - "score_description": "Cookies set without using the Secure flag or set over HTTP", - "score_modifier": -20 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://solidarites.gouv.fr/cnle", - "redirects": true, - "route": [ - "http://cnle.gouv.fr/", - "https://cnle.gouv.fr/", - "https://solidarites.gouv.fr/cnle/", - "https://solidarites.gouv.fr/cnle" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": null, - "includeSubDomains": false, - "max-age": null, - "preload": false, - "preloaded": false - }, - "pass": false, - "result": "hsts-not-implemented", - "score_description": "HTTP Strict Transport Security (HSTS) header not implemented", - "score_modifier": -20 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -15712,7 +14351,7 @@ "ip": "cnle.gouv.fr/185.194.82.141", "port": "443", "severity": "OK", - "finding": "331 >= 60 days" + "finding": "324 >= 60 days" }, { "id": "cert_notBefore", @@ -15873,7 +14512,7 @@ "ip": "cnle.gouv.fr/185.194.82.141", "port": "443", "severity": "INFO", - "finding": "1721526810" + "finding": "1722131725" }, { "id": "HSTS_time", @@ -16450,7 +15089,7 @@ "ip": "cnle.gouv.fr/185.194.82.141", "port": "443", "severity": "INFO", - "finding": "49" + "finding": "48" } ], "thirdparties": { @@ -16556,7 +15195,7 @@ { "requestedUrl": "https://cnle.gouv.fr/", "finalUrl": "https://solidarites.gouv.fr/cnle", - "fetchTime": "2024-07-21T01:52:25.817Z", + "fetchTime": "2024-07-28T01:53:31.172Z", "runWarnings": [ "The page may not be loading as expected because your test URL (https://cnle.gouv.fr/) was redirected to https://solidarites.gouv.fr/cnle. Try testing the second URL directly." ], @@ -16564,7 +15203,7 @@ "performance": { "title": "Performance", "id": "performance", - "score": 0.13 + "score": 0.15 }, "accessibility": { "title": "Accessibility", @@ -16600,49 +15239,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 15388, + "numericValue": 15726, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 5287, - "firstMeaningfulPaint": 5386, - "largestContentfulPaint": 6172, - "firstCPUIdle": 13220, - "interactive": 15388, - "speedIndex": 11947, - "estimatedInputLatency": 3038, - "totalBlockingTime": 7288, - "maxPotentialFID": 4282, + "firstContentfulPaint": 5049, + "firstMeaningfulPaint": 5131, + "largestContentfulPaint": 5812, + "firstCPUIdle": 13906, + "interactive": 15726, + "speedIndex": 10846, + "estimatedInputLatency": 3306, + "totalBlockingTime": 7957, + "maxPotentialFID": 4616, "cumulativeLayoutShift": 0.0068238449096679685, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 481757166, + "observedTimeOriginTs": 471138527, "observedNavigationStart": 0, - "observedNavigationStartTs": 481757166, - "observedFirstPaint": 2180, - "observedFirstPaintTs": 483936675, - "observedFirstContentfulPaint": 2180, - "observedFirstContentfulPaintTs": 483936675, - "observedFirstMeaningfulPaint": 2180, - "observedFirstMeaningfulPaintTs": 483936675, - "observedLargestContentfulPaint": 2180, - "observedLargestContentfulPaintTs": 483936675, - "observedTraceEnd": 5679, - "observedTraceEndTs": 487436289, - "observedLoad": 2706, - "observedLoadTs": 484463070, - "observedDomContentLoaded": 2160, - "observedDomContentLoadedTs": 483916666, + "observedNavigationStartTs": 471138527, + "observedFirstPaint": 1926, + "observedFirstPaintTs": 473064823, + "observedFirstContentfulPaint": 1926, + "observedFirstContentfulPaintTs": 473064823, + "observedFirstMeaningfulPaint": 1926, + "observedFirstMeaningfulPaintTs": 473064823, + "observedLargestContentfulPaint": 1926, + "observedLargestContentfulPaintTs": 473064823, + "observedTraceEnd": 5403, + "observedTraceEndTs": 476541651, + "observedLoad": 2372, + "observedLoadTs": 473510542, + "observedDomContentLoaded": 1752, + "observedDomContentLoadedTs": 472890577, "observedCumulativeLayoutShift": 0.0068238449096679685, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 2173, - "observedFirstVisualChangeTs": 483930166, - "observedLastVisualChange": 4790, - "observedLastVisualChangeTs": 486547166, - "observedSpeedIndex": 4107, - "observedSpeedIndexTs": 485863731 + "observedFirstVisualChange": 1925, + "observedFirstVisualChangeTs": 473063527, + "observedLastVisualChange": 4509, + "observedLastVisualChangeTs": 475647527, + "observedSpeedIndex": 3836, + "observedSpeedIndexTs": 474975000 }, { "lcpInvalidated": false @@ -16664,19 +15303,19 @@ "numScripts": 16, "numStylesheets": 4, "numFonts": 4, - "numTasks": 1564, - "numTasksOver10ms": 25, - "numTasksOver25ms": 10, - "numTasksOver50ms": 7, - "numTasksOver100ms": 4, + "numTasks": 1588, + "numTasksOver10ms": 21, + "numTasksOver25ms": 12, + "numTasksOver50ms": 6, + "numTasksOver100ms": 3, "numTasksOver500ms": 2, - "rtt": 56.91, - "throughput": 4361827.355119209, - "maxRtt": 91.51300000000002, - "maxServerLatency": 26.954000000000008, - "totalByteWeight": 712369, - "totalTaskTime": 2952.3349999999978, - "mainDocumentTransferSize": 82615 + "rtt": 58.514, + "throughput": 5014528.923050788, + "maxRtt": 89.299, + "maxServerLatency": 25.121999999999993, + "totalByteWeight": 715088, + "totalTaskTime": 2755.0499999999975, + "mainDocumentTransferSize": 82614 } ] } @@ -16697,7 +15336,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "D", "testsslExpireSoon": false, "testsslExpireDate": "2025-06-17T21:59:00.000Z", "testsslGrade": "A+", @@ -16705,7 +15343,7 @@ "cookiesCount": 0, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.13, + "lighthouse_performance": 0.15, "lighthouse_performanceGrade": "F", "lighthouse_accessibility": 1, "lighthouse_accessibilityGrade": "A", @@ -16725,194 +15363,7 @@ "tags": [ "sante" ], - "http": { - "url": "https://cns.sante.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 01:54:00 GMT", - "grade": "B", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Length": "53387", - "Content-Type": "text/html; charset=UTF-8", - "Date": "Sun, 21 Jul 2024 01:53:54 GMT", - "Keep-Alive": "timeout=5, max=99", - "Link": "; rel=shortlink", - "Set-Cookie": "pll_language=fr; expires=Mon, 21-Jul-2025 01:53:55 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "DENY", - "X-TEC-API-ORIGIN": "https://cns.sante.fr", - "X-TEC-API-ROOT": "https://cns.sante.fr/wp-json/tribe/events/v1/", - "X-TEC-API-VERSION": "v1" - }, - "scan_id": 53616314, - "score": 75, - "start_time": "Sun, 21 Jul 2024 01:53:52 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 1, - "tests_passed": 10, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "pll_language": { - "domain": "cns.sante.fr", - "expires": 1753062835, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": "Lax", - "secure": true - } - }, - "sameSite": true - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions-and-samesite", - "score_description": "All cookies use the Secure flag, session cookies use the HttpOnly flag, and cross-origin restrictions are in place via the SameSite flag", - "score_modifier": 5 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://cns.sante.fr/", - "redirects": true, - "route": [ - "http://cns.sante.fr/", - "https://cns.sante.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "DENY" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -17258,7 +15709,7 @@ "ip": "cns.sante.fr/185.194.81.38", "port": "443", "severity": "OK", - "finding": "263 >= 60 days" + "finding": "256 >= 60 days" }, { "id": "cert_notBefore", @@ -17412,14 +15863,14 @@ "ip": "cns.sante.fr/185.194.81.38", "port": "443", "severity": "INFO", - "finding": "-1 seconds from localtime" + "finding": "-2 seconds from localtime" }, { "id": "HTTP_headerTime", "ip": "cns.sante.fr/185.194.81.38", "port": "443", "severity": "INFO", - "finding": "1721526918" + "finding": "1722131904" }, { "id": "HSTS_time", @@ -18003,7 +16454,7 @@ "ip": "cns.sante.fr/185.194.81.38", "port": "443", "severity": "INFO", - "finding": "104" + "finding": "58" } ], "thirdparties": { @@ -18066,7 +16517,7 @@ }, { "type": "google analytics", - "url": "https://www.google-analytics.com/j/collect?v=1&_v=j101&a=1433949425&t=pageview&_s=1&dl=https%3A%2F%2Fcns.sante.fr%2F&ul=en-us&de=UTF-8&sd=24-bit&sr=800x600&vp=800x600&je=0&_u=IEBAAEABAAAAACAAI~&jid=1117554654&gjid=205132600&cid=1561623964.1721526856&tid=UA-72191744-1&_gid=1893304682.1721526856&_r=1&_slc=1&z=965529903", + "url": "https://www.google-analytics.com/j/collect?v=1&_v=j101&a=1994555933&t=pageview&_s=1&dl=https%3A%2F%2Fcns.sante.fr%2F&ul=en-us&de=UTF-8&sd=24-bit&sr=800x600&vp=800x600&je=0&_u=IEBAAEABAAAAACAAI~&jid=760682112&gjid=656620793&cid=1810979402.1722131871&tid=UA-72191744-1&_gid=329974541.1722131871&_r=1&_slc=1&z=1283651955", "details": { "id": "google analytics", "message": "Use hosted Matomo instance" @@ -18098,7 +16549,7 @@ }, { "type": "google analytics", - "url": "https://www.google-analytics.com/g/collect?v=2&tid=G-JT389QYW8X>m=45je47h0v9114193048za200&_p=1721526855878&gcd=13l3l3l3l2&npa=0&dma=0&tag_exp=0&ul=en-us&sr=800x600&cid=1561623964.1721526856&ir=1&uaa=&uab=&uafvl=&uamb=0&uam=&uap=&uapv=&uaw=0&frm=0&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fcns.sante.fr%2F&sid=1721526855&sct=1&seg=0&en=page_view&_fv=1&_ss=1&_ee=1&tfd=2089&_z=fetch", + "url": "https://www.google-analytics.com/g/collect?v=2&tid=G-JT389QYW8X>m=45je47o0v9114193048za200&_p=1722131871399&gcd=13l3l3l3l2&npa=0&dma=0&tag_exp=95250752&ul=en-us&sr=800x600&cid=1810979402.1722131871&ir=1&uaa=&uab=&uafvl=&uamb=0&uam=&uap=&uapv=&uaw=0&frm=0&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fcns.sante.fr%2F&sid=1722131871&sct=1&seg=0&en=page_view&_fv=1&_ss=1&_ee=1&tfd=1490", "details": { "id": "google analytics", "message": "Use hosted Matomo instance" @@ -18108,11 +16559,11 @@ "cookies": [ { "name": "_gid", - "value": "GA1.2.1893304682.1721526856", + "value": "GA1.2.329974541.1722131871", "domain": ".sante.fr", "path": "/", - "expires": 1721613255, - "size": 31, + "expires": 1722218271, + "size": 30, "httpOnly": false, "secure": false, "session": false, @@ -18122,10 +16573,10 @@ }, { "name": "_ga", - "value": "GA1.2.1561623964.1721526856", + "value": "GA1.2.1810979402.1722131871", "domain": ".sante.fr", "path": "/", - "expires": 1784598855, + "expires": 1785203871, "size": 30, "httpOnly": false, "secure": false, @@ -18136,10 +16587,10 @@ }, { "name": "_ga_JT389QYW8X", - "value": "GS1.2.1721526855.1.0.1721526855.0.0.0", + "value": "GS1.2.1722131871.1.0.1722131871.0.0.0", "domain": ".sante.fr", "path": "/", - "expires": 1784598855, + "expires": 1785203871, "size": 51, "httpOnly": false, "secure": false, @@ -18153,7 +16604,7 @@ "value": "1", "domain": ".sante.fr", "path": "/", - "expires": 1721526915, + "expires": 1722131931, "size": 5, "httpOnly": false, "secure": false, @@ -18167,7 +16618,7 @@ "value": "fr", "domain": "cns.sante.fr", "path": "/", - "expires": 1753062854.895976, + "expires": 1753667870.747746, "size": 14, "httpOnly": false, "secure": true, @@ -18183,10 +16634,10 @@ "content-encoding": "gzip", "content-length": "53393", "content-type": "text/html; charset=UTF-8", - "date": "Sun, 21 Jul 2024 01:54:14 GMT", + "date": "Sun, 28 Jul 2024 01:57:50 GMT", "keep-alive": "timeout=5, max=100", "link": "; rel=shortlink", - "set-cookie": "pll_language=fr; expires=Mon, 21-Jul-2025 01:54:14 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax", + "set-cookie": "pll_language=fr; expires=Mon, 28-Jul-2025 01:57:50 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax", "strict-transport-security": "max-age=31536000; includeSubDomains", "vary": "Accept-Encoding", "x-content-type-options": "nosniff", @@ -18254,7 +16705,7 @@ }, { "hostname": "fonts.googleapis.com", - "ip": "142.250.189.234", + "ip": "172.253.122.95", "geoip": { "continent": { "code": "NA", @@ -18308,7 +16759,7 @@ }, { "hostname": "ajax.googleapis.com", - "ip": "142.250.191.74", + "ip": "142.250.31.95", "geoip": { "continent": { "code": "NA", @@ -18362,7 +16813,7 @@ }, { "hostname": "www.google-analytics.com", - "ip": "142.250.191.78", + "ip": "216.239.38.178", "geoip": { "continent": { "code": "NA", @@ -18394,9 +16845,9 @@ }, "location": { "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" + "latitude": 34.0544, + "longitude": -118.244, + "time_zone": "America/Los_Angeles" }, "registered_country": { "geoname_id": 6252001, @@ -18411,12 +16862,28 @@ "ru": "США", "zh-CN": "美国" } - } + }, + "subdivisions": [ + { + "geoname_id": 5332921, + "iso_code": "CA", + "names": { + "de": "Kalifornien", + "en": "California", + "es": "California", + "fr": "Californie", + "ja": "カリフォルニア州", + "pt-BR": "Califórnia", + "ru": "Калифорния", + "zh-CN": "加州" + } + } + ] } }, { "hostname": "fonts.gstatic.com", - "ip": "142.251.46.227", + "ip": "142.251.163.94", "geoip": { "city": { "geoname_id": 5116931, @@ -18496,7 +16963,7 @@ }, { "hostname": "www.googletagmanager.com", - "ip": "142.250.191.72", + "ip": "172.253.122.97", "geoip": { "continent": { "code": "NA", @@ -18938,13 +17405,13 @@ { "requestedUrl": "https://cns.sante.fr/", "finalUrl": "https://cns.sante.fr/", - "fetchTime": "2024-07-21T01:53:41.507Z", + "fetchTime": "2024-07-28T01:56:27.587Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.59 + "score": 0.68 }, "accessibility": { "title": "Accessibility", @@ -18980,49 +17447,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 8078, + "numericValue": 7405, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 4156, - "firstMeaningfulPaint": 4156, - "largestContentfulPaint": 4452, - "firstCPUIdle": 7767, - "interactive": 8078, - "speedIndex": 6423, - "estimatedInputLatency": 13, - "totalBlockingTime": 90, - "maxPotentialFID": 99, - "cumulativeLayoutShift": 0.003861027611626519, - "cumulativeLayoutShiftAllFrames": 0.00038378906249999996, + "firstContentfulPaint": 3484, + "firstMeaningfulPaint": 3596, + "largestContentfulPaint": 3711, + "firstCPUIdle": 7248, + "interactive": 7405, + "speedIndex": 5237, + "estimatedInputLatency": 28, + "totalBlockingTime": 274, + "maxPotentialFID": 210, + "cumulativeLayoutShift": 0.004326908111572265, + "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 370080485, + "observedTimeOriginTs": 373966182, "observedNavigationStart": 0, - "observedNavigationStartTs": 370080485, - "observedFirstPaint": 1828, - "observedFirstPaintTs": 371908044, - "observedFirstContentfulPaint": 1828, - "observedFirstContentfulPaintTs": 371908044, - "observedFirstMeaningfulPaint": 1828, - "observedFirstMeaningfulPaintTs": 371908044, - "observedLargestContentfulPaint": 1828, - "observedLargestContentfulPaintTs": 371908044, - "observedTraceEnd": 4092, - "observedTraceEndTs": 374172908, - "observedLoad": 3037, - "observedLoadTs": 373117350, - "observedDomContentLoaded": 2504, - "observedDomContentLoadedTs": 372584456, - "observedCumulativeLayoutShift": 0.003861027611626519, - "observedCumulativeLayoutShiftAllFrames": 0.00038378906249999996, - "observedFirstVisualChange": 1804, - "observedFirstVisualChangeTs": 371884485, - "observedLastVisualChange": 2404, - "observedLastVisualChangeTs": 372484485, - "observedSpeedIndex": 1842, - "observedSpeedIndexTs": 371922956 + "observedNavigationStartTs": 373966182, + "observedFirstPaint": 1320, + "observedFirstPaintTs": 375285722, + "observedFirstContentfulPaint": 1320, + "observedFirstContentfulPaintTs": 375285722, + "observedFirstMeaningfulPaint": 1324, + "observedFirstMeaningfulPaintTs": 375289961, + "observedLargestContentfulPaint": 1324, + "observedLargestContentfulPaintTs": 375289961, + "observedTraceEnd": 3023, + "observedTraceEndTs": 376989045, + "observedLoad": 1968, + "observedLoadTs": 375933736, + "observedDomContentLoaded": 1649, + "observedDomContentLoadedTs": 375614842, + "observedCumulativeLayoutShift": 0.004326908111572265, + "observedCumulativeLayoutShiftAllFrames": 0, + "observedFirstVisualChange": 1302, + "observedFirstVisualChangeTs": 375268182, + "observedLastVisualChange": 1718, + "observedLastVisualChangeTs": 375684182, + "observedSpeedIndex": 1394, + "observedSpeedIndexTs": 375359818 }, { "lcpInvalidated": false @@ -19044,19 +17511,19 @@ "numScripts": 20, "numStylesheets": 20, "numFonts": 4, - "numTasks": 976, - "numTasksOver10ms": 14, - "numTasksOver25ms": 4, - "numTasksOver50ms": 1, + "numTasks": 849, + "numTasksOver10ms": 13, + "numTasksOver25ms": 5, + "numTasksOver50ms": 3, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 1.6760000000000002, - "throughput": 4092011.627914965, - "maxRtt": 147.828, - "maxServerLatency": 25.888999999999996, - "totalByteWeight": 786718, - "totalTaskTime": 573.0979999999984, - "mainDocumentTransferSize": 54021 + "rtt": 5.938, + "throughput": 7215699.76121023, + "maxRtt": 82.8, + "maxServerLatency": 32.144999999999996, + "totalByteWeight": 786816, + "totalTaskTime": 581.3989999999998, + "mainDocumentTransferSize": 54007 } ] } @@ -19078,7 +17545,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B", "testsslExpireSoon": false, "testsslExpireDate": "2025-04-10T21:59:00.000Z", "testsslGrade": "A+", @@ -19086,8 +17552,8 @@ "cookiesCount": 5, "trackersGrade": "F", "trackersCount": 12, - "lighthouse_performance": 0.59, - "lighthouse_performanceGrade": "C", + "lighthouse_performance": 0.68, + "lighthouse_performanceGrade": "B", "lighthouse_accessibility": 0.73, "lighthouse_accessibilityGrade": "B", "lighthouse_best-practices": 0.93, @@ -19107,221 +17573,7 @@ "travail", "emploi" ], - "http": { - "url": "https://dares.travail-emploi.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 02:09:19 GMT", - "grade": "B-", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Cache-Control": "max-age=3600, public", - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sun, 21 Jul 2024 02:09:15 GMT", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Keep-Alive": "timeout=5, max=100", - "Last-Modified": "Sat, 20 Jul 2024 14:18:07 GMT", - "Set-Cookie": "BIGipServerpool-dares-site-v2.cegedim.cloud-HTTP=!IFyLxoEbJlkg3gxWDPlD0yXzT0UGhihoicD6VXzj2BSMe9OVIihAMbSwKPcTkxKxT2hHyipmPuIWXnwvTtRM6Hr/PZGc; path=/; Httponly; Secure, TS011cfdd6=01352d3811f14e0bd084138e60ae5335cd9b4ff71326feb2fca50e8576cae3568ea046bab0e0640ccbcde4577f34990534bb884281; Path=/; Domain=.dares.travail-emploi.gouv.fr, TSc2011f4e027=087dc22938ab2000a0830f03128c4a7c8f95bd0c190d26134a6b6f4db991bfe4aaac2c867357ee3908677833a6113000da5db3019ef04a61600439306b93a86629297d113a9b408e0b4f76fa5dae0d8a78f684fea59053de8916533c1768c296; Path=/", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Transfer-Encoding": "chunked", - "Vary": "Cookie,Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-Drupal-Cache": "HIT", - "X-Drupal-Dynamic-Cache": "MISS", - "X-Frame-Options": "SAMEORIGIN" - }, - "scan_id": 53616528, - "score": 65, - "start_time": "Sun, 21 Jul 2024 02:09:14 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 3, - "tests_passed": 8, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dares-site-v2.cegedim.cloud-HTTP": { - "domain": "dares.travail-emploi.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS011cfdd6": { - "domain": ".dares.travail-emploi.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TSc2011f4e027": { - "domain": "dares.travail-emploi.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag-but-protected-by-hsts", - "score_description": "Cookies set without using the Secure flag, but transmission over HTTP prevented by HSTS", - "score_modifier": -5 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://dares.travail-emploi.gouv.fr/", - "redirects": true, - "route": [ - "http://dares.travail-emploi.gouv.fr/", - "https://dares.travail-emploi.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": { - "https://e.infogram.com/js/dist/embed.js?w2y": { - "crossorigin": null, - "integrity": null - } - } - }, - "pass": false, - "result": "sri-not-implemented-but-external-scripts-loaded-securely", - "score_description": "Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS", - "score_modifier": -5 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -19667,7 +17919,7 @@ "ip": "dares.travail-emploi.gouv.fr/185.194.82.70", "port": "443", "severity": "OK", - "finding": "126 >= 60 days" + "finding": "119 >= 60 days" }, { "id": "cert_notBefore", @@ -20384,7 +18636,7 @@ "ip": "dares.travail-emploi.gouv.fr/185.194.82.70", "port": "443", "severity": "INFO", - "finding": "51" + "finding": "92" } ], "thirdparties": { @@ -20471,13 +18723,13 @@ { "requestedUrl": "https://dares.travail-emploi.gouv.fr/", "finalUrl": "https://dares.travail-emploi.gouv.fr/", - "fetchTime": "2024-07-21T02:08:50.278Z", + "fetchTime": "2024-07-28T02:10:09.552Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.25 + "score": 0.24 }, "accessibility": { "title": "Accessibility", @@ -20513,49 +18765,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 13266, + "numericValue": 12848, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 2793, - "firstMeaningfulPaint": 5533, - "largestContentfulPaint": 7185, - "firstCPUIdle": 13341, - "interactive": 13266, - "speedIndex": 7807, - "estimatedInputLatency": 1394, - "totalBlockingTime": 1468, - "maxPotentialFID": 2226, + "firstContentfulPaint": 2698, + "firstMeaningfulPaint": 5109, + "largestContentfulPaint": 13654, + "firstCPUIdle": 11946, + "interactive": 12848, + "speedIndex": 8474, + "estimatedInputLatency": 1485, + "totalBlockingTime": 1581, + "maxPotentialFID": 2340, "cumulativeLayoutShift": 0.0005796729193793403, "cumulativeLayoutShiftAllFrames": 0.13333333333333333, "observedTimeOrigin": 0, - "observedTimeOriginTs": 286197044, + "observedTimeOriginTs": 262216972, "observedNavigationStart": 0, - "observedNavigationStartTs": 286197044, - "observedFirstPaint": 1501, - "observedFirstPaintTs": 287697816, - "observedFirstContentfulPaint": 1501, - "observedFirstContentfulPaintTs": 287697816, - "observedFirstMeaningfulPaint": 1833, - "observedFirstMeaningfulPaintTs": 288029707, - "observedLargestContentfulPaint": 1850, - "observedLargestContentfulPaintTs": 288046650, - "observedTraceEnd": 5587, - "observedTraceEndTs": 291784246, - "observedLoad": 4422, - "observedLoadTs": 290619304, - "observedDomContentLoaded": 3525, - "observedDomContentLoadedTs": 289721906, + "observedNavigationStartTs": 262216972, + "observedFirstPaint": 1667, + "observedFirstPaintTs": 263883522, + "observedFirstContentfulPaint": 1667, + "observedFirstContentfulPaintTs": 263883522, + "observedFirstMeaningfulPaint": 2118, + "observedFirstMeaningfulPaintTs": 264335440, + "observedLargestContentfulPaint": 3012, + "observedLargestContentfulPaintTs": 265228660, + "observedTraceEnd": 5982, + "observedTraceEndTs": 268199009, + "observedLoad": 4854, + "observedLoadTs": 267071464, + "observedDomContentLoaded": 3019, + "observedDomContentLoadedTs": 265236390, "observedCumulativeLayoutShift": 0.0005796729193793403, "observedCumulativeLayoutShiftAllFrames": 0.13333333333333333, - "observedFirstVisualChange": 1474, - "observedFirstVisualChangeTs": 287671044, - "observedLastVisualChange": 4641, - "observedLastVisualChangeTs": 290838044, - "observedSpeedIndex": 2649, - "observedSpeedIndexTs": 288845946 + "observedFirstVisualChange": 1639, + "observedFirstVisualChangeTs": 263855972, + "observedLastVisualChange": 5089, + "observedLastVisualChangeTs": 267305972, + "observedSpeedIndex": 3106, + "observedSpeedIndexTs": 265322553 }, { "lcpInvalidated": false @@ -20577,19 +18829,19 @@ "numScripts": 6, "numStylesheets": 8, "numFonts": 19, - "numTasks": 1091, - "numTasksOver10ms": 21, - "numTasksOver25ms": 13, - "numTasksOver50ms": 5, - "numTasksOver100ms": 3, + "numTasks": 1098, + "numTasksOver10ms": 15, + "numTasksOver25ms": 8, + "numTasksOver50ms": 4, + "numTasksOver100ms": 1, "numTasksOver500ms": 1, - "rtt": 1.8559999999999945, - "throughput": 11195273.991447922, - "maxRtt": 101.394, - "maxServerLatency": 24.192999999999998, - "totalByteWeight": 3402637, - "totalTaskTime": 1542.828999999999, - "mainDocumentTransferSize": 15445 + "rtt": 1.7349999999999994, + "throughput": 6641999.762221452, + "maxRtt": 155.72200000000004, + "maxServerLatency": 145.497, + "totalByteWeight": 2960957, + "totalTaskTime": 1329.5419999999997, + "mainDocumentTransferSize": 15216 } ] } @@ -20610,7 +18862,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B-", "testsslExpireSoon": false, "testsslExpireDate": "2024-11-24T22:59:00.000Z", "testsslGrade": "A", @@ -20618,7 +18869,7 @@ "cookiesCount": 0, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.25, + "lighthouse_performance": 0.24, "lighthouse_performanceGrade": "E", "lighthouse_accessibility": 0.75, "lighthouse_accessibilityGrade": "B", @@ -20638,194 +18889,7 @@ "tags": [ "sports" ], - "http": { - "url": "https://datacollecte.equipements.sports.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 02:10:37 GMT", - "grade": "C", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Access-Control-Allow-Headers": "X-Requested-With,content-type,x-access-token", - "Access-Control-Allow-Methods": "PUT, GET, POST, DELETE, OPTIONS", - "Access-Control-Allow-Origin": "*", - "Cache-Control": "public, max-age=0", - "Connection": "keep-alive", - "Content-Encoding": "gzip", - "Content-Type": "text/html; charset=UTF-8", - "Date": "Sun, 21 Jul 2024 02:10:36 GMT", - "Keep-Alive": "timeout=5", - "Last-Modified": "Mon, 22 Apr 2024 14:34:22 GMT", - "Set-Cookie": "BIGipServerpool-dsb5-dataes.cegedim.cloud-HTTP=!/g5YaxEr8VAAGkxWDPlD0yXzT0UGhos8n8PZmli8hYpSIFsbOJ+wMJe1SBALPUeV3sJZaH8nU7jaPuoel13nkmEKK0S/; path=/; Httponly; Secure", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Transfer-Encoding": "chunked", - "Vary": "Accept-Encoding" - }, - "scan_id": 53616605, - "score": 50, - "start_time": "Sun, 21 Jul 2024 02:10:35 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 3, - "tests_passed": 8, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dsb5-dataes.cegedim.cloud-HTTP": { - "domain": "datacollecte.equipements.sports.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": "*", - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-implemented-with-public-access", - "score_description": "Public content is visible via cross-origin resource sharing (CORS) Access-Control-Allow-Origin header", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://datacollecte.equipements.sports.gouv.fr/", - "redirects": true, - "route": [ - "http://datacollecte.equipements.sports.gouv.fr/", - "https://datacollecte.equipements.sports.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-content-type-options-not-implemented", - "score_description": "X-Content-Type-Options header not implemented", - "score_modifier": -5 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-frame-options-not-implemented", - "score_description": "X-Frame-Options (XFO) header not implemented", - "score_modifier": -20 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -21171,7 +19235,7 @@ "ip": "datacollecte.equipements.sports.gouv.fr/185.194.82.176", "port": "443", "severity": "OK", - "finding": "117 >= 60 days" + "finding": "110 >= 60 days" }, { "id": "cert_notBefore", @@ -21332,7 +19396,7 @@ "ip": "datacollecte.equipements.sports.gouv.fr/185.194.82.176", "port": "443", "severity": "INFO", - "finding": "1721527908" + "finding": "1722132871" }, { "id": "HSTS_time", @@ -21916,7 +19980,7 @@ "ip": "datacollecte.equipements.sports.gouv.fr/185.194.82.176", "port": "443", "severity": "INFO", - "finding": "92" + "finding": "52" } ], "thirdparties": { @@ -21924,7 +19988,7 @@ "cookies": [ { "name": "BIGipServerpool-dsb5-dataes.cegedim.cloud-HTTP", - "value": "!enm5rP+dCeRq21dWDPlD0yXzT0UGhgD0mqjyMYNScIzt66wRgI9+nNlzYGFkzz26aCPfu8fryotxuY4qj/OyiQRDPhkx", + "value": "!u4OsYeDU9V2BZ61WDPlD0yXzT0UGhuLf+0zPHLQwWERCoNqdSHywwewJWWWLGt2xMzn55KVig68IIFhTYOGT5NBYw6ML", "domain": "datacollecte.equipements.sports.gouv.fr", "path": "/", "expires": -1, @@ -21946,10 +20010,10 @@ "connection": "keep-alive", "content-encoding": "gzip", "content-type": "text/html; charset=UTF-8", - "date": "Sun, 21 Jul 2024 02:10:51 GMT", + "date": "Sun, 28 Jul 2024 02:14:01 GMT", "keep-alive": "timeout=5", "last-modified": "Mon, 22 Apr 2024 14:34:22 GMT", - "set-cookie": "BIGipServerpool-dsb5-dataes.cegedim.cloud-HTTP=!enm5rP+dCeRq21dWDPlD0yXzT0UGhgD0mqjyMYNScIzt66wRgI9+nNlzYGFkzz26aCPfu8fryotxuY4qj/OyiQRDPhkx; path=/; Httponly; Secure", + "set-cookie": "BIGipServerpool-dsb5-dataes.cegedim.cloud-HTTP=!u4OsYeDU9V2BZ61WDPlD0yXzT0UGhuLf+0zPHLQwWERCoNqdSHywwewJWWWLGt2xMzn55KVig68IIFhTYOGT5NBYw6ML; path=/; Httponly; Secure", "strict-transport-security": "max-age=31536000; includeSubDomains", "transfer-encoding": "chunked", "vary": "Accept-Encoding" @@ -22170,13 +20234,13 @@ { "requestedUrl": "https://datacollecte.equipements.sports.gouv.fr/", "finalUrl": "https://datacollecte.equipements.sports.gouv.fr/", - "fetchTime": "2024-07-21T02:10:25.916Z", + "fetchTime": "2024-07-28T02:12:39.820Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.93 + "score": 0.96 }, "accessibility": { "title": "Accessibility", @@ -22212,49 +20276,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 4254, + "numericValue": 4238, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 1041, - "firstMeaningfulPaint": 3593, + "firstContentfulPaint": 1027, + "firstMeaningfulPaint": 3579, "largestContentfulPaint": 1505, - "firstCPUIdle": 4059, - "interactive": 4254, - "speedIndex": 4904, + "firstCPUIdle": 4036, + "interactive": 4238, + "speedIndex": 3637, "estimatedInputLatency": 13, - "totalBlockingTime": 72, - "maxPotentialFID": 142, + "totalBlockingTime": 57, + "maxPotentialFID": 136, "cumulativeLayoutShift": 0, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 300660028, + "observedTimeOriginTs": 279866594, "observedNavigationStart": 0, - "observedNavigationStartTs": 300660028, - "observedFirstPaint": 1112, - "observedFirstPaintTs": 301771913, - "observedFirstContentfulPaint": 1112, - "observedFirstContentfulPaintTs": 301771913, - "observedFirstMeaningfulPaint": 2841, - "observedFirstMeaningfulPaintTs": 303500591, - "observedLargestContentfulPaint": 1112, - "observedLargestContentfulPaintTs": 301771913, - "observedTraceEnd": 4038, - "observedTraceEndTs": 304698146, - "observedLoad": 2663, - "observedLoadTs": 303322790, - "observedDomContentLoaded": 2662, - "observedDomContentLoadedTs": 303322257, + "observedNavigationStartTs": 279866594, + "observedFirstPaint": 645, + "observedFirstPaintTs": 280511208, + "observedFirstContentfulPaint": 645, + "observedFirstContentfulPaintTs": 280511208, + "observedFirstMeaningfulPaint": 1734, + "observedFirstMeaningfulPaintTs": 281600525, + "observedLargestContentfulPaint": 645, + "observedLargestContentfulPaintTs": 280511208, + "observedTraceEnd": 2866, + "observedTraceEndTs": 282732294, + "observedLoad": 1624, + "observedLoadTs": 281490995, + "observedDomContentLoaded": 1624, + "observedDomContentLoadedTs": 281490490, "observedCumulativeLayoutShift": 0, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 1111, - "observedFirstVisualChangeTs": 301771028, - "observedLastVisualChange": 3444, - "observedLastVisualChangeTs": 304104028, - "observedSpeedIndex": 2325, - "observedSpeedIndexTs": 302984547 + "observedFirstVisualChange": 638, + "observedFirstVisualChangeTs": 280504594, + "observedLastVisualChange": 2338, + "observedLastVisualChangeTs": 282204594, + "observedSpeedIndex": 1422, + "observedSpeedIndexTs": 281288415 }, { "lcpInvalidated": false @@ -22276,18 +20340,18 @@ "numScripts": 3, "numStylesheets": 1, "numFonts": 0, - "numTasks": 285, + "numTasks": 262, "numTasksOver10ms": 6, - "numTasksOver25ms": 2, + "numTasksOver25ms": 1, "numTasksOver50ms": 1, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 148.17999999999998, - "throughput": 3250070.33003917, - "maxRtt": 148.17999999999998, - "maxServerLatency": 1.795000000000016, + "rtt": 82.483, + "throughput": 5330194.530078423, + "maxRtt": 82.483, + "maxServerLatency": 1.7809999999999775, "totalByteWeight": 662927, - "totalTaskTime": 228.9349999999999, + "totalTaskTime": 201.25999999999993, "mainDocumentTransferSize": 4818 } ] @@ -22309,7 +20373,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "C", "testsslExpireSoon": false, "testsslExpireDate": "2024-11-15T22:59:00.000Z", "testsslGrade": "A+", @@ -22317,7 +20380,7 @@ "cookiesCount": 1, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.93, + "lighthouse_performance": 0.96, "lighthouse_performanceGrade": "A", "lighthouse_accessibility": 0.97, "lighthouse_accessibilityGrade": "A", @@ -22338,196 +20401,7 @@ "jeunesse", "sports" ], - "http": { - "url": "https://decouvrirlemonde.jeunes.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 02:12:54 GMT", - "grade": "B", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Cache-Control": "public, max-age=3600", - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Language": "fr", - "Content-Type": "text/html; charset=utf-8", - "Date": "Sun, 21 Jul 2024 02:12:52 GMT", - "Etag": "\"1721516005-1\"", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Keep-Alive": "timeout=5, max=100", - "Last-Modified": "Sat, 20 Jul 2024 22:53:25 GMT", - "Set-Cookie": "BIGipServerpool-djepva-dlm-prod2.cegedim.cloud-HTTP=!nuNYJOh056lO+TBWDPlD0yXzT0UGhstgRz/an71W6UQ+zz8SpZtK/mqVhlrzLtIliHvAQPkTgZCgesDEMJO8kUJVcCI=; path=/; Httponly; Secure", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Transfer-Encoding": "chunked", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff, nosniff", - "X-Drupal-Cache": "HIT", - "X-Frame-Options": "SAMEORIGIN" - }, - "scan_id": 53616617, - "score": 70, - "start_time": "Sun, 21 Jul 2024 02:12:51 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 2, - "tests_passed": 9, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-djepva-dlm-prod2.cegedim.cloud-HTTP": { - "domain": "decouvrirlemonde.jeunes.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://decouvrirlemonde.jeunes.gouv.fr/", - "redirects": true, - "route": [ - "http://decouvrirlemonde.jeunes.gouv.fr/", - "https://decouvrirlemonde.jeunes.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff, nosniff" - }, - "pass": false, - "result": "x-content-type-options-header-invalid", - "score_description": "X-Content-Type-Options header cannot be recognized", - "score_modifier": -5 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -22873,7 +20747,7 @@ "ip": "decouvrirlemonde.jeunes.gouv.fr/185.194.83.65", "port": "443", "severity": "OK", - "finding": "263 >= 60 days" + "finding": "256 >= 60 days" }, { "id": "cert_notBefore", @@ -23034,7 +20908,7 @@ "ip": "decouvrirlemonde.jeunes.gouv.fr/185.194.83.65", "port": "443", "severity": "INFO", - "finding": "1721528020" + "finding": "1722133040" }, { "id": "HSTS_time", @@ -23632,48 +21506,48 @@ "ip": "decouvrirlemonde.jeunes.gouv.fr/185.194.83.65", "port": "443", "severity": "INFO", - "finding": "53" + "finding": "98" } ], "thirdparties": { "trackers": [ { "type": "google analytics", - "url": "https://3452220.fls.doubleclick.net/activityi;src=3452220;type=jeune105;cat=itag-0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1;num=4910348921827.561?", + "url": "https://3452220.fls.doubleclick.net/activityi;src=3452220;type=jeune105;cat=itag-0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1;num=6379863856609.518?", "details": { "id": "google analytics", "message": "Use hosted Matomo instance" } }, { - "type": "xiti", - "url": "https://logc406.xiti.com/hit.xiti?s=561376&s2=0&p=&vrn=1&ac=&an=&lng=en-US&idp=0213096835307&jv=0&re=800x600&vtag=4.6.4&hl=2x13x9&r=800x600x24x24&rn=1721527989126&ref=", + "type": "google analytics", + "url": "https://3452220.fls.doubleclick.net/activityi;dc_pre=CIr1mKTVyIcDFTBPCAQdtMsDOA;src=3452220;type=jeune105;cat=itag-0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1;num=6379863856609.518?", "details": { - "id": "xiti", + "id": "google analytics", "message": "Use hosted Matomo instance" } }, { - "type": "google analytics", - "url": "https://3452220.fls.doubleclick.net/activityi;dc_pre=CNTBi8KHt4cDFTId-QAdg5EgAw;src=3452220;type=jeune105;cat=itag-0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1;num=4910348921827.561?", + "type": "google", + "url": "https://adservice.google.com/ddm/fls/z/dc_pre=CIr1mKTVyIcDFTBPCAQdtMsDOA;src=3452220;type=jeune105;cat=itag-0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1;num=6379863856609.518", "details": { - "id": "google analytics", + "id": "google", "message": "Use hosted Matomo instance" } }, { "type": "xiti", - "url": "https://logc406.xiti.com/hit.xiti?s=561376&s2=0&p=&vrn=1&ac=&an=&lng=en-US&idp=0213096835307&jv=0&re=800x600&vtag=4.6.4&hl=2x13x9&r=800x600x24x24&rn=1721527989126&ref=&Rdt=On", + "url": "https://logc406.xiti.com/hit.xiti?s=561376&s2=0&p=&vrn=1&ac=&an=&lng=en-US&idp=0216203386787&jv=0&re=800x600&vtag=4.6.4&hl=2x16x20&r=800x600x24x24&rn=1722132980022&ref=", "details": { "id": "xiti", "message": "Use hosted Matomo instance" } }, { - "type": "google", - "url": "https://adservice.google.com/ddm/fls/z/dc_pre=CNTBi8KHt4cDFTId-QAdg5EgAw;src=3452220;type=jeune105;cat=itag-0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1;num=4910348921827.561", + "type": "xiti", + "url": "https://logc406.xiti.com/hit.xiti?s=561376&s2=0&p=&vrn=1&ac=&an=&lng=en-US&idp=0216203386787&jv=0&re=800x600&vtag=4.6.4&hl=2x16x20&r=800x600x24x24&rn=1722132980022&ref=&Rdt=On", "details": { - "id": "google", + "id": "xiti", "message": "Use hosted Matomo instance" } } @@ -23684,7 +21558,7 @@ "value": "1", "domain": ".decouvrirlemonde.jeunes.gouv.fr", "path": "/", - "expires": 2036887989, + "expires": 2037492980, "size": 6, "httpOnly": false, "secure": false, @@ -23698,7 +21572,7 @@ "value": "-", "domain": ".decouvrirlemonde.jeunes.gouv.fr", "path": "/", - "expires": 2036887989, + "expires": 2037492980, "size": 5, "httpOnly": false, "secure": false, @@ -23712,7 +21586,7 @@ "value": "$561376$", "domain": ".decouvrirlemonde.jeunes.gouv.fr", "path": "/", - "expires": 2036887989, + "expires": 2037492980, "size": 13, "httpOnly": false, "secure": false, @@ -23723,7 +21597,7 @@ }, { "name": "BIGipServerpool-djepva-dlm-prod2.cegedim.cloud-HTTP", - "value": "!34WHO0+jcYZ8r5FWDPlD0yXzT0UGhgHNR7QATbFa9/dGa2u+UfeyWaPcKv5iFmx6GRR6hELqStez6jQIVWdMo4CmdKM=", + "value": "!kfdU+Vu6/M3qTq1WDPlD0yXzT0UGhoA9qti5dwgdM9eyInJO/cgFGM4tke3ZX1qXCog0LMTjuYcOle5J/WkXWfkeNTI=", "domain": "decouvrirlemonde.jeunes.gouv.fr", "path": "/", "expires": -1, @@ -23742,12 +21616,12 @@ "content-encoding": "gzip", "content-language": "fr", "content-type": "text/html; charset=utf-8", - "date": "Sun, 21 Jul 2024 02:13:08 GMT", - "etag": "\"1721516005-1\"", + "date": "Sun, 28 Jul 2024 02:16:19 GMT", + "etag": "\"1722124536-1\"", "expires": "Sun, 19 Nov 1978 05:00:00 GMT", "keep-alive": "timeout=5, max=100", - "last-modified": "Sat, 20 Jul 2024 22:53:25 GMT", - "set-cookie": "BIGipServerpool-djepva-dlm-prod2.cegedim.cloud-HTTP=!34WHO0+jcYZ8r5FWDPlD0yXzT0UGhgHNR7QATbFa9/dGa2u+UfeyWaPcKv5iFmx6GRR6hELqStez6jQIVWdMo4CmdKM=; path=/; Httponly; Secure", + "last-modified": "Sat, 27 Jul 2024 23:55:36 GMT", + "set-cookie": "BIGipServerpool-djepva-dlm-prod2.cegedim.cloud-HTTP=!kfdU+Vu6/M3qTq1WDPlD0yXzT0UGhoA9qti5dwgdM9eyInJO/cgFGM4tke3ZX1qXCog0LMTjuYcOle5J/WkXWfkeNTI=; path=/; Httponly; Secure", "strict-transport-security": "max-age=31536000; includeSubDomains", "transfer-encoding": "chunked", "vary": "Accept-Encoding", @@ -23814,7 +21688,7 @@ }, { "hostname": "3452220.fls.doubleclick.net", - "ip": "142.251.167.149", + "ip": "142.251.46.198", "geoip": { "city": { "geoname_id": 5116931, @@ -23893,8 +21767,8 @@ } }, { - "hostname": "logc406.xiti.com", - "ip": "18.154.229.58", + "hostname": "adservice.google.com", + "ip": "142.250.189.194", "geoip": { "continent": { "code": "NA", @@ -23926,8 +21800,8 @@ }, "location": { "accuracy_radius": 1000, - "latitude": 41.8764, - "longitude": -87.6133, + "latitude": 37.751, + "longitude": -97.822, "time_zone": "America/Chicago" }, "registered_country": { @@ -23943,28 +21817,12 @@ "ru": "США", "zh-CN": "美国" } - }, - "subdivisions": [ - { - "geoname_id": 4896861, - "iso_code": "IL", - "names": { - "de": "Illinois", - "en": "Illinois", - "es": "Illinois", - "fr": "Illinois", - "ja": "イリノイ州", - "pt-BR": "Ilinóis", - "ru": "Иллинойс", - "zh-CN": "伊利诺伊州" - } - } - ] + } } }, { - "hostname": "adservice.google.com", - "ip": "64.233.180.157", + "hostname": "logc406.xiti.com", + "ip": "18.238.193.55", "geoip": { "continent": { "code": "NA", @@ -24269,13 +22127,13 @@ { "requestedUrl": "https://decouvrirlemonde.jeunes.gouv.fr/", "finalUrl": "https://decouvrirlemonde.jeunes.gouv.fr/", - "fetchTime": "2024-07-21T02:12:33.056Z", + "fetchTime": "2024-07-28T02:15:26.878Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.51 + "score": 0.47 }, "accessibility": { "title": "Accessibility", @@ -24311,49 +22169,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 4199, + "numericValue": 4746, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 3818, - "firstMeaningfulPaint": 3931, - "largestContentfulPaint": 15509, - "firstCPUIdle": 3931, - "interactive": 4199, - "speedIndex": 18198, + "firstContentfulPaint": 4641, + "firstMeaningfulPaint": 4641, + "largestContentfulPaint": 17807, + "firstCPUIdle": 4641, + "interactive": 4746, + "speedIndex": 20457, "estimatedInputLatency": 13, - "totalBlockingTime": 106, - "maxPotentialFID": 99, - "cumulativeLayoutShift": 0.06335454559326172, + "totalBlockingTime": 76, + "maxPotentialFID": 81, + "cumulativeLayoutShift": 0, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 277374610, + "observedTimeOriginTs": 357042323, "observedNavigationStart": 0, - "observedNavigationStartTs": 277374610, - "observedFirstPaint": 856, - "observedFirstPaintTs": 278230829, - "observedFirstContentfulPaint": 856, - "observedFirstContentfulPaintTs": 278230829, - "observedFirstMeaningfulPaint": 944, - "observedFirstMeaningfulPaintTs": 278318874, - "observedLargestContentfulPaint": 10992, - "observedLargestContentfulPaintTs": 288366785, - "observedTraceEnd": 11820, - "observedTraceEndTs": 289194321, - "observedLoad": 10765, - "observedLoadTs": 288139261, - "observedDomContentLoaded": 1008, - "observedDomContentLoadedTs": 278382254, - "observedCumulativeLayoutShift": 0.06335454559326172, + "observedNavigationStartTs": 357042323, + "observedFirstPaint": 1456, + "observedFirstPaintTs": 358498351, + "observedFirstContentfulPaint": 1456, + "observedFirstContentfulPaintTs": 358498351, + "observedFirstMeaningfulPaint": 1736, + "observedFirstMeaningfulPaintTs": 358777880, + "observedLargestContentfulPaint": 11907, + "observedLargestContentfulPaintTs": 368949625, + "observedTraceEnd": 12612, + "observedTraceEndTs": 369653879, + "observedLoad": 11556, + "observedLoadTs": 368598143, + "observedDomContentLoaded": 1657, + "observedDomContentLoadedTs": 358699254, + "observedCumulativeLayoutShift": 0, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 847, - "observedFirstVisualChangeTs": 278221610, - "observedLastVisualChange": 10997, - "observedLastVisualChangeTs": 288371610, - "observedSpeedIndex": 9495, - "observedSpeedIndexTs": 286870025 + "observedFirstVisualChange": 1443, + "observedFirstVisualChangeTs": 358485323, + "observedLastVisualChange": 11909, + "observedLastVisualChangeTs": 368951323, + "observedSpeedIndex": 10381, + "observedSpeedIndexTs": 367422969 }, { "lcpInvalidated": false @@ -24371,23 +22229,23 @@ "type": "debugdata", "items": [ { - "numRequests": 65, - "numScripts": 14, + "numRequests": 62, + "numScripts": 13, "numStylesheets": 6, "numFonts": 0, - "numTasks": 769, - "numTasksOver10ms": 5, - "numTasksOver25ms": 3, + "numTasks": 805, + "numTasksOver10ms": 7, + "numTasksOver25ms": 4, "numTasksOver50ms": 2, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 6.005999999999999, - "throughput": 16189259.070069352, - "maxRtt": 82.295, - "maxServerLatency": 62.054, - "totalByteWeight": 2567902, - "totalTaskTime": 344.0609999999991, - "mainDocumentTransferSize": 17985 + "rtt": 1.9319999999999986, + "throughput": 7964568.949915453, + "maxRtt": 147.893, + "maxServerLatency": 65.906, + "totalByteWeight": 2685206, + "totalTaskTime": 352.6379999999992, + "mainDocumentTransferSize": 17627 } ] } @@ -24409,7 +22267,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B", "testsslExpireSoon": false, "testsslExpireDate": "2025-04-10T21:59:00.000Z", "testsslGrade": "A+", @@ -24417,8 +22274,8 @@ "cookiesCount": 4, "trackersGrade": "C", "trackersCount": 5, - "lighthouse_performance": 0.51, - "lighthouse_performanceGrade": "C", + "lighthouse_performance": 0.47, + "lighthouse_performanceGrade": "D", "lighthouse_accessibility": 0.98, "lighthouse_accessibilityGrade": "A", "lighthouse_best-practices": 0.53, @@ -24437,297 +22294,7 @@ "tags": [ "social" ], - "http": { - "url": "https://demat.social.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 14 Jul 2024 02:28:47 GMT", - "grade": "B+", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Cache-Control": "max-age=0, private, must-revalidate", - "Connection": "keep-alive", - "Content-Security-Policy": "img-src 'self' data: blob: *.openstreetmap.org *.cloud.ovh.net *; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.crisp.chat crisp.chat cdn.jsdelivr.net maxcdn.bootstrapcdn.com code.jquery.com unpkg.com; style-src 'self' 'unsafe-inline' *.crisp.chat crisp.chat cdn.jsdelivr.net maxcdn.bootstrapcdn.com unpkg.com; connect-src 'self' wss://*.crisp.chat *.crisp.chat in-automate.sendinblue.com app.franceconnect.gouv.fr sentry.io openmaptiles.geo.data.gouv.fr openmaptiles.github.io tiles.geo.api.gouv.fr wxs.ign.fr *.cegedim.cloud *.fabrique.social.gouv.fr demat.social.gouv.fr sentry.fabrique.social.gouv.fr api-adresse.data.gouv.fr data.education.gouv.fr geo.api.gouv.fr arssante.opendatasoft.com; frame-src 'self'; default-src 'self' data: blob: 'report-sample' fonts.gstatic.com in-automate.sendinblue.com player.vimeo.com app.franceconnect.gouv.fr *.crisp.chat crisp.chat *.crisp.help *.sibautomation.com sibautomation.com data sentry.fabrique.social.gouv.fr", - "Content-Type": "text/html; charset=utf-8", - "Date": "Sun, 14 Jul 2024 02:28:45 GMT", - "Link": "; rel=modulepreload; as=script; crossorigin=anonymous; nopush,; rel=preload; as=script; nopush,; rel=preload; as=script; nopush,; rel=preload; as=font; type=font/woff2; crossorigin=anonymous,; rel=preload; as=font; type=font/ttf; crossorigin=anonymous,; rel=preload; as=style; nopush,; rel=preload; as=style; nopush", - "Referrer-Policy": "strict-origin-when-cross-origin", - "Set-Cookie": "_csrf_token=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqVm5RbXA0TTFacWVFRk1iV3BTUW5Wc2VpMXhYMmhtYlZRMGIzQm1lbDlZYjJKNlJHMTVWVkYwTVZVaSIsImV4cCI6IjIwMjUtMDctMTRUMDI6Mjg6NDUuOTQzWiIsInB1ciI6ImNvb2tpZS5fY3NyZl90b2tlbiJ9fQ%3D%3D--2c852eb0cf74daa039e5b49a3ac86a14770e0eb0; path=/; expires=Mon, 14 Jul 2025 02:28:45 GMT; HttpOnly; SameSite=Lax; secure, _DS_session=EIW0LYxZywsD7%2FgvKpPSRa34lvqMZZmtoBBLckUKkC8DtuOWq7apnS8Ai0JOywkVGf4QRBXa0aghCcrj8lLh8uvNYySAmgQQKWj7UAw%2BDWWpyVECdQtbF9csh9rw0P1bKuzsdoz2FzOzTLVHe4ARMXAk%2FnkT6CU7M0y6w81pqVxTqKFgyrVRMkPg0b6DEZT8tkZDrKjmjFdVR%2Faab0%2BB4vMrZUkJ%2BztSPWBj%2Fhe8eKYtTFzKAYc80MSwPx06gm0TfWPe6su1QApmnYN64yzwp%2F9ycg%3D%3D--PrJuSukfvx7nO0Db--ZivHCguMrLHAUe%2BjQi8Veg%3D%3D; HttpOnly; path=/; secure; HttpOnly; SameSite=Lax, BIGipServerpool-dgos-dds-prod.cegedim.cloud-TCP3000=!o5nTHq98NnmgcQNWDPlD0yXzT0UGhuhQ5k2ex4dinwE20+kN6Iy9ow/WNUdwvQZoA4eBiIcN3tqcHK7oxjDL7CXpCiPu; path=/; Httponly; Secure", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Transfer-Encoding": "chunked", - "Vary": "Accept", - "X-Content-Type-Options": "nosniff", - "X-Download-Options": "noopen", - "X-Frame-Options": "SAMEORIGIN", - "X-Permitted-Cross-Domain-Policies": "none", - "X-Request-Id": "0b59260e-cc7e-42d5-8861-facf7d99a7bb", - "X-Runtime": "0.040823", - "X-XSS-Protection": "0" - }, - "scan_id": 53368532, - "score": 80, - "start_time": "Sun, 14 Jul 2024 02:28:44 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 1, - "tests_passed": 10, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": { - "connect-src": [ - "app.franceconnect.gouv.fr", - "*.fabrique.social.gouv.fr", - "wss://*.crisp.chat", - "*.cegedim.cloud", - "sentry.io", - "'self'", - "openmaptiles.github.io", - "demat.social.gouv.fr", - "*.crisp.chat", - "openmaptiles.geo.data.gouv.fr", - "arssante.opendatasoft.com", - "api-adresse.data.gouv.fr", - "in-automate.sendinblue.com", - "sentry.fabrique.social.gouv.fr", - "tiles.geo.api.gouv.fr", - "wxs.ign.fr", - "data.education.gouv.fr", - "geo.api.gouv.fr" - ], - "default-src": [ - "app.franceconnect.gouv.fr", - "player.vimeo.com", - "'self'", - "fonts.gstatic.com", - "*.crisp.chat", - "crisp.chat", - "'report-sample'", - "blob:", - "in-automate.sendinblue.com", - "sentry.fabrique.social.gouv.fr", - "sibautomation.com", - "*.crisp.help", - "data", - "*.sibautomation.com" - ], - "frame-src": [ - "'self'" - ], - "img-src": [ - "*.openstreetmap.org", - "'self'", - "*", - "blob:", - "data:" - ], - "script-src": [ - "'unsafe-inline'", - "cdn.jsdelivr.net", - "unpkg.com", - "'self'", - "*.crisp.chat", - "crisp.chat", - "blob:", - "maxcdn.bootstrapcdn.com", - "code.jquery.com", - "'unsafe-eval'" - ], - "style-src": [ - "'unsafe-inline'", - "cdn.jsdelivr.net", - "unpkg.com", - "'self'", - "crisp.chat", - "*.crisp.chat", - "maxcdn.bootstrapcdn.com" - ] - }, - "http": true, - "meta": false, - "numPolicies": 1, - "policy": { - "antiClickjacking": false, - "defaultNone": false, - "insecureBaseUri": true, - "insecureFormAction": true, - "insecureSchemeActive": false, - "insecureSchemePassive": false, - "strictDynamic": false, - "unsafeEval": true, - "unsafeInline": true, - "unsafeInlineStyle": true, - "unsafeObjects": false - } - }, - "pass": false, - "result": "csp-implemented-with-unsafe-inline", - "score_description": "Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.", - "score_modifier": -20 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dgos-dds-prod.cegedim.cloud-TCP3000": { - "domain": "demat.social.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "_DS_session": { - "domain": "demat.social.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": "Lax", - "secure": true - }, - "_csrf_token": { - "domain": "demat.social.gouv.fr", - "expires": 1752460126, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": "Lax", - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://demat.social.gouv.fr/", - "redirects": true, - "route": [ - "http://demat.social.gouv.fr/", - "https://demat.social.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": "strict-origin-when-cross-origin", - "http": true, - "meta": false - }, - "pass": true, - "result": "referrer-policy-private", - "score_description": "Referrer-Policy header set to \"no-referrer\", \"same-origin\", \"strict-origin\" or \"strict-origin-when-cross-origin\"", - "score_modifier": 5 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": "0" - }, - "pass": true, - "result": "x-xss-protection-disabled", - "score_description": "Deprecated X-XSS-Protection header set to \"0\" (disabled)", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -25073,7 +22640,7 @@ "ip": "demat.social.gouv.fr/185.194.82.212", "port": "443", "severity": "OK", - "finding": "303 >= 60 days" + "finding": "289 >= 60 days" }, { "id": "cert_notBefore", @@ -25227,35 +22794,14 @@ "ip": "demat.social.gouv.fr/185.194.82.212", "port": "443", "severity": "INFO", - "finding": "0 seconds from localtime" - }, - { - "id": "HTTP_headerTime", - "ip": "demat.social.gouv.fr/185.194.82.212", - "port": "443", - "severity": "INFO", - "finding": "1720924177" - }, - { - "id": "HSTS_time", - "ip": "demat.social.gouv.fr/185.194.82.212", - "port": "443", - "severity": "OK", - "finding": "365 days (=31536000 seconds) > 15552000 seconds" - }, - { - "id": "HSTS_subdomains", - "ip": "demat.social.gouv.fr/185.194.82.212", - "port": "443", - "severity": "OK", - "finding": "includes subdomains" + "finding": "Got no HTTP time, maybe try different URL?" }, { - "id": "HSTS_preload", + "id": "HSTS", "ip": "demat.social.gouv.fr/185.194.82.212", "port": "443", - "severity": "INFO", - "finding": "domain is NOT marked for preloading" + "severity": "LOW", + "finding": "not offered" }, { "id": "HPKP", @@ -25283,63 +22829,21 @@ "ip": "demat.social.gouv.fr/185.194.82.212", "port": "443", "severity": "INFO", - "finding": "3 at '/'" - }, - { - "id": "cookie_secure", - "ip": "demat.social.gouv.fr/185.194.82.212", - "port": "443", - "severity": "OK", - "finding": "All (3) at '/' marked as secure" - }, - { - "id": "cookie_httponly", - "ip": "demat.social.gouv.fr/185.194.82.212", - "port": "443", - "severity": "OK", - "finding": "All (3) at '/' marked as HttpOnly" - }, - { - "id": "X-Frame-Options", - "ip": "demat.social.gouv.fr/185.194.82.212", - "port": "443", - "severity": "OK", - "finding": "SAMEORIGIN" - }, - { - "id": "X-Content-Type-Options", - "ip": "demat.social.gouv.fr/185.194.82.212", - "port": "443", - "severity": "OK", - "finding": "nosniff" - }, - { - "id": "Content-Security-Policy", - "ip": "demat.social.gouv.fr/185.194.82.212", - "port": "443", - "severity": "OK", - "finding": "img-src 'self' data: blob: *.openstreetmap.org *.cloud.ovh.net *; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.crisp.chat crisp.chat cdn.jsdelivr.net maxcdn.bootstrapcdn.com code.jquery.com unpkg.com; style-src 'self' 'unsafe-inline' *.crisp.chat crisp.chat cdn.jsdelivr.net maxcdn.bootstrapcdn.com unpkg.com; connect-src 'self' wss://*.crisp.chat *.crisp.chat in-automate.sendinblue.com app.franceconnect.gouv.fr sentry.io openmaptiles.geo.data.gouv.fr openmaptiles.github.io tiles.geo.api.gouv.fr wxs.ign.fr *.cegedim.cloud *.fabrique.social.gouv.fr demat.social.gouv.fr sentry.fabrique.social.gouv.fr api-adresse.data.gouv.fr data.education.gouv.fr geo.api.gouv.fr arssante.opendatasoft.com; frame-src 'self'; default-src 'self' data: blob: 'report-sample' fonts.gstatic.com in-automate.sendinblue.com player.vimeo.com app.franceconnect.gouv.fr *.crisp.chat crisp.chat *.crisp.help *.sibautomation.com sibautomation.com data sentry.fabrique.social.gouv.fr" - }, - { - "id": "X-XSS-Protection", - "ip": "demat.social.gouv.fr/185.194.82.212", - "port": "443", - "severity": "INFO", - "finding": "0" + "finding": "0 at '/'" }, { - "id": "Referrer-Policy", + "id": "Cache-Control", "ip": "demat.social.gouv.fr/185.194.82.212", "port": "443", "severity": "INFO", - "finding": "strict-origin-when-cross-origin" + "finding": "no-store, must-revalidate, no-cache" }, { - "id": "Cache-Control", + "id": "Pragma", "ip": "demat.social.gouv.fr/185.194.82.212", "port": "443", "severity": "INFO", - "finding": "max-age=0, private, must-revalidate" + "finding": "no-cache" }, { "id": "banner_reverseproxy", @@ -25839,83 +23343,32 @@ "ip": "demat.social.gouv.fr/185.194.82.212", "port": "443", "severity": "OK", - "finding": "A+" + "finding": "A" + }, + { + "id": "grade_cap_reason_1", + "ip": "demat.social.gouv.fr/185.194.82.212", + "port": "443", + "severity": "INFO", + "finding": "Grade capped to A. HSTS is not offered" }, { "id": "scanTime", "ip": "demat.social.gouv.fr/185.194.82.212", "port": "443", "severity": "INFO", - "finding": "52" + "finding": "48" } ], "thirdparties": { "trackers": [], - "cookies": [ - { - "name": "BIGipServerpool-dgos-dds-prod.cegedim.cloud-TCP3000", - "value": "!fVNV1NskCcL4vt5WDPlD0yXzT0UGhtoalyHYa1ObEtQZTk0sQBond4Cqh41oKQhJepUukugKu88l3NVoqPeMFAmb6xKB", - "domain": "demat.social.gouv.fr", - "path": "/", - "expires": -1, - "size": 144, - "httpOnly": true, - "secure": true, - "session": true, - "sameParty": false, - "sourceScheme": "Secure", - "sourcePort": 443 - }, - { - "name": "_DS_session", - "value": "%2F9Lj24vm5iSMsimFCPVCLQpDRwSvOytFP0ac181f6ydmQo%2BNI7C%2BCJantYg2LpGFeq9sNzeE9ioazS47vgtBymzhkFlbXEuPJUxbtky7O1SUpfpPI42N69w6K1jam8AajSzMCDBO41cukcMQI3gE7Zm3eCpEz%2BmvjGSd2Jyv2kL8LLmliiVxL2Jgfk5n1gV2hPHBmtwrJ0IM8VozgB3zBSLiQOqH2uJiFZbSyurgjyOmhzOTiCYLFKnDKwTN9u2jkzYWIs7uiDVTuOdhd2upwZfhoQ%3D%3D--woTgn8ZECCbInjfM--FbZ3PaVAFSyRoELKiti9YA%3D%3D", - "domain": "demat.social.gouv.fr", - "path": "/", - "expires": -1, - "size": 355, - "httpOnly": true, - "secure": true, - "session": true, - "sameSite": "Lax", - "sameParty": false, - "sourceScheme": "Secure", - "sourcePort": 443 - }, - { - "name": "_csrf_token", - "value": "eyJfcmFpbHMiOnsibWVzc2FnZSI6IkltRkhMVlZsU25aME0yMWpSRFp6ZWtKWGEzcHVXRXAxTld0UVduaG9RMFk0YlZodE4yTnFjMjR6TWxVaSIsImV4cCI6IjIwMjUtMDctMTRUMDI6Mjk6MDIuOTA2WiIsInB1ciI6ImNvb2tpZS5fY3NyZl90b2tlbiJ9fQ%3D%3D--458929ed1b1ce151ab7964481071084aa2bc6ad7", - "domain": "demat.social.gouv.fr", - "path": "/", - "expires": 1752460142.965021, - "size": 253, - "httpOnly": true, - "secure": true, - "session": false, - "sameSite": "Lax", - "sameParty": false, - "sourceScheme": "Secure", - "sourcePort": 443 - } - ], + "cookies": [], "headers": { - "cache-control": "max-age=0, private, must-revalidate", - "connection": "keep-alive", - "content-encoding": "gzip", - "content-security-policy": "img-src 'self' data: blob: *.openstreetmap.org *.cloud.ovh.net *; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.crisp.chat crisp.chat cdn.jsdelivr.net maxcdn.bootstrapcdn.com code.jquery.com unpkg.com; style-src 'self' 'unsafe-inline' *.crisp.chat crisp.chat cdn.jsdelivr.net maxcdn.bootstrapcdn.com unpkg.com; connect-src 'self' wss://*.crisp.chat *.crisp.chat in-automate.sendinblue.com app.franceconnect.gouv.fr sentry.io openmaptiles.geo.data.gouv.fr openmaptiles.github.io tiles.geo.api.gouv.fr wxs.ign.fr *.cegedim.cloud *.fabrique.social.gouv.fr demat.social.gouv.fr sentry.fabrique.social.gouv.fr api-adresse.data.gouv.fr data.education.gouv.fr geo.api.gouv.fr arssante.opendatasoft.com; frame-src 'self'; default-src 'self' data: blob: 'report-sample' fonts.gstatic.com in-automate.sendinblue.com player.vimeo.com app.franceconnect.gouv.fr *.crisp.chat crisp.chat *.crisp.help *.sibautomation.com sibautomation.com data sentry.fabrique.social.gouv.fr", - "content-type": "text/html; charset=utf-8", - "date": "Sun, 14 Jul 2024 02:29:02 GMT", - "link": "; rel=modulepreload; as=script; crossorigin=anonymous; nopush,; rel=preload; as=script; nopush,; rel=preload; as=script; nopush,; rel=preload; as=font; type=font/woff2; crossorigin=anonymous,; rel=preload; as=font; type=font/ttf; crossorigin=anonymous,; rel=preload; as=style; nopush,; rel=preload; as=style; nopush", - "referrer-policy": "strict-origin-when-cross-origin", - "set-cookie": "_csrf_token=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkltRkhMVlZsU25aME0yMWpSRFp6ZWtKWGEzcHVXRXAxTld0UVduaG9RMFk0YlZodE4yTnFjMjR6TWxVaSIsImV4cCI6IjIwMjUtMDctMTRUMDI6Mjk6MDIuOTA2WiIsInB1ciI6ImNvb2tpZS5fY3NyZl90b2tlbiJ9fQ%3D%3D--458929ed1b1ce151ab7964481071084aa2bc6ad7; path=/; expires=Mon, 14 Jul 2025 02:29:02 GMT; HttpOnly; SameSite=Lax; secure\n_DS_session=%2F9Lj24vm5iSMsimFCPVCLQpDRwSvOytFP0ac181f6ydmQo%2BNI7C%2BCJantYg2LpGFeq9sNzeE9ioazS47vgtBymzhkFlbXEuPJUxbtky7O1SUpfpPI42N69w6K1jam8AajSzMCDBO41cukcMQI3gE7Zm3eCpEz%2BmvjGSd2Jyv2kL8LLmliiVxL2Jgfk5n1gV2hPHBmtwrJ0IM8VozgB3zBSLiQOqH2uJiFZbSyurgjyOmhzOTiCYLFKnDKwTN9u2jkzYWIs7uiDVTuOdhd2upwZfhoQ%3D%3D--woTgn8ZECCbInjfM--FbZ3PaVAFSyRoELKiti9YA%3D%3D; HttpOnly; path=/; secure; HttpOnly; SameSite=Lax\nBIGipServerpool-dgos-dds-prod.cegedim.cloud-TCP3000=!fVNV1NskCcL4vt5WDPlD0yXzT0UGhtoalyHYa1ObEtQZTk0sQBond4Cqh41oKQhJepUukugKu88l3NVoqPeMFAmb6xKB; path=/; Httponly; Secure", - "strict-transport-security": "max-age=31536000; includeSubDomains", - "transfer-encoding": "chunked", - "x-content-type-options": "nosniff", - "x-download-options": "noopen", - "x-frame-options": "SAMEORIGIN", - "x-permitted-cross-domain-policies": "none", - "x-request-id": "6ce0667f-86dd-49a4-96bf-42f7442f0927", - "x-runtime": "0.016705", - "x-xss-protection": "0" + "cache-control": "no-store, must-revalidate, no-cache", + "connection": "close", + "content-length": "245", + "content-type": "text/html", + "pragma": "no-cache" }, "endpoints": [ { @@ -26134,13 +23587,13 @@ { "requestedUrl": "https://demat.social.gouv.fr/", "finalUrl": "https://demat.social.gouv.fr/", - "fetchTime": "2024-07-14T02:28:34.261Z", + "fetchTime": "2024-07-28T02:28:31.655Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.33 + "score": 0.06 }, "accessibility": { "title": "Accessibility", @@ -26152,7 +23605,7 @@ "best-practices": { "title": "Best Practices", "id": "best-practices", - "score": 1 + "score": 0.87 }, "seo": { "title": "SEO", @@ -26176,49 +23629,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 12349, + "numericValue": 17997, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 10640, - "firstMeaningfulPaint": 10640, - "largestContentfulPaint": 14807, - "firstCPUIdle": 10640, - "interactive": 12349, - "speedIndex": 10785, - "estimatedInputLatency": 13, - "totalBlockingTime": 45, - "maxPotentialFID": 95, + "firstContentfulPaint": 10853, + "firstMeaningfulPaint": 10853, + "largestContentfulPaint": 15191, + "firstCPUIdle": 16102, + "interactive": 17997, + "speedIndex": 12146, + "estimatedInputLatency": 2162, + "totalBlockingTime": 3976, + "maxPotentialFID": 3186, "cumulativeLayoutShift": 0.0030563151041666666, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 362761381, + "observedTimeOriginTs": 371117122, "observedNavigationStart": 0, - "observedNavigationStartTs": 362761381, - "observedFirstPaint": 1988, - "observedFirstPaintTs": 364749044, - "observedFirstContentfulPaint": 1988, - "observedFirstContentfulPaintTs": 364749044, - "observedFirstMeaningfulPaint": 1988, - "observedFirstMeaningfulPaintTs": 364749044, - "observedLargestContentfulPaint": 2260, - "observedLargestContentfulPaintTs": 365021722, - "observedTraceEnd": 3287, - "observedTraceEndTs": 366048511, - "observedLoad": 2214, - "observedLoadTs": 364975109, - "observedDomContentLoaded": 1954, - "observedDomContentLoadedTs": 364715476, + "observedNavigationStartTs": 371117122, + "observedFirstPaint": 1752, + "observedFirstPaintTs": 372869422, + "observedFirstContentfulPaint": 1752, + "observedFirstContentfulPaintTs": 372869422, + "observedFirstMeaningfulPaint": 1752, + "observedFirstMeaningfulPaintTs": 372869422, + "observedLargestContentfulPaint": 2008, + "observedLargestContentfulPaintTs": 373124633, + "observedTraceEnd": 4132, + "observedTraceEndTs": 375248979, + "observedLoad": 2051, + "observedLoadTs": 373167804, + "observedDomContentLoaded": 1735, + "observedDomContentLoadedTs": 372851835, "observedCumulativeLayoutShift": 0.0030563151041666666, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 1974, - "observedFirstVisualChangeTs": 364735381, - "observedLastVisualChange": 2274, - "observedLastVisualChangeTs": 365035381, - "observedSpeedIndex": 2110, - "observedSpeedIndexTs": 364871738 + "observedFirstVisualChange": 1751, + "observedFirstVisualChangeTs": 372868122, + "observedLastVisualChange": 2017, + "observedLastVisualChangeTs": 373134122, + "observedSpeedIndex": 1872, + "observedSpeedIndexTs": 372989580 }, { "lcpInvalidated": false @@ -26236,23 +23689,23 @@ "type": "debugdata", "items": [ { - "numRequests": 28, - "numScripts": 9, + "numRequests": 34, + "numScripts": 12, "numStylesheets": 2, "numFonts": 5, - "numTasks": 848, - "numTasksOver10ms": 4, - "numTasksOver25ms": 1, - "numTasksOver50ms": 0, - "numTasksOver100ms": 0, - "numTasksOver500ms": 0, - "rtt": 94.405, - "throughput": 12840776.707113817, - "maxRtt": 94.405, - "maxServerLatency": 2.4049999999999727, - "totalByteWeight": 2313038, - "totalTaskTime": 207.14299999999866, - "mainDocumentTransferSize": 17824 + "numTasks": 1234, + "numTasksOver10ms": 6, + "numTasksOver25ms": 3, + "numTasksOver50ms": 3, + "numTasksOver100ms": 2, + "numTasksOver500ms": 1, + "rtt": 77.378, + "throughput": 14262902.509848805, + "maxRtt": 77.378, + "maxServerLatency": 2.7579999999999956, + "totalByteWeight": 2454034, + "totalTaskTime": 1281.1210000000035, + "mainDocumentTransferSize": 18389 } ] } @@ -26265,8 +23718,7 @@ "github_repository": null, "budget_page": null, "declaration-a11y": { - "mention": "Accessibilité : partiellement conforme", - "declarationUrl": "https://demat.social.gouv.fr/Demat-demarches-sociales_accessibilite.pdf" + "mention": null }, "declaration-rgpd": null, "betagouv": null, @@ -26274,25 +23726,24 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B+", "testsslExpireSoon": false, "testsslExpireDate": "2025-05-13T21:59:00.000Z", - "testsslGrade": "A+", - "cookiesGrade": "C", - "cookiesCount": 3, + "testsslGrade": "A", + "cookiesGrade": "A", + "cookiesCount": 0, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.33, - "lighthouse_performanceGrade": "E", + "lighthouse_performance": 0.06, + "lighthouse_performanceGrade": "F", "lighthouse_accessibility": 1, "lighthouse_accessibilityGrade": "A", - "lighthouse_best-practices": 1, + "lighthouse_best-practices": 0.87, "lighthouse_best-practicesGrade": "A", "lighthouse_seo": 0.92, "lighthouse_seoGrade": "A", "lighthouse_pwa": 0.58, "lighthouse_pwaGrade": "C", - "declaration-a11y": "B" + "declaration-a11y": "F" } }, { @@ -26302,253 +23753,18 @@ "tags": [ "sports" ], - "http": { - "url": "https://developpement-durable.sports.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 02:29:08 GMT", - "grade": "B", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Cache-Control": "max-age=86400, public", - "Cache-Tags": "HIT", - "Connection": "keep-alive", - "Content-Encoding": "gzip", - "Content-Length": "15725", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sun, 21 Jul 2024 02:29:05 GMT", - "ETag": "W/\"1721458248\"", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Last-Modified": "Sat, 20 Jul 2024 06:50:48 GMT", - "Server": "nginx", - "Strict-Transport-Security": "max-age=31536000; includeSubdomains", - "Vary": "Accept-Encoding", - "X-Cache": "HIT", - "X-Cache-Age": "70686", - "X-Cache-Hits": "59", - "X-Cache-TTL": "86400.000", - "X-Cacheable": "YES", - "X-Content-Type-Options": "nosniff", - "X-Drupal-Dynamic-Cache": "MISS", - "X-Frame-Options": "SAMEORIGIN", - "X-UA-Compatible": "IE=edge" - }, - "scan_id": 53617783, - "score": 75, - "start_time": "Sun, 21 Jul 2024 02:29:03 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 1, - "tests_passed": 10, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": null, - "sameSite": null - }, - "pass": true, - "result": "cookies-not-found", - "score_description": "No cookies detected", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://www.sports.gouv.fr/accelerer-la-transition-ecologique-du-sport-36", - "redirects": true, - "route": [ - "http://developpement-durable.sports.gouv.fr/", - "https://developpement-durable.sports.gouv.fr/", - "https://www.sports.gouv.fr/accelerer-la-transition-ecologique-du-sport-36" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubdomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, "codescan": null, "testssl": [ - { - "id": "service", - "ip": "developpement-durable.sports.gouv.fr/185.75.143.93", - "port": "443", - "severity": "INFO", - "finding": "HTTP" - }, - { - "id": "pre_128cipher", - "ip": "developpement-durable.sports.gouv.fr/185.75.143.93", - "port": "443", - "severity": "INFO", - "finding": "No 128 cipher limit bug" - }, - { - "id": "SSLv2", - "ip": "developpement-durable.sports.gouv.fr/185.75.143.93", - "port": "443", - "severity": "OK", - "finding": "not offered" - }, - { - "id": "SSLv3", - "ip": "developpement-durable.sports.gouv.fr/185.75.143.93", - "port": "443", - "severity": "OK", - "finding": "not offered" - }, - { - "id": "TLS1", - "ip": "developpement-durable.sports.gouv.fr/185.75.143.93", - "port": "443", - "severity": "INFO", - "finding": "not offered" - }, - { - "id": "TLS1_1", - "ip": "developpement-durable.sports.gouv.fr/185.75.143.93", - "port": "443", - "severity": "INFO", - "finding": "not offered" - }, - { - "id": "TLS1_2", - "ip": "developpement-durable.sports.gouv.fr/185.75.143.93", - "port": "443", - "severity": "OK", - "finding": "offered" - }, { "id": "scanProblem", "ip": "developpement-durable.sports.gouv.fr/185.75.143.93", "port": "443", "severity": "FATAL", - "finding": "repeated TCP connect problems, giving up" + "finding": "Can't connect to '185.75.143.93:443' Make sure a firewall is not between you and your scanning target!" }, { "id": "scanTime", @@ -26559,91 +23775,9 @@ } ], "thirdparties": { - "trackers": [], - "cookies": [], - "headers": { - "accept-ranges": "bytes", - "cache-control": "max-age=86400, public", - "cache-tags": "HIT", - "content-encoding": "gzip", - "content-language": "fr", - "content-length": "15725", - "content-type": "text/html; charset=UTF-8", - "date": "Sun, 21 Jul 2024 02:30:32 GMT", - "etag": "W/\"1721455113\"", - "expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "last-modified": "Sat, 20 Jul 2024 05:58:33 GMT", - "server": "nginx", - "strict-transport-security": "max-age=31536000; includeSubdomains", - "vary": "Accept-Encoding", - "x-cache": "HIT", - "x-cache-age": "73463", - "x-cache-hits": "48", - "x-cache-ttl": "86400.000", - "x-cacheable": "YES", - "x-content-type-options": "nosniff", - "x-drupal-dynamic-cache": "MISS", - "x-frame-options": "SAMEORIGIN", - "x-ua-compatible": "IE=edge" - }, - "endpoints": [ - { - "hostname": "developpement-durable.sports.gouv.fr", - "ip": "185.75.143.93", - "geoip": { - "continent": { - "code": "EU", - "geoname_id": 6255148, - "names": { - "de": "Europa", - "en": "Europe", - "es": "Europa", - "fr": "Europe", - "ja": "ヨーロッパ", - "pt-BR": "Europa", - "ru": "Европа", - "zh-CN": "欧洲" - } - }, - "country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - }, - "location": { - "accuracy_radius": 500, - "latitude": 48.8582, - "longitude": 2.3387, - "time_zone": "Europe/Paris" - }, - "registered_country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - } - } - } - ] + "trackers": null, + "cookies": null, + "headers": null }, "wappalyzer": { "urls": { @@ -26660,7 +23794,7 @@ { "requestedUrl": "https://developpement-durable.sports.gouv.fr/", "finalUrl": "https://www.sports.gouv.fr/accelerer-la-transition-ecologique-du-sport-36", - "fetchTime": "2024-07-21T02:28:54.495Z", + "fetchTime": "2024-07-28T02:31:22.233Z", "runWarnings": [ "The page may not be loading as expected because your test URL (https://developpement-durable.sports.gouv.fr/) was redirected to https://www.sports.gouv.fr/accelerer-la-transition-ecologique-du-sport-36. Try testing the second URL directly." ], @@ -26668,7 +23802,7 @@ "performance": { "title": "Performance", "id": "performance", - "score": 0.61 + "score": 0.63 }, "accessibility": { "title": "Accessibility", @@ -26704,49 +23838,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 7437, + "numericValue": 7495, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 2463, - "firstMeaningfulPaint": 2463, - "largestContentfulPaint": 6560, - "firstCPUIdle": 4437, - "interactive": 7437, - "speedIndex": 5677, + "firstContentfulPaint": 2445, + "firstMeaningfulPaint": 2445, + "largestContentfulPaint": 6467, + "firstCPUIdle": 4570, + "interactive": 7495, + "speedIndex": 4622, "estimatedInputLatency": 13, - "totalBlockingTime": 70, - "maxPotentialFID": 85, - "cumulativeLayoutShift": 0.005393880208333333, + "totalBlockingTime": 219, + "maxPotentialFID": 163, + "cumulativeLayoutShift": 0.006093098958333334, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 320802272, + "observedTimeOriginTs": 420683158, "observedNavigationStart": 0, - "observedNavigationStartTs": 320802272, - "observedFirstPaint": 1334, - "observedFirstPaintTs": 322136239, - "observedFirstContentfulPaint": 1334, - "observedFirstContentfulPaintTs": 322136239, - "observedFirstMeaningfulPaint": 1334, - "observedFirstMeaningfulPaintTs": 322136239, - "observedLargestContentfulPaint": 1662, - "observedLargestContentfulPaintTs": 322464650, - "observedTraceEnd": 3018, - "observedTraceEndTs": 323820168, - "observedLoad": 1802, - "observedLoadTs": 322603783, - "observedDomContentLoaded": 1457, - "observedDomContentLoadedTs": 322259116, - "observedCumulativeLayoutShift": 0.005393880208333333, + "observedNavigationStartTs": 420683158, + "observedFirstPaint": 952, + "observedFirstPaintTs": 421634794, + "observedFirstContentfulPaint": 952, + "observedFirstContentfulPaintTs": 421634794, + "observedFirstMeaningfulPaint": 952, + "observedFirstMeaningfulPaintTs": 421634794, + "observedLargestContentfulPaint": 1175, + "observedLargestContentfulPaintTs": 421857740, + "observedTraceEnd": 2349, + "observedTraceEndTs": 423032315, + "observedLoad": 1185, + "observedLoadTs": 421868087, + "observedDomContentLoaded": 1044, + "observedDomContentLoadedTs": 421727184, + "observedCumulativeLayoutShift": 0.006093098958333334, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 1334, - "observedFirstVisualChangeTs": 322136272, - "observedLastVisualChange": 2468, - "observedLastVisualChangeTs": 323270272, - "observedSpeedIndex": 2011, - "observedSpeedIndexTs": 322813754 + "observedFirstVisualChange": 949, + "observedFirstVisualChangeTs": 421632158, + "observedLastVisualChange": 2066, + "observedLastVisualChangeTs": 422749158, + "observedSpeedIndex": 1434, + "observedSpeedIndexTs": 422116781 }, { "lcpInvalidated": false @@ -26768,19 +23902,19 @@ "numScripts": 6, "numStylesheets": 3, "numFonts": 4, - "numTasks": 876, - "numTasksOver10ms": 6, - "numTasksOver25ms": 3, - "numTasksOver50ms": 0, + "numTasks": 798, + "numTasksOver10ms": 9, + "numTasksOver25ms": 5, + "numTasksOver50ms": 1, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 153.255, - "throughput": 26733937.81657403, - "maxRtt": 153.45100000000002, - "maxServerLatency": 4.641999999999996, - "totalByteWeight": 1666745, - "totalTaskTime": 277.8379999999982, - "mainDocumentTransferSize": 16215 + "rtt": 101.43100000000001, + "throughput": 36834354.60900424, + "maxRtt": 104.21499999999999, + "maxServerLatency": 6.856999999999985, + "totalByteWeight": 1668257, + "totalTaskTime": 365.174999999999, + "mainDocumentTransferSize": 16249 } ] } @@ -26802,12 +23936,11 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B", - "cookiesGrade": "A", - "cookiesCount": 0, - "trackersGrade": "A", - "trackersCount": 0, - "lighthouse_performance": 0.61, + "cookiesGrade": null, + "cookiesCount": null, + "trackersGrade": null, + "trackersCount": null, + "lighthouse_performance": 0.63, "lighthouse_performanceGrade": "C", "lighthouse_accessibility": 0.92, "lighthouse_accessibilityGrade": "A", @@ -26864,6 +23997,87 @@ }, "zap": null, "nuclei": [ + { + "template": "dns/nameserver-fingerprint.yaml", + "template-url": "https://templates.nuclei.sh/public/nameserver-fingerprint", + "template-id": "nameserver-fingerprint", + "template-path": "/home/runner/nuclei-templates/dns/nameserver-fingerprint.yaml", + "info": { + "name": "NS Record Detection", + "author": [ + "pdteam" + ], + "tags": [ + "dns", + "ns" + ], + "description": "An NS record was detected. An NS record delegates a subdomain to a set of name servers.", + "severity": "info", + "metadata": { + "max-request": 1 + }, + "classification": { + "cve-id": null, + "cwe-id": [ + "cwe-200" + ] + } + }, + "type": "dns", + "host": "direccte.gouv.fr.", + "matched-at": "direccte.gouv.fr", + "extracted-results": [ + "nsc.perf1.com.", + "a.ns.developpement-durable.gouv.fr.", + "b.ns.developpement-durable.gouv.fr.", + "nsa.perf1.fr.", + "nsb.perf1.com." + ], + "timestamp": "2024-07-28T02:45:22.317961142Z", + "matcher-status": true + }, + { + "template": "dns/mx-fingerprint.yaml", + "template-url": "https://templates.nuclei.sh/public/mx-fingerprint", + "template-id": "mx-fingerprint", + "template-path": "/home/runner/nuclei-templates/dns/mx-fingerprint.yaml", + "info": { + "name": "MX Record Detection", + "author": [ + "pdteam" + ], + "tags": [ + "dns", + "mx" + ], + "description": "An MX record was detected. MX records direct emails to a mail exchange server.", + "reference": [ + "https://www.cloudflare.com/learning/dns/dns-records/dns-mx-record/", + "https://mxtoolbox.com/" + ], + "severity": "info", + "metadata": { + "max-request": 1 + }, + "classification": { + "cve-id": null, + "cwe-id": [ + "cwe-200" + ] + } + }, + "type": "dns", + "host": "direccte.gouv.fr.", + "matched-at": "direccte.gouv.fr", + "extracted-results": [ + "10 PRO093001APP413.social.gouv.fr.", + "10 PRO075001APP410.social.gouv.fr.", + "10 PRO093001APP412.social.gouv.fr.", + "10 PRO075001APP411.social.gouv.fr." + ], + "timestamp": "2024-07-28T02:45:22.319394829Z", + "matcher-status": true + }, { "template": "dns/spf-record-detect.yaml", "template-url": "https://templates.nuclei.sh/public/spf-record-detect", @@ -26893,7 +24107,7 @@ "extracted-results": [ "v=spf1 include:_spf.sante.gouv.fr include:_spf.pfai.rie.gouv.fr include:_spf-njo.cegedim.fr ~all\"" ], - "timestamp": "2024-07-21T02:41:49.170726304Z", + "timestamp": "2024-07-28T02:45:22.347430428Z", "matcher-status": true }, { @@ -26929,12 +24143,12 @@ "host": "direccte.gouv.fr.", "matched-at": "direccte.gouv.fr", "extracted-results": [ - "\"v=spf1 include:_spf.sante.gouv.fr include:_spf.pfai.rie.gouv.fr include:_spf-njo.cegedim.fr ~all\"", "\"MS=ms10035681\"", - "\"R+PuUwRUOuIkhtFtitRXWrMTFS6Au3xy7/TK7gHSDIMusO78eAv8a04QXuol8S0Nq4V7RMAvrbpSW29dddtPjg==\"", - "\"cisco-ci-domain-verification=4f0dbd28841cdec33cfa3966c36911028ffbbcd90a6a9c4b34ecd75286ea17d2\"" + "\"cisco-ci-domain-verification=4f0dbd28841cdec33cfa3966c36911028ffbbcd90a6a9c4b34ecd75286ea17d2\"", + "\"v=spf1 include:_spf.sante.gouv.fr include:_spf.pfai.rie.gouv.fr include:_spf-njo.cegedim.fr ~all\"", + "\"R+PuUwRUOuIkhtFtitRXWrMTFS6Au3xy7/TK7gHSDIMusO78eAv8a04QXuol8S0Nq4V7RMAvrbpSW29dddtPjg==\"" ], - "timestamp": "2024-07-21T02:41:49.170885711Z", + "timestamp": "2024-07-28T02:45:22.347529773Z", "matcher-status": true }, { @@ -26969,7 +24183,7 @@ "type": "dns", "host": "direccte.gouv.fr.", "matched-at": "direccte.gouv.fr", - "timestamp": "2024-07-21T02:41:49.225292851Z", + "timestamp": "2024-07-28T02:45:22.485691014Z", "matcher-status": true }, { @@ -27009,88 +24223,7 @@ "extracted-results": [ "\"v=DMARC1; p=none; rua=mailto:qfvxymne@ag.eu.dmarcadvisor.com\"" ], - "timestamp": "2024-07-21T02:41:49.233735265Z", - "matcher-status": true - }, - { - "template": "dns/nameserver-fingerprint.yaml", - "template-url": "https://templates.nuclei.sh/public/nameserver-fingerprint", - "template-id": "nameserver-fingerprint", - "template-path": "/home/runner/nuclei-templates/dns/nameserver-fingerprint.yaml", - "info": { - "name": "NS Record Detection", - "author": [ - "pdteam" - ], - "tags": [ - "dns", - "ns" - ], - "description": "An NS record was detected. An NS record delegates a subdomain to a set of name servers.", - "severity": "info", - "metadata": { - "max-request": 1 - }, - "classification": { - "cve-id": null, - "cwe-id": [ - "cwe-200" - ] - } - }, - "type": "dns", - "host": "direccte.gouv.fr.", - "matched-at": "direccte.gouv.fr", - "extracted-results": [ - "nsb.perf1.com.", - "b.ns.developpement-durable.gouv.fr.", - "a.ns.developpement-durable.gouv.fr.", - "nsa.perf1.fr.", - "nsc.perf1.com." - ], - "timestamp": "2024-07-21T02:41:50.032852393Z", - "matcher-status": true - }, - { - "template": "dns/mx-fingerprint.yaml", - "template-url": "https://templates.nuclei.sh/public/mx-fingerprint", - "template-id": "mx-fingerprint", - "template-path": "/home/runner/nuclei-templates/dns/mx-fingerprint.yaml", - "info": { - "name": "MX Record Detection", - "author": [ - "pdteam" - ], - "tags": [ - "dns", - "mx" - ], - "description": "An MX record was detected. MX records direct emails to a mail exchange server.", - "reference": [ - "https://www.cloudflare.com/learning/dns/dns-records/dns-mx-record/", - "https://mxtoolbox.com/" - ], - "severity": "info", - "metadata": { - "max-request": 1 - }, - "classification": { - "cve-id": null, - "cwe-id": [ - "cwe-200" - ] - } - }, - "type": "dns", - "host": "direccte.gouv.fr.", - "matched-at": "direccte.gouv.fr", - "extracted-results": [ - "10 PRO075001APP410.social.gouv.fr.", - "10 PRO093001APP412.social.gouv.fr.", - "10 PRO093001APP413.social.gouv.fr.", - "10 PRO075001APP411.social.gouv.fr." - ], - "timestamp": "2024-07-21T02:41:50.150377097Z", + "timestamp": "2024-07-28T02:45:22.708478272Z", "matcher-status": true } ], @@ -27122,212 +24255,7 @@ "tags": [ "sports" ], - "http": { - "url": "https://donnees-formation-js.social.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 02:48:19 GMT", - "grade": "C-", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Connection": "keep-alive", - "Content-Encoding": "gzip", - "Content-Type": "text/html; charset=utf-8", - "Date": "Sun, 21 Jul 2024 02:48:17 GMT", - "Set-Cookie": "BIGipServerpool-bcomjs-carto.cegedim.cloud-HTTP=!Uo4cRPOl//HH1V5WDPlD0yXzT0UGhnYOFUQ+XFB3f5vQyT1mkUAAvSd32z4Wm4y4lGq3mdF7iw3eZAivaY8f8sHO1A4=; path=/; Httponly; Secure", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Transfer-Encoding": "chunked", - "Vary": "Accept-Encoding" - }, - "scan_id": 53618095, - "score": 45, - "start_time": "Sun, 21 Jul 2024 02:48:16 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 4, - "tests_passed": 7, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-bcomjs-carto.cegedim.cloud-HTTP": { - "domain": "donnees-formation-js.social.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://donnees-formation-js.social.gouv.fr/", - "redirects": true, - "route": [ - "http://donnees-formation-js.social.gouv.fr/", - "https://donnees-formation-js.social.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": { - "https://cdnjs.cloudflare.com/ajax/libs/handlebars.js/4.0.12/handlebars.js": { - "crossorigin": null, - "integrity": null - }, - "https://cdnjs.cloudflare.com/ajax/libs/lodash.js/4.17.11/lodash.js": { - "crossorigin": null, - "integrity": null - }, - "https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.6/umd/popper.min.js": { - "crossorigin": "anonymous", - "integrity": "sha384-wHAiFfRlMFy6i5SRaxvfOCifBUQy1xHdJ/yoi7FRNXMRBu5WHdZYu1hA6ZOblgut" - }, - "https://code.jquery.com/jquery-3.3.1.min.js": { - "crossorigin": "anonymous", - "integrity": "sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8=" - }, - "https://stackpath.bootstrapcdn.com/bootstrap/4.2.1/js/bootstrap.min.js": { - "crossorigin": "anonymous", - "integrity": "sha384-B0UglyR+jN6CkvvICOB2joaf5I4l3gm9GU6Hc1og6Ls7i6U/mkkaduKaBhlAXv9k" - }, - "https://unpkg.com/leaflet@1.2.0/dist/leaflet.js": { - "crossorigin": "", - "integrity": "sha512-lInM/apFSqyy1o6s89K4iQUKg6ppXEgsVxT35HbzUupEVRh2Eu9Wdl4tHj7dZO0s1uvplcYGmt3498TtHq+log==" - } - } - }, - "pass": false, - "result": "sri-not-implemented-but-external-scripts-loaded-securely", - "score_description": "Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS", - "score_modifier": -5 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-content-type-options-not-implemented", - "score_description": "X-Content-Type-Options header not implemented", - "score_modifier": -5 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-frame-options-not-implemented", - "score_description": "X-Frame-Options (XFO) header not implemented", - "score_modifier": -20 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -27673,7 +24601,7 @@ "ip": "donnees-formation-js.social.gouv.fr/185.194.82.164", "port": "443", "severity": "OK", - "finding": "240 >= 60 days" + "finding": "233 >= 60 days" }, { "id": "cert_notBefore", @@ -27834,7 +24762,7 @@ "ip": "donnees-formation-js.social.gouv.fr/185.194.82.164", "port": "443", "severity": "INFO", - "finding": "1721530149" + "finding": "1722134884" }, { "id": "HSTS_time", @@ -28411,7 +25339,7 @@ "ip": "donnees-formation-js.social.gouv.fr/185.194.82.164", "port": "443", "severity": "INFO", - "finding": "55" + "finding": "53" } ], "thirdparties": { @@ -28588,7 +25516,7 @@ "cookies": [ { "name": "BIGipServerpool-bcomjs-carto-cache.cegedim.cloud-HTTP", - "value": "!dC5DLTNfQddDksNWDPlD0yXzT0UGhgtwGjFAQ6ouehoV/U2oKq5LZtVYrO/ME9qzzM6Z6VOpceGmBKTfmm+SCigSIFM=", + "value": "!t0xvZ5U3El7As7NWDPlD0yXzT0UGhvyvmWBqhhuFZAN7Yi77oZXVq8U5hchFRhNHKdC2Cdg3lN8JJdvv7yzDl0ps84Q=", "domain": "donnees-formation-js.social.gouv.fr", "path": "/", "expires": -1, @@ -28602,7 +25530,7 @@ }, { "name": "BIGipServerpool-bcomjs-carto.cegedim.cloud-HTTP", - "value": "!tXmSIXGM3KvdClZWDPlD0yXzT0UGhhs930+8PsCpZMZb9PgbWjqaNUurHKXe3LzuYmbtgqjn9qHl8iB3Saqs6zxmoYQ=", + "value": "!4VdaLlGVbnfGmglWDPlD0yXzT0UGhhg1s/YS6J7XckGUXfuX6kroGUP1fyAQ9lmeSfaj99wKIWOgNOinhEA65AMOEvU=", "domain": "donnees-formation-js.social.gouv.fr", "path": "/", "expires": -1, @@ -28619,8 +25547,8 @@ "connection": "keep-alive", "content-encoding": "gzip", "content-type": "text/html; charset=utf-8", - "date": "Sun, 21 Jul 2024 02:48:34 GMT", - "set-cookie": "BIGipServerpool-bcomjs-carto.cegedim.cloud-HTTP=!tXmSIXGM3KvdClZWDPlD0yXzT0UGhhs930+8PsCpZMZb9PgbWjqaNUurHKXe3LzuYmbtgqjn9qHl8iB3Saqs6zxmoYQ=; path=/; Httponly; Secure", + "date": "Sun, 28 Jul 2024 02:47:31 GMT", + "set-cookie": "BIGipServerpool-bcomjs-carto.cegedim.cloud-HTTP=!4VdaLlGVbnfGmglWDPlD0yXzT0UGhhg1s/YS6J7XckGUXfuX6kroGUP1fyAQ9lmeSfaj99wKIWOgNOinhEA65AMOEvU=; path=/; Httponly; Secure", "strict-transport-security": "max-age=31536000; includeSubDomains", "transfer-encoding": "chunked", "vary": "Accept-Encoding" @@ -28704,7 +25632,7 @@ }, { "hostname": "unpkg.com", - "ip": "104.17.246.203", + "ip": "104.17.247.203", "geoip": { "registered_country": { "geoname_id": 6252001, @@ -28744,7 +25672,7 @@ }, { "hostname": "code.jquery.com", - "ip": "151.101.2.137", + "ip": "151.101.66.137", "geoip": { "city": { "geoname_id": 5391959, @@ -28831,8 +25759,14 @@ }, { "hostname": "www.google.com", - "ip": "172.217.4.68", + "ip": "142.251.163.106", "geoip": { + "city": { + "geoname_id": 5116931, + "names": { + "en": "Farmingdale" + } + }, "continent": { "code": "NA", "geoname_id": 6255149, @@ -28863,9 +25797,13 @@ }, "location": { "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" + "latitude": 40.7306, + "longitude": -73.4313, + "metro_code": 501, + "time_zone": "America/New_York" + }, + "postal": { + "code": "11735" }, "registered_country": { "geoname_id": 6252001, @@ -28880,12 +25818,28 @@ "ru": "США", "zh-CN": "美国" } - } + }, + "subdivisions": [ + { + "geoname_id": 5128638, + "iso_code": "NY", + "names": { + "de": "New York", + "en": "New York", + "es": "Nueva York", + "fr": "New York", + "ja": "ニューヨーク州", + "pt-BR": "Nova Iorque", + "ru": "Нью-Йорк", + "zh-CN": "纽约州" + } + } + ] } }, { "hostname": "www.gstatic.com", - "ip": "142.250.191.131", + "ip": "172.253.122.94", "geoip": { "continent": { "code": "NA", @@ -29187,13 +26141,13 @@ { "requestedUrl": "https://donnees-formation-js.social.gouv.fr/", "finalUrl": "https://donnees-formation-js.social.gouv.fr/", - "fetchTime": "2024-07-21T02:48:06.374Z", + "fetchTime": "2024-07-28T02:47:06.747Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.5 + "score": 0.52 }, "accessibility": { "title": "Accessibility", @@ -29229,49 +26183,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 6143, + "numericValue": 5847, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 4812, - "firstMeaningfulPaint": 6143, - "largestContentfulPaint": 13582, - "firstCPUIdle": 6143, - "interactive": 6143, - "speedIndex": 6927, + "firstContentfulPaint": 4593, + "firstMeaningfulPaint": 5847, + "largestContentfulPaint": 12973, + "firstCPUIdle": 5847, + "interactive": 5847, + "speedIndex": 6446, "estimatedInputLatency": 13, "totalBlockingTime": 0, - "maxPotentialFID": 29, + "maxPotentialFID": 44, "cumulativeLayoutShift": 0.000054963429768880215, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 488098125, + "observedTimeOriginTs": 328781207, "observedNavigationStart": 0, - "observedNavigationStartTs": 488098125, - "observedFirstPaint": 963, - "observedFirstPaintTs": 489060772, - "observedFirstContentfulPaint": 963, - "observedFirstContentfulPaintTs": 489060772, - "observedFirstMeaningfulPaint": 1899, - "observedFirstMeaningfulPaintTs": 489996666, - "observedLargestContentfulPaint": 2522, - "observedLargestContentfulPaintTs": 490620621, - "observedTraceEnd": 4131, - "observedTraceEndTs": 492229443, - "observedLoad": 1462, - "observedLoadTs": 489560549, - "observedDomContentLoaded": 1169, - "observedDomContentLoadedTs": 489267566, + "observedNavigationStartTs": 328781207, + "observedFirstPaint": 828, + "observedFirstPaintTs": 329608886, + "observedFirstContentfulPaint": 828, + "observedFirstContentfulPaintTs": 329608886, + "observedFirstMeaningfulPaint": 1753, + "observedFirstMeaningfulPaintTs": 330534356, + "observedLargestContentfulPaint": 2363, + "observedLargestContentfulPaintTs": 331143963, + "observedTraceEnd": 3973, + "observedTraceEndTs": 332754572, + "observedLoad": 1271, + "observedLoadTs": 330052401, + "observedDomContentLoaded": 1018, + "observedDomContentLoadedTs": 329799131, "observedCumulativeLayoutShift": 0.000054963429768880215, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 965, - "observedFirstVisualChangeTs": 489063125, - "observedLastVisualChange": 3298, - "observedLastVisualChangeTs": 491396125, - "observedSpeedIndex": 2079, - "observedSpeedIndexTs": 490177059 + "observedFirstVisualChange": 822, + "observedFirstVisualChangeTs": 329603207, + "observedLastVisualChange": 3138, + "observedLastVisualChangeTs": 331919207, + "observedSpeedIndex": 1885, + "observedSpeedIndexTs": 330666606 }, { "lcpInvalidated": false @@ -29293,18 +26247,18 @@ "numScripts": 27, "numStylesheets": 14, "numFonts": 1, - "numTasks": 1157, - "numTasksOver10ms": 5, - "numTasksOver25ms": 2, - "numTasksOver50ms": 0, + "numTasks": 1210, + "numTasksOver10ms": 6, + "numTasksOver25ms": 1, + "numTasksOver50ms": 1, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 1.6309999999999993, - "throughput": 8593851.306624694, - "maxRtt": 94.887, - "maxServerLatency": 19.117, - "totalByteWeight": 1519221, - "totalTaskTime": 365.5619999999978, + "rtt": 5.268, + "throughput": 8566706.168351127, + "maxRtt": 81.755, + "maxServerLatency": 15.071999999999996, + "totalByteWeight": 1512896, + "totalTaskTime": 356.75899999999825, "mainDocumentTransferSize": 4960 } ] @@ -29326,7 +26280,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "C-", "testsslExpireSoon": false, "testsslExpireDate": "2025-03-18T22:59:00.000Z", "testsslGrade": "A+", @@ -29334,8 +26287,8 @@ "cookiesCount": 2, "trackersGrade": "F", "trackersCount": 21, - "lighthouse_performance": 0.5, - "lighthouse_performanceGrade": "D", + "lighthouse_performance": 0.52, + "lighthouse_performanceGrade": "C", "lighthouse_accessibility": 0.87, "lighthouse_accessibilityGrade": "A", "lighthouse_best-practices": 0.8, @@ -29354,180 +26307,7 @@ "tags": [ "social" ], - "http": { - "url": "https://drdjscs.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 02:48:59 GMT", - "grade": "C", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Connection": "keep-alive", - "Content-Length": "76563", - "Content-Type": "text/html; charset=UTF-8", - "Date": "Sun, 21 Jul 2024 02:48:57 GMT", - "ETag": "\"12b13-5e281c7e6bf00\"", - "Last-Modified": "Tue, 28 Jun 2022 13:11:56 GMT", - "Server": "nginx", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains; preload", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "“SAMEORIGIN”", - "X-XSS-Protection": "1; mode=block" - }, - "scan_id": 53618110, - "score": 55, - "start_time": "Sun, 21 Jul 2024 02:48:55 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 2, - "tests_passed": 9, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": null, - "sameSite": null - }, - "pass": true, - "result": "cookies-not-found", - "score_description": "No cookies detected", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://drdjscs.gouv.fr/", - "redirects": true, - "route": [ - "http://drdjscs.gouv.fr/", - "https://drdjscs.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains; preload", - "includeSubDomains": true, - "max-age": 31536000, - "preload": true, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "“SAMEORIGIN”" - }, - "pass": false, - "result": "x-frame-options-header-invalid", - "score_description": "X-Frame-Options (XFO) header cannot be recognized", - "score_modifier": -20 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": "1; mode=block" - }, - "pass": true, - "result": "x-xss-protection-enabled-mode-block", - "score_description": "Deprecated X-XSS-Protection header set to \"1; mode=block\"", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -29908,7 +26688,7 @@ "ip": "drdjscs.gouv.fr/185.75.143.22", "port": "443", "severity": "OK", - "finding": "308 >= 60 days" + "finding": "301 >= 60 days" }, { "id": "cert_notBefore", @@ -30118,7 +26898,7 @@ "ip": "drdjscs.gouv.fr/185.75.143.22", "port": "443", "severity": "INFO", - "finding": "1721530214" + "finding": "1722135148" }, { "id": "HSTS_time", @@ -30695,7 +27475,7 @@ "ip": "drdjscs.gouv.fr/185.75.143.22", "port": "443", "severity": "INFO", - "finding": "94" + "finding": "54" } ], "thirdparties": { @@ -30706,7 +27486,7 @@ "value": "enabled", "domain": "drdjscs.gouv.fr", "path": "/", - "expires": 1753066154, + "expires": 1753671115, "size": 17, "httpOnly": false, "secure": false, @@ -30720,7 +27500,7 @@ "accept-ranges": "bytes", "content-length": "76563", "content-type": "text/html; charset=UTF-8", - "date": "Sun, 21 Jul 2024 02:49:13 GMT", + "date": "Sun, 28 Jul 2024 02:51:54 GMT", "etag": "\"12b13-5e281c7e6bf00\"", "last-modified": "Tue, 28 Jun 2022 13:11:56 GMT", "server": "nginx", @@ -30898,13 +27678,13 @@ { "requestedUrl": "https://drdjscs.gouv.fr/", "finalUrl": "https://drdjscs.gouv.fr/", - "fetchTime": "2024-07-21T02:48:48.424Z", + "fetchTime": "2024-07-28T02:51:35.982Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.61 + "score": 0.67 }, "accessibility": { "title": "Accessibility", @@ -30940,49 +27720,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 4827, + "numericValue": 4491, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 4827, - "firstMeaningfulPaint": 4827, - "largestContentfulPaint": 5234, - "firstCPUIdle": 4827, - "interactive": 4827, - "speedIndex": 4827, + "firstContentfulPaint": 4491, + "firstMeaningfulPaint": 4491, + "largestContentfulPaint": 4900, + "firstCPUIdle": 4491, + "interactive": 4491, + "speedIndex": 4491, "estimatedInputLatency": 13, "totalBlockingTime": 0, - "maxPotentialFID": 16, - "cumulativeLayoutShift": 0.1486383796351688, - "cumulativeLayoutShiftAllFrames": 0.1486383796351688, + "maxPotentialFID": 41, + "cumulativeLayoutShift": 0, + "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 304750390, + "observedTimeOriginTs": 325748861, "observedNavigationStart": 0, - "observedNavigationStartTs": 304750390, - "observedFirstPaint": 1339, - "observedFirstPaintTs": 306089642, - "observedFirstContentfulPaint": 1339, - "observedFirstContentfulPaintTs": 306089642, - "observedFirstMeaningfulPaint": 1339, - "observedFirstMeaningfulPaintTs": 306089642, - "observedLargestContentfulPaint": 1422, - "observedLargestContentfulPaintTs": 306172546, - "observedTraceEnd": 2610, - "observedTraceEndTs": 307360080, - "observedLoad": 1449, - "observedLoadTs": 306199376, - "observedDomContentLoaded": 1319, - "observedDomContentLoadedTs": 306068933, - "observedCumulativeLayoutShift": 0.1486383796351688, - "observedCumulativeLayoutShiftAllFrames": 0.1486383796351688, - "observedFirstVisualChange": 1337, - "observedFirstVisualChangeTs": 306087390, - "observedLastVisualChange": 1470, - "observedLastVisualChangeTs": 306220390, - "observedSpeedIndex": 1369, - "observedSpeedIndexTs": 306119421 + "observedNavigationStartTs": 325748861, + "observedFirstPaint": 776, + "observedFirstPaintTs": 326524546, + "observedFirstContentfulPaint": 776, + "observedFirstContentfulPaintTs": 326524546, + "observedFirstMeaningfulPaint": 796, + "observedFirstMeaningfulPaintTs": 326544591, + "observedLargestContentfulPaint": 847, + "observedLargestContentfulPaintTs": 326595690, + "observedTraceEnd": 2014, + "observedTraceEndTs": 327763042, + "observedLoad": 863, + "observedLoadTs": 326611877, + "observedDomContentLoaded": 768, + "observedDomContentLoadedTs": 326517093, + "observedCumulativeLayoutShift": 0, + "observedCumulativeLayoutShiftAllFrames": 0, + "observedFirstVisualChange": 771, + "observedFirstVisualChangeTs": 326519861, + "observedLastVisualChange": 871, + "observedLastVisualChangeTs": 326619861, + "observedSpeedIndex": 811, + "observedSpeedIndexTs": 326559937 }, { "lcpInvalidated": false @@ -31004,18 +27784,18 @@ "numScripts": 25, "numStylesheets": 15, "numFonts": 0, - "numTasks": 402, - "numTasksOver10ms": 4, - "numTasksOver25ms": 2, + "numTasks": 410, + "numTasksOver10ms": 1, + "numTasksOver25ms": 0, "numTasksOver50ms": 0, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 153.601, - "throughput": 9953128.595903207, - "maxRtt": 153.601, - "maxServerLatency": 284.479, + "rtt": 87.986, + "throughput": 16951769.67905083, + "maxRtt": 87.986, + "maxServerLatency": 99.843, "totalByteWeight": 779471, - "totalTaskTime": 185.35999999999999, + "totalTaskTime": 107.76900000000008, "mainDocumentTransferSize": 76942 } ] @@ -31037,7 +27817,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "C", "testsslExpireSoon": false, "testsslExpireDate": "2025-05-25T23:59:00.000Z", "testsslGrade": "A+", @@ -31045,8 +27824,8 @@ "cookiesCount": 1, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.61, - "lighthouse_performanceGrade": "C", + "lighthouse_performance": 0.67, + "lighthouse_performanceGrade": "B", "lighthouse_accessibility": 0.89, "lighthouse_accessibilityGrade": "A", "lighthouse_best-practices": 0.67, @@ -31066,198 +27845,7 @@ "sante", "social" ], - "http": { - "url": "https://drees.solidarites-sante.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 02:55:39 GMT", - "grade": "C", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Cache-Control": "max-age=3600, public", - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sun, 21 Jul 2024 02:55:34 GMT", - "ETag": "\"1721527898-gzip\"", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Keep-Alive": "timeout=5, max=100", - "Last-Modified": "Sun, 21 Jul 2024 02:11:38 GMT", - "Server": "Apache/2.4.59 (Debian)", - "Set-Cookie": "BIGipServerpool-drees-site-v2.cegedim.cloud-HTTP=1103386890.20480.0000; path=/; Httponly; Secure", - "Transfer-Encoding": "chunked", - "Vary": "Cookie,Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-Drupal-Cache": "HIT", - "X-Drupal-Dynamic-Cache": "HIT", - "X-Frame-Options": "SAMEORIGIN", - "X-Generator": "Drupal 10 (https://www.drupal.org)" - }, - "scan_id": 53618210, - "score": 55, - "start_time": "Sun, 21 Jul 2024 02:55:32 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 2, - "tests_passed": 9, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-drees-site-v2.cegedim.cloud-HTTP": { - "domain": "drees.solidarites-sante.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://drees.solidarites-sante.gouv.fr/", - "redirects": true, - "route": [ - "http://drees.solidarites-sante.gouv.fr/", - "https://drees.solidarites-sante.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": null, - "includeSubDomains": false, - "max-age": null, - "preload": false, - "preloaded": false - }, - "pass": false, - "result": "hsts-not-implemented", - "score_description": "HTTP Strict Transport Security (HSTS) header not implemented", - "score_modifier": -20 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -31603,7 +28191,7 @@ "ip": "drees.solidarites-sante.gouv.fr/185.194.82.72", "port": "443", "severity": "OK", - "finding": "107 >= 60 days" + "finding": "100 >= 60 days" }, { "id": "cert_notBefore", @@ -31757,14 +28345,14 @@ "ip": "drees.solidarites-sante.gouv.fr/185.194.82.72", "port": "443", "severity": "INFO", - "finding": "-1 seconds from localtime" + "finding": "-2 seconds from localtime" }, { "id": "HTTP_headerTime", "ip": "drees.solidarites-sante.gouv.fr/185.194.82.72", "port": "443", "severity": "INFO", - "finding": "1721530586" + "finding": "1722135266" }, { "id": "HSTS", @@ -31785,7 +28373,7 @@ "ip": "drees.solidarites-sante.gouv.fr/185.194.82.72", "port": "443", "severity": "INFO", - "finding": "Apache/2.4.59 (Debian)" + "finding": "Apache/2.4.61 (Debian)" }, { "id": "banner_application", @@ -31821,7 +28409,7 @@ "port": "443", "severity": "MEDIUM", "cwe": "CWE-212", - "finding": "Information leakage: F5 cookie BIGipServerpool-drees-site-v2.cegedim.cloud-HTTP 1103386890.20480.0000 is default IPv4 pool member 10.89.196.65:80" + "finding": "Information leakage: F5 cookie BIGipServerpool-drees-site-v2.cegedim.cloud-HTTP 1120164106.20480.0000 is default IPv4 pool member 10.89.196.66:80" }, { "id": "X-Frame-Options", @@ -32356,7 +28944,7 @@ "ip": "drees.solidarites-sante.gouv.fr/185.194.82.72", "port": "443", "severity": "INFO", - "finding": "57" + "finding": "59" } ], "thirdparties": { @@ -32364,7 +28952,7 @@ "cookies": [ { "name": "BIGipServerpool-drees-site-v2.cegedim.cloud-HTTP", - "value": "1103386890.20480.0000", + "value": "1120164106.20480.0000", "domain": "drees.solidarites-sante.gouv.fr", "path": "/", "expires": -1, @@ -32383,13 +28971,13 @@ "content-encoding": "gzip", "content-type": "text/html; charset=UTF-8", "content-language": "fr", - "date": "Sun, 21 Jul 2024 02:55:53 GMT", - "etag": "\"1721527898-gzip\"", + "date": "Sun, 28 Jul 2024 02:53:53 GMT", + "etag": "\"1722134160-gzip\"", "expires": "Sun, 19 Nov 1978 05:00:00 GMT", "keep-alive": "timeout=5, max=100", - "last-modified": "Sun, 21 Jul 2024 02:11:38 GMT", - "server": "Apache/2.4.59 (Debian)", - "set-cookie": "BIGipServerpool-drees-site-v2.cegedim.cloud-HTTP=1103386890.20480.0000; path=/; Httponly; Secure", + "last-modified": "Sun, 28 Jul 2024 02:36:00 GMT", + "server": "Apache/2.4.61 (Debian)", + "set-cookie": "BIGipServerpool-drees-site-v2.cegedim.cloud-HTTP=1120164106.20480.0000; path=/; Httponly; Secure", "transfer-encoding": "chunked", "vary": "Cookie,Accept-Encoding", "x-content-type-options": "nosniff", @@ -32562,7 +29150,7 @@ "name": "Apache HTTP Server", "description": "Apache is a free and open-source cross-platform web server software.", "confidence": 100, - "version": "2.4.59", + "version": "2.4.61", "icon": "Apache.svg", "website": "https://httpd.apache.org/", "cpe": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*", @@ -32654,13 +29242,13 @@ { "requestedUrl": "https://drees.solidarites-sante.gouv.fr/", "finalUrl": "https://drees.solidarites-sante.gouv.fr/", - "fetchTime": "2024-07-21T02:54:54.192Z", + "fetchTime": "2024-07-28T02:52:23.615Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.73 + "score": 0.65 }, "accessibility": { "title": "Accessibility", @@ -32672,7 +29260,7 @@ "best-practices": { "title": "Best Practices", "id": "best-practices", - "score": 0.87 + "score": 0.93 }, "seo": { "title": "SEO", @@ -32696,49 +29284,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 3338, + "numericValue": 4289, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 1956, + "firstContentfulPaint": 1957, "firstMeaningfulPaint": 3338, - "largestContentfulPaint": 3537, + "largestContentfulPaint": 4992, "firstCPUIdle": 3338, - "interactive": 3338, - "speedIndex": 14507, + "interactive": 4289, + "speedIndex": 9669, "estimatedInputLatency": 13, - "totalBlockingTime": 0, - "maxPotentialFID": 45, - "cumulativeLayoutShift": 0.13737620544433593, + "totalBlockingTime": 7, + "maxPotentialFID": 62, + "cumulativeLayoutShift": 0.13765310594770644, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 336472288, + "observedTimeOriginTs": 379838656, "observedNavigationStart": 0, - "observedNavigationStartTs": 336472288, - "observedFirstPaint": 887, - "observedFirstPaintTs": 337359501, - "observedFirstContentfulPaint": 887, - "observedFirstContentfulPaintTs": 337359501, - "observedFirstMeaningfulPaint": 1167, - "observedFirstMeaningfulPaintTs": 337639226, - "observedLargestContentfulPaint": 1040, - "observedLargestContentfulPaintTs": 337512020, - "observedTraceEnd": 12283, - "observedTraceEndTs": 348755124, - "observedLoad": 11226, - "observedLoadTs": 347697871, - "observedDomContentLoaded": 1091, - "observedDomContentLoadedTs": 337563696, - "observedCumulativeLayoutShift": 0.13737620544433593, + "observedNavigationStartTs": 379838656, + "observedFirstPaint": 903, + "observedFirstPaintTs": 380741411, + "observedFirstContentfulPaint": 903, + "observedFirstContentfulPaintTs": 380741411, + "observedFirstMeaningfulPaint": 1197, + "observedFirstMeaningfulPaintTs": 381035611, + "observedLargestContentfulPaint": 1197, + "observedLargestContentfulPaintTs": 381035611, + "observedTraceEnd": 7207, + "observedTraceEndTs": 387045472, + "observedLoad": 6150, + "observedLoadTs": 385988711, + "observedDomContentLoaded": 1201, + "observedDomContentLoadedTs": 381039163, + "observedCumulativeLayoutShift": 0.13765310594770644, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 897, - "observedFirstVisualChangeTs": 337369288, - "observedLastVisualChange": 11463, - "observedLastVisualChangeTs": 347935288, - "observedSpeedIndex": 7197, - "observedSpeedIndexTs": 343669253 + "observedFirstVisualChange": 896, + "observedFirstVisualChangeTs": 380734656, + "observedLastVisualChange": 6495, + "observedLastVisualChangeTs": 386333656, + "observedSpeedIndex": 4055, + "observedSpeedIndexTs": 383893644 }, { "lcpInvalidated": false @@ -32760,19 +29348,19 @@ "numScripts": 6, "numStylesheets": 4, "numFonts": 8, - "numTasks": 1226, - "numTasksOver10ms": 4, - "numTasksOver25ms": 1, + "numTasks": 1138, + "numTasksOver10ms": 6, + "numTasksOver25ms": 3, "numTasksOver50ms": 0, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 95.62599999999999, - "throughput": 9283269.279291056, - "maxRtt": 95.62599999999999, - "maxServerLatency": 1.7310000000000088, - "totalByteWeight": 1347535, - "totalTaskTime": 269.59499999999787, - "mainDocumentTransferSize": 23692 + "rtt": 95.978, + "throughput": 9355976.89592941, + "maxRtt": 108.35300000000007, + "maxServerLatency": 1.4030000000000058, + "totalByteWeight": 1408616, + "totalTaskTime": 327.38299999999816, + "mainDocumentTransferSize": 23891 } ] } @@ -32793,7 +29381,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "C", "testsslExpireSoon": false, "testsslExpireDate": "2024-11-05T22:59:00.000Z", "testsslGrade": "A", @@ -32801,11 +29388,11 @@ "cookiesCount": 1, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.73, - "lighthouse_performanceGrade": "B", + "lighthouse_performance": 0.65, + "lighthouse_performanceGrade": "C", "lighthouse_accessibility": 0.85, "lighthouse_accessibilityGrade": "A", - "lighthouse_best-practices": 0.87, + "lighthouse_best-practices": 0.93, "lighthouse_best-practicesGrade": "A", "lighthouse_seo": 0.86, "lighthouse_seoGrade": "A", @@ -32821,267 +29408,7 @@ "tags": [ "travail" ], - "http": { - "url": "https://election-tpe.travail.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 03:06:31 GMT", - "grade": "B-", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Cache-Control": "s-maxage=10, stale-while-revalidate", - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Security-Policy": "default-src 'self' api-adresse.data.gouv.fr election-tpe.intranet.travail.gouv.fr; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.piste.gouv.fr vqzw.election-tpe.travail.gouv.fr *.googletagmanager.com; connect-src 'self' api-adresse.data.gouv.fr election-tpe-kc.travail.gouv.fr *.googlesyndication.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com; img-src 'self' data: *.piste.gouv.fr jedonnemonavis.numerique.gouv.fr election-tpe.intranet.travail.gouv.fr vqzw.election-tpe.travail.gouv.fr *.google-analytics.com *.googletagmanager.com ad.doubleclick.net; media-src 'self' data: *.piste.gouv.fr www.youtube.com www.dailymotion.com election-tpe.intranet.travail.gouv.fr; style-src 'self' 'unsafe-inline' *.piste.gouv.fr; frame-src www.youtube.com www.dailymotion.com 3048978.fls.doubleclick.net td.doubleclick.net; base-uri 'self'; form-action 'self'; frame-ancestors https://election-tpe.intranet.travail.gouv.fr;", - "Content-Type": "text/html; charset=utf-8", - "Cross-Origin-EmbedderPolicy": "require-corp", - "Cross-Origin-Opener-Policy": "Same-Origin", - "Cross-Origin-Resource-Policy": "Same-Site", - "Date": "Sun, 21 Jul 2024 03:06:29 GMT", - "ETag": "\"afd74voodr2jv8\"", - "Keep-Alive": "timeout=15, max=100", - "Permissions-Policy": "camera=(),display-capture=(),geolocation=(),microphone=()", - "Referrer-Policy": "no-referrer-when-downgrade", - "Strict-Transport-Security": "max-age=600; includeSubDomains; preload", - "Transfer-Encoding": "chunked", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "SAMEORIGIN", - "X-Permitted-Cross-Domain-Policies": "none", - "X-XSS-Protection": "1; mode=block", - "x-nextjs-cache": "HIT" - }, - "scan_id": 53618342, - "score": 65, - "start_time": "Sun, 21 Jul 2024 03:06:22 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 3, - "tests_passed": 8, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": { - "base-uri": [ - "'self'" - ], - "connect-src": [ - "*.analytics.google.com", - "*.googletagmanager.com", - "*.g.doubleclick.net", - "*.google-analytics.com", - "'self'", - "*.googlesyndication.com", - "*.google.com", - "election-tpe-kc.travail.gouv.fr", - "api-adresse.data.gouv.fr" - ], - "default-src": [ - "'self'", - "election-tpe.intranet.travail.gouv.fr", - "api-adresse.data.gouv.fr" - ], - "form-action": [ - "'self'" - ], - "frame-ancestors": [ - "https://election-tpe.intranet.travail.gouv.fr" - ], - "frame-src": [ - "3048978.fls.doubleclick.net", - "www.youtube.com", - "www.dailymotion.com", - "td.doubleclick.net" - ], - "img-src": [ - "*.piste.gouv.fr", - "data:", - "ad.doubleclick.net", - "*.googletagmanager.com", - "*.google-analytics.com", - "'self'", - "election-tpe.intranet.travail.gouv.fr", - "vqzw.election-tpe.travail.gouv.fr", - "jedonnemonavis.numerique.gouv.fr" - ], - "media-src": [ - "*.piste.gouv.fr", - "www.youtube.com", - "data:", - "www.dailymotion.com", - "'self'", - "election-tpe.intranet.travail.gouv.fr" - ], - "script-src": [ - "*.piste.gouv.fr", - "'unsafe-eval'", - "'unsafe-inline'", - "*.googletagmanager.com", - "'self'", - "vqzw.election-tpe.travail.gouv.fr" - ], - "style-src": [ - "'self'", - "'unsafe-inline'", - "*.piste.gouv.fr" - ] - }, - "http": true, - "meta": false, - "numPolicies": 1, - "policy": { - "antiClickjacking": true, - "defaultNone": false, - "insecureBaseUri": false, - "insecureFormAction": false, - "insecureSchemeActive": false, - "insecureSchemePassive": false, - "strictDynamic": false, - "unsafeEval": true, - "unsafeInline": true, - "unsafeInlineStyle": true, - "unsafeObjects": false - } - }, - "pass": false, - "result": "csp-implemented-with-unsafe-inline", - "score_description": "Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.", - "score_modifier": -20 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": null, - "sameSite": null - }, - "pass": true, - "result": "cookies-not-found", - "score_description": "No cookies detected", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": null, - "redirects": true, - "route": [], - "status_code": null - }, - "pass": true, - "result": "redirection-not-needed-no-http", - "score_description": "Not able to connect via HTTP, so no redirection necessary", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": "no-referrer-when-downgrade", - "http": true, - "meta": false - }, - "pass": true, - "result": "referrer-policy-no-referrer-when-downgrade", - "score_description": "Referrer-Policy header set to \"no-referrer-when-downgrade\"", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=600; includeSubDomains; preload", - "includeSubDomains": true, - "max-age": 600, - "preload": true, - "preloaded": false - }, - "pass": false, - "result": "hsts-implemented-max-age-less-than-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to less than six months (15768000)", - "score_modifier": -10 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": { - "https://www.googletagmanager.com/gtag/js?id=DC-3048978": { - "crossorigin": null, - "integrity": null - } - } - }, - "pass": false, - "result": "sri-not-implemented-but-external-scripts-loaded-securely", - "score_description": "Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS", - "score_modifier": -5 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-implemented-via-csp", - "score_description": "X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive", - "score_modifier": 5 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": "1; mode=block" - }, - "pass": true, - "result": "x-xss-protection-enabled-mode-block", - "score_description": "Deprecated X-XSS-Protection header set to \"1; mode=block\"", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -33427,7 +29754,7 @@ "ip": "election-tpe.travail.gouv.fr/176.31.133.214", "port": "443", "severity": "OK", - "finding": "67 >= 60 days" + "finding": "60 >= 60 days" }, { "id": "cert_notBefore", @@ -33581,14 +29908,14 @@ "ip": "election-tpe.travail.gouv.fr/176.31.133.214", "port": "443", "severity": "INFO", - "finding": "0 seconds from localtime" + "finding": "-1 seconds from localtime" }, { "id": "HTTP_headerTime", "ip": "election-tpe.travail.gouv.fr/176.31.133.214", "port": "443", "severity": "INFO", - "finding": "1721531385" + "finding": "1722136197" }, { "id": "HSTS_time", @@ -34200,7 +30527,7 @@ "ip": "election-tpe.travail.gouv.fr/176.31.133.214", "port": "443", "severity": "INFO", - "finding": "213" + "finding": "270" } ], "thirdparties": { @@ -34215,13 +30542,13 @@ }, { "type": "unknown", - "url": "https://pagead2.googlesyndication.com/pagead/landing?gcs=G100&gcd=13p3p3p3p5&tag_exp=0&rnd=1112795683.1721531207&url=https%3A%2F%2Felection-tpe.travail.gouv.fr%2F&dma_cps=-&dma=0&npa=1>m=45fe47h0v9189590248za200&frm=0" + "url": "https://pagead2.googlesyndication.com/pagead/landing?gcs=G100&gcd=13p3p3p3p5&tag_exp=95250753&rnd=1905823153.1722135990&url=https%3A%2F%2Felection-tpe.travail.gouv.fr%2F&dma_cps=-&dma=0&npa=1>m=45fe47o0v9189590248za200&frm=0" } ], "cookies": [ { "name": "TS01556c60", - "value": "017d5952116c70c654cfd70898e55113ab05194d56920035d6ff0305ffc835b15cf18c2605bec16f6cf53167495be724ca6ef7bc7c543eca763c21134df209b2f8f7966033e78ba5af0d4dd0eb59aea1bf7c0bdb70", + "value": "017d595211d9a6b270776cbaf22b43071cd4b54f88670c44880c16d94f5403553ba6c32b022690e2f066ab605f7f6dfd443366606c38ecd9d0688245a5b47826467f9c93f0c9ba8baca06767df03d9f0629ea9c027", "domain": "election-tpe.travail.gouv.fr", "path": "/", "expires": -1, @@ -34235,7 +30562,7 @@ }, { "name": "__Host-next-auth.csrf-token", - "value": "1ccacf51d7c6886ae8191e3fac17e89c53e55a8e62e88834e2cdc2a2756b2634%7C2696e889b6ee28f0694a48c856ef1d4130eb1240f21b1e5d825d26b7b79d7808", + "value": "f53f46adc9e1ab10cf9d070966d9dd4ece68ee0d768a4e494ce11f5c9855b024%7C4278b89c7d9c298ee9e6f912f8d8c9f30b453d7546f95b8014670c736d882306", "domain": "election-tpe.travail.gouv.fr", "path": "/", "expires": -1, @@ -34273,8 +30600,8 @@ "cross-origin-embedderpolicy": "require-corp", "cross-origin-opener-policy": "Same-Origin", "cross-origin-resource-policy": "Same-Site", - "date": "Sun, 21 Jul 2024 03:06:46 GMT", - "etag": "\"poq97536c12jv8\"", + "date": "Sun, 28 Jul 2024 03:06:29 GMT", + "etag": "\"492bvfkeld2jv8\"", "keep-alive": "timeout=15, max=100", "permissions-policy": "camera=(),display-capture=(),geolocation=(),microphone=()", "referrer-policy": "no-referrer-when-downgrade", @@ -34285,7 +30612,7 @@ "x-frame-options": "SAMEORIGIN", "x-permitted-cross-domain-policies": "none", "x-xss-protection": "1; mode=block", - "x-nextjs-cache": "HIT" + "x-nextjs-cache": "STALE" }, "endpoints": [ { @@ -34346,8 +30673,14 @@ }, { "hostname": "www.googletagmanager.com", - "ip": "142.250.190.40", + "ip": "142.251.46.232", "geoip": { + "city": { + "geoname_id": 5116931, + "names": { + "en": "Farmingdale" + } + }, "continent": { "code": "NA", "geoname_id": 6255149, @@ -34378,9 +30711,13 @@ }, "location": { "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" + "latitude": 40.7306, + "longitude": -73.4313, + "metro_code": 501, + "time_zone": "America/New_York" + }, + "postal": { + "code": "11735" }, "registered_country": { "geoname_id": 6252001, @@ -34395,13 +30732,35 @@ "ru": "США", "zh-CN": "美国" } - } + }, + "subdivisions": [ + { + "geoname_id": 5128638, + "iso_code": "NY", + "names": { + "de": "New York", + "en": "New York", + "es": "Nueva York", + "fr": "New York", + "ja": "ニューヨーク州", + "pt-BR": "Nova Iorque", + "ru": "Нью-Йорк", + "zh-CN": "纽约州" + } + } + ] } }, { "hostname": "pagead2.googlesyndication.com", - "ip": "172.217.0.162", + "ip": "142.251.32.34", "geoip": { + "city": { + "geoname_id": 5116931, + "names": { + "en": "Farmingdale" + } + }, "continent": { "code": "NA", "geoname_id": 6255149, @@ -34432,9 +30791,13 @@ }, "location": { "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" + "latitude": 40.7306, + "longitude": -73.4313, + "metro_code": 501, + "time_zone": "America/New_York" + }, + "postal": { + "code": "11735" }, "registered_country": { "geoname_id": 6252001, @@ -34449,7 +30812,23 @@ "ru": "США", "zh-CN": "美国" } - } + }, + "subdivisions": [ + { + "geoname_id": 5128638, + "iso_code": "NY", + "names": { + "de": "New York", + "en": "New York", + "es": "Nueva York", + "fr": "New York", + "ja": "ニューヨーク州", + "pt-BR": "Nova Iorque", + "ru": "Нью-Йорк", + "zh-CN": "纽约州" + } + } + ] } } ] @@ -34717,13 +31096,13 @@ { "requestedUrl": "https://election-tpe.travail.gouv.fr/", "finalUrl": "https://election-tpe.travail.gouv.fr/", - "fetchTime": "2024-07-21T03:06:01.267Z", + "fetchTime": "2024-07-28T03:04:52.209Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.56 + "score": 0.47 }, "accessibility": { "title": "Accessibility", @@ -34759,49 +31138,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 13770, + "numericValue": 16082, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 2286, - "firstMeaningfulPaint": 2286, - "largestContentfulPaint": 10592, - "firstCPUIdle": 7094, - "interactive": 13770, - "speedIndex": 4231, - "estimatedInputLatency": 24, - "totalBlockingTime": 219, + "firstContentfulPaint": 2629, + "firstMeaningfulPaint": 2629, + "largestContentfulPaint": 11789, + "firstCPUIdle": 7628, + "interactive": 16082, + "speedIndex": 5467, + "estimatedInputLatency": 26, + "totalBlockingTime": 367, "maxPotentialFID": 166, "cumulativeLayoutShift": 0.02948046875, "cumulativeLayoutShiftAllFrames": 0.02578125, "observedTimeOrigin": 0, - "observedTimeOriginTs": 379451609, + "observedTimeOriginTs": 400557560, "observedNavigationStart": 0, - "observedNavigationStartTs": 379451609, - "observedFirstPaint": 1362, - "observedFirstPaintTs": 380813130, - "observedFirstContentfulPaint": 1362, - "observedFirstContentfulPaintTs": 380813130, - "observedFirstMeaningfulPaint": 1362, - "observedFirstMeaningfulPaintTs": 380813130, - "observedLargestContentfulPaint": 2413, - "observedLargestContentfulPaintTs": 381864731, - "observedTraceEnd": 11664, - "observedTraceEndTs": 391115836, - "observedLoad": 10608, - "observedLoadTs": 390059151, - "observedDomContentLoaded": 2353, - "observedDomContentLoadedTs": 381805091, + "observedNavigationStartTs": 400557560, + "observedFirstPaint": 1787, + "observedFirstPaintTs": 402344422, + "observedFirstContentfulPaint": 1787, + "observedFirstContentfulPaintTs": 402344422, + "observedFirstMeaningfulPaint": 1787, + "observedFirstMeaningfulPaintTs": 402344422, + "observedLargestContentfulPaint": 3245, + "observedLargestContentfulPaintTs": 403802231, + "observedTraceEnd": 12003, + "observedTraceEndTs": 412560086, + "observedLoad": 10945, + "observedLoadTs": 411502927, + "observedDomContentLoaded": 3186, + "observedDomContentLoadedTs": 403743820, "observedCumulativeLayoutShift": 0.02948046875, "observedCumulativeLayoutShiftAllFrames": 0.02578125, - "observedFirstVisualChange": 1366, - "observedFirstVisualChangeTs": 380817609, - "observedLastVisualChange": 2433, - "observedLastVisualChangeTs": 381884609, - "observedSpeedIndex": 2139, - "observedSpeedIndexTs": 381590902 + "observedFirstVisualChange": 1776, + "observedFirstVisualChangeTs": 402333560, + "observedLastVisualChange": 3259, + "observedLastVisualChangeTs": 403816560, + "observedSpeedIndex": 2858, + "observedSpeedIndexTs": 403415529 }, { "lcpInvalidated": false @@ -34823,19 +31202,19 @@ "numScripts": 31, "numStylesheets": 2, "numFonts": 4, - "numTasks": 2126, - "numTasksOver10ms": 9, - "numTasksOver25ms": 4, + "numTasks": 2033, + "numTasksOver10ms": 11, + "numTasksOver25ms": 5, "numTasksOver50ms": 0, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 1.6780000000000008, - "throughput": 19796193.111894682, - "maxRtt": 97.3, - "maxServerLatency": 45.187, - "totalByteWeight": 1003229, - "totalTaskTime": 495.379999999998, - "mainDocumentTransferSize": 24757 + "rtt": 1.795, + "throughput": 18857731.085692015, + "maxRtt": 136.7, + "maxServerLatency": 28.606, + "totalByteWeight": 970407, + "totalTaskTime": 535.1129999999984, + "mainDocumentTransferSize": 24751 } ] } @@ -34857,7 +31236,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B-", "testsslExpireSoon": false, "testsslExpireDate": "2024-09-26T21:59:00.000Z", "testsslGrade": "A", @@ -34865,8 +31243,8 @@ "cookiesCount": 3, "trackersGrade": "B", "trackersCount": 2, - "lighthouse_performance": 0.56, - "lighthouse_performanceGrade": "C", + "lighthouse_performance": 0.47, + "lighthouse_performanceGrade": "D", "lighthouse_accessibility": 0.92, "lighthouse_accessibilityGrade": "A", "lighthouse_best-practices": 0.8, @@ -34885,193 +31263,7 @@ "tags": [ "sante" ], - "http": { - "url": "https://entreprises-transparence.sante.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 03:17:03 GMT", - "grade": "D", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Connection": "Upgrade, Keep-Alive", - "Content-Encoding": "gzip", - "Content-Length": "535", - "Content-Type": "text/html", - "Date": "Sun, 21 Jul 2024 03:17:02 GMT", - "ETag": "\"408-61c4794256b80-gzip\"", - "Keep-Alive": "timeout=5, max=100", - "Last-Modified": "Tue, 02 Jul 2024 18:06:54 GMT", - "Server": "Apache/2.4.59 (Debian)", - "Set-Cookie": "BIGipServerpool-dgs-ts-v2.cegedim.cloud-HTTP=1237604618.20480.0000; path=/; Httponly; Secure", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains; preload", - "Upgrade": "h2,h2c", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "sameorigin", - "X-XSS-Protection": "1; mode=block" - }, - "scan_id": 53618503, - "score": 35, - "start_time": "Sun, 21 Jul 2024 03:16:59 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 3, - "tests_passed": 8, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dgs-ts-v2.cegedim.cloud-HTTP": { - "domain": "entreprises-transparence.sante.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://entreprises-transparence.sante.gouv.fr/", - "redirects": true, - "route": [], - "status_code": 200 - }, - "pass": false, - "result": "redirection-invalid-cert", - "score_description": "Invalid certificate chain encountered during redirection", - "score_modifier": -20 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": null, - "includeSubDomains": false, - "max-age": null, - "preload": false, - "preloaded": false - }, - "pass": false, - "result": "hsts-invalid-cert", - "score_description": "HTTP Strict Transport Security (HSTS) header cannot be set, as site contains an invalid certificate chain", - "score_modifier": -20 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "sameorigin" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": "1; mode=block" - }, - "pass": true, - "result": "x-xss-protection-enabled-mode-block", - "score_description": "Deprecated X-XSS-Protection header set to \"1; mode=block\"", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -35417,7 +31609,7 @@ "ip": "entreprises-transparence.sante.gouv.fr/185.194.82.77", "port": "443", "severity": "OK", - "finding": "358 >= 60 days" + "finding": "351 >= 60 days" }, { "id": "cert_notBefore", @@ -35578,7 +31770,7 @@ "ip": "entreprises-transparence.sante.gouv.fr/185.194.82.77", "port": "443", "severity": "INFO", - "finding": "1721531871" + "finding": "1722136726" }, { "id": "HSTS_time", @@ -35613,7 +31805,7 @@ "ip": "entreprises-transparence.sante.gouv.fr/185.194.82.77", "port": "443", "severity": "INFO", - "finding": "Apache/2.4.59 (Debian)" + "finding": "Apache/2.4.61 (Debian)" }, { "id": "banner_application", @@ -36191,7 +32383,7 @@ "ip": "entreprises-transparence.sante.gouv.fr/185.194.82.77", "port": "443", "severity": "INFO", - "finding": "55" + "finding": "56" } ], "thirdparties": { @@ -36267,11 +32459,11 @@ "content-encoding": "gzip", "content-length": "535", "content-type": "text/html", - "date": "Sun, 21 Jul 2024 03:17:17 GMT", + "date": "Sun, 28 Jul 2024 03:18:12 GMT", "etag": "\"408-61c4794256b80-gzip\"", "keep-alive": "timeout=5, max=100", "last-modified": "Tue, 02 Jul 2024 18:06:54 GMT", - "server": "Apache/2.4.59 (Debian)", + "server": "Apache/2.4.61 (Debian)", "set-cookie": "BIGipServerpool-dgs-ts-v2.cegedim.cloud-HTTP=1237604618.20480.0000; path=/; Httponly; Secure", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "upgrade": "h2,h2c", @@ -36339,7 +32531,7 @@ }, { "hostname": "fonts.googleapis.com", - "ip": "142.250.190.74", + "ip": "142.250.190.10", "geoip": { "continent": { "code": "NA", @@ -36393,7 +32585,7 @@ }, { "hostname": "fonts.gstatic.com", - "ip": "142.250.190.99", + "ip": "142.250.191.195", "geoip": { "continent": { "code": "NA", @@ -36565,7 +32757,7 @@ "name": "Apache HTTP Server", "description": "Apache is a free and open-source cross-platform web server software.", "confidence": 100, - "version": "2.4.59", + "version": "2.4.61", "icon": "Apache.svg", "website": "https://httpd.apache.org/", "cpe": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*", @@ -36640,13 +32832,13 @@ { "requestedUrl": "https://entreprises-transparence.sante.gouv.fr/", "finalUrl": "https://entreprises-transparence.sante.gouv.fr/", - "fetchTime": "2024-07-21T03:16:51.682Z", + "fetchTime": "2024-07-28T03:16:47.918Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.48 + "score": 0.45 }, "accessibility": { "title": "Accessibility", @@ -36682,49 +32874,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 7471, + "numericValue": 7493, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 2700, - "firstMeaningfulPaint": 2700, - "largestContentfulPaint": 8048, - "firstCPUIdle": 6993, - "interactive": 7471, - "speedIndex": 4793, - "estimatedInputLatency": 83, - "totalBlockingTime": 548, - "maxPotentialFID": 588, + "firstContentfulPaint": 2696, + "firstMeaningfulPaint": 2696, + "largestContentfulPaint": 8066, + "firstCPUIdle": 7041, + "interactive": 7493, + "speedIndex": 5030, + "estimatedInputLatency": 127, + "totalBlockingTime": 606, + "maxPotentialFID": 643, "cumulativeLayoutShift": 0.1875, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 817570241, + "observedTimeOriginTs": 862895797, "observedNavigationStart": 0, - "observedNavigationStartTs": 817570241, - "observedFirstPaint": 625, - "observedFirstPaintTs": 818195497, - "observedFirstContentfulPaint": 2318, - "observedFirstContentfulPaintTs": 819888341, - "observedFirstMeaningfulPaint": 2318, - "observedFirstMeaningfulPaintTs": 819888341, - "observedLargestContentfulPaint": 2613, - "observedLargestContentfulPaintTs": 820183239, - "observedTraceEnd": 3664, - "observedTraceEndTs": 821233988, - "observedLoad": 2608, - "observedLoadTs": 820178055, - "observedDomContentLoaded": 2296, - "observedDomContentLoadedTs": 819865839, + "observedNavigationStartTs": 862895797, + "observedFirstPaint": 634, + "observedFirstPaintTs": 863529711, + "observedFirstContentfulPaint": 2527, + "observedFirstContentfulPaintTs": 865422864, + "observedFirstMeaningfulPaint": 2527, + "observedFirstMeaningfulPaintTs": 865422864, + "observedLargestContentfulPaint": 2742, + "observedLargestContentfulPaintTs": 865637862, + "observedTraceEnd": 3779, + "observedTraceEndTs": 866675181, + "observedLoad": 2722, + "observedLoadTs": 865617830, + "observedDomContentLoaded": 2503, + "observedDomContentLoadedTs": 865399106, "observedCumulativeLayoutShift": 0.1875, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 630, - "observedFirstVisualChangeTs": 818200241, - "observedLastVisualChange": 2930, - "observedLastVisualChangeTs": 820500241, - "observedSpeedIndex": 2348, - "observedSpeedIndexTs": 819918702 + "observedFirstVisualChange": 636, + "observedFirstVisualChangeTs": 863531797, + "observedLastVisualChange": 3136, + "observedLastVisualChangeTs": 866031797, + "observedSpeedIndex": 2520, + "observedSpeedIndexTs": 865415549 }, { "lcpInvalidated": false @@ -36746,18 +32938,18 @@ "numScripts": 5, "numStylesheets": 3, "numFonts": 2, - "numTasks": 327, + "numTasks": 289, "numTasksOver10ms": 4, "numTasksOver25ms": 1, "numTasksOver50ms": 1, "numTasksOver100ms": 1, "numTasksOver500ms": 0, - "rtt": 1.5030000000000001, - "throughput": 4936104.388223548, - "maxRtt": 95.622, - "maxServerLatency": 14.710999999999999, - "totalByteWeight": 950922, - "totalTaskTime": 254.94499999999988, + "rtt": 2.0330000000000004, + "throughput": 4640590.895725146, + "maxRtt": 95.862, + "maxServerLatency": 12.990000000000002, + "totalByteWeight": 950900, + "totalTaskTime": 277.69499999999965, "mainDocumentTransferSize": 1172 } ] @@ -36779,7 +32971,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "D", "testsslExpireSoon": false, "testsslExpireDate": "2025-07-14T21:59:00.000Z", "testsslGrade": "M", @@ -36787,7 +32978,7 @@ "cookiesCount": 1, "trackersGrade": "C", "trackersCount": 6, - "lighthouse_performance": 0.48, + "lighthouse_performance": 0.45, "lighthouse_performanceGrade": "D", "lighthouse_accessibility": 1, "lighthouse_accessibilityGrade": "A", @@ -36807,239 +32998,7 @@ "tags": [ "sante" ], - "http": { - "url": "https://eps.sante.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 03:13:45 GMT", - "grade": "B+", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Cache-Control": "no-cache, no-store, max-age=0, must-revalidate", - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Language": "en-US", - "Content-Length": "1145", - "Content-Security-Policy": "default-src 'self'; frame-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline' https://static.piste.gouv.fr; img-src 'self' https://static.piste.gouv.fr data:; font-src 'self' data:", - "Content-Type": "text/html;charset=utf-8", - "Date": "Sun, 21 Jul 2024 03:13:44 GMT", - "Expires": "0", - "Feature-Policy": "geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'self'; payment 'none'", - "Keep-Alive": "timeout=5, max=96", - "Last-Modified": "Thu, 04 Jul 2024 08:59:15 GMT", - "Pragma": "no-cache", - "Referrer-Policy": "strict-origin-when-cross-origin", - "Set-Cookie": "BIGipServerpool-dgos-eps.cegedim.cloud-HTTP=!Xox9v8OOZbOqdHxWDPlD0yXzT0UGhuws6NyuJF04sNMIL8ETlm4k3UoappRezVtmFkL8fULYtxzwj2R1ahjn6pkrtVc=; path=/; Httponly; Secure", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "DENY", - "X-XSS-Protection": "1; mode=block" - }, - "scan_id": 53618421, - "score": 80, - "start_time": "Sun, 21 Jul 2024 03:13:43 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 1, - "tests_passed": 10, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": { - "default-src": [ - "'self'" - ], - "font-src": [ - "data:", - "'self'" - ], - "frame-src": [ - "data:", - "'self'" - ], - "img-src": [ - "https://static.piste.gouv.fr", - "data:", - "'self'" - ], - "script-src": [ - "'unsafe-inline'", - "https://storage.googleapis.com", - "'unsafe-eval'", - "'self'" - ], - "style-src": [ - "https://static.piste.gouv.fr", - "'unsafe-inline'", - "'self'" - ] - }, - "http": true, - "meta": false, - "numPolicies": 1, - "policy": { - "antiClickjacking": false, - "defaultNone": false, - "insecureBaseUri": true, - "insecureFormAction": true, - "insecureSchemeActive": false, - "insecureSchemePassive": false, - "strictDynamic": false, - "unsafeEval": true, - "unsafeInline": true, - "unsafeInlineStyle": true, - "unsafeObjects": false - } - }, - "pass": false, - "result": "csp-implemented-with-unsafe-inline", - "score_description": "Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.", - "score_modifier": -20 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dgos-eps.cegedim.cloud-HTTP": { - "domain": "eps.sante.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://eps.sante.gouv.fr/", - "redirects": true, - "route": [ - "http://eps.sante.gouv.fr/", - "https://eps.sante.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": "strict-origin-when-cross-origin", - "http": true, - "meta": false - }, - "pass": true, - "result": "referrer-policy-private", - "score_description": "Referrer-Policy header set to \"no-referrer\", \"same-origin\", \"strict-origin\" or \"strict-origin-when-cross-origin\"", - "score_modifier": 5 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "DENY" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": "1; mode=block" - }, - "pass": true, - "result": "x-xss-protection-enabled-mode-block", - "score_description": "Deprecated X-XSS-Protection header set to \"1; mode=block\"", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -37385,7 +33344,7 @@ "ip": "eps.sante.gouv.fr/185.194.82.46", "port": "443", "severity": "OK", - "finding": "315 >= 60 days" + "finding": "308 >= 60 days" }, { "id": "cert_notBefore", @@ -37539,14 +33498,14 @@ "ip": "eps.sante.gouv.fr/185.194.82.46", "port": "443", "severity": "INFO", - "finding": "-1 seconds from localtime" + "finding": "0 seconds from localtime" }, { "id": "HTTP_headerTime", "ip": "eps.sante.gouv.fr/185.194.82.46", "port": "443", "severity": "INFO", - "finding": "1721531697" + "finding": "1722136385" }, { "id": "HSTS_time", @@ -38165,7 +34124,7 @@ "ip": "eps.sante.gouv.fr/185.194.82.46", "port": "443", "severity": "INFO", - "finding": "92" + "finding": "95" } ], "thirdparties": { @@ -38173,7 +34132,7 @@ "cookies": [ { "name": "BIGipServerpool-dgos-eps.cegedim.cloud-HTTP", - "value": "!vweP4KIAjQ4lxqlWDPlD0yXzT0UGhmOKFfQb+GKtIAt4xg1gw26rbhEfW7pxIIhmxN0N5+QWU6Q6Ts0FefX9d8ZZOwE=", + "value": "!BZ+vdGI30ETnTC9WDPlD0yXzT0UGhjvLatJ0zyJRQWzuojx6b97avc/O61BvoUdOKxoUlZQ4KIMneywJ07it0Hf8o0I=", "domain": "eps.sante.gouv.fr", "path": "/", "expires": -1, @@ -38195,14 +34154,14 @@ "content-length": "1145", "content-security-policy": "default-src 'self'; frame-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline' https://static.piste.gouv.fr; img-src 'self' https://static.piste.gouv.fr data:; font-src 'self' data:", "content-type": "text/html;charset=utf-8", - "date": "Sun, 21 Jul 2024 03:13:59 GMT", + "date": "Sun, 28 Jul 2024 03:12:05 GMT", "expires": "0", "feature-policy": "geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'self'; payment 'none'", "keep-alive": "timeout=5, max=100", "last-modified": "Thu, 04 Jul 2024 08:59:15 GMT", "pragma": "no-cache", "referrer-policy": "strict-origin-when-cross-origin", - "set-cookie": "BIGipServerpool-dgos-eps.cegedim.cloud-HTTP=!vweP4KIAjQ4lxqlWDPlD0yXzT0UGhmOKFfQb+GKtIAt4xg1gw26rbhEfW7pxIIhmxN0N5+QWU6Q6Ts0FefX9d8ZZOwE=; path=/; Httponly; Secure", + "set-cookie": "BIGipServerpool-dgos-eps.cegedim.cloud-HTTP=!BZ+vdGI30ETnTC9WDPlD0yXzT0UGhjvLatJ0zyJRQWzuojx6b97avc/O61BvoUdOKxoUlZQ4KIMneywJ07it0Hf8o0I=; path=/; Httponly; Secure", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "DENY", @@ -38443,13 +34402,13 @@ { "requestedUrl": "https://eps.sante.gouv.fr/", "finalUrl": "https://eps.sante.gouv.fr/", - "fetchTime": "2024-07-21T03:13:32.053Z", + "fetchTime": "2024-07-28T03:11:38.585Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.58 + "score": 0.55 }, "accessibility": { "title": "Accessibility", @@ -38485,49 +34444,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 6246, + "numericValue": 6201, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 1974, - "firstMeaningfulPaint": 6021, - "largestContentfulPaint": 8077, - "firstCPUIdle": 6454, - "interactive": 6246, - "speedIndex": 6379, - "estimatedInputLatency": 94, - "totalBlockingTime": 276, - "maxPotentialFID": 601, - "cumulativeLayoutShift": 0.016163641611735027, - "cumulativeLayoutShiftAllFrames": 0.016163641611735027, + "firstContentfulPaint": 1968, + "firstMeaningfulPaint": 6112, + "largestContentfulPaint": 8262, + "firstCPUIdle": 6126, + "interactive": 6201, + "speedIndex": 6480, + "estimatedInputLatency": 171, + "totalBlockingTime": 363, + "maxPotentialFID": 698, + "cumulativeLayoutShift": 0.01611580530802409, + "cumulativeLayoutShiftAllFrames": 0.01611580530802409, "observedTimeOrigin": 0, - "observedTimeOriginTs": 348946437, + "observedTimeOriginTs": 287008368, "observedNavigationStart": 0, - "observedNavigationStartTs": 348946437, - "observedFirstPaint": 1478, - "observedFirstPaintTs": 350424278, - "observedFirstContentfulPaint": 1623, - "observedFirstContentfulPaintTs": 350569367, - "observedFirstMeaningfulPaint": 3159, - "observedFirstMeaningfulPaintTs": 352105287, - "observedLargestContentfulPaint": 4210, - "observedLargestContentfulPaintTs": 353156123, - "observedTraceEnd": 5248, - "observedTraceEndTs": 354194122, - "observedLoad": 4191, - "observedLoadTs": 353137822, - "observedDomContentLoaded": 3141, - "observedDomContentLoadedTs": 352087852, - "observedCumulativeLayoutShift": 0.016163641611735027, - "observedCumulativeLayoutShiftAllFrames": 0.016163641611735027, - "observedFirstVisualChange": 1622, - "observedFirstVisualChangeTs": 350568437, - "observedLastVisualChange": 4222, - "observedLastVisualChangeTs": 353168437, - "observedSpeedIndex": 3812, - "observedSpeedIndexTs": 352758389 + "observedNavigationStartTs": 287008368, + "observedFirstPaint": 1467, + "observedFirstPaintTs": 288475364, + "observedFirstContentfulPaint": 1605, + "observedFirstContentfulPaintTs": 288613579, + "observedFirstMeaningfulPaint": 3275, + "observedFirstMeaningfulPaintTs": 290283562, + "observedLargestContentfulPaint": 4293, + "observedLargestContentfulPaintTs": 291301059, + "observedTraceEnd": 5330, + "observedTraceEndTs": 292338476, + "observedLoad": 4271, + "observedLoadTs": 291279638, + "observedDomContentLoaded": 3241, + "observedDomContentLoadedTs": 290249336, + "observedCumulativeLayoutShift": 0.01611580530802409, + "observedCumulativeLayoutShiftAllFrames": 0.01611580530802409, + "observedFirstVisualChange": 1613, + "observedFirstVisualChangeTs": 288621368, + "observedLastVisualChange": 4296, + "observedLastVisualChangeTs": 291304368, + "observedSpeedIndex": 3889, + "observedSpeedIndexTs": 290897197 }, { "lcpInvalidated": false @@ -38549,18 +34508,18 @@ "numScripts": 3, "numStylesheets": 4, "numFonts": 2, - "numTasks": 425, - "numTasksOver10ms": 6, - "numTasksOver25ms": 3, + "numTasks": 424, + "numTasksOver10ms": 9, + "numTasksOver25ms": 5, "numTasksOver50ms": 2, "numTasksOver100ms": 1, "numTasksOver500ms": 0, - "rtt": 150.121, - "throughput": 3341725.884799389, - "maxRtt": 150.121, - "maxServerLatency": 5.373999999999995, + "rtt": 147.892, + "throughput": 3259365.579378736, + "maxRtt": 147.892, + "maxServerLatency": 4.025999999999954, "totalByteWeight": 1155904, - "totalTaskTime": 385.2280000000001, + "totalTaskTime": 478.1919999999997, "mainDocumentTransferSize": 2384 } ] @@ -38582,7 +34541,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B+", "testsslExpireSoon": false, "testsslExpireDate": "2025-06-01T21:59:00.000Z", "testsslGrade": "A+", @@ -38590,7 +34548,7 @@ "cookiesCount": 1, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.58, + "lighthouse_performance": 0.55, "lighthouse_performanceGrade": "C", "lighthouse_accessibility": 1, "lighthouse_accessibilityGrade": "A", @@ -38744,7 +34702,7 @@ "type": "dns", "host": "extranet.lafrancesengage.fr.", "matched-at": "extranet.lafrancesengage.fr", - "timestamp": "2024-07-21T03:41:49.845280123Z", + "timestamp": "2024-07-28T03:40:06.464161489Z", "matcher-status": true } ], @@ -38845,7 +34803,7 @@ "type": "dns", "host": "filiere.sports.gouv.fr.", "matched-at": "filiere.sports.gouv.fr", - "timestamp": "2024-07-21T03:44:20.80283757Z", + "timestamp": "2024-07-28T03:46:17.828398884Z", "matcher-status": true } ], @@ -38878,216 +34836,7 @@ "social", "sante" ], - "http": { - "url": "https://handicap.gouv.fr", - "algorithm_version": 3, - "end_time": "Sat, 20 Jul 2024 14:34:09 GMT", - "grade": "D", - "hidden": true, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Age": "8901", - "Cache-Control": "max-age=10800, public", - "Connection": "keep-alive", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sat, 20 Jul 2024 09:41:53 GMT", - "ETag": "W/\"1721468512-gzip\"", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Last-Modified": "Sat, 20 Jul 2024 09:41:52 GMT", - "Set-Cookie": "BIGipServerpool-handicap-v2.cegedim.cloud-HTTP=3468974346.20480.0000; path=/; Httponly; Secure, TSf3779cae029=087dc22938ab2800dab45e47b801e36099e1437816e34453fc47810c4eca5338aa67760f6236e1058dd22544c89a3134; Max-Age=30; Path=/, TS300431cb027=087dc22938ab20008c5dac6b73520f40641ed8afb86ea5e8d426120d4d98d08fe1d408ba27ea5359087bb7b6d811300032d2769048bdcc559aa1cea6226ad33eb2636d1f6d382fe2e8d732429470112388f0b108b4119f157421753e5ee53dae; Path=/", - "Transfer-Encoding": "chunked", - "Vary": "Cookie,Accept-Encoding", - "X-Cache": "HIT", - "X-Cache-Hits": "153", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "SAMEORIGIN" - }, - "scan_id": 53599151, - "score": 35, - "start_time": "Sat, 20 Jul 2024 14:34:03 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 3, - "tests_passed": 8, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-handicap-v2.cegedim.cloud-HTTP": { - "domain": "handicap.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS300431cb027": { - "domain": "handicap.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TSf3779cae029": { - "domain": "handicap.gouv.fr", - "expires": 1721486078, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag", - "score_description": "Cookies set without using the Secure flag or set over HTTP", - "score_modifier": -20 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://handicap.gouv.fr/", - "redirects": true, - "route": [ - "http://handicap.gouv.fr/", - "https://handicap.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": null, - "includeSubDomains": false, - "max-age": null, - "preload": false, - "preloaded": false - }, - "pass": false, - "result": "hsts-not-implemented", - "score_description": "HTTP Strict Transport Security (HSTS) header not implemented", - "score_modifier": -20 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -39433,7 +35182,7 @@ "ip": "handicap.gouv.fr/185.194.82.206", "port": "443", "severity": "OK", - "finding": "106 >= 60 days" + "finding": "99 >= 60 days" }, { "id": "cert_notBefore", @@ -40150,7 +35899,7 @@ "ip": "handicap.gouv.fr/185.194.82.206", "port": "443", "severity": "INFO", - "finding": "48" + "finding": "49" } ], "thirdparties": { @@ -40326,20 +36075,20 @@ { "requestedUrl": "https://handicap.gouv.fr/", "finalUrl": "https://handicap.gouv.fr/", - "fetchTime": "2024-07-21T03:47:45.238Z", + "fetchTime": "2024-07-28T03:46:13.050Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.23 + "score": 0.35 }, "accessibility": { "title": "Accessibility", "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", "id": "accessibility", - "score": 1 + "score": 0.92 }, "best-practices": { "title": "Best Practices", @@ -40368,49 +36117,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 12539, + "numericValue": 11480, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 3116, - "firstMeaningfulPaint": 3116, - "largestContentfulPaint": 5574, - "firstCPUIdle": 11939, - "interactive": 12539, - "speedIndex": 13281, - "estimatedInputLatency": 2853, - "totalBlockingTime": 6804, - "maxPotentialFID": 4050, - "cumulativeLayoutShift": 0.0035541449652777774, + "firstContentfulPaint": 3227, + "firstMeaningfulPaint": 3227, + "largestContentfulPaint": 3940, + "firstCPUIdle": 10650, + "interactive": 11480, + "speedIndex": 7651, + "estimatedInputLatency": 2183, + "totalBlockingTime": 5603, + "maxPotentialFID": 2967, + "cumulativeLayoutShift": 0.0015124782986111111, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 369115758, + "observedTimeOriginTs": 384336521, "observedNavigationStart": 0, - "observedNavigationStartTs": 369115758, - "observedFirstPaint": 1080, - "observedFirstPaintTs": 370195341, - "observedFirstContentfulPaint": 1080, - "observedFirstContentfulPaintTs": 370195341, - "observedFirstMeaningfulPaint": 1114, - "observedFirstMeaningfulPaintTs": 370229865, - "observedLargestContentfulPaint": 1528, - "observedLargestContentfulPaintTs": 370644053, - "observedTraceEnd": 12307, - "observedTraceEndTs": 381422761, - "observedLoad": 11250, - "observedLoadTs": 380365467, - "observedDomContentLoaded": 1117, - "observedDomContentLoadedTs": 370233024, - "observedCumulativeLayoutShift": 0.0035541449652777774, + "observedNavigationStartTs": 384336521, + "observedFirstPaint": 1321, + "observedFirstPaintTs": 385657819, + "observedFirstContentfulPaint": 1321, + "observedFirstContentfulPaintTs": 385657819, + "observedFirstMeaningfulPaint": 1321, + "observedFirstMeaningfulPaintTs": 385657819, + "observedLargestContentfulPaint": 1510, + "observedLargestContentfulPaintTs": 385846539, + "observedTraceEnd": 4391, + "observedTraceEndTs": 388727524, + "observedLoad": 1830, + "observedLoadTs": 386166213, + "observedDomContentLoaded": 1341, + "observedDomContentLoadedTs": 385677665, + "observedCumulativeLayoutShift": 0.0015124782986111111, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 1069, - "observedFirstVisualChangeTs": 370184758, - "observedLastVisualChange": 11369, - "observedLastVisualChangeTs": 380484758, - "observedSpeedIndex": 7150, - "observedSpeedIndexTs": 376265782 + "observedFirstVisualChange": 1314, + "observedFirstVisualChangeTs": 385650521, + "observedLastVisualChange": 3497, + "observedLastVisualChangeTs": 387833521, + "observedSpeedIndex": 2616, + "observedSpeedIndexTs": 386952021 }, { "lcpInvalidated": false @@ -40432,19 +36181,19 @@ "numScripts": 14, "numStylesheets": 4, "numFonts": 4, - "numTasks": 2306, - "numTasksOver10ms": 14, + "numTasks": 1366, + "numTasksOver10ms": 17, "numTasksOver25ms": 6, "numTasksOver50ms": 4, - "numTasksOver100ms": 2, + "numTasksOver100ms": 3, "numTasksOver500ms": 2, - "rtt": 22.176, - "throughput": 7115054.289922078, - "maxRtt": 22.176, - "maxServerLatency": 58.001000000000005, - "totalByteWeight": 846462, - "totalTaskTime": 2396.6009999999956, - "mainDocumentTransferSize": 59837 + "rtt": 46.379, + "throughput": 7087636.398712649, + "maxRtt": 87.702, + "maxServerLatency": 38.303999999999995, + "totalByteWeight": 854217, + "totalTaskTime": 2164.0979999999977, + "mainDocumentTransferSize": 59846 } ] } @@ -40465,7 +36214,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "D", "testsslExpireSoon": false, "testsslExpireDate": "2024-11-04T22:59:00.000Z", "testsslGrade": "A", @@ -40473,9 +36221,9 @@ "cookiesCount": 0, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.23, - "lighthouse_performanceGrade": "E", - "lighthouse_accessibility": 1, + "lighthouse_performance": 0.35, + "lighthouse_performanceGrade": "D", + "lighthouse_accessibility": 0.92, "lighthouse_accessibilityGrade": "A", "lighthouse_best-practices": 0.87, "lighthouse_best-practicesGrade": "A", @@ -40494,197 +36242,7 @@ "social", "travail" ], - "http": { - "url": "https://haut-conseil-egalite.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 03:50:45 GMT", - "grade": "C-", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Composed-By": "SPIP 4.2.13 @ www.spip.net + https://haut-conseil-egalite.gouv.fr/local/config.txt", - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Length": "5389", - "Content-Type": "text/html; charset=utf-8", - "Date": "Sun, 21 Jul 2024 03:50:43 GMT", - "Keep-Alive": "timeout=5, max=87", - "Last-Modified": "Sun, 21 Jul 2024 03:50:43 GMT", - "Set-Cookie": "BIGipServerpool-dgcs-hautconseilegalite2.cegedim.cloud-HTTP=!1aTEhNy6Bz4UxDVWDPlD0yXzT0UGhvEGkaDi8YlLJ6e4CaQBDPF/hwQOLrGn3w/SlHdKhd+4ornsqZnLWuWroJxQdZQ=; path=/; Httponly; Secure", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Vary": "Cookie,Accept-Encoding", - "X-Outils-CS": "", - "X-Spip-Cache": "86400" - }, - "scan_id": 53619750, - "score": 45, - "start_time": "Sun, 21 Jul 2024 03:50:42 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 4, - "tests_passed": 7, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dgcs-hautconseilegalite2.cegedim.cloud-HTTP": { - "domain": "haut-conseil-egalite.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://haut-conseil-egalite.gouv.fr/", - "redirects": true, - "route": [ - "http://haut-conseil-egalite.gouv.fr/", - "https://haut-conseil-egalite.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": { - "https://platform.twitter.com/widgets.js": { - "crossorigin": null, - "integrity": null - } - } - }, - "pass": false, - "result": "sri-not-implemented-but-external-scripts-loaded-securely", - "score_description": "Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS", - "score_modifier": -5 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-content-type-options-not-implemented", - "score_description": "X-Content-Type-Options header not implemented", - "score_modifier": -5 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-frame-options-not-implemented", - "score_description": "X-Frame-Options (XFO) header not implemented", - "score_modifier": -20 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -41030,7 +36588,7 @@ "ip": "haut-conseil-egalite.gouv.fr/185.194.83.18", "port": "443", "severity": "OK", - "finding": "293 >= 60 days" + "finding": "286 >= 60 days" }, { "id": "cert_notBefore", @@ -41191,7 +36749,7 @@ "ip": "haut-conseil-egalite.gouv.fr/185.194.83.18", "port": "443", "severity": "INFO", - "finding": "1721533919" + "finding": "1722138867" }, { "id": "HSTS_time", @@ -41768,7 +37326,7 @@ "ip": "haut-conseil-egalite.gouv.fr/185.194.83.18", "port": "443", "severity": "INFO", - "finding": "92" + "finding": "55" } ], "thirdparties": { @@ -41799,7 +37357,7 @@ }, { "type": "twitter", - "url": "https://syndication.twitter.com/settings?session_id=d5bde28ff72c7edc933489afc46b02304c56493d", + "url": "https://syndication.twitter.com/settings?session_id=cf17e5d4bb4675d44858e2a521d32c9ad525775c", "details": { "id": "twitter", "message": "Dont embed twitter scripts, use your own tweet embed" @@ -41807,7 +37365,7 @@ }, { "type": "google analytics", - "url": "https://ssl.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1178782861&utmhn=haut-conseil-egalite.gouv.fr&utmcs=UTF-8&utmsr=800x600&utmvp=800x600&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Haut%20Conseil%20%C3%A0%20l%27%C3%89galit%C3%A9%20entre%20les%20femmes%20et%20les%20hommes&utmhid=1756676235&utmr=-&utmp=%2F&utmht=1721533860311&utmac=UA-40231098-1&utmcc=__utma%3D82807311.671697630.1721533860.1721533860.1721533860.1%3B%2B__utmz%3D82807311.1721533860.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1750062932&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~", + "url": "https://ssl.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=976037524&utmhn=haut-conseil-egalite.gouv.fr&utmcs=UTF-8&utmsr=800x600&utmvp=800x600&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Haut%20Conseil%20%C3%A0%20l%27%C3%89galit%C3%A9%20entre%20les%20femmes%20et%20les%20hommes&utmhid=1693997316&utmr=-&utmp=%2F&utmht=1722138833811&utmac=UA-40231098-1&utmcc=__utma%3D82807311.362657740.1722138834.1722138834.1722138834.1%3B%2B__utmz%3D82807311.1722138834.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=347228623&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~", "details": { "id": "google analytics", "message": "Use hosted Matomo instance" @@ -41823,7 +37381,7 @@ }, { "type": "twitter", - "url": "https://syndication.twitter.com/srv/timeline-profile/screen-name/HCEfh?dnt=false&embedId=twitter-widget-0&features=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%3D%3D&frame=false&hideBorder=false&hideFooter=true&hideHeader=true&hideScrollBar=false&lang=fr&maxHeight=500px&origin=https%3A%2F%2Fhaut-conseil-egalite.gouv.fr%2F&sessionId=d5bde28ff72c7edc933489afc46b02304c56493d&showHeader=false&showReplies=false&theme=light&transparent=false&widgetsVersion=2615f7e52b7e0%3A1702314776716", + "url": "https://syndication.twitter.com/srv/timeline-profile/screen-name/HCEfh?dnt=false&embedId=twitter-widget-0&features=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%3D%3D&frame=false&hideBorder=false&hideFooter=true&hideHeader=true&hideScrollBar=false&lang=fr&maxHeight=500px&origin=https%3A%2F%2Fhaut-conseil-egalite.gouv.fr%2F&sessionId=cf17e5d4bb4675d44858e2a521d32c9ad525775c&showHeader=false&showReplies=false&theme=light&transparent=false&widgetsVersion=2615f7e52b7e0%3A1702314776716", "details": { "id": "twitter", "message": "Dont embed twitter scripts, use your own tweet embed" @@ -42079,7 +37637,7 @@ }, { "type": "twitter", - "url": "https://syndication.twitter.com/i/jot?l=%7B%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1721533861752%2C%22event_namespace%22%3A%7B%22action%22%3A%22results%22%2C%22client%22%3A%22tfw%22%2C%22page%22%3A%22timeline-profile%22%2C%22section%22%3A%22main%22%7D%2C%22context%22%3A%22horizon%22%2C%22client_version%22%3A%222615f7e52b7e0%3A1702314776716%22%2C%22dnt%22%3Afalse%2C%22widget_id%22%3A%22twitter-widget-0%22%2C%22widget_origin%22%3A%22https%3A%2F%2Fhaut-conseil-egalite.gouv.fr%2F%22%2C%22widget_frame%22%3A%22false%22%2C%22widget_partner%22%3A%22%22%2C%22widget_site_screen_name%22%3A%22%22%2C%22widget_site_user_id%22%3A%22%22%2C%22widget_creator_screen_name%22%3A%22%22%2C%22widget_creator_user_id%22%3A%22%22%2C%22widget_iframe_version%22%3A%2230b4041%3A1715703883585%22%2C%22widget_data_source%22%3A%22screen-name%3AHCEfh%22%7D&session_id=d5bde28ff72c7edc933489afc46b02304c56493d", + "url": "https://syndication.twitter.com/i/jot?l=%7B%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1722138835500%2C%22event_namespace%22%3A%7B%22action%22%3A%22results%22%2C%22client%22%3A%22tfw%22%2C%22page%22%3A%22timeline-profile%22%2C%22section%22%3A%22main%22%7D%2C%22context%22%3A%22horizon%22%2C%22client_version%22%3A%222615f7e52b7e0%3A1702314776716%22%2C%22dnt%22%3Afalse%2C%22widget_id%22%3A%22twitter-widget-0%22%2C%22widget_origin%22%3A%22https%3A%2F%2Fhaut-conseil-egalite.gouv.fr%2F%22%2C%22widget_frame%22%3A%22false%22%2C%22widget_partner%22%3A%22%22%2C%22widget_site_screen_name%22%3A%22%22%2C%22widget_site_user_id%22%3A%22%22%2C%22widget_creator_screen_name%22%3A%22%22%2C%22widget_creator_user_id%22%3A%22%22%2C%22widget_iframe_version%22%3A%2230b4041%3A1715703883585%22%2C%22widget_data_source%22%3A%22screen-name%3AHCEfh%22%7D&session_id=cf17e5d4bb4675d44858e2a521d32c9ad525775c", "details": { "id": "twitter", "message": "Dont embed twitter scripts, use your own tweet embed" @@ -42391,7 +37949,7 @@ }, { "type": "twitter", - "url": "https://pbs.twimg.com/card_img/1812472611349102592/JCDd2clv?format=jpg&name=120x120", + "url": "https://pbs.twimg.com/card_img/1815011254605324288/gvqeBPxT?format=jpg&name=120x120", "details": { "id": "twitter", "message": "Dont embed twitter scripts, use your own tweet embed" @@ -42399,7 +37957,7 @@ }, { "type": "twitter", - "url": "https://pbs.twimg.com/card_img/1812606192855719936/6PwKdAti?format=jpg&name=240x240", + "url": "https://pbs.twimg.com/card_img/1815143175125598208/QxH0Tnkt?format=jpg&name=240x240", "details": { "id": "twitter", "message": "Dont embed twitter scripts, use your own tweet embed" @@ -42409,10 +37967,10 @@ "cookies": [ { "name": "__utmb", - "value": "82807311.1.10.1721533860", + "value": "82807311.1.10.1722138834", "domain": ".haut-conseil-egalite.gouv.fr", "path": "/", - "expires": 1721535660, + "expires": 1722140633, "size": 30, "httpOnly": false, "secure": false, @@ -42426,7 +37984,7 @@ "value": "1", "domain": ".haut-conseil-egalite.gouv.fr", "path": "/", - "expires": 1721534460, + "expires": 1722139433, "size": 7, "httpOnly": false, "secure": false, @@ -42437,10 +37995,10 @@ }, { "name": "__utmz", - "value": "82807311.1721533860.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)", + "value": "82807311.1722138834.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)", "domain": ".haut-conseil-egalite.gouv.fr", "path": "/", - "expires": 1737301860, + "expires": 1737906833, "size": 75, "httpOnly": false, "secure": false, @@ -42465,10 +38023,10 @@ }, { "name": "__utma", - "value": "82807311.671697630.1721533860.1721533860.1721533860.1", + "value": "82807311.362657740.1722138834.1722138834.1722138834.1", "domain": ".haut-conseil-egalite.gouv.fr", "path": "/", - "expires": 1784605860, + "expires": 1785210833, "size": 59, "httpOnly": false, "secure": false, @@ -42479,7 +38037,7 @@ }, { "name": "BIGipServerpool-dgcs-hautconseilegalite2.cegedim.cloud-HTTP", - "value": "!AeDxtUrkFW61yJNWDPlD0yXzT0UGhh2UbCBRuVR0ptwZGP/w0lJ9LtGwXVDCPummMJXtW/JBfTLdcd1Q9fSGOdqD5n8=", + "value": "!1dZTNVypkw7Sg2pWDPlD0yXzT0UGhtdVSJjnDVMqwLefd+XojW7bOVjqw1nq+BUZPjUNbPDsYHvuPwXk5gOpetgYWy0=", "domain": "haut-conseil-egalite.gouv.fr", "path": "/", "expires": -1, @@ -42498,10 +38056,10 @@ "content-encoding": "gzip", "content-length": "5389", "content-type": "text/html; charset=utf-8", - "date": "Sun, 21 Jul 2024 03:50:59 GMT", + "date": "Sun, 28 Jul 2024 03:53:52 GMT", "keep-alive": "timeout=5, max=100", - "last-modified": "Sun, 21 Jul 2024 03:50:59 GMT", - "set-cookie": "BIGipServerpool-dgcs-hautconseilegalite2.cegedim.cloud-HTTP=!AeDxtUrkFW61yJNWDPlD0yXzT0UGhh2UbCBRuVR0ptwZGP/w0lJ9LtGwXVDCPummMJXtW/JBfTLdcd1Q9fSGOdqD5n8=; path=/; Httponly; Secure", + "last-modified": "Sun, 28 Jul 2024 03:53:52 GMT", + "set-cookie": "BIGipServerpool-dgcs-hautconseilegalite2.cegedim.cloud-HTTP=!1dZTNVypkw7Sg2pWDPlD0yXzT0UGhtdVSJjnDVMqwLefd+XojW7bOVjqw1nq+BUZPjUNbPDsYHvuPwXk5gOpetgYWy0=; path=/; Httponly; Secure", "strict-transport-security": "max-age=31536000; includeSubDomains", "vary": "Cookie,Accept-Encoding", "x-outils-cs": "", @@ -42620,14 +38178,8 @@ }, { "hostname": "ssl.google-analytics.com", - "ip": "142.251.46.232", + "ip": "142.250.190.40", "geoip": { - "city": { - "geoname_id": 5116931, - "names": { - "en": "Farmingdale" - } - }, "continent": { "code": "NA", "geoname_id": 6255149, @@ -42658,13 +38210,9 @@ }, "location": { "accuracy_radius": 1000, - "latitude": 40.7306, - "longitude": -73.4313, - "metro_code": 501, - "time_zone": "America/New_York" - }, - "postal": { - "code": "11735" + "latitude": 37.751, + "longitude": -97.822, + "time_zone": "America/Chicago" }, "registered_country": { "geoname_id": 6252001, @@ -42679,28 +38227,12 @@ "ru": "США", "zh-CN": "美国" } - }, - "subdivisions": [ - { - "geoname_id": 5128638, - "iso_code": "NY", - "names": { - "de": "New York", - "en": "New York", - "es": "Nueva York", - "fr": "New York", - "ja": "ニューヨーク州", - "pt-BR": "Nova Iorque", - "ru": "Нью-Йорк", - "zh-CN": "纽约州" - } - } - ] + } } }, { "hostname": "syndication.twitter.com", - "ip": "104.244.42.136", + "ip": "104.244.42.72", "geoip": { "continent": { "code": "NA", @@ -42862,20 +38394,8 @@ }, { "hostname": "pbs.twimg.com", - "ip": "151.101.200.159", + "ip": "192.229.173.16", "geoip": { - "city": { - "geoname_id": 5380748, - "names": { - "de": "Palo Alto", - "en": "Palo Alto", - "es": "Palo Alto", - "fr": "Palo Alto", - "ja": "パロアルト", - "pt-BR": "Palo Alto", - "ru": "Пало Альто" - } - }, "continent": { "code": "NA", "geoname_id": 6255149, @@ -42905,14 +38425,10 @@ } }, "location": { - "accuracy_radius": 20, - "latitude": 37.4433, - "longitude": -122.141, - "metro_code": 807, - "time_zone": "America/Los_Angeles" - }, - "postal": { - "code": "94302" + "accuracy_radius": 1000, + "latitude": 37.751, + "longitude": -97.822, + "time_zone": "America/Chicago" }, "registered_country": { "geoname_id": 6252001, @@ -42927,23 +38443,7 @@ "ru": "США", "zh-CN": "美国" } - }, - "subdivisions": [ - { - "geoname_id": 5332921, - "iso_code": "CA", - "names": { - "de": "Kalifornien", - "en": "California", - "es": "California", - "fr": "Californie", - "ja": "カリフォルニア州", - "pt-BR": "Califórnia", - "ru": "Калифорния", - "zh-CN": "加州" - } - } - ] + } } } ] @@ -43088,13 +38588,13 @@ { "requestedUrl": "https://haut-conseil-egalite.gouv.fr/", "finalUrl": "https://haut-conseil-egalite.gouv.fr/", - "fetchTime": "2024-07-21T03:50:29.516Z", + "fetchTime": "2024-07-28T03:52:28.228Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.15 + "score": 0.16 }, "accessibility": { "title": "Accessibility", @@ -43130,49 +38630,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 13336, + "numericValue": 13142, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 6321, - "firstMeaningfulPaint": 6321, - "largestContentfulPaint": 10720, - "firstCPUIdle": 10825, - "interactive": 13336, - "speedIndex": 9444, - "estimatedInputLatency": 254, - "totalBlockingTime": 953, - "maxPotentialFID": 685, - "cumulativeLayoutShift": 0.13115382343723503, - "cumulativeLayoutShiftAllFrames": 0.13117032343723503, + "firstContentfulPaint": 5438, + "firstMeaningfulPaint": 5682, + "largestContentfulPaint": 7518, + "firstCPUIdle": 10765, + "interactive": 13142, + "speedIndex": 8298, + "estimatedInputLatency": 277, + "totalBlockingTime": 1281, + "maxPotentialFID": 704, + "cumulativeLayoutShift": 0.12940543017547057, + "cumulativeLayoutShiftAllFrames": 0.12942193017547057, "observedTimeOrigin": 0, - "observedTimeOriginTs": 383162134, + "observedTimeOriginTs": 297198763, "observedNavigationStart": 0, - "observedNavigationStartTs": 383162134, - "observedFirstPaint": 1665, - "observedFirstPaintTs": 384827424, - "observedFirstContentfulPaint": 1665, - "observedFirstContentfulPaintTs": 384827424, - "observedFirstMeaningfulPaint": 2013, - "observedFirstMeaningfulPaintTs": 385174791, - "observedLargestContentfulPaint": 2080, - "observedLargestContentfulPaintTs": 385242082, - "observedTraceEnd": 4774, - "observedTraceEndTs": 387936387, - "observedLoad": 3021, - "observedLoadTs": 386183072, - "observedDomContentLoaded": 1596, - "observedDomContentLoadedTs": 384758046, - "observedCumulativeLayoutShift": 0.13115382343723503, - "observedCumulativeLayoutShiftAllFrames": 0.13117032343723503, - "observedFirstVisualChange": 1655, - "observedFirstVisualChangeTs": 384817134, - "observedLastVisualChange": 3639, - "observedLastVisualChangeTs": 386801134, - "observedSpeedIndex": 1924, - "observedSpeedIndexTs": 385085763 + "observedNavigationStartTs": 297198763, + "observedFirstPaint": 1072, + "observedFirstPaintTs": 298270348, + "observedFirstContentfulPaint": 1072, + "observedFirstContentfulPaintTs": 298270348, + "observedFirstMeaningfulPaint": 1343, + "observedFirstMeaningfulPaintTs": 298541317, + "observedLargestContentfulPaint": 1232, + "observedLargestContentfulPaintTs": 298430499, + "observedTraceEnd": 4265, + "observedTraceEndTs": 301463557, + "observedLoad": 1999, + "observedLoadTs": 299197357, + "observedDomContentLoaded": 1050, + "observedDomContentLoadedTs": 298248324, + "observedCumulativeLayoutShift": 0.12940543017547057, + "observedCumulativeLayoutShiftAllFrames": 0.12942193017547057, + "observedFirstVisualChange": 1072, + "observedFirstVisualChangeTs": 298270763, + "observedLastVisualChange": 3222, + "observedLastVisualChangeTs": 300420763, + "observedSpeedIndex": 1295, + "observedSpeedIndexTs": 298493393 }, { "lcpInvalidated": false @@ -43194,18 +38694,18 @@ "numScripts": 36, "numStylesheets": 8, "numFonts": 1, - "numTasks": 2111, - "numTasksOver10ms": 19, - "numTasksOver25ms": 7, - "numTasksOver50ms": 6, - "numTasksOver100ms": 3, + "numTasks": 2090, + "numTasksOver10ms": 14, + "numTasksOver25ms": 6, + "numTasksOver50ms": 5, + "numTasksOver100ms": 4, "numTasksOver500ms": 0, - "rtt": 0.956999999999999, - "throughput": 21247636.071941976, - "maxRtt": 147.791, - "maxServerLatency": 10.764000000000001, - "totalByteWeight": 2420452, - "totalTaskTime": 1514.4740000000083, + "rtt": 1.256, + "throughput": 29250219.209864385, + "maxRtt": 94.362, + "maxServerLatency": 30.355, + "totalByteWeight": 2422753, + "totalTaskTime": 1436.665999999977, "mainDocumentTransferSize": 6053 } ] @@ -43227,7 +38727,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "C-", "testsslExpireSoon": false, "testsslExpireDate": "2025-05-10T21:59:00.000Z", "testsslGrade": "A+", @@ -43235,7 +38734,7 @@ "cookiesCount": 6, "trackersGrade": "F", "trackersCount": 79, - "lighthouse_performance": 0.15, + "lighthouse_performance": 0.16, "lighthouse_performanceGrade": "F", "lighthouse_accessibility": 1, "lighthouse_accessibilityGrade": "A", @@ -43259,26 +38758,26 @@ "http": { "url": "https://hcfea.fr", "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 04:01:02 GMT", + "end_time": "Sun, 28 Jul 2024 04:02:27 GMT", "grade": "D", "hidden": false, "likelihood_indicator": "MEDIUM", "response_headers": { "Connection": "Keep-Alive", "Content-Encoding": "gzip", - "Content-Length": "3560", + "Content-Length": "3568", "Content-Type": "text/html; charset=utf-8", - "Date": "Sun, 21 Jul 2024 04:01:00 GMT", + "Date": "Sun, 28 Jul 2024 04:02:26 GMT", "Keep-Alive": "timeout=5, max=100", - "Last-Modified": "Sun, 21 Jul 2024 04:01:00 GMT", - "Server": "Apache/2.4.59 (Debian)", + "Last-Modified": "Sun, 28 Jul 2024 04:02:26 GMT", + "Server": "Apache/2.4.61 (Debian)", "Set-Cookie": "BIGipServerpool-www.hcfea-portail-prod.cegedim.cloud-HTTP=1151424522.20480.0000; path=/; Httponly; Secure", "Vary": "Accept-Encoding", "X-Spip-Cache": "86400" }, - "scan_id": 53619987, + "scan_id": 53834079, "score": 30, - "start_time": "Sun, 21 Jul 2024 04:00:59 GMT", + "start_time": "Sun, 28 Jul 2024 04:02:24 GMT", "state": "FINISHED", "status_code": 200, "tests_failed": 4, @@ -43785,7 +39284,7 @@ "ip": "hcfea.fr/185.194.83.96", "port": "443", "severity": "OK", - "finding": "315 >= 60 days" + "finding": "308 >= 60 days" }, { "id": "cert_notBefore", @@ -43946,7 +39445,7 @@ "ip": "hcfea.fr/185.194.83.96", "port": "443", "severity": "INFO", - "finding": "1721534507" + "finding": "1722139392" }, { "id": "HSTS", @@ -43967,7 +39466,7 @@ "ip": "hcfea.fr/185.194.83.96", "port": "443", "severity": "INFO", - "finding": "Apache/2.4.59 (Debian)" + "finding": "Apache/2.4.61 (Debian)" }, { "id": "banner_application", @@ -44548,12 +40047,12 @@ "headers": { "connection": "Keep-Alive", "content-encoding": "gzip", - "content-length": "3560", + "content-length": "3568", "content-type": "text/html; charset=utf-8", - "date": "Sun, 21 Jul 2024 04:01:16 GMT", + "date": "Sun, 28 Jul 2024 04:02:41 GMT", "keep-alive": "timeout=5, max=100", - "last-modified": "Sun, 21 Jul 2024 04:01:16 GMT", - "server": "Apache/2.4.59 (Debian)", + "last-modified": "Sun, 28 Jul 2024 04:02:41 GMT", + "server": "Apache/2.4.61 (Debian)", "set-cookie": "BIGipServerpool-www.hcfea-portail-prod.cegedim.cloud-HTTP=1151424522.20480.0000; path=/; Httponly; Secure", "vary": "Accept-Encoding", "x-spip-cache": "86400" @@ -44700,7 +40199,7 @@ "name": "Apache HTTP Server", "description": "Apache is a free and open-source cross-platform web server software.", "confidence": 100, - "version": "2.4.59", + "version": "2.4.61", "icon": "Apache.svg", "website": "https://httpd.apache.org/", "cpe": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*", @@ -44739,7 +40238,7 @@ { "requestedUrl": "https://hcfea.fr/", "finalUrl": "https://hcfea.fr/", - "fetchTime": "2024-07-21T04:00:51.814Z", + "fetchTime": "2024-07-28T04:02:17.231Z", "runWarnings": [], "categories": { "performance": { @@ -44781,49 +40280,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 3587, + "numericValue": 3591, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 3587, - "firstMeaningfulPaint": 3587, - "largestContentfulPaint": 4205, - "firstCPUIdle": 3587, - "interactive": 3587, - "speedIndex": 5958, + "firstContentfulPaint": 3591, + "firstMeaningfulPaint": 3591, + "largestContentfulPaint": 4211, + "firstCPUIdle": 3591, + "interactive": 3591, + "speedIndex": 5835, "estimatedInputLatency": 13, "totalBlockingTime": 0, "maxPotentialFID": 16, "cumulativeLayoutShift": 0, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 418449951, + "observedTimeOriginTs": 375879796, "observedNavigationStart": 0, - "observedNavigationStartTs": 418449951, - "observedFirstPaint": 2271, - "observedFirstPaintTs": 420721102, - "observedFirstContentfulPaint": 2271, - "observedFirstContentfulPaintTs": 420721102, - "observedFirstMeaningfulPaint": 2271, - "observedFirstMeaningfulPaintTs": 420721102, - "observedLargestContentfulPaint": 2355, - "observedLargestContentfulPaintTs": 420804789, - "observedTraceEnd": 3614, - "observedTraceEndTs": 422063520, - "observedLoad": 2556, - "observedLoadTs": 421006183, - "observedDomContentLoaded": 2262, - "observedDomContentLoadedTs": 420712257, + "observedNavigationStartTs": 375879796, + "observedFirstPaint": 2176, + "observedFirstPaintTs": 378055475, + "observedFirstContentfulPaint": 2176, + "observedFirstContentfulPaintTs": 378055475, + "observedFirstMeaningfulPaint": 2176, + "observedFirstMeaningfulPaintTs": 378055475, + "observedLargestContentfulPaint": 2261, + "observedLargestContentfulPaintTs": 378140673, + "observedTraceEnd": 3515, + "observedTraceEndTs": 379394983, + "observedLoad": 2459, + "observedLoadTs": 378339129, + "observedDomContentLoaded": 2165, + "observedDomContentLoadedTs": 378045219, "observedCumulativeLayoutShift": 0, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 2283, - "observedFirstVisualChangeTs": 420732951, - "observedLastVisualChange": 2583, - "observedLastVisualChangeTs": 421032951, - "observedSpeedIndex": 2364, - "observedSpeedIndexTs": 420814167 + "observedFirstVisualChange": 2171, + "observedFirstVisualChangeTs": 378050796, + "observedLastVisualChange": 2471, + "observedLastVisualChangeTs": 378350796, + "observedSpeedIndex": 2273, + "observedSpeedIndexTs": 378152873 }, { "lcpInvalidated": false @@ -44851,13 +40350,13 @@ "numTasksOver50ms": 0, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 92.546, - "throughput": 3418146.4919930324, - "maxRtt": 92.546, - "maxServerLatency": 5.190999999999988, - "totalByteWeight": 299075, - "totalTaskTime": 87.29899999999996, - "mainDocumentTransferSize": 4125 + "rtt": 92.204, + "throughput": 4030381.1797043425, + "maxRtt": 92.204, + "maxServerLatency": 5.529000000000011, + "totalByteWeight": 299083, + "totalTaskTime": 86.45300000000005, + "mainDocumentTransferSize": 4132 } ] } @@ -44907,212 +40406,7 @@ "tags": [ "emploi" ], - "http": { - "url": "https://idee.emploi.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 04:06:01 GMT", - "grade": "B+", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Length": "1846", - "Content-Security-Policy": "upgrade-insecure-requests", - "Content-Type": "text/html", - "Date": "Sun, 21 Jul 2024 04:05:59 GMT", - "ETag": "\"1932-52e42e7d88800-gzip\"", - "Keep-Alive": "timeout=5, max=100", - "Last-Modified": "Thu, 17 Mar 2016 18:36:16 GMT", - "Referrer-Policy": "strict-origin", - "Set-Cookie": "BIGipServerpool-dgefp-simuap.cegedim.cloud-HTTP=!LU8En8+Hw9JgMs5WDPlD0yXzT0UGhuIFRIKO6nD3QRcEAsMqxa983XSXhFokITEDPeGCVp1wGQJH9nKASEmya2bonag=; path=/; Httponly; Secure", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "sameorigin", - "X-XSS-Protection": "1; mode=block" - }, - "scan_id": 53620080, - "score": 80, - "start_time": "Sun, 21 Jul 2024 04:05:58 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 1, - "tests_passed": 10, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": { - "upgrade-insecure-requests": [ - "'none'" - ] - }, - "http": true, - "meta": false, - "numPolicies": 1, - "policy": { - "antiClickjacking": false, - "defaultNone": false, - "insecureBaseUri": true, - "insecureFormAction": true, - "insecureSchemeActive": false, - "insecureSchemePassive": false, - "strictDynamic": false, - "unsafeEval": false, - "unsafeInline": true, - "unsafeInlineStyle": true, - "unsafeObjects": true - } - }, - "pass": false, - "result": "csp-implemented-with-unsafe-inline", - "score_description": "Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.", - "score_modifier": -20 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dgefp-simuap.cegedim.cloud-HTTP": { - "domain": "idee.emploi.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://idee.emploi.gouv.fr/", - "redirects": true, - "route": [ - "http://idee.emploi.gouv.fr/", - "https://idee.emploi.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": "strict-origin", - "http": true, - "meta": false - }, - "pass": true, - "result": "referrer-policy-private", - "score_description": "Referrer-Policy header set to \"no-referrer\", \"same-origin\", \"strict-origin\" or \"strict-origin-when-cross-origin\"", - "score_modifier": 5 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "sameorigin" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": "1; mode=block" - }, - "pass": true, - "result": "x-xss-protection-enabled-mode-block", - "score_description": "Deprecated X-XSS-Protection header set to \"1; mode=block\"", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -45458,7 +40752,7 @@ "ip": "idee.emploi.gouv.fr/185.194.82.153", "port": "443", "severity": "OK", - "finding": "134 >= 60 days" + "finding": "127 >= 60 days" }, { "id": "cert_notBefore", @@ -45619,7 +40913,7 @@ "ip": "idee.emploi.gouv.fr/185.194.82.153", "port": "443", "severity": "INFO", - "finding": "1721534807" + "finding": "1722139596" }, { "id": "HSTS_time", @@ -46224,7 +41518,7 @@ "ip": "idee.emploi.gouv.fr/185.194.82.153", "port": "443", "severity": "INFO", - "finding": "53" + "finding": "52" } ], "thirdparties": { @@ -46232,7 +41526,7 @@ "cookies": [ { "name": "BIGipServerpool-dgefp-simuap.cegedim.cloud-HTTP", - "value": "!qGL5qO7qnNr5UO1WDPlD0yXzT0UGhmtypbvHlMvNN0/X4h1JTdu3xI6Hhjjg4QsSVHan6zI5r6BpGUClKTC3R8bHmu8=", + "value": "!82sltquLcizSWzFWDPlD0yXzT0UGhntOWci8GDnDBROjoTrL9idbQ49xafuVCzcBg/sK1mwZiSL7ZOI0whUUp0G8YrE=", "domain": "idee.emploi.gouv.fr", "path": "/", "expires": -1, @@ -46252,12 +41546,12 @@ "content-length": "1846", "content-security-policy": "upgrade-insecure-requests", "content-type": "text/html", - "date": "Sun, 21 Jul 2024 04:06:16 GMT", + "date": "Sun, 28 Jul 2024 04:06:05 GMT", "etag": "\"1932-52e42e7d88800-gzip\"", "keep-alive": "timeout=5, max=100", "last-modified": "Thu, 17 Mar 2016 18:36:16 GMT", "referrer-policy": "strict-origin", - "set-cookie": "BIGipServerpool-dgefp-simuap.cegedim.cloud-HTTP=!qGL5qO7qnNr5UO1WDPlD0yXzT0UGhmtypbvHlMvNN0/X4h1JTdu3xI6Hhjjg4QsSVHan6zI5r6BpGUClKTC3R8bHmu8=; path=/; Httponly; Secure", + "set-cookie": "BIGipServerpool-dgefp-simuap.cegedim.cloud-HTTP=!82sltquLcizSWzFWDPlD0yXzT0UGhntOWci8GDnDBROjoTrL9idbQ49xafuVCzcBg/sK1mwZiSL7ZOI0whUUp0G8YrE=; path=/; Httponly; Secure", "strict-transport-security": "max-age=31536000; includeSubDomains", "vary": "Accept-Encoding", "x-content-type-options": "nosniff", @@ -46410,13 +41704,13 @@ { "requestedUrl": "https://idee.emploi.gouv.fr/", "finalUrl": "https://idee.emploi.gouv.fr/", - "fetchTime": "2024-07-21T04:05:50.030Z", + "fetchTime": "2024-07-28T04:04:42.976Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.3 + "score": 0.31 }, "accessibility": { "title": "Accessibility", @@ -46452,49 +41746,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 6425, + "numericValue": 6333, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 5363, - "firstMeaningfulPaint": 5363, - "largestContentfulPaint": 6662, - "firstCPUIdle": 5363, - "interactive": 6425, - "speedIndex": 7170, - "estimatedInputLatency": 410, - "totalBlockingTime": 802, - "maxPotentialFID": 755, + "firstContentfulPaint": 5274, + "firstMeaningfulPaint": 5274, + "largestContentfulPaint": 6573, + "firstCPUIdle": 5274, + "interactive": 6333, + "speedIndex": 7016, + "estimatedInputLatency": 412, + "totalBlockingTime": 806, + "maxPotentialFID": 757, "cumulativeLayoutShift": 0.21582330099860478, "cumulativeLayoutShiftAllFrames": 0.21582330099860478, "observedTimeOrigin": 0, - "observedTimeOriginTs": 264880039, + "observedTimeOriginTs": 338054592, "observedNavigationStart": 0, - "observedNavigationStartTs": 264880039, - "observedFirstPaint": 1522, - "observedFirstPaintTs": 266402400, - "observedFirstContentfulPaint": 1522, - "observedFirstContentfulPaintTs": 266402400, - "observedFirstMeaningfulPaint": 1522, - "observedFirstMeaningfulPaintTs": 266402400, - "observedLargestContentfulPaint": 1691, - "observedLargestContentfulPaintTs": 266571098, - "observedTraceEnd": 3000, - "observedTraceEndTs": 267880108, - "observedLoad": 1944, - "observedLoadTs": 266824179, - "observedDomContentLoaded": 1023, - "observedDomContentLoadedTs": 265903392, + "observedNavigationStartTs": 338054592, + "observedFirstPaint": 1481, + "observedFirstPaintTs": 339535213, + "observedFirstContentfulPaint": 1481, + "observedFirstContentfulPaintTs": 339535213, + "observedFirstMeaningfulPaint": 1481, + "observedFirstMeaningfulPaintTs": 339535213, + "observedLargestContentfulPaint": 1666, + "observedLargestContentfulPaintTs": 339720952, + "observedTraceEnd": 3038, + "observedTraceEndTs": 341092398, + "observedLoad": 1982, + "observedLoadTs": 340036922, + "observedDomContentLoaded": 994, + "observedDomContentLoadedTs": 339048842, "observedCumulativeLayoutShift": 0.21582330099860478, "observedCumulativeLayoutShiftAllFrames": 0.21582330099860478, - "observedFirstVisualChange": 1525, - "observedFirstVisualChangeTs": 266405039, - "observedLastVisualChange": 1959, - "observedLastVisualChangeTs": 266839039, - "observedSpeedIndex": 1661, - "observedSpeedIndexTs": 266541005 + "observedFirstVisualChange": 1481, + "observedFirstVisualChangeTs": 339535592, + "observedLastVisualChange": 1998, + "observedLastVisualChangeTs": 340052592, + "observedSpeedIndex": 1631, + "observedSpeedIndexTs": 339685412 }, { "lcpInvalidated": false @@ -46516,18 +41810,18 @@ "numScripts": 18, "numStylesheets": 6, "numFonts": 4, - "numTasks": 353, - "numTasksOver10ms": 6, - "numTasksOver25ms": 5, + "numTasks": 328, + "numTasksOver10ms": 5, + "numTasksOver25ms": 2, "numTasksOver50ms": 2, "numTasksOver100ms": 2, "numTasksOver500ms": 0, - "rtt": 83.468, - "throughput": 5602747.480272549, - "maxRtt": 83.468, - "maxServerLatency": 2.4440000000000026, - "totalByteWeight": 368693, - "totalTaskTime": 647.4380000000003, + "rtt": 83.351, + "throughput": 6498163.704582133, + "maxRtt": 83.351, + "maxServerLatency": 1.4359999999999928, + "totalByteWeight": 368692, + "totalTaskTime": 610.597, "mainDocumentTransferSize": 2577 } ] @@ -46549,7 +41843,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B+", "testsslExpireSoon": false, "testsslExpireDate": "2024-12-02T22:59:00.000Z", "testsslGrade": "A+", @@ -46557,7 +41850,7 @@ "cookiesCount": 1, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.3, + "lighthouse_performance": 0.31, "lighthouse_performanceGrade": "E", "lighthouse_accessibility": 0.84, "lighthouse_accessibilityGrade": "A", @@ -46577,197 +41870,7 @@ "tags": [ "social" ], - "http": { - "url": "https://igas.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 04:09:32 GMT", - "grade": "B", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Age": "5367", - "Cache-Control": "max-age=10800, public", - "Connection": "keep-alive", - "Content-Encoding": "gzip", - "Content-Length": "10192", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sat, 20 Jul 2024 09:48:50 GMT", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Last-Modified": "Sat, 20 Jul 2024 09:48:50 GMT", - "Set-Cookie": "BIGipServerpool-igas-production2.cegedim.cloud-TCP80=!sf0HW3GHTlQUZcRWDPlD0yXzT0UGhqYyj7p3x7EHBeyvclxsYhEkd7qT2jEsB99xr5EKBgJTPqbQjRQUR3ZzN5Runic=; path=/; Httponly; Secure", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Vary": "Cookie,Accept-Encoding", - "X-Cache": "HIT", - "X-Cache-Hits": "22", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "SAMEORIGIN" - }, - "scan_id": 53620104, - "score": 75, - "start_time": "Sun, 21 Jul 2024 04:09:27 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 1, - "tests_passed": 10, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-igas-production2.cegedim.cloud-TCP80": { - "domain": "igas.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://igas.gouv.fr/", - "redirects": true, - "route": [ - "http://igas.gouv.fr/", - "https://igas.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -47113,7 +42216,7 @@ "ip": "igas.gouv.fr/185.194.83.89", "port": "443", "severity": "OK", - "finding": "321 >= 60 days" + "finding": "314 >= 60 days" }, { "id": "cert_notBefore", @@ -47267,21 +42370,21 @@ "ip": "igas.gouv.fr/185.194.83.89", "port": "443", "severity": "INFO", - "finding": "-58580 seconds from localtime" + "finding": "-113764 seconds from localtime" }, { "id": "HTTP_headerTime", "ip": "igas.gouv.fr/185.194.83.89", "port": "443", "severity": "INFO", - "finding": "1721468930" + "finding": "1722020780" }, { "id": "HTTP_headerAge", "ip": "igas.gouv.fr/185.194.83.89", "port": "443", "severity": "INFO", - "finding": "7533 seconds" + "finding": "5450 seconds" }, { "id": "HSTS_time", @@ -47373,7 +42476,7 @@ "port": "443", "severity": "INFO", "cwe": "CWE-200", - "finding": "X-Cache: HITX-Cache-Hits: 48" + "finding": "X-Cache: HITX-Cache-Hits: 26" }, { "id": "heartbleed", @@ -47872,7 +42975,7 @@ "ip": "igas.gouv.fr/185.194.83.89", "port": "443", "severity": "INFO", - "finding": "94" + "finding": "54" } ], "thirdparties": { @@ -47880,7 +42983,7 @@ "cookies": [ { "name": "BIGipServerpool-igas-production2.cegedim.cloud-TCP80", - "value": "!USN+LmcH4P6I/JhWDPlD0yXzT0UGhmuDlcrfNV+BVljhz2SDcwDwYK2n/b5u8WLOyzylZLDsuWIfHXS/V4nMrntAu2Y=", + "value": "!4agjg1Xj6ndKqFBWDPlD0yXzT0UGhtgmEjT4SKyJCXOkzojnilA07yvS+Ib9M7SUn8xMq+6b2uSxi1v3yNzuEuJxF0o=", "domain": "igas.gouv.fr", "path": "/", "expires": -1, @@ -47895,21 +42998,21 @@ ], "headers": { "accept-ranges": "bytes", - "age": "7475", + "age": "5419", "cache-control": "max-age=10800, public", "connection": "keep-alive", "content-encoding": "gzip", - "content-length": "10192", + "content-length": "10174", "content-type": "text/html; charset=UTF-8", "content-language": "fr", - "date": "Sat, 20 Jul 2024 09:48:50 GMT", + "date": "Fri, 26 Jul 2024 19:06:20 GMT", "expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "last-modified": "Sat, 20 Jul 2024 09:48:50 GMT", - "set-cookie": "BIGipServerpool-igas-production2.cegedim.cloud-TCP80=!USN+LmcH4P6I/JhWDPlD0yXzT0UGhmuDlcrfNV+BVljhz2SDcwDwYK2n/b5u8WLOyzylZLDsuWIfHXS/V4nMrntAu2Y=; path=/; Httponly; Secure", + "last-modified": "Fri, 26 Jul 2024 21:51:40 GMT", + "set-cookie": "BIGipServerpool-igas-production2.cegedim.cloud-TCP80=!4agjg1Xj6ndKqFBWDPlD0yXzT0UGhtgmEjT4SKyJCXOkzojnilA07yvS+Ib9M7SUn8xMq+6b2uSxi1v3yNzuEuJxF0o=; path=/; Httponly; Secure", "strict-transport-security": "max-age=31536000; includeSubDomains", "vary": "Cookie,Accept-Encoding", "x-cache": "HIT", - "x-cache-hits": "44", + "x-cache-hits": "23", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN" }, @@ -48094,13 +43197,13 @@ { "requestedUrl": "https://igas.gouv.fr/", "finalUrl": "https://igas.gouv.fr/", - "fetchTime": "2024-07-21T04:09:07.711Z", + "fetchTime": "2024-07-28T04:11:19.524Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.52 + "score": 0.65 }, "accessibility": { "title": "Accessibility", @@ -48112,7 +43215,7 @@ "best-practices": { "title": "Best Practices", "id": "best-practices", - "score": 0.87 + "score": 0.93 }, "seo": { "title": "SEO", @@ -48136,49 +43239,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 7239, + "numericValue": 7397, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 2634, - "firstMeaningfulPaint": 2634, - "largestContentfulPaint": 7921, - "firstCPUIdle": 2634, - "interactive": 7239, - "speedIndex": 10923, + "firstContentfulPaint": 2857, + "firstMeaningfulPaint": 2857, + "largestContentfulPaint": 5900, + "firstCPUIdle": 2857, + "interactive": 7397, + "speedIndex": 3776, "estimatedInputLatency": 13, - "totalBlockingTime": 71, - "maxPotentialFID": 191, + "totalBlockingTime": 82, + "maxPotentialFID": 129, "cumulativeLayoutShift": 0.003108827802870009, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 322008640, + "observedTimeOriginTs": 301549218, "observedNavigationStart": 0, - "observedNavigationStartTs": 322008640, - "observedFirstPaint": 1316, - "observedFirstPaintTs": 323324355, - "observedFirstContentfulPaint": 1316, - "observedFirstContentfulPaintTs": 323324355, - "observedFirstMeaningfulPaint": 1316, - "observedFirstMeaningfulPaintTs": 323324355, - "observedLargestContentfulPaint": 11102, - "observedLargestContentfulPaintTs": 333110413, - "observedTraceEnd": 11808, - "observedTraceEndTs": 333816830, - "observedLoad": 10752, - "observedLoadTs": 332760944, - "observedDomContentLoaded": 1392, - "observedDomContentLoadedTs": 323401023, + "observedNavigationStartTs": 301549218, + "observedFirstPaint": 1022, + "observedFirstPaintTs": 302570854, + "observedFirstContentfulPaint": 1022, + "observedFirstContentfulPaintTs": 302570854, + "observedFirstMeaningfulPaint": 1022, + "observedFirstMeaningfulPaintTs": 302570854, + "observedLargestContentfulPaint": 1582, + "observedLargestContentfulPaintTs": 303131269, + "observedTraceEnd": 2630, + "observedTraceEndTs": 304179653, + "observedLoad": 1333, + "observedLoadTs": 302882464, + "observedDomContentLoaded": 989, + "observedDomContentLoadedTs": 302537866, "observedCumulativeLayoutShift": 0.003108827802870009, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 1311, - "observedFirstVisualChangeTs": 323319640, - "observedLastVisualChange": 11111, - "observedLastVisualChangeTs": 333119640, - "observedSpeedIndex": 6516, - "observedSpeedIndexTs": 328524692 + "observedFirstVisualChange": 988, + "observedFirstVisualChangeTs": 302537218, + "observedLastVisualChange": 1605, + "observedLastVisualChangeTs": 303154218, + "observedSpeedIndex": 1315, + "observedSpeedIndexTs": 302864552 }, { "lcpInvalidated": false @@ -48200,19 +43303,19 @@ "numScripts": 11, "numStylesheets": 4, "numFonts": 4, - "numTasks": 2006, + "numTasks": 950, "numTasksOver10ms": 5, - "numTasksOver25ms": 2, - "numTasksOver50ms": 0, + "numTasksOver25ms": 3, + "numTasksOver50ms": 2, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 148.738, - "throughput": 3950456.0452977526, - "maxRtt": 148.738, - "maxServerLatency": 1.3569999999999993, - "totalByteWeight": 1356914, - "totalTaskTime": 339.08499999999896, - "mainDocumentTransferSize": 10912 + "rtt": 95.185, + "throughput": 6519590.537097187, + "maxRtt": 109.64, + "maxServerLatency": 1.0300000000000011, + "totalByteWeight": 1357774, + "totalTaskTime": 276.3769999999974, + "mainDocumentTransferSize": 10894 } ] } @@ -48234,7 +43337,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B", "testsslExpireSoon": false, "testsslExpireDate": "2025-06-07T21:59:00.000Z", "testsslGrade": "A+", @@ -48242,11 +43344,11 @@ "cookiesCount": 1, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.52, + "lighthouse_performance": 0.65, "lighthouse_performanceGrade": "C", "lighthouse_accessibility": 1, "lighthouse_accessibilityGrade": "A", - "lighthouse_best-practices": 0.87, + "lighthouse_best-practices": 0.93, "lighthouse_best-practicesGrade": "A", "lighthouse_seo": 1, "lighthouse_seoGrade": "A", @@ -48265,29 +43367,29 @@ "http": { "url": "https://injep.fr", "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 04:18:43 GMT", + "end_time": "Sun, 28 Jul 2024 04:20:29 GMT", "grade": "B", "hidden": false, "likelihood_indicator": "MEDIUM", "response_headers": { "Connection": "Keep-Alive", "Content-Encoding": "gzip", - "Content-Length": "13753", + "Content-Length": "13783", "Content-Type": "text/html; charset=UTF-8", - "Date": "Sun, 21 Jul 2024 04:18:41 GMT", + "Date": "Sun, 28 Jul 2024 04:20:24 GMT", "Keep-Alive": "timeout=2, max=100", - "Last-Modified": "Sat, 20 Jul 2024 20:04:48 GMT", + "Last-Modified": "Sat, 27 Jul 2024 23:02:46 GMT", "Referrer-Policy": "strict-origin", - "Set-Cookie": "BIGipServerpool-djepva-injep-portail.cegedim.cloud-HTTP=!tkg+SgjyeJVjbqdWDPlD0yXzT0UGhnXwxd9ZbROA6Bq3hpc6jfwaTo+SrfaR0rzT3AFDWcxY3Kh7MOH+6ioleK3EO2M=; path=/; Httponly; Secure", + "Set-Cookie": "BIGipServerpool-djepva-injep-portail.cegedim.cloud-HTTP=!vVXjSqr8E4hJ6ZNWDPlD0yXzT0UGhsHeFoMparW6QrJhGenQbO9OeRBaEOVHaioPYDa3Wx3o9cqRoCRA+R7gnp9F3nc=; path=/; Httponly; Secure", "Strict-Transport-Security": "max-age=31536000; includeSubDomains", "Vary": "Accept-Encoding", "X-Content-Type-Options": "nosniff", "X-Frame-Options": "sameorigin", "X-XSS-Protection": "1; mode=block" }, - "scan_id": 53620268, + "scan_id": 53834387, "score": 75, - "start_time": "Sun, 21 Jul 2024 04:18:39 GMT", + "start_time": "Sun, 28 Jul 2024 04:20:23 GMT", "state": "FINISHED", "status_code": 200, "tests_failed": 1, @@ -48794,7 +43896,7 @@ "ip": "injep.fr/185.194.82.168", "port": "443", "severity": "OK", - "finding": "126 >= 60 days" + "finding": "119 >= 60 days" }, { "id": "cert_notBefore", @@ -48948,14 +44050,14 @@ "ip": "injep.fr/185.194.82.168", "port": "443", "severity": "INFO", - "finding": "0 seconds from localtime" + "finding": "-1 seconds from localtime" }, { "id": "HTTP_headerTime", "ip": "injep.fr/185.194.82.168", "port": "443", "severity": "INFO", - "finding": "1721535574" + "finding": "1722140510" }, { "id": "HSTS_time", @@ -49553,7 +44655,7 @@ "ip": "injep.fr/185.194.82.168", "port": "443", "severity": "INFO", - "finding": "54" + "finding": "94" } ], "thirdparties": { @@ -49632,7 +44734,7 @@ }, { "type": "youtube", - "url": "https://www.youtube.com/s/player/d60b0ef9/www-widgetapi.vflset/www-widgetapi.js", + "url": "https://www.youtube.com/s/player/1f8742dc/www-widgetapi.vflset/www-widgetapi.js", "details": { "id": "youtube", "message": "Dont embed youtube scripts, use peertube" @@ -49640,7 +44742,7 @@ }, { "type": "youtube", - "url": "https://www.youtube.com/embed/s_pNk-K5wws?controls=0&rel=0&disablekb=1&showinfo=0&modestbranding=0&html5=1&iv_load_policy=3&autoplay=0&end=0&loop=0&playsinline=0&start=0&nocookie=false&enablejsapi=1&origin=https%3A%2F%2Finjep.fr&widgetid=1", + "url": "https://www.youtube.com/watch?_=1&v=s_pNk-K5wws&feature=youtu.be", "details": { "id": "youtube", "message": "Dont embed youtube scripts, use peertube" @@ -49648,7 +44750,7 @@ }, { "type": "youtube", - "url": "https://www.youtube.com/watch?_=1&v=s_pNk-K5wws&feature=youtu.be", + "url": "https://www.youtube.com/embed/s_pNk-K5wws?controls=0&rel=0&disablekb=1&showinfo=0&modestbranding=0&html5=1&iv_load_policy=3&autoplay=0&end=0&loop=0&playsinline=0&start=0&nocookie=false&enablejsapi=1&origin=https%3A%2F%2Finjep.fr&widgetid=1", "details": { "id": "youtube", "message": "Dont embed youtube scripts, use peertube" @@ -49656,7 +44758,7 @@ }, { "type": "youtube", - "url": "https://www.youtube.com/s/player/d60b0ef9/www-player.css", + "url": "https://www.youtube.com/s/player/1f8742dc/www-player.css", "details": { "id": "youtube", "message": "Dont embed youtube scripts, use peertube" @@ -49664,7 +44766,7 @@ }, { "type": "youtube", - "url": "https://www.youtube.com/s/player/d60b0ef9/player_ias.vflset/en_US/embed.js", + "url": "https://www.youtube.com/s/player/1f8742dc/player_ias.vflset/en_US/embed.js", "details": { "id": "youtube", "message": "Dont embed youtube scripts, use peertube" @@ -49672,7 +44774,7 @@ }, { "type": "youtube", - "url": "https://www.youtube.com/s/player/d60b0ef9/www-embed-player.vflset/www-embed-player.js", + "url": "https://www.youtube.com/s/player/1f8742dc/www-embed-player.vflset/www-embed-player.js", "details": { "id": "youtube", "message": "Dont embed youtube scripts, use peertube" @@ -49680,7 +44782,7 @@ }, { "type": "youtube", - "url": "https://www.youtube.com/s/player/d60b0ef9/player_ias.vflset/en_US/base.js", + "url": "https://www.youtube.com/s/player/1f8742dc/player_ias.vflset/en_US/base.js", "details": { "id": "youtube", "message": "Dont embed youtube scripts, use peertube" @@ -49744,15 +44846,7 @@ }, { "type": "google", - "url": "https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create", - "details": { - "id": "google", - "message": "Use hosted Matomo instance" - } - }, - { - "type": "google", - "url": "https://www.google.com/js/th/d6WzJaofU1kne-aGzzhRfrvQvcguvwwbKAzGVw0Fi1w.js", + "url": "https://www.google.com/js/th/ZaJ5Zq4tt7_ULyGuxTZ9nk1-N-rwPqn235jhFLf1Hr0.js", "details": { "id": "google", "message": "Use hosted Matomo instance" @@ -49766,6 +44860,14 @@ "message": "Dont embed youtube scripts, use peertube" } }, + { + "type": "google", + "url": "https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create", + "details": { + "id": "google", + "message": "Use hosted Matomo instance" + } + }, { "type": "google analytics", "url": "https://googleads.g.doubleclick.net/pagead/id?slf_rd=1", @@ -49776,7 +44878,7 @@ }, { "type": "youtube", - "url": "https://www.youtube.com/generate_204?IUOItw", + "url": "https://www.youtube.com/generate_204?owGQwg", "details": { "id": "youtube", "message": "Dont embed youtube scripts, use peertube" @@ -49808,7 +44910,7 @@ }, { "type": "google", - "url": "https://play.google.com/log?format=json&hasfast=true&authuser=0", + "url": "https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT", "details": { "id": "google", "message": "Use hosted Matomo instance" @@ -49816,7 +44918,7 @@ }, { "type": "google", - "url": "https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT", + "url": "https://play.google.com/log?format=json&hasfast=true&authuser=0", "details": { "id": "google", "message": "Use hosted Matomo instance" @@ -49842,7 +44944,7 @@ "cookies": [ { "name": "BIGipServerpool-djepva-injep-portail.cegedim.cloud-HTTP", - "value": "!uQNkEFnOw5WoRf5WDPlD0yXzT0UGhmQV94gXswJZf5vG4RvoEJIKKZB8OpLx3K/XV046lJe3Ww7FDX6qXKG5UCymrAo=", + "value": "!UGsauzr/S5Ilf4RWDPlD0yXzT0UGhlyM94giKJMlXHB6SBbCqBO0oB55cwGNoCjAQvqNo1ZTjvsYRPWzPL6/XjTlcHc=", "domain": "injep.fr", "path": "/", "expires": -1, @@ -49858,13 +44960,13 @@ "headers": { "connection": "Keep-Alive", "content-encoding": "gzip", - "content-length": "13753", + "content-length": "13783", "content-type": "text/html; charset=UTF-8", - "date": "Sun, 21 Jul 2024 04:18:56 GMT", + "date": "Sun, 28 Jul 2024 04:20:45 GMT", "keep-alive": "timeout=2, max=100", - "last-modified": "Sat, 20 Jul 2024 20:04:48 GMT", + "last-modified": "Sat, 27 Jul 2024 23:02:46 GMT", "referrer-policy": "strict-origin", - "set-cookie": "BIGipServerpool-djepva-injep-portail.cegedim.cloud-HTTP=!uQNkEFnOw5WoRf5WDPlD0yXzT0UGhmQV94gXswJZf5vG4RvoEJIKKZB8OpLx3K/XV046lJe3Ww7FDX6qXKG5UCymrAo=; path=/; Httponly; Secure", + "set-cookie": "BIGipServerpool-djepva-injep-portail.cegedim.cloud-HTTP=!UGsauzr/S5Ilf4RWDPlD0yXzT0UGhlyM94giKJMlXHB6SBbCqBO0oB55cwGNoCjAQvqNo1ZTjvsYRPWzPL6/XjTlcHc=; path=/; Httponly; Secure", "strict-transport-security": "max-age=31536000; includeSubDomains", "vary": "Accept-Encoding", "x-content-type-options": "nosniff", @@ -49930,7 +45032,7 @@ }, { "hostname": "fonts.googleapis.com", - "ip": "142.250.190.138", + "ip": "142.250.189.10", "geoip": { "continent": { "code": "NA", @@ -50004,7 +45106,7 @@ }, { "hostname": "www.youtube.com", - "ip": "142.250.191.238", + "ip": "142.250.188.238", "geoip": { "continent": { "code": "NA", @@ -50058,7 +45160,7 @@ }, { "hostname": "fonts.gstatic.com", - "ip": "142.250.191.131", + "ip": "172.217.12.131", "geoip": { "continent": { "code": "NA", @@ -50112,7 +45214,7 @@ }, { "hostname": "youtu.be", - "ip": "142.250.191.142", + "ip": "142.250.176.14", "geoip": { "continent": { "code": "NA", @@ -50166,7 +45268,7 @@ }, { "hostname": "googleads.g.doubleclick.net", - "ip": "172.217.0.162", + "ip": "142.250.188.226", "geoip": { "continent": { "code": "NA", @@ -50220,169 +45322,247 @@ }, { "hostname": "static.doubleclick.net", - "ip": "142.250.191.134", - "geoip": { - "continent": { - "code": "NA", - "geoname_id": 6255149, - "names": { - "de": "Nordamerika", - "en": "North America", - "es": "Norteamérica", - "fr": "Amérique du Nord", - "ja": "北アメリカ", - "pt-BR": "América do Norte", - "ru": "Северная Америка", - "zh-CN": "北美洲" - } - }, - "country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - }, - "location": { - "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" - }, - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - } - } - }, - { - "hostname": "jnn-pa.googleapis.com", - "ip": "142.250.190.138", - "geoip": { - "continent": { - "code": "NA", - "geoname_id": 6255149, - "names": { - "de": "Nordamerika", - "en": "North America", - "es": "Norteamérica", - "fr": "Amérique du Nord", - "ja": "北アメリカ", - "pt-BR": "América do Norte", - "ru": "Северная Америка", - "zh-CN": "北美洲" - } - }, - "country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - }, - "location": { - "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" - }, - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - } - } - }, - { - "hostname": "www.google.com", - "ip": "142.250.190.100", - "geoip": { - "continent": { - "code": "NA", - "geoname_id": 6255149, - "names": { - "de": "Nordamerika", - "en": "North America", - "es": "Norteamérica", - "fr": "Amérique du Nord", - "ja": "北アメリカ", - "pt-BR": "América do Norte", - "ru": "Северная Америка", - "zh-CN": "北美洲" - } - }, - "country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - }, - "location": { - "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" - }, - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - } - } - }, - { - "hostname": "i.ytimg.com", - "ip": "142.250.190.150", + "ip": "142.250.72.230", + "geoip": { + "city": { + "geoname_id": 5131638, + "names": { + "en": "Plainview" + } + }, + "continent": { + "code": "NA", + "geoname_id": 6255149, + "names": { + "de": "Nordamerika", + "en": "North America", + "es": "Norteamérica", + "fr": "Amérique du Nord", + "ja": "北アメリカ", + "pt-BR": "América do Norte", + "ru": "Северная Америка", + "zh-CN": "北美洲" + } + }, + "country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "location": { + "accuracy_radius": 100, + "latitude": 40.7746, + "longitude": -73.4761, + "metro_code": 501, + "time_zone": "America/New_York" + }, + "postal": { + "code": "11803" + }, + "registered_country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "subdivisions": [ + { + "geoname_id": 5128638, + "iso_code": "NY", + "names": { + "de": "New York", + "en": "New York", + "es": "Nueva York", + "fr": "New York", + "ja": "ニューヨーク州", + "pt-BR": "Nova Iorque", + "ru": "Нью-Йорк", + "zh-CN": "纽约州" + } + } + ] + } + }, + { + "hostname": "jnn-pa.googleapis.com", + "ip": "142.250.68.106", + "geoip": { + "city": { + "geoname_id": 5131638, + "names": { + "en": "Plainview" + } + }, + "continent": { + "code": "NA", + "geoname_id": 6255149, + "names": { + "de": "Nordamerika", + "en": "North America", + "es": "Norteamérica", + "fr": "Amérique du Nord", + "ja": "北アメリカ", + "pt-BR": "América do Norte", + "ru": "Северная Америка", + "zh-CN": "北美洲" + } + }, + "country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "location": { + "accuracy_radius": 100, + "latitude": 40.7746, + "longitude": -73.4761, + "metro_code": 501, + "time_zone": "America/New_York" + }, + "postal": { + "code": "11803" + }, + "registered_country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "subdivisions": [ + { + "geoname_id": 5128638, + "iso_code": "NY", + "names": { + "de": "New York", + "en": "New York", + "es": "Nueva York", + "fr": "New York", + "ja": "ニューヨーク州", + "pt-BR": "Nova Iorque", + "ru": "Нью-Йорк", + "zh-CN": "纽约州" + } + } + ] + } + }, + { + "hostname": "www.google.com", + "ip": "142.250.72.132", + "geoip": { + "city": { + "geoname_id": 5131638, + "names": { + "en": "Plainview" + } + }, + "continent": { + "code": "NA", + "geoname_id": 6255149, + "names": { + "de": "Nordamerika", + "en": "North America", + "es": "Norteamérica", + "fr": "Amérique du Nord", + "ja": "北アメリカ", + "pt-BR": "América do Norte", + "ru": "Северная Америка", + "zh-CN": "北美洲" + } + }, + "country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "location": { + "accuracy_radius": 100, + "latitude": 40.7746, + "longitude": -73.4761, + "metro_code": 501, + "time_zone": "America/New_York" + }, + "postal": { + "code": "11803" + }, + "registered_country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "subdivisions": [ + { + "geoname_id": 5128638, + "iso_code": "NY", + "names": { + "de": "New York", + "en": "New York", + "es": "Nueva York", + "fr": "New York", + "ja": "ニューヨーク州", + "pt-BR": "Nova Iorque", + "ru": "Нью-Йорк", + "zh-CN": "纽约州" + } + } + ] + } + }, + { + "hostname": "i.ytimg.com", + "ip": "142.250.189.22", "geoip": { "continent": { "code": "NA", @@ -50436,7 +45616,7 @@ }, { "hostname": "play.google.com", - "ip": "142.250.191.142", + "ip": "142.250.189.14", "geoip": { "continent": { "code": "NA", @@ -50881,13 +46061,13 @@ { "requestedUrl": "https://injep.fr/", "finalUrl": "https://injep.fr/", - "fetchTime": "2024-07-21T04:18:30.497Z", + "fetchTime": "2024-07-28T04:20:12.304Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.28 + "score": 0.25 }, "accessibility": { "title": "Accessibility", @@ -50923,49 +46103,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 20122, + "numericValue": 20538, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 4581, - "firstMeaningfulPaint": 4581, - "largestContentfulPaint": 12304, - "firstCPUIdle": 12557, - "interactive": 20122, - "speedIndex": 10460, - "estimatedInputLatency": 92, - "totalBlockingTime": 391, - "maxPotentialFID": 250, + "firstContentfulPaint": 5279, + "firstMeaningfulPaint": 5279, + "largestContentfulPaint": 20750, + "firstCPUIdle": 6683, + "interactive": 20538, + "speedIndex": 12339, + "estimatedInputLatency": 121, + "totalBlockingTime": 432, + "maxPotentialFID": 333, "cumulativeLayoutShift": 0.2885315007103814, "cumulativeLayoutShiftAllFrames": 0.2885315007103814, "observedTimeOrigin": 0, - "observedTimeOriginTs": 312152173, + "observedTimeOriginTs": 298539121, "observedNavigationStart": 0, - "observedNavigationStartTs": 312152173, - "observedFirstPaint": 952, - "observedFirstPaintTs": 313104613, - "observedFirstContentfulPaint": 952, - "observedFirstContentfulPaintTs": 313104613, - "observedFirstMeaningfulPaint": 952, - "observedFirstMeaningfulPaintTs": 313104613, - "observedLargestContentfulPaint": 1513, - "observedLargestContentfulPaintTs": 313665641, - "observedTraceEnd": 3046, - "observedTraceEndTs": 315198421, - "observedLoad": 1890, - "observedLoadTs": 314041884, - "observedDomContentLoaded": 1323, - "observedDomContentLoadedTs": 313475515, + "observedNavigationStartTs": 298539121, + "observedFirstPaint": 1391, + "observedFirstPaintTs": 299929740, + "observedFirstContentfulPaint": 1391, + "observedFirstContentfulPaintTs": 299929740, + "observedFirstMeaningfulPaint": 1391, + "observedFirstMeaningfulPaintTs": 299929740, + "observedLargestContentfulPaint": 2588, + "observedLargestContentfulPaintTs": 301127386, + "observedTraceEnd": 4166, + "observedTraceEndTs": 302705442, + "observedLoad": 2960, + "observedLoadTs": 301498974, + "observedDomContentLoaded": 1958, + "observedDomContentLoadedTs": 300497397, "observedCumulativeLayoutShift": 0.2885315007103814, "observedCumulativeLayoutShiftAllFrames": 0.2885315007103814, - "observedFirstVisualChange": 951, - "observedFirstVisualChangeTs": 313103173, - "observedLastVisualChange": 2335, - "observedLastVisualChangeTs": 314487173, - "observedSpeedIndex": 1701, - "observedSpeedIndexTs": 313852779 + "observedFirstVisualChange": 1382, + "observedFirstVisualChangeTs": 299921121, + "observedLastVisualChange": 3482, + "observedLastVisualChangeTs": 302021121, + "observedSpeedIndex": 2471, + "observedSpeedIndexTs": 301010459 }, { "lcpInvalidated": false @@ -50983,23 +46163,23 @@ "type": "debugdata", "items": [ { - "numRequests": 84, + "numRequests": 85, "numScripts": 23, "numStylesheets": 16, "numFonts": 5, - "numTasks": 1120, + "numTasks": 1232, "numTasksOver10ms": 9, "numTasksOver25ms": 5, "numTasksOver50ms": 3, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 1.79, - "throughput": 23929348.380315874, - "maxRtt": 95.13, - "maxServerLatency": 58.185, - "totalByteWeight": 3347860, - "totalTaskTime": 542.2659999999996, - "mainDocumentTransferSize": 14403 + "rtt": 0, + "throughput": 14632792.430446131, + "maxRtt": 139.167, + "maxServerLatency": 76.131, + "totalByteWeight": 3351384, + "totalTaskTime": 620.1879999999982, + "mainDocumentTransferSize": 14433 } ] } @@ -51028,7 +46208,7 @@ "cookiesCount": 1, "trackersGrade": "F", "trackersCount": 35, - "lighthouse_performance": 0.28, + "lighthouse_performance": 0.25, "lighthouse_performanceGrade": "E", "lighthouse_accessibility": 0.83, "lighthouse_accessibilityGrade": "B", @@ -51049,192 +46229,7 @@ "travail", "emploi" ], - "http": { - "url": "https://intefp.travail-emploi.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 04:23:51 GMT", - "grade": "F", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Cache-Control": "no-store, must-revalidate, no-cache, max-age=0", - "Content-Length": "6042", - "Content-Type": "text/html", - "Set-Cookie": "TS20734b02029=087dc22938ab28008d2e7838358d3151294672dc6b8a02cf398f0bb090e3f793cfbda915601b79a3fe82c64f2934a9ed; Max-Age=30; Path=/, TS36dbf4b9027=087dc22938ab2000cde8e44baacedeff2d0836d07021ff080f142fab2edb97f161aaafeb3c84aca6086f3387af113000422b27071f21e5031466d153055d74a8f054e1a80f171b679d10d53eb9cbbca52863837d0277ed94556dfd70cb11c918; Path=/" - }, - "scan_id": 53620425, - "score": 0, - "start_time": "Sun, 21 Jul 2024 04:23:48 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 6, - "tests_passed": 5, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "TS20734b02029": { - "domain": "intefp.travail-emploi.gouv.fr", - "expires": 1721535860, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TS36dbf4b9027": { - "domain": "intefp.travail-emploi.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag", - "score_description": "Cookies set without using the Secure flag or set over HTTP", - "score_modifier": -20 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": "*", - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-implemented-with-public-access", - "score_description": "Public content is visible via cross-origin resource sharing (CORS) Access-Control-Allow-Origin header", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "http://intefp.travail-emploi.gouv.fr/", - "redirects": false, - "route": [ - "http://intefp.travail-emploi.gouv.fr/" - ], - "status_code": 200 - }, - "pass": false, - "result": "redirection-missing", - "score_description": "Does not redirect to an HTTPS site", - "score_modifier": -20 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": null, - "includeSubDomains": false, - "max-age": null, - "preload": false, - "preloaded": false - }, - "pass": false, - "result": "hsts-not-implemented", - "score_description": "HTTP Strict Transport Security (HSTS) header not implemented", - "score_modifier": -20 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-content-type-options-not-implemented", - "score_description": "X-Content-Type-Options header not implemented", - "score_modifier": -5 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-frame-options-not-implemented", - "score_description": "X-Frame-Options (XFO) header not implemented", - "score_modifier": -20 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -51580,7 +46575,7 @@ "ip": "intefp.travail-emploi.gouv.fr/185.194.82.71", "port": "443", "severity": "OK", - "finding": "147 >= 60 days" + "finding": "140 >= 60 days" }, { "id": "cert_notBefore", @@ -52304,7 +47299,7 @@ "ip": "intefp.travail-emploi.gouv.fr/185.194.82.71", "port": "443", "severity": "INFO", - "finding": "100" + "finding": "56" } ], "thirdparties": { @@ -52312,10 +47307,10 @@ "cookies": [ { "name": "TS20734b02078", - "value": "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", + "value": "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", "domain": "intefp.travail-emploi.gouv.fr", "path": "/", - "expires": 1721535874.752616, + "expires": 1722140781.039911, "size": 1005, "httpOnly": false, "secure": false, @@ -52326,10 +47321,10 @@ }, { "name": "TS20734b02029", - "value": "087dc22938ab2800e6a9f4af06917bf9dae2c9e442d90e49741514475df2ee8db510afcdd760e99e41a7c2489911a341", + "value": "087dc22938ab2800808088511dcb31e04269fb85ec8b7139846ff7e9223901d444046aa242526bd86d1954e0e7967c7f", "domain": "intefp.travail-emploi.gouv.fr", "path": "/", - "expires": 1721535874.752521, + "expires": 1722140781.03978, "size": 109, "httpOnly": false, "secure": false, @@ -52341,9 +47336,9 @@ ], "headers": { "cache-control": "no-store, must-revalidate, no-cache, max-age=0", - "content-length": "44309", + "content-length": "37949", "content-type": "text/html", - "set-cookie": "TS20734b02029=087dc22938ab2800e6a9f4af06917bf9dae2c9e442d90e49741514475df2ee8db510afcdd760e99e41a7c2489911a341; Max-Age=30; Path=/\nTS20734b02078=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; Max-Age=30; Path=/" + "set-cookie": "TS20734b02029=087dc22938ab2800808088511dcb31e04269fb85ec8b7139846ff7e9223901d444046aa242526bd86d1954e0e7967c7f; Max-Age=30; Path=/\nTS20734b02078=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; Max-Age=30; Path=/" }, "endpoints": [ { @@ -52454,13 +47449,13 @@ { "requestedUrl": "https://intefp.travail-emploi.gouv.fr/", "finalUrl": "https://intefp.travail-emploi.gouv.fr/", - "fetchTime": "2024-07-21T04:23:33.932Z", + "fetchTime": "2024-07-28T04:23:21.336Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.38 + "score": 0.45 }, "accessibility": { "title": "Accessibility", @@ -52496,49 +47491,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 8555, + "numericValue": 6137, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 6435, - "firstMeaningfulPaint": 6435, - "largestContentfulPaint": 10563, - "firstCPUIdle": 7052, - "interactive": 8555, - "speedIndex": 8418, - "estimatedInputLatency": 15, - "totalBlockingTime": 178, - "maxPotentialFID": 405, - "cumulativeLayoutShift": 0.23754494900173612, + "firstContentfulPaint": 5269, + "firstMeaningfulPaint": 5496, + "largestContentfulPaint": 8524, + "firstCPUIdle": 5499, + "interactive": 6137, + "speedIndex": 6770, + "estimatedInputLatency": 13, + "totalBlockingTime": 20, + "maxPotentialFID": 80, + "cumulativeLayoutShift": 0.7383046875, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 378728697, + "observedTimeOriginTs": 273081108, "observedNavigationStart": 0, - "observedNavigationStartTs": 378728697, - "observedFirstPaint": 2518, - "observedFirstPaintTs": 381246269, - "observedFirstContentfulPaint": 2518, - "observedFirstContentfulPaintTs": 381246269, - "observedFirstMeaningfulPaint": 2526, - "observedFirstMeaningfulPaintTs": 381254259, - "observedLargestContentfulPaint": 2638, - "observedLargestContentfulPaintTs": 381366564, - "observedTraceEnd": 3578, - "observedTraceEndTs": 382306982, - "observedLoad": 3406, - "observedLoadTs": 382134477, - "observedDomContentLoaded": 2503, - "observedDomContentLoadedTs": 381231255, - "observedCumulativeLayoutShift": 0.23754494900173612, + "observedNavigationStartTs": 273081108, + "observedFirstPaint": 1988, + "observedFirstPaintTs": 275068741, + "observedFirstContentfulPaint": 1988, + "observedFirstContentfulPaintTs": 275068741, + "observedFirstMeaningfulPaint": 2015, + "observedFirstMeaningfulPaintTs": 275096483, + "observedLargestContentfulPaint": 2061, + "observedLargestContentfulPaintTs": 275142275, + "observedTraceEnd": 3047, + "observedTraceEndTs": 276128563, + "observedLoad": 2647, + "observedLoadTs": 275727645, + "observedDomContentLoaded": 1979, + "observedDomContentLoadedTs": 275060087, + "observedCumulativeLayoutShift": 0.7383046875, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 2522, - "observedFirstVisualChangeTs": 381250697, - "observedLastVisualChange": 2956, - "observedLastVisualChangeTs": 381684697, - "observedSpeedIndex": 2573, - "observedSpeedIndexTs": 381302081 + "observedFirstVisualChange": 1991, + "observedFirstVisualChangeTs": 275072108, + "observedLastVisualChange": 2474, + "observedLastVisualChangeTs": 275555108, + "observedSpeedIndex": 2036, + "observedSpeedIndexTs": 275116995 }, { "lcpInvalidated": false @@ -52556,23 +47551,23 @@ "type": "debugdata", "items": [ { - "numRequests": 80, + "numRequests": 82, "numScripts": 13, "numStylesheets": 7, "numFonts": 2, - "numTasks": 675, + "numTasks": 678, "numTasksOver10ms": 9, "numTasksOver25ms": 3, - "numTasksOver50ms": 2, - "numTasksOver100ms": 2, + "numTasksOver50ms": 1, + "numTasksOver100ms": 1, "numTasksOver500ms": 0, - "rtt": 1.9100000000000006, - "throughput": 2714061.4915447976, - "maxRtt": 153.626, - "maxServerLatency": 20.825999999999997, - "totalByteWeight": 637935, - "totalTaskTime": 487.1779999999989, - "mainDocumentTransferSize": 6006 + "rtt": 6.268999999999998, + "throughput": 6558076.9552656, + "maxRtt": 84.01000000000002, + "maxServerLatency": 14.215, + "totalByteWeight": 639583, + "totalTaskTime": 578.5269999999987, + "mainDocumentTransferSize": 5634 } ] } @@ -52593,7 +47588,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "F", "testsslExpireSoon": false, "testsslExpireDate": "2024-12-15T22:59:00.000Z", "testsslGrade": "A", @@ -52601,7 +47595,7 @@ "cookiesCount": 2, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.38, + "lighthouse_performance": 0.45, "lighthouse_performanceGrade": "D", "lighthouse_accessibility": 0.88, "lighthouse_accessibilityGrade": "A", @@ -52621,216 +47615,7 @@ "tags": [ "sante" ], - "http": { - "url": "https://ivg.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 04:27:53 GMT", - "grade": "D", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Age": "3217", - "Cache-Control": "max-age=10800, public", - "Connection": "keep-alive", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Thu, 18 Jul 2024 13:57:48 GMT", - "ETag": "W/\"1721311067-gzip\"", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Last-Modified": "Thu, 18 Jul 2024 13:57:47 GMT", - "Set-Cookie": "BIGipServerpool-handicap-v2.cegedim.cloud-HTTP=3485751562.20480.0000; path=/; Httponly; Secure, TSf3779cae029=087dc22938ab280070b402a48cb82a7c94ce343da38788664784530dc802596a3c9121058a8855c30cf08a35409161f1; Max-Age=30; Path=/, TS300431cb027=087dc22938ab2000b2a0ffea44ba85194eb05df73678a7dd89359e9e2f42b053121dc263cdeacb3c08c017f5ee113000ec38861c862a52c6aca541185e8ebb0793ac2825c5a3cd5bfdb15245f953b02ec66f2d9444a1cfde30c386b13681432a; Path=/", - "Transfer-Encoding": "chunked", - "Vary": "Cookie,Accept-Encoding", - "X-Cache": "HIT", - "X-Cache-Hits": "18", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "SAMEORIGIN" - }, - "scan_id": 53620779, - "score": 35, - "start_time": "Sun, 21 Jul 2024 04:27:47 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 3, - "tests_passed": 8, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-handicap-v2.cegedim.cloud-HTTP": { - "domain": "ivg.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS300431cb027": { - "domain": "ivg.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TSf3779cae029": { - "domain": "ivg.gouv.fr", - "expires": 1721536102, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag", - "score_description": "Cookies set without using the Secure flag or set over HTTP", - "score_modifier": -20 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://ivg.gouv.fr/", - "redirects": true, - "route": [ - "http://ivg.gouv.fr/", - "https://ivg.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": null, - "includeSubDomains": false, - "max-age": null, - "preload": false, - "preloaded": false - }, - "pass": false, - "result": "hsts-not-implemented", - "score_description": "HTTP Strict Transport Security (HSTS) header not implemented", - "score_modifier": -20 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -53176,7 +47961,7 @@ "ip": "ivg.gouv.fr/185.194.82.206", "port": "443", "severity": "OK", - "finding": "293 >= 60 days" + "finding": "286 >= 60 days" }, { "id": "cert_notBefore", @@ -53893,7 +48678,7 @@ "ip": "ivg.gouv.fr/185.194.82.206", "port": "443", "severity": "INFO", - "finding": "48" + "finding": "88" } ], "thirdparties": { @@ -54087,13 +48872,13 @@ { "requestedUrl": "https://ivg.gouv.fr/", "finalUrl": "https://ivg.gouv.fr/", - "fetchTime": "2024-07-21T04:27:32.690Z", + "fetchTime": "2024-07-28T04:29:53.651Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.25 + "score": 0.27 }, "accessibility": { "title": "Accessibility", @@ -54129,49 +48914,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 14629, + "numericValue": 10114, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 3366, - "firstMeaningfulPaint": 3366, - "largestContentfulPaint": 4879, - "firstCPUIdle": 13919, - "interactive": 14629, - "speedIndex": 9496, - "estimatedInputLatency": 3093, - "totalBlockingTime": 9222, - "maxPotentialFID": 4350, - "cumulativeLayoutShift": 0.0070632807413736984, - "cumulativeLayoutShiftAllFrames": 0, + "firstContentfulPaint": 2985, + "firstMeaningfulPaint": 2985, + "largestContentfulPaint": 4927, + "firstCPUIdle": 9462, + "interactive": 10114, + "speedIndex": 16038, + "estimatedInputLatency": 2014, + "totalBlockingTime": 3494, + "maxPotentialFID": 3002, + "cumulativeLayoutShift": 0.008047858344184028, + "cumulativeLayoutShiftAllFrames": 0.006379564073350694, "observedTimeOrigin": 0, - "observedTimeOriginTs": 281055699, + "observedTimeOriginTs": 364434366, "observedNavigationStart": 0, - "observedNavigationStartTs": 281055699, - "observedFirstPaint": 1345, - "observedFirstPaintTs": 282401046, - "observedFirstContentfulPaint": 1345, - "observedFirstContentfulPaintTs": 282401046, - "observedFirstMeaningfulPaint": 1345, - "observedFirstMeaningfulPaintTs": 282401046, - "observedLargestContentfulPaint": 1560, - "observedLargestContentfulPaintTs": 282615693, - "observedTraceEnd": 6120, - "observedTraceEndTs": 287176142, - "observedLoad": 4742, - "observedLoadTs": 285797807, - "observedDomContentLoaded": 1438, - "observedDomContentLoadedTs": 282493498, - "observedCumulativeLayoutShift": 0.0070632807413736984, - "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 1349, - "observedFirstVisualChangeTs": 282404699, - "observedLastVisualChange": 5082, - "observedLastVisualChangeTs": 286137699, - "observedSpeedIndex": 4064, - "observedSpeedIndexTs": 285119261 + "observedNavigationStartTs": 364434366, + "observedFirstPaint": 1588, + "observedFirstPaintTs": 366022075, + "observedFirstContentfulPaint": 1588, + "observedFirstContentfulPaintTs": 366022075, + "observedFirstMeaningfulPaint": 1588, + "observedFirstMeaningfulPaintTs": 366022075, + "observedLargestContentfulPaint": 2160, + "observedLargestContentfulPaintTs": 366594543, + "observedTraceEnd": 11993, + "observedTraceEndTs": 376427781, + "observedLoad": 10936, + "observedLoadTs": 375369997, + "observedDomContentLoaded": 1815, + "observedDomContentLoadedTs": 366248866, + "observedCumulativeLayoutShift": 0.008047858344184028, + "observedCumulativeLayoutShiftAllFrames": 0.006379564073350694, + "observedFirstVisualChange": 1584, + "observedFirstVisualChangeTs": 366018366, + "observedLastVisualChange": 11267, + "observedLastVisualChangeTs": 375701366, + "observedSpeedIndex": 8622, + "observedSpeedIndexTs": 373056244 }, { "lcpInvalidated": false @@ -54193,19 +48978,19 @@ "numScripts": 16, "numStylesheets": 4, "numFonts": 4, - "numTasks": 1471, - "numTasksOver10ms": 23, - "numTasksOver25ms": 15, - "numTasksOver50ms": 9, - "numTasksOver100ms": 7, - "numTasksOver500ms": 2, - "rtt": 50.924, - "throughput": 8663197.664007915, - "maxRtt": 96.66199999999999, - "maxServerLatency": 32.836999999999996, - "totalByteWeight": 1221604, - "totalTaskTime": 3485.730000000001, - "mainDocumentTransferSize": 50411 + "numTasks": 2506, + "numTasksOver10ms": 9, + "numTasksOver25ms": 3, + "numTasksOver50ms": 2, + "numTasksOver100ms": 2, + "numTasksOver500ms": 1, + "rtt": 7.249, + "throughput": 4300195.89136314, + "maxRtt": 162.876, + "maxServerLatency": 142.33999999999997, + "totalByteWeight": 1216412, + "totalTaskTime": 1439.82100000002, + "mainDocumentTransferSize": 50420 } ] } @@ -54226,7 +49011,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "D", "testsslExpireSoon": false, "testsslExpireDate": "2025-05-10T21:59:00.000Z", "testsslGrade": "A", @@ -54234,7 +49018,7 @@ "cookiesCount": 0, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.25, + "lighthouse_performance": 0.27, "lighthouse_performanceGrade": "E", "lighthouse_accessibility": 1, "lighthouse_accessibilityGrade": "A", @@ -54257,7 +49041,7 @@ "http": { "url": "https://jeunes.gouv.fr", "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 04:42:23 GMT", + "end_time": "Sun, 28 Jul 2024 04:42:18 GMT", "grade": "B", "hidden": false, "likelihood_indicator": "MEDIUM", @@ -54268,19 +49052,18 @@ "Cache-Tags": "HIT", "Connection": "keep-alive", "Content-Encoding": "gzip", - "Content-Length": "14345", + "Content-Length": "14351", "Content-Type": "text/html; charset=UTF-8", "Content-language": "fr", - "Date": "Sun, 21 Jul 2024 04:42:21 GMT", - "ETag": "W/\"1721536922\"", + "Date": "Sun, 28 Jul 2024 04:42:16 GMT", + "ETag": "W/\"1722127672\"", "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Last-Modified": "Sun, 21 Jul 2024 04:42:02 GMT", + "Last-Modified": "Sun, 28 Jul 2024 00:47:52 GMT", "Server": "nginx", "Strict-Transport-Security": "max-age=31536000; includeSubdomains", - "Vary": "Accept-Encoding", "X-Cache": "HIT", - "X-Cache-Age": "16", - "X-Cache-Hits": "2", + "X-Cache-Age": "1133", + "X-Cache-Hits": "9", "X-Cache-TTL": "1800.000", "X-Cacheable": "YES", "X-Content-Type-Options": "nosniff", @@ -54288,9 +49071,9 @@ "X-Frame-Options": "SAMEORIGIN", "X-UA-Compatible": "IE=edge" }, - "scan_id": 53621195, + "scan_id": 53834923, "score": 70, - "start_time": "Sun, 21 Jul 2024 04:42:19 GMT", + "start_time": "Sun, 28 Jul 2024 04:42:14 GMT", "state": "FINISHED", "status_code": 200, "tests_failed": 2, @@ -54474,6 +49257,13 @@ "severity": "OK", "finding": "not offered" }, + { + "id": "TLS1", + "ip": "jeunes.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "not offered" + }, { "id": "TLS1_1", "ip": "jeunes.gouv.fr/185.75.143.93", @@ -54495,6 +49285,13 @@ "severity": "OK", "finding": "offered with final" }, + { + "id": "ALPN_HTTP2", + "ip": "jeunes.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "h2" + }, { "id": "ALPN", "ip": "jeunes.gouv.fr/185.75.143.93", @@ -54666,8 +49463,8 @@ "id": "sessionresumption_ID", "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "WARN", - "finding": "check failed because of connect problem" + "severity": "INFO", + "finding": "supported" }, { "id": "TLS_timestamp", @@ -54691,1258 +49488,344 @@ "finding": "none" }, { - "id": "scanProblem", + "id": "cert_numbers", "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "FATAL", - "finding": "repeated TCP connect problems, giving up" + "severity": "INFO", + "finding": "1" }, { - "id": "scanTime", + "id": "cert_signatureAlgorithm", "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "WARN", - "finding": "Scan interrupted" - } - ], - "thirdparties": { - "trackers": [], - "cookies": [], - "headers": { - "accept-ranges": "bytes", - "cache-control": "max-age=0, must-revalidate, no-store", - "cache-control-origin": "max-age=1800, public", - "cache-tags": "HIT", - "content-encoding": "gzip", - "content-language": "fr", - "content-length": "14338", - "content-type": "text/html; charset=UTF-8", - "date": "Sun, 21 Jul 2024 04:42:36 GMT", - "etag": "W/\"1721530276\"", - "expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "last-modified": "Sun, 21 Jul 2024 02:51:16 GMT", - "server": "nginx", - "strict-transport-security": "max-age=31536000; includeSubdomains", - "x-cache": "HIT", - "x-cache-age": "1427", - "x-cache-hits": "12", - "x-cache-ttl": "1800.000", - "x-cacheable": "YES", - "x-content-type-options": "nosniff", - "x-drupal-dynamic-cache": "HIT", - "x-frame-options": "SAMEORIGIN", - "x-ua-compatible": "IE=edge" + "severity": "OK", + "finding": "SHA256 with RSA" }, - "endpoints": [ - { - "hostname": "jeunes.gouv.fr", - "ip": "185.75.143.93", - "geoip": { - "continent": { - "code": "EU", - "geoname_id": 6255148, - "names": { - "de": "Europa", - "en": "Europe", - "es": "Europa", - "fr": "Europe", - "ja": "ヨーロッパ", - "pt-BR": "Europa", - "ru": "Европа", - "zh-CN": "欧洲" - } - }, - "country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - }, - "location": { - "accuracy_radius": 500, - "latitude": 48.8582, - "longitude": 2.3387, - "time_zone": "Europe/Paris" - }, - "registered_country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - } - } - } - ] - }, - "wappalyzer": { - "urls": { - "https://jeunes.gouv.fr/": { - "status": 301 - }, - "https://www.jeunes.gouv.fr/": { - "status": 200 - } + { + "id": "cert_keySize", + "ip": "jeunes.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "RSA 2048 bits (exponent is 65537)" }, - "technologies": [ - { - "slug": "drupal", - "name": "Drupal", - "description": "Drupal is a free and open-source web content management framework.", - "confidence": 100, - "version": "9", - "icon": "Drupal.svg", - "website": "https://www.drupal.org/", - "cpe": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 1, - "slug": "cms", - "name": "CMS" - } - ], - "rootPath": true - }, - { - "slug": "php", - "name": "PHP", - "description": "PHP is a general-purpose scripting language used for web development.", - "confidence": 100, - "version": null, - "icon": "PHP.svg", - "website": "https://php.net", - "cpe": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 27, - "slug": "programming-languages", - "name": "Programming languages" - } - ] - }, - { - "slug": "firebase", - "name": "Firebase", - "description": "Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.", - "confidence": 100, - "version": "8.6.2", - "icon": "Firebase.svg", - "website": "https://firebase.google.com", - "cpe": "cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 34, - "slug": "databases", - "name": "Databases" - }, - { - "id": 47, - "slug": "development", - "name": "Development" - } - ] - }, - { - "slug": "nginx", - "name": "Nginx", - "description": "Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.", - "confidence": 100, - "version": null, - "icon": "Nginx.svg", - "website": "https://nginx.org/en", - "cpe": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 22, - "slug": "web-servers", - "name": "Web servers" - }, - { - "id": 64, - "slug": "reverse-proxies", - "name": "Reverse proxies" - } - ], - "rootPath": true - }, - { - "slug": "modernizr", - "name": "Modernizr", - "description": "Modernizr is a JavaScript library that detects the features available in a user's browser.", - "confidence": 100, - "version": null, - "icon": "Modernizr.svg", - "website": "https://modernizr.com", - "cpe": null, - "categories": [ - { - "id": 59, - "slug": "javascript-libraries", - "name": "JavaScript libraries" - } - ], - "rootPath": true - }, - { - "slug": "jquery-ui", - "name": "jQuery UI", - "description": "jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.", - "confidence": 100, - "version": "1.13.1", - "icon": "jQuery UI.svg", - "website": "https://jqueryui.com", - "cpe": "cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 59, - "slug": "javascript-libraries", - "name": "JavaScript libraries" - } - ], - "rootPath": true - }, - { - "slug": "jquery", - "name": "jQuery", - "description": "jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.", - "confidence": 100, - "version": "3.6.3", - "icon": "jQuery.svg", - "website": "https://jquery.com", - "cpe": "cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 59, - "slug": "javascript-libraries", - "name": "JavaScript libraries" - } - ], - "rootPath": true - }, - { - "slug": "recaptcha", - "name": "reCAPTCHA", - "description": "reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.", - "confidence": 100, - "version": null, - "icon": "reCAPTCHA.svg", - "website": "https://www.google.com/recaptcha/", - "cpe": null, - "categories": [ - { - "id": 16, - "slug": "security", - "name": "Security" - } - ] - }, - { - "slug": "hsts", - "name": "HSTS", - "description": "HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.", - "confidence": 100, - "version": null, - "icon": "default.svg", - "website": "https://www.rfc-editor.org/rfc/rfc6797#section-6.1", - "cpe": null, - "categories": [ - { - "id": 16, - "slug": "security", - "name": "Security" - } - ], - "rootPath": true - }, - { - "slug": "pwa", - "name": "PWA", - "description": "Progressive Web Apps (PWAs) are web apps built and enhanced with modern APIs to deliver enhanced capabilities, reliability, and installability while reaching anyone, anywhere, on any device, all with a single codebase.", - "confidence": 100, - "version": null, - "icon": "PWA.svg", - "website": "https://web.dev/progressive-web-apps/", - "cpe": null, - "categories": [ - { - "id": 19, - "slug": "miscellaneous", - "name": "Miscellaneous" - } - ], - "rootPath": true - }, - { - "slug": "open-graph", - "name": "Open Graph", - "description": "Open Graph is a protocol that is used to integrate any web page into the social graph.", - "confidence": 100, - "version": null, - "icon": "Open Graph.png", - "website": "https://ogp.me", - "cpe": null, - "categories": [ - { - "id": 19, - "slug": "miscellaneous", - "name": "Miscellaneous" - } - ], - "rootPath": true - } - ] - }, - "zap": null, - "nuclei": [], - "lhr": [ { - "requestedUrl": "https://jeunes.gouv.fr/", - "finalUrl": "https://www.jeunes.gouv.fr/", - "fetchTime": "2024-07-21T04:42:07.519Z", - "runWarnings": [ - "The page may not be loading as expected because your test URL (https://jeunes.gouv.fr/) was redirected to https://www.jeunes.gouv.fr/. Try testing the second URL directly." - ], - "categories": { - "performance": { - "title": "Performance", - "id": "performance", - "score": 0.76 - }, - "accessibility": { - "title": "Accessibility", - "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", - "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", - "id": "accessibility", - "score": 1 - }, - "best-practices": { - "title": "Best Practices", - "id": "best-practices", - "score": 0.87 - }, - "seo": { - "title": "SEO", - "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", - "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", - "id": "seo", - "score": 0.93 - }, - "pwa": { - "title": "Progressive Web App", - "description": "These checks validate the aspects of a Progressive Web App. [Learn more](https://developers.google.com/web/progressive-web-apps/checklist).", - "manualDescription": "These checks are required by the baseline [PWA Checklist](https://developers.google.com/web/progressive-web-apps/checklist) but are not automatically checked by Lighthouse. They do not affect your score but it's important that you verify them manually.", - "id": "pwa", - "score": 0.67 - } - }, - "audits": { - "metrics": { - "id": "metrics", - "title": "Metrics", - "description": "Collects all available metrics.", - "score": null, - "scoreDisplayMode": "informative", - "numericValue": 7132, - "numericUnit": "millisecond", - "details": { - "type": "debugdata", - "items": [ - { - "firstContentfulPaint": 2403, - "firstMeaningfulPaint": 2403, - "largestContentfulPaint": 3054, - "firstCPUIdle": 4401, - "interactive": 7132, - "speedIndex": 6508, - "estimatedInputLatency": 13, - "totalBlockingTime": 67, - "maxPotentialFID": 120, - "cumulativeLayoutShift": 0.00019248453776041666, - "cumulativeLayoutShiftAllFrames": 0, - "observedTimeOrigin": 0, - "observedTimeOriginTs": 686459728, - "observedNavigationStart": 0, - "observedNavigationStartTs": 686459728, - "observedFirstPaint": 1325, - "observedFirstPaintTs": 687785155, - "observedFirstContentfulPaint": 1325, - "observedFirstContentfulPaintTs": 687785155, - "observedFirstMeaningfulPaint": 1325, - "observedFirstMeaningfulPaintTs": 687785155, - "observedLargestContentfulPaint": 1325, - "observedLargestContentfulPaintTs": 687785155, - "observedTraceEnd": 3081, - "observedTraceEndTs": 689540762, - "observedLoad": 1870, - "observedLoadTs": 688329378, - "observedDomContentLoaded": 1763, - "observedDomContentLoadedTs": 688222472, - "observedCumulativeLayoutShift": 0.00019248453776041666, - "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 1329, - "observedFirstVisualChangeTs": 687788728, - "observedLastVisualChange": 2446, - "observedLastVisualChangeTs": 688905728, - "observedSpeedIndex": 2117, - "observedSpeedIndexTs": 688576622 - }, - { - "lcpInvalidated": false - } - ] - } - }, - "diagnostics": { - "id": "diagnostics", - "title": "Diagnostics", - "description": "Collection of useful page vitals.", - "score": null, - "scoreDisplayMode": "informative", - "details": { - "type": "debugdata", - "items": [ - { - "numRequests": 25, - "numScripts": 5, - "numStylesheets": 3, - "numFonts": 4, - "numTasks": 619, - "numTasksOver10ms": 6, - "numTasksOver25ms": 3, - "numTasksOver50ms": 0, - "numTasksOver100ms": 0, - "numTasksOver500ms": 0, - "rtt": 153.262, - "throughput": 18334027.561204832, - "maxRtt": 153.262, - "maxServerLatency": 99.49799999999999, - "totalByteWeight": 2113522, - "totalTaskTime": 239.806999999999, - "mainDocumentTransferSize": 14848 - } - ] - } - } - } - } - ], - "screenshot": true, - "stats": null, - "github_repository": null, - "budget_page": null, - "declaration-a11y": { - "mention": "Accessibilité : partiellement conforme", - "declarationUrl": "https://jeunes.gouv.fr/accessibilite-349" - }, - "declaration-rgpd": null, - "betagouv": null, - "ecoindex": null, - "sonarcloud": null, - "dsfr": null, - "summary": { - "httpGrade": "B", - "cookiesGrade": "A", - "cookiesCount": 0, - "trackersGrade": "A", - "trackersCount": 0, - "lighthouse_performance": 0.76, - "lighthouse_performanceGrade": "B", - "lighthouse_accessibility": 1, - "lighthouse_accessibilityGrade": "A", - "lighthouse_best-practices": 0.87, - "lighthouse_best-practicesGrade": "A", - "lighthouse_seo": 0.93, - "lighthouse_seoGrade": "A", - "lighthouse_pwa": 0.67, - "lighthouse_pwaGrade": "B", - "declaration-a11y": "B" - } - }, - { - "404": null, - "url": "https://liste-noire.travail-emploi.gouv.fr", - "category": "dnum", - "tags": [ - "travail", - "emploi" - ], - "http": { - "url": "https://liste-noire.travail-emploi.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 04:42:09 GMT", - "grade": "B", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Language": "fr-FR", - "Content-Length": "3145", - "Content-Type": "text/html; charset=UTF-8", - "Date": "Sun, 21 Jul 2024 04:42:08 GMT", - "Keep-Alive": "timeout=5, max=100", - "Last-Modified": "Wed, 08 Nov 2023 09:20:33 GMT", - "Set-Cookie": "BIGipServerpool-dicom-portail-dares2.cegedim.cloud-HTTP=!7OeAGXOe/jQOPGhWDPlD0yXzT0UGhhBeGaV+jasuJyRC/tghFT14vkpNiAtERd4v/jhOXCkGDely6dYhJ3JGEm2nVYtT; path=/; Httponly; Secure, TS01f99fc7=01352d3811a71d98ab29f1c90bbc45bc9993248fa25a71b5f3e723f474417a9df499fdbed9592a6e076c06e08e76315a4f22eead35; Path=/, TS1349abd5027=087dc22938ab200079b3c1e3628dddcfb643c3d403357faa9500460b78a7a4ae204f6aac6d2a89bc0820b2211a113000ff6055e382fa23b781f8e87b562c259d32a2f0941c59059b1056c90645fd5f4cea5a4d215facfdf7a6774b419dbf08b4; Path=/", - "Strict-Transport-Security": "max-age=31536000", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "DENY" + "id": "cert_keyUsage", + "ip": "jeunes.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "Digital Signature, Key Encipherment" }, - "scan_id": 53621194, - "score": 70, - "start_time": "Sun, 21 Jul 2024 04:42:06 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 2, - "tests_passed": 9, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dicom-portail-dares2.cegedim.cloud-HTTP": { - "domain": "liste-noire.travail-emploi.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS01f99fc7": { - "domain": "liste-noire.travail-emploi.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TS1349abd5027": { - "domain": "liste-noire.travail-emploi.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag-but-protected-by-hsts", - "score_description": "Cookies set without using the Secure flag, but transmission over HTTP prevented by HSTS", - "score_modifier": -5 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://liste-noire.travail-emploi.gouv.fr/", - "redirects": true, - "route": [ - "http://liste-noire.travail-emploi.gouv.fr/", - "https://liste-noire.travail-emploi.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000", - "includeSubDomains": false, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-no-scripts-loaded", - "score_description": "Subresource Integrity (SRI) is not needed since site contains no script tags", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "DENY" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, - "updownio": null, - "nmap": null, - "dependabot": null, - "codescan": null, - "testssl": [ { - "id": "service", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_extKeyUsage", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "HTTP" + "finding": "TLS Web Server Authentication" }, { - "id": "pre_128cipher", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_serialNumber", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "No 128 cipher limit bug" + "finding": "0171449665B374614AA94413AD2BB853" }, { - "id": "SSLv2", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_serialNumberLen", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "OK", - "finding": "not offered" + "severity": "INFO", + "finding": "16" }, { - "id": "SSLv3", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_fingerprintSHA1", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "OK", - "finding": "not offered" + "severity": "INFO", + "finding": "041B58FD08F0E4557E1E8753E048C4FBE9B35185" }, { - "id": "TLS1", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_fingerprintSHA256", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "not offered" + "finding": "2F8CF8FFA17505EDAA31C0398A536EED690EFA5BB5757B35E2288150B16AC422" }, { - "id": "TLS1_1", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "not offered" + "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { - "id": "TLS1_2", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_commonName", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", - "finding": "offered" + "finding": "www.jeunes.gouv.fr" }, { - "id": "TLS1_3", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_commonName_wo_SNI", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "not offered + downgraded to weaker protocol" + "finding": "*.dedie.ate.info" }, { - "id": "ALPN", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_subjectAltName", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "not offered" + "finding": "isoprod.jeunes.gouv.fr test.jeunes.gouv.fr jeunes.gouv.fr back.jeunes.gouv.fr www.jeunes.gouv.fr isoprod.back.jeunes.gouv.fr test.back.jeunes.gouv.fr" }, { - "id": "cipherlist_NULL", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_trust", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", - "cwe": "CWE-327", - "finding": "not offered" + "finding": "Ok via SAN (SNI mandatory)" }, { - "id": "cipherlist_aNULL", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_chain_of_trust", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", - "cwe": "CWE-327", - "finding": "not offered" + "finding": "passed." }, { - "id": "cipherlist_EXPORT", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_certificatePolicies_EV", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "OK", - "cwe": "CWE-327", - "finding": "not offered" + "severity": "INFO", + "finding": "no" }, { - "id": "cipherlist_LOW", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_expirationStatus", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", - "cwe": "CWE-327", - "finding": "not offered" + "finding": "179 >= 60 days" }, { - "id": "cipherlist_3DES_IDEA", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_notBefore", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "cwe": "CWE-310", - "finding": "not offered" + "finding": "2024-03-28 23:00" }, { - "id": "cipherlist_OBSOLETED", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_notAfter", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "INFO", - "cwe": "CWE-310", - "finding": "not offered" + "severity": "OK", + "finding": "2025-01-23 22:59" }, { - "id": "cipherlist_STRONG_NOFS", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_extlifeSpan", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "INFO", - "finding": "not offered" + "severity": "OK", + "finding": "certificate has no extended life time according to browser forum" }, { - "id": "cipherlist_STRONG_FS", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_eTLS", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "OK", - "finding": "offered" + "severity": "INFO", + "finding": "not present" }, { - "id": "cipher_order-tls1_2", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_crlDistributionPoints", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "OK", - "finding": "server" + "severity": "INFO", + "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" }, { - "id": "cipherorder_TLSv1_2", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_ocspURL", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "ECDHE-RSA-AES256-GCM-SHA384" + "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" }, { - "id": "cipher_order", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "OCSP_stapling", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "OK", - "finding": "server" + "severity": "LOW", + "finding": "not offered" }, { - "id": "FS", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "cert_mustStapleExtension", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "OK", - "finding": "offered" + "severity": "INFO", + "finding": "--" }, { - "id": "FS_ciphers", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "DNS_CAArecord", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "INFO", - "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" + "severity": "LOW", + "finding": "--" }, { - "id": "FS_ECDHE_curves", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "certificate_transparency", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", - "finding": "prime256v1 secp384r1" + "finding": "yes (certificate extension)" }, { - "id": "TLS_extensions", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "certs_countServer", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'extended master secret/#23'" + "finding": "2" }, { - "id": "TLS_session_ticket", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "certs_list_ordering_problem", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "no -- no lifetime advertised" - }, - { - "id": "SSL_sessionID_support", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "yes" - }, - { - "id": "sessionresumption_ticket", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "not supported" - }, - { - "id": "sessionresumption_ID", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "supported" - }, - { - "id": "TLS_timestamp", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "random" - }, - { - "id": "cert_compression", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "N/A" - }, - { - "id": "clientAuth", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "none" - }, - { - "id": "cert_numbers", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "1" - }, - { - "id": "cert_signatureAlgorithm", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "SHA256 with RSA" - }, - { - "id": "cert_keySize", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "RSA 2048 bits (exponent is 65537)" - }, - { - "id": "cert_keyUsage", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "Digital Signature, Key Encipherment" - }, - { - "id": "cert_extKeyUsage", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "TLS Web Server Authentication" - }, - { - "id": "cert_serialNumber", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "0A1CE5AECC29225F2405E2A28A8014F9" - }, - { - "id": "cert_serialNumberLen", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "16" - }, - { - "id": "cert_fingerprintSHA1", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "8F8BCF24951DBDE5DF5338451FB5EE674E13B15A" - }, - { - "id": "cert_fingerprintSHA256", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "8BC3A6C42090FE186B6AA93C15B3E76DD7DDB7BE4758CD0ECE83B4DA8726FB85" - }, - { - "id": "cert", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" - }, - { - "id": "cert_commonName", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "liste-noire.travail-emploi.gouv.fr" - }, - { - "id": "cert_commonName_wo_SNI", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "sante.gouv.fr" - }, - { - "id": "cert_subjectAltName", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "www.liste-noire.travail-emploi.gouv.fr liste-noire.travail-emploi.gouv.fr" - }, - { - "id": "cert_trust", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "Ok via SAN and CN (SNI mandatory)" - }, - { - "id": "cert_chain_of_trust", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "passed." - }, - { - "id": "cert_certificatePolicies_EV", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "no" - }, - { - "id": "cert_expirationStatus", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "278 >= 60 days" - }, - { - "id": "cert_notBefore", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "2024-04-07 22:00" - }, - { - "id": "cert_notAfter", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "2025-04-25 21:59" - }, - { - "id": "cert_extlifeSpan", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "certificate has no extended life time according to browser forum" - }, - { - "id": "cert_eTLS", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "not present" - }, - { - "id": "cert_crlDistributionPoints", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" - }, - { - "id": "cert_ocspURL", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" - }, - { - "id": "OCSP_stapling", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "LOW", - "finding": "not offered" - }, - { - "id": "cert_mustStapleExtension", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "--" - }, - { - "id": "DNS_CAArecord", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "LOW", - "finding": "--" - }, - { - "id": "certificate_transparency", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "yes (certificate extension)" - }, - { - "id": "certs_countServer", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "2" - }, - { - "id": "certs_list_ordering_problem", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "no" + "finding": "no" }, { "id": "cert_caIssuers", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "Certigna Services CA (DHIMYOTIS from FR)" }, { "id": "intermediate_cert <#1>", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "intermediate_cert_fingerprintSHA256 <#1>", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" }, { "id": "intermediate_cert_notBefore <#1>", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "2015-11-25 11:33" }, { "id": "intermediate_cert_notAfter <#1>", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "2025-11-22 11:33" }, { "id": "intermediate_cert_expiration <#1>", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "ok > 40 days" }, { "id": "intermediate_cert_chain <#1>", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "Certigna Services CA <-- Certigna" }, { "id": "intermediate_cert_badOCSP", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "intermediate certificate(s) is/are ok" }, { "id": "HTTP_status_code", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "200 OK ('/')" + "finding": "301 Moved Permanently ('/')" }, { "id": "HTTP_clock_skew", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "Got no HTTP time, maybe try different URL?" + "finding": "0 seconds from localtime" }, { - "id": "HSTS", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "HTTP_headerTime", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "LOW", - "finding": "not offered" + "severity": "INFO", + "finding": "1722142667" + }, + { + "id": "HSTS_time", + "ip": "jeunes.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "365 days (=31536000 seconds) > 15552000 seconds" + }, + { + "id": "HSTS_subdomains", + "ip": "jeunes.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "includes subdomains" + }, + { + "id": "HSTS_preload", + "ip": "jeunes.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "domain is NOT marked for preloading" }, { "id": "HPKP", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "No support for HTTP Public Key Pinning" }, { "id": "banner_server", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "No Server banner line in header, interesting!" + "finding": "nginx" }, { "id": "banner_application", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "No application banner found" }, { "id": "cookie_count", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "0 at '/'" - }, - { - "id": "Cache-Control", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "no-store, must-revalidate, no-cache" + "finding": "0 at '/' (30x detected, better try target URL of 30x)" }, { - "id": "Pragma", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "security_headers", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "INFO", - "finding": "no-cache" + "severity": "MEDIUM", + "finding": "--" }, { "id": "banner_reverseproxy", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "cwe": "CWE-200", @@ -55950,7 +49833,7 @@ }, { "id": "heartbleed", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2014-0160", @@ -55959,7 +49842,7 @@ }, { "id": "CCS", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2014-0224", @@ -55968,7 +49851,7 @@ }, { "id": "ticketbleed", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2016-9244", @@ -55977,7 +49860,7 @@ }, { "id": "ROBOT", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", @@ -55986,7 +49869,7 @@ }, { "id": "secure_renego", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cwe": "CWE-310", @@ -55994,16 +49877,16 @@ }, { "id": "secure_client_renego", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2011-1473", "cwe": "CWE-310", - "finding": "not vulnerable, mitigated" + "finding": "not vulnerable" }, { "id": "CRIME_TLS", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2012-4929", @@ -56012,7 +49895,7 @@ }, { "id": "BREACH", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2013-3587", @@ -56021,7 +49904,7 @@ }, { "id": "POODLE_SSL", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2014-3566", @@ -56030,14 +49913,14 @@ }, { "id": "fallback_SCSV", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "no protocol below TLS 1.2 offered" }, { "id": "SWEET32", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2016-2183 CVE-2016-6329", @@ -56046,7 +49929,7 @@ }, { "id": "FREAK", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2015-0204", @@ -56055,7 +49938,7 @@ }, { "id": "DROWN", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2016-0800 CVE-2016-0703", @@ -56064,16 +49947,16 @@ }, { "id": "DROWN_hint", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "cve": "CVE-2016-0800 CVE-2016-0703", "cwe": "CWE-310", - "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=8BC3A6C42090FE186B6AA93C15B3E76DD7DDB7BE4758CD0ECE83B4DA8726FB85" + "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=2F8CF8FFA17505EDAA31C0398A536EED690EFA5BB5757B35E2288150B16AC422" }, { "id": "LOGJAM", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -56082,16 +49965,16 @@ }, { "id": "LOGJAM-common_primes", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", "cwe": "CWE-310", - "finding": "no DH key with <= TLS 1.2" + "finding": "--" }, { "id": "BEAST", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2011-3389", @@ -56100,7 +49983,7 @@ }, { "id": "LUCKY13", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2013-0169", @@ -56109,7 +49992,7 @@ }, { "id": "winshock", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2014-6321", @@ -56118,7 +50001,7 @@ }, { "id": "RC4", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2013-2566 CVE-2015-2808", @@ -56127,1342 +50010,1039 @@ }, { "id": "clientsimulation-android_60", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "No connection" }, { "id": "clientsimulation-android_70", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_81", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_90", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-android_X", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-android_11", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-android_12", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-chrome_79_win10", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-chrome_101_win10", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-firefox_66_win81", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" - }, - { - "id": "clientsimulation-firefox_100_win10", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" - }, - { - "id": "clientsimulation-ie_6_xp", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "No connection" - }, - { - "id": "clientsimulation-ie_8_win7", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "No connection" - }, - { - "id": "clientsimulation-ie_8_xp", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "No connection" - }, - { - "id": "clientsimulation-ie_11_win7", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "No connection" - }, - { - "id": "clientsimulation-ie_11_win81", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "No connection" - }, - { - "id": "clientsimulation-ie_11_winphone81", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "No connection" - }, - { - "id": "clientsimulation-ie_11_win10", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" - }, - { - "id": "clientsimulation-edge_15_win10", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" - }, - { - "id": "clientsimulation-edge_101_win10_21h2", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { - "id": "clientsimulation-safari_121_ios_122", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "scanProblem", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "severity": "FATAL", + "finding": "repeated TCP connect problems, giving up" }, { - "id": "clientsimulation-safari_130_osx_10146", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "id": "scanTime", + "ip": "jeunes.gouv.fr/185.75.143.93", "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "severity": "WARN", + "finding": "Scan interrupted" + } + ], + "thirdparties": { + "trackers": null, + "cookies": null, + "headers": null + }, + "wappalyzer": { + "urls": { + "https://jeunes.gouv.fr/": { + "status": 301 + }, + "https://www.jeunes.gouv.fr/": { + "status": 200 + } }, - { - "id": "clientsimulation-safari_154_osx_1231", - "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", - "port": "443", + "technologies": [ + { + "slug": "drupal", + "name": "Drupal", + "description": "Drupal is a free and open-source web content management framework.", + "confidence": 100, + "version": "9", + "icon": "Drupal.svg", + "website": "https://www.drupal.org/", + "cpe": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 1, + "slug": "cms", + "name": "CMS" + } + ], + "rootPath": true + }, + { + "slug": "php", + "name": "PHP", + "description": "PHP is a general-purpose scripting language used for web development.", + "confidence": 100, + "version": null, + "icon": "PHP.svg", + "website": "https://php.net", + "cpe": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 27, + "slug": "programming-languages", + "name": "Programming languages" + } + ] + }, + { + "slug": "firebase", + "name": "Firebase", + "description": "Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.", + "confidence": 100, + "version": "8.6.2", + "icon": "Firebase.svg", + "website": "https://firebase.google.com", + "cpe": "cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 34, + "slug": "databases", + "name": "Databases" + }, + { + "id": 47, + "slug": "development", + "name": "Development" + } + ] + }, + { + "slug": "nginx", + "name": "Nginx", + "description": "Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.", + "confidence": 100, + "version": null, + "icon": "Nginx.svg", + "website": "https://nginx.org/en", + "cpe": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 22, + "slug": "web-servers", + "name": "Web servers" + }, + { + "id": 64, + "slug": "reverse-proxies", + "name": "Reverse proxies" + } + ], + "rootPath": true + }, + { + "slug": "modernizr", + "name": "Modernizr", + "description": "Modernizr is a JavaScript library that detects the features available in a user's browser.", + "confidence": 100, + "version": null, + "icon": "Modernizr.svg", + "website": "https://modernizr.com", + "cpe": null, + "categories": [ + { + "id": 59, + "slug": "javascript-libraries", + "name": "JavaScript libraries" + } + ], + "rootPath": true + }, + { + "slug": "jquery-ui", + "name": "jQuery UI", + "description": "jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.", + "confidence": 100, + "version": "1.13.1", + "icon": "jQuery UI.svg", + "website": "https://jqueryui.com", + "cpe": "cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 59, + "slug": "javascript-libraries", + "name": "JavaScript libraries" + } + ], + "rootPath": true + }, + { + "slug": "jquery", + "name": "jQuery", + "description": "jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.", + "confidence": 100, + "version": "3.6.3", + "icon": "jQuery.svg", + "website": "https://jquery.com", + "cpe": "cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 59, + "slug": "javascript-libraries", + "name": "JavaScript libraries" + } + ], + "rootPath": true + }, + { + "slug": "recaptcha", + "name": "reCAPTCHA", + "description": "reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.", + "confidence": 100, + "version": null, + "icon": "reCAPTCHA.svg", + "website": "https://www.google.com/recaptcha/", + "cpe": null, + "categories": [ + { + "id": 16, + "slug": "security", + "name": "Security" + } + ] + }, + { + "slug": "hsts", + "name": "HSTS", + "description": "HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.", + "confidence": 100, + "version": null, + "icon": "default.svg", + "website": "https://www.rfc-editor.org/rfc/rfc6797#section-6.1", + "cpe": null, + "categories": [ + { + "id": 16, + "slug": "security", + "name": "Security" + } + ], + "rootPath": true + }, + { + "slug": "pwa", + "name": "PWA", + "description": "Progressive Web Apps (PWAs) are web apps built and enhanced with modern APIs to deliver enhanced capabilities, reliability, and installability while reaching anyone, anywhere, on any device, all with a single codebase.", + "confidence": 100, + "version": null, + "icon": "PWA.svg", + "website": "https://web.dev/progressive-web-apps/", + "cpe": null, + "categories": [ + { + "id": 19, + "slug": "miscellaneous", + "name": "Miscellaneous" + } + ], + "rootPath": true + }, + { + "slug": "open-graph", + "name": "Open Graph", + "description": "Open Graph is a protocol that is used to integrate any web page into the social graph.", + "confidence": 100, + "version": null, + "icon": "Open Graph.png", + "website": "https://ogp.me", + "cpe": null, + "categories": [ + { + "id": 19, + "slug": "miscellaneous", + "name": "Miscellaneous" + } + ], + "rootPath": true + } + ] + }, + "zap": null, + "nuclei": [], + "lhr": [ + { + "requestedUrl": "https://jeunes.gouv.fr/", + "finalUrl": "https://www.jeunes.gouv.fr/", + "fetchTime": "2024-07-28T04:41:37.275Z", + "runWarnings": [ + "The page may not be loading as expected because your test URL (https://jeunes.gouv.fr/) was redirected to https://www.jeunes.gouv.fr/. Try testing the second URL directly." + ], + "categories": { + "performance": { + "title": "Performance", + "id": "performance", + "score": 0.72 + }, + "accessibility": { + "title": "Accessibility", + "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", + "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", + "id": "accessibility", + "score": 1 + }, + "best-practices": { + "title": "Best Practices", + "id": "best-practices", + "score": 0.8 + }, + "seo": { + "title": "SEO", + "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", + "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", + "id": "seo", + "score": 0.93 + }, + "pwa": { + "title": "Progressive Web App", + "description": "These checks validate the aspects of a Progressive Web App. [Learn more](https://developers.google.com/web/progressive-web-apps/checklist).", + "manualDescription": "These checks are required by the baseline [PWA Checklist](https://developers.google.com/web/progressive-web-apps/checklist) but are not automatically checked by Lighthouse. They do not affect your score but it's important that you verify them manually.", + "id": "pwa", + "score": 0.67 + } + }, + "audits": { + "metrics": { + "id": "metrics", + "title": "Metrics", + "description": "Collects all available metrics.", + "score": null, + "scoreDisplayMode": "informative", + "numericValue": 5709, + "numericUnit": "millisecond", + "details": { + "type": "debugdata", + "items": [ + { + "firstContentfulPaint": 2517, + "firstMeaningfulPaint": 2517, + "largestContentfulPaint": 3168, + "firstCPUIdle": 2517, + "interactive": 5709, + "speedIndex": 32645, + "estimatedInputLatency": 13, + "totalBlockingTime": 5, + "maxPotentialFID": 59, + "cumulativeLayoutShift": 0.00019248453776041666, + "cumulativeLayoutShiftAllFrames": 0.00019248453776041666, + "observedTimeOrigin": 0, + "observedTimeOriginTs": 573687692, + "observedNavigationStart": 0, + "observedNavigationStartTs": 573687692, + "observedFirstPaint": 932, + "observedFirstPaintTs": 574619690, + "observedFirstContentfulPaint": 932, + "observedFirstContentfulPaintTs": 574619690, + "observedFirstMeaningfulPaint": 932, + "observedFirstMeaningfulPaintTs": 574619690, + "observedLargestContentfulPaint": 932, + "observedLargestContentfulPaintTs": 574619690, + "observedTraceEnd": 28107, + "observedTraceEndTs": 601795140, + "observedLoad": 26945, + "observedLoadTs": 600633087, + "observedDomContentLoaded": 26681, + "observedDomContentLoadedTs": 600368328, + "observedCumulativeLayoutShift": 0.00019248453776041666, + "observedCumulativeLayoutShiftAllFrames": 0.00019248453776041666, + "observedFirstVisualChange": 939, + "observedFirstVisualChangeTs": 574626692, + "observedLastVisualChange": 27404, + "observedLastVisualChangeTs": 601091692, + "observedSpeedIndex": 20491, + "observedSpeedIndexTs": 594179065 + }, + { + "lcpInvalidated": false + } + ] + } + }, + "diagnostics": { + "id": "diagnostics", + "title": "Diagnostics", + "description": "Collection of useful page vitals.", + "score": null, + "scoreDisplayMode": "informative", + "details": { + "type": "debugdata", + "items": [ + { + "numRequests": 25, + "numScripts": 5, + "numStylesheets": 3, + "numFonts": 4, + "numTasks": 733, + "numTasksOver10ms": 5, + "numTasksOver25ms": 1, + "numTasksOver50ms": 0, + "numTasksOver100ms": 0, + "numTasksOver500ms": 0, + "rtt": 103.82399999999689, + "throughput": 19326916.837898094, + "maxRtt": 103.85600000000001, + "maxServerLatency": 212.93600000000316, + "totalByteWeight": 1934373, + "totalTaskTime": 212.4499999999991, + "mainDocumentTransferSize": 14864 + } + ] + } + } + } + } + ], + "screenshot": true, + "stats": null, + "github_repository": null, + "budget_page": null, + "declaration-a11y": { + "mention": "Accessibilité : partiellement conforme", + "declarationUrl": "https://jeunes.gouv.fr/accessibilite-349" + }, + "declaration-rgpd": null, + "betagouv": null, + "ecoindex": null, + "sonarcloud": null, + "dsfr": null, + "summary": { + "httpGrade": "B", + "cookiesGrade": null, + "cookiesCount": null, + "trackersGrade": null, + "trackersCount": null, + "lighthouse_performance": 0.72, + "lighthouse_performanceGrade": "B", + "lighthouse_accessibility": 1, + "lighthouse_accessibilityGrade": "A", + "lighthouse_best-practices": 0.8, + "lighthouse_best-practicesGrade": "B", + "lighthouse_seo": 0.93, + "lighthouse_seoGrade": "A", + "lighthouse_pwa": 0.67, + "lighthouse_pwaGrade": "B", + "declaration-a11y": "B" + } + }, + { + "404": null, + "url": "https://liste-noire.travail-emploi.gouv.fr", + "category": "dnum", + "tags": [ + "travail", + "emploi" + ], + "http": null, + "updownio": null, + "nmap": null, + "dependabot": null, + "codescan": null, + "testssl": [ + { + "id": "service", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "HTTP" }, { - "id": "clientsimulation-java_7u25", + "id": "pre_128cipher", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "No connection" + "finding": "No 128 cipher limit bug" }, { - "id": "clientsimulation-java_8u161", + "id": "SSLv2", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "severity": "OK", + "finding": "not offered" }, { - "id": "clientsimulation-java1102", + "id": "SSLv3", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "severity": "OK", + "finding": "not offered" }, { - "id": "clientsimulation-java1703", + "id": "TLS1", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "not offered" }, { - "id": "clientsimulation-go_1178", + "id": "TLS1_1", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "not offered" }, { - "id": "clientsimulation-libressl_283", + "id": "TLS1_2", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "severity": "OK", + "finding": "offered" }, { - "id": "clientsimulation-openssl_102e", + "id": "TLS1_3", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "not offered + downgraded to weaker protocol" }, { - "id": "clientsimulation-openssl_110l", + "id": "ALPN", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "not offered" }, { - "id": "clientsimulation-openssl_111d", + "id": "cipherlist_NULL", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "severity": "OK", + "cwe": "CWE-327", + "finding": "not offered" }, { - "id": "clientsimulation-openssl_303", + "id": "cipherlist_aNULL", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "severity": "OK", + "cwe": "CWE-327", + "finding": "not offered" }, { - "id": "clientsimulation-apple_mail_16_0", + "id": "cipherlist_EXPORT", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "port": "443", + "severity": "OK", + "cwe": "CWE-327", + "finding": "not offered" + }, + { + "id": "cipherlist_LOW", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "port": "443", + "severity": "OK", + "cwe": "CWE-327", + "finding": "not offered" + }, + { + "id": "cipherlist_3DES_IDEA", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "cwe": "CWE-310", + "finding": "not offered" }, { - "id": "clientsimulation-thunderbird_91_9", + "id": "cipherlist_OBSOLETED", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "cwe": "CWE-310", + "finding": "not offered" }, { - "id": "rating_spec", + "id": "cipherlist_STRONG_NOFS", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" + "finding": "not offered" }, { - "id": "rating_doc", + "id": "cipherlist_STRONG_FS", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "port": "443", + "severity": "OK", + "finding": "offered" + }, + { + "id": "cipher_order-tls1_2", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "port": "443", + "severity": "OK", + "finding": "server" + }, + { + "id": "cipherorder_TLSv1_2", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" + "finding": "ECDHE-RSA-AES256-GCM-SHA384" }, { - "id": "protocol_support_score", + "id": "cipher_order", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "port": "443", + "severity": "OK", + "finding": "server" + }, + { + "id": "FS", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "port": "443", + "severity": "OK", + "finding": "offered" + }, + { + "id": "FS_ciphers", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "100" + "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" }, { - "id": "protocol_support_score_weighted", + "id": "FS_ECDHE_curves", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "port": "443", + "severity": "OK", + "finding": "prime256v1 secp384r1" + }, + { + "id": "TLS_extensions", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "30" + "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'extended master secret/#23'" }, { - "id": "key_exchange_score", + "id": "TLS_session_ticket", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "90" + "finding": "no -- no lifetime advertised" }, { - "id": "key_exchange_score_weighted", + "id": "SSL_sessionID_support", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "27" + "finding": "yes" }, { - "id": "cipher_strength_score", + "id": "sessionresumption_ticket", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "60" + "finding": "not supported" }, { - "id": "cipher_strength_score_weighted", + "id": "sessionresumption_ID", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "24" + "finding": "supported" }, { - "id": "final_score", + "id": "TLS_timestamp", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "81" + "finding": "random" }, { - "id": "overall_grade", + "id": "cert_compression", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", - "severity": "OK", - "finding": "A" + "severity": "INFO", + "finding": "N/A" }, { - "id": "grade_cap_reason_1", + "id": "clientAuth", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "Grade capped to A. HSTS is not offered" + "finding": "none" }, { - "id": "scanTime", + "id": "cert_numbers", "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "48" - } - ], - "thirdparties": { - "trackers": [], - "cookies": [], - "headers": { - "cache-control": "no-store, must-revalidate, no-cache", - "connection": "close", - "content-length": "245", - "content-type": "text/html", - "pragma": "no-cache" - }, - "endpoints": [ - { - "hostname": "liste-noire.travail-emploi.gouv.fr", - "ip": "185.194.82.27", - "geoip": { - "continent": { - "code": "EU", - "geoname_id": 6255148, - "names": { - "de": "Europa", - "en": "Europe", - "es": "Europa", - "fr": "Europe", - "ja": "ヨーロッパ", - "pt-BR": "Europa", - "ru": "Европа", - "zh-CN": "欧洲" - } - }, - "country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - }, - "location": { - "accuracy_radius": 500, - "latitude": 48.8582, - "longitude": 2.3387, - "time_zone": "Europe/Paris" - }, - "registered_country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - } - } - } - ] - }, - "wappalyzer": { - "urls": { - "https://liste-noire.travail-emploi.gouv.fr/": { - "status": 0, - "error": "net::ERR_CONNECTION_RESET at https://liste-noire.travail-emploi.gouv.fr/ (https://liste-noire.travail-emploi.gouv.fr/)" - } + "finding": "1" }, - "technologies": [] - }, - "zap": null, - "nuclei": [], - "lhr": [ { - "requestedUrl": "https://liste-noire.travail-emploi.gouv.fr/", - "finalUrl": "https://liste-noire.travail-emploi.gouv.fr/", - "fetchTime": "2024-07-21T04:42:01.893Z", - "runWarnings": [], - "categories": { - "performance": { - "title": "Performance", - "id": "performance", - "score": 1 - }, - "accessibility": { - "title": "Accessibility", - "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", - "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", - "id": "accessibility", - "score": 1 - }, - "best-practices": { - "title": "Best Practices", - "id": "best-practices", - "score": 1 - }, - "seo": { - "title": "SEO", - "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", - "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", - "id": "seo", - "score": 0.7 - }, - "pwa": { - "title": "Progressive Web App", - "description": "These checks validate the aspects of a Progressive Web App. [Learn more](https://developers.google.com/web/progressive-web-apps/checklist).", - "manualDescription": "These checks are required by the baseline [PWA Checklist](https://developers.google.com/web/progressive-web-apps/checklist) but are not automatically checked by Lighthouse. They do not affect your score but it's important that you verify them manually.", - "id": "pwa", - "score": 0.58 - } - }, - "audits": { - "metrics": { - "id": "metrics", - "title": "Metrics", - "description": "Collects all available metrics.", - "score": null, - "scoreDisplayMode": "informative", - "numericValue": 904, - "numericUnit": "millisecond", - "details": { - "type": "debugdata", - "items": [ - { - "firstContentfulPaint": 904, - "firstMeaningfulPaint": 904, - "largestContentfulPaint": 904, - "firstCPUIdle": 904, - "interactive": 904, - "speedIndex": 1139, - "estimatedInputLatency": 13, - "totalBlockingTime": 0, - "maxPotentialFID": 16, - "cumulativeLayoutShift": 0, - "cumulativeLayoutShiftAllFrames": 0, - "observedTimeOrigin": 0, - "observedTimeOriginTs": 392473973, - "observedNavigationStart": 0, - "observedNavigationStartTs": 392473973, - "observedFirstPaint": 556, - "observedFirstPaintTs": 393030407, - "observedFirstContentfulPaint": 556, - "observedFirstContentfulPaintTs": 393030407, - "observedFirstMeaningfulPaint": 556, - "observedFirstMeaningfulPaintTs": 393030407, - "observedLargestContentfulPaint": 556, - "observedLargestContentfulPaintTs": 393030407, - "observedTraceEnd": 1716, - "observedTraceEndTs": 394190228, - "observedLoad": 661, - "observedLoadTs": 393134634, - "observedDomContentLoaded": 341, - "observedDomContentLoadedTs": 392815103, - "observedCumulativeLayoutShift": 0, - "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 560, - "observedFirstVisualChangeTs": 393033973, - "observedLastVisualChange": 1160, - "observedLastVisualChangeTs": 393633973, - "observedSpeedIndex": 572, - "observedSpeedIndexTs": 393046111 - }, - { - "lcpInvalidated": false - } - ] - } - }, - "diagnostics": { - "id": "diagnostics", - "title": "Diagnostics", - "description": "Collection of useful page vitals.", - "score": null, - "scoreDisplayMode": "informative", - "details": { - "type": "debugdata", - "items": [ - { - "numRequests": 4, - "numScripts": 0, - "numStylesheets": 2, - "numFonts": 0, - "numTasks": 89, - "numTasksOver10ms": 1, - "numTasksOver25ms": 0, - "numTasksOver50ms": 0, - "numTasksOver100ms": 0, - "numTasksOver500ms": 0, - "rtt": 78.56, - "throughput": 42737996.05380671, - "maxRtt": 78.56, - "maxServerLatency": 2.134999999999991, - "totalByteWeight": 24366, - "totalTaskTime": 37.59900000000001, - "mainDocumentTransferSize": 4075 - } - ] - } - } - } - } - ], - "screenshot": true, - "stats": null, - "github_repository": null, - "budget_page": null, - "declaration-a11y": { - "mention": null - }, - "declaration-rgpd": null, - "betagouv": null, - "ecoindex": null, - "sonarcloud": null, - "dsfr": null, - "summary": { - "httpGrade": "B", - "testsslExpireSoon": false, - "testsslExpireDate": "2025-04-25T21:59:00.000Z", - "testsslGrade": "A", - "cookiesGrade": "A", - "cookiesCount": 0, - "trackersGrade": "A", - "trackersCount": 0, - "lighthouse_performance": 1, - "lighthouse_performanceGrade": "A", - "lighthouse_accessibility": 1, - "lighthouse_accessibilityGrade": "A", - "lighthouse_best-practices": 1, - "lighthouse_best-practicesGrade": "A", - "lighthouse_seo": 0.7, - "lighthouse_seoGrade": "B", - "lighthouse_pwa": 0.58, - "lighthouse_pwaGrade": "C", - "declaration-a11y": "F" - } - }, - { - "404": null, - "url": "https://lutte-pauvrete.gouv.fr", - "category": "dnum", - "tags": [ - "social" - ], - "http": { - "url": "https://lutte-pauvrete.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 04:53:37 GMT", - "grade": "F", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Length": "38082", - "Content-Type": "text/html; charset=utf-8", - "Date": "Sun, 21 Jul 2024 04:53:36 GMT", - "Keep-Alive": "timeout=5, max=97", - "Last-Modified": "Sun, 21 Jul 2024 04:53:36 GMT", - "Link": ";rel=\"preload\";as=\"style\"", - "Set-Cookie": "TS1349abd5027=087dc22938ab20001a8e82c282a57a25ed417e98d5b888c0abacf251bfbbc41385979a6a434e3fb6089bf5d7e01130003dfa1d8fb590d2ff310458e84a7f114d8940a789d0025ebc1923eb42ea1a69d0a47cd3ee8d8ef420516ee11ed4c022ff; Path=/", - "Strict-Transport-Security": "max-age=31536000", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "SAMEORIGIN", - "X-Spip-Cache": "21600" + "id": "cert_signatureAlgorithm", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", + "port": "443", + "severity": "OK", + "finding": "SHA256 with RSA" }, - "scan_id": 53621506, - "score": 15, - "start_time": "Sun, 21 Jul 2024 04:53:29 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 4, - "tests_passed": 7, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dicom-portail-dares.cegedim.cloud-HTTP": { - "domain": "sante.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS01f99fc7": { - "domain": "sante.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TS1349abd5027": { - "domain": "sante.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag", - "score_description": "Cookies set without using the Secure flag or set over HTTP", - "score_modifier": -20 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://sante.gouv.fr/archives/archives-affaires-sociales/lutte-contre-l-exclusion/lutte-pauvrete-gouv-fr/", - "redirects": true, - "route": [], - "status_code": 200 - }, - "pass": false, - "result": "redirection-invalid-cert", - "score_description": "Invalid certificate chain encountered during redirection", - "score_modifier": -20 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": null, - "includeSubDomains": false, - "max-age": null, - "preload": false, - "preloaded": false - }, - "pass": false, - "result": "hsts-invalid-cert", - "score_description": "HTTP Strict Transport Security (HSTS) header cannot be set, as site contains an invalid certificate chain", - "score_modifier": -20 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, - "updownio": null, - "nmap": null, - "dependabot": null, - "codescan": null, - "testssl": [ { - "id": "service", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "id": "cert_keySize", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "HTTP" + "finding": "RSA 2048 bits (exponent is 65537)" }, { - "id": "pre_128cipher", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "id": "cert_keyUsage", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "No 128 cipher limit bug" + "finding": "Digital Signature, Key Encipherment" }, { - "id": "SSLv2", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "id": "cert_extKeyUsage", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", - "severity": "OK", - "finding": "not offered" + "severity": "INFO", + "finding": "TLS Web Server Authentication" }, { - "id": "SSLv3", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "id": "cert_serialNumber", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", - "severity": "OK", - "finding": "not offered" + "severity": "INFO", + "finding": "0A1CE5AECC29225F2405E2A28A8014F9" }, { - "id": "TLS1", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "id": "cert_serialNumberLen", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "not offered" + "finding": "16" }, { - "id": "TLS1_1", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "id": "cert_fingerprintSHA1", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "not offered" + "finding": "8F8BCF24951DBDE5DF5338451FB5EE674E13B15A" }, { - "id": "TLS1_2", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "id": "cert_fingerprintSHA256", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", - "severity": "OK", - "finding": "offered" + "severity": "INFO", + "finding": "8BC3A6C42090FE186B6AA93C15B3E76DD7DDB7BE4758CD0ECE83B4DA8726FB85" }, { - "id": "TLS1_3", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "id": "cert", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "not offered + downgraded to weaker protocol" + "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { - "id": "ALPN", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "id": "cert_commonName", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", - "severity": "INFO", - "finding": "not offered" + "severity": "OK", + "finding": "liste-noire.travail-emploi.gouv.fr" }, { - "id": "cipherlist_NULL", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "id": "cert_commonName_wo_SNI", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", - "severity": "OK", - "cwe": "CWE-327", - "finding": "not offered" + "severity": "INFO", + "finding": "sante.gouv.fr" }, { - "id": "cipherlist_aNULL", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "id": "cert_subjectAltName", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", - "severity": "OK", - "cwe": "CWE-327", - "finding": "not offered" + "severity": "INFO", + "finding": "www.liste-noire.travail-emploi.gouv.fr liste-noire.travail-emploi.gouv.fr" }, { - "id": "cipherlist_EXPORT", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "id": "cert_trust", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", - "cwe": "CWE-327", - "finding": "not offered" + "finding": "Ok via SAN and CN (SNI mandatory)" }, { - "id": "cipherlist_LOW", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "id": "cert_chain_of_trust", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", - "cwe": "CWE-327", - "finding": "not offered" + "finding": "passed." }, { - "id": "cipherlist_3DES_IDEA", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "id": "cert_certificatePolicies_EV", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "cwe": "CWE-310", - "finding": "not offered" + "finding": "no" }, { - "id": "cipherlist_OBSOLETED", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "id": "cert_expirationStatus", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", - "severity": "INFO", - "cwe": "CWE-310", - "finding": "not offered" + "severity": "OK", + "finding": "271 >= 60 days" }, { - "id": "cipherlist_STRONG_NOFS", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "id": "cert_notBefore", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "not offered" - }, - { - "id": "cipherlist_STRONG_FS", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "offered" - }, - { - "id": "cipher_order-tls1_2", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "server" - }, - { - "id": "cipherorder_TLSv1_2", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "ECDHE-RSA-AES256-GCM-SHA384" - }, - { - "id": "cipher_order", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "server" - }, - { - "id": "FS", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "offered" - }, - { - "id": "FS_ciphers", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" - }, - { - "id": "FS_ECDHE_curves", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "prime256v1 secp384r1" - }, - { - "id": "TLS_extensions", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "'renegotiation info/#65281' 'EC point formats/#11' 'extended master secret/#23'" - }, - { - "id": "TLS_session_ticket", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "no -- no lifetime advertised" - }, - { - "id": "SSL_sessionID_support", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "yes" - }, - { - "id": "sessionresumption_ticket", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "not supported" - }, - { - "id": "sessionresumption_ID", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "supported" - }, - { - "id": "TLS_timestamp", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "random" - }, - { - "id": "cert_compression", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "N/A" - }, - { - "id": "clientAuth", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "none" - }, - { - "id": "cert_numbers", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "1" - }, - { - "id": "cert_signatureAlgorithm", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "SHA256 with RSA" - }, - { - "id": "cert_keySize", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "RSA 2048 bits (exponent is 65537)" - }, - { - "id": "cert_keyUsage", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "Digital Signature, Key Encipherment" - }, - { - "id": "cert_extKeyUsage", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "TLS Web Server Authentication" - }, - { - "id": "cert_serialNumber", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "06A6AE87B7717BC864B896B10B90307B" - }, - { - "id": "cert_serialNumberLen", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "16" - }, - { - "id": "cert_fingerprintSHA1", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "CC1EA6FB7D25290BECB6692B0A604BF044918366" - }, - { - "id": "cert_fingerprintSHA256", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "FD0BB5AA9BD6B374F8B7E08D2337AE3CBC961F98A2183008223EE4BC1835CEF0" - }, - { - "id": "cert", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" - }, - { - "id": "cert_commonName", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "sante.gouv.fr" - }, - { - "id": "cert_commonName_wo_SNI", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "sante.gouv.fr" - }, - { - "id": "cert_subjectAltName", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "solidarites-sante.gouv.fr eaupotable.sante.gouv.fr www.medicaments.gouv.fr monbilanprevention.sante.gouv.fr www.monbilanprevention.sante.gouv.fr www.solidarites-sante.gouv.fr www.social-sante.gouv.fr www.sante.gouv.fr www.eaupotable.sante.gouv.fr medicaments.gouv.fr sante.gouv.fr social-sante.gouv.fr acces-origines-amp.sante.gouv.fr www.acces-origines-amp.sante.gouv.fr" - }, - { - "id": "cert_trust", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "HIGH", - "finding": "certificate does not match supplied URI (same w/o SNI)" - }, - { - "id": "cert_chain_of_trust", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "passed." - }, - { - "id": "cert_certificatePolicies_EV", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "no" - }, - { - "id": "cert_expirationStatus", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "OK", - "finding": "73 >= 60 days" - }, - { - "id": "cert_notBefore", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "2024-03-25 23:00" + "finding": "2024-04-07 22:00" }, { "id": "cert_notAfter", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", - "finding": "2024-10-02 21:59" + "finding": "2025-04-25 21:59" }, { "id": "cert_extlifeSpan", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "certificate has no extended life time according to browser forum" }, { "id": "cert_eTLS", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not present" }, { "id": "cert_crlDistributionPoints", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" }, { "id": "cert_ocspURL", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" }, { "id": "OCSP_stapling", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "cert_mustStapleExtension", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "--" }, { "id": "DNS_CAArecord", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "LOW", "finding": "--" }, { "id": "certificate_transparency", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "yes (certificate extension)" }, { "id": "certs_countServer", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "2" }, { "id": "certs_list_ordering_problem", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_caIssuers", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "Certigna Services CA (DHIMYOTIS from FR)" }, { "id": "intermediate_cert <#1>", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "intermediate_cert_fingerprintSHA256 <#1>", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" }, { "id": "intermediate_cert_notBefore <#1>", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "2015-11-25 11:33" }, { "id": "intermediate_cert_notAfter <#1>", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "2025-11-22 11:33" }, { "id": "intermediate_cert_expiration <#1>", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "ok > 40 days" }, { "id": "intermediate_cert_chain <#1>", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "Certigna Services CA <-- Certigna" }, { "id": "intermediate_cert_badOCSP", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "intermediate certificate(s) is/are ok" }, { "id": "HTTP_status_code", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "200 OK ('/')" }, { "id": "HTTP_clock_skew", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "Got no HTTP time, maybe try different URL?" }, { "id": "HSTS", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "HPKP", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No support for HTTP Public Key Pinning" }, { "id": "banner_server", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No Server banner line in header, interesting!" }, { "id": "banner_application", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No application banner found" }, { "id": "cookie_count", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "0 at '/'" }, { "id": "Cache-Control", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "no-store, must-revalidate, no-cache" }, { "id": "Pragma", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "no-cache" }, { "id": "banner_reverseproxy", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "cwe": "CWE-200", @@ -57470,7 +51050,7 @@ }, { "id": "heartbleed", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2014-0160", @@ -57479,7 +51059,7 @@ }, { "id": "CCS", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2014-0224", @@ -57488,7 +51068,7 @@ }, { "id": "ticketbleed", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2016-9244", @@ -57497,7 +51077,7 @@ }, { "id": "ROBOT", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", @@ -57506,7 +51086,7 @@ }, { "id": "secure_renego", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cwe": "CWE-310", @@ -57514,7 +51094,7 @@ }, { "id": "secure_client_renego", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2011-1473", @@ -57523,7 +51103,7 @@ }, { "id": "CRIME_TLS", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2012-4929", @@ -57532,7 +51112,7 @@ }, { "id": "BREACH", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2013-3587", @@ -57541,7 +51121,7 @@ }, { "id": "POODLE_SSL", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2014-3566", @@ -57550,14 +51130,14 @@ }, { "id": "fallback_SCSV", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "no protocol below TLS 1.2 offered" }, { "id": "SWEET32", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2016-2183 CVE-2016-6329", @@ -57566,7 +51146,7 @@ }, { "id": "FREAK", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2015-0204", @@ -57575,7 +51155,7 @@ }, { "id": "DROWN", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2016-0800 CVE-2016-0703", @@ -57584,16 +51164,16 @@ }, { "id": "DROWN_hint", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "cve": "CVE-2016-0800 CVE-2016-0703", "cwe": "CWE-310", - "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=FD0BB5AA9BD6B374F8B7E08D2337AE3CBC961F98A2183008223EE4BC1835CEF0" + "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=8BC3A6C42090FE186B6AA93C15B3E76DD7DDB7BE4758CD0ECE83B4DA8726FB85" }, { "id": "LOGJAM", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -57602,7 +51182,7 @@ }, { "id": "LOGJAM-common_primes", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -57611,7 +51191,7 @@ }, { "id": "BEAST", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2011-3389", @@ -57620,7 +51200,7 @@ }, { "id": "LUCKY13", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2013-0169", @@ -57629,7 +51209,7 @@ }, { "id": "winshock", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2014-6321", @@ -57638,7 +51218,7 @@ }, { "id": "RC4", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2013-2566 CVE-2015-2808", @@ -57647,339 +51227,332 @@ }, { "id": "clientsimulation-android_60", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_70", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_81", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_90", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_X", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_11", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_12", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-chrome_79_win10", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-chrome_101_win10", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-firefox_66_win81", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-firefox_100_win10", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-ie_6_xp", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_win7", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_xp", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win7", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win81", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_winphone81", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win10", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-edge_15_win10", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-edge_101_win10_21h2", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_121_ios_122", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_130_osx_10146", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_154_osx_1231", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java_7u25", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-java_8u161", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java1102", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java1703", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-go_1178", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-libressl_283", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_102e", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_110l", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_111d", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_303", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-apple_mail_16_0", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-thunderbird_91_9", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "rating_spec", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" }, { "id": "rating_doc", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" }, { "id": "protocol_support_score", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "0" + "finding": "100" }, { "id": "protocol_support_score_weighted", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "0" + "finding": "30" }, { "id": "key_exchange_score", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "0" + "finding": "90" }, { "id": "key_exchange_score_weighted", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "0" + "finding": "27" }, { "id": "cipher_strength_score", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "0" + "finding": "60" }, { "id": "cipher_strength_score_weighted", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "0" + "finding": "24" }, { "id": "final_score", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "0" + "finding": "81" }, { "id": "overall_grade", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", - "severity": "CRITICAL", - "finding": "M" + "severity": "OK", + "finding": "A" }, { "id": "grade_cap_reason_1", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "Grade capped to M. Domain name mismatch" - }, - { - "id": "grade_cap_reason_2", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "Grade capped to A. HSTS is not offered" }, { "id": "scanTime", - "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "ip": "liste-noire.travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "91" + "finding": "89" } ], "thirdparties": { @@ -57994,7 +51567,7 @@ }, "endpoints": [ { - "hostname": "lutte-pauvrete.gouv.fr", + "hostname": "liste-noire.travail-emploi.gouv.fr", "ip": "185.194.82.27", "geoip": { "continent": { @@ -58053,9 +51626,9 @@ }, "wappalyzer": { "urls": { - "https://lutte-pauvrete.gouv.fr/": { + "https://liste-noire.travail-emploi.gouv.fr/": { "status": 0, - "error": "net::ERR_CONNECTION_RESET at https://lutte-pauvrete.gouv.fr/ (https://lutte-pauvrete.gouv.fr/)" + "error": "net::ERR_CONNECTION_RESET at https://liste-noire.travail-emploi.gouv.fr/ (https://liste-noire.travail-emploi.gouv.fr/)" } }, "technologies": [] @@ -58064,36 +51637,34 @@ "nuclei": [], "lhr": [ { - "requestedUrl": "https://lutte-pauvrete.gouv.fr/", - "finalUrl": "https://sante.gouv.fr/archives/archives-affaires-sociales/lutte-contre-l-exclusion/lutte-pauvrete-gouv-fr/", - "fetchTime": "2024-07-21T04:53:04.330Z", - "runWarnings": [ - "The page may not be loading as expected because your test URL (https://lutte-pauvrete.gouv.fr/) was redirected to https://sante.gouv.fr/archives/archives-affaires-sociales/lutte-contre-l-exclusion/lutte-pauvrete-gouv-fr/. Try testing the second URL directly." - ], + "requestedUrl": "https://liste-noire.travail-emploi.gouv.fr/", + "finalUrl": "https://liste-noire.travail-emploi.gouv.fr/", + "fetchTime": "2024-07-28T04:43:01.403Z", + "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.3 + "score": 1 }, "accessibility": { "title": "Accessibility", "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", "id": "accessibility", - "score": 0.85 + "score": 1 }, "best-practices": { "title": "Best Practices", "id": "best-practices", - "score": 0.8 + "score": 1 }, "seo": { "title": "SEO", "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", "id": "seo", - "score": 0.77 + "score": 0.7 }, "pwa": { "title": "Progressive Web App", @@ -58110,49 +51681,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 10785, + "numericValue": 906, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 7032, - "firstMeaningfulPaint": 7129, - "largestContentfulPaint": 11738, - "firstCPUIdle": 7739, - "interactive": 10785, - "speedIndex": 17829, - "estimatedInputLatency": 89, - "totalBlockingTime": 364, - "maxPotentialFID": 442, - "cumulativeLayoutShift": 0.002714106241861979, + "firstContentfulPaint": 906, + "firstMeaningfulPaint": 906, + "largestContentfulPaint": 906, + "firstCPUIdle": 906, + "interactive": 906, + "speedIndex": 1724, + "estimatedInputLatency": 13, + "totalBlockingTime": 0, + "maxPotentialFID": 16, + "cumulativeLayoutShift": 0, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 776756856, + "observedTimeOriginTs": 274402259, "observedNavigationStart": 0, - "observedNavigationStartTs": 776756856, - "observedFirstPaint": 5751, - "observedFirstPaintTs": 782507395, - "observedFirstContentfulPaint": 5751, - "observedFirstContentfulPaintTs": 782507395, - "observedFirstMeaningfulPaint": 5755, - "observedFirstMeaningfulPaintTs": 782511494, - "observedLargestContentfulPaint": 15764, - "observedLargestContentfulPaintTs": 792521260, - "observedTraceEnd": 16814, - "observedTraceEndTs": 793571204, - "observedLoad": 15381, - "observedLoadTs": 792138228, - "observedDomContentLoaded": 5677, - "observedDomContentLoadedTs": 782434054, - "observedCumulativeLayoutShift": 0.002714106241861979, + "observedNavigationStartTs": 274402259, + "observedFirstPaint": 959, + "observedFirstPaintTs": 275361271, + "observedFirstContentfulPaint": 959, + "observedFirstContentfulPaintTs": 275361271, + "observedFirstMeaningfulPaint": 959, + "observedFirstMeaningfulPaintTs": 275361271, + "observedLargestContentfulPaint": 959, + "observedLargestContentfulPaintTs": 275361271, + "observedTraceEnd": 2283, + "observedTraceEndTs": 276684815, + "observedLoad": 1226, + "observedLoadTs": 275628545, + "observedDomContentLoaded": 628, + "observedDomContentLoadedTs": 275030215, + "observedCumulativeLayoutShift": 0, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 5711, - "observedFirstVisualChangeTs": 782467856, - "observedLastVisualChange": 15778, - "observedLastVisualChangeTs": 792534856, - "observedSpeedIndex": 9446, - "observedSpeedIndexTs": 786203217 + "observedFirstVisualChange": 970, + "observedFirstVisualChangeTs": 275372259, + "observedLastVisualChange": 1586, + "observedLastVisualChangeTs": 275988259, + "observedSpeedIndex": 990, + "observedSpeedIndexTs": 275391817 }, { "lcpInvalidated": false @@ -58170,23 +51741,23 @@ "type": "debugdata", "items": [ { - "numRequests": 26, - "numScripts": 5, - "numStylesheets": 3, - "numFonts": 4, - "numTasks": 479, - "numTasksOver10ms": 10, - "numTasksOver25ms": 8, - "numTasksOver50ms": 7, - "numTasksOver100ms": 4, + "numRequests": 4, + "numScripts": 0, + "numStylesheets": 2, + "numFonts": 0, + "numTasks": 95, + "numTasksOver10ms": 1, + "numTasksOver25ms": 0, + "numTasksOver50ms": 0, + "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 1.5799999999999983, - "throughput": 3670655.9763162513, - "maxRtt": 148.83100000000002, - "maxServerLatency": 105.38199999999999, - "totalByteWeight": 1072916, - "totalTaskTime": 1022.5770000000002, - "mainDocumentTransferSize": 38818 + "rtt": 148.351, + "throughput": 36340267.45919027, + "maxRtt": 148.351, + "maxServerLatency": 3.147000000000048, + "totalByteWeight": 24457, + "totalTaskTime": 42.12500000000005, + "mainDocumentTransferSize": 4116 } ] } @@ -58194,7 +51765,7 @@ } } ], - "screenshot": false, + "screenshot": true, "stats": null, "github_repository": null, "budget_page": null, @@ -58207,21 +51778,20 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "F", "testsslExpireSoon": false, - "testsslExpireDate": "2024-10-02T21:59:00.000Z", - "testsslGrade": "M", + "testsslExpireDate": "2025-04-25T21:59:00.000Z", + "testsslGrade": "A", "cookiesGrade": "A", "cookiesCount": 0, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.3, - "lighthouse_performanceGrade": "E", - "lighthouse_accessibility": 0.85, + "lighthouse_performance": 1, + "lighthouse_performanceGrade": "A", + "lighthouse_accessibility": 1, "lighthouse_accessibilityGrade": "A", - "lighthouse_best-practices": 0.8, - "lighthouse_best-practicesGrade": "B", - "lighthouse_seo": 0.77, + "lighthouse_best-practices": 1, + "lighthouse_best-practicesGrade": "A", + "lighthouse_seo": 0.7, "lighthouse_seoGrade": "B", "lighthouse_pwa": 0.58, "lighthouse_pwaGrade": "C", @@ -58230,175 +51800,12 @@ }, { "404": null, - "url": "https://metiers-fonctionpubliquehospitaliere.sante.gouv.fr", + "url": "https://lutte-pauvrete.gouv.fr", "category": "dnum", "tags": [ - "sante" + "social" ], - "http": { - "url": "https://metiers-fonctionpubliquehospitaliere.sante.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 04:59:29 GMT", - "grade": "D", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Connection": "Keep-Alive", - "Content-Length": "3551", - "Content-Type": "text/html", - "Retry-After": "300", - "Server": "BigIP" - }, - "scan_id": 53621538, - "score": 30, - "start_time": "Sun, 21 Jul 2024 04:59:28 GMT", - "state": "FINISHED", - "status_code": 503, - "tests_failed": 4, - "tests_passed": 7, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": null, - "sameSite": null - }, - "pass": true, - "result": "cookies-not-found", - "score_description": "No cookies detected", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": null, - "redirects": true, - "route": [], - "status_code": null - }, - "pass": true, - "result": "redirection-not-needed-no-http", - "score_description": "Not able to connect via HTTP, so no redirection necessary", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": null, - "includeSubDomains": false, - "max-age": null, - "preload": false, - "preloaded": false - }, - "pass": false, - "result": "hsts-not-implemented", - "score_description": "HTTP Strict Transport Security (HSTS) header not implemented", - "score_modifier": -20 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-content-type-options-not-implemented", - "score_description": "X-Content-Type-Options header not implemented", - "score_modifier": -5 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-frame-options-not-implemented", - "score_description": "X-Frame-Options (XFO) header not implemented", - "score_modifier": -20 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -58406,70 +51813,70 @@ "testssl": [ { "id": "service", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "HTTP" }, { "id": "pre_128cipher", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No 128 cipher limit bug" }, { "id": "SSLv2", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "SSLv3", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "TLS1", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_1", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_2", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "TLS1_3", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not offered + downgraded to weaker protocol" }, { "id": "ALPN", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "cipherlist_NULL", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -58477,7 +51884,7 @@ }, { "id": "cipherlist_aNULL", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -58485,7 +51892,7 @@ }, { "id": "cipherlist_EXPORT", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -58493,7 +51900,7 @@ }, { "id": "cipherlist_LOW", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -58501,7 +51908,7 @@ }, { "id": "cipherlist_3DES_IDEA", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -58509,7 +51916,7 @@ }, { "id": "cipherlist_OBSOLETED", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -58517,434 +51924,441 @@ }, { "id": "cipherlist_STRONG_NOFS", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "cipherlist_STRONG_FS", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "cipher_order-tls1_2", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "server" }, { "id": "cipherorder_TLSv1_2", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "cipher_order", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "server" }, { "id": "FS", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "FS_ciphers", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "FS_ECDHE_curves", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "prime256v1 secp384r1" }, { "id": "TLS_extensions", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'extended master secret/#23'" + "finding": "'renegotiation info/#65281' 'EC point formats/#11' 'extended master secret/#23'" }, { "id": "TLS_session_ticket", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "no -- no lifetime advertised" }, { "id": "SSL_sessionID_support", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "yes" }, { "id": "sessionresumption_ticket", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not supported" }, { "id": "sessionresumption_ID", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "supported" }, { "id": "TLS_timestamp", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "random" }, { "id": "cert_compression", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "N/A" }, { "id": "clientAuth", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "none" }, { "id": "cert_numbers", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "1" }, { "id": "cert_signatureAlgorithm", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "SHA256 with RSA" }, { "id": "cert_keySize", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "RSA 2048 bits (exponent is 65537)" }, { "id": "cert_keyUsage", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "Digital Signature, Key Encipherment" }, { "id": "cert_extKeyUsage", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLS Web Server Authentication" }, { "id": "cert_serialNumber", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "E9F6B8A3AA99258E2A88C6BE6220BD" + "finding": "06A6AE87B7717BC864B896B10B90307B" }, { "id": "cert_serialNumberLen", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "15" + "finding": "16" }, { "id": "cert_fingerprintSHA1", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "82D0D82AB57759761FB3959B481216C1BD14D007" + "finding": "CC1EA6FB7D25290BECB6692B0A604BF044918366" }, { "id": "cert_fingerprintSHA256", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "D63BACE28B6B8DFA6B16917C895F13EC80C8C8FCE85C0D1B3CC851921B6FC66A" + "finding": "FD0BB5AA9BD6B374F8B7E08D2337AE3CBC961F98A2183008223EE4BC1835CEF0" }, { "id": "cert", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" + "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "cert_commonName", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", - "finding": "www.metiers-fonctionpubliquehospitaliere.sante.gouv.fr" + "finding": "sante.gouv.fr" }, { "id": "cert_commonName_wo_SNI", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "www.metiers-fonctionpubliquehospitaliere.sante.gouv.fr" + "finding": "sante.gouv.fr" }, { "id": "cert_subjectAltName", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "www.metiers-fonctionpubliquehospitaliere.sante.gouv.fr metiers-fonctionpubliquehospitaliere.sante.gouv.fr" + "finding": "solidarites-sante.gouv.fr eaupotable.sante.gouv.fr www.medicaments.gouv.fr monbilanprevention.sante.gouv.fr www.monbilanprevention.sante.gouv.fr www.solidarites-sante.gouv.fr www.social-sante.gouv.fr www.sante.gouv.fr www.eaupotable.sante.gouv.fr medicaments.gouv.fr sante.gouv.fr social-sante.gouv.fr acces-origines-amp.sante.gouv.fr www.acces-origines-amp.sante.gouv.fr" }, { "id": "cert_trust", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", - "severity": "OK", - "finding": "Ok via SAN (same w/o SNI)" + "severity": "HIGH", + "finding": "certificate does not match supplied URI (same w/o SNI)" }, { "id": "cert_chain_of_trust", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "passed." }, { "id": "cert_certificatePolicies_EV", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_expirationStatus", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", - "finding": "242 >= 60 days" + "finding": "66 >= 60 days" }, { "id": "cert_notBefore", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "2024-03-25 23:00" }, { "id": "cert_notAfter", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", - "finding": "2025-03-20 22:59" + "finding": "2024-10-02 21:59" }, { "id": "cert_extlifeSpan", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "certificate has no extended life time according to browser forum" }, { "id": "cert_eTLS", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not present" }, { "id": "cert_crlDistributionPoints", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" }, { "id": "cert_ocspURL", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" }, { "id": "OCSP_stapling", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "cert_mustStapleExtension", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "--" }, { "id": "DNS_CAArecord", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "LOW", "finding": "--" }, { "id": "certificate_transparency", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "yes (certificate extension)" }, { "id": "certs_countServer", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "2" }, { "id": "certs_list_ordering_problem", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_caIssuers", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "Certigna Services CA (DHIMYOTIS from FR)" }, { "id": "intermediate_cert <#1>", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "intermediate_cert_fingerprintSHA256 <#1>", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" }, { "id": "intermediate_cert_notBefore <#1>", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "2015-11-25 11:33" }, { "id": "intermediate_cert_notAfter <#1>", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "2025-11-22 11:33" }, { "id": "intermediate_cert_expiration <#1>", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "ok > 40 days" }, { "id": "intermediate_cert_chain <#1>", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "Certigna Services CA <-- Certigna" }, { "id": "intermediate_cert_badOCSP", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "intermediate certificate(s) is/are ok" }, { "id": "HTTP_status_code", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", - "severity": "WARN", - "finding": "Unexpected 503 Service Unavailable @ '/'" + "severity": "INFO", + "finding": "200 OK ('/')" }, { "id": "HTTP_clock_skew", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "Got no HTTP time, maybe try different URL?" }, { "id": "HSTS", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "HPKP", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No support for HTTP Public Key Pinning" }, { "id": "banner_server", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "BigIP" + "finding": "No Server banner line in header, interesting!" }, { "id": "banner_application", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No application banner found" }, { "id": "cookie_count", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "0 at '/' (30x detected, better try target URL of 30x)" + "finding": "0 at '/'" }, { - "id": "security_headers", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "id": "Cache-Control", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", - "severity": "MEDIUM", - "finding": "--" + "severity": "INFO", + "finding": "no-store, must-revalidate, no-cache" + }, + { + "id": "Pragma", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "port": "443", + "severity": "INFO", + "finding": "no-cache" }, { "id": "banner_reverseproxy", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "cwe": "CWE-200", @@ -58952,7 +52366,7 @@ }, { "id": "heartbleed", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2014-0160", @@ -58961,7 +52375,7 @@ }, { "id": "CCS", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2014-0224", @@ -58970,7 +52384,7 @@ }, { "id": "ticketbleed", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2016-9244", @@ -58979,7 +52393,7 @@ }, { "id": "ROBOT", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", @@ -58988,7 +52402,7 @@ }, { "id": "secure_renego", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cwe": "CWE-310", @@ -58996,7 +52410,7 @@ }, { "id": "secure_client_renego", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2011-1473", @@ -59005,7 +52419,7 @@ }, { "id": "CRIME_TLS", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2012-4929", @@ -59014,7 +52428,7 @@ }, { "id": "BREACH", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2013-3587", @@ -59023,7 +52437,7 @@ }, { "id": "POODLE_SSL", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2014-3566", @@ -59032,14 +52446,14 @@ }, { "id": "fallback_SCSV", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "no protocol below TLS 1.2 offered" }, { "id": "SWEET32", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2016-2183 CVE-2016-6329", @@ -59048,7 +52462,7 @@ }, { "id": "FREAK", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2015-0204", @@ -59057,7 +52471,7 @@ }, { "id": "DROWN", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2016-0800 CVE-2016-0703", @@ -59066,16 +52480,16 @@ }, { "id": "DROWN_hint", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "cve": "CVE-2016-0800 CVE-2016-0703", "cwe": "CWE-310", - "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=D63BACE28B6B8DFA6B16917C895F13EC80C8C8FCE85C0D1B3CC851921B6FC66A" + "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=FD0BB5AA9BD6B374F8B7E08D2337AE3CBC961F98A2183008223EE4BC1835CEF0" }, { "id": "LOGJAM", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -59084,7 +52498,7 @@ }, { "id": "LOGJAM-common_primes", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -59093,7 +52507,7 @@ }, { "id": "BEAST", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2011-3389", @@ -59102,7 +52516,7 @@ }, { "id": "LUCKY13", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2013-0169", @@ -59111,7 +52525,7 @@ }, { "id": "winshock", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2014-6321", @@ -59120,7 +52534,7 @@ }, { "id": "RC4", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2013-2566 CVE-2015-2808", @@ -59129,373 +52543,355 @@ }, { "id": "clientsimulation-android_60", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_70", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_81", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_90", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_X", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_11", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_12", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-chrome_79_win10", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-chrome_101_win10", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-firefox_66_win81", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-firefox_100_win10", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-ie_6_xp", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_win7", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_xp", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win7", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win81", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_winphone81", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win10", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-edge_15_win10", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-edge_101_win10_21h2", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_121_ios_122", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_130_osx_10146", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_154_osx_1231", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java_7u25", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-java_8u161", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java1102", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java1703", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-go_1178", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-libressl_283", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_102e", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_110l", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_111d", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_303", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-apple_mail_16_0", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-thunderbird_91_9", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "rating_spec", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" }, { "id": "rating_doc", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" }, { "id": "protocol_support_score", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "100" + "finding": "0" }, { "id": "protocol_support_score_weighted", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "30" + "finding": "0" }, { "id": "key_exchange_score", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "90" + "finding": "0" }, { "id": "key_exchange_score_weighted", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "27" + "finding": "0" }, { "id": "cipher_strength_score", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "60" + "finding": "0" }, { "id": "cipher_strength_score_weighted", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "24" + "finding": "0" }, { "id": "final_score", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "81" + "finding": "0" }, { "id": "overall_grade", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", - "severity": "OK", - "finding": "A" + "severity": "CRITICAL", + "finding": "M" }, { "id": "grade_cap_reason_1", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "Grade capped to A. HSTS is not offered" + "finding": "Grade capped to M. Domain name mismatch" }, { - "id": "scanTime", - "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "id": "grade_cap_reason_2", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "49" - } + "finding": "Grade capped to A. HSTS is not offered" + }, + { + "id": "scanTime", + "ip": "lutte-pauvrete.gouv.fr/185.194.82.27", + "port": "443", + "severity": "INFO", + "finding": "89" + } ], "thirdparties": { - "trackers": [ - { - "type": "google fonts", - "url": "https://fonts.googleapis.com/css?family=Open+Sans", - "details": { - "id": "google fonts", - "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" - } - }, - { - "type": "google fonts", - "url": "https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2", - "details": { - "id": "google fonts", - "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" - } - }, - { - "type": "google fonts", - "url": "https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2", - "details": { - "id": "google fonts", - "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" - } - } - ], + "trackers": [], "cookies": [], "headers": { - "connection": "Keep-Alive", - "content-length": "3551", + "cache-control": "no-store, must-revalidate, no-cache", + "connection": "close", + "content-length": "245", "content-type": "text/html", - "retry-after": "300", - "server": "BigIP" + "pragma": "no-cache" }, "endpoints": [ { - "hostname": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr", - "ip": "185.194.82.144", + "hostname": "lutte-pauvrete.gouv.fr", + "ip": "185.194.82.27", "geoip": { "continent": { "code": "EU", @@ -59548,166 +52944,153 @@ } } } - }, - { - "hostname": "fonts.googleapis.com", - "ip": "172.253.115.95", - "geoip": { - "continent": { - "code": "NA", - "geoname_id": 6255149, - "names": { - "de": "Nordamerika", - "en": "North America", - "es": "Norteamérica", - "fr": "Amérique du Nord", - "ja": "北アメリカ", - "pt-BR": "América do Norte", - "ru": "Северная Америка", - "zh-CN": "北美洲" - } - }, - "country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - }, - "location": { - "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" - }, - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - } - } - }, - { - "hostname": "fonts.gstatic.com", - "ip": "172.253.122.94", - "geoip": { - "continent": { - "code": "NA", - "geoname_id": 6255149, - "names": { - "de": "Nordamerika", - "en": "North America", - "es": "Norteamérica", - "fr": "Amérique du Nord", - "ja": "北アメリカ", - "pt-BR": "América do Norte", - "ru": "Северная Америка", - "zh-CN": "北美洲" - } - }, - "country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - }, - "location": { - "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" - }, - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - } - } } ] }, "wappalyzer": { "urls": { - "https://metiers-fonctionpubliquehospitaliere.sante.gouv.fr/": { - "status": 503 + "https://lutte-pauvrete.gouv.fr/": { + "status": 0, + "error": "net::ERR_CONNECTION_RESET at https://lutte-pauvrete.gouv.fr/ (https://lutte-pauvrete.gouv.fr/)" } }, - "technologies": [ - { - "slug": "f5-bigip", - "name": "F5 BigIP", - "description": "F5's BIG-IP is a family of products covering software and hardware designed around application availability, access control, and security solutions.", - "confidence": 100, - "version": null, - "icon": "F5.png", - "website": "https://www.f5.com/products/big-ip-services", - "cpe": "cpe:2.3:a:f5:big-ip:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 64, - "slug": "reverse-proxies", - "name": "Reverse proxies" - } - ], - "rootPath": true - }, - { - "slug": "google-font-api", - "name": "Google Font API", - "description": "Google Font API is a web service that supports open-source font files that can be used on your web designs.", - "confidence": 100, - "version": null, - "icon": "Google Font API.svg", - "website": "https://google.com/fonts", - "cpe": null, - "categories": [ - { - "id": 17, - "slug": "font-scripts", - "name": "Font scripts" - } - ], - "rootPath": true - } - ] + "technologies": [] }, "zap": null, "nuclei": [], - "lhr": [], - "screenshot": true, + "lhr": [ + { + "requestedUrl": "https://lutte-pauvrete.gouv.fr/", + "finalUrl": "https://sante.gouv.fr/archives/archives-affaires-sociales/lutte-contre-l-exclusion/lutte-pauvrete-gouv-fr/", + "fetchTime": "2024-07-28T04:57:26.177Z", + "runWarnings": [ + "The page may not be loading as expected because your test URL (https://lutte-pauvrete.gouv.fr/) was redirected to https://sante.gouv.fr/archives/archives-affaires-sociales/lutte-contre-l-exclusion/lutte-pauvrete-gouv-fr/. Try testing the second URL directly." + ], + "categories": { + "performance": { + "title": "Performance", + "id": "performance", + "score": 0.2 + }, + "accessibility": { + "title": "Accessibility", + "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", + "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", + "id": "accessibility", + "score": 0.85 + }, + "best-practices": { + "title": "Best Practices", + "id": "best-practices", + "score": 0.8 + }, + "seo": { + "title": "SEO", + "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", + "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", + "id": "seo", + "score": 0.77 + }, + "pwa": { + "title": "Progressive Web App", + "description": "These checks validate the aspects of a Progressive Web App. [Learn more](https://developers.google.com/web/progressive-web-apps/checklist).", + "manualDescription": "These checks are required by the baseline [PWA Checklist](https://developers.google.com/web/progressive-web-apps/checklist) but are not automatically checked by Lighthouse. They do not affect your score but it's important that you verify them manually.", + "id": "pwa", + "score": 0.58 + } + }, + "audits": { + "metrics": { + "id": "metrics", + "title": "Metrics", + "description": "Collects all available metrics.", + "score": null, + "scoreDisplayMode": "informative", + "numericValue": 11419, + "numericUnit": "millisecond", + "details": { + "type": "debugdata", + "items": [ + { + "firstContentfulPaint": 7358, + "firstMeaningfulPaint": 7508, + "largestContentfulPaint": 12579, + "firstCPUIdle": 7902, + "interactive": 11419, + "speedIndex": 17365, + "estimatedInputLatency": 311, + "totalBlockingTime": 633, + "maxPotentialFID": 860, + "cumulativeLayoutShift": 0, + "cumulativeLayoutShiftAllFrames": 0, + "observedTimeOrigin": 0, + "observedTimeOriginTs": 796107761, + "observedNavigationStart": 0, + "observedNavigationStartTs": 796107761, + "observedFirstPaint": 6865, + "observedFirstPaintTs": 802972290, + "observedFirstContentfulPaint": 6865, + "observedFirstContentfulPaintTs": 802972290, + "observedFirstMeaningfulPaint": 6868, + "observedFirstMeaningfulPaintTs": 802975322, + "observedLargestContentfulPaint": 12465, + "observedLargestContentfulPaintTs": 808572565, + "observedTraceEnd": 13515, + "observedTraceEndTs": 809622936, + "observedLoad": 11775, + "observedLoadTs": 807882528, + "observedDomContentLoaded": 6800, + "observedDomContentLoadedTs": 802907943, + "observedCumulativeLayoutShift": 0, + "observedCumulativeLayoutShiftAllFrames": 0, + "observedFirstVisualChange": 6860, + "observedFirstVisualChangeTs": 802967761, + "observedLastVisualChange": 12476, + "observedLastVisualChangeTs": 808583761, + "observedSpeedIndex": 8941, + "observedSpeedIndexTs": 805048463 + }, + { + "lcpInvalidated": false + } + ] + } + }, + "diagnostics": { + "id": "diagnostics", + "title": "Diagnostics", + "description": "Collection of useful page vitals.", + "score": null, + "scoreDisplayMode": "informative", + "details": { + "type": "debugdata", + "items": [ + { + "numRequests": 26, + "numScripts": 5, + "numStylesheets": 3, + "numFonts": 4, + "numTasks": 505, + "numTasksOver10ms": 13, + "numTasksOver25ms": 12, + "numTasksOver50ms": 7, + "numTasksOver100ms": 5, + "numTasksOver500ms": 0, + "rtt": 8.051, + "throughput": 3633348.204011693, + "maxRtt": 149.8179999999993, + "maxServerLatency": 152.61500000000007, + "totalByteWeight": 1073827, + "totalTaskTime": 1398.7739999999956, + "mainDocumentTransferSize": 38813 + } + ] + } + } + } + } + ], + "screenshot": false, "stats": null, "github_repository": null, "budget_page": null, @@ -59720,257 +53103,34 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "D", "testsslExpireSoon": false, - "testsslExpireDate": "2025-03-20T22:59:00.000Z", - "testsslGrade": "A", + "testsslExpireDate": "2024-10-02T21:59:00.000Z", + "testsslGrade": "M", "cookiesGrade": "A", "cookiesCount": 0, - "trackersGrade": "C", - "trackersCount": 3, + "trackersGrade": "A", + "trackersCount": 0, + "lighthouse_performance": 0.2, + "lighthouse_performanceGrade": "E", + "lighthouse_accessibility": 0.85, + "lighthouse_accessibilityGrade": "A", + "lighthouse_best-practices": 0.8, + "lighthouse_best-practicesGrade": "B", + "lighthouse_seo": 0.77, + "lighthouse_seoGrade": "B", + "lighthouse_pwa": 0.58, + "lighthouse_pwaGrade": "C", "declaration-a11y": "F" } }, { "404": null, - "url": "https://onpes.gouv.fr", + "url": "https://metiers-fonctionpubliquehospitaliere.sante.gouv.fr", "category": "dnum", "tags": [ - "social" + "sante" ], - "http": { - "url": "https://onpes.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 05:09:53 GMT", - "grade": "D", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Age": "9447", - "Cache-Control": "max-age=10800, public", - "Connection": "keep-alive", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sat, 20 Jul 2024 06:02:57 GMT", - "ETag": "W/\"1721514459-gzip\"", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Last-Modified": "Sat, 20 Jul 2024 22:27:39 GMT", - "Set-Cookie": "TSf3779cae029=087dc22938ab2800a8959d72af6b9ed4d6b2c7597acf6e9eab1d9b056b60b206dadde5f4c4f8c03afd66b3be6e7fb86d; Max-Age=30; Path=/, TS300431cb027=087dc22938ab2000968b3ec984bba53e044883fcb3e5932ca40895bd8bb8cf346e45f15b03eef1c608fb2e022a113000162987ff12afc3daf8670dc06fb2be4da5a08273a404da0f844b54bfc741a3b3e2cefe8cdb7c352bb4a6dafa10caa40f; Path=/", - "Transfer-Encoding": "chunked", - "Vary": "Cookie,Accept-Encoding", - "X-Cache": "HIT", - "X-Cache-Hits": "24", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "SAMEORIGIN" - }, - "scan_id": 53621705, - "score": 35, - "start_time": "Sun, 21 Jul 2024 05:09:46 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 3, - "tests_passed": 8, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dicom-cnle-preprod.cegedim.cloud-HTTP": { - "domain": "cnle.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "BIGipServerpool-dicom-onpes-preprod.cegedim.cloud-HTTP": { - "domain": "onpes.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "BIGipServerpool-handicap-v2.cegedim.cloud-HTTP": { - "domain": "solidarites.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS300431cb027": { - "domain": "solidarites.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TSf3779cae029": { - "domain": "solidarites.gouv.fr", - "expires": 1721538623, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag", - "score_description": "Cookies set without using the Secure flag or set over HTTP", - "score_modifier": -20 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://solidarites.gouv.fr/cnle", - "redirects": true, - "route": [ - "http://onpes.gouv.fr/", - "https://onpes.gouv.fr/", - "https://cnle.gouv.fr", - "https://solidarites.gouv.fr/cnle/", - "https://solidarites.gouv.fr/cnle" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": null, - "includeSubDomains": false, - "max-age": null, - "preload": false, - "preloaded": false - }, - "pass": false, - "result": "hsts-not-implemented", - "score_description": "HTTP Strict Transport Security (HSTS) header not implemented", - "score_modifier": -20 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -59978,70 +53138,70 @@ "testssl": [ { "id": "service", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "HTTP" }, { "id": "pre_128cipher", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "No 128 cipher limit bug" }, { "id": "SSLv2", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "SSLv3", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "TLS1", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_1", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_2", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "TLS1_3", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "not offered + downgraded to weaker protocol" }, { "id": "ALPN", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "cipherlist_NULL", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -60049,7 +53209,7 @@ }, { "id": "cipherlist_aNULL", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -60057,7 +53217,7 @@ }, { "id": "cipherlist_EXPORT", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -60065,7 +53225,7 @@ }, { "id": "cipherlist_LOW", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -60073,7 +53233,7 @@ }, { "id": "cipherlist_3DES_IDEA", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -60081,477 +53241,442 @@ }, { "id": "cipherlist_OBSOLETED", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", - "severity": "LOW", + "severity": "INFO", "cwe": "CWE-310", - "finding": "offered" + "finding": "not offered" }, { "id": "cipherlist_STRONG_NOFS", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", - "severity": "OK", - "finding": "offered" + "severity": "INFO", + "finding": "not offered" }, { "id": "cipherlist_STRONG_FS", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "cipher_order-tls1_2", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "finding": "server" }, { "id": "cipherorder_TLSv1_2", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "ECDHE-RSA-AES128-GCM-SHA256" + "finding": "ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "cipher_order", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "finding": "server" }, { "id": "FS", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "FS_ciphers", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA" + "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "FS_ECDHE_curves", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "finding": "prime256v1 secp384r1" }, { "id": "TLS_extensions", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'extended master secret/#23'" }, { "id": "TLS_session_ticket", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "no -- no lifetime advertised" }, { "id": "SSL_sessionID_support", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "yes" }, { "id": "sessionresumption_ticket", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "not supported" }, { "id": "sessionresumption_ID", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "supported" }, { "id": "TLS_timestamp", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "random" }, { "id": "cert_compression", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "N/A" }, { "id": "clientAuth", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "none" }, { "id": "cert_numbers", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "1" }, { "id": "cert_signatureAlgorithm", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "finding": "SHA256 with RSA" }, { "id": "cert_keySize", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "RSA 2048 bits (exponent is 65537)" }, { "id": "cert_keyUsage", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "Digital Signature, Key Encipherment" }, { "id": "cert_extKeyUsage", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "TLS Web Server Authentication" }, { "id": "cert_serialNumber", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "D39A8C8E1371EEFD654773297C23EAA2" + "finding": "E9F6B8A3AA99258E2A88C6BE6220BD" }, { "id": "cert_serialNumberLen", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "16" + "finding": "15" }, { "id": "cert_fingerprintSHA1", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "136FDBDEA371E208AD5E578F06E1FCED9264A078" + "finding": "82D0D82AB57759761FB3959B481216C1BD14D007" }, { "id": "cert_fingerprintSHA256", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "0BD70BCA0701C3C39D1E78152AD20366D9044F318D0CD32C766782BF53A9EF38" + "finding": "D63BACE28B6B8DFA6B16917C895F13EC80C8C8FCE85C0D1B3CC851921B6FC66A" }, { "id": "cert", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "-----BEGIN CERTIFICATE-----\nMIIIcDCCBligAwIBAgIRANOajI4Tce79ZUdzKXwj6qIwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UEBhMCRlIxEjAQBgNVBAoMCURISU1ZT1RJUzEcMBoGA1UECwwTMDAwMiA0ODE0NjMwODEwMDAzNjEdMBsGA1UEYQwUTlRSRlItNDgxNDYzMDgxMDAwMzYxHTAbBgNVBAMMFENlcnRpZ25hIFNlcnZpY2VzIENBMB4XDTI0MDMyNDIzMDAwMFoXDTI1MDMxOTIyNTk1OVowgY0xCzAJBgNVBAYTAkZSMQ4wDAYDVQQHDAVQQVJJUzFBMD8GA1UECgw4U0VDUkVUQVJJQVQgR0VORVJBTCBNSU5JU1RFUkVTIENIQVJHRVMgQUZGQUlSRVMgU09DSUFMRVMxFjAUBgNVBAMMDW9ucGVzLmdvdXYuZnIxEzARBgNVBAUTClMzMDQzMzMxMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwtHeYehuq8rpIkZ+UEzqjLSl2LCWTXWbo52nuQ0Fo0ZzHJtxYcsMZ5NY5AgCxNpoddP/QwtpAYTB+/kDpyYxGj5EfPjxvFHmwOhuuqpZVho98dN3Z8Umrw68GYCXFSw0o8ak3AIZ1V/J/bS6iPr8u9LAuA6HO+W99QrQoGjVtZoCBCJv+NU/wp2/qIcvdInrKOPCKlkKz04stb6s5pNMIEhMG5W2uwcu+lwNsQFB49PwBf/UB/crOpNFf2AUAt3aZ6+0kDKWMzQ5zaHrzusp5ZQCv6FZnAl+EQO/BNkLSWNhtV090Dh0PzFgIXkPIEETLQb82M3i6JBjK2FrCboHFAgMBAAGjggPYMIID1DCB5AYIKwYBBQUHAQEEgdcwgdQwNgYIKwYBBQUHMAKGKmh0dHA6Ly9hdXRvcml0ZS5jZXJ0aWduYS5mci9zZXJ2aWNlc2NhLmRlcjA4BggrBgEFBQcwAoYsaHR0cDovL2F1dG9yaXRlLmRoaW15b3Rpcy5jb20vc2VydmljZXNjYS5kZXIwLgYIKwYBBQUHMAGGImh0dHA6Ly9zZXJ2aWNlc2NhLm9jc3AuY2VydGlnbmEuZnIwMAYIKwYBBQUHMAGGJGh0dHA6Ly9zZXJ2aWNlc2NhLm9jc3AuZGhpbXlvdGlzLmNvbTAfBgNVHSMEGDAWgBSs7IaPSzccuH8XGxnQruhO4zRcEjAMBgNVHRMBAf8EAjAAMGEGA1UdIARaMFgwCAYGZ4EMAQICMEwGCyqBegGBMQIFAQEBMD0wOwYIKwYBBQUHAgEWL2h0dHBzOi8vd3d3LmNlcnRpZ25hLmNvbS9hdXRvcml0ZS1jZXJ0aWZpY2F0aW9uMGUGA1UdHwReMFwwLaAroCmGJ2h0dHA6Ly9jcmwuZGhpbXlvdGlzLmNvbS9zZXJ2aWNlc2NhLmNybDAroCmgJ4YlaHR0cDovL2NybC5jZXJ0aWduYS5mci9zZXJ2aWNlc2NhLmNybDATBgNVHSUEDDAKBggrBgEFBQcDATAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0RBCQwIoIRd3d3Lm9ucGVzLmdvdXYuZnKCDW9ucGVzLmdvdXYuZnIwHQYDVR0OBBYEFOEbWc+bV+vjHn/53wTj0kmPjSPJMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY5y+gIoAAAEAwBIMEYCIQDeiFpNc4YdIsayfp0Eh7SF0/JeMzBKQHkLDDqj43YdCgIhAKvrYM2yoJ8hrH7rjluuCEisH9mwNF3Y1P/pPHyzYXUGAHYAzxFW7tUufK/zh1vZaS6b6RpxZ0qwF+ysAdJbd87MOwgAAAGOcvoCgwAABAMARzBFAiEAjEFGnJUFwiVqoT6i7/Flmv2uEZKxWjGqRBLZV+x6+B8CIGFJEuAN58l5Ze4XU1kDl+BUxm7HCC4nScCzh2slPCZKAHYAouMK5EXvva2bfjjtR2d3U9eCW4SU1yteGyzEuVCkR+cAAAGOcvoF0QAABAMARzBFAiEAoUiUuJq+vMpmc+e7l4SQFfPMBVB/RR17qHkVmNktB00CIAywgYweHjgRTTM2/KK0oXjOwubfgwcFVZMsf7ivi+p/MA0GCSqGSIb3DQEBCwUAA4ICAQBArhuCKE7SNiuaOMCan1FDqorhCAAnAGt2aF1gqMTPe/1A+OEfQ1GLkpk1zPuux7fjYW4cm3cj2+MPIUbaH7OiTuU4Vvxv0gMTkV7tw3eZEOE5CPD3iE6Z/7sGja3z6BkSf0NzxYUzvbJnPl7AAR2T50rzhDxyZOr1b0VEL8nmcss0SL/e8UoicV3yQ8vjS1n/bPr2K2YxALzI51DKkbWlrfqmLwUcpee3td8UdHNte3XIb84sr6E5XLxwHgq2ieY9z3SFCOvW6Z6DJyUhfw1itkhQcWcwexNbIfxkCoDAjLZSEdVQmgolUcLS0wlHXBk81My7YcVEufF1QDJR4MLxayya2aeQCLFYhLMF4WkN11x5SNKiWn1oO0rLSZjZ4yEDhYaCa9Zg43frhPcvXjC6PrThkJzM/1vuna7gevoOiYtbX+LPKo/jBXScD8AYTrUOwUub8WhGB/nhcXJI+IubaymIH3up8L6V4+bUwd5A/wIOGQ/H0WvAKgnHlPz78QX3GY9zbTD/q4U2CNt8/YMIh/HYHzjyFFLji1Em9DL1elBTpYPtdxrUQUQ4pQWJI39T/wO2H4VJeaRztbwdyGKhe0tRabc6IxNkNAvKU522pNE5P5nZ1lhuMBZ5c+xxID3ulUmmaBBAf4/JlCkHmBiaAiVHrT1T4+RUHIwFDGLGwA==\n-----END CERTIFICATE-----" + "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "cert_commonName", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", - "finding": "onpes.gouv.fr" + "finding": "www.metiers-fonctionpubliquehospitaliere.sante.gouv.fr" }, { "id": "cert_commonName_wo_SNI", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "onpes.gouv.fr" + "finding": "www.metiers-fonctionpubliquehospitaliere.sante.gouv.fr" }, { "id": "cert_subjectAltName", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "www.onpes.gouv.fr onpes.gouv.fr" + "finding": "www.metiers-fonctionpubliquehospitaliere.sante.gouv.fr metiers-fonctionpubliquehospitaliere.sante.gouv.fr" }, { "id": "cert_trust", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", - "finding": "Ok via SAN and CN (same w/o SNI)" + "finding": "Ok via SAN (same w/o SNI)" }, { "id": "cert_chain_of_trust", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "finding": "passed." }, { "id": "cert_certificatePolicies_EV", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_expirationStatus", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", - "finding": "241 >= 60 days" + "finding": "235 >= 60 days" }, { "id": "cert_notBefore", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "2024-03-24 23:00" + "finding": "2024-03-25 23:00" }, { "id": "cert_notAfter", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", - "finding": "2025-03-19 22:59" + "finding": "2025-03-20 22:59" }, { "id": "cert_extlifeSpan", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "finding": "certificate has no extended life time according to browser forum" }, { "id": "cert_eTLS", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "not present" }, { "id": "cert_crlDistributionPoints", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" }, { "id": "cert_ocspURL", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" }, { "id": "OCSP_stapling", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "cert_mustStapleExtension", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "--" }, { "id": "DNS_CAArecord", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "LOW", "finding": "--" }, { "id": "certificate_transparency", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "finding": "yes (certificate extension)" }, { "id": "certs_countServer", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "2" }, { "id": "certs_list_ordering_problem", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_caIssuers", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "Certigna Services CA (DHIMYOTIS from FR)" }, { "id": "intermediate_cert <#1>", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "intermediate_cert_fingerprintSHA256 <#1>", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" }, { "id": "intermediate_cert_notBefore <#1>", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "2015-11-25 11:33" }, { "id": "intermediate_cert_notAfter <#1>", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "finding": "2025-11-22 11:33" }, { "id": "intermediate_cert_expiration <#1>", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "finding": "ok > 40 days" }, { "id": "intermediate_cert_chain <#1>", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "Certigna Services CA <-- Certigna" }, { "id": "intermediate_cert_badOCSP", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "finding": "intermediate certificate(s) is/are ok" }, { "id": "HTTP_status_code", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", - "severity": "INFO", - "finding": "301 Moved Permanently ('/')" + "severity": "WARN", + "finding": "Unexpected 503 Service Unavailable @ '/'" }, { "id": "HTTP_clock_skew", - "ip": "onpes.gouv.fr/185.194.82.143", - "port": "443", - "severity": "INFO", - "finding": "0 seconds from localtime" - }, - { - "id": "HTTP_headerTime", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "1721538636" - }, - { - "id": "HSTS_time", - "ip": "onpes.gouv.fr/185.194.82.143", - "port": "443", - "severity": "OK", - "finding": "365 days (=31536000 seconds) > 15552000 seconds" - }, - { - "id": "HSTS_subdomains", - "ip": "onpes.gouv.fr/185.194.82.143", - "port": "443", - "severity": "OK", - "finding": "includes subdomains" + "finding": "Got no HTTP time, maybe try different URL?" }, { - "id": "HSTS_preload", - "ip": "onpes.gouv.fr/185.194.82.143", + "id": "HSTS", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", - "severity": "INFO", - "finding": "domain is NOT marked for preloading" + "severity": "LOW", + "finding": "not offered" }, { "id": "HPKP", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "No support for HTTP Public Key Pinning" }, { "id": "banner_server", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "No Server banner line in header, interesting!" + "finding": "BigIP" }, { "id": "banner_application", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "No application banner found" }, { "id": "cookie_count", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "1 at '/' (30x detected, better try target URL of 30x)" - }, - { - "id": "cookie_secure", - "ip": "onpes.gouv.fr/185.194.82.143", - "port": "443", - "severity": "OK", - "finding": "All (1) at '/' marked as secure" - }, - { - "id": "cookie_httponly", - "ip": "onpes.gouv.fr/185.194.82.143", - "port": "443", - "severity": "OK", - "finding": "All (1) at '/' marked as HttpOnly (30x detected, better try target URL of 30x)" + "finding": "0 at '/' (30x detected, better try target URL of 30x)" }, { "id": "security_headers", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "MEDIUM", "finding": "--" }, { "id": "banner_reverseproxy", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "cwe": "CWE-200", @@ -60559,7 +53684,7 @@ }, { "id": "heartbleed", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cve": "CVE-2014-0160", @@ -60568,7 +53693,7 @@ }, { "id": "CCS", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cve": "CVE-2014-0224", @@ -60577,7 +53702,7 @@ }, { "id": "ticketbleed", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cve": "CVE-2016-9244", @@ -60586,16 +53711,16 @@ }, { "id": "ROBOT", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", "cwe": "CWE-203", - "finding": "not vulnerable" + "finding": "not vulnerable, no RSA key transport cipher" }, { "id": "secure_renego", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cwe": "CWE-310", @@ -60603,16 +53728,16 @@ }, { "id": "secure_client_renego", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cve": "CVE-2011-1473", "cwe": "CWE-310", - "finding": "not vulnerable" + "finding": "not vulnerable, mitigated" }, { "id": "CRIME_TLS", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cve": "CVE-2012-4929", @@ -60621,7 +53746,7 @@ }, { "id": "BREACH", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cve": "CVE-2013-3587", @@ -60630,7 +53755,7 @@ }, { "id": "POODLE_SSL", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cve": "CVE-2014-3566", @@ -60639,14 +53764,14 @@ }, { "id": "fallback_SCSV", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "finding": "no protocol below TLS 1.2 offered" }, { "id": "SWEET32", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cve": "CVE-2016-2183 CVE-2016-6329", @@ -60655,7 +53780,7 @@ }, { "id": "FREAK", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cve": "CVE-2015-0204", @@ -60664,7 +53789,7 @@ }, { "id": "DROWN", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cve": "CVE-2016-0800 CVE-2016-0703", @@ -60673,16 +53798,16 @@ }, { "id": "DROWN_hint", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "cve": "CVE-2016-0800 CVE-2016-0703", "cwe": "CWE-310", - "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=0BD70BCA0701C3C39D1E78152AD20366D9044F318D0CD32C766782BF53A9EF38" + "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=D63BACE28B6B8DFA6B16917C895F13EC80C8C8FCE85C0D1B3CC851921B6FC66A" }, { "id": "LOGJAM", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -60691,7 +53816,7 @@ }, { "id": "LOGJAM-common_primes", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -60700,7 +53825,7 @@ }, { "id": "BEAST", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cve": "CVE-2011-3389", @@ -60709,16 +53834,16 @@ }, { "id": "LUCKY13", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", - "severity": "LOW", + "severity": "OK", "cve": "CVE-2013-0169", "cwe": "CWE-310", - "finding": "potentially vulnerable, uses TLS CBC ciphers" + "finding": "not vulnerable" }, { "id": "winshock", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cve": "CVE-2014-6321", @@ -60727,7 +53852,7 @@ }, { "id": "RC4", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", "cve": "CVE-2013-2566 CVE-2015-2808", @@ -60736,341 +53861,373 @@ }, { "id": "clientsimulation-android_60", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_70", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_81", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_90", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_X", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_11", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_12", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-chrome_79_win10", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-chrome_101_win10", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-firefox_66_win81", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-firefox_100_win10", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-ie_6_xp", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_win7", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_xp", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win7", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-SHA" + "finding": "No connection" }, { "id": "clientsimulation-ie_11_win81", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-SHA" + "finding": "No connection" }, { "id": "clientsimulation-ie_11_winphone81", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-SHA" + "finding": "No connection" }, { "id": "clientsimulation-ie_11_win10", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-edge_15_win10", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-edge_101_win10_21h2", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_121_ios_122", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_130_osx_10146", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_154_osx_1231", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java_7u25", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-java_8u161", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java1102", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java1703", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-go_1178", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-libressl_283", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_102e", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_110l", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_111d", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_303", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-apple_mail_16_0", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-thunderbird_91_9", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "rating_spec", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" }, { "id": "rating_doc", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" }, { "id": "protocol_support_score", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "100" }, { "id": "protocol_support_score_weighted", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "30" }, { "id": "key_exchange_score", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "90" }, { "id": "key_exchange_score_weighted", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "27" }, { "id": "cipher_strength_score", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "60" }, { "id": "cipher_strength_score_weighted", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "24" }, { "id": "final_score", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", "finding": "81" }, { "id": "overall_grade", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "OK", - "finding": "A+" + "finding": "A" + }, + { + "id": "grade_cap_reason_1", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", + "port": "443", + "severity": "INFO", + "finding": "Grade capped to A. HSTS is not offered" }, { "id": "scanTime", - "ip": "onpes.gouv.fr/185.194.82.143", + "ip": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr/185.194.82.144", "port": "443", "severity": "INFO", - "finding": "62" + "finding": "89" } ], "thirdparties": { - "trackers": [], + "trackers": [ + { + "type": "google fonts", + "url": "https://fonts.googleapis.com/css?family=Open+Sans", + "details": { + "id": "google fonts", + "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" + } + }, + { + "type": "google fonts", + "url": "https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2", + "details": { + "id": "google fonts", + "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" + } + }, + { + "type": "google fonts", + "url": "https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2", + "details": { + "id": "google fonts", + "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" + } + } + ], "cookies": [], "headers": { - "cache-control": "no-store, must-revalidate, no-cache", - "connection": "close", - "content-length": "245", + "connection": "Keep-Alive", + "content-length": "3551", "content-type": "text/html", - "pragma": "no-cache" + "retry-after": "300", + "server": "BigIP" }, "endpoints": [ { - "hostname": "onpes.gouv.fr", - "ip": "185.194.82.143", + "hostname": "metiers-fonctionpubliquehospitaliere.sante.gouv.fr", + "ip": "185.194.82.144", "geoip": { "continent": { "code": "EU", @@ -61123,31 +54280,208 @@ } } } + }, + { + "hostname": "fonts.googleapis.com", + "ip": "142.250.72.138", + "geoip": { + "city": { + "geoname_id": 5131638, + "names": { + "en": "Plainview" + } + }, + "continent": { + "code": "NA", + "geoname_id": 6255149, + "names": { + "de": "Nordamerika", + "en": "North America", + "es": "Norteamérica", + "fr": "Amérique du Nord", + "ja": "北アメリカ", + "pt-BR": "América do Norte", + "ru": "Северная Америка", + "zh-CN": "北美洲" + } + }, + "country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "location": { + "accuracy_radius": 100, + "latitude": 40.7746, + "longitude": -73.4761, + "metro_code": 501, + "time_zone": "America/New_York" + }, + "postal": { + "code": "11803" + }, + "registered_country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "subdivisions": [ + { + "geoname_id": 5128638, + "iso_code": "NY", + "names": { + "de": "New York", + "en": "New York", + "es": "Nueva York", + "fr": "New York", + "ja": "ニューヨーク州", + "pt-BR": "Nova Iorque", + "ru": "Нью-Йорк", + "zh-CN": "纽约州" + } + } + ] + } + }, + { + "hostname": "fonts.gstatic.com", + "ip": "142.250.68.35", + "geoip": { + "city": { + "geoname_id": 5131638, + "names": { + "en": "Plainview" + } + }, + "continent": { + "code": "NA", + "geoname_id": 6255149, + "names": { + "de": "Nordamerika", + "en": "North America", + "es": "Norteamérica", + "fr": "Amérique du Nord", + "ja": "北アメリカ", + "pt-BR": "América do Norte", + "ru": "Северная Америка", + "zh-CN": "北美洲" + } + }, + "country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "location": { + "accuracy_radius": 100, + "latitude": 40.7746, + "longitude": -73.4761, + "metro_code": 501, + "time_zone": "America/New_York" + }, + "postal": { + "code": "11803" + }, + "registered_country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "subdivisions": [ + { + "geoname_id": 5128638, + "iso_code": "NY", + "names": { + "de": "New York", + "en": "New York", + "es": "Nueva York", + "fr": "New York", + "ja": "ニューヨーク州", + "pt-BR": "Nova Iorque", + "ru": "Нью-Йорк", + "zh-CN": "纽约州" + } + } + ] + } } ] }, "wappalyzer": { "urls": { - "https://onpes.gouv.fr/": { - "status": 301, - "error": "net::ERR_BLOCKED_BY_CLIENT at https://onpes.gouv.fr/ (https://onpes.gouv.fr/)" + "https://metiers-fonctionpubliquehospitaliere.sante.gouv.fr/": { + "status": 503 } }, "technologies": [ { - "slug": "hsts", - "name": "HSTS", - "description": "HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.", + "slug": "f5-bigip", + "name": "F5 BigIP", + "description": "F5's BIG-IP is a family of products covering software and hardware designed around application availability, access control, and security solutions.", "confidence": 100, "version": null, - "icon": "default.svg", - "website": "https://www.rfc-editor.org/rfc/rfc6797#section-6.1", + "icon": "F5.png", + "website": "https://www.f5.com/products/big-ip-services", + "cpe": "cpe:2.3:a:f5:big-ip:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 64, + "slug": "reverse-proxies", + "name": "Reverse proxies" + } + ], + "rootPath": true + }, + { + "slug": "google-font-api", + "name": "Google Font API", + "description": "Google Font API is a web service that supports open-source font files that can be used on your web designs.", + "confidence": 100, + "version": null, + "icon": "Google Font API.svg", + "website": "https://google.com/fonts", "cpe": null, "categories": [ { - "id": 16, - "slug": "security", - "name": "Security" + "id": 17, + "slug": "font-scripts", + "name": "Font scripts" } ], "rootPath": true @@ -61155,323 +54489,8 @@ ] }, "zap": null, - "nuclei": [ - { - "template": "dns/caa-fingerprint.yaml", - "template-url": "https://templates.nuclei.sh/public/caa-fingerprint", - "template-id": "caa-fingerprint", - "template-path": "/home/runner/nuclei-templates/dns/caa-fingerprint.yaml", - "info": { - "name": "CAA Record", - "author": [ - "pdteam" - ], - "tags": [ - "dns", - "caa" - ], - "description": "A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.", - "reference": [ - "https://support.dnsimple.com/articles/caa-record/#whats-a-caa-record" - ], - "severity": "info", - "metadata": { - "max-request": 1 - }, - "classification": { - "cve-id": null, - "cwe-id": [ - "cwe-200" - ] - } - }, - "type": "dns", - "host": "onpes.gouv.fr.", - "matched-at": "onpes.gouv.fr", - "timestamp": "2024-07-21T05:11:33.746748693Z", - "matcher-status": true - }, - { - "template": "dns/mx-fingerprint.yaml", - "template-url": "https://templates.nuclei.sh/public/mx-fingerprint", - "template-id": "mx-fingerprint", - "template-path": "/home/runner/nuclei-templates/dns/mx-fingerprint.yaml", - "info": { - "name": "MX Record Detection", - "author": [ - "pdteam" - ], - "tags": [ - "dns", - "mx" - ], - "description": "An MX record was detected. MX records direct emails to a mail exchange server.", - "reference": [ - "https://www.cloudflare.com/learning/dns/dns-records/dns-mx-record/", - "https://mxtoolbox.com/" - ], - "severity": "info", - "metadata": { - "max-request": 1 - }, - "classification": { - "cve-id": null, - "cwe-id": [ - "cwe-200" - ] - } - }, - "type": "dns", - "host": "onpes.gouv.fr.", - "matched-at": "onpes.gouv.fr", - "extracted-results": [ - "10 pro075001app411.social.gouv.fr.", - "10 pro075001app410.social.gouv.fr.", - "10 pro093001app413.social.gouv.fr.", - "10 pro093001app412.social.gouv.fr." - ], - "timestamp": "2024-07-21T05:11:34.769632758Z", - "matcher-status": true - }, - { - "template": "dns/nameserver-fingerprint.yaml", - "template-url": "https://templates.nuclei.sh/public/nameserver-fingerprint", - "template-id": "nameserver-fingerprint", - "template-path": "/home/runner/nuclei-templates/dns/nameserver-fingerprint.yaml", - "info": { - "name": "NS Record Detection", - "author": [ - "pdteam" - ], - "tags": [ - "dns", - "ns" - ], - "description": "An NS record was detected. An NS record delegates a subdomain to a set of name servers.", - "severity": "info", - "metadata": { - "max-request": 1 - }, - "classification": { - "cve-id": null, - "cwe-id": [ - "cwe-200" - ] - } - }, - "type": "dns", - "host": "onpes.gouv.fr.", - "matched-at": "onpes.gouv.fr", - "extracted-results": [ - "a.ns.developpement-durable.gouv.fr.", - "nsa.perf1.fr.", - "b.ns.developpement-durable.gouv.fr.", - "nsc.perf1.com.", - "nsb.perf1.com." - ], - "timestamp": "2024-07-21T05:11:34.994502992Z", - "matcher-status": true - }, - { - "template": "http/cves/2018/CVE-2018-11784.yaml", - "template-url": "https://templates.nuclei.sh/public/CVE-2018-11784", - "template-id": "CVE-2018-11784", - "template-path": "/home/runner/nuclei-templates/http/cves/2018/CVE-2018-11784.yaml", - "info": { - "name": "Apache Tomcat - Open Redirect", - "author": [ - "geeknik" - ], - "tags": [ - "cve", - "cve2018", - "packetstorm", - "tomcat", - "redirect", - "apache" - ], - "description": "Apache Tomcat versions prior to 9.0.12, 8.5.34, and 7.0.91 are prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input.\n", - "impact": "An attacker can redirect users to malicious websites, leading to phishing attacks or the download of malware.\n", - "reference": [ - "https://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75@%3cannounce.tomcat.apache.org%3e", - "https://nvd.nist.gov/vuln/detail/cve-2018-11784", - "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html", - "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html", - "http://packetstormsecurity.com/files/163456/apache-tomcat-9.0.0m1-open-redirect.html" - ], - "severity": "medium", - "metadata": { - "fofa-query": [ - "body=\"apache tomcat\"", - "title=\"apache tomcat\"" - ], - "google-query": "intitle:\"apache tomcat\"", - "max-request": 1, - "product": "tomcat", - "shodan-query": [ - "title:\"Apache Tomcat\"", - "http.title:\"apache tomcat\"", - "http.html:\"apache tomcat\"", - "cpe:\"cpe:2.3:a:apache:tomcat\"" - ], - "vendor": "apache" - }, - "classification": { - "cve-id": [ - "cve-2018-11784" - ], - "cwe-id": [ - "cwe-601" - ], - "cvss-metrics": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", - "cvss-score": 4.3, - "epss-score": 0.79069, - "epss-percentile": 0.9827, - "cpe": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*" - }, - "remediation": "Upgrade to Apache Tomcat version 9.0.12 or later, or apply the relevant patch provided by the Apache Software Foundation.\n" - }, - "type": "http", - "host": "https://onpes.gouv.fr", - "matched-at": "https://onpes.gouv.fr//interact.sh", - "ip": "185.194.82.143", - "timestamp": "2024-07-21T05:11:42.079491055Z", - "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://onpes.gouv.fr//interact.sh'", - "matcher-status": true - } - ], - "lhr": [ - { - "requestedUrl": "https://onpes.gouv.fr/", - "finalUrl": "https://solidarites.gouv.fr/cnle", - "fetchTime": "2024-07-21T05:09:20.528Z", - "runWarnings": [ - "The page may not be loading as expected because your test URL (https://onpes.gouv.fr/) was redirected to https://solidarites.gouv.fr/cnle. Try testing the second URL directly." - ], - "categories": { - "performance": { - "title": "Performance", - "id": "performance", - "score": 0.08 - }, - "accessibility": { - "title": "Accessibility", - "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", - "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", - "id": "accessibility", - "score": 1 - }, - "best-practices": { - "title": "Best Practices", - "id": "best-practices", - "score": 0.87 - }, - "seo": { - "title": "SEO", - "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", - "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", - "id": "seo", - "score": 0.93 - }, - "pwa": { - "title": "Progressive Web App", - "description": "These checks validate the aspects of a Progressive Web App. [Learn more](https://developers.google.com/web/progressive-web-apps/checklist).", - "manualDescription": "These checks are required by the baseline [PWA Checklist](https://developers.google.com/web/progressive-web-apps/checklist) but are not automatically checked by Lighthouse. They do not affect your score but it's important that you verify them manually.", - "id": "pwa", - "score": 0.67 - } - }, - "audits": { - "metrics": { - "id": "metrics", - "title": "Metrics", - "description": "Collects all available metrics.", - "score": null, - "scoreDisplayMode": "informative", - "numericValue": 19488, - "numericUnit": "millisecond", - "details": { - "type": "debugdata", - "items": [ - { - "firstContentfulPaint": 6381, - "firstMeaningfulPaint": 6490, - "largestContentfulPaint": 7801, - "firstCPUIdle": 17525, - "interactive": 19488, - "speedIndex": 19996, - "estimatedInputLatency": 4343, - "totalBlockingTime": 10189, - "maxPotentialFID": 5913, - "cumulativeLayoutShift": 0.0068238449096679685, - "cumulativeLayoutShiftAllFrames": 0, - "observedTimeOrigin": 0, - "observedTimeOriginTs": 341206127, - "observedNavigationStart": 0, - "observedNavigationStartTs": 341206127, - "observedFirstPaint": 2510, - "observedFirstPaintTs": 343716150, - "observedFirstContentfulPaint": 2510, - "observedFirstContentfulPaintTs": 343716150, - "observedFirstMeaningfulPaint": 2510, - "observedFirstMeaningfulPaintTs": 343716150, - "observedLargestContentfulPaint": 2510, - "observedLargestContentfulPaintTs": 343716150, - "observedTraceEnd": 12791, - "observedTraceEndTs": 353996679, - "observedLoad": 11733, - "observedLoadTs": 352939612, - "observedDomContentLoaded": 2448, - "observedDomContentLoadedTs": 343654329, - "observedCumulativeLayoutShift": 0.0068238449096679685, - "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 2480, - "observedFirstVisualChangeTs": 343686127, - "observedLastVisualChange": 11913, - "observedLastVisualChangeTs": 353119127, - "observedSpeedIndex": 9458, - "observedSpeedIndexTs": 350663640 - }, - { - "lcpInvalidated": false - } - ] - } - }, - "diagnostics": { - "id": "diagnostics", - "title": "Diagnostics", - "description": "Collection of useful page vitals.", - "score": null, - "scoreDisplayMode": "informative", - "details": { - "type": "debugdata", - "items": [ - { - "numRequests": 52, - "numScripts": 16, - "numStylesheets": 4, - "numFonts": 4, - "numTasks": 2379, - "numTasksOver10ms": 26, - "numTasksOver25ms": 15, - "numTasksOver50ms": 11, - "numTasksOver100ms": 7, - "numTasksOver500ms": 2, - "rtt": 39.926, - "throughput": 4830783.198211185, - "maxRtt": 78.272, - "maxServerLatency": 39.372, - "totalByteWeight": 713407, - "totalTaskTime": 3920.202000000021, - "mainDocumentTransferSize": 82646 - } - ] - } - } - } - } - ], + "nuclei": [], + "lhr": [], "screenshot": true, "stats": null, "github_repository": null, @@ -61485,309 +54504,95 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "D", "testsslExpireSoon": false, - "testsslExpireDate": "2025-03-19T22:59:00.000Z", - "testsslGrade": "A+", + "testsslExpireDate": "2025-03-20T22:59:00.000Z", + "testsslGrade": "A", "cookiesGrade": "A", "cookiesCount": 0, - "trackersGrade": "A", - "trackersCount": 0, - "lighthouse_performance": 0.08, - "lighthouse_performanceGrade": "F", - "lighthouse_accessibility": 1, - "lighthouse_accessibilityGrade": "A", - "lighthouse_best-practices": 0.87, - "lighthouse_best-practicesGrade": "A", - "lighthouse_seo": 0.93, - "lighthouse_seoGrade": "A", - "lighthouse_pwa": 0.67, - "lighthouse_pwaGrade": "B", + "trackersGrade": "C", + "trackersCount": 3, "declaration-a11y": "F" } }, { "404": null, - "url": "https://paps.sante.fr", + "url": "https://onpes.gouv.fr", "category": "dnum", "tags": [ - "sante" + "social" ], - "http": { - "url": "https://paps.sante.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 05:12:04 GMT", - "grade": "F", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Content-Type": "text/html; charset=ISO-8859-1", - "Date": "Sun, 21 Jul 2024 05:12:04 GMT", - "ETag": "\"54-541e4bbe3b829\"", - "Last-Modified": "Tue, 22 Nov 2016 14:39:04 GMT", - "Server": "Apache", - "Set-Cookie": "BIGipServerpool-ars.cegedim.cloud-HTTP=834951434.49431.0000; path=/; Httponly; Secure, TS510afef7029=087dc22938ab2800ffb30b1618fc0c39b629e3ff2631fb78a952899abb9ba9bec45d1f7b5b519a0d0d58bad47a98b26b; Max-Age=30; Path=/, TSdfa203d6027=087dc22938ab2000e760fd37ea0be89cc63c9ea19b8a10c58022aee6f7ac19937df1b581886829150855b18e541130000c090c0fb41489580dcbfaa5f6f7b984dcaa0a349aeec81c4ce9ec1ac73bd9aca5bfc2146292f96f8e43131086d9b51b; Path=/", - "Transfer-Encoding": "chunked", - "Vary": "Accept-Encoding", - "X-Cnection": "close", - "X-Content-Type-Options": "nosniff" - }, - "scan_id": 53621812, - "score": 10, - "start_time": "Sun, 21 Jul 2024 05:12:02 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 5, - "tests_passed": 6, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-ars.cegedim.cloud-HTTP": { - "domain": "paps.sante.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS510afef7029": { - "domain": "paps.sante.fr", - "expires": 1721538754, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TSdfa203d6027": { - "domain": "paps.sante.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag", - "score_description": "Cookies set without using the Secure flag or set over HTTP", - "score_modifier": -20 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://www.paps.sante.fr/", - "redirects": true, - "route": [ - "http://paps.sante.fr/", - "https://www.paps.sante.fr/" - ], - "status_code": 301 - }, - "pass": false, - "result": "redirection-off-host-from-http", - "score_description": "Initial redirection from HTTP to HTTPS is to a different host, preventing HSTS", - "score_modifier": -5 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": null, - "includeSubDomains": false, - "max-age": null, - "preload": false, - "preloaded": false - }, - "pass": false, - "result": "hsts-not-implemented", - "score_description": "HTTP Strict Transport Security (HSTS) header not implemented", - "score_modifier": -20 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-no-scripts-loaded", - "score_description": "Subresource Integrity (SRI) is not needed since site contains no script tags", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-frame-options-not-implemented", - "score_description": "X-Frame-Options (XFO) header not implemented", - "score_modifier": -20 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, - "updownio": null, - "nmap": null, - "dependabot": null, - "codescan": null, - "testssl": [ - { - "id": "service", - "ip": "paps.sante.fr/185.194.82.45", - "port": "443", - "severity": "INFO", - "finding": "HTTP" + "http": null, + "updownio": null, + "nmap": null, + "dependabot": null, + "codescan": null, + "testssl": [ + { + "id": "service", + "ip": "onpes.gouv.fr/185.194.82.143", + "port": "443", + "severity": "INFO", + "finding": "HTTP" }, { "id": "pre_128cipher", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "No 128 cipher limit bug" }, { "id": "SSLv2", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "SSLv3", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "TLS1", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_1", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_2", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "TLS1_3", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "not offered + downgraded to weaker protocol" }, { "id": "ALPN", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "cipherlist_NULL", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -61795,7 +54600,7 @@ }, { "id": "cipherlist_aNULL", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -61803,7 +54608,7 @@ }, { "id": "cipherlist_EXPORT", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -61811,7 +54616,7 @@ }, { "id": "cipherlist_LOW", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -61819,7 +54624,7 @@ }, { "id": "cipherlist_3DES_IDEA", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -61827,449 +54632,477 @@ }, { "id": "cipherlist_OBSOLETED", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", - "severity": "INFO", + "severity": "LOW", "cwe": "CWE-310", - "finding": "not offered" + "finding": "offered" }, { "id": "cipherlist_STRONG_NOFS", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", - "severity": "INFO", - "finding": "not offered" + "severity": "OK", + "finding": "offered" }, { "id": "cipherlist_STRONG_FS", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "cipher_order-tls1_2", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "finding": "server" }, { "id": "cipherorder_TLSv1_2", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "ECDHE-RSA-AES256-GCM-SHA384" + "finding": "ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "cipher_order", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "finding": "server" }, { "id": "FS", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "FS_ciphers", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA" }, { "id": "FS_ECDHE_curves", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "finding": "prime256v1 secp384r1" }, { "id": "TLS_extensions", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'extended master secret/#23'" }, { "id": "TLS_session_ticket", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "no -- no lifetime advertised" }, { "id": "SSL_sessionID_support", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "yes" }, { "id": "sessionresumption_ticket", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "not supported" }, { "id": "sessionresumption_ID", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "supported" }, { "id": "TLS_timestamp", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "random" }, { "id": "cert_compression", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "N/A" }, { "id": "clientAuth", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "none" }, { "id": "cert_numbers", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "1" }, { "id": "cert_signatureAlgorithm", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "finding": "SHA256 with RSA" }, { "id": "cert_keySize", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "RSA 2048 bits (exponent is 65537)" }, { "id": "cert_keyUsage", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "Digital Signature, Key Encipherment" }, { "id": "cert_extKeyUsage", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "TLS Web Server Authentication" }, { "id": "cert_serialNumber", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "C7FAC843B9187DCA2FA38F29814CD616" + "finding": "D39A8C8E1371EEFD654773297C23EAA2" }, { "id": "cert_serialNumberLen", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "16" }, { "id": "cert_fingerprintSHA1", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "9366003875F67A9AC0BBCEE4929F596B24B46E3B" + "finding": "136FDBDEA371E208AD5E578F06E1FCED9264A078" }, { "id": "cert_fingerprintSHA256", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "C5ADA6035012CCA636B1ADDCD4635FE76EB7DFBC95C5D28672915E714CF196E5" + "finding": "0BD70BCA0701C3C39D1E78152AD20366D9044F318D0CD32C766782BF53A9EF38" }, { "id": "cert", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" + "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "cert_commonName", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", - "finding": "paps.sante.fr" + "finding": "onpes.gouv.fr" }, { "id": "cert_commonName_wo_SNI", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "ars.sante.fr" + "finding": "onpes.gouv.fr" }, { "id": "cert_subjectAltName", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "iledefrance.paps.sante.fr lareunion-mayotte.paps.sante.fr nouvelle-aquitaine.paps.sante.fr paps.sante.fr bourgogne-franche-comte.paps.sante.fr bretagne.paps.sante.fr corse.paps.sante.fr grand-est.paps.sante.fr normandie.paps.sante.fr auvergne-rhone-alpes.paps.sante.fr centre-val-de-loire.paps.sante.fr hauts-de-france.paps.sante.fr lareunion.paps.sante.fr mayotte.paps.sante.fr occitanie.paps.sante.fr guadeloupe.paps.sante.fr guyane.paps.sante.fr martinique.paps.sante.fr ocean-indien.paps.sante.fr paca.paps.sante.fr paysdelaloire.paps.sante.fr" + "finding": "www.onpes.gouv.fr onpes.gouv.fr" }, { "id": "cert_trust", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", - "finding": "Ok via SAN and CN (SNI mandatory)" + "finding": "Ok via SAN and CN (same w/o SNI)" }, { "id": "cert_chain_of_trust", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "finding": "passed." }, { "id": "cert_certificatePolicies_EV", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_expirationStatus", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", - "finding": "314 >= 60 days" + "finding": "234 >= 60 days" }, { "id": "cert_notBefore", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "2024-05-16 22:00" + "finding": "2024-03-24 23:00" }, { "id": "cert_notAfter", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", - "finding": "2025-05-31 21:59" + "finding": "2025-03-19 22:59" }, { "id": "cert_extlifeSpan", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "finding": "certificate has no extended life time according to browser forum" }, { "id": "cert_eTLS", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "not present" }, { "id": "cert_crlDistributionPoints", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "http://crl.certigna.fr/servicesca.crl http://crl.dhimyotis.com/servicesca.crl" + "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" }, { "id": "cert_ocspURL", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "http://servicesca.ocsp.dhimyotis.com http://servicesca.ocsp.certigna.fr" + "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" }, { "id": "OCSP_stapling", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "cert_mustStapleExtension", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "--" }, { "id": "DNS_CAArecord", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "LOW", "finding": "--" }, { "id": "certificate_transparency", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "finding": "yes (certificate extension)" }, { "id": "certs_countServer", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "2" }, { "id": "certs_list_ordering_problem", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_caIssuers", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "Certigna Services CA (DHIMYOTIS from FR)" }, { "id": "intermediate_cert <#1>", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "-----BEGIN CERTIFICATE-----\nMIIGFjCCBP6gAwIBAgIQb4L6KKzW94S7WxILqHNnrTANBgkqhkiG9w0BAQsFADA0MQswCQYDVQQGEwJGUjESMBAGA1UECgwJRGhpbXlvdGlzMREwDwYDVQQDDAhDZXJ0aWduYTAeFw0xNTExMjUxMTMzNTJaFw0yNTExMjIxMTMzNTJaMH0xCzAJBgNVBAYTAkZSMRIwEAYDVQQKDAlESElNWU9USVMxHDAaBgNVBAsMEzAwMDIgNDgxNDYzMDgxMDAwMzYxHTAbBgNVBGEMFE5UUkZSLTQ4MTQ2MzA4MTAwMDM2MR0wGwYDVQQDDBRDZXJ0aWduYSBTZXJ2aWNlcyBDQTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALPM+7LpWBz9wFcPaTc3xnB+5g0XrnptB0EPPfrR04vO52Ykm4ky1d4ZLd10tbM1fa1RqNSOVWWg93O4pL7zCFKlz6JV74ZZVhHpEAwzBwv2oPnxvVbxtSN67xsSY66ahUYxjzs8+3FhmsiRxqwnTYvK2u70uglUvRisOKyTL/M6JnrC4y8tlmoz7OSa5BmBMVplJFQtvmON6N9aHLvYMz+EyJPCbXL6pELxeHjFT5QmIaRamsr2DOTaCjtBZKI1Wnh3X7lnbjM8MESJiV2t7E9tIQNG0Z/HI3tO4aaUMum3KysY5sC8v3vi7rryGidgzHQhrtP0ZXWW5UH/k7umLS/P/XXWnCFpc2Lxa1uDGfc2im7xibRoPP+JNZszN76euFlls6jyEXAiwnVr14tVVTewLK0OWs5SJHpEKp8PGMZRDj59EmMvokWwzL6QzNZ6vVAp00oOm05sbspNY9+MFqGKKUsKvhFGEa4XmRNxDe6KswLcjPZB+NKHZ0QWFd4ip5C5XmEK/8qIPjwVr9dah9+oiHGGO8Wx7gJAMF5DTmkvW7GhqCKj1LmHnabjzc8av6kxWVQZi/C7HCm9i/W4wio+JA2EAFLqNL3GPNbK9kau4yPhQt/c7zxzo0OHnlsV4THCG7oOCd3cfCiyfQcb3FBt6OSpaKRZxjCLBwP00r0fAgMBAAGjggHZMIIB1TASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUrOyGj0s3HLh/FxsZ0K7oTuM0XBIwZAYDVR0jBF0wW4AUGu3+QTmQtCRZvgHyUtVF9lo53BGhOKQ2MDQxCzAJBgNVBAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hggkA/tzjAQ/JSP8wSQYDVR0gBEIwQDA+BgoqgXoBgTEBAAECMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmNlcnRpZ25hLmZyL2F1dG9yaXRlcy8wfAYIKwYBBQUHAQEEcDBuMDQGCCsGAQUFBzAChihodHRwOi8vYXV0b3JpdGUuY2VydGlnbmEuZnIvY2VydGlnbmEuZGVyMDYGCCsGAQUFBzAChipodHRwOi8vYXV0b3JpdGUuZGhpbXlvdGlzLmNvbS9jZXJ0aWduYS5kZXIwYQYDVR0fBFowWDApoCegJYYjaHR0cDovL2NybC5jZXJ0aWduYS5mci9jZXJ0aWduYS5jcmwwK6ApoCeGJWh0dHA6Ly9jcmwuZGhpbXlvdGlzLmNvbS9jZXJ0aWduYS5jcmwwDQYJKoZIhvcNAQELBQADggEBAGLft7gIuGPZVfg0cTM+HT2xAZFPDb/2+siH06x+dH044zMKbBINbRzhKipwB1A3MW8FQjveE9tyrfyuqZE/X+o2SlGcdNV44ybYkxo4f6kcLEavV/IW+oFEnojZlhpksYcxrvQoEyqkAwshe8IS2KtZHKVACrt+XSs0lwvy7ALGmHaF7A4by6cZWItA7Lhj8XWp+8tBJDj7HocRbWtxzEODdBuyMgJzFrNjc+97J0vH/K0+3yjmkczpKshMA0tM+MF9XDMN/MuwrPmUWGO/fHiqHgUp8yqeWtl1n44ZxkkK1t9GRwhnDWLv73/xhTmdhWYQ/reo0GbgBoLiltKmIJQ=\n-----END CERTIFICATE-----" }, { "id": "intermediate_cert_fingerprintSHA256 <#1>", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" }, { "id": "intermediate_cert_notBefore <#1>", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "2015-11-25 11:33" }, { "id": "intermediate_cert_notAfter <#1>", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "finding": "2025-11-22 11:33" }, { "id": "intermediate_cert_expiration <#1>", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "finding": "ok > 40 days" }, { "id": "intermediate_cert_chain <#1>", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "Certigna Services CA <-- Certigna" }, { "id": "intermediate_cert_badOCSP", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "finding": "intermediate certificate(s) is/are ok" }, { "id": "HTTP_status_code", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "200 OK ('/')" + "finding": "301 Moved Permanently ('/')" }, { "id": "HTTP_clock_skew", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "Got no HTTP time, maybe try different URL?" + "finding": "0 seconds from localtime" }, { - "id": "HSTS", - "ip": "paps.sante.fr/185.194.82.45", + "id": "HTTP_headerTime", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", - "severity": "LOW", - "finding": "not offered" + "severity": "INFO", + "finding": "1722143526" + }, + { + "id": "HSTS_time", + "ip": "onpes.gouv.fr/185.194.82.143", + "port": "443", + "severity": "OK", + "finding": "365 days (=31536000 seconds) > 15552000 seconds" + }, + { + "id": "HSTS_subdomains", + "ip": "onpes.gouv.fr/185.194.82.143", + "port": "443", + "severity": "OK", + "finding": "includes subdomains" + }, + { + "id": "HSTS_preload", + "ip": "onpes.gouv.fr/185.194.82.143", + "port": "443", + "severity": "INFO", + "finding": "domain is NOT marked for preloading" }, { "id": "HPKP", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "No support for HTTP Public Key Pinning" }, { "id": "banner_server", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "No Server banner line in header, interesting!" }, { "id": "banner_application", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "No application banner found" }, { "id": "cookie_count", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "0 at '/'" + "finding": "1 at '/' (30x detected, better try target URL of 30x)" }, { - "id": "Cache-Control", - "ip": "paps.sante.fr/185.194.82.45", + "id": "cookie_secure", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", - "severity": "INFO", - "finding": "no-store, must-revalidate, no-cache" + "severity": "OK", + "finding": "All (1) at '/' marked as secure" }, { - "id": "Pragma", - "ip": "paps.sante.fr/185.194.82.45", + "id": "cookie_httponly", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", - "severity": "INFO", - "finding": "no-cache" + "severity": "OK", + "finding": "All (1) at '/' marked as HttpOnly (30x detected, better try target URL of 30x)" + }, + { + "id": "security_headers", + "ip": "onpes.gouv.fr/185.194.82.143", + "port": "443", + "severity": "MEDIUM", + "finding": "--" }, { "id": "banner_reverseproxy", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "cwe": "CWE-200", @@ -62277,7 +55110,7 @@ }, { "id": "heartbleed", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cve": "CVE-2014-0160", @@ -62286,7 +55119,7 @@ }, { "id": "CCS", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cve": "CVE-2014-0224", @@ -62295,7 +55128,7 @@ }, { "id": "ticketbleed", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cve": "CVE-2016-9244", @@ -62304,16 +55137,16 @@ }, { "id": "ROBOT", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", "cwe": "CWE-203", - "finding": "not vulnerable, no RSA key transport cipher" + "finding": "not vulnerable" }, { "id": "secure_renego", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cwe": "CWE-310", @@ -62321,16 +55154,16 @@ }, { "id": "secure_client_renego", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cve": "CVE-2011-1473", "cwe": "CWE-310", - "finding": "not vulnerable, mitigated" + "finding": "not vulnerable" }, { "id": "CRIME_TLS", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cve": "CVE-2012-4929", @@ -62339,7 +55172,7 @@ }, { "id": "BREACH", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cve": "CVE-2013-3587", @@ -62348,7 +55181,7 @@ }, { "id": "POODLE_SSL", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cve": "CVE-2014-3566", @@ -62357,14 +55190,14 @@ }, { "id": "fallback_SCSV", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "finding": "no protocol below TLS 1.2 offered" }, { "id": "SWEET32", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cve": "CVE-2016-2183 CVE-2016-6329", @@ -62373,7 +55206,7 @@ }, { "id": "FREAK", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cve": "CVE-2015-0204", @@ -62382,7 +55215,7 @@ }, { "id": "DROWN", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cve": "CVE-2016-0800 CVE-2016-0703", @@ -62391,16 +55224,16 @@ }, { "id": "DROWN_hint", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "cve": "CVE-2016-0800 CVE-2016-0703", "cwe": "CWE-310", - "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=C5ADA6035012CCA636B1ADDCD4635FE76EB7DFBC95C5D28672915E714CF196E5" + "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=0BD70BCA0701C3C39D1E78152AD20366D9044F318D0CD32C766782BF53A9EF38" }, { "id": "LOGJAM", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -62409,7 +55242,7 @@ }, { "id": "LOGJAM-common_primes", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -62418,7 +55251,7 @@ }, { "id": "BEAST", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cve": "CVE-2011-3389", @@ -62427,16 +55260,16 @@ }, { "id": "LUCKY13", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", - "severity": "OK", + "severity": "LOW", "cve": "CVE-2013-0169", "cwe": "CWE-310", - "finding": "not vulnerable" + "finding": "potentially vulnerable, uses TLS CBC ciphers" }, { "id": "winshock", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cve": "CVE-2014-6321", @@ -62445,7 +55278,7 @@ }, { "id": "RC4", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", "cve": "CVE-2013-2566 CVE-2015-2808", @@ -62454,332 +55287,325 @@ }, { "id": "clientsimulation-android_60", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_70", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_81", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_90", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_X", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_11", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_12", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-chrome_79_win10", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-chrome_101_win10", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-firefox_66_win81", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-firefox_100_win10", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-ie_6_xp", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_win7", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_xp", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win7", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "No connection" + "finding": "TLSv1.2 ECDHE-RSA-AES128-SHA" }, { "id": "clientsimulation-ie_11_win81", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "No connection" + "finding": "TLSv1.2 ECDHE-RSA-AES128-SHA" }, { "id": "clientsimulation-ie_11_winphone81", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "No connection" + "finding": "TLSv1.2 ECDHE-RSA-AES128-SHA" }, { "id": "clientsimulation-ie_11_win10", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-edge_15_win10", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-edge_101_win10_21h2", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-safari_121_ios_122", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-safari_130_osx_10146", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-safari_154_osx_1231", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-java_7u25", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-java_8u161", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-java1102", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-java1703", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-go_1178", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-libressl_283", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-openssl_102e", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-openssl_110l", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-openssl_111d", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-openssl_303", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-apple_mail_16_0", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-thunderbird_91_9", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "rating_spec", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" }, { "id": "rating_doc", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" }, { "id": "protocol_support_score", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "100" }, { "id": "protocol_support_score_weighted", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "30" }, { "id": "key_exchange_score", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "90" }, { "id": "key_exchange_score_weighted", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "27" }, { "id": "cipher_strength_score", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "60" }, { "id": "cipher_strength_score_weighted", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "24" }, { "id": "final_score", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", "finding": "81" }, { "id": "overall_grade", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "OK", - "finding": "A" - }, - { - "id": "grade_cap_reason_1", - "ip": "paps.sante.fr/185.194.82.45", - "port": "443", - "severity": "INFO", - "finding": "Grade capped to A. HSTS is not offered" + "finding": "A+" }, { "id": "scanTime", - "ip": "paps.sante.fr/185.194.82.45", + "ip": "onpes.gouv.fr/185.194.82.143", "port": "443", "severity": "INFO", - "finding": "93" + "finding": "61" } ], "thirdparties": { @@ -62794,8 +55620,8 @@ }, "endpoints": [ { - "hostname": "paps.sante.fr", - "ip": "185.194.82.45", + "hostname": "onpes.gouv.fr", + "ip": "185.194.82.143", "geoip": { "continent": { "code": "EU", @@ -62853,25 +55679,26 @@ }, "wappalyzer": { "urls": { - "https://paps.sante.fr/": { - "status": 200 + "https://onpes.gouv.fr/": { + "status": 301, + "error": "net::ERR_BLOCKED_BY_CLIENT at https://onpes.gouv.fr/ (https://onpes.gouv.fr/)" } }, "technologies": [ { - "slug": "apache-http-server", - "name": "Apache HTTP Server", - "description": "Apache is a free and open-source cross-platform web server software.", + "slug": "hsts", + "name": "HSTS", + "description": "HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.", "confidence": 100, "version": null, - "icon": "Apache.svg", - "website": "https://httpd.apache.org/", - "cpe": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*", + "icon": "default.svg", + "website": "https://www.rfc-editor.org/rfc/rfc6797#section-6.1", + "cpe": null, "categories": [ { - "id": 22, - "slug": "web-servers", - "name": "Web servers" + "id": 16, + "slug": "security", + "name": "Security" } ], "rootPath": true @@ -62879,44 +55706,230 @@ ] }, "zap": null, - "nuclei": [], + "nuclei": [ + { + "template": "dns/mx-fingerprint.yaml", + "template-url": "https://templates.nuclei.sh/public/mx-fingerprint", + "template-id": "mx-fingerprint", + "template-path": "/home/runner/nuclei-templates/dns/mx-fingerprint.yaml", + "info": { + "name": "MX Record Detection", + "author": [ + "pdteam" + ], + "tags": [ + "dns", + "mx" + ], + "description": "An MX record was detected. MX records direct emails to a mail exchange server.", + "reference": [ + "https://www.cloudflare.com/learning/dns/dns-records/dns-mx-record/", + "https://mxtoolbox.com/" + ], + "severity": "info", + "metadata": { + "max-request": 1 + }, + "classification": { + "cve-id": null, + "cwe-id": [ + "cwe-200" + ] + } + }, + "type": "dns", + "host": "onpes.gouv.fr.", + "matched-at": "onpes.gouv.fr", + "extracted-results": [ + "10 pro075001app411.social.gouv.fr.", + "10 pro093001app412.social.gouv.fr.", + "10 pro093001app413.social.gouv.fr.", + "10 pro075001app410.social.gouv.fr." + ], + "timestamp": "2024-07-28T05:13:03.862691598Z", + "matcher-status": true + }, + { + "template": "dns/caa-fingerprint.yaml", + "template-url": "https://templates.nuclei.sh/public/caa-fingerprint", + "template-id": "caa-fingerprint", + "template-path": "/home/runner/nuclei-templates/dns/caa-fingerprint.yaml", + "info": { + "name": "CAA Record", + "author": [ + "pdteam" + ], + "tags": [ + "dns", + "caa" + ], + "description": "A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.", + "reference": [ + "https://support.dnsimple.com/articles/caa-record/#whats-a-caa-record" + ], + "severity": "info", + "metadata": { + "max-request": 1 + }, + "classification": { + "cve-id": null, + "cwe-id": [ + "cwe-200" + ] + } + }, + "type": "dns", + "host": "onpes.gouv.fr.", + "matched-at": "onpes.gouv.fr", + "timestamp": "2024-07-28T05:13:03.927420484Z", + "matcher-status": true + }, + { + "template": "dns/nameserver-fingerprint.yaml", + "template-url": "https://templates.nuclei.sh/public/nameserver-fingerprint", + "template-id": "nameserver-fingerprint", + "template-path": "/home/runner/nuclei-templates/dns/nameserver-fingerprint.yaml", + "info": { + "name": "NS Record Detection", + "author": [ + "pdteam" + ], + "tags": [ + "dns", + "ns" + ], + "description": "An NS record was detected. An NS record delegates a subdomain to a set of name servers.", + "severity": "info", + "metadata": { + "max-request": 1 + }, + "classification": { + "cve-id": null, + "cwe-id": [ + "cwe-200" + ] + } + }, + "type": "dns", + "host": "onpes.gouv.fr.", + "matched-at": "onpes.gouv.fr", + "extracted-results": [ + "nsc.perf1.com.", + "b.ns.developpement-durable.gouv.fr.", + "nsa.perf1.fr.", + "nsb.perf1.com.", + "a.ns.developpement-durable.gouv.fr." + ], + "timestamp": "2024-07-28T05:13:04.056190806Z", + "matcher-status": true + }, + { + "template": "http/cves/2018/CVE-2018-11784.yaml", + "template-url": "https://templates.nuclei.sh/public/CVE-2018-11784", + "template-id": "CVE-2018-11784", + "template-path": "/home/runner/nuclei-templates/http/cves/2018/CVE-2018-11784.yaml", + "info": { + "name": "Apache Tomcat - Open Redirect", + "author": [ + "geeknik" + ], + "tags": [ + "cve", + "cve2018", + "packetstorm", + "tomcat", + "redirect", + "apache" + ], + "description": "Apache Tomcat versions prior to 9.0.12, 8.5.34, and 7.0.91 are prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input.\n", + "impact": "An attacker can redirect users to malicious websites, leading to phishing attacks or the download of malware.\n", + "reference": [ + "https://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75@%3cannounce.tomcat.apache.org%3e", + "https://nvd.nist.gov/vuln/detail/cve-2018-11784", + "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html", + "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html", + "http://packetstormsecurity.com/files/163456/apache-tomcat-9.0.0m1-open-redirect.html" + ], + "severity": "medium", + "metadata": { + "fofa-query": [ + "body=\"apache tomcat\"", + "title=\"apache tomcat\"" + ], + "google-query": "intitle:\"apache tomcat\"", + "max-request": 1, + "product": "tomcat", + "shodan-query": [ + "title:\"Apache Tomcat\"", + "http.title:\"apache tomcat\"", + "http.html:\"apache tomcat\"", + "cpe:\"cpe:2.3:a:apache:tomcat\"" + ], + "vendor": "apache" + }, + "classification": { + "cve-id": [ + "cve-2018-11784" + ], + "cwe-id": [ + "cwe-601" + ], + "cvss-metrics": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "cvss-score": 4.3, + "epss-score": 0.79069, + "epss-percentile": 0.9827, + "cpe": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*" + }, + "remediation": "Upgrade to Apache Tomcat version 9.0.12 or later, or apply the relevant patch provided by the Apache Software Foundation.\n" + }, + "type": "http", + "host": "https://onpes.gouv.fr", + "matched-at": "https://onpes.gouv.fr//interact.sh", + "ip": "185.194.82.143", + "timestamp": "2024-07-28T05:13:11.89153354Z", + "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://onpes.gouv.fr//interact.sh'", + "matcher-status": true + } + ], "lhr": [ { - "requestedUrl": "https://paps.sante.fr/", - "finalUrl": "https://paps.sante.fr/", - "fetchTime": "2024-07-21T05:11:52.676Z", - "runWarnings": [], + "requestedUrl": "https://onpes.gouv.fr/", + "finalUrl": "https://solidarites.gouv.fr/cnle", + "fetchTime": "2024-07-28T05:10:09.895Z", + "runWarnings": [ + "The page may not be loading as expected because your test URL (https://onpes.gouv.fr/) was redirected to https://solidarites.gouv.fr/cnle. Try testing the second URL directly." + ], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": null + "score": 0.1 }, "accessibility": { "title": "Accessibility", "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", "id": "accessibility", - "score": 0.68 + "score": 1 }, "best-practices": { "title": "Best Practices", "id": "best-practices", - "score": 0.93 + "score": 0.87 }, "seo": { "title": "SEO", "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", "id": "seo", - "score": 0.55 + "score": 0.93 }, "pwa": { "title": "Progressive Web App", "description": "These checks validate the aspects of a Progressive Web App. [Learn more](https://developers.google.com/web/progressive-web-apps/checklist).", "manualDescription": "These checks are required by the baseline [PWA Checklist](https://developers.google.com/web/progressive-web-apps/checklist) but are not automatically checked by Lighthouse. They do not affect your score but it's important that you verify them manually.", "id": "pwa", - "score": 0.33 + "score": 0.67 } }, "audits": { @@ -62925,8 +55938,56 @@ "title": "Metrics", "description": "Collects all available metrics.", "score": null, - "scoreDisplayMode": "error", - "errorMessage": "Chrome didn't collect any screenshots during the page load. Please make sure there is content visible on the page, and then try re-running Lighthouse. (SPEEDINDEX_OF_ZERO)" + "scoreDisplayMode": "informative", + "numericValue": 21403, + "numericUnit": "millisecond", + "details": { + "type": "debugdata", + "items": [ + { + "firstContentfulPaint": 5758, + "firstMeaningfulPaint": 5758, + "largestContentfulPaint": 6941, + "firstCPUIdle": 19666, + "interactive": 21403, + "speedIndex": 14002, + "estimatedInputLatency": 6867, + "totalBlockingTime": 13042, + "maxPotentialFID": 9068, + "cumulativeLayoutShift": 0.0070698140462239585, + "cumulativeLayoutShiftAllFrames": 0, + "observedTimeOrigin": 0, + "observedTimeOriginTs": 387861667, + "observedNavigationStart": 0, + "observedNavigationStartTs": 387861667, + "observedFirstPaint": 2475, + "observedFirstPaintTs": 390336325, + "observedFirstContentfulPaint": 2475, + "observedFirstContentfulPaintTs": 390336325, + "observedFirstMeaningfulPaint": 2475, + "observedFirstMeaningfulPaintTs": 390336325, + "observedLargestContentfulPaint": 2475, + "observedLargestContentfulPaintTs": 390336325, + "observedTraceEnd": 7869, + "observedTraceEndTs": 395730992, + "observedLoad": 6753, + "observedLoadTs": 394614533, + "observedDomContentLoaded": 2456, + "observedDomContentLoadedTs": 390317592, + "observedCumulativeLayoutShift": 0.0070698140462239585, + "observedCumulativeLayoutShiftAllFrames": 0, + "observedFirstVisualChange": 2439, + "observedFirstVisualChangeTs": 390300667, + "observedLastVisualChange": 7005, + "observedLastVisualChangeTs": 394866667, + "observedSpeedIndex": 5816, + "observedSpeedIndexTs": 393677252 + }, + { + "lcpInvalidated": false + } + ] + } }, "diagnostics": { "id": "diagnostics", @@ -62938,23 +55999,23 @@ "type": "debugdata", "items": [ { - "numRequests": 1, - "numScripts": 0, - "numStylesheets": 0, - "numFonts": 0, - "numTasks": 44, - "numTasksOver10ms": 0, - "numTasksOver25ms": 0, - "numTasksOver50ms": 0, - "numTasksOver100ms": 0, - "numTasksOver500ms": 0, - "rtt": 149.363, - "throughput": 5837479.270470738, - "maxRtt": 149.363, - "maxServerLatency": 2.2130000000000223, - "totalByteWeight": 880, - "totalTaskTime": 11.529000000000003, - "mainDocumentTransferSize": 880 + "numRequests": 52, + "numScripts": 16, + "numStylesheets": 4, + "numFonts": 4, + "numTasks": 1822, + "numTasksOver10ms": 26, + "numTasksOver25ms": 17, + "numTasksOver50ms": 10, + "numTasksOver100ms": 5, + "numTasksOver500ms": 2, + "rtt": 70.828, + "throughput": 5677628.687195729, + "maxRtt": 86.40999999999985, + "maxServerLatency": 8.953999999999994, + "totalByteWeight": 712169, + "totalTaskTime": 4580.810000000016, + "mainDocumentTransferSize": 82643 } ] } @@ -62975,735 +56036,105 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "F", "testsslExpireSoon": false, - "testsslExpireDate": "2025-05-31T21:59:00.000Z", - "testsslGrade": "A", + "testsslExpireDate": "2025-03-19T22:59:00.000Z", + "testsslGrade": "A+", "cookiesGrade": "A", "cookiesCount": 0, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": null, + "lighthouse_performance": 0.1, "lighthouse_performanceGrade": "F", - "lighthouse_accessibility": 0.68, - "lighthouse_accessibilityGrade": "B", - "lighthouse_best-practices": 0.93, + "lighthouse_accessibility": 1, + "lighthouse_accessibilityGrade": "A", + "lighthouse_best-practices": 0.87, "lighthouse_best-practicesGrade": "A", - "lighthouse_seo": 0.55, - "lighthouse_seoGrade": "C", - "lighthouse_pwa": 0.33, - "lighthouse_pwaGrade": "E", + "lighthouse_seo": 0.93, + "lighthouse_seoGrade": "A", + "lighthouse_pwa": 0.67, + "lighthouse_pwaGrade": "B", "declaration-a11y": "F" } }, { "404": null, - "url": "https://preventionete.sports.gouv.fr", + "url": "https://paps.sante.fr", "category": "dnum", "tags": [ - "sports" + "sante" ], - "http": { - "url": "https://preventionete.sports.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 05:19:32 GMT", - "grade": "B", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Cache-Control": "max-age=86400, public", - "Cache-Tags": "HIT", - "Connection": "keep-alive", - "Content-Encoding": "gzip", - "Content-Length": "14830", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sun, 21 Jul 2024 05:19:29 GMT", - "ETag": "W/\"1721454067\"", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Last-Modified": "Sat, 20 Jul 2024 05:41:07 GMT", - "Server": "nginx", - "Strict-Transport-Security": "max-age=31536000; includeSubdomains", - "Vary": "Accept-Encoding", - "X-Cache": "HIT", - "X-Cache-Age": "85100", - "X-Cache-Hits": "49", - "X-Cache-TTL": "86400.000", - "X-Cacheable": "YES", - "X-Content-Type-Options": "nosniff", - "X-Drupal-Dynamic-Cache": "MISS", - "X-Frame-Options": "SAMEORIGIN", - "X-UA-Compatible": "IE=edge" - }, - "scan_id": 53621955, - "score": 75, - "start_time": "Sun, 21 Jul 2024 05:19:27 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 1, - "tests_passed": 10, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": null, - "sameSite": null - }, - "pass": true, - "result": "cookies-not-found", - "score_description": "No cookies detected", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://www.sports.gouv.fr/pratiquer-l-ete-100", - "redirects": true, - "route": [ - "http://preventionete.sports.gouv.fr/", - "https://preventionete.sports.gouv.fr/", - "https://www.sports.gouv.fr/pratiquer-l-ete-100" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubdomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, - "updownio": null, - "nmap": null, - "dependabot": null, - "codescan": null, - "testssl": [ - { - "id": "scanProblem", - "ip": "preventionete.sports.gouv.fr/185.75.143.93", - "port": "443", - "severity": "FATAL", - "finding": "Can't connect to '185.75.143.93:443' Make sure a firewall is not between you and your scanning target!" - }, - { - "id": "scanTime", - "ip": "preventionete.sports.gouv.fr/185.75.143.93", - "port": "443", - "severity": "WARN", - "finding": "Scan interrupted" - } - ], - "thirdparties": { - "trackers": null, - "cookies": null, - "headers": null - }, - "wappalyzer": { - "urls": { - "https://preventionete.sports.gouv.fr/": { - "status": 301, - "error": "net::ERR_BLOCKED_BY_CLIENT at https://preventionete.sports.gouv.fr/ (https://preventionete.sports.gouv.fr/)" - } - }, - "technologies": [ - { - "slug": "nginx", - "name": "Nginx", - "description": "Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.", - "confidence": 100, - "version": null, - "icon": "Nginx.svg", - "website": "https://nginx.org/en", - "cpe": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 22, - "slug": "web-servers", - "name": "Web servers" - }, - { - "id": 64, - "slug": "reverse-proxies", - "name": "Reverse proxies" - } - ], - "rootPath": true - }, - { - "slug": "hsts", - "name": "HSTS", - "description": "HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.", - "confidence": 100, - "version": null, - "icon": "default.svg", - "website": "https://www.rfc-editor.org/rfc/rfc6797#section-6.1", - "cpe": null, - "categories": [ - { - "id": 16, - "slug": "security", - "name": "Security" - } - ], - "rootPath": true - } - ] - }, - "zap": null, - "nuclei": [], - "lhr": [ - { - "requestedUrl": "https://preventionete.sports.gouv.fr/", - "finalUrl": "https://www.sports.gouv.fr/pratiquer-l-ete-100", - "fetchTime": "2024-07-21T05:18:53.439Z", - "runWarnings": [ - "The page may not be loading as expected because your test URL (https://preventionete.sports.gouv.fr/) was redirected to https://www.sports.gouv.fr/pratiquer-l-ete-100. Try testing the second URL directly." - ], - "categories": { - "performance": { - "title": "Performance", - "id": "performance", - "score": 0.44 - }, - "accessibility": { - "title": "Accessibility", - "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", - "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", - "id": "accessibility", - "score": 0.92 - }, - "best-practices": { - "title": "Best Practices", - "id": "best-practices", - "score": 0.93 - }, - "seo": { - "title": "SEO", - "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", - "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", - "id": "seo", - "score": 0.86 - }, - "pwa": { - "title": "Progressive Web App", - "description": "These checks validate the aspects of a Progressive Web App. [Learn more](https://developers.google.com/web/progressive-web-apps/checklist).", - "manualDescription": "These checks are required by the baseline [PWA Checklist](https://developers.google.com/web/progressive-web-apps/checklist) but are not automatically checked by Lighthouse. They do not affect your score but it's important that you verify them manually.", - "id": "pwa", - "score": 0.67 - } - }, - "audits": { - "metrics": { - "id": "metrics", - "title": "Metrics", - "description": "Collects all available metrics.", - "score": null, - "scoreDisplayMode": "informative", - "numericValue": 14419, - "numericUnit": "millisecond", - "details": { - "type": "debugdata", - "items": [ - { - "firstContentfulPaint": 2692, - "firstMeaningfulPaint": 2692, - "largestContentfulPaint": 24351, - "firstCPUIdle": 4666, - "interactive": 14419, - "speedIndex": 28415, - "estimatedInputLatency": 13, - "totalBlockingTime": 148, - "maxPotentialFID": 124, - "cumulativeLayoutShift": 0.003963650173611112, - "cumulativeLayoutShiftAllFrames": 0.0015504557291666668, - "observedTimeOrigin": 0, - "observedTimeOriginTs": 452882462, - "observedNavigationStart": 0, - "observedNavigationStartTs": 452882462, - "observedFirstPaint": 795, - "observedFirstPaintTs": 453677899, - "observedFirstContentfulPaint": 795, - "observedFirstContentfulPaintTs": 453677899, - "observedFirstMeaningfulPaint": 795, - "observedFirstMeaningfulPaintTs": 453677899, - "observedLargestContentfulPaint": 26761, - "observedLargestContentfulPaintTs": 479643045, - "observedTraceEnd": 27848, - "observedTraceEndTs": 480730380, - "observedLoad": 26705, - "observedLoadTs": 479587044, - "observedDomContentLoaded": 839, - "observedDomContentLoadedTs": 453721802, - "observedCumulativeLayoutShift": 0.003963650173611112, - "observedCumulativeLayoutShiftAllFrames": 0.0015504557291666668, - "observedFirstVisualChange": 782, - "observedFirstVisualChangeTs": 453664462, - "observedLastVisualChange": 27148, - "observedLastVisualChangeTs": 480030462, - "observedSpeedIndex": 16635, - "observedSpeedIndexTs": 469517552 - }, - { - "lcpInvalidated": false - } - ] - } - }, - "diagnostics": { - "id": "diagnostics", - "title": "Diagnostics", - "description": "Collection of useful page vitals.", - "score": null, - "scoreDisplayMode": "informative", - "details": { - "type": "debugdata", - "items": [ - { - "numRequests": 32, - "numScripts": 6, - "numStylesheets": 3, - "numFonts": 4, - "numTasks": 4081, - "numTasksOver10ms": 6, - "numTasksOver25ms": 3, - "numTasksOver50ms": 1, - "numTasksOver100ms": 0, - "numTasksOver500ms": 0, - "rtt": 84.70700000000001, - "throughput": 45478018.29088019, - "maxRtt": 84.74500000000262, - "maxServerLatency": 262.9679999999971, - "totalByteWeight": 4422160, - "totalTaskTime": 637.3119999999874, - "mainDocumentTransferSize": 15321 - } - ] - } - } - } - } - ], - "screenshot": true, - "stats": null, - "github_repository": null, - "budget_page": null, - "declaration-a11y": { - "mention": "Accessibilité : partiellement conforme", - "declarationUrl": "https://preventionete.sports.gouv.fr/accessibilite-partiellement-conforme-1826" - }, - "declaration-rgpd": null, - "betagouv": null, - "ecoindex": null, - "sonarcloud": null, - "dsfr": null, - "summary": { - "httpGrade": "B", - "cookiesGrade": null, - "cookiesCount": null, - "trackersGrade": null, - "trackersCount": null, - "lighthouse_performance": 0.44, - "lighthouse_performanceGrade": "D", - "lighthouse_accessibility": 0.92, - "lighthouse_accessibilityGrade": "A", - "lighthouse_best-practices": 0.93, - "lighthouse_best-practicesGrade": "A", - "lighthouse_seo": 0.86, - "lighthouse_seoGrade": "A", - "lighthouse_pwa": 0.67, - "lighthouse_pwaGrade": "B", - "declaration-a11y": "B" - } - }, - { - "404": null, - "url": "https://preventionhiver.sports.gouv.fr", - "category": "dnum", - "tags": [ - "sports" - ], - "http": { - "url": "https://preventionhiver.sports.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 05:22:18 GMT", - "grade": "B", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Cache-Control": "max-age=86400, public", - "Cache-Tags": "HIT", - "Connection": "keep-alive", - "Content-Encoding": "gzip", - "Content-Length": "15356", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sun, 21 Jul 2024 05:22:17 GMT", - "ETag": "W/\"1721467320\"", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Last-Modified": "Sat, 20 Jul 2024 09:22:00 GMT", - "Server": "nginx", - "Strict-Transport-Security": "max-age=31536000; includeSubdomains", - "Vary": "Accept-Encoding", - "X-Cache": "HIT", - "X-Cache-Age": "72014", - "X-Cache-Hits": "25", - "X-Cache-TTL": "86400.000", - "X-Cacheable": "YES", - "X-Content-Type-Options": "nosniff", - "X-Drupal-Dynamic-Cache": "MISS", - "X-Frame-Options": "SAMEORIGIN", - "X-UA-Compatible": "IE=edge" - }, - "scan_id": 53622025, - "score": 75, - "start_time": "Sun, 21 Jul 2024 05:22:14 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 1, - "tests_passed": 10, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": null, - "sameSite": null - }, - "pass": true, - "result": "cookies-not-found", - "score_description": "No cookies detected", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://www.sports.gouv.fr/pratiquer-l-hiver-102", - "redirects": true, - "route": [ - "http://preventionhiver.sports.gouv.fr/", - "https://preventionhiver.sports.gouv.fr/", - "https://www.sports.gouv.fr/pratiquer-l-hiver-102" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubdomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, - "updownio": null, - "nmap": null, - "dependabot": null, - "codescan": null, - "testssl": [ - { - "id": "service", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", - "port": "443", - "severity": "INFO", - "finding": "HTTP" + "http": null, + "updownio": null, + "nmap": null, + "dependabot": null, + "codescan": null, + "testssl": [ + { + "id": "service", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "HTTP" }, { "id": "pre_128cipher", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "No 128 cipher limit bug" }, { "id": "SSLv2", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "SSLv3", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "TLS1", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_1", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_2", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "TLS1_3", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", - "port": "443", - "severity": "OK", - "finding": "offered with final" - }, - { - "id": "ALPN_HTTP2", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", - "severity": "OK", - "finding": "h2" + "severity": "INFO", + "finding": "not offered + downgraded to weaker protocol" }, { "id": "ALPN", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", - "finding": "http/1.1" + "finding": "not offered" }, { "id": "cipherlist_NULL", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -63711,7 +56142,7 @@ }, { "id": "cipherlist_aNULL", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -63719,7 +56150,7 @@ }, { "id": "cipherlist_EXPORT", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -63727,7 +56158,7 @@ }, { "id": "cipherlist_LOW", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -63735,7 +56166,7 @@ }, { "id": "cipherlist_3DES_IDEA", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -63743,7 +56174,7 @@ }, { "id": "cipherlist_OBSOLETED", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -63751,429 +56182,467 @@ }, { "id": "cipherlist_STRONG_NOFS", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "cipherlist_STRONG_FS", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "cipher_order-tls1_2", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", - "port": "443", - "severity": "INFO", - "finding": "NOT a cipher order configured" - }, - { - "id": "cipher-tls1_2_xc030", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", - "port": "443", - "severity": "OK", - "finding": "TLSv1.2 xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - }, - { - "id": "cipher-tls1_2_x9f", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", - "port": "443", - "severity": "OK", - "finding": "TLSv1.2 x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" - }, - { - "id": "cipher-tls1_2_xc02f", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", - "port": "443", - "severity": "OK", - "finding": "TLSv1.2 xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" - }, - { - "id": "cipher-tls1_2_x9e", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", - "finding": "TLSv1.2 x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + "finding": "server" }, { - "id": "supportedciphers_TLSv1_2", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "id": "cipherorder_TLSv1_2", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", - "finding": "ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256" + "finding": "ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "cipher_order", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", - "severity": "INFO", - "finding": "NOT a cipher order configured" + "severity": "OK", + "finding": "server" }, { "id": "FS", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "FS_ciphers", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", - "finding": "DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "FS_ECDHE_curves", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "finding": "prime256v1 secp384r1" }, { "id": "TLS_extensions", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", - "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'next protocol/#13172' 'supported versions/#43' 'key share/#51' 'supported_groups/#10'" + "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'extended master secret/#23'" }, { "id": "TLS_session_ticket", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "no -- no lifetime advertised" }, { "id": "SSL_sessionID_support", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "yes" }, { "id": "sessionresumption_ticket", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "not supported" }, { "id": "sessionresumption_ID", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "supported" }, { "id": "TLS_timestamp", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "random" }, { - "id": "certificate_compression", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "id": "cert_compression", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", - "finding": "none" + "finding": "N/A" }, { "id": "clientAuth", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "none" }, { "id": "cert_numbers", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "1" }, { "id": "cert_signatureAlgorithm", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "finding": "SHA256 with RSA" }, { "id": "cert_keySize", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "RSA 2048 bits (exponent is 65537)" }, { "id": "cert_keyUsage", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "Digital Signature, Key Encipherment" }, { "id": "cert_extKeyUsage", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "TLS Web Server Authentication" }, { "id": "cert_serialNumber", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", - "finding": "EBEDBB618D65BD46B5DA2AFD805997B2" + "finding": "C7FAC843B9187DCA2FA38F29814CD616" }, { "id": "cert_serialNumberLen", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "16" }, { "id": "cert_fingerprintSHA1", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", - "finding": "4C161C7DA3A3BA96BC1A38C73D76A0231A74394C" + "finding": "9366003875F67A9AC0BBCEE4929F596B24B46E3B" }, { "id": "cert_fingerprintSHA256", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", - "finding": "3BE2A1645EFEE42B10B4F2B64ED56743B49417D9606B4D5F2389064DDA5B3DAE" + "finding": "C5ADA6035012CCA636B1ADDCD4635FE76EB7DFBC95C5D28672915E714CF196E5" }, { "id": "cert", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", - "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" + "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "cert_commonName", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", - "finding": "www.sports.gouv.fr" + "finding": "paps.sante.fr" }, { "id": "cert_commonName_wo_SNI", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", - "finding": "*.dedie.ate.info" + "finding": "ars.sante.fr" }, { "id": "cert_subjectAltName", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", - "finding": "back.sports.gouv.fr isoprod.back.sports.gouv.fr www.lebonsportpourmoi.sports.gouv.fr preventionete.sports.gouv.fr www.preventionhiver.sports.gouv.fr sports.gouv.fr www.developpement-durable.sports.gouv.fr lebonsportpourmoi.sports.gouv.fr www.sports.gouv.fr test.back.sports.gouv.fr developpement-durable.sports.gouv.fr www.preventionete.sports.gouv.fr preventionhiver.sports.gouv.fr isoprod.sports.gouv.fr test.sports.gouv.fr" + "finding": "iledefrance.paps.sante.fr lareunion-mayotte.paps.sante.fr nouvelle-aquitaine.paps.sante.fr paps.sante.fr bourgogne-franche-comte.paps.sante.fr bretagne.paps.sante.fr corse.paps.sante.fr grand-est.paps.sante.fr normandie.paps.sante.fr auvergne-rhone-alpes.paps.sante.fr centre-val-de-loire.paps.sante.fr hauts-de-france.paps.sante.fr lareunion.paps.sante.fr mayotte.paps.sante.fr occitanie.paps.sante.fr guadeloupe.paps.sante.fr guyane.paps.sante.fr martinique.paps.sante.fr ocean-indien.paps.sante.fr paca.paps.sante.fr paysdelaloire.paps.sante.fr" }, { "id": "cert_trust", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", - "finding": "Ok via SAN (SNI mandatory)" + "finding": "Ok via SAN and CN (SNI mandatory)" }, { "id": "cert_chain_of_trust", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "finding": "passed." }, { "id": "cert_certificatePolicies_EV", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_expirationStatus", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", - "finding": "274 >= 60 days" + "finding": "307 >= 60 days" }, { "id": "cert_notBefore", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", - "finding": "2024-04-21 22:00" + "finding": "2024-05-16 22:00" }, { "id": "cert_notAfter", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", - "finding": "2025-04-21 21:59" + "finding": "2025-05-31 21:59" }, { "id": "cert_extlifeSpan", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "finding": "certificate has no extended life time according to browser forum" }, { "id": "cert_eTLS", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "not present" }, { "id": "cert_crlDistributionPoints", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", - "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" + "finding": "http://crl.certigna.fr/servicesca.crl http://crl.dhimyotis.com/servicesca.crl" }, { "id": "cert_ocspURL", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", - "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" + "finding": "http://servicesca.ocsp.dhimyotis.com http://servicesca.ocsp.certigna.fr" }, { "id": "OCSP_stapling", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "cert_mustStapleExtension", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "--" }, { "id": "DNS_CAArecord", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "LOW", "finding": "--" }, { "id": "certificate_transparency", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "finding": "yes (certificate extension)" }, { "id": "certs_countServer", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "2" }, { "id": "certs_list_ordering_problem", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_caIssuers", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "Certigna Services CA (DHIMYOTIS from FR)" }, { "id": "intermediate_cert <#1>", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "intermediate_cert_fingerprintSHA256 <#1>", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" }, { "id": "intermediate_cert_notBefore <#1>", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "2015-11-25 11:33" }, { "id": "intermediate_cert_notAfter <#1>", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "finding": "2025-11-22 11:33" }, { "id": "intermediate_cert_expiration <#1>", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "finding": "ok > 40 days" }, { "id": "intermediate_cert_chain <#1>", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", "finding": "Certigna Services CA <-- Certigna" }, { "id": "intermediate_cert_badOCSP", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "finding": "intermediate certificate(s) is/are ok" }, { "id": "HTTP_status_code", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", - "severity": "WARN", - "finding": "HTTP header request failed" + "severity": "INFO", + "finding": "200 OK ('/')" }, { - "id": "scanProblem", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "id": "HTTP_clock_skew", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", - "severity": "WARN", - "finding": "HTTP header was repeatedly zero." + "severity": "INFO", + "finding": "Got no HTTP time, maybe try different URL?" + }, + { + "id": "HSTS", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "LOW", + "finding": "not offered" + }, + { + "id": "HPKP", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "No support for HTTP Public Key Pinning" + }, + { + "id": "banner_server", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "No Server banner line in header, interesting!" + }, + { + "id": "banner_application", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "No application banner found" + }, + { + "id": "cookie_count", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "0 at '/'" + }, + { + "id": "Cache-Control", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "no-store, must-revalidate, no-cache" + }, + { + "id": "Pragma", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "no-cache" + }, + { + "id": "banner_reverseproxy", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "cwe": "CWE-200", + "finding": "--" }, { "id": "heartbleed", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "cve": "CVE-2014-0160", "cwe": "CWE-119", "finding": "not vulnerable, no heartbeat extension" }, + { + "id": "CCS", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "OK", + "cve": "CVE-2014-0224", + "cwe": "CWE-310", + "finding": "not vulnerable" + }, { "id": "ticketbleed", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", "severity": "OK", "cve": "CVE-2016-9244", @@ -64181,313 +56650,4458 @@ "finding": "no session ticket extension" }, { - "id": "scanProblem", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "id": "ROBOT", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", - "severity": "FATAL", - "finding": "repeated TCP connect problems, giving up" + "severity": "OK", + "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe": "CWE-203", + "finding": "not vulnerable, no RSA key transport cipher" }, { - "id": "scanTime", - "ip": "preventionhiver.sports.gouv.fr/185.75.143.93", + "id": "secure_renego", + "ip": "paps.sante.fr/185.194.82.45", "port": "443", - "severity": "WARN", - "finding": "Scan interrupted" - } - ], - "thirdparties": { - "trackers": null, - "cookies": null, - "headers": null - }, - "wappalyzer": { - "urls": { - "https://preventionhiver.sports.gouv.fr/": { - "status": 301, - "error": "net::ERR_BLOCKED_BY_CLIENT at https://preventionhiver.sports.gouv.fr/ (https://preventionhiver.sports.gouv.fr/)" - } + "severity": "OK", + "cwe": "CWE-310", + "finding": "supported" }, - "technologies": [ - { - "slug": "nginx", - "name": "Nginx", - "description": "Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.", - "confidence": 100, - "version": null, - "icon": "Nginx.svg", - "website": "https://nginx.org/en", - "cpe": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 22, - "slug": "web-servers", - "name": "Web servers" - }, - { - "id": 64, - "slug": "reverse-proxies", - "name": "Reverse proxies" - } - ], - "rootPath": true - }, - { - "slug": "hsts", - "name": "HSTS", - "description": "HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.", - "confidence": 100, - "version": null, - "icon": "default.svg", - "website": "https://www.rfc-editor.org/rfc/rfc6797#section-6.1", - "cpe": null, - "categories": [ - { - "id": 16, - "slug": "security", - "name": "Security" - } - ], - "rootPath": true - } - ] - }, - "zap": null, - "nuclei": [], - "lhr": [], - "screenshot": true, - "stats": null, - "github_repository": null, - "budget_page": null, - "declaration-a11y": { - "mention": "Accessibilité : partiellement conforme", - "declarationUrl": "https://preventionhiver.sports.gouv.fr/accessibilite-partiellement-conforme-1826" - }, - "declaration-rgpd": null, - "betagouv": null, - "ecoindex": null, - "sonarcloud": null, - "dsfr": null, - "summary": { - "httpGrade": "B", - "cookiesGrade": null, - "cookiesCount": null, - "trackersGrade": null, - "trackersCount": null, - "declaration-a11y": "B" - } - }, - { - "404": null, - "url": "https://publisocial.fr", - "category": "dnum", - "tags": [ - "social" - ], - "http": { - "url": "https://publisocial.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 05:30:31 GMT", - "grade": "B+", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Length": "23862", - "Content-Security-Policy": "upgrade-insecure-requests;", - "Content-Type": "text/html; charset=UTF-8", - "Date": "Sun, 21 Jul 2024 05:30:29 GMT", - "Keep-Alive": "timeout=2, max=100", - "Link": "; rel=\"https://api.w.org/\"", - "Referrer-Policy": "no-referrer-when-downgrade", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "sameorigin", - "X-XSS-Protection": "1; mode=block" + { + "id": "secure_client_renego", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "OK", + "cve": "CVE-2011-1473", + "cwe": "CWE-310", + "finding": "not vulnerable, mitigated" }, - "scan_id": 53622237, - "score": 80, - "start_time": "Sun, 21 Jul 2024 05:30:25 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 1, - "tests_passed": 10, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": { - "upgrade-insecure-requests": [ - "'none'" - ] - }, - "http": true, - "meta": false, - "numPolicies": 1, - "policy": { - "antiClickjacking": false, - "defaultNone": false, - "insecureBaseUri": true, - "insecureFormAction": true, - "insecureSchemeActive": false, - "insecureSchemePassive": false, - "strictDynamic": false, - "unsafeEval": false, - "unsafeInline": true, - "unsafeInlineStyle": true, - "unsafeObjects": true - } - }, - "pass": false, - "result": "csp-implemented-with-unsafe-inline", - "score_description": "Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.", - "score_modifier": -20 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-drees-rfas.cegedim.cloud-HTTP": { - "domain": "publisocial.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://www.publisocial.fr/", - "redirects": true, - "route": [ - "http://publisocial.fr/", - "https://publisocial.fr/", - "http://www.publisocial.fr/", - "https://www.publisocial.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": "no-referrer-when-downgrade", - "http": true, - "meta": false - }, - "pass": true, - "result": "referrer-policy-no-referrer-when-downgrade", - "score_description": "Referrer-Policy header set to \"no-referrer-when-downgrade\"", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "sameorigin" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": "1; mode=block" - }, - "pass": true, - "result": "x-xss-protection-enabled-mode-block", - "score_description": "Deprecated X-XSS-Protection header set to \"1; mode=block\"", - "score_modifier": 0 - } - } - }, + { + "id": "CRIME_TLS", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "OK", + "cve": "CVE-2012-4929", + "cwe": "CWE-310", + "finding": "not vulnerable" + }, + { + "id": "BREACH", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "OK", + "cve": "CVE-2013-3587", + "cwe": "CWE-310", + "finding": "not vulnerable, no gzip/deflate/compress/br HTTP compression - only supplied '/' tested" + }, + { + "id": "POODLE_SSL", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "OK", + "cve": "CVE-2014-3566", + "cwe": "CWE-310", + "finding": "not vulnerable, no SSLv3" + }, + { + "id": "fallback_SCSV", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "OK", + "finding": "no protocol below TLS 1.2 offered" + }, + { + "id": "SWEET32", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "OK", + "cve": "CVE-2016-2183 CVE-2016-6329", + "cwe": "CWE-327", + "finding": "not vulnerable" + }, + { + "id": "FREAK", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "OK", + "cve": "CVE-2015-0204", + "cwe": "CWE-310", + "finding": "not vulnerable" + }, + { + "id": "DROWN", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "OK", + "cve": "CVE-2016-0800 CVE-2016-0703", + "cwe": "CWE-310", + "finding": "not vulnerable on this host and port" + }, + { + "id": "DROWN_hint", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "cve": "CVE-2016-0800 CVE-2016-0703", + "cwe": "CWE-310", + "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=C5ADA6035012CCA636B1ADDCD4635FE76EB7DFBC95C5D28672915E714CF196E5" + }, + { + "id": "LOGJAM", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "OK", + "cve": "CVE-2015-4000", + "cwe": "CWE-310", + "finding": "not vulnerable, no DH EXPORT ciphers," + }, + { + "id": "LOGJAM-common_primes", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "OK", + "cve": "CVE-2015-4000", + "cwe": "CWE-310", + "finding": "no DH key with <= TLS 1.2" + }, + { + "id": "BEAST", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "OK", + "cve": "CVE-2011-3389", + "cwe": "CWE-20", + "finding": "not vulnerable, no SSL3 or TLS1" + }, + { + "id": "LUCKY13", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "OK", + "cve": "CVE-2013-0169", + "cwe": "CWE-310", + "finding": "not vulnerable" + }, + { + "id": "winshock", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "OK", + "cve": "CVE-2014-6321", + "cwe": "CWE-94", + "finding": "not vulnerable" + }, + { + "id": "RC4", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "OK", + "cve": "CVE-2013-2566 CVE-2015-2808", + "cwe": "CWE-310", + "finding": "not vulnerable" + }, + { + "id": "clientsimulation-android_60", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + }, + { + "id": "clientsimulation-android_70", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-android_81", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-android_90", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-android_X", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-android_11", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-android_12", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-chrome_79_win10", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-chrome_101_win10", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-firefox_66_win81", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-firefox_100_win10", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-ie_6_xp", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "No connection" + }, + { + "id": "clientsimulation-ie_8_win7", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "No connection" + }, + { + "id": "clientsimulation-ie_8_xp", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "No connection" + }, + { + "id": "clientsimulation-ie_11_win7", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "No connection" + }, + { + "id": "clientsimulation-ie_11_win81", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "No connection" + }, + { + "id": "clientsimulation-ie_11_winphone81", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "No connection" + }, + { + "id": "clientsimulation-ie_11_win10", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-edge_15_win10", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-edge_101_win10_21h2", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-safari_121_ios_122", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-safari_130_osx_10146", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-safari_154_osx_1231", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-java_7u25", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "No connection" + }, + { + "id": "clientsimulation-java_8u161", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-java1102", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-java1703", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-go_1178", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-libressl_283", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-openssl_102e", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-openssl_110l", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-openssl_111d", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-openssl_303", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-apple_mail_16_0", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-thunderbird_91_9", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "rating_spec", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" + }, + { + "id": "rating_doc", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" + }, + { + "id": "protocol_support_score", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "100" + }, + { + "id": "protocol_support_score_weighted", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "30" + }, + { + "id": "key_exchange_score", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "90" + }, + { + "id": "key_exchange_score_weighted", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "27" + }, + { + "id": "cipher_strength_score", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "60" + }, + { + "id": "cipher_strength_score_weighted", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "24" + }, + { + "id": "final_score", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "81" + }, + { + "id": "overall_grade", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "OK", + "finding": "A" + }, + { + "id": "grade_cap_reason_1", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "Grade capped to A. HSTS is not offered" + }, + { + "id": "scanTime", + "ip": "paps.sante.fr/185.194.82.45", + "port": "443", + "severity": "INFO", + "finding": "54" + } + ], + "thirdparties": { + "trackers": [], + "cookies": [], + "headers": { + "cache-control": "no-store, must-revalidate, no-cache", + "connection": "close", + "content-length": "245", + "content-type": "text/html", + "pragma": "no-cache" + }, + "endpoints": [ + { + "hostname": "paps.sante.fr", + "ip": "185.194.82.45", + "geoip": { + "continent": { + "code": "EU", + "geoname_id": 6255148, + "names": { + "de": "Europa", + "en": "Europe", + "es": "Europa", + "fr": "Europe", + "ja": "ヨーロッパ", + "pt-BR": "Europa", + "ru": "Европа", + "zh-CN": "欧洲" + } + }, + "country": { + "geoname_id": 3017382, + "is_in_european_union": true, + "iso_code": "FR", + "names": { + "de": "Frankreich", + "en": "France", + "es": "Francia", + "fr": "France", + "ja": "フランス共和国", + "pt-BR": "França", + "ru": "Франция", + "zh-CN": "法国" + } + }, + "location": { + "accuracy_radius": 500, + "latitude": 48.8582, + "longitude": 2.3387, + "time_zone": "Europe/Paris" + }, + "registered_country": { + "geoname_id": 3017382, + "is_in_european_union": true, + "iso_code": "FR", + "names": { + "de": "Frankreich", + "en": "France", + "es": "Francia", + "fr": "France", + "ja": "フランス共和国", + "pt-BR": "França", + "ru": "Франция", + "zh-CN": "法国" + } + } + } + } + ] + }, + "wappalyzer": { + "urls": { + "https://paps.sante.fr/": { + "status": 200 + } + }, + "technologies": [ + { + "slug": "apache-http-server", + "name": "Apache HTTP Server", + "description": "Apache is a free and open-source cross-platform web server software.", + "confidence": 100, + "version": null, + "icon": "Apache.svg", + "website": "https://httpd.apache.org/", + "cpe": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 22, + "slug": "web-servers", + "name": "Web servers" + } + ], + "rootPath": true + } + ] + }, + "zap": null, + "nuclei": [], + "lhr": [ + { + "requestedUrl": "https://paps.sante.fr/", + "finalUrl": "https://paps.sante.fr/", + "fetchTime": "2024-07-28T05:16:48.614Z", + "runWarnings": [], + "categories": { + "performance": { + "title": "Performance", + "id": "performance", + "score": null + }, + "accessibility": { + "title": "Accessibility", + "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", + "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", + "id": "accessibility", + "score": 0.68 + }, + "best-practices": { + "title": "Best Practices", + "id": "best-practices", + "score": 0.93 + }, + "seo": { + "title": "SEO", + "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", + "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", + "id": "seo", + "score": 0.55 + }, + "pwa": { + "title": "Progressive Web App", + "description": "These checks validate the aspects of a Progressive Web App. [Learn more](https://developers.google.com/web/progressive-web-apps/checklist).", + "manualDescription": "These checks are required by the baseline [PWA Checklist](https://developers.google.com/web/progressive-web-apps/checklist) but are not automatically checked by Lighthouse. They do not affect your score but it's important that you verify them manually.", + "id": "pwa", + "score": 0.33 + } + }, + "audits": { + "metrics": { + "id": "metrics", + "title": "Metrics", + "description": "Collects all available metrics.", + "score": null, + "scoreDisplayMode": "error", + "errorMessage": "Chrome didn't collect any screenshots during the page load. Please make sure there is content visible on the page, and then try re-running Lighthouse. (SPEEDINDEX_OF_ZERO)" + }, + "diagnostics": { + "id": "diagnostics", + "title": "Diagnostics", + "description": "Collection of useful page vitals.", + "score": null, + "scoreDisplayMode": "informative", + "details": { + "type": "debugdata", + "items": [ + { + "numRequests": 1, + "numScripts": 0, + "numStylesheets": 0, + "numFonts": 0, + "numTasks": 41, + "numTasksOver10ms": 0, + "numTasksOver25ms": 0, + "numTasksOver50ms": 0, + "numTasksOver100ms": 0, + "numTasksOver500ms": 0, + "rtt": 95.815, + "throughput": 6127067.014654216, + "maxRtt": 95.815, + "maxServerLatency": 2.163000000000011, + "totalByteWeight": 880, + "totalTaskTime": 9.262999999999998, + "mainDocumentTransferSize": 880 + } + ] + } + } + } + } + ], + "screenshot": true, + "stats": null, + "github_repository": null, + "budget_page": null, + "declaration-a11y": { + "mention": null + }, + "declaration-rgpd": null, + "betagouv": null, + "ecoindex": null, + "sonarcloud": null, + "dsfr": null, + "summary": { + "testsslExpireSoon": false, + "testsslExpireDate": "2025-05-31T21:59:00.000Z", + "testsslGrade": "A", + "cookiesGrade": "A", + "cookiesCount": 0, + "trackersGrade": "A", + "trackersCount": 0, + "lighthouse_performance": null, + "lighthouse_performanceGrade": "F", + "lighthouse_accessibility": 0.68, + "lighthouse_accessibilityGrade": "B", + "lighthouse_best-practices": 0.93, + "lighthouse_best-practicesGrade": "A", + "lighthouse_seo": 0.55, + "lighthouse_seoGrade": "C", + "lighthouse_pwa": 0.33, + "lighthouse_pwaGrade": "E", + "declaration-a11y": "F" + } + }, + { + "404": null, + "url": "https://preventionete.sports.gouv.fr", + "category": "dnum", + "tags": [ + "sports" + ], + "http": null, + "updownio": null, + "nmap": null, + "dependabot": null, + "codescan": null, + "testssl": [ + { + "id": "service", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "HTTP" + }, + { + "id": "pre_128cipher", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "No 128 cipher limit bug" + }, + { + "id": "SSLv2", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "not offered" + }, + { + "id": "SSLv3", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "not offered" + }, + { + "id": "TLS1", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "not offered" + }, + { + "id": "TLS1_1", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "not offered" + }, + { + "id": "TLS1_2", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "offered" + }, + { + "id": "TLS1_3", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "offered with final" + }, + { + "id": "ALPN_HTTP2", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "h2" + }, + { + "id": "ALPN", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "http/1.1" + }, + { + "id": "cipherlist_NULL", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cwe": "CWE-327", + "finding": "not offered" + }, + { + "id": "cipherlist_aNULL", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cwe": "CWE-327", + "finding": "not offered" + }, + { + "id": "cipherlist_EXPORT", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cwe": "CWE-327", + "finding": "not offered" + }, + { + "id": "cipherlist_LOW", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cwe": "CWE-327", + "finding": "not offered" + }, + { + "id": "cipherlist_3DES_IDEA", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "cwe": "CWE-310", + "finding": "not offered" + }, + { + "id": "cipherlist_OBSOLETED", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "cwe": "CWE-310", + "finding": "not offered" + }, + { + "id": "cipherlist_STRONG_NOFS", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "not offered" + }, + { + "id": "cipherlist_STRONG_FS", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "offered" + }, + { + "id": "cipher_order-tls1_2", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "NOT a cipher order configured" + }, + { + "id": "cipher-tls1_2_xc030", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "TLSv1.2 xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + }, + { + "id": "cipher-tls1_2_x9f", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "TLSv1.2 x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + }, + { + "id": "cipher-tls1_2_xc02f", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "TLSv1.2 xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + }, + { + "id": "cipher-tls1_2_x9e", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "TLSv1.2 x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + }, + { + "id": "supportedciphers_TLSv1_2", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256" + }, + { + "id": "cipher_order", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "NOT a cipher order configured" + }, + { + "id": "FS", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "offered" + }, + { + "id": "FS_ciphers", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "FS_ECDHE_curves", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "prime256v1 secp384r1 secp521r1" + }, + { + "id": "TLS_extensions", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'next protocol/#13172' 'supported versions/#43' 'key share/#51' 'supported_groups/#10'" + }, + { + "id": "TLS_session_ticket", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "no -- no lifetime advertised" + }, + { + "id": "SSL_sessionID_support", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "yes" + }, + { + "id": "sessionresumption_ticket", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "not supported" + }, + { + "id": "sessionresumption_ID", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "supported" + }, + { + "id": "TLS_timestamp", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "random" + }, + { + "id": "certificate_compression", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "none" + }, + { + "id": "clientAuth", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "none" + }, + { + "id": "cert_numbers", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "1" + }, + { + "id": "cert_signatureAlgorithm", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "SHA256 with RSA" + }, + { + "id": "cert_keySize", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "RSA 2048 bits (exponent is 65537)" + }, + { + "id": "cert_keyUsage", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "Digital Signature, Key Encipherment" + }, + { + "id": "cert_extKeyUsage", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "TLS Web Server Authentication" + }, + { + "id": "cert_serialNumber", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "EBEDBB618D65BD46B5DA2AFD805997B2" + }, + { + "id": "cert_serialNumberLen", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "16" + }, + { + "id": "cert_fingerprintSHA1", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "4C161C7DA3A3BA96BC1A38C73D76A0231A74394C" + }, + { + "id": "cert_fingerprintSHA256", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "3BE2A1645EFEE42B10B4F2B64ED56743B49417D9606B4D5F2389064DDA5B3DAE" + }, + { + "id": "cert", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" + }, + { + "id": "cert_commonName", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "www.sports.gouv.fr" + }, + { + "id": "cert_commonName_wo_SNI", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "*.dedie.ate.info" + }, + { + "id": "cert_subjectAltName", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "back.sports.gouv.fr isoprod.back.sports.gouv.fr www.lebonsportpourmoi.sports.gouv.fr preventionete.sports.gouv.fr www.preventionhiver.sports.gouv.fr sports.gouv.fr www.developpement-durable.sports.gouv.fr lebonsportpourmoi.sports.gouv.fr www.sports.gouv.fr test.back.sports.gouv.fr developpement-durable.sports.gouv.fr www.preventionete.sports.gouv.fr preventionhiver.sports.gouv.fr isoprod.sports.gouv.fr test.sports.gouv.fr" + }, + { + "id": "cert_trust", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "Ok via SAN (SNI mandatory)" + }, + { + "id": "cert_chain_of_trust", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "passed." + }, + { + "id": "cert_certificatePolicies_EV", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "no" + }, + { + "id": "cert_expirationStatus", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "267 >= 60 days" + }, + { + "id": "cert_notBefore", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "2024-04-21 22:00" + }, + { + "id": "cert_notAfter", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "2025-04-21 21:59" + }, + { + "id": "cert_extlifeSpan", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "certificate has no extended life time according to browser forum" + }, + { + "id": "cert_eTLS", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "not present" + }, + { + "id": "cert_crlDistributionPoints", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" + }, + { + "id": "cert_ocspURL", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" + }, + { + "id": "OCSP_stapling", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "LOW", + "finding": "not offered" + }, + { + "id": "cert_mustStapleExtension", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "--" + }, + { + "id": "DNS_CAArecord", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "LOW", + "finding": "--" + }, + { + "id": "certificate_transparency", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "yes (certificate extension)" + }, + { + "id": "certs_countServer", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "2" + }, + { + "id": "certs_list_ordering_problem", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "no" + }, + { + "id": "cert_caIssuers", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "Certigna Services CA (DHIMYOTIS from FR)" + }, + { + "id": "intermediate_cert <#1>", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" + }, + { + "id": "intermediate_cert_fingerprintSHA256 <#1>", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" + }, + { + "id": "intermediate_cert_notBefore <#1>", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "2015-11-25 11:33" + }, + { + "id": "intermediate_cert_notAfter <#1>", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "2025-11-22 11:33" + }, + { + "id": "intermediate_cert_expiration <#1>", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "ok > 40 days" + }, + { + "id": "intermediate_cert_chain <#1>", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "Certigna Services CA <-- Certigna" + }, + { + "id": "intermediate_cert_badOCSP", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "intermediate certificate(s) is/are ok" + }, + { + "id": "HTTP_status_code", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "WARN", + "finding": "HTTP header request failed" + }, + { + "id": "scanProblem", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "WARN", + "finding": "HTTP header was repeatedly zero." + }, + { + "id": "heartbleed", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2014-0160", + "cwe": "CWE-119", + "finding": "not vulnerable, no heartbeat extension" + }, + { + "id": "CCS", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2014-0224", + "cwe": "CWE-310", + "finding": "not vulnerable" + }, + { + "id": "ticketbleed", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2016-9244", + "cwe": "CWE-200", + "finding": "no session ticket extension" + }, + { + "id": "ROBOT", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe": "CWE-203", + "finding": "not vulnerable, no RSA key transport cipher" + }, + { + "id": "secure_renego", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cwe": "CWE-310", + "finding": "supported" + }, + { + "id": "secure_client_renego", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2011-1473", + "cwe": "CWE-310", + "finding": "not vulnerable" + }, + { + "id": "CRIME_TLS", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2012-4929", + "cwe": "CWE-310", + "finding": "not vulnerable" + }, + { + "id": "BREACH", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2013-3587", + "cwe": "CWE-310", + "finding": "not vulnerable, no gzip/deflate/compress/br HTTP compression - only supplied '/' tested" + }, + { + "id": "POODLE_SSL", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2014-3566", + "cwe": "CWE-310", + "finding": "not vulnerable, no SSLv3" + }, + { + "id": "fallback_SCSV", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "no protocol below TLS 1.2 offered" + }, + { + "id": "SWEET32", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2016-2183 CVE-2016-6329", + "cwe": "CWE-327", + "finding": "not vulnerable" + }, + { + "id": "FREAK", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2015-0204", + "cwe": "CWE-310", + "finding": "not vulnerable" + }, + { + "id": "DROWN", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2016-0800 CVE-2016-0703", + "cwe": "CWE-310", + "finding": "not vulnerable on this host and port" + }, + { + "id": "DROWN_hint", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "cve": "CVE-2016-0800 CVE-2016-0703", + "cwe": "CWE-310", + "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=3BE2A1645EFEE42B10B4F2B64ED56743B49417D9606B4D5F2389064DDA5B3DAE" + }, + { + "id": "LOGJAM", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2015-4000", + "cwe": "CWE-310", + "finding": "not vulnerable, no DH EXPORT ciphers," + }, + { + "id": "LOGJAM-common_primes", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2015-4000", + "cwe": "CWE-310", + "finding": "--" + }, + { + "id": "BEAST", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2011-3389", + "cwe": "CWE-20", + "finding": "not vulnerable, no SSL3 or TLS1" + }, + { + "id": "LUCKY13", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2013-0169", + "cwe": "CWE-310", + "finding": "not vulnerable" + }, + { + "id": "winshock", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2014-6321", + "cwe": "CWE-94", + "finding": "not vulnerable" + }, + { + "id": "RC4", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "cve": "CVE-2013-2566 CVE-2015-2808", + "cwe": "CWE-310", + "finding": "not vulnerable" + }, + { + "id": "clientsimulation-android_60", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "No connection" + }, + { + "id": "clientsimulation-android_70", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + }, + { + "id": "clientsimulation-android_81", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + }, + { + "id": "clientsimulation-android_90", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" + }, + { + "id": "clientsimulation-android_X", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" + }, + { + "id": "clientsimulation-android_11", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" + }, + { + "id": "clientsimulation-android_12", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" + }, + { + "id": "clientsimulation-chrome_79_win10", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" + }, + { + "id": "clientsimulation-chrome_101_win10", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" + }, + { + "id": "clientsimulation-firefox_66_win81", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" + }, + { + "id": "clientsimulation-firefox_100_win10", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" + }, + { + "id": "clientsimulation-ie_6_xp", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "No connection" + }, + { + "id": "scanProblem", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "FATAL", + "finding": "repeated TCP connect problems, giving up" + }, + { + "id": "scanTime", + "ip": "preventionete.sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "WARN", + "finding": "Scan interrupted" + } + ], + "thirdparties": { + "trackers": [], + "cookies": [], + "headers": { + "accept-ranges": "bytes", + "cache-control": "max-age=86400, public", + "cache-tags": "HIT", + "content-encoding": "gzip", + "content-language": "fr", + "content-length": "14877", + "content-type": "text/html; charset=UTF-8", + "date": "Sun, 28 Jul 2024 05:21:28 GMT", + "etag": "W/\"1722111268\"", + "expires": "Sun, 19 Nov 1978 05:00:00 GMT", + "last-modified": "Sat, 27 Jul 2024 20:14:28 GMT", + "server": "nginx", + "strict-transport-security": "max-age=31536000; includeSubdomains", + "vary": "Accept-Encoding", + "x-cache": "HIT", + "x-cache-age": "32817", + "x-cache-hits": "18", + "x-cache-ttl": "86400.000", + "x-cacheable": "YES", + "x-content-type-options": "nosniff", + "x-drupal-dynamic-cache": "MISS", + "x-frame-options": "SAMEORIGIN", + "x-ua-compatible": "IE=edge" + }, + "endpoints": [ + { + "hostname": "preventionete.sports.gouv.fr", + "ip": "185.75.143.93", + "geoip": { + "continent": { + "code": "EU", + "geoname_id": 6255148, + "names": { + "de": "Europa", + "en": "Europe", + "es": "Europa", + "fr": "Europe", + "ja": "ヨーロッパ", + "pt-BR": "Europa", + "ru": "Европа", + "zh-CN": "欧洲" + } + }, + "country": { + "geoname_id": 3017382, + "is_in_european_union": true, + "iso_code": "FR", + "names": { + "de": "Frankreich", + "en": "France", + "es": "Francia", + "fr": "France", + "ja": "フランス共和国", + "pt-BR": "França", + "ru": "Франция", + "zh-CN": "法国" + } + }, + "location": { + "accuracy_radius": 500, + "latitude": 48.8582, + "longitude": 2.3387, + "time_zone": "Europe/Paris" + }, + "registered_country": { + "geoname_id": 3017382, + "is_in_european_union": true, + "iso_code": "FR", + "names": { + "de": "Frankreich", + "en": "France", + "es": "Francia", + "fr": "France", + "ja": "フランス共和国", + "pt-BR": "França", + "ru": "Франция", + "zh-CN": "法国" + } + } + } + } + ] + }, + "wappalyzer": { + "urls": { + "https://preventionete.sports.gouv.fr/": { + "status": 301, + "error": "net::ERR_BLOCKED_BY_CLIENT at https://preventionete.sports.gouv.fr/ (https://preventionete.sports.gouv.fr/)" + } + }, + "technologies": [ + { + "slug": "nginx", + "name": "Nginx", + "description": "Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.", + "confidence": 100, + "version": null, + "icon": "Nginx.svg", + "website": "https://nginx.org/en", + "cpe": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 22, + "slug": "web-servers", + "name": "Web servers" + }, + { + "id": 64, + "slug": "reverse-proxies", + "name": "Reverse proxies" + } + ], + "rootPath": true + }, + { + "slug": "hsts", + "name": "HSTS", + "description": "HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.", + "confidence": 100, + "version": null, + "icon": "default.svg", + "website": "https://www.rfc-editor.org/rfc/rfc6797#section-6.1", + "cpe": null, + "categories": [ + { + "id": 16, + "slug": "security", + "name": "Security" + } + ], + "rootPath": true + } + ] + }, + "zap": null, + "nuclei": [], + "lhr": [ + { + "requestedUrl": "https://preventionete.sports.gouv.fr/", + "finalUrl": "https://www.sports.gouv.fr/pratiquer-l-ete-100", + "fetchTime": "2024-07-28T05:21:06.425Z", + "runWarnings": [ + "The page may not be loading as expected because your test URL (https://preventionete.sports.gouv.fr/) was redirected to https://www.sports.gouv.fr/pratiquer-l-ete-100. Try testing the second URL directly." + ], + "categories": { + "performance": { + "title": "Performance", + "id": "performance", + "score": 0.63 + }, + "accessibility": { + "title": "Accessibility", + "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", + "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", + "id": "accessibility", + "score": 0.92 + }, + "best-practices": { + "title": "Best Practices", + "id": "best-practices", + "score": 0.93 + }, + "seo": { + "title": "SEO", + "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", + "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", + "id": "seo", + "score": 0.86 + }, + "pwa": { + "title": "Progressive Web App", + "description": "These checks validate the aspects of a Progressive Web App. [Learn more](https://developers.google.com/web/progressive-web-apps/checklist).", + "manualDescription": "These checks are required by the baseline [PWA Checklist](https://developers.google.com/web/progressive-web-apps/checklist) but are not automatically checked by Lighthouse. They do not affect your score but it's important that you verify them manually.", + "id": "pwa", + "score": 0.67 + } + }, + "audits": { + "metrics": { + "id": "metrics", + "title": "Metrics", + "description": "Collects all available metrics.", + "score": null, + "scoreDisplayMode": "informative", + "numericValue": 3566, + "numericUnit": "millisecond", + "details": { + "type": "debugdata", + "items": [ + { + "firstContentfulPaint": 2436, + "firstMeaningfulPaint": 2436, + "largestContentfulPaint": 24086, + "firstCPUIdle": 4406, + "interactive": 3566, + "speedIndex": 6325, + "estimatedInputLatency": 13, + "totalBlockingTime": 55, + "maxPotentialFID": 94, + "cumulativeLayoutShift": 0.0034698350694444447, + "cumulativeLayoutShiftAllFrames": 0, + "observedTimeOrigin": 0, + "observedTimeOriginTs": 328134419, + "observedNavigationStart": 0, + "observedNavigationStartTs": 328134419, + "observedFirstPaint": 819, + "observedFirstPaintTs": 328953812, + "observedFirstContentfulPaint": 819, + "observedFirstContentfulPaintTs": 328953812, + "observedFirstMeaningfulPaint": 819, + "observedFirstMeaningfulPaintTs": 328953812, + "observedLargestContentfulPaint": 1291, + "observedLargestContentfulPaintTs": 329425555, + "observedTraceEnd": 2379, + "observedTraceEndTs": 330513806, + "observedLoad": 1234, + "observedLoadTs": 329368843, + "observedDomContentLoaded": 892, + "observedDomContentLoadedTs": 329026389, + "observedCumulativeLayoutShift": 0.0034698350694444447, + "observedCumulativeLayoutShiftAllFrames": 0, + "observedFirstVisualChange": 819, + "observedFirstVisualChangeTs": 328953419, + "observedLastVisualChange": 1902, + "observedLastVisualChangeTs": 330036419, + "observedSpeedIndex": 1386, + "observedSpeedIndexTs": 329520819 + }, + { + "lcpInvalidated": false + } + ] + } + }, + "diagnostics": { + "id": "diagnostics", + "title": "Diagnostics", + "description": "Collection of useful page vitals.", + "score": null, + "scoreDisplayMode": "informative", + "details": { + "type": "debugdata", + "items": [ + { + "numRequests": 32, + "numScripts": 6, + "numStylesheets": 3, + "numFonts": 4, + "numTasks": 892, + "numTasksOver10ms": 8, + "numTasksOver25ms": 2, + "numTasksOver50ms": 0, + "numTasksOver100ms": 0, + "numTasksOver500ms": 0, + "rtt": 87.79899999999999, + "throughput": 64888227.161559954, + "maxRtt": 87.79899999999999, + "maxServerLatency": 6.453000000000003, + "totalByteWeight": 4423683, + "totalTaskTime": 293.9189999999993, + "mainDocumentTransferSize": 15367 + } + ] + } + } + } + } + ], + "screenshot": true, + "stats": null, + "github_repository": null, + "budget_page": null, + "declaration-a11y": { + "mention": "Accessibilité : partiellement conforme", + "declarationUrl": "https://preventionete.sports.gouv.fr/accessibilite-partiellement-conforme-1826" + }, + "declaration-rgpd": null, + "betagouv": null, + "ecoindex": null, + "sonarcloud": null, + "dsfr": null, + "summary": { + "cookiesGrade": "A", + "cookiesCount": 0, + "trackersGrade": "A", + "trackersCount": 0, + "lighthouse_performance": 0.63, + "lighthouse_performanceGrade": "C", + "lighthouse_accessibility": 0.92, + "lighthouse_accessibilityGrade": "A", + "lighthouse_best-practices": 0.93, + "lighthouse_best-practicesGrade": "A", + "lighthouse_seo": 0.86, + "lighthouse_seoGrade": "A", + "lighthouse_pwa": 0.67, + "lighthouse_pwaGrade": "B", + "declaration-a11y": "B" + } + }, + { + "404": null, + "url": "https://preventionhiver.sports.gouv.fr", + "category": "dnum", + "tags": [ + "sports" + ], + "http": null, + "updownio": null, + "nmap": null, + "dependabot": null, + "codescan": null, + "testssl": null, + "thirdparties": { + "trackers": [], + "cookies": [], + "headers": { + "accept-ranges": "bytes", + "cache-control": "max-age=86400, public", + "cache-tags": "HIT", + "content-encoding": "gzip", + "content-language": "fr", + "content-length": "15406", + "content-type": "text/html; charset=UTF-8", + "date": "Sun, 28 Jul 2024 05:26:55 GMT", + "etag": "W/\"1722128481\"", + "expires": "Sun, 19 Nov 1978 05:00:00 GMT", + "last-modified": "Sun, 28 Jul 2024 01:01:21 GMT", + "server": "nginx", + "strict-transport-security": "max-age=31536000; includeSubdomains", + "vary": "Accept-Encoding", + "x-cache": "HIT", + "x-cache-age": "15932", + "x-cache-hits": "6", + "x-cache-ttl": "86400.000", + "x-cacheable": "YES", + "x-content-type-options": "nosniff", + "x-drupal-dynamic-cache": "MISS", + "x-frame-options": "SAMEORIGIN", + "x-ua-compatible": "IE=edge" + }, + "endpoints": [ + { + "hostname": "preventionhiver.sports.gouv.fr", + "ip": "185.75.143.93", + "geoip": { + "continent": { + "code": "EU", + "geoname_id": 6255148, + "names": { + "de": "Europa", + "en": "Europe", + "es": "Europa", + "fr": "Europe", + "ja": "ヨーロッパ", + "pt-BR": "Europa", + "ru": "Европа", + "zh-CN": "欧洲" + } + }, + "country": { + "geoname_id": 3017382, + "is_in_european_union": true, + "iso_code": "FR", + "names": { + "de": "Frankreich", + "en": "France", + "es": "Francia", + "fr": "France", + "ja": "フランス共和国", + "pt-BR": "França", + "ru": "Франция", + "zh-CN": "法国" + } + }, + "location": { + "accuracy_radius": 500, + "latitude": 48.8582, + "longitude": 2.3387, + "time_zone": "Europe/Paris" + }, + "registered_country": { + "geoname_id": 3017382, + "is_in_european_union": true, + "iso_code": "FR", + "names": { + "de": "Frankreich", + "en": "France", + "es": "Francia", + "fr": "France", + "ja": "フランス共和国", + "pt-BR": "França", + "ru": "Франция", + "zh-CN": "法国" + } + } + } + } + ] + }, + "wappalyzer": { + "urls": { + "https://preventionhiver.sports.gouv.fr/": { + "status": 301, + "error": "net::ERR_BLOCKED_BY_CLIENT at https://preventionhiver.sports.gouv.fr/ (https://preventionhiver.sports.gouv.fr/)" + } + }, + "technologies": [ + { + "slug": "nginx", + "name": "Nginx", + "description": "Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.", + "confidence": 100, + "version": null, + "icon": "Nginx.svg", + "website": "https://nginx.org/en", + "cpe": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 22, + "slug": "web-servers", + "name": "Web servers" + }, + { + "id": 64, + "slug": "reverse-proxies", + "name": "Reverse proxies" + } + ], + "rootPath": true + }, + { + "slug": "hsts", + "name": "HSTS", + "description": "HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.", + "confidence": 100, + "version": null, + "icon": "default.svg", + "website": "https://www.rfc-editor.org/rfc/rfc6797#section-6.1", + "cpe": null, + "categories": [ + { + "id": 16, + "slug": "security", + "name": "Security" + } + ], + "rootPath": true + } + ] + }, + "zap": null, + "nuclei": [], + "lhr": [ + { + "requestedUrl": "https://preventionhiver.sports.gouv.fr/", + "finalUrl": "https://www.sports.gouv.fr/pratiquer-l-hiver-102", + "fetchTime": "2024-07-28T05:25:31.649Z", + "runWarnings": [ + "The page may not be loading as expected because your test URL (https://preventionhiver.sports.gouv.fr/) was redirected to https://www.sports.gouv.fr/pratiquer-l-hiver-102. Try testing the second URL directly." + ], + "categories": { + "performance": { + "title": "Performance", + "id": "performance", + "score": 0.37 + }, + "accessibility": { + "title": "Accessibility", + "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", + "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", + "id": "accessibility", + "score": 0.92 + }, + "best-practices": { + "title": "Best Practices", + "id": "best-practices", + "score": 0.87 + }, + "seo": { + "title": "SEO", + "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", + "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", + "id": "seo", + "score": 0.93 + }, + "pwa": { + "title": "Progressive Web App", + "description": "These checks validate the aspects of a Progressive Web App. [Learn more](https://developers.google.com/web/progressive-web-apps/checklist).", + "manualDescription": "These checks are required by the baseline [PWA Checklist](https://developers.google.com/web/progressive-web-apps/checklist) but are not automatically checked by Lighthouse. They do not affect your score but it's important that you verify them manually.", + "id": "pwa", + "score": 0.67 + } + }, + "audits": { + "metrics": { + "id": "metrics", + "title": "Metrics", + "description": "Collects all available metrics.", + "score": null, + "scoreDisplayMode": "informative", + "numericValue": 11235, + "numericUnit": "millisecond", + "details": { + "type": "debugdata", + "items": [ + { + "firstContentfulPaint": 2434, + "firstMeaningfulPaint": 2434, + "largestContentfulPaint": 17790, + "firstCPUIdle": 4860, + "interactive": 11235, + "speedIndex": 6717, + "estimatedInputLatency": 96, + "totalBlockingTime": 695, + "maxPotentialFID": 473, + "cumulativeLayoutShift": 0.006963541666666667, + "cumulativeLayoutShiftAllFrames": 0, + "observedTimeOrigin": 0, + "observedTimeOriginTs": 564222572, + "observedNavigationStart": 0, + "observedNavigationStartTs": 564222572, + "observedFirstPaint": 1224, + "observedFirstPaintTs": 565446934, + "observedFirstContentfulPaint": 1224, + "observedFirstContentfulPaintTs": 565446934, + "observedFirstMeaningfulPaint": 1224, + "observedFirstMeaningfulPaintTs": 565446934, + "observedLargestContentfulPaint": 2120, + "observedLargestContentfulPaintTs": 566342081, + "observedTraceEnd": 3172, + "observedTraceEndTs": 567394472, + "observedLoad": 1539, + "observedLoadTs": 565761257, + "observedDomContentLoaded": 1342, + "observedDomContentLoadedTs": 565564194, + "observedCumulativeLayoutShift": 0.006963541666666667, + "observedCumulativeLayoutShiftAllFrames": 0, + "observedFirstVisualChange": 1221, + "observedFirstVisualChangeTs": 565443572, + "observedLastVisualChange": 2371, + "observedLastVisualChangeTs": 566593572, + "observedSpeedIndex": 1955, + "observedSpeedIndexTs": 566177519 + }, + { + "lcpInvalidated": false + } + ] + } + }, + "diagnostics": { + "id": "diagnostics", + "title": "Diagnostics", + "description": "Collection of useful page vitals.", + "score": null, + "scoreDisplayMode": "informative", + "details": { + "type": "debugdata", + "items": [ + { + "numRequests": 32, + "numScripts": 6, + "numStylesheets": 3, + "numFonts": 4, + "numTasks": 898, + "numTasksOver10ms": 7, + "numTasksOver25ms": 5, + "numTasksOver50ms": 2, + "numTasksOver100ms": 1, + "numTasksOver500ms": 0, + "rtt": 139.816, + "throughput": 32972192.70732207, + "maxRtt": 139.816, + "maxServerLatency": 5.658999999999992, + "totalByteWeight": 3068390, + "totalTaskTime": 452.25799999999725, + "mainDocumentTransferSize": 15896 + } + ] + } + } + } + } + ], + "screenshot": true, + "stats": null, + "github_repository": null, + "budget_page": null, + "declaration-a11y": { + "mention": "Accessibilité : partiellement conforme", + "declarationUrl": "https://preventionhiver.sports.gouv.fr/accessibilite-partiellement-conforme-1826" + }, + "declaration-rgpd": null, + "betagouv": null, + "ecoindex": null, + "sonarcloud": null, + "dsfr": null, + "summary": { + "cookiesGrade": "A", + "cookiesCount": 0, + "trackersGrade": "A", + "trackersCount": 0, + "lighthouse_performance": 0.37, + "lighthouse_performanceGrade": "D", + "lighthouse_accessibility": 0.92, + "lighthouse_accessibilityGrade": "A", + "lighthouse_best-practices": 0.87, + "lighthouse_best-practicesGrade": "A", + "lighthouse_seo": 0.93, + "lighthouse_seoGrade": "A", + "lighthouse_pwa": 0.67, + "lighthouse_pwaGrade": "B", + "declaration-a11y": "B" + } + }, + { + "404": null, + "url": "https://publisocial.fr", + "category": "dnum", + "tags": [ + "social" + ], + "http": null, + "updownio": null, + "nmap": null, + "dependabot": null, + "codescan": null, + "testssl": [ + { + "id": "service", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "HTTP" + }, + { + "id": "pre_128cipher", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "No 128 cipher limit bug" + }, + { + "id": "SSLv2", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "not offered" + }, + { + "id": "SSLv3", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "not offered" + }, + { + "id": "TLS1", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "not offered" + }, + { + "id": "TLS1_1", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "not offered" + }, + { + "id": "TLS1_2", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "offered" + }, + { + "id": "TLS1_3", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "not offered + downgraded to weaker protocol" + }, + { + "id": "ALPN", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "not offered" + }, + { + "id": "cipherlist_NULL", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cwe": "CWE-327", + "finding": "not offered" + }, + { + "id": "cipherlist_aNULL", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cwe": "CWE-327", + "finding": "not offered" + }, + { + "id": "cipherlist_EXPORT", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cwe": "CWE-327", + "finding": "not offered" + }, + { + "id": "cipherlist_LOW", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cwe": "CWE-327", + "finding": "not offered" + }, + { + "id": "cipherlist_3DES_IDEA", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "cwe": "CWE-310", + "finding": "not offered" + }, + { + "id": "cipherlist_OBSOLETED", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "cwe": "CWE-310", + "finding": "not offered" + }, + { + "id": "cipherlist_STRONG_NOFS", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "not offered" + }, + { + "id": "cipherlist_STRONG_FS", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "offered" + }, + { + "id": "cipher_order-tls1_2", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "server" + }, + { + "id": "cipherorder_TLSv1_2", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "cipher_order", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "server" + }, + { + "id": "FS", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "offered" + }, + { + "id": "FS_ciphers", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "FS_ECDHE_curves", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "prime256v1 secp384r1" + }, + { + "id": "TLS_extensions", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'extended master secret/#23'" + }, + { + "id": "TLS_session_ticket", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "no -- no lifetime advertised" + }, + { + "id": "SSL_sessionID_support", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "yes" + }, + { + "id": "sessionresumption_ticket", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "not supported" + }, + { + "id": "sessionresumption_ID", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "supported" + }, + { + "id": "TLS_timestamp", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "random" + }, + { + "id": "cert_compression", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "N/A" + }, + { + "id": "clientAuth", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "none" + }, + { + "id": "cert_numbers", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "1" + }, + { + "id": "cert_signatureAlgorithm", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "SHA256 with RSA" + }, + { + "id": "cert_keySize", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "RSA 3072 bits (exponent is 65537)" + }, + { + "id": "cert_keyUsage", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "Digital Signature, Key Encipherment" + }, + { + "id": "cert_extKeyUsage", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLS Web Server Authentication" + }, + { + "id": "cert_serialNumber", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "011D347BE19B50B742A45D5F3212E364" + }, + { + "id": "cert_serialNumberLen", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "16" + }, + { + "id": "cert_fingerprintSHA1", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "3AFFE50B6127A7F16DF8EC4E006F6C47549B069F" + }, + { + "id": "cert_fingerprintSHA256", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "465B507786D4923EC305E1ECC3C83AF45E809A1FBCE9A9CF7797F750815DEEB1" + }, + { + "id": "cert", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" + }, + { + "id": "cert_commonName", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "www.publisocial.fr" + }, + { + "id": "cert_commonName_wo_SNI", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "www.publisocial.fr" + }, + { + "id": "cert_subjectAltName", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "publisocial.fr www.publisocial.fr" + }, + { + "id": "cert_trust", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "Ok via SAN (same w/o SNI)" + }, + { + "id": "cert_chain_of_trust", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "passed." + }, + { + "id": "cert_certificatePolicies_EV", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "no" + }, + { + "id": "cert_expirationStatus", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "351 >= 60 days" + }, + { + "id": "cert_notBefore", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "2024-06-12 22:00" + }, + { + "id": "cert_notAfter", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "2025-07-14 21:59" + }, + { + "id": "cert_extlifeSpan", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "certificate has no extended life time according to browser forum" + }, + { + "id": "cert_eTLS", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "not present" + }, + { + "id": "cert_crlDistributionPoints", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "http://crl.certigna.fr/servicesca.crl http://crl.dhimyotis.com/servicesca.crl" + }, + { + "id": "cert_ocspURL", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "http://servicesca.ocsp.dhimyotis.com http://servicesca.ocsp.certigna.fr" + }, + { + "id": "OCSP_stapling", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "LOW", + "finding": "not offered" + }, + { + "id": "cert_mustStapleExtension", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "--" + }, + { + "id": "DNS_CAArecord", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "LOW", + "finding": "--" + }, + { + "id": "certificate_transparency", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "yes (certificate extension)" + }, + { + "id": "certs_countServer", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "2" + }, + { + "id": "certs_list_ordering_problem", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "no" + }, + { + "id": "cert_caIssuers", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "Certigna Services CA (DHIMYOTIS from FR)" + }, + { + "id": "intermediate_cert <#1>", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" + }, + { + "id": "intermediate_cert_fingerprintSHA256 <#1>", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" + }, + { + "id": "intermediate_cert_notBefore <#1>", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "2015-11-25 11:33" + }, + { + "id": "intermediate_cert_notAfter <#1>", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "2025-11-22 11:33" + }, + { + "id": "intermediate_cert_expiration <#1>", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "ok > 40 days" + }, + { + "id": "intermediate_cert_chain <#1>", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "Certigna Services CA <-- Certigna" + }, + { + "id": "intermediate_cert_badOCSP", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "intermediate certificate(s) is/are ok" + }, + { + "id": "insecure_redirect", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "HIGH", + "finding": "Redirect to insecure URL: 'http://www.publisocial.fr/'" + }, + { + "id": "HTTP_status_code", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "301 Moved Permanently ('/')" + }, + { + "id": "HTTP_clock_skew", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "-1 seconds from localtime" + }, + { + "id": "HTTP_headerTime", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "1722145041" + }, + { + "id": "HSTS_time", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "365 days (=31536000 seconds) > 15552000 seconds" + }, + { + "id": "HSTS_subdomains", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "includes subdomains" + }, + { + "id": "HSTS_preload", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "domain is NOT marked for preloading" + }, + { + "id": "HPKP", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "No support for HTTP Public Key Pinning" + }, + { + "id": "banner_server", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "No Server banner line in header, interesting!" + }, + { + "id": "banner_application", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "No application banner found" + }, + { + "id": "cookie_count", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "1 at '/' (30x detected, better try target URL of 30x)" + }, + { + "id": "cookie_secure", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "All (1) at '/' marked as secure" + }, + { + "id": "cookie_httponly", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "All (1) at '/' marked as HttpOnly (30x detected, better try target URL of 30x)" + }, + { + "id": "X-Frame-Options", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "sameorigin" + }, + { + "id": "X-Content-Type-Options", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "nosniff" + }, + { + "id": "Content-Security-Policy", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "upgrade-insecure-requests;" + }, + { + "id": "X-XSS-Protection", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "1; mode=block" + }, + { + "id": "Referrer-Policy", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "no-referrer-when-downgrade" + }, + { + "id": "banner_reverseproxy", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "cwe": "CWE-200", + "finding": "--" + }, + { + "id": "heartbleed", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2014-0160", + "cwe": "CWE-119", + "finding": "not vulnerable, no heartbeat extension" + }, + { + "id": "CCS", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2014-0224", + "cwe": "CWE-310", + "finding": "not vulnerable" + }, + { + "id": "ticketbleed", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2016-9244", + "cwe": "CWE-200", + "finding": "no session ticket extension" + }, + { + "id": "ROBOT", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe": "CWE-203", + "finding": "not vulnerable, no RSA key transport cipher" + }, + { + "id": "secure_renego", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cwe": "CWE-310", + "finding": "supported" + }, + { + "id": "secure_client_renego", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2011-1473", + "cwe": "CWE-310", + "finding": "not vulnerable, mitigated" + }, + { + "id": "CRIME_TLS", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2012-4929", + "cwe": "CWE-310", + "finding": "not vulnerable" + }, + { + "id": "BREACH", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2013-3587", + "cwe": "CWE-310", + "finding": "not vulnerable, no gzip/deflate/compress/br HTTP compression - only supplied '/' tested" + }, + { + "id": "POODLE_SSL", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2014-3566", + "cwe": "CWE-310", + "finding": "not vulnerable, no SSLv3" + }, + { + "id": "fallback_SCSV", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "no protocol below TLS 1.2 offered" + }, + { + "id": "SWEET32", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2016-2183 CVE-2016-6329", + "cwe": "CWE-327", + "finding": "not vulnerable" + }, + { + "id": "FREAK", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2015-0204", + "cwe": "CWE-310", + "finding": "not vulnerable" + }, + { + "id": "DROWN", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2016-0800 CVE-2016-0703", + "cwe": "CWE-310", + "finding": "not vulnerable on this host and port" + }, + { + "id": "DROWN_hint", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "cve": "CVE-2016-0800 CVE-2016-0703", + "cwe": "CWE-310", + "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=465B507786D4923EC305E1ECC3C83AF45E809A1FBCE9A9CF7797F750815DEEB1" + }, + { + "id": "LOGJAM", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2015-4000", + "cwe": "CWE-310", + "finding": "not vulnerable, no DH EXPORT ciphers," + }, + { + "id": "LOGJAM-common_primes", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2015-4000", + "cwe": "CWE-310", + "finding": "no DH key with <= TLS 1.2" + }, + { + "id": "BEAST", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2011-3389", + "cwe": "CWE-20", + "finding": "not vulnerable, no SSL3 or TLS1" + }, + { + "id": "LUCKY13", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2013-0169", + "cwe": "CWE-310", + "finding": "not vulnerable" + }, + { + "id": "winshock", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2014-6321", + "cwe": "CWE-94", + "finding": "not vulnerable" + }, + { + "id": "RC4", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "cve": "CVE-2013-2566 CVE-2015-2808", + "cwe": "CWE-310", + "finding": "not vulnerable" + }, + { + "id": "clientsimulation-android_60", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + }, + { + "id": "clientsimulation-android_70", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-android_81", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-android_90", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-android_X", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-android_11", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-android_12", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-chrome_79_win10", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-chrome_101_win10", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-firefox_66_win81", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-firefox_100_win10", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-ie_6_xp", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "No connection" + }, + { + "id": "clientsimulation-ie_8_win7", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "No connection" + }, + { + "id": "clientsimulation-ie_8_xp", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "No connection" + }, + { + "id": "clientsimulation-ie_11_win7", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "No connection" + }, + { + "id": "clientsimulation-ie_11_win81", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "No connection" + }, + { + "id": "clientsimulation-ie_11_winphone81", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "No connection" + }, + { + "id": "clientsimulation-ie_11_win10", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-edge_15_win10", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-edge_101_win10_21h2", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-safari_121_ios_122", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-safari_130_osx_10146", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-safari_154_osx_1231", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-java_7u25", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "No connection" + }, + { + "id": "clientsimulation-java_8u161", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-java1102", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-java1703", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-go_1178", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-libressl_283", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-openssl_102e", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-openssl_110l", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-openssl_111d", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-openssl_303", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-apple_mail_16_0", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-thunderbird_91_9", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "rating_spec", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" + }, + { + "id": "rating_doc", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" + }, + { + "id": "protocol_support_score", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "100" + }, + { + "id": "protocol_support_score_weighted", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "30" + }, + { + "id": "key_exchange_score", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "90" + }, + { + "id": "key_exchange_score_weighted", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "27" + }, + { + "id": "cipher_strength_score", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "60" + }, + { + "id": "cipher_strength_score_weighted", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "24" + }, + { + "id": "final_score", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "81" + }, + { + "id": "overall_grade", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "OK", + "finding": "A+" + }, + { + "id": "scanTime", + "ip": "publisocial.fr/185.194.82.163", + "port": "443", + "severity": "INFO", + "finding": "90" + } + ], + "thirdparties": { + "trackers": [ + { + "type": "unknown", + "url": "http://www.publisocial.fr/" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-includes/css/dist/block-library/style.min.css?ver=5.3.4" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.5" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/plugins/pe-easy-slider/css/animate.css?ver=5.3.4" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/plugins/pe-easy-slider/css/pe-easy-slider.css?ver=5.3.4" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/plugins/wp-accessibility/toolbar/fonts/css/a11y-toolbar.css?ver=1.6.0" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/plugins/wp-accessibility/toolbar/css/a11y.css?ver=1.6.0" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/plugins/wp-accessibility/toolbar/css/a11y-fontsize-alt.css?ver=1.6.0" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/plugins/wp-accessibility/css/wpa-style.css?ver=1.6.0" + }, + { + "type": "google fonts", + "url": "https://fonts.googleapis.com/css?family=Merriweather%3A400%2C700%2C900%2C400italic%2C700italic%2C900italic%7CMontserrat%3A400%2C700%7CInconsolata%3A400&subset=latin%2Clatin-ext", + "details": { + "id": "google fonts", + "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" + } + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/themes/twentysixteen/genericons/genericons.css?ver=3.4.1" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/themes/twentysixteen/style.css?ver=5.3.4" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/plugins/favorites/assets/css/favorites.css?ver=2.3.2" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/plugins/pe-easy-slider/js/bootstrap.min.js?ver=3.2.0" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/plugins/favorites/assets/js/favorites.min.js?ver=2.3.2" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.5" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/plugins/wp-accessibility/js/wpa-toolbar.js?ver=1.1" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/plugins/wp-accessibility/toolbar/js/a11y.js?ver=1.0" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/plugins/wp-accessibility/js/longdesc.button.js?ver=1.6.0" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/themes/twentysixteen/js/skip-link-focus-fix.js?ver=20160816" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/themes/twentysixteen/js/functions.js?ver=20160816" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/plugins/wp-accessibility/js/wp-accessibility.js?ver=1.0.3" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-includes/js/wp-embed.min.js?ver=5.3.4" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/uploads/2019/02/cropped-4205122590_f93c9f639a_b-768x147.jpg" + }, + { + "type": "unknown", + "url": "https://0.gravatar.com/avatar/35b9fb3e3348036a845a49cb7720eb25?s=49&d=mm&r=g" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/uploads/2024/01/logo-HCFEA-Couleur-RVB-768x245.jpg" + }, + { + "type": "unknown", + "url": "https://0.gravatar.com/avatar/c94996131ad5bd6c7c1b56445bac0e0d?s=49&d=mm&r=g" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/uploads/2021/05/logo-HCFEA-768x288.jpg" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-content/uploads/2021/05/ReseauBdPok-768x286.jpg" + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-includes/js/wp-emoji-release.min.js?ver=5.3.4" + }, + { + "type": "google analytics", + "url": "https://www.google-analytics.com/analytics.js", + "details": { + "id": "google analytics", + "message": "Use hosted Matomo instance" + } + }, + { + "type": "google fonts", + "url": "https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2", + "details": { + "id": "google fonts", + "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" + } + }, + { + "type": "google fonts", + "url": "https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2", + "details": { + "id": "google fonts", + "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" + } + }, + { + "type": "google fonts", + "url": "https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2", + "details": { + "id": "google fonts", + "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" + } + }, + { + "type": "google fonts", + "url": "https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZOf-I.woff2", + "details": { + "id": "google fonts", + "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" + } + }, + { + "type": "google fonts", + "url": "https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2", + "details": { + "id": "google fonts", + "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" + } + }, + { + "type": "google fonts", + "url": "https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2", + "details": { + "id": "google fonts", + "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" + } + }, + { + "type": "google fonts", + "url": "https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2", + "details": { + "id": "google fonts", + "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" + } + }, + { + "type": "google fonts", + "url": "https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZOf-I.woff2", + "details": { + "id": "google fonts", + "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" + } + }, + { + "type": "google fonts", + "url": "https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZWMf6.woff2", + "details": { + "id": "google fonts", + "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" + } + }, + { + "type": "google fonts", + "url": "https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZWMf6.woff2", + "details": { + "id": "google fonts", + "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" + } + }, + { + "type": "google analytics", + "url": "https://www.google-analytics.com/plugins/ua/linkid.js", + "details": { + "id": "google analytics", + "message": "Use hosted Matomo instance" + } + }, + { + "type": "google analytics", + "url": "https://www.google-analytics.com/j/collect?v=1&_v=j101&a=2110187121&t=pageview&_s=1&dl=https%3A%2F%2Fwww.publisocial.fr%2F&ul=en-us&de=UTF-8&dt=Publisocial%20-%20Portail%20des%20publications%20institutionnelles%20et%20scientifiques&sd=24-bit&sr=800x600&vp=800x600&je=0&_u=KGBAAEIhAAAAACAAI~&jid=279646944&gjid=1036676769&cid=1438047500.1722144983&tid=G-10PFPKPSDG&_gid=290162440.1722144983&_r=1&_slc=1&z=915882721", + "details": { + "id": "google analytics", + "message": "Use hosted Matomo instance" + } + }, + { + "type": "unknown", + "url": "https://www.publisocial.fr/wp-admin/admin-ajax.php" + } + ], + "cookies": [ + { + "name": "_gat", + "value": "1", + "domain": ".publisocial.fr", + "path": "/", + "expires": 1722145043, + "size": 5, + "httpOnly": false, + "secure": false, + "session": false, + "sameParty": false, + "sourceScheme": "Secure", + "sourcePort": 443 + }, + { + "name": "_gid", + "value": "GA1.2.290162440.1722144983", + "domain": ".publisocial.fr", + "path": "/", + "expires": 1722231383, + "size": 30, + "httpOnly": false, + "secure": false, + "session": false, + "sameParty": false, + "sourceScheme": "Secure", + "sourcePort": 443 + }, + { + "name": "_ga", + "value": "GA1.2.1438047500.1722144983", + "domain": ".publisocial.fr", + "path": "/", + "expires": 1785216983, + "size": 30, + "httpOnly": false, + "secure": false, + "session": false, + "sameParty": false, + "sourceScheme": "Secure", + "sourcePort": 443 + }, + { + "name": "BIGipServerpool-drees-rfas.cegedim.cloud-HTTP", + "value": "!6et7TLSoiXr08JBWDPlD0yXzT0UGhqfDDWYT9a1CM8yYmKaUkzHSHOCgidkYr9xSMB6PSttLh2Pes+vo8uKajpUC8gk=", + "domain": "www.publisocial.fr", + "path": "/", + "expires": -1, + "size": 138, + "httpOnly": true, + "secure": true, + "session": true, + "sameParty": false, + "sourceScheme": "Secure", + "sourcePort": 443 + } + ], + "headers": { + "connection": "Keep-Alive", + "content-encoding": "gzip", + "content-length": "23862", + "content-security-policy": "upgrade-insecure-requests;", + "content-type": "text/html; charset=UTF-8", + "date": "Sun, 28 Jul 2024 05:36:22 GMT", + "keep-alive": "timeout=2, max=100", + "link": "; rel=\"https://api.w.org/\"", + "referrer-policy": "no-referrer-when-downgrade", + "set-cookie": "BIGipServerpool-drees-rfas.cegedim.cloud-HTTP=!6et7TLSoiXr08JBWDPlD0yXzT0UGhqfDDWYT9a1CM8yYmKaUkzHSHOCgidkYr9xSMB6PSttLh2Pes+vo8uKajpUC8gk=; path=/; Httponly; Secure", + "strict-transport-security": "max-age=31536000; includeSubDomains", + "vary": "Accept-Encoding", + "x-content-type-options": "nosniff", + "x-frame-options": "sameorigin", + "x-xss-protection": "1; mode=block" + }, + "endpoints": [ + { + "hostname": "publisocial.fr", + "ip": "185.194.82.163", + "geoip": { + "continent": { + "code": "EU", + "geoname_id": 6255148, + "names": { + "de": "Europa", + "en": "Europe", + "es": "Europa", + "fr": "Europe", + "ja": "ヨーロッパ", + "pt-BR": "Europa", + "ru": "Европа", + "zh-CN": "欧洲" + } + }, + "country": { + "geoname_id": 3017382, + "is_in_european_union": true, + "iso_code": "FR", + "names": { + "de": "Frankreich", + "en": "France", + "es": "Francia", + "fr": "France", + "ja": "フランス共和国", + "pt-BR": "França", + "ru": "Франция", + "zh-CN": "法国" + } + }, + "location": { + "accuracy_radius": 500, + "latitude": 48.8582, + "longitude": 2.3387, + "time_zone": "Europe/Paris" + }, + "registered_country": { + "geoname_id": 3017382, + "is_in_european_union": true, + "iso_code": "FR", + "names": { + "de": "Frankreich", + "en": "France", + "es": "Francia", + "fr": "France", + "ja": "フランス共和国", + "pt-BR": "França", + "ru": "Франция", + "zh-CN": "法国" + } + } + } + }, + { + "hostname": "www.publisocial.fr", + "ip": "185.194.82.163", + "geoip": { + "continent": { + "code": "EU", + "geoname_id": 6255148, + "names": { + "de": "Europa", + "en": "Europe", + "es": "Europa", + "fr": "Europe", + "ja": "ヨーロッパ", + "pt-BR": "Europa", + "ru": "Европа", + "zh-CN": "欧洲" + } + }, + "country": { + "geoname_id": 3017382, + "is_in_european_union": true, + "iso_code": "FR", + "names": { + "de": "Frankreich", + "en": "France", + "es": "Francia", + "fr": "France", + "ja": "フランス共和国", + "pt-BR": "França", + "ru": "Франция", + "zh-CN": "法国" + } + }, + "location": { + "accuracy_radius": 500, + "latitude": 48.8582, + "longitude": 2.3387, + "time_zone": "Europe/Paris" + }, + "registered_country": { + "geoname_id": 3017382, + "is_in_european_union": true, + "iso_code": "FR", + "names": { + "de": "Frankreich", + "en": "France", + "es": "Francia", + "fr": "France", + "ja": "フランス共和国", + "pt-BR": "França", + "ru": "Франция", + "zh-CN": "法国" + } + } + } + }, + { + "hostname": "fonts.googleapis.com", + "ip": "142.250.188.234", + "geoip": { + "continent": { + "code": "NA", + "geoname_id": 6255149, + "names": { + "de": "Nordamerika", + "en": "North America", + "es": "Norteamérica", + "fr": "Amérique du Nord", + "ja": "北アメリカ", + "pt-BR": "América do Norte", + "ru": "Северная Америка", + "zh-CN": "北美洲" + } + }, + "country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "location": { + "accuracy_radius": 1000, + "latitude": 37.751, + "longitude": -97.822, + "time_zone": "America/Chicago" + }, + "registered_country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + } + } + }, + { + "hostname": "0.gravatar.com", + "ip": "192.0.73.2", + "geoip": { + "city": { + "geoname_id": 5391959, + "names": { + "de": "San Francisco", + "en": "San Francisco", + "es": "San Francisco", + "fr": "San Francisco", + "ja": "サンフランシスコ", + "pt-BR": "São Francisco", + "ru": "Сан-Франциско", + "zh-CN": "旧金山" + } + }, + "continent": { + "code": "NA", + "geoname_id": 6255149, + "names": { + "de": "Nordamerika", + "en": "North America", + "es": "Norteamérica", + "fr": "Amérique du Nord", + "ja": "北アメリカ", + "pt-BR": "América do Norte", + "ru": "Северная Америка", + "zh-CN": "北美洲" + } + }, + "country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "location": { + "accuracy_radius": 20, + "latitude": 37.7809, + "longitude": -122.4245, + "metro_code": 807, + "time_zone": "America/Los_Angeles" + }, + "postal": { + "code": "94142" + }, + "registered_country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "subdivisions": [ + { + "geoname_id": 5332921, + "iso_code": "CA", + "names": { + "de": "Kalifornien", + "en": "California", + "es": "California", + "fr": "Californie", + "ja": "カリフォルニア州", + "pt-BR": "Califórnia", + "ru": "Калифорния", + "zh-CN": "加州" + } + } + ] + } + }, + { + "hostname": "www.google-analytics.com", + "ip": "216.239.38.178", + "geoip": { + "continent": { + "code": "NA", + "geoname_id": 6255149, + "names": { + "de": "Nordamerika", + "en": "North America", + "es": "Norteamérica", + "fr": "Amérique du Nord", + "ja": "北アメリカ", + "pt-BR": "América do Norte", + "ru": "Северная Америка", + "zh-CN": "北美洲" + } + }, + "country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "location": { + "accuracy_radius": 1000, + "latitude": 34.0544, + "longitude": -118.244, + "time_zone": "America/Los_Angeles" + }, + "registered_country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "subdivisions": [ + { + "geoname_id": 5332921, + "iso_code": "CA", + "names": { + "de": "Kalifornien", + "en": "California", + "es": "California", + "fr": "Californie", + "ja": "カリフォルニア州", + "pt-BR": "Califórnia", + "ru": "Калифорния", + "zh-CN": "加州" + } + } + ] + } + }, + { + "hostname": "fonts.gstatic.com", + "ip": "142.250.189.3", + "geoip": { + "continent": { + "code": "NA", + "geoname_id": 6255149, + "names": { + "de": "Nordamerika", + "en": "North America", + "es": "Norteamérica", + "fr": "Amérique du Nord", + "ja": "北アメリカ", + "pt-BR": "América do Norte", + "ru": "Северная Америка", + "zh-CN": "北美洲" + } + }, + "country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "location": { + "accuracy_radius": 1000, + "latitude": 37.751, + "longitude": -97.822, + "time_zone": "America/Chicago" + }, + "registered_country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + } + } + } + ] + }, + "wappalyzer": { + "urls": { + "https://publisocial.fr/": { + "status": 301 + }, + "http://www.publisocial.fr/": { + "status": 301 + } + }, + "technologies": [ + { + "slug": "wordpress", + "name": "WordPress", + "description": "WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.", + "confidence": 100, + "version": null, + "icon": "WordPress.svg", + "website": "https://wordpress.org", + "cpe": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 1, + "slug": "cms", + "name": "CMS" + }, + { + "id": 11, + "slug": "blogs", + "name": "Blogs" + } + ], + "rootPath": true + }, + { + "slug": "mysql", + "name": "MySQL", + "description": "MySQL is an open-source relational database management system.", + "confidence": 100, + "version": null, + "icon": "MySQL.svg", + "website": "https://mysql.com", + "cpe": "cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 34, + "slug": "databases", + "name": "Databases" + } + ] + }, + { + "slug": "php", + "name": "PHP", + "description": "PHP is a general-purpose scripting language used for web development.", + "confidence": 100, + "version": null, + "icon": "PHP.svg", + "website": "https://php.net", + "cpe": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 27, + "slug": "programming-languages", + "name": "Programming languages" + } + ] + }, + { + "slug": "twenty-sixteen", + "name": "Twenty Sixteen", + "description": "Twenty Sixteen is the default WordPress theme for 2016.", + "confidence": 100, + "version": null, + "icon": "WordPress.svg", + "website": "https://wordpress.org/themes/twentysixteen", + "cpe": null, + "categories": [ + { + "id": 80, + "slug": "wordpress-themes", + "name": "WordPress themes" + } + ], + "rootPath": true + }, + { + "slug": "bootstrap", + "name": "Bootstrap", + "description": "Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.", + "confidence": 100, + "version": "3.2.0", + "icon": "Bootstrap.svg", + "website": "https://getbootstrap.com", + "cpe": "cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 66, + "slug": "ui-frameworks", + "name": "UI frameworks" + } + ], + "rootPath": true + }, + { + "slug": "contact-form-7", + "name": "Contact Form 7", + "description": "Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.", + "confidence": 100, + "version": "5.1.5", + "icon": "Contact Form 7.png", + "website": "https://contactform7.com", + "cpe": null, + "categories": [ + { + "id": 87, + "slug": "wordpress-plugins", + "name": "WordPress plugins" + }, + { + "id": 110, + "slug": "form-builders", + "name": "Form builders" + } + ], + "rootPath": true + }, + { + "slug": "yoast-seo", + "name": "Yoast SEO", + "description": "Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.", + "confidence": 100, + "version": "12.5", + "icon": "Yoast SEO.png", + "website": "https://yoast.com/wordpress/plugins/seo/", + "cpe": null, + "categories": [ + { + "id": 54, + "slug": "seo", + "name": "SEO" + }, + { + "id": 87, + "slug": "wordpress-plugins", + "name": "WordPress plugins" + } + ], + "rootPath": true + }, + { + "slug": "site-kit", + "name": "Site Kit", + "description": "Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.", + "confidence": 100, + "version": "1.84.0", + "icon": "Google.svg", + "website": "https://sitekit.withgoogle.com/", + "cpe": null, + "categories": [ + { + "id": 10, + "slug": "analytics", + "name": "Analytics" + }, + { + "id": 87, + "slug": "wordpress-plugins", + "name": "WordPress plugins" + } + ], + "rootPath": true + }, + { + "slug": "twitter-emoji-twemoji", + "name": "Twitter Emoji (Twemoji)", + "description": "Twitter Emoji is a set of open-source emoticons and emojis for Twitter, TweetDeck, and also for Android and iOS versions of the application.", + "confidence": 100, + "version": "12.1.3", + "icon": "default.svg", + "website": "https://twitter.github.io/twemoji/", + "cpe": null, + "categories": [ + { + "id": 17, + "slug": "font-scripts", + "name": "Font scripts" + } + ], + "rootPath": true + }, + { + "slug": "jquery-migrate", + "name": "jQuery Migrate", + "description": "Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.", + "confidence": 100, + "version": "1.4.1", + "icon": "jQuery.svg", + "website": "https://github.com/jquery/jquery-migrate", + "cpe": null, + "categories": [ + { + "id": 59, + "slug": "javascript-libraries", + "name": "JavaScript libraries" + } + ], + "rootPath": true + }, + { + "slug": "jquery", + "name": "jQuery", + "description": "jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.", + "confidence": 100, + "version": "1.12.4", + "icon": "jQuery.svg", + "website": "https://jquery.com", + "cpe": "cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 59, + "slug": "javascript-libraries", + "name": "JavaScript libraries" + } + ], + "rootPath": true + }, + { + "slug": "google-analytics", + "name": "Google Analytics", + "description": "Google Analytics is a free web analytics service that tracks and reports website traffic.", + "confidence": 100, + "version": "UA", + "icon": "Google Analytics.svg", + "website": "https://google.com/analytics", + "cpe": null, + "categories": [ + { + "id": 10, + "slug": "analytics", + "name": "Analytics" + } + ], + "rootPath": true + }, + { + "slug": "google-font-api", + "name": "Google Font API", + "description": "Google Font API is a web service that supports open-source font files that can be used on your web designs.", + "confidence": 100, + "version": null, + "icon": "Google Font API.svg", + "website": "https://google.com/fonts", + "cpe": null, + "categories": [ + { + "id": 17, + "slug": "font-scripts", + "name": "Font scripts" + } + ], + "rootPath": true + }, + { + "slug": "gravatar", + "name": "Gravatar", + "description": "Gravatar is a service for providing globally unique avatars.", + "confidence": 100, + "version": null, + "icon": "Gravatar.png", + "website": "https://gravatar.com", + "cpe": null, + "categories": [ + { + "id": 19, + "slug": "miscellaneous", + "name": "Miscellaneous" + } + ], + "rootPath": true + }, + { + "slug": "rss", + "name": "RSS", + "description": "RSS is a family of web feed formats used to publish frequently updated works—such as blog entries, news headlines, audio, and video—in a standardized format.", + "confidence": 100, + "version": null, + "icon": "RSS.svg", + "website": "https://www.rssboard.org/rss-specification", + "cpe": null, + "categories": [ + { + "id": 19, + "slug": "miscellaneous", + "name": "Miscellaneous" + } + ], + "rootPath": true + }, + { + "slug": "open-graph", + "name": "Open Graph", + "description": "Open Graph is a protocol that is used to integrate any web page into the social graph.", + "confidence": 100, + "version": null, + "icon": "Open Graph.png", + "website": "https://ogp.me", + "cpe": null, + "categories": [ + { + "id": 19, + "slug": "miscellaneous", + "name": "Miscellaneous" + } + ], + "rootPath": true + } + ] + }, + "zap": null, + "nuclei": [], + "lhr": [ + { + "requestedUrl": "https://publisocial.fr/", + "finalUrl": "https://www.publisocial.fr/", + "fetchTime": "2024-07-28T05:34:54.964Z", + "runWarnings": [ + "The page may not be loading as expected because your test URL (https://publisocial.fr/) was redirected to https://www.publisocial.fr/. Try testing the second URL directly." + ], + "categories": { + "performance": { + "title": "Performance", + "id": "performance", + "score": 0.52 + }, + "accessibility": { + "title": "Accessibility", + "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", + "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", + "id": "accessibility", + "score": 1 + }, + "best-practices": { + "title": "Best Practices", + "id": "best-practices", + "score": 0.87 + }, + "seo": { + "title": "SEO", + "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", + "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", + "id": "seo", + "score": 0.98 + }, + "pwa": { + "title": "Progressive Web App", + "description": "These checks validate the aspects of a Progressive Web App. [Learn more](https://developers.google.com/web/progressive-web-apps/checklist).", + "manualDescription": "These checks are required by the baseline [PWA Checklist](https://developers.google.com/web/progressive-web-apps/checklist) but are not automatically checked by Lighthouse. They do not affect your score but it's important that you verify them manually.", + "id": "pwa", + "score": 0.58 + } + }, + "audits": { + "metrics": { + "id": "metrics", + "title": "Metrics", + "description": "Collects all available metrics.", + "score": null, + "scoreDisplayMode": "informative", + "numericValue": 6493, + "numericUnit": "millisecond", + "details": { + "type": "debugdata", + "items": [ + { + "firstContentfulPaint": 5458, + "firstMeaningfulPaint": 5458, + "largestContentfulPaint": 5956, + "firstCPUIdle": 6350, + "interactive": 6493, + "speedIndex": 6607, + "estimatedInputLatency": 13, + "totalBlockingTime": 22, + "maxPotentialFID": 93, + "cumulativeLayoutShift": 0.024360243055555553, + "cumulativeLayoutShiftAllFrames": 0, + "observedTimeOrigin": 0, + "observedTimeOriginTs": 375420595, + "observedNavigationStart": 0, + "observedNavigationStartTs": 375420595, + "observedFirstPaint": 2293, + "observedFirstPaintTs": 377713721, + "observedFirstContentfulPaint": 2293, + "observedFirstContentfulPaintTs": 377713721, + "observedFirstMeaningfulPaint": 2297, + "observedFirstMeaningfulPaintTs": 377717289, + "observedLargestContentfulPaint": 2297, + "observedLargestContentfulPaintTs": 377717289, + "observedTraceEnd": 3791, + "observedTraceEndTs": 379211130, + "observedLoad": 2514, + "observedLoadTs": 377934642, + "observedDomContentLoaded": 2505, + "observedDomContentLoadedTs": 377925292, + "observedCumulativeLayoutShift": 0.024360243055555553, + "observedCumulativeLayoutShiftAllFrames": 0, + "observedFirstVisualChange": 2280, + "observedFirstVisualChangeTs": 377700595, + "observedLastVisualChange": 2514, + "observedLastVisualChangeTs": 377934595, + "observedSpeedIndex": 2309, + "observedSpeedIndexTs": 377729224 + }, + { + "lcpInvalidated": false + } + ] + } + }, + "diagnostics": { + "id": "diagnostics", + "title": "Diagnostics", + "description": "Collection of useful page vitals.", + "score": null, + "scoreDisplayMode": "informative", + "details": { + "type": "debugdata", + "items": [ + { + "numRequests": 45, + "numScripts": 15, + "numStylesheets": 12, + "numFonts": 7, + "numTasks": 442, + "numTasksOver10ms": 7, + "numTasksOver25ms": 3, + "numTasksOver50ms": 0, + "numTasksOver100ms": 0, + "numTasksOver500ms": 0, + "rtt": 8.128, + "throughput": 5848128.574772334, + "maxRtt": 136.654, + "maxServerLatency": 49.77400000000003, + "totalByteWeight": 366549, + "totalTaskTime": 290.13199999999927, + "mainDocumentTransferSize": 24591 + } + ] + } + } + } + } + ], + "screenshot": true, + "stats": null, + "github_repository": null, + "budget_page": null, + "declaration-a11y": { + "mention": null + }, + "declaration-rgpd": null, + "betagouv": null, + "ecoindex": null, + "sonarcloud": null, + "dsfr": null, + "summary": { + "testsslExpireSoon": false, + "testsslExpireDate": "2025-07-14T21:59:00.000Z", + "testsslGrade": "A+", + "cookiesGrade": "C", + "cookiesCount": 4, + "trackersGrade": "F", + "trackersCount": 47, + "lighthouse_performance": 0.52, + "lighthouse_performanceGrade": "C", + "lighthouse_accessibility": 1, + "lighthouse_accessibilityGrade": "A", + "lighthouse_best-practices": 0.87, + "lighthouse_best-practicesGrade": "A", + "lighthouse_seo": 0.98, + "lighthouse_seoGrade": "A", + "lighthouse_pwa": 0.58, + "lighthouse_pwaGrade": "C", + "declaration-a11y": "F" + } + }, + { + "404": null, + "url": "https://rappel.conso.gouv.fr", + "category": "dnum", + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -64495,70 +61109,70 @@ "testssl": [ { "id": "service", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "HTTP" }, { "id": "pre_128cipher", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "No 128 cipher limit bug" }, { "id": "SSLv2", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "SSLv3", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "TLS1", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_1", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_2", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "TLS1_3", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "not offered + downgraded to weaker protocol" }, { "id": "ALPN", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "not offered" + "finding": "http/1.1" }, { "id": "cipherlist_NULL", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -64566,7 +61180,7 @@ }, { "id": "cipherlist_aNULL", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -64574,7 +61188,7 @@ }, { "id": "cipherlist_EXPORT", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -64582,7 +61196,7 @@ }, { "id": "cipherlist_LOW", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -64590,7 +61204,7 @@ }, { "id": "cipherlist_3DES_IDEA", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -64598,7 +61212,7 @@ }, { "id": "cipherlist_OBSOLETED", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -64606,504 +61220,567 @@ }, { "id": "cipherlist_STRONG_NOFS", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "cipherlist_STRONG_FS", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "cipher_order-tls1_2", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "finding": "server" }, { "id": "cipherorder_TLSv1_2", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "ECDHE-RSA-AES256-GCM-SHA384" + "finding": "ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "cipher_order", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "finding": "server" }, { "id": "FS", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "FS_ciphers", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "FS_ECDHE_curves", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", - "finding": "prime256v1 secp384r1" + "finding": "prime256v1 secp384r1 secp521r1" }, { "id": "TLS_extensions", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'extended master secret/#23'" + "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'session ticket/#35' 'max fragment length/#1' 'application layer protocol negotiation/#16' 'extended master secret/#23'" }, { "id": "TLS_session_ticket", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "no -- no lifetime advertised" + "finding": "valid for 300 seconds only (= 60 days" + "finding": "247 >= 60 days" }, { "id": "cert_notBefore", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "2024-06-12 22:00" + "finding": "2024-04-01 22:00" }, { "id": "cert_notAfter", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", - "finding": "2025-07-14 21:59" + "finding": "2025-04-01 21:59" }, { "id": "cert_extlifeSpan", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "finding": "certificate has no extended life time according to browser forum" }, { "id": "cert_eTLS", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "not present" }, { "id": "cert_crlDistributionPoints", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "http://crl.certigna.fr/servicesca.crl http://crl.dhimyotis.com/servicesca.crl" + "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" }, { "id": "cert_ocspURL", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "http://servicesca.ocsp.dhimyotis.com http://servicesca.ocsp.certigna.fr" + "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" }, { "id": "OCSP_stapling", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "cert_mustStapleExtension", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "--" }, { "id": "DNS_CAArecord", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "LOW", "finding": "--" }, { "id": "certificate_transparency", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "finding": "yes (certificate extension)" }, { "id": "certs_countServer", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "2" + "finding": "3" }, { "id": "certs_list_ordering_problem", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_caIssuers", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "Certigna Services CA (DHIMYOTIS from FR)" }, { "id": "intermediate_cert <#1>", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "intermediate_cert_fingerprintSHA256 <#1>", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" }, { "id": "intermediate_cert_notBefore <#1>", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "2015-11-25 11:33" }, { "id": "intermediate_cert_notAfter <#1>", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "finding": "2025-11-22 11:33" }, { "id": "intermediate_cert_expiration <#1>", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "finding": "ok > 40 days" }, { "id": "intermediate_cert_chain <#1>", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "Certigna Services CA <-- Certigna" }, { - "id": "intermediate_cert_badOCSP", - "ip": "publisocial.fr/185.194.82.163", + "id": "intermediate_cert <#2>", + "ip": "rappel.conso.gouv.fr/185.24.187.242", + "port": "443", + "severity": "INFO", + "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" + }, + { + "id": "intermediate_cert_fingerprintSHA256 <#2>", + "ip": "rappel.conso.gouv.fr/185.24.187.242", + "port": "443", + "severity": "INFO", + "finding": "E3B6A2DB2ED7CE48842F7AC53241C7B71D54144BFB40C11F3F1D0B42F5EEA12D" + }, + { + "id": "intermediate_cert_notBefore <#2>", + "ip": "rappel.conso.gouv.fr/185.24.187.242", + "port": "443", + "severity": "INFO", + "finding": "2007-06-29 15:13" + }, + { + "id": "intermediate_cert_notAfter <#2>", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", - "finding": "intermediate certificate(s) is/are ok" + "finding": "2027-06-29 15:13" }, { - "id": "insecure_redirect", - "ip": "publisocial.fr/185.194.82.163", + "id": "intermediate_cert_expiration <#2>", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", - "severity": "HIGH", - "finding": "Redirect to insecure URL: 'http://www.publisocial.fr/'" + "severity": "OK", + "finding": "ok > 40 days" + }, + { + "id": "intermediate_cert_chain <#2>", + "ip": "rappel.conso.gouv.fr/185.24.187.242", + "port": "443", + "severity": "INFO", + "finding": "Certigna <-- Certigna" + }, + { + "id": "intermediate_cert_badOCSP", + "ip": "rappel.conso.gouv.fr/185.24.187.242", + "port": "443", + "severity": "OK", + "finding": "intermediate certificate(s) is/are ok" }, { "id": "HTTP_status_code", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "301 Moved Permanently ('/')" + "finding": "200 OK ('/')" }, { "id": "HTTP_clock_skew", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "0 seconds from localtime" + "finding": "-1 seconds from localtime" }, { "id": "HTTP_headerTime", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "1721539881" + "finding": "1722145836" + }, + { + "id": "HSTS_multiple", + "ip": "rappel.conso.gouv.fr/185.24.187.242", + "port": "443", + "severity": "MEDIUM", + "finding": "Multiple HSTS headers. Using first header: max-age=3600; includeSubDomains; preload" }, { "id": "HSTS_time", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", - "severity": "OK", - "finding": "365 days (=31536000 seconds) > 15552000 seconds" + "severity": "MEDIUM", + "finding": "max-age too short. 0 days (=3600 seconds) < 15552000 seconds" }, { "id": "HSTS_subdomains", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "finding": "includes subdomains" }, { "id": "HSTS_preload", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", - "severity": "INFO", - "finding": "domain is NOT marked for preloading" + "severity": "OK", + "finding": "domain IS marked for preloading" }, { "id": "HPKP", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "No support for HTTP Public Key Pinning" }, { "id": "banner_server", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "No Server banner line in header, interesting!" + "finding": "webServer1" }, { "id": "banner_application", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "No application banner found" + "finding": "X-Powered-By: CCRF" }, { "id": "cookie_count", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "1 at '/' (30x detected, better try target URL of 30x)" + "finding": "2 at '/'" }, { "id": "cookie_secure", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", - "finding": "All (1) at '/' marked as secure" + "finding": "All (2) at '/' marked as secure" }, { "id": "cookie_httponly", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", - "severity": "OK", - "finding": "All (1) at '/' marked as HttpOnly (30x detected, better try target URL of 30x)" + "severity": "INFO", + "finding": "2/2 at '/' marked as HttpOnly" + }, + { + "id": "X-Frame-Options_multiple", + "ip": "rappel.conso.gouv.fr/185.24.187.242", + "port": "443", + "severity": "MEDIUM", + "finding": "Multiple X-Frame-Options headers. Using first header: SAMEORIGIN" }, { "id": "X-Frame-Options", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", - "finding": "sameorigin" + "finding": "SAMEORIGIN" }, { "id": "X-Content-Type-Options", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "finding": "nosniff" }, { "id": "Content-Security-Policy", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", - "finding": "upgrade-insecure-requests;" + "finding": "default-src 'none';script-src * 'self' 'nonce-ayzS0PmLJUo+pvNXEyhPIfd9b5G5YF2lhK1u1wSdTyE=';style-src 'self' 'unsafe-inline';connect-src 'self';form-action 'self';img-src * 'self';frame-ancestors 'none';frame-src 'none';base-uri 'self'" }, { "id": "X-XSS-Protection", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "1; mode=block" }, { "id": "Referrer-Policy", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "no-referrer-when-downgrade" + "finding": "Same-origin" + }, + { + "id": "Cache-Control", + "ip": "rappel.conso.gouv.fr/185.24.187.242", + "port": "443", + "severity": "INFO", + "finding": "no-cache, no-store" + }, + { + "id": "Pragma", + "ip": "rappel.conso.gouv.fr/185.24.187.242", + "port": "443", + "severity": "INFO", + "finding": "no-cache" }, { "id": "banner_reverseproxy", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "cwe": "CWE-200", @@ -65111,7 +61788,7 @@ }, { "id": "heartbleed", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cve": "CVE-2014-0160", @@ -65120,7 +61797,7 @@ }, { "id": "CCS", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cve": "CVE-2014-0224", @@ -65129,16 +61806,16 @@ }, { "id": "ticketbleed", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cve": "CVE-2016-9244", "cwe": "CWE-200", - "finding": "no session ticket extension" + "finding": "not vulnerable" }, { "id": "ROBOT", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", @@ -65147,7 +61824,7 @@ }, { "id": "secure_renego", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cwe": "CWE-310", @@ -65155,16 +61832,16 @@ }, { "id": "secure_client_renego", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cve": "CVE-2011-1473", "cwe": "CWE-310", - "finding": "not vulnerable, mitigated" + "finding": "not vulnerable" }, { "id": "CRIME_TLS", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cve": "CVE-2012-4929", @@ -65173,16 +61850,16 @@ }, { "id": "BREACH", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", - "severity": "OK", + "severity": "MEDIUM", "cve": "CVE-2013-3587", "cwe": "CWE-310", - "finding": "not vulnerable, no gzip/deflate/compress/br HTTP compression - only supplied '/' tested" + "finding": "potentially VULNERABLE, gzip HTTP compression detected - only supplied '/' tested" }, { "id": "POODLE_SSL", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cve": "CVE-2014-3566", @@ -65191,14 +61868,14 @@ }, { "id": "fallback_SCSV", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "finding": "no protocol below TLS 1.2 offered" }, { "id": "SWEET32", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cve": "CVE-2016-2183 CVE-2016-6329", @@ -65207,7 +61884,7 @@ }, { "id": "FREAK", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cve": "CVE-2015-0204", @@ -65216,7 +61893,7 @@ }, { "id": "DROWN", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cve": "CVE-2016-0800 CVE-2016-0703", @@ -65225,16 +61902,16 @@ }, { "id": "DROWN_hint", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "cve": "CVE-2016-0800 CVE-2016-0703", "cwe": "CWE-310", - "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=465B507786D4923EC305E1ECC3C83AF45E809A1FBCE9A9CF7797F750815DEEB1" + "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=07DC14339F5FDCB93AC2380AB5AF502F01B697E986E39EA48C19C95B56C402B3" }, { "id": "LOGJAM", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -65243,7 +61920,7 @@ }, { "id": "LOGJAM-common_primes", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -65252,7 +61929,7 @@ }, { "id": "BEAST", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cve": "CVE-2011-3389", @@ -65261,7 +61938,7 @@ }, { "id": "LUCKY13", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cve": "CVE-2013-0169", @@ -65270,7 +61947,7 @@ }, { "id": "winshock", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cve": "CVE-2014-6321", @@ -65279,7 +61956,7 @@ }, { "id": "RC4", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", "cve": "CVE-2013-2566 CVE-2015-2808", @@ -65288,1104 +61965,501 @@ }, { "id": "clientsimulation-android_60", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_70", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_81", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_90", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_X", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_11", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_12", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-chrome_79_win10", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-chrome_101_win10", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-firefox_66_win81", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-firefox_100_win10", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-ie_6_xp", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_win7", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_xp", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win7", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win81", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_winphone81", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win10", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-edge_15_win10", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-edge_101_win10_21h2", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-safari_121_ios_122", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-safari_130_osx_10146", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-safari_154_osx_1231", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-java_7u25", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-java_8u161", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-java1102", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-java1703", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-go_1178", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-libressl_283", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-openssl_102e", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-openssl_110l", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-openssl_111d", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-openssl_303", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-apple_mail_16_0", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-thunderbird_91_9", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "rating_spec", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" }, { "id": "rating_doc", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" }, { "id": "protocol_support_score", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "100" }, { "id": "protocol_support_score_weighted", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "30" }, { "id": "key_exchange_score", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "90" }, { "id": "key_exchange_score_weighted", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "27" }, { "id": "cipher_strength_score", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "60" }, { "id": "cipher_strength_score_weighted", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "24" }, { "id": "final_score", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", "finding": "81" }, { "id": "overall_grade", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "OK", - "finding": "A+" + "finding": "A" + }, + { + "id": "grade_cap_reason_1", + "ip": "rappel.conso.gouv.fr/185.24.187.242", + "port": "443", + "severity": "INFO", + "finding": "Grade capped to A. HSTS max-age is too short" }, { "id": "scanTime", - "ip": "publisocial.fr/185.194.82.163", + "ip": "rappel.conso.gouv.fr/185.24.187.242", "port": "443", "severity": "INFO", - "finding": "52" + "finding": "105" } ], "thirdparties": { - "trackers": [ - { - "type": "unknown", - "url": "http://www.publisocial.fr/" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-includes/css/dist/block-library/style.min.css?ver=5.3.4" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.5" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/plugins/pe-easy-slider/css/animate.css?ver=5.3.4" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/plugins/pe-easy-slider/css/pe-easy-slider.css?ver=5.3.4" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/plugins/wp-accessibility/toolbar/fonts/css/a11y-toolbar.css?ver=1.6.0" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/plugins/wp-accessibility/toolbar/css/a11y.css?ver=1.6.0" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/plugins/wp-accessibility/toolbar/css/a11y-fontsize-alt.css?ver=1.6.0" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/plugins/wp-accessibility/css/wpa-style.css?ver=1.6.0" - }, - { - "type": "google fonts", - "url": "https://fonts.googleapis.com/css?family=Merriweather%3A400%2C700%2C900%2C400italic%2C700italic%2C900italic%7CMontserrat%3A400%2C700%7CInconsolata%3A400&subset=latin%2Clatin-ext", - "details": { - "id": "google fonts", - "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" - } - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/themes/twentysixteen/genericons/genericons.css?ver=3.4.1" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/themes/twentysixteen/style.css?ver=5.3.4" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/plugins/favorites/assets/css/favorites.css?ver=2.3.2" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/plugins/pe-easy-slider/js/bootstrap.min.js?ver=3.2.0" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/plugins/favorites/assets/js/favorites.min.js?ver=2.3.2" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.5" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/plugins/wp-accessibility/js/wpa-toolbar.js?ver=1.1" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/plugins/wp-accessibility/toolbar/js/a11y.js?ver=1.0" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/plugins/wp-accessibility/js/longdesc.button.js?ver=1.6.0" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/themes/twentysixteen/js/skip-link-focus-fix.js?ver=20160816" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/themes/twentysixteen/js/functions.js?ver=20160816" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/plugins/wp-accessibility/js/wp-accessibility.js?ver=1.0.3" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-includes/js/wp-embed.min.js?ver=5.3.4" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/uploads/2019/02/cropped-4205122590_f93c9f639a_b-768x147.jpg" - }, - { - "type": "unknown", - "url": "https://0.gravatar.com/avatar/35b9fb3e3348036a845a49cb7720eb25?s=49&d=mm&r=g" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/uploads/2024/01/logo-HCFEA-Couleur-RVB-768x245.jpg" - }, - { - "type": "unknown", - "url": "https://0.gravatar.com/avatar/c94996131ad5bd6c7c1b56445bac0e0d?s=49&d=mm&r=g" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/uploads/2021/05/logo-HCFEA-768x288.jpg" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-content/uploads/2021/05/ReseauBdPok-768x286.jpg" - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-includes/js/wp-emoji-release.min.js?ver=5.3.4" - }, - { - "type": "google analytics", - "url": "https://www.google-analytics.com/analytics.js", - "details": { - "id": "google analytics", - "message": "Use hosted Matomo instance" - } - }, - { - "type": "google fonts", - "url": "https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2", - "details": { - "id": "google fonts", - "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" - } - }, - { - "type": "google fonts", - "url": "https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2", - "details": { - "id": "google fonts", - "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" - } - }, - { - "type": "google fonts", - "url": "https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2", - "details": { - "id": "google fonts", - "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" - } - }, - { - "type": "google fonts", - "url": "https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2", - "details": { - "id": "google fonts", - "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" - } - }, - { - "type": "google fonts", - "url": "https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2", - "details": { - "id": "google fonts", - "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" - } - }, - { - "type": "google fonts", - "url": "https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZOf-I.woff2", - "details": { - "id": "google fonts", - "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" - } - }, - { - "type": "google fonts", - "url": "https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2", - "details": { - "id": "google fonts", - "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" - } - }, - { - "type": "google fonts", - "url": "https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZOf-I.woff2", - "details": { - "id": "google fonts", - "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" - } - }, - { - "type": "google fonts", - "url": "https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZWMf6.woff2", - "details": { - "id": "google fonts", - "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" - } - }, - { - "type": "google fonts", - "url": "https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZWMf6.woff2", - "details": { - "id": "google fonts", - "message": "Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/" - } - }, - { - "type": "google analytics", - "url": "https://www.google-analytics.com/plugins/ua/linkid.js", - "details": { - "id": "google analytics", - "message": "Use hosted Matomo instance" - } - }, - { - "type": "google analytics", - "url": "https://www.google-analytics.com/j/collect?v=1&_v=j101&a=1936309262&t=pageview&_s=1&dl=https%3A%2F%2Fwww.publisocial.fr%2F&ul=en-us&de=UTF-8&dt=Publisocial%20-%20Portail%20des%20publications%20institutionnelles%20et%20scientifiques&sd=24-bit&sr=800x600&vp=800x600&je=0&_u=KGBAAEIhAAAAACAAI~&jid=1218179969&gjid=1772790509&cid=325468169.1721539848&tid=G-10PFPKPSDG&_gid=1733438908.1721539848&_r=1&_slc=1&z=239718431", - "details": { - "id": "google analytics", - "message": "Use hosted Matomo instance" - } - }, - { - "type": "unknown", - "url": "https://www.publisocial.fr/wp-admin/admin-ajax.php" - } - ], + "trackers": [], "cookies": [ { - "name": "_gat", - "value": "1", - "domain": ".publisocial.fr", - "path": "/", - "expires": 1721539907, - "size": 5, - "httpOnly": false, - "secure": false, - "session": false, - "sameParty": false, - "sourceScheme": "Secure", - "sourcePort": 443 - }, - { - "name": "_gid", - "value": "GA1.2.1733438908.1721539848", - "domain": ".publisocial.fr", - "path": "/", - "expires": 1721626247, - "size": 31, - "httpOnly": false, - "secure": false, - "session": false, - "sameParty": false, - "sourceScheme": "Secure", - "sourcePort": 443 - }, - { - "name": "_ga", - "value": "GA1.2.325468169.1721539848", - "domain": ".publisocial.fr", + "name": "BWROUTEID", + "value": "3ddbb54ff84f9a8db100e8cb35c25ae2.1", + "domain": "rappel.conso.gouv.fr", "path": "/", - "expires": 1784611847, - "size": 29, + "expires": -1, + "size": 43, "httpOnly": false, - "secure": false, - "session": false, + "secure": true, + "session": true, "sameParty": false, "sourceScheme": "Secure", "sourcePort": 443 }, { - "name": "BIGipServerpool-drees-rfas.cegedim.cloud-HTTP", - "value": "!sK2nxWV5wSosTJJWDPlD0yXzT0UGhjtZ9KgNAYSX9d1/pV/ZSyYDJI7KHoEWljINx+8kyiSNJcls9fHxkNDY9KPSw+4=", - "domain": "www.publisocial.fr", + "name": ".AspNetCore.Antiforgery.O33mliWV2hE", + "value": "CfDJ8DeW6_niT_hOgsp_1shK8ypH9Ti91tfLhcM4-YorZUdV4MXLVzqqEiWfjJuw8rNURtEgLf2XOw7hLzyWjW0CTq4jjUatriLxrD3qbwxxy3ylQeXMxAVrUIYaJb8uTNjnjDZ5dgDVyM434DLSnfuYUBk", + "domain": "rappel.conso.gouv.fr", "path": "/", "expires": -1, - "size": 138, + "size": 190, "httpOnly": true, "secure": true, "session": true, + "sameSite": "Strict", "sameParty": false, "sourceScheme": "Secure", "sourcePort": 443 } ], "headers": { + "cache-control": "no-cache, no-store", "connection": "Keep-Alive", "content-encoding": "gzip", - "content-length": "23862", - "content-security-policy": "upgrade-insecure-requests;", - "content-type": "text/html; charset=UTF-8", - "date": "Sun, 21 Jul 2024 05:30:46 GMT", - "keep-alive": "timeout=2, max=100", - "link": "; rel=\"https://api.w.org/\"", - "referrer-policy": "no-referrer-when-downgrade", - "set-cookie": "BIGipServerpool-drees-rfas.cegedim.cloud-HTTP=!sK2nxWV5wSosTJJWDPlD0yXzT0UGhjtZ9KgNAYSX9d1/pV/ZSyYDJI7KHoEWljINx+8kyiSNJcls9fHxkNDY9KPSw+4=; path=/; Httponly; Secure", - "strict-transport-security": "max-age=31536000; includeSubDomains", + "content-security-policy": "default-src 'none';script-src * 'self' 'nonce-Wn8QnPSurtYRqlhTln8jqK/BR9R7GLEy3kYWsLdyKIQ=';style-src 'self' 'unsafe-inline';connect-src 'self';form-action 'self';img-src * 'self';frame-ancestors 'none';frame-src 'none';base-uri 'self'", + "content-type": "text/html; charset=utf-8", + "date": "Sun, 28 Jul 2024 05:49:32 GMT", + "keep-alive": "timeout=5, max=300", + "pragma": "no-cache", + "referrer-policy": "Same-origin", + "server": "webServer1", + "set-cookie": ".AspNetCore.Antiforgery.O33mliWV2hE=CfDJ8DeW6_niT_hOgsp_1shK8ypH9Ti91tfLhcM4-YorZUdV4MXLVzqqEiWfjJuw8rNURtEgLf2XOw7hLzyWjW0CTq4jjUatriLxrD3qbwxxy3ylQeXMxAVrUIYaJb8uTNjnjDZ5dgDVyM434DLSnfuYUBk; path=/; secure; samesite=strict; httponly\nBWROUTEID=3ddbb54ff84f9a8db100e8cb35c25ae2.1; Path=/; Secure", + "strict-transport-security": "max-age=3600; includeSubDomains; preload\nmax-age=15768000; includeSubdomains; preload", + "transfer-encoding": "chunked", "vary": "Accept-Encoding", "x-content-type-options": "nosniff", - "x-frame-options": "sameorigin", + "x-frame-options": "SAMEORIGIN\nSAMEORIGIN", + "x-powered-by": "CCRF", "x-xss-protection": "1; mode=block" }, "endpoints": [ { - "hostname": "publisocial.fr", - "ip": "185.194.82.163", - "geoip": { - "continent": { - "code": "EU", - "geoname_id": 6255148, - "names": { - "de": "Europa", - "en": "Europe", - "es": "Europa", - "fr": "Europe", - "ja": "ヨーロッパ", - "pt-BR": "Europa", - "ru": "Европа", - "zh-CN": "欧洲" - } - }, - "country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - }, - "location": { - "accuracy_radius": 500, - "latitude": 48.8582, - "longitude": 2.3387, - "time_zone": "Europe/Paris" - }, - "registered_country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - } - } - }, - { - "hostname": "www.publisocial.fr", - "ip": "185.194.82.163", - "geoip": { - "continent": { - "code": "EU", - "geoname_id": 6255148, - "names": { - "de": "Europa", - "en": "Europe", - "es": "Europa", - "fr": "Europe", - "ja": "ヨーロッパ", - "pt-BR": "Europa", - "ru": "Европа", - "zh-CN": "欧洲" - } - }, - "country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - }, - "location": { - "accuracy_radius": 500, - "latitude": 48.8582, - "longitude": 2.3387, - "time_zone": "Europe/Paris" - }, - "registered_country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - } - } - }, - { - "hostname": "fonts.googleapis.com", - "ip": "142.250.191.138", - "geoip": { - "continent": { - "code": "NA", - "geoname_id": 6255149, - "names": { - "de": "Nordamerika", - "en": "North America", - "es": "Norteamérica", - "fr": "Amérique du Nord", - "ja": "北アメリカ", - "pt-BR": "América do Norte", - "ru": "Северная Америка", - "zh-CN": "北美洲" - } - }, - "country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - }, - "location": { - "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" - }, - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - } - } - }, - { - "hostname": "0.gravatar.com", - "ip": "192.0.73.2", - "geoip": { - "city": { - "geoname_id": 5391959, - "names": { - "de": "San Francisco", - "en": "San Francisco", - "es": "San Francisco", - "fr": "San Francisco", - "ja": "サンフランシスコ", - "pt-BR": "São Francisco", - "ru": "Сан-Франциско", - "zh-CN": "旧金山" + "hostname": "rappel.conso.gouv.fr", + "ip": "185.24.187.242", + "geoip": { + "city": { + "geoname_id": 2988507, + "names": { + "de": "Paris", + "en": "Paris", + "es": "París", + "fr": "Paris", + "ja": "パリ", + "pt-BR": "Paris", + "ru": "Париж", + "zh-CN": "巴黎" } }, "continent": { - "code": "NA", - "geoname_id": 6255149, + "code": "EU", + "geoname_id": 6255148, "names": { - "de": "Nordamerika", - "en": "North America", - "es": "Norteamérica", - "fr": "Amérique du Nord", - "ja": "北アメリカ", - "pt-BR": "América do Norte", - "ru": "Северная Америка", - "zh-CN": "北美洲" + "de": "Europa", + "en": "Europe", + "es": "Europa", + "fr": "Europe", + "ja": "ヨーロッパ", + "pt-BR": "Europa", + "ru": "Европа", + "zh-CN": "欧洲" } }, "country": { - "geoname_id": 6252001, - "iso_code": "US", + "geoname_id": 3017382, + "is_in_european_union": true, + "iso_code": "FR", "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" + "de": "Frankreich", + "en": "France", + "es": "Francia", + "fr": "France", + "ja": "フランス共和国", + "pt-BR": "França", + "ru": "Франция", + "zh-CN": "法国" } }, "location": { - "accuracy_radius": 20, - "latitude": 37.7809, - "longitude": -122.4245, - "metro_code": 807, - "time_zone": "America/Los_Angeles" + "accuracy_radius": 500, + "latitude": 48.8323, + "longitude": 2.4075, + "time_zone": "Europe/Paris" }, "postal": { - "code": "94142" + "code": "75015" }, "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", + "geoname_id": 3017382, + "is_in_european_union": true, + "iso_code": "FR", "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" + "de": "Frankreich", + "en": "France", + "es": "Francia", + "fr": "France", + "ja": "フランス共和国", + "pt-BR": "França", + "ru": "Франция", + "zh-CN": "法国" } }, "subdivisions": [ { - "geoname_id": 5332921, - "iso_code": "CA", + "geoname_id": 3012874, + "iso_code": "IDF", "names": { - "de": "Kalifornien", - "en": "California", - "es": "California", - "fr": "Californie", - "ja": "カリフォルニア州", - "pt-BR": "Califórnia", - "ru": "Калифорния", - "zh-CN": "加州" + "de": "Île-de-France", + "en": "Île-de-France", + "es": "Isla de Francia", + "fr": "Île-de-France", + "ja": "イル・ド・フランス", + "pt-BR": "Ilha de França", + "ru": "Иль-де-Франс", + "zh-CN": "法兰西岛" + } + }, + { + "geoname_id": 2968815, + "iso_code": "75", + "names": { + "de": "Paris", + "en": "Paris", + "es": "Paris", + "fr": "Paris" } } ] } - }, - { - "hostname": "www.google-analytics.com", - "ip": "142.250.191.206", - "geoip": { - "continent": { - "code": "NA", - "geoname_id": 6255149, - "names": { - "de": "Nordamerika", - "en": "North America", - "es": "Norteamérica", - "fr": "Amérique du Nord", - "ja": "北アメリカ", - "pt-BR": "América do Norte", - "ru": "Северная Америка", - "zh-CN": "北美洲" - } - }, - "country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - }, - "location": { - "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" - }, - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - } - } - }, - { - "hostname": "fonts.gstatic.com", - "ip": "172.217.2.35", - "geoip": { - "continent": { - "code": "NA", - "geoname_id": 6255149, - "names": { - "de": "Nordamerika", - "en": "North America", - "es": "Norteamérica", - "fr": "Amérique du Nord", - "ja": "北アメリカ", - "pt-BR": "América do Norte", - "ru": "Северная Америка", - "zh-CN": "北美洲" - } - }, - "country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - }, - "location": { - "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" - }, - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - } - } } ] }, "wappalyzer": { "urls": { - "https://publisocial.fr/": { - "status": 301 - }, - "http://www.publisocial.fr/": { - "status": 301 + "https://rappel.conso.gouv.fr/": { + "status": 200 } }, "technologies": [ - { - "slug": "wordpress", - "name": "WordPress", - "description": "WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.", - "confidence": 100, - "version": null, - "icon": "WordPress.svg", - "website": "https://wordpress.org", - "cpe": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 1, - "slug": "cms", - "name": "CMS" - }, - { - "id": 11, - "slug": "blogs", - "name": "Blogs" - } - ], - "rootPath": true - }, - { - "slug": "mysql", - "name": "MySQL", - "description": "MySQL is an open-source relational database management system.", - "confidence": 100, - "version": null, - "icon": "MySQL.svg", - "website": "https://mysql.com", - "cpe": "cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 34, - "slug": "databases", - "name": "Databases" - } - ] - }, - { - "slug": "php", - "name": "PHP", - "description": "PHP is a general-purpose scripting language used for web development.", - "confidence": 100, - "version": null, - "icon": "PHP.svg", - "website": "https://php.net", - "cpe": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 27, - "slug": "programming-languages", - "name": "Programming languages" - } - ] - }, - { - "slug": "twenty-sixteen", - "name": "Twenty Sixteen", - "description": "Twenty Sixteen is the default WordPress theme for 2016.", - "confidence": 100, - "version": null, - "icon": "WordPress.svg", - "website": "https://wordpress.org/themes/twentysixteen", - "cpe": null, - "categories": [ - { - "id": 80, - "slug": "wordpress-themes", - "name": "WordPress themes" - } - ], - "rootPath": true - }, { "slug": "bootstrap", "name": "Bootstrap", "description": "Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.", "confidence": 100, - "version": "3.2.0", + "version": "4.3.1", "icon": "Bootstrap.svg", "website": "https://getbootstrap.com", "cpe": "cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*", @@ -66399,106 +62473,19 @@ "rootPath": true }, { - "slug": "contact-form-7", - "name": "Contact Form 7", - "description": "Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.", - "confidence": 100, - "version": "5.1.5", - "icon": "Contact Form 7.png", - "website": "https://contactform7.com", - "cpe": null, - "categories": [ - { - "id": 87, - "slug": "wordpress-plugins", - "name": "WordPress plugins" - }, - { - "id": 110, - "slug": "form-builders", - "name": "Form builders" - } - ], - "rootPath": true - }, - { - "slug": "yoast-seo", - "name": "Yoast SEO", - "description": "Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.", - "confidence": 100, - "version": "12.5", - "icon": "Yoast SEO.png", - "website": "https://yoast.com/wordpress/plugins/seo/", - "cpe": null, - "categories": [ - { - "id": 54, - "slug": "seo", - "name": "SEO" - }, - { - "id": 87, - "slug": "wordpress-plugins", - "name": "WordPress plugins" - } - ], - "rootPath": true - }, - { - "slug": "site-kit", - "name": "Site Kit", - "description": "Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.", - "confidence": 100, - "version": "1.84.0", - "icon": "Google.svg", - "website": "https://sitekit.withgoogle.com/", - "cpe": null, - "categories": [ - { - "id": 10, - "slug": "analytics", - "name": "Analytics" - }, - { - "id": 87, - "slug": "wordpress-plugins", - "name": "WordPress plugins" - } - ], - "rootPath": true - }, - { - "slug": "twitter-emoji-twemoji", - "name": "Twitter Emoji (Twemoji)", - "description": "Twitter Emoji is a set of open-source emoticons and emojis for Twitter, TweetDeck, and also for Android and iOS versions of the application.", - "confidence": 100, - "version": "12.1.3", - "icon": "default.svg", - "website": "https://twitter.github.io/twemoji/", - "cpe": null, - "categories": [ - { - "id": 17, - "slug": "font-scripts", - "name": "Font scripts" - } - ], - "rootPath": true - }, - { - "slug": "jquery-migrate", - "name": "jQuery Migrate", - "description": "Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.", + "slug": "microsoft-asp-net", + "name": "Microsoft ASP.NET", + "description": "ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.", "confidence": 100, - "version": "1.4.1", - "icon": "jQuery.svg", - "website": "https://github.com/jquery/jquery-migrate", - "cpe": null, + "version": null, + "icon": "Microsoft ASP.NET.svg", + "website": "https://www.asp.net", + "cpe": "cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*", "categories": [ { - "id": 59, - "slug": "javascript-libraries", - "name": "JavaScript libraries" + "id": 18, + "slug": "web-frameworks", + "name": "Web frameworks" } ], "rootPath": true @@ -66508,7 +62495,7 @@ "name": "jQuery", "description": "jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.", "confidence": 100, - "version": "1.12.4", + "version": "3.4.1", "icon": "jQuery.svg", "website": "https://jquery.com", "cpe": "cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*", @@ -66522,91 +62509,19 @@ "rootPath": true }, { - "slug": "google-analytics", - "name": "Google Analytics", - "description": "Google Analytics is a free web analytics service that tracks and reports website traffic.", - "confidence": 100, - "version": "UA", - "icon": "Google Analytics.svg", - "website": "https://google.com/analytics", - "cpe": null, - "categories": [ - { - "id": 10, - "slug": "analytics", - "name": "Analytics" - } - ], - "rootPath": true - }, - { - "slug": "google-font-api", - "name": "Google Font API", - "description": "Google Font API is a web service that supports open-source font files that can be used on your web designs.", - "confidence": 100, - "version": null, - "icon": "Google Font API.svg", - "website": "https://google.com/fonts", - "cpe": null, - "categories": [ - { - "id": 17, - "slug": "font-scripts", - "name": "Font scripts" - } - ], - "rootPath": true - }, - { - "slug": "gravatar", - "name": "Gravatar", - "description": "Gravatar is a service for providing globally unique avatars.", - "confidence": 100, - "version": null, - "icon": "Gravatar.png", - "website": "https://gravatar.com", - "cpe": null, - "categories": [ - { - "id": 19, - "slug": "miscellaneous", - "name": "Miscellaneous" - } - ], - "rootPath": true - }, - { - "slug": "rss", - "name": "RSS", - "description": "RSS is a family of web feed formats used to publish frequently updated works—such as blog entries, news headlines, audio, and video—in a standardized format.", - "confidence": 100, - "version": null, - "icon": "RSS.svg", - "website": "https://www.rssboard.org/rss-specification", - "cpe": null, - "categories": [ - { - "id": 19, - "slug": "miscellaneous", - "name": "Miscellaneous" - } - ], - "rootPath": true - }, - { - "slug": "open-graph", - "name": "Open Graph", - "description": "Open Graph is a protocol that is used to integrate any web page into the social graph.", + "slug": "hsts", + "name": "HSTS", + "description": "HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.", "confidence": 100, "version": null, - "icon": "Open Graph.png", - "website": "https://ogp.me", + "icon": "default.svg", + "website": "https://www.rfc-editor.org/rfc/rfc6797#section-6.1", "cpe": null, "categories": [ { - "id": 19, - "slug": "miscellaneous", - "name": "Miscellaneous" + "id": 16, + "slug": "security", + "name": "Security" } ], "rootPath": true @@ -66617,36 +62532,34 @@ "nuclei": [], "lhr": [ { - "requestedUrl": "https://publisocial.fr/", - "finalUrl": "https://www.publisocial.fr/", - "fetchTime": "2024-07-21T05:30:17.249Z", - "runWarnings": [ - "The page may not be loading as expected because your test URL (https://publisocial.fr/) was redirected to https://www.publisocial.fr/. Try testing the second URL directly." - ], + "requestedUrl": "https://rappel.conso.gouv.fr/", + "finalUrl": "https://rappel.conso.gouv.fr/", + "fetchTime": "2024-07-28T05:47:55.202Z", + "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.58 + "score": 0.97 }, "accessibility": { "title": "Accessibility", "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", "id": "accessibility", - "score": 1 + "score": 0.9 }, "best-practices": { "title": "Best Practices", "id": "best-practices", - "score": 0.87 + "score": 0.73 }, "seo": { "title": "SEO", "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", "id": "seo", - "score": 0.98 + "score": 0.8 }, "pwa": { "title": "Progressive Web App", @@ -66663,49 +62576,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 5342, + "numericValue": 1922, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 4895, - "firstMeaningfulPaint": 5342, - "largestContentfulPaint": 6017, - "firstCPUIdle": 5342, - "interactive": 5342, - "speedIndex": 5142, + "firstContentfulPaint": 1922, + "firstMeaningfulPaint": 1922, + "largestContentfulPaint": 2297, + "firstCPUIdle": 1922, + "interactive": 1922, + "speedIndex": 2815, "estimatedInputLatency": 13, "totalBlockingTime": 0, - "maxPotentialFID": 16, - "cumulativeLayoutShift": 0.024360243055555553, + "maxPotentialFID": 41, + "cumulativeLayoutShift": 0.00044674343532986107, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 501447275, + "observedTimeOriginTs": 441081151, "observedNavigationStart": 0, - "observedNavigationStartTs": 501447275, - "observedFirstPaint": 1514, - "observedFirstPaintTs": 502961621, - "observedFirstContentfulPaint": 1514, - "observedFirstContentfulPaintTs": 502961621, - "observedFirstMeaningfulPaint": 1573, - "observedFirstMeaningfulPaintTs": 503020369, - "observedLargestContentfulPaint": 1573, - "observedLargestContentfulPaintTs": 503020369, - "observedTraceEnd": 2996, - "observedTraceEndTs": 504443101, - "observedLoad": 1742, - "observedLoadTs": 503189350, - "observedDomContentLoaded": 1683, - "observedDomContentLoadedTs": 503130103, - "observedCumulativeLayoutShift": 0.024360243055555553, + "observedNavigationStartTs": 441081151, + "observedFirstPaint": 1211, + "observedFirstPaintTs": 442291799, + "observedFirstContentfulPaint": 1211, + "observedFirstContentfulPaintTs": 442291799, + "observedFirstMeaningfulPaint": 1211, + "observedFirstMeaningfulPaintTs": 442291799, + "observedLargestContentfulPaint": 1374, + "observedLargestContentfulPaintTs": 442454904, + "observedTraceEnd": 11755, + "observedTraceEndTs": 452835808, + "observedLoad": 10699, + "observedLoadTs": 451780606, + "observedDomContentLoaded": 1199, + "observedDomContentLoadedTs": 442280567, + "observedCumulativeLayoutShift": 0.00044674343532986107, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 1515, - "observedFirstVisualChangeTs": 502962275, - "observedLastVisualChange": 1682, - "observedLastVisualChangeTs": 503129275, - "observedSpeedIndex": 1579, - "observedSpeedIndexTs": 503026211 + "observedFirstVisualChange": 1217, + "observedFirstVisualChangeTs": 442298151, + "observedLastVisualChange": 1817, + "observedLastVisualChangeTs": 442898151, + "observedSpeedIndex": 1262, + "observedSpeedIndexTs": 442343306 }, { "lcpInvalidated": false @@ -66723,23 +62636,23 @@ "type": "debugdata", "items": [ { - "numRequests": 45, - "numScripts": 15, - "numStylesheets": 12, - "numFonts": 7, - "numTasks": 454, - "numTasksOver10ms": 4, - "numTasksOver25ms": 1, + "numRequests": 18, + "numScripts": 2, + "numStylesheets": 2, + "numFonts": 0, + "numTasks": 356, + "numTasksOver10ms": 2, + "numTasksOver25ms": 0, "numTasksOver50ms": 0, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 1.507, - "throughput": 6927602.3032482015, - "maxRtt": 95.684, - "maxServerLatency": 56.994, - "totalByteWeight": 366367, - "totalTaskTime": 213.02099999999908, - "mainDocumentTransferSize": 24590 + "rtt": 177.333, + "throughput": 6525800.369580192, + "maxRtt": 177.333, + "maxServerLatency": 2.8079999999999643, + "totalByteWeight": 173924, + "totalTaskTime": 80.73700000000012, + "mainDocumentTransferSize": 18509 } ] } @@ -66760,22 +62673,21 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B+", "testsslExpireSoon": false, - "testsslExpireDate": "2025-07-14T21:59:00.000Z", - "testsslGrade": "A+", - "cookiesGrade": "C", - "cookiesCount": 4, - "trackersGrade": "F", - "trackersCount": 47, - "lighthouse_performance": 0.58, - "lighthouse_performanceGrade": "C", - "lighthouse_accessibility": 1, + "testsslExpireDate": "2025-04-01T21:59:00.000Z", + "testsslGrade": "A", + "cookiesGrade": "B", + "cookiesCount": 2, + "trackersGrade": "A", + "trackersCount": 0, + "lighthouse_performance": 0.97, + "lighthouse_performanceGrade": "A", + "lighthouse_accessibility": 0.9, "lighthouse_accessibilityGrade": "A", - "lighthouse_best-practices": 0.87, - "lighthouse_best-practicesGrade": "A", - "lighthouse_seo": 0.98, - "lighthouse_seoGrade": "A", + "lighthouse_best-practices": 0.73, + "lighthouse_best-practicesGrade": "B", + "lighthouse_seo": 0.8, + "lighthouse_seoGrade": "B", "lighthouse_pwa": 0.58, "lighthouse_pwaGrade": "C", "declaration-a11y": "F" @@ -66783,253 +62695,12 @@ }, { "404": null, - "url": "https://rappel.conso.gouv.fr", + "url": "https://reforme-retraite.gouv.fr", "category": "dnum", - "http": { - "url": "https://rappel.conso.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 05:40:12 GMT", - "grade": "C+", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Cache-Control": "no-cache, no-store", - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Security-Policy": "default-src 'none';script-src * 'self' 'nonce-ktYuKS0Y3rWsRpiCue5A0ZqEma+duU2mpAxPUowWxi8=';style-src 'self' 'unsafe-inline';connect-src 'self';form-action 'self';img-src * 'self';frame-ancestors 'none';frame-src 'none';base-uri 'self'", - "Content-Type": "text/html; charset=utf-8", - "Date": "Sun, 21 Jul 2024 05:40:10 GMT", - "Keep-Alive": "timeout=5, max=300", - "Pragma": "no-cache", - "Referrer-Policy": "Same-origin", - "Server": "webServer1", - "Set-Cookie": ".AspNetCore.Antiforgery.O33mliWV2hE=CfDJ8DeW6_niT_hOgsp_1shK8yrBxXw4MpWUGU0BnIg3erBGbUU1a3s_Hc1NIgh_leUt6fTfpEZWjnkyzabipE9VKIWRtVfzK42eCb3FTaxDsg09aA1l1aHxluGoZ12OaNqIbIutYKclARrNs07yhDWkEfM; path=/; secure; samesite=strict; httponly, BWROUTEID=3ddbb54ff84f9a8db100e8cb35c25ae2.1; Path=/; Secure", - "Strict-Transport-Security": "max-age=3600; includeSubDomains; preload, max-age=15768000; includeSubdomains; preload", - "Transfer-Encoding": "chunked", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "SAMEORIGIN, SAMEORIGIN", - "X-Powered-By": "CCRF", - "X-Xss-Protection": "1; mode=block" - }, - "scan_id": 53622848, - "score": 60, - "start_time": "Sun, 21 Jul 2024 05:40:09 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 2, - "tests_passed": 9, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": { - "base-uri": [ - "'self'" - ], - "connect-src": [ - "'self'" - ], - "default-src": [ - "'none'" - ], - "form-action": [ - "'self'" - ], - "frame-ancestors": [ - "'none'" - ], - "frame-src": [ - "'none'" - ], - "img-src": [ - "'self'", - "*" - ], - "script-src": [ - "'self'", - "'nonce-ktyuks0y3rwsrpicue5a0zqema+duu2mpaxpuowwxi8='", - "*" - ], - "style-src": [ - "'self'", - "'unsafe-inline'" - ] - }, - "http": true, - "meta": false, - "numPolicies": 1, - "policy": { - "antiClickjacking": true, - "defaultNone": true, - "insecureBaseUri": false, - "insecureFormAction": false, - "insecureSchemeActive": false, - "insecureSchemePassive": false, - "strictDynamic": false, - "unsafeEval": false, - "unsafeInline": true, - "unsafeInlineStyle": true, - "unsafeObjects": false - } - }, - "pass": false, - "result": "csp-implemented-with-unsafe-inline", - "score_description": "Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.", - "score_modifier": -20 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - ".AspNetCore.Antiforgery.O33mliWV2hE": { - "domain": "rappel.conso.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": "Strict", - "secure": true - }, - "BWROUTEID": { - "domain": "rappel.conso.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://rappel.conso.gouv.fr:443/", - "redirects": true, - "route": [ - "http://rappel.conso.gouv.fr/", - "https://rappel.conso.gouv.fr:443/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": "Same-origin", - "http": true, - "meta": false - }, - "pass": true, - "result": "referrer-policy-private", - "score_description": "Referrer-Policy header set to \"no-referrer\", \"same-origin\", \"strict-origin\" or \"strict-origin-when-cross-origin\"", - "score_modifier": 5 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=3600; includeSubDomains; preload, max-age=15768000; includeSubdomains; preload", - "includeSubDomains": false, - "max-age": null, - "preload": false, - "preloaded": false - }, - "pass": false, - "result": "hsts-header-invalid", - "score_description": "HTTP Strict Transport Security (HSTS) header cannot be recognized", - "score_modifier": -20 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN, SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-implemented-via-csp", - "score_description": "X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive", - "score_modifier": 5 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": "1; mode=block" - }, - "pass": true, - "result": "x-xss-protection-enabled-mode-block", - "score_description": "Deprecated X-XSS-Protection header set to \"1; mode=block\"", - "score_modifier": 0 - } - } - }, + "tags": [ + "unknown" + ], + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -67037,70 +62708,70 @@ "testssl": [ { "id": "service", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "HTTP" }, { "id": "pre_128cipher", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No 128 cipher limit bug" }, { "id": "SSLv2", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "SSLv3", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "TLS1", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_1", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_2", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "TLS1_3", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not offered + downgraded to weaker protocol" }, { "id": "ALPN", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "http/1.1" + "finding": "not offered" }, { "id": "cipherlist_NULL", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -67108,7 +62779,7 @@ }, { "id": "cipherlist_aNULL", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -67116,7 +62787,7 @@ }, { "id": "cipherlist_EXPORT", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -67124,7 +62795,7 @@ }, { "id": "cipherlist_LOW", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -67132,7 +62803,7 @@ }, { "id": "cipherlist_3DES_IDEA", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -67140,7 +62811,7 @@ }, { "id": "cipherlist_OBSOLETED", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -67148,567 +62819,441 @@ }, { "id": "cipherlist_STRONG_NOFS", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "cipherlist_STRONG_FS", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "cipher_order-tls1_2", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "server" }, { "id": "cipherorder_TLSv1_2", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "ECDHE-RSA-AES128-GCM-SHA256" + "finding": "ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "cipher_order", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "server" }, { "id": "FS", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "FS_ciphers", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "FS_ECDHE_curves", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", - "finding": "prime256v1 secp384r1 secp521r1" + "finding": "prime256v1 secp384r1" }, { "id": "TLS_extensions", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'session ticket/#35' 'max fragment length/#1' 'application layer protocol negotiation/#16' 'extended master secret/#23'" + "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'extended master secret/#23'" }, { "id": "TLS_session_ticket", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "valid for 300 seconds only (= 60 days" + "finding": "250 >= 60 days" }, { "id": "cert_notBefore", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "2024-04-01 22:00" + "finding": "2024-04-04 22:00" }, { "id": "cert_notAfter", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", - "finding": "2025-04-01 21:59" + "finding": "2025-04-04 21:59" }, { "id": "cert_extlifeSpan", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "certificate has no extended life time according to browser forum" }, { "id": "cert_eTLS", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not present" }, { "id": "cert_crlDistributionPoints", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" + "finding": "http://crl.certigna.fr/servicesca.crl http://crl.dhimyotis.com/servicesca.crl" }, { "id": "cert_ocspURL", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" + "finding": "http://servicesca.ocsp.dhimyotis.com http://servicesca.ocsp.certigna.fr" }, { "id": "OCSP_stapling", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "cert_mustStapleExtension", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "--" }, { "id": "DNS_CAArecord", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "LOW", "finding": "--" }, { "id": "certificate_transparency", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "yes (certificate extension)" }, { "id": "certs_countServer", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "3" + "finding": "2" }, { "id": "certs_list_ordering_problem", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_caIssuers", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "Certigna Services CA (DHIMYOTIS from FR)" }, { "id": "intermediate_cert <#1>", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "-----BEGIN CERTIFICATE-----\nMIIGFjCCBP6gAwIBAgIQb4L6KKzW94S7WxILqHNnrTANBgkqhkiG9w0BAQsFADA0MQswCQYDVQQGEwJGUjESMBAGA1UECgwJRGhpbXlvdGlzMREwDwYDVQQDDAhDZXJ0aWduYTAeFw0xNTExMjUxMTMzNTJaFw0yNTExMjIxMTMzNTJaMH0xCzAJBgNVBAYTAkZSMRIwEAYDVQQKDAlESElNWU9USVMxHDAaBgNVBAsMEzAwMDIgNDgxNDYzMDgxMDAwMzYxHTAbBgNVBGEMFE5UUkZSLTQ4MTQ2MzA4MTAwMDM2MR0wGwYDVQQDDBRDZXJ0aWduYSBTZXJ2aWNlcyBDQTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALPM+7LpWBz9wFcPaTc3xnB+5g0XrnptB0EPPfrR04vO52Ykm4ky1d4ZLd10tbM1fa1RqNSOVWWg93O4pL7zCFKlz6JV74ZZVhHpEAwzBwv2oPnxvVbxtSN67xsSY66ahUYxjzs8+3FhmsiRxqwnTYvK2u70uglUvRisOKyTL/M6JnrC4y8tlmoz7OSa5BmBMVplJFQtvmON6N9aHLvYMz+EyJPCbXL6pELxeHjFT5QmIaRamsr2DOTaCjtBZKI1Wnh3X7lnbjM8MESJiV2t7E9tIQNG0Z/HI3tO4aaUMum3KysY5sC8v3vi7rryGidgzHQhrtP0ZXWW5UH/k7umLS/P/XXWnCFpc2Lxa1uDGfc2im7xibRoPP+JNZszN76euFlls6jyEXAiwnVr14tVVTewLK0OWs5SJHpEKp8PGMZRDj59EmMvokWwzL6QzNZ6vVAp00oOm05sbspNY9+MFqGKKUsKvhFGEa4XmRNxDe6KswLcjPZB+NKHZ0QWFd4ip5C5XmEK/8qIPjwVr9dah9+oiHGGO8Wx7gJAMF5DTmkvW7GhqCKj1LmHnabjzc8av6kxWVQZi/C7HCm9i/W4wio+JA2EAFLqNL3GPNbK9kau4yPhQt/c7zxzo0OHnlsV4THCG7oOCd3cfCiyfQcb3FBt6OSpaKRZxjCLBwP00r0fAgMBAAGjggHZMIIB1TASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUrOyGj0s3HLh/FxsZ0K7oTuM0XBIwZAYDVR0jBF0wW4AUGu3+QTmQtCRZvgHyUtVF9lo53BGhOKQ2MDQxCzAJBgNVBAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hggkA/tzjAQ/JSP8wSQYDVR0gBEIwQDA+BgoqgXoBgTEBAAECMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmNlcnRpZ25hLmZyL2F1dG9yaXRlcy8wfAYIKwYBBQUHAQEEcDBuMDQGCCsGAQUFBzAChihodHRwOi8vYXV0b3JpdGUuY2VydGlnbmEuZnIvY2VydGlnbmEuZGVyMDYGCCsGAQUFBzAChipodHRwOi8vYXV0b3JpdGUuZGhpbXlvdGlzLmNvbS9jZXJ0aWduYS5kZXIwYQYDVR0fBFowWDApoCegJYYjaHR0cDovL2NybC5jZXJ0aWduYS5mci9jZXJ0aWduYS5jcmwwK6ApoCeGJWh0dHA6Ly9jcmwuZGhpbXlvdGlzLmNvbS9jZXJ0aWduYS5jcmwwDQYJKoZIhvcNAQELBQADggEBAGLft7gIuGPZVfg0cTM+HT2xAZFPDb/2+siH06x+dH044zMKbBINbRzhKipwB1A3MW8FQjveE9tyrfyuqZE/X+o2SlGcdNV44ybYkxo4f6kcLEavV/IW+oFEnojZlhpksYcxrvQoEyqkAwshe8IS2KtZHKVACrt+XSs0lwvy7ALGmHaF7A4by6cZWItA7Lhj8XWp+8tBJDj7HocRbWtxzEODdBuyMgJzFrNjc+97J0vH/K0+3yjmkczpKshMA0tM+MF9XDMN/MuwrPmUWGO/fHiqHgUp8yqeWtl1n44ZxkkK1t9GRwhnDWLv73/xhTmdhWYQ/reo0GbgBoLiltKmIJQ=\n-----END CERTIFICATE-----" }, { "id": "intermediate_cert_fingerprintSHA256 <#1>", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" }, { "id": "intermediate_cert_notBefore <#1>", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "2015-11-25 11:33" }, { "id": "intermediate_cert_notAfter <#1>", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "OK", - "finding": "2025-11-22 11:33" - }, - { - "id": "intermediate_cert_expiration <#1>", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "OK", - "finding": "ok > 40 days" - }, - { - "id": "intermediate_cert_chain <#1>", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "INFO", - "finding": "Certigna Services CA <-- Certigna" - }, - { - "id": "intermediate_cert <#2>", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "INFO", - "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" - }, - { - "id": "intermediate_cert_fingerprintSHA256 <#2>", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "INFO", - "finding": "E3B6A2DB2ED7CE48842F7AC53241C7B71D54144BFB40C11F3F1D0B42F5EEA12D" - }, - { - "id": "intermediate_cert_notBefore <#2>", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "INFO", - "finding": "2007-06-29 15:13" - }, - { - "id": "intermediate_cert_notAfter <#2>", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "OK", - "finding": "2027-06-29 15:13" - }, - { - "id": "intermediate_cert_expiration <#2>", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "OK", - "finding": "ok > 40 days" - }, - { - "id": "intermediate_cert_chain <#2>", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "INFO", - "finding": "Certigna <-- Certigna" - }, - { - "id": "intermediate_cert_badOCSP", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "OK", - "finding": "intermediate certificate(s) is/are ok" - }, - { - "id": "HTTP_status_code", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "INFO", - "finding": "200 OK ('/')" - }, - { - "id": "HTTP_clock_skew", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "INFO", - "finding": "0 seconds from localtime" - }, - { - "id": "HTTP_headerTime", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "INFO", - "finding": "1721540480" - }, - { - "id": "HSTS_multiple", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "MEDIUM", - "finding": "Multiple HSTS headers. Using first header: max-age=3600; includeSubDomains; preload" - }, - { - "id": "HSTS_time", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "MEDIUM", - "finding": "max-age too short. 0 days (=3600 seconds) < 15552000 seconds" - }, - { - "id": "HSTS_subdomains", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "OK", - "finding": "includes subdomains" - }, - { - "id": "HSTS_preload", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "OK", - "finding": "domain IS marked for preloading" - }, - { - "id": "HPKP", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "INFO", - "finding": "No support for HTTP Public Key Pinning" - }, - { - "id": "banner_server", - "ip": "rappel.conso.gouv.fr/185.24.187.242", - "port": "443", - "severity": "INFO", - "finding": "webServer1" + "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "port": "443", + "severity": "OK", + "finding": "2025-11-22 11:33" }, { - "id": "banner_application", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "id": "intermediate_cert_expiration <#1>", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", - "severity": "INFO", - "finding": "X-Powered-By: CCRF" + "severity": "OK", + "finding": "ok > 40 days" }, { - "id": "cookie_count", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "id": "intermediate_cert_chain <#1>", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "2 at '/'" + "finding": "Certigna Services CA <-- Certigna" }, { - "id": "cookie_secure", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "id": "intermediate_cert_badOCSP", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", - "finding": "All (2) at '/' marked as secure" + "finding": "intermediate certificate(s) is/are ok" }, { - "id": "cookie_httponly", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "id": "HTTP_status_code", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "2/2 at '/' marked as HttpOnly" + "finding": "200 OK ('/')" }, { - "id": "X-Frame-Options_multiple", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "id": "HTTP_clock_skew", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", - "severity": "MEDIUM", - "finding": "Multiple X-Frame-Options headers. Using first header: SAMEORIGIN" + "severity": "INFO", + "finding": "Got no HTTP time, maybe try different URL?" }, { - "id": "X-Frame-Options", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "id": "HSTS", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", - "severity": "OK", - "finding": "SAMEORIGIN" + "severity": "LOW", + "finding": "not offered" }, { - "id": "X-Content-Type-Options", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "id": "HPKP", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", - "severity": "OK", - "finding": "nosniff" + "severity": "INFO", + "finding": "No support for HTTP Public Key Pinning" }, { - "id": "Content-Security-Policy", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "id": "banner_server", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", - "severity": "OK", - "finding": "default-src 'none';script-src * 'self' 'nonce-E5weK/RslwoxwJKjBH00raK1yCl6v0Ew7h10DH/J6uE=';style-src 'self' 'unsafe-inline';connect-src 'self';form-action 'self';img-src * 'self';frame-ancestors 'none';frame-src 'none';base-uri 'self'" + "severity": "INFO", + "finding": "No Server banner line in header, interesting!" }, { - "id": "X-XSS-Protection", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "id": "banner_application", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "1; mode=block" + "finding": "No application banner found" }, { - "id": "Referrer-Policy", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "id": "cookie_count", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "Same-origin" + "finding": "0 at '/'" }, { "id": "Cache-Control", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "no-cache, no-store" + "finding": "no-store, must-revalidate, no-cache" }, { "id": "Pragma", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "no-cache" }, { "id": "banner_reverseproxy", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "cwe": "CWE-200", @@ -67716,7 +63261,7 @@ }, { "id": "heartbleed", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2014-0160", @@ -67725,7 +63270,7 @@ }, { "id": "CCS", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2014-0224", @@ -67734,16 +63279,16 @@ }, { "id": "ticketbleed", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2016-9244", "cwe": "CWE-200", - "finding": "not vulnerable" + "finding": "no session ticket extension" }, { "id": "ROBOT", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", @@ -67752,7 +63297,7 @@ }, { "id": "secure_renego", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cwe": "CWE-310", @@ -67760,16 +63305,16 @@ }, { "id": "secure_client_renego", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2011-1473", "cwe": "CWE-310", - "finding": "not vulnerable" + "finding": "not vulnerable, mitigated" }, { "id": "CRIME_TLS", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2012-4929", @@ -67778,16 +63323,16 @@ }, { "id": "BREACH", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", - "severity": "MEDIUM", + "severity": "OK", "cve": "CVE-2013-3587", "cwe": "CWE-310", - "finding": "potentially VULNERABLE, gzip HTTP compression detected - only supplied '/' tested" + "finding": "not vulnerable, no gzip/deflate/compress/br HTTP compression - only supplied '/' tested" }, { "id": "POODLE_SSL", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2014-3566", @@ -67796,14 +63341,14 @@ }, { "id": "fallback_SCSV", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "no protocol below TLS 1.2 offered" }, { "id": "SWEET32", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2016-2183 CVE-2016-6329", @@ -67812,7 +63357,7 @@ }, { "id": "FREAK", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2015-0204", @@ -67821,7 +63366,7 @@ }, { "id": "DROWN", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2016-0800 CVE-2016-0703", @@ -67830,16 +63375,16 @@ }, { "id": "DROWN_hint", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "cve": "CVE-2016-0800 CVE-2016-0703", "cwe": "CWE-310", - "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=07DC14339F5FDCB93AC2380AB5AF502F01B697E986E39EA48C19C95B56C402B3" + "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=29E158D1569B4529E0D3DC37D64618D9764EE926E8F7E3BEC3770D60102308E4" }, { "id": "LOGJAM", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -67848,7 +63393,7 @@ }, { "id": "LOGJAM-common_primes", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -67857,7 +63402,7 @@ }, { "id": "BEAST", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2011-3389", @@ -67866,7 +63411,7 @@ }, { "id": "LUCKY13", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2013-0169", @@ -67875,7 +63420,7 @@ }, { "id": "winshock", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2014-6321", @@ -67884,7 +63429,7 @@ }, { "id": "RC4", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2013-2566 CVE-2015-2808", @@ -67893,405 +63438,349 @@ }, { "id": "clientsimulation-android_60", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_70", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_81", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_90", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_X", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_11", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_12", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-chrome_79_win10", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-chrome_101_win10", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-firefox_66_win81", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-firefox_100_win10", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-ie_6_xp", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_win7", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_xp", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win7", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win81", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_winphone81", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win10", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-edge_15_win10", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-edge_101_win10_21h2", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_121_ios_122", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_130_osx_10146", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_154_osx_1231", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java_7u25", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-java_8u161", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java1102", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java1703", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-go_1178", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-libressl_283", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_102e", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_110l", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_111d", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_303", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-apple_mail_16_0", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-thunderbird_91_9", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "rating_spec", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" }, { "id": "rating_doc", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" }, { "id": "protocol_support_score", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "100" }, { "id": "protocol_support_score_weighted", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "30" }, { "id": "key_exchange_score", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "90" }, { "id": "key_exchange_score_weighted", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "27" }, { "id": "cipher_strength_score", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "60" }, { "id": "cipher_strength_score_weighted", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "24" }, { "id": "final_score", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "81" }, { "id": "overall_grade", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "A" }, { "id": "grade_cap_reason_1", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "Grade capped to A. HSTS max-age is too short" + "finding": "Grade capped to A. HSTS is not offered" }, { "id": "scanTime", - "ip": "rappel.conso.gouv.fr/185.24.187.242", + "ip": "reforme-retraite.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "89" + "finding": "52" } ], "thirdparties": { "trackers": [], - "cookies": [ - { - "name": "BWROUTEID", - "value": "3ddbb54ff84f9a8db100e8cb35c25ae2.1", - "domain": "rappel.conso.gouv.fr", - "path": "/", - "expires": -1, - "size": 43, - "httpOnly": false, - "secure": true, - "session": true, - "sameParty": false, - "sourceScheme": "Secure", - "sourcePort": 443 - }, - { - "name": ".AspNetCore.Antiforgery.O33mliWV2hE", - "value": "CfDJ8DeW6_niT_hOgsp_1shK8yqvB7ilfzNrhNoqxilg7j6Pz9hgcFU4tAuyoxh4YOovPzf__NAtPVZfZtm67pT1ykqbqkdp5DsaD3jhm5BZbRK6NvKOScCmHCV9zmiJIjrZ3F0nEwxww0mEZlVwM_8DB18", - "domain": "rappel.conso.gouv.fr", - "path": "/", - "expires": -1, - "size": 190, - "httpOnly": true, - "secure": true, - "session": true, - "sameSite": "Strict", - "sameParty": false, - "sourceScheme": "Secure", - "sourcePort": 443 - } - ], + "cookies": [], "headers": { - "cache-control": "no-cache, no-store", - "connection": "Keep-Alive", - "content-encoding": "gzip", - "content-security-policy": "default-src 'none';script-src * 'self' 'nonce-2gi3Nj8PyYrfNPcjRsXzMAcrQN6vSh6rRGxjqwyE/o0=';style-src 'self' 'unsafe-inline';connect-src 'self';form-action 'self';img-src * 'self';frame-ancestors 'none';frame-src 'none';base-uri 'self'", - "content-type": "text/html; charset=utf-8", - "date": "Sun, 21 Jul 2024 05:40:25 GMT", - "keep-alive": "timeout=5, max=300", - "pragma": "no-cache", - "referrer-policy": "Same-origin", - "server": "webServer1", - "set-cookie": ".AspNetCore.Antiforgery.O33mliWV2hE=CfDJ8DeW6_niT_hOgsp_1shK8yqvB7ilfzNrhNoqxilg7j6Pz9hgcFU4tAuyoxh4YOovPzf__NAtPVZfZtm67pT1ykqbqkdp5DsaD3jhm5BZbRK6NvKOScCmHCV9zmiJIjrZ3F0nEwxww0mEZlVwM_8DB18; path=/; secure; samesite=strict; httponly\nBWROUTEID=3ddbb54ff84f9a8db100e8cb35c25ae2.1; Path=/; Secure", - "strict-transport-security": "max-age=3600; includeSubDomains; preload\nmax-age=15768000; includeSubdomains; preload", - "transfer-encoding": "chunked", - "vary": "Accept-Encoding", - "x-content-type-options": "nosniff", - "x-frame-options": "SAMEORIGIN\nSAMEORIGIN", - "x-powered-by": "CCRF", - "x-xss-protection": "1; mode=block" + "cache-control": "no-store, must-revalidate, no-cache", + "connection": "close", + "content-length": "245", + "content-type": "text/html", + "pragma": "no-cache" }, "endpoints": [ { - "hostname": "rappel.conso.gouv.fr", - "ip": "185.24.187.242", + "hostname": "reforme-retraite.gouv.fr", + "ip": "185.194.82.27", "geoip": { - "city": { - "geoname_id": 2988507, - "names": { - "de": "Paris", - "en": "Paris", - "es": "París", - "fr": "Paris", - "ja": "パリ", - "pt-BR": "Paris", - "ru": "Париж", - "zh-CN": "巴黎" - } - }, "continent": { "code": "EU", "geoname_id": 6255148, @@ -68323,13 +63812,10 @@ }, "location": { "accuracy_radius": 500, - "latitude": 48.8323, - "longitude": 2.4075, + "latitude": 48.8582, + "longitude": 2.3387, "time_zone": "Europe/Paris" }, - "postal": { - "code": "75015" - }, "registered_country": { "geoname_id": 3017382, "is_in_european_union": true, @@ -68344,138 +63830,42 @@ "ru": "Франция", "zh-CN": "法国" } - }, - "subdivisions": [ - { - "geoname_id": 3012874, - "iso_code": "IDF", - "names": { - "de": "Île-de-France", - "en": "Île-de-France", - "es": "Isla de Francia", - "fr": "Île-de-France", - "ja": "イル・ド・フランス", - "pt-BR": "Ilha de França", - "ru": "Иль-де-Франс", - "zh-CN": "法兰西岛" - } - }, - { - "geoname_id": 2968815, - "iso_code": "75", - "names": { - "de": "Paris", - "en": "Paris", - "es": "Paris", - "fr": "Paris" - } - } - ] + } } } ] }, "wappalyzer": { "urls": { - "https://rappel.conso.gouv.fr/": { - "status": 200 + "https://reforme-retraite.gouv.fr/": { + "status": 0, + "error": "net::ERR_CONNECTION_RESET at https://reforme-retraite.gouv.fr/ (https://reforme-retraite.gouv.fr/)" } }, - "technologies": [ - { - "slug": "bootstrap", - "name": "Bootstrap", - "description": "Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.", - "confidence": 100, - "version": "4.3.1", - "icon": "Bootstrap.svg", - "website": "https://getbootstrap.com", - "cpe": "cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 66, - "slug": "ui-frameworks", - "name": "UI frameworks" - } - ], - "rootPath": true - }, - { - "slug": "microsoft-asp-net", - "name": "Microsoft ASP.NET", - "description": "ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.", - "confidence": 100, - "version": null, - "icon": "Microsoft ASP.NET.svg", - "website": "https://www.asp.net", - "cpe": "cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 18, - "slug": "web-frameworks", - "name": "Web frameworks" - } - ], - "rootPath": true - }, - { - "slug": "jquery", - "name": "jQuery", - "description": "jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.", - "confidence": 100, - "version": "3.4.1", - "icon": "jQuery.svg", - "website": "https://jquery.com", - "cpe": "cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 59, - "slug": "javascript-libraries", - "name": "JavaScript libraries" - } - ], - "rootPath": true - }, - { - "slug": "hsts", - "name": "HSTS", - "description": "HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.", - "confidence": 100, - "version": null, - "icon": "default.svg", - "website": "https://www.rfc-editor.org/rfc/rfc6797#section-6.1", - "cpe": null, - "categories": [ - { - "id": 16, - "slug": "security", - "name": "Security" - } - ], - "rootPath": true - } - ] + "technologies": [] }, "zap": null, "nuclei": [], "lhr": [ { - "requestedUrl": "https://rappel.conso.gouv.fr/", - "finalUrl": "https://rappel.conso.gouv.fr/", - "fetchTime": "2024-07-21T05:40:01.919Z", - "runWarnings": [], + "requestedUrl": "https://reforme-retraite.gouv.fr/", + "finalUrl": "https://travail-emploi.gouv.fr/retraite/", + "fetchTime": "2024-07-28T05:53:11.501Z", + "runWarnings": [ + "The page may not be loading as expected because your test URL (https://reforme-retraite.gouv.fr/) was redirected to https://travail-emploi.gouv.fr/retraite/. Try testing the second URL directly." + ], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.96 + "score": 0.43 }, "accessibility": { "title": "Accessibility", "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", "id": "accessibility", - "score": 0.9 + "score": 0.91 }, "best-practices": { "title": "Best Practices", @@ -68487,7 +63877,7 @@ "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", "id": "seo", - "score": 0.8 + "score": 0.91 }, "pwa": { "title": "Progressive Web App", @@ -68504,49 +63894,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 2180, + "numericValue": 7533, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 2180, - "firstMeaningfulPaint": 2180, - "largestContentfulPaint": 2442, - "firstCPUIdle": 2180, - "interactive": 2180, - "speedIndex": 2868, + "firstContentfulPaint": 4871, + "firstMeaningfulPaint": 4871, + "largestContentfulPaint": 7673, + "firstCPUIdle": 6559, + "interactive": 7533, + "speedIndex": 19433, "estimatedInputLatency": 13, - "totalBlockingTime": 0, - "maxPotentialFID": 43, - "cumulativeLayoutShift": 0, + "totalBlockingTime": 100, + "maxPotentialFID": 121, + "cumulativeLayoutShift": 0.00018100992838541665, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 251925358, + "observedTimeOriginTs": 315851536, "observedNavigationStart": 0, - "observedNavigationStartTs": 251925358, - "observedFirstPaint": 1171, - "observedFirstPaintTs": 253096393, - "observedFirstContentfulPaint": 1171, - "observedFirstContentfulPaintTs": 253096393, - "observedFirstMeaningfulPaint": 1171, - "observedFirstMeaningfulPaintTs": 253096393, - "observedLargestContentfulPaint": 1171, - "observedLargestContentfulPaintTs": 253096393, - "observedTraceEnd": 2511, - "observedTraceEndTs": 254436349, - "observedLoad": 1456, - "observedLoadTs": 253380978, - "observedDomContentLoaded": 1155, - "observedDomContentLoadedTs": 253080173, - "observedCumulativeLayoutShift": 0, + "observedNavigationStartTs": 315851536, + "observedFirstPaint": 6179, + "observedFirstPaintTs": 322030635, + "observedFirstContentfulPaint": 6179, + "observedFirstContentfulPaintTs": 322030635, + "observedFirstMeaningfulPaint": 6205, + "observedFirstMeaningfulPaintTs": 322056848, + "observedLargestContentfulPaint": 6205, + "observedLargestContentfulPaintTs": 322056848, + "observedTraceEnd": 21411, + "observedTraceEndTs": 337262354, + "observedLoad": 20355, + "observedLoadTs": 336206916, + "observedDomContentLoaded": 6170, + "observedDomContentLoadedTs": 322021670, + "observedCumulativeLayoutShift": 0.00018100992838541665, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 1164, - "observedFirstVisualChangeTs": 253089358, - "observedLastVisualChange": 1764, - "observedLastVisualChangeTs": 253689358, - "observedSpeedIndex": 1175, - "observedSpeedIndexTs": 253099876 + "observedFirstVisualChange": 6185, + "observedFirstVisualChangeTs": 322036536, + "observedLastVisualChange": 20601, + "observedLastVisualChangeTs": 336452536, + "observedSpeedIndex": 11541, + "observedSpeedIndexTs": 327392070 }, { "lcpInvalidated": false @@ -68564,23 +63954,23 @@ "type": "debugdata", "items": [ { - "numRequests": 18, - "numScripts": 2, - "numStylesheets": 2, - "numFonts": 0, - "numTasks": 312, - "numTasksOver10ms": 2, - "numTasksOver25ms": 0, - "numTasksOver50ms": 0, - "numTasksOver100ms": 0, + "numRequests": 21, + "numScripts": 5, + "numStylesheets": 3, + "numFonts": 4, + "numTasks": 474, + "numTasksOver10ms": 8, + "numTasksOver25ms": 4, + "numTasksOver50ms": 2, + "numTasksOver100ms": 1, "numTasksOver500ms": 0, - "rtt": 104.012, - "throughput": 3469181.004013043, - "maxRtt": 128.426, - "maxServerLatency": 2.9240000000000066, - "totalByteWeight": 177897, - "totalTaskTime": 78.46500000000006, - "mainDocumentTransferSize": 18590 + "rtt": 1.9419999999999997, + "throughput": 6989234.152470274, + "maxRtt": 95.805, + "maxServerLatency": 15.904, + "totalByteWeight": 1031497, + "totalTaskTime": 766.5519999999982, + "mainDocumentTransferSize": 57554 } ] } @@ -68601,22 +63991,21 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "C+", "testsslExpireSoon": false, - "testsslExpireDate": "2025-04-01T21:59:00.000Z", + "testsslExpireDate": "2025-04-04T21:59:00.000Z", "testsslGrade": "A", - "cookiesGrade": "B", - "cookiesCount": 2, + "cookiesGrade": "A", + "cookiesCount": 0, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.96, - "lighthouse_performanceGrade": "A", - "lighthouse_accessibility": 0.9, + "lighthouse_performance": 0.43, + "lighthouse_performanceGrade": "D", + "lighthouse_accessibility": 0.91, "lighthouse_accessibilityGrade": "A", "lighthouse_best-practices": 0.8, "lighthouse_best-practicesGrade": "B", - "lighthouse_seo": 0.8, - "lighthouse_seoGrade": "B", + "lighthouse_seo": 0.91, + "lighthouse_seoGrade": "A", "lighthouse_pwa": 0.58, "lighthouse_pwaGrade": "C", "declaration-a11y": "F" @@ -68624,219 +64013,13 @@ }, { "404": null, - "url": "https://reforme-retraite.gouv.fr", + "url": "https://savoirrouleravelo.fr", "category": "dnum", "tags": [ - "unknown" + "sports", + "sante" ], - "http": { - "url": "https://reforme-retraite.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 05:48:41 GMT", - "grade": "B", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Type": "text/html; charset=utf-8", - "Date": "Sun, 21 Jul 2024 05:48:39 GMT", - "Keep-Alive": "timeout=5, max=100", - "Last-Modified": "Sun, 21 Jul 2024 05:48:39 GMT", - "Link": ";rel=\"preload\";as=\"style\"", - "Set-Cookie": "BIGipServerpool-dicom-portail-dares2.cegedim.cloud-HTTP=!Gv+lhlcGJkfGzbpWDPlD0yXzT0UGhsQiDmSnQ2mpY4ScifWKVQwLTX3Ea86jiQkYXWPiKsUS2wnoHba/PbgiYdeQLOPP; path=/; Httponly; Secure, TS01f99fc7=01352d38112ed76d17aca43348c450c026acdef32e06a62f80786de7ef171b4d08e4ec0772c28055f5eab4d4a94b5d059692a0cdbf; Path=/, TS1349abd5027=087dc22938ab2000985602416c337c98489ca7333b3d47245de72aa8996ea37f98644c438ece6c74084e8d72b3113000fcc84e2dcf69beabbef2eecb2fd4480dfa82b0d4556b2f9a85000f76a0849199b1ad7961fd745a4d70de392be0e3df50; Path=/", - "Strict-Transport-Security": "max-age=31536000", - "Transfer-Encoding": "chunked", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "DENY", - "X-Spip-Cache": "2592000" - }, - "scan_id": 53623019, - "score": 70, - "start_time": "Sun, 21 Jul 2024 05:48:35 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 2, - "tests_passed": 9, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dicom-portail-dares2.cegedim.cloud-HTTP": { - "domain": "travail-emploi.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS01f99fc7": { - "domain": "travail-emploi.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TS1349abd5027": { - "domain": "travail-emploi.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag-but-protected-by-hsts", - "score_description": "Cookies set without using the Secure flag, but transmission over HTTP prevented by HSTS", - "score_modifier": -5 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://travail-emploi.gouv.fr/retraite/", - "redirects": true, - "route": [ - "http://reforme-retraite.gouv.fr/", - "https://reforme-retraite.gouv.fr/", - "https://travail-emploi.gouv.fr/retraite/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000", - "includeSubDomains": false, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "DENY" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -68844,70 +64027,70 @@ "testssl": [ { "id": "service", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "HTTP" }, { "id": "pre_128cipher", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "No 128 cipher limit bug" }, { "id": "SSLv2", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "SSLv3", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "TLS1", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_1", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_2", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "TLS1_3", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "not offered + downgraded to weaker protocol" }, { "id": "ALPN", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "cipherlist_NULL", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -68915,7 +64098,7 @@ }, { "id": "cipherlist_aNULL", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -68923,7 +64106,7 @@ }, { "id": "cipherlist_EXPORT", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -68931,7 +64114,7 @@ }, { "id": "cipherlist_LOW", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -68939,7 +64122,7 @@ }, { "id": "cipherlist_3DES_IDEA", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -68947,7 +64130,7 @@ }, { "id": "cipherlist_OBSOLETED", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -68955,441 +64138,469 @@ }, { "id": "cipherlist_STRONG_NOFS", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "cipherlist_STRONG_FS", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "cipher_order-tls1_2", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "finding": "server" }, { "id": "cipherorder_TLSv1_2", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "cipher_order", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "finding": "server" }, { "id": "FS", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "FS_ciphers", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "FS_ECDHE_curves", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "finding": "prime256v1 secp384r1" }, { "id": "TLS_extensions", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'extended master secret/#23'" }, { "id": "TLS_session_ticket", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "no -- no lifetime advertised" }, { "id": "SSL_sessionID_support", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "yes" }, { "id": "sessionresumption_ticket", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "not supported" }, { "id": "sessionresumption_ID", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "supported" }, { "id": "TLS_timestamp", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "random" }, { "id": "cert_compression", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "N/A" }, { "id": "clientAuth", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "none" }, { "id": "cert_numbers", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "1" }, { "id": "cert_signatureAlgorithm", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "finding": "SHA256 with RSA" }, { "id": "cert_keySize", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "RSA 2048 bits (exponent is 65537)" }, { "id": "cert_keyUsage", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "Digital Signature, Key Encipherment" }, { "id": "cert_extKeyUsage", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLS Web Server Authentication" }, { "id": "cert_serialNumber", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", - "finding": "CFE0DFB06E16DD5A138680B670078232" + "finding": "74E7C84E4A838C8968079F4C76776045" }, { "id": "cert_serialNumberLen", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "16" }, { "id": "cert_fingerprintSHA1", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", - "finding": "036DFC9222DABD0A0B36BF0498AE80DABA267884" + "finding": "F04280FF9AD3D6550F89EABCD82A5F908CD23CCE" }, { "id": "cert_fingerprintSHA256", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", - "finding": "29E158D1569B4529E0D3DC37D64618D9764EE926E8F7E3BEC3770D60102308E4" + "finding": "F5892290DFB4005246F757765A2A6BA13674050419A65EAFC3AFA67BCECBE816" }, { "id": "cert", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", - "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" + "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "cert_commonName", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", - "finding": "travail-emploi.gouv.fr" + "finding": "savoirrouleravelo.fr" }, { "id": "cert_commonName_wo_SNI", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", - "finding": "sante.gouv.fr" + "finding": "savoirrouleravelo.fr" }, { "id": "cert_subjectAltName", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", - "finding": "travail-emploi.gouv.fr www.reforme-retraite.gouv.fr reforme-retraite.gouv.fr www.travail-emploi.gouv.fr" + "finding": "www.savoirrouleravelo.fr savoirrouleravelo.fr" }, { "id": "cert_trust", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", - "finding": "Ok via SAN (SNI mandatory)" + "finding": "Ok via SAN and CN (same w/o SNI)" }, { "id": "cert_chain_of_trust", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "finding": "passed." }, { "id": "cert_certificatePolicies_EV", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_expirationStatus", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", - "finding": "257 >= 60 days" + "finding": "104 >= 60 days" }, { "id": "cert_notBefore", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", - "finding": "2024-04-04 22:00" + "finding": "2024-03-25 23:00" }, { "id": "cert_notAfter", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", - "finding": "2025-04-04 21:59" + "finding": "2024-11-09 22:59" }, { "id": "cert_extlifeSpan", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "finding": "certificate has no extended life time according to browser forum" }, { "id": "cert_eTLS", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "not present" }, { "id": "cert_crlDistributionPoints", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", - "finding": "http://crl.certigna.fr/servicesca.crl http://crl.dhimyotis.com/servicesca.crl" + "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" }, { "id": "cert_ocspURL", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", - "finding": "http://servicesca.ocsp.dhimyotis.com http://servicesca.ocsp.certigna.fr" + "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" }, { "id": "OCSP_stapling", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "cert_mustStapleExtension", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "--" }, { "id": "DNS_CAArecord", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "LOW", "finding": "--" }, { "id": "certificate_transparency", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "finding": "yes (certificate extension)" }, { "id": "certs_countServer", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "2" }, { "id": "certs_list_ordering_problem", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_caIssuers", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "Certigna Services CA (DHIMYOTIS from FR)" }, { "id": "intermediate_cert <#1>", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "intermediate_cert_fingerprintSHA256 <#1>", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" }, { "id": "intermediate_cert_notBefore <#1>", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "2015-11-25 11:33" }, { "id": "intermediate_cert_notAfter <#1>", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "finding": "2025-11-22 11:33" }, { "id": "intermediate_cert_expiration <#1>", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "finding": "ok > 40 days" }, { "id": "intermediate_cert_chain <#1>", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "Certigna Services CA <-- Certigna" }, { "id": "intermediate_cert_badOCSP", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "finding": "intermediate certificate(s) is/are ok" }, { "id": "HTTP_status_code", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", - "finding": "200 OK ('/')" + "finding": "302 Found ('/')" }, { "id": "HTTP_clock_skew", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", - "finding": "Got no HTTP time, maybe try different URL?" + "finding": "0 seconds from localtime" }, { - "id": "HSTS", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "id": "HTTP_headerTime", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", - "severity": "LOW", - "finding": "not offered" + "severity": "INFO", + "finding": "1722146268" + }, + { + "id": "HSTS_time", + "ip": "savoirrouleravelo.fr/185.194.82.177", + "port": "443", + "severity": "OK", + "finding": "365 days (=31536000 seconds) > 15552000 seconds" + }, + { + "id": "HSTS_subdomains", + "ip": "savoirrouleravelo.fr/185.194.82.177", + "port": "443", + "severity": "OK", + "finding": "includes subdomains" + }, + { + "id": "HSTS_preload", + "ip": "savoirrouleravelo.fr/185.194.82.177", + "port": "443", + "severity": "INFO", + "finding": "domain is NOT marked for preloading" }, { "id": "HPKP", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "No support for HTTP Public Key Pinning" }, { "id": "banner_server", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "No Server banner line in header, interesting!" }, { "id": "banner_application", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "No application banner found" }, { "id": "cookie_count", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", - "finding": "0 at '/'" + "finding": "1 at '/' (30x detected, better try target URL of 30x)" }, { - "id": "Cache-Control", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "id": "cookie_secure", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", - "severity": "INFO", - "finding": "no-store, must-revalidate, no-cache" + "severity": "OK", + "finding": "All (1) at '/' marked as secure" }, { - "id": "Pragma", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "id": "cookie_httponly", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", - "severity": "INFO", - "finding": "no-cache" + "severity": "OK", + "finding": "All (1) at '/' marked as HttpOnly (30x detected, better try target URL of 30x)" + }, + { + "id": "Content-Security-Policy", + "ip": "savoirrouleravelo.fr/185.194.82.177", + "port": "443", + "severity": "OK", + "finding": "upgrade-insecure-requests" }, { "id": "banner_reverseproxy", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "cwe": "CWE-200", @@ -69397,7 +64608,7 @@ }, { "id": "heartbleed", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2014-0160", @@ -69406,7 +64617,7 @@ }, { "id": "CCS", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2014-0224", @@ -69415,7 +64626,7 @@ }, { "id": "ticketbleed", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2016-9244", @@ -69424,7 +64635,7 @@ }, { "id": "ROBOT", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", @@ -69433,7 +64644,7 @@ }, { "id": "secure_renego", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cwe": "CWE-310", @@ -69441,7 +64652,7 @@ }, { "id": "secure_client_renego", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2011-1473", @@ -69450,7 +64661,7 @@ }, { "id": "CRIME_TLS", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2012-4929", @@ -69459,7 +64670,7 @@ }, { "id": "BREACH", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2013-3587", @@ -69468,7 +64679,7 @@ }, { "id": "POODLE_SSL", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2014-3566", @@ -69477,14 +64688,14 @@ }, { "id": "fallback_SCSV", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "finding": "no protocol below TLS 1.2 offered" }, { "id": "SWEET32", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2016-2183 CVE-2016-6329", @@ -69493,7 +64704,7 @@ }, { "id": "FREAK", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2015-0204", @@ -69502,7 +64713,7 @@ }, { "id": "DROWN", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2016-0800 CVE-2016-0703", @@ -69511,16 +64722,16 @@ }, { "id": "DROWN_hint", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "cve": "CVE-2016-0800 CVE-2016-0703", "cwe": "CWE-310", - "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=29E158D1569B4529E0D3DC37D64618D9764EE926E8F7E3BEC3770D60102308E4" + "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=F5892290DFB4005246F757765A2A6BA13674050419A65EAFC3AFA67BCECBE816" }, { "id": "LOGJAM", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -69529,7 +64740,7 @@ }, { "id": "LOGJAM-common_primes", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -69538,7 +64749,7 @@ }, { "id": "BEAST", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2011-3389", @@ -69547,7 +64758,7 @@ }, { "id": "LUCKY13", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2013-0169", @@ -69556,7 +64767,7 @@ }, { "id": "winshock", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2014-6321", @@ -69565,7 +64776,7 @@ }, { "id": "RC4", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", "cve": "CVE-2013-2566 CVE-2015-2808", @@ -69574,453 +64785,401 @@ }, { "id": "clientsimulation-android_60", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_70", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_81", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_90", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_X", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_11", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_12", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-chrome_79_win10", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-chrome_101_win10", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-firefox_66_win81", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-firefox_100_win10", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-ie_6_xp", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_win7", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_xp", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win7", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win81", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_winphone81", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win10", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-edge_15_win10", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-edge_101_win10_21h2", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_121_ios_122", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_130_osx_10146", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_154_osx_1231", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java_7u25", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-java_8u161", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java1102", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java1703", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-go_1178", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-libressl_283", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_102e", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_110l", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_111d", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_303", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-apple_mail_16_0", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-thunderbird_91_9", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "rating_spec", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" }, { "id": "rating_doc", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" }, { "id": "protocol_support_score", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "100" }, { "id": "protocol_support_score_weighted", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "30" }, { "id": "key_exchange_score", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "90" }, { "id": "key_exchange_score_weighted", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "27" }, { "id": "cipher_strength_score", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "60" }, { "id": "cipher_strength_score_weighted", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "24" }, { "id": "final_score", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", "finding": "81" }, { "id": "overall_grade", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "OK", - "finding": "A" - }, - { - "id": "grade_cap_reason_1", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "Grade capped to A. HSTS is not offered" + "finding": "A+" }, { "id": "scanTime", - "ip": "reforme-retraite.gouv.fr/185.194.82.27", + "ip": "savoirrouleravelo.fr/185.194.82.177", "port": "443", "severity": "INFO", - "finding": "51" + "finding": "89" } ], "thirdparties": { - "trackers": [], - "cookies": [], - "headers": { - "cache-control": "no-store, must-revalidate, no-cache", - "connection": "close", - "content-length": "245", - "content-type": "text/html", - "pragma": "no-cache" - }, - "endpoints": [ - { - "hostname": "reforme-retraite.gouv.fr", - "ip": "185.194.82.27", - "geoip": { - "continent": { - "code": "EU", - "geoname_id": 6255148, - "names": { - "de": "Europa", - "en": "Europe", - "es": "Europa", - "fr": "Europe", - "ja": "ヨーロッパ", - "pt-BR": "Europa", - "ru": "Европа", - "zh-CN": "欧洲" - } - }, - "country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - }, - "location": { - "accuracy_radius": 500, - "latitude": 48.8582, - "longitude": 2.3387, - "time_zone": "Europe/Paris" - }, - "registered_country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - } - } - } - ] + "trackers": null, + "cookies": null, + "headers": null }, "wappalyzer": { "urls": { - "https://reforme-retraite.gouv.fr/": { - "status": 0, - "error": "net::ERR_CONNECTION_RESET at https://reforme-retraite.gouv.fr/ (https://reforme-retraite.gouv.fr/)" + "https://savoirrouleravelo.fr/": { + "status": 302, + "error": "net::ERR_BLOCKED_BY_CLIENT at https://savoirrouleravelo.fr/ (https://savoirrouleravelo.fr/)" } }, - "technologies": [] + "technologies": [ + { + "slug": "hsts", + "name": "HSTS", + "description": "HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.", + "confidence": 100, + "version": null, + "icon": "default.svg", + "website": "https://www.rfc-editor.org/rfc/rfc6797#section-6.1", + "cpe": null, + "categories": [ + { + "id": 16, + "slug": "security", + "name": "Security" + } + ], + "rootPath": true + } + ] }, "zap": null, "nuclei": [], "lhr": [ { - "requestedUrl": "https://reforme-retraite.gouv.fr/", - "finalUrl": "https://travail-emploi.gouv.fr/retraite/", - "fetchTime": "2024-07-21T05:48:05.592Z", + "requestedUrl": "https://savoirrouleravelo.fr/", + "finalUrl": "https://www.sports.gouv.fr/savoir-rouler-velo-609", + "fetchTime": "2024-07-28T05:54:38.330Z", "runWarnings": [ - "The page may not be loading as expected because your test URL (https://reforme-retraite.gouv.fr/) was redirected to https://travail-emploi.gouv.fr/retraite/. Try testing the second URL directly." + "The page may not be loading as expected because your test URL (https://savoirrouleravelo.fr/) was redirected to https://www.sports.gouv.fr/savoir-rouler-velo-609. Try testing the second URL directly." ], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.44 + "score": 0.56 }, "accessibility": { "title": "Accessibility", "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", "id": "accessibility", - "score": 0.91 + "score": 0.94 }, "best-practices": { "title": "Best Practices", "id": "best-practices", - "score": 0.8 + "score": 0.93 }, "seo": { "title": "SEO", "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", "id": "seo", - "score": 0.91 + "score": 0.93 }, "pwa": { "title": "Progressive Web App", "description": "These checks validate the aspects of a Progressive Web App. [Learn more](https://developers.google.com/web/progressive-web-apps/checklist).", "manualDescription": "These checks are required by the baseline [PWA Checklist](https://developers.google.com/web/progressive-web-apps/checklist) but are not automatically checked by Lighthouse. They do not affect your score but it's important that you verify them manually.", "id": "pwa", - "score": 0.58 + "score": 0.67 } }, "audits": { @@ -70030,49 +65189,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 7428, + "numericValue": 4243, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 4733, - "firstMeaningfulPaint": 4733, - "largestContentfulPaint": 7440, - "firstCPUIdle": 6574, - "interactive": 7428, - "speedIndex": 12765, + "firstContentfulPaint": 3205, + "firstMeaningfulPaint": 3205, + "largestContentfulPaint": 18257, + "firstCPUIdle": 4063, + "interactive": 4243, + "speedIndex": 8650, "estimatedInputLatency": 13, - "totalBlockingTime": 71, - "maxPotentialFID": 103, - "cumulativeLayoutShift": 0.00018100992838541665, + "totalBlockingTime": 23, + "maxPotentialFID": 82, + "cumulativeLayoutShift": 0.009314615885416667, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 424562728, + "observedTimeOriginTs": 328740467, "observedNavigationStart": 0, - "observedNavigationStartTs": 424562728, - "observedFirstPaint": 3100, - "observedFirstPaintTs": 427662257, - "observedFirstContentfulPaint": 3100, - "observedFirstContentfulPaintTs": 427662257, - "observedFirstMeaningfulPaint": 3115, - "observedFirstMeaningfulPaintTs": 427677606, - "observedLargestContentfulPaint": 3100, - "observedLargestContentfulPaintTs": 427662257, - "observedTraceEnd": 13824, - "observedTraceEndTs": 438386671, - "observedLoad": 12768, - "observedLoadTs": 437330770, - "observedDomContentLoaded": 3109, - "observedDomContentLoadedTs": 427671888, - "observedCumulativeLayoutShift": 0.00018100992838541665, + "observedNavigationStartTs": 328740467, + "observedFirstPaint": 2340, + "observedFirstPaintTs": 331080572, + "observedFirstContentfulPaint": 2340, + "observedFirstContentfulPaintTs": 331080572, + "observedFirstMeaningfulPaint": 2340, + "observedFirstMeaningfulPaintTs": 331080572, + "observedLargestContentfulPaint": 2996, + "observedLargestContentfulPaintTs": 331736823, + "observedTraceEnd": 4176, + "observedTraceEndTs": 332916383, + "observedLoad": 2962, + "observedLoadTs": 331702454, + "observedDomContentLoaded": 2486, + "observedDomContentLoadedTs": 331225994, + "observedCumulativeLayoutShift": 0.009314615885416667, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 3103, - "observedFirstVisualChangeTs": 427665728, - "observedLastVisualChange": 13019, - "observedLastVisualChangeTs": 437581728, - "observedSpeedIndex": 6786, - "observedSpeedIndexTs": 431348745 + "observedFirstVisualChange": 2346, + "observedFirstVisualChangeTs": 331086467, + "observedLastVisualChange": 3696, + "observedLastVisualChangeTs": 332436467, + "observedSpeedIndex": 3182, + "observedSpeedIndexTs": 331922389 }, { "lcpInvalidated": false @@ -70090,23 +65249,23 @@ "type": "debugdata", "items": [ { - "numRequests": 21, - "numScripts": 5, + "numRequests": 35, + "numScripts": 6, "numStylesheets": 3, "numFonts": 4, - "numTasks": 464, - "numTasksOver10ms": 9, - "numTasksOver25ms": 4, - "numTasksOver50ms": 2, - "numTasksOver100ms": 1, + "numTasks": 943, + "numTasksOver10ms": 7, + "numTasksOver25ms": 2, + "numTasksOver50ms": 0, + "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 1.8780000000000001, - "throughput": 6966412.683227154, - "maxRtt": 96.095, - "maxServerLatency": 13.857, - "totalByteWeight": 1031515, - "totalTaskTime": 736.7960000000005, - "mainDocumentTransferSize": 57556 + "rtt": 148.34400000000002, + "throughput": 32128528.419655237, + "maxRtt": 153.565, + "maxServerLatency": 12.150999999999982, + "totalByteWeight": 3279699, + "totalTaskTime": 258.6779999999991, + "mainDocumentTransferSize": 15912 } ] } @@ -70119,7 +65278,8 @@ "github_repository": null, "budget_page": null, "declaration-a11y": { - "mention": null + "mention": "Accessibilité : partiellement conforme", + "declarationUrl": "https://savoirrouleravelo.fr/accessibilite-partiellement-conforme-1826" }, "declaration-rgpd": null, "betagouv": null, @@ -70127,235 +65287,132 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B", "testsslExpireSoon": false, - "testsslExpireDate": "2025-04-04T21:59:00.000Z", - "testsslGrade": "A", - "cookiesGrade": "A", - "cookiesCount": 0, - "trackersGrade": "A", - "trackersCount": 0, - "lighthouse_performance": 0.44, - "lighthouse_performanceGrade": "D", - "lighthouse_accessibility": 0.91, + "testsslExpireDate": "2024-11-09T22:59:00.000Z", + "testsslGrade": "A+", + "cookiesGrade": null, + "cookiesCount": null, + "trackersGrade": null, + "trackersCount": null, + "lighthouse_performance": 0.56, + "lighthouse_performanceGrade": "C", + "lighthouse_accessibility": 0.94, "lighthouse_accessibilityGrade": "A", - "lighthouse_best-practices": 0.8, - "lighthouse_best-practicesGrade": "B", - "lighthouse_seo": 0.91, + "lighthouse_best-practices": 0.93, + "lighthouse_best-practicesGrade": "A", + "lighthouse_seo": 0.93, "lighthouse_seoGrade": "A", - "lighthouse_pwa": 0.58, - "lighthouse_pwaGrade": "C", - "declaration-a11y": "F" + "lighthouse_pwa": 0.67, + "lighthouse_pwaGrade": "B", + "declaration-a11y": "B" } }, { "404": null, - "url": "https://savoirrouleravelo.fr", + "url": "https://siao-preprod.cegedim-hds.fr", "category": "dnum", - "tags": [ - "sports", - "sante" + "http": null, + "updownio": null, + "nmap": null, + "dependabot": null, + "codescan": null, + "testssl": [ + { + "id": "scanProblem", + "ip": "siao-preprod.cegedim-hds.fr/", + "port": "443", + "severity": "FATAL", + "finding": "No IPv4/IPv6 address(es) for 'siao-preprod.cegedim-hds.fr' available" + }, + { + "id": "scanTime", + "ip": "siao-preprod.cegedim-hds.fr/", + "port": "443", + "severity": "WARN", + "finding": "Scan interrupted" + } ], - "http": { - "url": "https://savoirrouleravelo.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 05:51:09 GMT", - "grade": "B", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Cache-Control": "max-age=86400, public", - "Cache-Tags": "HIT", - "Connection": "keep-alive", - "Content-Encoding": "gzip", - "Content-Length": "15378", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sun, 21 Jul 2024 05:51:08 GMT", - "ETag": "W/\"1721540797\"", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Last-Modified": "Sun, 21 Jul 2024 05:46:37 GMT", - "Server": "nginx", - "Strict-Transport-Security": "max-age=31536000; includeSubdomains", - "Vary": "Accept-Encoding", - "X-Cache": "HIT", - "X-Cache-Age": "1", - "X-Cache-Hits": "1", - "X-Cache-TTL": "86400.000", - "X-Cacheable": "YES", - "X-Content-Type-Options": "nosniff", - "X-Drupal-Dynamic-Cache": "MISS", - "X-Frame-Options": "SAMEORIGIN", - "X-UA-Compatible": "IE=edge" + "thirdparties": { + "trackers": null, + "cookies": null, + "headers": null + }, + "wappalyzer": { + "urls": { + "https://siao-preprod.cegedim-hds.fr/": { + "status": 0, + "error": "Hostname could not be resolved (siao-preprod.cegedim-hds.fr)" + } }, - "scan_id": 53623048, - "score": 75, - "start_time": "Sun, 21 Jul 2024 05:51:04 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 1, - "tests_passed": 10, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dsb5-srv.cegedim.cloud-HTTP": { - "domain": "savoirrouleravelo.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://www.sports.gouv.fr/savoir-rouler-velo-609", - "redirects": true, - "route": [ - "http://savoirrouleravelo.fr/", - "https://savoirrouleravelo.fr/", - "https://sports.gouv.fr/savoir-rouler-a-velo/", - "https://www.sports.gouv.fr/savoir-rouler-a-velo/", - "https://www.sports.gouv.fr/savoir-rouler-velo-609" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubdomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" + "technologies": [] + }, + "zap": null, + "nuclei": [ + { + "template": "dns/caa-fingerprint.yaml", + "template-url": "https://templates.nuclei.sh/public/caa-fingerprint", + "template-id": "caa-fingerprint", + "template-path": "/home/runner/nuclei-templates/dns/caa-fingerprint.yaml", + "info": { + "name": "CAA Record", + "author": [ + "pdteam" + ], + "tags": [ + "dns", + "caa" + ], + "description": "A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.", + "reference": [ + "https://support.dnsimple.com/articles/caa-record/#whats-a-caa-record" + ], + "severity": "info", + "metadata": { + "max-request": 1 }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 + "classification": { + "cve-id": null, + "cwe-id": [ + "cwe-200" + ] + } }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } + "type": "dns", + "host": "siao-preprod.cegedim-hds.fr.", + "matched-at": "siao-preprod.cegedim-hds.fr", + "timestamp": "2024-07-28T06:17:37.429501143Z", + "matcher-status": true } + ], + "lhr": [], + "screenshot": false, + "stats": null, + "github_repository": null, + "budget_page": null, + "declaration-a11y": { + "mention": null }, + "declaration-rgpd": null, + "betagouv": null, + "ecoindex": null, + "sonarcloud": null, + "dsfr": null, + "summary": { + "cookiesGrade": null, + "cookiesCount": null, + "trackersGrade": null, + "trackersCount": null, + "declaration-a11y": "F" + } + }, + { + "404": null, + "url": "https://siicea.ars.sante.fr/si-ice/", + "category": "dnum", + "tags": [ + "sante" + ], + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -70363,70 +65420,70 @@ "testssl": [ { "id": "service", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "HTTP" }, { "id": "pre_128cipher", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "No 128 cipher limit bug" }, { "id": "SSLv2", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "SSLv3", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "TLS1", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_1", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_2", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "TLS1_3", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "not offered + downgraded to weaker protocol" }, { "id": "ALPN", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "cipherlist_NULL", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -70434,7 +65491,7 @@ }, { "id": "cipherlist_aNULL", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -70442,7 +65499,7 @@ }, { "id": "cipherlist_EXPORT", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -70450,7 +65507,7 @@ }, { "id": "cipherlist_LOW", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -70458,7 +65515,7 @@ }, { "id": "cipherlist_3DES_IDEA", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -70466,7 +65523,7 @@ }, { "id": "cipherlist_OBSOLETED", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -70474,469 +65531,469 @@ }, { "id": "cipherlist_STRONG_NOFS", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "cipherlist_STRONG_FS", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "cipher_order-tls1_2", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "server" }, { "id": "cipherorder_TLSv1_2", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "cipher_order", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "server" }, { "id": "FS", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "FS_ciphers", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "FS_ECDHE_curves", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "prime256v1 secp384r1" }, { "id": "TLS_extensions", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'extended master secret/#23'" }, { "id": "TLS_session_ticket", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "no -- no lifetime advertised" }, { "id": "SSL_sessionID_support", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "yes" }, { "id": "sessionresumption_ticket", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "not supported" }, { "id": "sessionresumption_ID", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "supported" }, { "id": "TLS_timestamp", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "random" }, { "id": "cert_compression", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "N/A" }, { "id": "clientAuth", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "none" }, { "id": "cert_numbers", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "1" }, { "id": "cert_signatureAlgorithm", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "SHA256 with RSA" }, { "id": "cert_keySize", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "RSA 2048 bits (exponent is 65537)" }, { "id": "cert_keyUsage", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "Digital Signature, Key Encipherment" }, { "id": "cert_extKeyUsage", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLS Web Server Authentication" }, { "id": "cert_serialNumber", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", - "finding": "74E7C84E4A838C8968079F4C76776045" + "finding": "141113C98AA62A16293BEFBD37F82952" }, { "id": "cert_serialNumberLen", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "16" }, { "id": "cert_fingerprintSHA1", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", - "finding": "F04280FF9AD3D6550F89EABCD82A5F908CD23CCE" + "finding": "484C2DA4DF652A4AFFB519C10DBF2C71324D4C00" }, { "id": "cert_fingerprintSHA256", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", - "finding": "F5892290DFB4005246F757765A2A6BA13674050419A65EAFC3AFA67BCECBE816" + "finding": "5F7F249D21AA10AF22280741985FCAFCB4E441E718C3222C6BE32293CCFFDD2F" }, { "id": "cert", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", - "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" + "finding": "-----BEGIN CERTIFICATE-----\nMIIIaDCCBlCgAwIBAgIQFBETyYqmKhYpO++9N/gpUjANBgkqhkiG9w0BAQsFADB9MQswCQYDVQQGEwJGUjESMBAGA1UECgwJREhJTVlPVElTMRwwGgYDVQQLDBMwMDAyIDQ4MTQ2MzA4MTAwMDM2MR0wGwYDVQRhDBROVFJGUi00ODE0NjMwODEwMDAzNjEdMBsGA1UEAwwUQ2VydGlnbmEgU2VydmljZXMgQ0EwHhcNMjQwMzI0MjMwMDAwWhcNMjQxMjI3MjI1OTU5WjCBkzELMAkGA1UEBhMCRlIxDjAMBgNVBAcMBVBBUklTMUEwPwYDVQQKDDhTRUNSRVRBUklBVCBHRU5FUkFMIE1JTklTVEVSRVMgQ0hBUkdFUyBBRkZBSVJFUyBTT0NJQUxFUzEcMBoGA1UEAwwTc2lpY2VhLmFycy5zYW50ZS5mcjETMBEGA1UEBRMKUzMwNDMwMzIyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANMDFKcqiSvEmsiGWOMktSA56+uJZnlwTudZCUS90Dw9MYdGaP0B3nfoJYrbu9Fp8toeH8Xy/R7RSzay2zzZPLL3/QJMmC8s3+7xq5FElwOZzzgKAfIPHBV6RHVHqovprwAk1cEj385nJqWXnVLWiDxS5/wvBE2mPUq/lo6Yd41TsU2eqLYTgXGvO2dEtu1GjXb9zdXZlN68fHSK2gbKvXM5yMBVPL2nLsAarxjUgecjeAWB6Lz12bcp4ndVBih9LvNyPC6Uxh/4dHQJMxyVSh7suqeRTBLq/DMLvaC4QGTzJESterCxs3fmRhj5ed3ztKfJrFl7BCS+uy5cpeckDMUCAwEAAaOCA8swggPHMIHkBggrBgEFBQcBAQSB1zCB1DA4BggrBgEFBQcwAoYsaHR0cDovL2F1dG9yaXRlLmRoaW15b3Rpcy5jb20vc2VydmljZXNjYS5kZXIwNgYIKwYBBQUHMAKGKmh0dHA6Ly9hdXRvcml0ZS5jZXJ0aWduYS5mci9zZXJ2aWNlc2NhLmRlcjAuBggrBgEFBQcwAYYiaHR0cDovL3NlcnZpY2VzY2Eub2NzcC5jZXJ0aWduYS5mcjAwBggrBgEFBQcwAYYkaHR0cDovL3NlcnZpY2VzY2Eub2NzcC5kaGlteW90aXMuY29tMB8GA1UdIwQYMBaAFKzsho9LNxy4fxcbGdCu6E7jNFwSMAwGA1UdEwEB/wQCMAAwYQYDVR0gBFowWDAIBgZngQwBAgIwTAYLKoF6AYExAgUBAQEwPTA7BggrBgEFBQcCARYvaHR0cHM6Ly93d3cuY2VydGlnbmEuY29tL2F1dG9yaXRlLWNlcnRpZmljYXRpb24wZQYDVR0fBF4wXDAtoCugKYYnaHR0cDovL2NybC5kaGlteW90aXMuY29tL3NlcnZpY2VzY2EuY3JsMCugKaAnhiVodHRwOi8vY3JsLmNlcnRpZ25hLmZyL3NlcnZpY2VzY2EuY3JsMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA4GA1UdDwEB/wQEAwIFoDAeBgNVHREEFzAVghNzaWljZWEuYXJzLnNhbnRlLmZyMB0GA1UdDgQWBBRHZU8M6CcYmYHcqR9xP6shl/nbyDCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGOdSdbwAAABAMARzBFAiA+DuRpN6dO2xkVcXRzB2Ue1znmocDnT/LgxX/dcLzfvAIhAOUOw6ycnwRVgATYTEmedmrIlMs6pf9fCN2ulf1SwD3KAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGOdSdb2AAABAMASDBGAiEA7pSTHSPhqYfP8CQOiSCUWG6jaFEPP0ZHesaaBGYYoNACIQCwACuUmCGNXbANg2M53jLJTs9K9D/hvOPmSywxI0696QB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABjnUnXn4AAAQDAEcwRQIgeJenyEAhzjM7x0WRWGdBSD04LB2BaYyuvHk7MvjTzSsCIQCTQJ8WQvx218ks+lmjLdEyEBDf2I1cfYKRkojuH/lt5TANBgkqhkiG9w0BAQsFAAOCAgEAmWWr3tHHbPtJIxOvgM9b4MHTNZRWplVyodyMvWMlCH99uGIfgxxXXQierIl5ZnCE/+K0dy7DIQBlkvVqYJCKhckTbTjujm0ttP5xeJZJIDNBE3ZDPyImlTyWBgqRn+NBInIeFMRAP616TdXeC4UNR4Lj1i4PHs+4cE/mqWPwsUnP22zkbsnJ0eQ+nr6xqLY6A4RJsgY3lHr7VE3l1KlaJtpEQNSTjarpMFstjkR/PBfoSKBOyNN/gs9dNzquQsGSuECM5Emr+Xh5aylcnhLFhH3J6mSRXmxyw/stDpHNvGb9Z4ysh37Sd8G3Ere/hV3fX30QFLg2A98RdRhRRXMxlelcIOU3GjYOAc7q7bIJP3uSv9jvvBv5fWVngwZx7DMUxPeVBgc+EpmNpXLyvQFiOpGgU37cEX8K+F0Yi42F5kHtQOVj09V3GaOQoCIGWpf8/Nk7fcwkItj8LvzFbh2RgVKnBQaDZSL94Q1b1KxYKVhPns+aI/5izlx+0EbviTzpCfYL//FKe1AmBMHEa8+iYWXtE2YJ1SsIrpgVxJYIa6eEGIaMVumFAuPGEdWgUz18Ko1CUKWPwUD0TkmKIaNK6g3CbpmeEljqMN88LKzeBg9xj2FFwpaROsw/WpgwaNKbpJwBlWAbWman+zPGJFf4wVFrPCyXi5hPv4ghlaFMbA4=\n-----END CERTIFICATE-----" }, { "id": "cert_commonName", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", - "finding": "savoirrouleravelo.fr" + "finding": "siicea.ars.sante.fr" }, { "id": "cert_commonName_wo_SNI", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", - "finding": "savoirrouleravelo.fr" + "finding": "siicea.ars.sante.fr" }, { "id": "cert_subjectAltName", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", - "finding": "www.savoirrouleravelo.fr savoirrouleravelo.fr" + "finding": "siicea.ars.sante.fr" }, { "id": "cert_trust", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "Ok via SAN and CN (same w/o SNI)" }, { "id": "cert_chain_of_trust", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "passed." }, { "id": "cert_certificatePolicies_EV", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_expirationStatus", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", - "finding": "111 >= 60 days" + "finding": "152 >= 60 days" }, { "id": "cert_notBefore", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", - "finding": "2024-03-25 23:00" + "finding": "2024-03-24 23:00" }, { "id": "cert_notAfter", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", - "finding": "2024-11-09 22:59" + "finding": "2024-12-27 22:59" }, { "id": "cert_extlifeSpan", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "certificate has no extended life time according to browser forum" }, { "id": "cert_eTLS", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "not present" }, { "id": "cert_crlDistributionPoints", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" }, { "id": "cert_ocspURL", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" }, { "id": "OCSP_stapling", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "cert_mustStapleExtension", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "--" }, { "id": "DNS_CAArecord", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "LOW", "finding": "--" }, { "id": "certificate_transparency", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "yes (certificate extension)" }, { "id": "certs_countServer", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "2" }, { "id": "certs_list_ordering_problem", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_caIssuers", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "Certigna Services CA (DHIMYOTIS from FR)" }, { "id": "intermediate_cert <#1>", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "intermediate_cert_fingerprintSHA256 <#1>", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" }, { "id": "intermediate_cert_notBefore <#1>", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "2015-11-25 11:33" }, { "id": "intermediate_cert_notAfter <#1>", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "2025-11-22 11:33" }, { "id": "intermediate_cert_expiration <#1>", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "ok > 40 days" }, { "id": "intermediate_cert_chain <#1>", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "Certigna Services CA <-- Certigna" }, { "id": "intermediate_cert_badOCSP", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "intermediate certificate(s) is/are ok" }, { "id": "HTTP_status_code", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", - "finding": "302 Found ('/')" + "finding": "301 Moved Permanently ('/')" }, { "id": "HTTP_clock_skew", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "0 seconds from localtime" }, { "id": "HTTP_headerTime", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", - "finding": "1721541184" + "finding": "1722147243" }, { "id": "HSTS_time", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "365 days (=31536000 seconds) > 15552000 seconds" }, { "id": "HSTS_subdomains", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "includes subdomains" }, { "id": "HSTS_preload", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "domain is NOT marked for preloading" }, { "id": "HPKP", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "No support for HTTP Public Key Pinning" }, { "id": "banner_server", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "No Server banner line in header, interesting!" }, { "id": "banner_application", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "No application banner found" }, { "id": "cookie_count", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "1 at '/' (30x detected, better try target URL of 30x)" }, { "id": "cookie_secure", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "All (1) at '/' marked as secure" }, { "id": "cookie_httponly", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", - "severity": "OK", - "finding": "All (1) at '/' marked as HttpOnly (30x detected, better try target URL of 30x)" + "severity": "INFO", + "finding": "1/1 at '/' marked as HttpOnly (30x detected, better try target URL of 30x)" }, { - "id": "Content-Security-Policy", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "id": "security_headers", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", - "severity": "OK", - "finding": "upgrade-insecure-requests" + "severity": "MEDIUM", + "finding": "--" }, { "id": "banner_reverseproxy", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "cwe": "CWE-200", @@ -70944,7 +66001,7 @@ }, { "id": "heartbleed", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2014-0160", @@ -70953,7 +66010,7 @@ }, { "id": "CCS", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2014-0224", @@ -70962,7 +66019,7 @@ }, { "id": "ticketbleed", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2016-9244", @@ -70971,7 +66028,7 @@ }, { "id": "ROBOT", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", @@ -70980,7 +66037,7 @@ }, { "id": "secure_renego", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cwe": "CWE-310", @@ -70988,7 +66045,7 @@ }, { "id": "secure_client_renego", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2011-1473", @@ -70997,7 +66054,7 @@ }, { "id": "CRIME_TLS", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2012-4929", @@ -71006,7 +66063,7 @@ }, { "id": "BREACH", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2013-3587", @@ -71015,7 +66072,7 @@ }, { "id": "POODLE_SSL", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2014-3566", @@ -71024,14 +66081,14 @@ }, { "id": "fallback_SCSV", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "no protocol below TLS 1.2 offered" }, { "id": "SWEET32", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2016-2183 CVE-2016-6329", @@ -71040,7 +66097,7 @@ }, { "id": "FREAK", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2015-0204", @@ -71049,7 +66106,7 @@ }, { "id": "DROWN", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2016-0800 CVE-2016-0703", @@ -71058,16 +66115,16 @@ }, { "id": "DROWN_hint", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "cve": "CVE-2016-0800 CVE-2016-0703", "cwe": "CWE-310", - "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=F5892290DFB4005246F757765A2A6BA13674050419A65EAFC3AFA67BCECBE816" + "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=5F7F249D21AA10AF22280741985FCAFCB4E441E718C3222C6BE32293CCFFDD2F" }, { "id": "LOGJAM", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -71076,7 +66133,7 @@ }, { "id": "LOGJAM-common_primes", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -71085,7 +66142,7 @@ }, { "id": "BEAST", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2011-3389", @@ -71094,7 +66151,7 @@ }, { "id": "LUCKY13", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2013-0169", @@ -71103,7 +66160,7 @@ }, { "id": "winshock", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2014-6321", @@ -71112,7 +66169,7 @@ }, { "id": "RC4", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "cve": "CVE-2013-2566 CVE-2015-2808", @@ -71121,359 +66178,361 @@ }, { "id": "clientsimulation-android_60", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_70", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_81", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_90", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_X", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_11", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_12", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-chrome_79_win10", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-chrome_101_win10", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-firefox_66_win81", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-firefox_100_win10", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-ie_6_xp", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_win7", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_xp", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win7", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win81", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_winphone81", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win10", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-edge_15_win10", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-edge_101_win10_21h2", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_121_ios_122", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_130_osx_10146", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_154_osx_1231", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java_7u25", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-java_8u161", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java1102", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java1703", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-go_1178", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-libressl_283", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_102e", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_110l", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_111d", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_303", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-apple_mail_16_0", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-thunderbird_91_9", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "rating_spec", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" }, { "id": "rating_doc", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" }, { "id": "protocol_support_score", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "100" }, { "id": "protocol_support_score_weighted", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "30" }, { "id": "key_exchange_score", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "90" }, { "id": "key_exchange_score_weighted", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "27" }, { "id": "cipher_strength_score", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "60" }, { "id": "cipher_strength_score_weighted", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "24" }, { "id": "final_score", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", "finding": "81" }, { "id": "overall_grade", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "OK", "finding": "A+" }, { "id": "scanTime", - "ip": "savoirrouleravelo.fr/185.194.82.177", + "ip": "siicea.ars.sante.fr/185.194.82.62", "port": "443", "severity": "INFO", - "finding": "51" + "finding": "49" } ], "thirdparties": { "trackers": [], - "cookies": [], + "cookies": [ + { + "name": "SIICEA_COOKIE", + "value": "d6b3fc5704121ef28d874144636eed4a", + "domain": "siicea.ars.sante.fr", + "path": "/", + "expires": -1, + "size": 45, + "httpOnly": false, + "secure": true, + "session": true, + "sameParty": false, + "sourceScheme": "Secure", + "sourcePort": 443 + } + ], "headers": { "accept-ranges": "bytes", - "cache-control": "max-age=86400, public", - "cache-tags": "HIT", - "content-encoding": "gzip", - "content-language": "fr", - "content-length": "15378", + "connection": "Keep-Alive", + "content-length": "2592", "content-type": "text/html; charset=UTF-8", - "date": "Sun, 21 Jul 2024 05:52:34 GMT", - "etag": "W/\"1721540797\"", - "expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "last-modified": "Sun, 21 Jul 2024 05:46:37 GMT", - "server": "nginx", - "strict-transport-security": "max-age=31536000; includeSubdomains", - "vary": "Accept-Encoding", - "x-cache": "HIT", - "x-cache-age": "354", - "x-cache-hits": "3", - "x-cache-ttl": "86400.000", - "x-cacheable": "YES", - "x-content-type-options": "nosniff", - "x-drupal-dynamic-cache": "MISS", - "x-frame-options": "SAMEORIGIN", - "x-ua-compatible": "IE=edge" + "date": "Sun, 28 Jul 2024 06:13:33 GMT", + "keep-alive": "timeout=5, max=100", + "last-modified": "Fri, 03 Feb 2023 09:20:47 GMT", + "set-cookie": "SIICEA_COOKIE=d6b3fc5704121ef28d874144636eed4a; path=/; secure", + "strict-transport-security": "max-age=31536000; includeSubDomains", + "x-forwarded-proto": "https" }, "endpoints": [ { - "hostname": "savoirrouleravelo.fr", - "ip": "185.194.82.177", + "hostname": "siicea.ars.sante.fr", + "ip": "185.194.82.62", "geoip": { "continent": { "code": "EU", @@ -71531,12 +66590,45 @@ }, "wappalyzer": { "urls": { - "https://savoirrouleravelo.fr/": { - "status": 302, - "error": "net::ERR_BLOCKED_BY_CLIENT at https://savoirrouleravelo.fr/ (https://savoirrouleravelo.fr/)" + "https://siicea.ars.sante.fr/si-ice/": { + "status": 403 } }, "technologies": [ + { + "slug": "bootstrap", + "name": "Bootstrap", + "description": "Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.", + "confidence": 100, + "version": null, + "icon": "Bootstrap.svg", + "website": "https://getbootstrap.com", + "cpe": "cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 66, + "slug": "ui-frameworks", + "name": "UI frameworks" + } + ] + }, + { + "slug": "jquery", + "name": "jQuery", + "description": "jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.", + "confidence": 100, + "version": "1.11.0", + "icon": "jQuery.svg", + "website": "https://jquery.com", + "cpe": "cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*", + "categories": [ + { + "id": 59, + "slug": "javascript-libraries", + "name": "JavaScript libraries" + } + ] + }, { "slug": "hsts", "name": "HSTS", @@ -71552,152 +66644,19 @@ "slug": "security", "name": "Security" } - ], - "rootPath": true + ] } ] }, "zap": null, "nuclei": [], - "lhr": [ - { - "requestedUrl": "https://savoirrouleravelo.fr/", - "finalUrl": "https://www.sports.gouv.fr/savoir-rouler-velo-609", - "fetchTime": "2024-07-21T05:50:27.860Z", - "runWarnings": [ - "The page may not be loading as expected because your test URL (https://savoirrouleravelo.fr/) was redirected to https://www.sports.gouv.fr/savoir-rouler-velo-609. Try testing the second URL directly." - ], - "categories": { - "performance": { - "title": "Performance", - "id": "performance", - "score": 0.4 - }, - "accessibility": { - "title": "Accessibility", - "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", - "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", - "id": "accessibility", - "score": 0.94 - }, - "best-practices": { - "title": "Best Practices", - "id": "best-practices", - "score": 0.93 - }, - "seo": { - "title": "SEO", - "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", - "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", - "id": "seo", - "score": 0.93 - }, - "pwa": { - "title": "Progressive Web App", - "description": "These checks validate the aspects of a Progressive Web App. [Learn more](https://developers.google.com/web/progressive-web-apps/checklist).", - "manualDescription": "These checks are required by the baseline [PWA Checklist](https://developers.google.com/web/progressive-web-apps/checklist) but are not automatically checked by Lighthouse. They do not affect your score but it's important that you verify them manually.", - "id": "pwa", - "score": 0.67 - } - }, - "audits": { - "metrics": { - "id": "metrics", - "title": "Metrics", - "description": "Collects all available metrics.", - "score": null, - "scoreDisplayMode": "informative", - "numericValue": 12744, - "numericUnit": "millisecond", - "details": { - "type": "debugdata", - "items": [ - { - "firstContentfulPaint": 3611, - "firstMeaningfulPaint": 3611, - "largestContentfulPaint": 19368, - "firstCPUIdle": 5874, - "interactive": 12744, - "speedIndex": 30709, - "estimatedInputLatency": 13, - "totalBlockingTime": 218, - "maxPotentialFID": 147, - "cumulativeLayoutShift": 0.010119574652777779, - "cumulativeLayoutShiftAllFrames": 0.004807074652777778, - "observedTimeOrigin": 0, - "observedTimeOriginTs": 431164647, - "observedNavigationStart": 0, - "observedNavigationStartTs": 431164647, - "observedFirstPaint": 2465, - "observedFirstPaintTs": 433630135, - "observedFirstContentfulPaint": 2465, - "observedFirstContentfulPaintTs": 433630135, - "observedFirstMeaningfulPaint": 2465, - "observedFirstMeaningfulPaintTs": 433630135, - "observedLargestContentfulPaint": 28634, - "observedLargestContentfulPaintTs": 459798889, - "observedTraceEnd": 29764, - "observedTraceEndTs": 460928973, - "observedLoad": 28600, - "observedLoadTs": 459764978, - "observedDomContentLoaded": 2543, - "observedDomContentLoadedTs": 433707987, - "observedCumulativeLayoutShift": 0.010119574652777779, - "observedCumulativeLayoutShiftAllFrames": 0.004807074652777778, - "observedFirstVisualChange": 2468, - "observedFirstVisualChangeTs": 433632647, - "observedLastVisualChange": 29066, - "observedLastVisualChangeTs": 460230647, - "observedSpeedIndex": 18453, - "observedSpeedIndexTs": 449617848 - }, - { - "lcpInvalidated": false - } - ] - } - }, - "diagnostics": { - "id": "diagnostics", - "title": "Diagnostics", - "description": "Collection of useful page vitals.", - "score": null, - "scoreDisplayMode": "informative", - "details": { - "type": "debugdata", - "items": [ - { - "numRequests": 35, - "numScripts": 6, - "numStylesheets": 3, - "numFonts": 4, - "numTasks": 4110, - "numTasksOver10ms": 9, - "numTasksOver25ms": 4, - "numTasksOver50ms": 1, - "numTasksOver100ms": 0, - "numTasksOver500ms": 0, - "rtt": 95.66900000000001, - "throughput": 31048712.8140749, - "maxRtt": 107.10699999999997, - "maxServerLatency": 324.97399999999834, - "totalByteWeight": 3278155, - "totalTaskTime": 581.3309999999872, - "mainDocumentTransferSize": 15867 - } - ] - } - } - } - } - ], + "lhr": [], "screenshot": true, "stats": null, "github_repository": null, "budget_page": null, "declaration-a11y": { - "mention": "Accessibilité : partiellement conforme", - "declarationUrl": "https://savoirrouleravelo.fr/accessibilite-partiellement-conforme-1826" + "mention": null }, "declaration-rgpd": null, "betagouv": null, @@ -71705,31 +66664,23 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B", "testsslExpireSoon": false, - "testsslExpireDate": "2024-11-09T22:59:00.000Z", + "testsslExpireDate": "2024-12-27T22:59:00.000Z", "testsslGrade": "A+", - "cookiesGrade": "A", - "cookiesCount": 0, + "cookiesGrade": "B", + "cookiesCount": 1, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.4, - "lighthouse_performanceGrade": "D", - "lighthouse_accessibility": 0.94, - "lighthouse_accessibilityGrade": "A", - "lighthouse_best-practices": 0.93, - "lighthouse_best-practicesGrade": "A", - "lighthouse_seo": 0.93, - "lighthouse_seoGrade": "A", - "lighthouse_pwa": 0.67, - "lighthouse_pwaGrade": "B", - "declaration-a11y": "B" + "declaration-a11y": "F" } }, { "404": null, - "url": "https://siao-preprod.cegedim-hds.fr", + "url": "https://simulateurap.emploi.gouv.fr", "category": "dnum", + "tags": [ + "emploi" + ], "http": null, "updownio": null, "nmap": null, @@ -71738,14 +66689,14 @@ "testssl": [ { "id": "scanProblem", - "ip": "siao-preprod.cegedim-hds.fr/", + "ip": "simulateurap.emploi.gouv.fr/", "port": "443", "severity": "FATAL", - "finding": "No IPv4/IPv6 address(es) for 'siao-preprod.cegedim-hds.fr' available" + "finding": "No IPv4/IPv6 address(es) for 'simulateurap.emploi.gouv.fr' available" }, { "id": "scanTime", - "ip": "siao-preprod.cegedim-hds.fr/", + "ip": "simulateurap.emploi.gouv.fr/", "port": "443", "severity": "WARN", "finding": "Scan interrupted" @@ -71758,9 +66709,9 @@ }, "wappalyzer": { "urls": { - "https://siao-preprod.cegedim-hds.fr/": { + "https://simulateurap.emploi.gouv.fr/": { "status": 0, - "error": "Hostname could not be resolved (siao-preprod.cegedim-hds.fr)" + "error": "Hostname could not be resolved (simulateurap.emploi.gouv.fr)" } }, "technologies": [] @@ -71797,9 +66748,9 @@ } }, "type": "dns", - "host": "siao-preprod.cegedim-hds.fr.", - "matched-at": "siao-preprod.cegedim-hds.fr", - "timestamp": "2024-07-21T06:08:28.294329326Z", + "host": "simulateurap.emploi.gouv.fr.", + "matched-at": "simulateurap.emploi.gouv.fr", + "timestamp": "2024-07-28T06:25:40.662563985Z", "matcher-status": true } ], @@ -71826,194 +66777,12 @@ }, { "404": null, - "url": "https://siicea.ars.sante.fr/si-ice/", + "url": "https://sivss.sante.fr", "category": "dnum", "tags": [ "sante" ], - "http": { - "url": "https://siicea.ars.sante.fr/si-ice/", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 06:06:29 GMT", - "grade": "C", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Connection": "Keep-Alive", - "Content-Length": "2592", - "Content-Type": "text/html; charset=UTF-8", - "Date": "Sun, 21 Jul 2024 06:06:28 GMT", - "Keep-Alive": "timeout=5, max=99", - "Last-Modified": "Fri, 03 Feb 2023 09:20:47 GMT", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "X-Forwarded-Proto": "https" - }, - "scan_id": 53623456, - "score": 50, - "start_time": "Sun, 21 Jul 2024 06:06:27 GMT", - "state": "FINISHED", - "status_code": 403, - "tests_failed": 3, - "tests_passed": 8, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "SIICEA_COOKIE": { - "domain": "siicea.ars.sante.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": null, - "redirects": true, - "route": [ - "http://siicea.ars.sante.fr/", - "https://siicea.ars.sante.fr/", - "https://siicea.ars.sante.fr/si-ice/" - ], - "status_code": null - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-content-type-options-not-implemented", - "score_description": "X-Content-Type-Options header not implemented", - "score_modifier": -5 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-frame-options-not-implemented", - "score_description": "X-Frame-Options (XFO) header not implemented", - "score_modifier": -20 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -72021,70 +66790,70 @@ "testssl": [ { "id": "service", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "HTTP" }, { "id": "pre_128cipher", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "No 128 cipher limit bug" }, { "id": "SSLv2", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "SSLv3", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "TLS1", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_1", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_2", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "TLS1_3", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "not offered + downgraded to weaker protocol" }, { "id": "ALPN", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "cipherlist_NULL", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -72092,7 +66861,7 @@ }, { "id": "cipherlist_aNULL", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -72100,7 +66869,7 @@ }, { "id": "cipherlist_EXPORT", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -72108,7 +66877,7 @@ }, { "id": "cipherlist_LOW", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -72116,7 +66885,7 @@ }, { "id": "cipherlist_3DES_IDEA", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -72124,7 +66893,7 @@ }, { "id": "cipherlist_OBSOLETED", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -72132,469 +66901,434 @@ }, { "id": "cipherlist_STRONG_NOFS", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "cipherlist_STRONG_FS", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "cipher_order-tls1_2", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "server" }, { "id": "cipherorder_TLSv1_2", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "cipher_order", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "server" }, { "id": "FS", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "FS_ciphers", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "FS_ECDHE_curves", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "prime256v1 secp384r1" }, { "id": "TLS_extensions", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'extended master secret/#23'" }, { "id": "TLS_session_ticket", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "no -- no lifetime advertised" }, { "id": "SSL_sessionID_support", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "yes" }, { "id": "sessionresumption_ticket", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "not supported" }, { "id": "sessionresumption_ID", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "supported" }, { "id": "TLS_timestamp", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "random" }, { "id": "cert_compression", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "N/A" }, { "id": "clientAuth", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "none" }, { "id": "cert_numbers", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "1" }, { "id": "cert_signatureAlgorithm", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "SHA256 with RSA" }, { "id": "cert_keySize", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "RSA 2048 bits (exponent is 65537)" }, { "id": "cert_keyUsage", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "Digital Signature, Key Encipherment" }, { "id": "cert_extKeyUsage", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLS Web Server Authentication" }, { "id": "cert_serialNumber", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", - "finding": "141113C98AA62A16293BEFBD37F82952" + "finding": "B30737D46351C8DA0D9C5B9F0F367AC8" }, { "id": "cert_serialNumberLen", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "16" }, { "id": "cert_fingerprintSHA1", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", - "finding": "484C2DA4DF652A4AFFB519C10DBF2C71324D4C00" + "finding": "5AD762C067ECFA6EE3C4ED38DCC67D1B6A5E51D7" }, { "id": "cert_fingerprintSHA256", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", - "finding": "5F7F249D21AA10AF22280741985FCAFCB4E441E718C3222C6BE32293CCFFDD2F" + "finding": "D5364360B496947787EA425C07E27A9841F23955E80B7783DC064BE4ED8E5FD5" }, { "id": "cert", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", - "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" + "finding": "-----BEGIN CERTIFICATE-----\nMIIIXTCCBkWgAwIBAgIRALMHN9RjUcjaDZxbnw82esgwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UEBhMCRlIxEjAQBgNVBAoMCURISU1ZT1RJUzEcMBoGA1UECwwTMDAwMiA0ODE0NjMwODEwMDAzNjEdMBsGA1UEYQwUTlRSRlItNDgxNDYzMDgxMDAwMzYxHTAbBgNVBAMMFENlcnRpZ25hIFNlcnZpY2VzIENBMB4XDTI0MDQxNDIyMDAwMFoXDTI1MDQyNTIxNTk1OVowgY4xCzAJBgNVBAYTAkZSMQ4wDAYDVQQHDAVQQVJJUzFBMD8GA1UECgw4U0VDUkVUQVJJQVQgR0VORVJBTCBNSU5JU1RFUkVTIENIQVJHRVMgQUZGQUlSRVMgU09DSUFMRVMxFzAVBgNVBAMMDnNpdnNzLnNhbnRlLmZyMRMwEQYDVQQFEwpTMzA2NDQwOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfimpWLtYNOXATtMDOddyNUQp72ok8yr7jRR/cCoMD2iNniVIgKhUeN+anfuqCZKezja7amDW90sj/m+/mOmXXco73U1kb3Q7o3eVFArqRg9C0d+3EsuAwP9MTkPbcf5KAB9N5feqGenUL0OlHt05yOtsPqD8w8DeSj9PILfVhlh9uWutkXiKSW0yR3feJOLx/UiexA66p50RqURwiez4p3UVwd5Syx28QuUS1AanAivhzyXiXU32ZDCl7mMA4owbpLacUr+/ASOc7SOYrI5PPt3/y/HUXwa+47w6U5ioQQV3pow/xD9KVYuOKM74ORooaqsm2QNh0oXe7IL+IjVNQIDAQABo4IDxDCCA8AwgeQGCCsGAQUFBwEBBIHXMIHUMDgGCCsGAQUFBzAChixodHRwOi8vYXV0b3JpdGUuZGhpbXlvdGlzLmNvbS9zZXJ2aWNlc2NhLmRlcjA2BggrBgEFBQcwAoYqaHR0cDovL2F1dG9yaXRlLmNlcnRpZ25hLmZyL3NlcnZpY2VzY2EuZGVyMC4GCCsGAQUFBzABhiJodHRwOi8vc2VydmljZXNjYS5vY3NwLmNlcnRpZ25hLmZyMDAGCCsGAQUFBzABhiRodHRwOi8vc2VydmljZXNjYS5vY3NwLmRoaW15b3Rpcy5jb20wHwYDVR0jBBgwFoAUrOyGj0s3HLh/FxsZ0K7oTuM0XBIwDAYDVR0TAQH/BAIwADBhBgNVHSAEWjBYMAgGBmeBDAECAjBMBgsqgXoBgTECBQEBATA9MDsGCCsGAQUFBwIBFi9odHRwczovL3d3dy5jZXJ0aWduYS5jb20vYXV0b3JpdGUtY2VydGlmaWNhdGlvbjBlBgNVHR8EXjBcMC2gK6AphidodHRwOi8vY3JsLmRoaW15b3Rpcy5jb20vc2VydmljZXNjYS5jcmwwK6ApoCeGJWh0dHA6Ly9jcmwuY2VydGlnbmEuZnIvc2VydmljZXNjYS5jcmwwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDgYDVR0PAQH/BAQDAgWgMBkGA1UdEQQSMBCCDnNpdnNzLnNhbnRlLmZyMB0GA1UdDgQWBBROUkeRDOxntlqSo8opIQmc3QeM8zCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYATnWjJ1yaEMM4W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGO4eRDwAAABAMARzBFAiEAsSWetOEHX+QB2wKQQ8w5PEurU1Ft4gZUzZ2FhvuHBswCIDuKXR77+6juxAKawgALPeOeK6Hv6KUCINHn7ri4k1QtAHYAzxFW7tUufK/zh1vZaS6b6RpxZ0qwF+ysAdJbd87MOwgAAAGO4eREIwAABAMARzBFAiBcRGmBPZVxdtBp9zR01R6c/OKxER1035poyZzf68D1AgIhAL5lZcnyox9lVQUcLnOdPKqIVXn3CGsDHgCCIuIpD//3AHUA4JKz/AwdyOdoNh/eYbmWTQpSeBmKctZyxLBNpW1vVAQAAAGO4eVywQAABAMARjBEAiBNvLyerqcn9dWi9VwhrwOKk5muTT0JDLlo/TZs6PtaUAIgMb0+PdTK6LuBCrWdX7G1HbANYrQesZwfbKRo1mYxw0UwDQYJKoZIhvcNAQELBQADggIBAAMmYGiSnU3V842NRvM7f/le7zuuSe6T+L+U05USwzPi/qSDBlMr2/xXt6KDdEHHTh9gQvwVj/7TnpYJf5V07aLvrqpeTOG1tHRiEvbMTbtsRT9FmdzEc/+3lRK14m0+OYqqJCJl4F/TGYyeV3CwZ/6/Z9PqHOmvfbptKUiBOB9baczgNdR2StqWq+8ekvqtYEys22lNJ7MHatLMcVQbmv7+mlnlgYoOcmfdVeCHFNG9J602xjwErQ0oBFWEnGvL8MSyDCBc0pndgg1i4FqZlfDQTfI1OV9eGSPuUzue+6js5wTNbb4BPvcMnYNGKq0i0vSb+sd4dA6etyAK94ofSRI6jMmhnVKO+gpwEozm9l2y49OHUjzNX5oxNhu8UpHoMKW78Pnn76lRoSBehwuTGfzPFqNEO7A07XAsrJZ+BUB18nUIJRmJCL4SKycsT4H7afADqWKU9fRSpHiybH38SudgVkwtSV2FbOEfvh8pQzfwPMqjakI4IoJnsSxRMW0tw8qWwNzqS2+87qWqD6aLk46CLLDSyK2GbazYJnxv3Cz7ySSFQWWcMvOjgrhXuwAMsxyRn9S1xloYGIOSAlJxl6x6qseQMyzU8W4c+3jF+5Wu5W7TbjYvUa4dqK+mMqv3grctcYcNEYxj3MzbX/qZtEHfBeiQKQ5jkjGEvAUO/Zl8\n-----END CERTIFICATE-----" }, { "id": "cert_commonName", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", - "finding": "siicea.ars.sante.fr" + "finding": "sivss.sante.fr" }, { "id": "cert_commonName_wo_SNI", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", - "finding": "siicea.ars.sante.fr" + "finding": "sivss.sante.fr" }, { "id": "cert_subjectAltName", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", - "finding": "siicea.ars.sante.fr" + "finding": "sivss.sante.fr" }, { "id": "cert_trust", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "Ok via SAN and CN (same w/o SNI)" }, { "id": "cert_chain_of_trust", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "passed." }, { "id": "cert_certificatePolicies_EV", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_expirationStatus", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", - "finding": "159 >= 60 days" + "finding": "271 >= 60 days" }, { "id": "cert_notBefore", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", - "finding": "2024-03-24 23:00" + "finding": "2024-04-14 22:00" }, { "id": "cert_notAfter", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", - "finding": "2024-12-27 22:59" + "finding": "2025-04-25 21:59" }, { "id": "cert_extlifeSpan", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "certificate has no extended life time according to browser forum" }, { "id": "cert_eTLS", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "not present" }, { "id": "cert_crlDistributionPoints", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" }, { "id": "cert_ocspURL", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" }, { "id": "OCSP_stapling", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "cert_mustStapleExtension", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "--" }, { "id": "DNS_CAArecord", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "LOW", "finding": "--" }, { "id": "certificate_transparency", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "yes (certificate extension)" }, { "id": "certs_countServer", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "2" }, { "id": "certs_list_ordering_problem", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_caIssuers", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "Certigna Services CA (DHIMYOTIS from FR)" }, { "id": "intermediate_cert <#1>", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "-----BEGIN CERTIFICATE-----\nMIIGFjCCBP6gAwIBAgIQb4L6KKzW94S7WxILqHNnrTANBgkqhkiG9w0BAQsFADA0MQswCQYDVQQGEwJGUjESMBAGA1UECgwJRGhpbXlvdGlzMREwDwYDVQQDDAhDZXJ0aWduYTAeFw0xNTExMjUxMTMzNTJaFw0yNTExMjIxMTMzNTJaMH0xCzAJBgNVBAYTAkZSMRIwEAYDVQQKDAlESElNWU9USVMxHDAaBgNVBAsMEzAwMDIgNDgxNDYzMDgxMDAwMzYxHTAbBgNVBGEMFE5UUkZSLTQ4MTQ2MzA4MTAwMDM2MR0wGwYDVQQDDBRDZXJ0aWduYSBTZXJ2aWNlcyBDQTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALPM+7LpWBz9wFcPaTc3xnB+5g0XrnptB0EPPfrR04vO52Ykm4ky1d4ZLd10tbM1fa1RqNSOVWWg93O4pL7zCFKlz6JV74ZZVhHpEAwzBwv2oPnxvVbxtSN67xsSY66ahUYxjzs8+3FhmsiRxqwnTYvK2u70uglUvRisOKyTL/M6JnrC4y8tlmoz7OSa5BmBMVplJFQtvmON6N9aHLvYMz+EyJPCbXL6pELxeHjFT5QmIaRamsr2DOTaCjtBZKI1Wnh3X7lnbjM8MESJiV2t7E9tIQNG0Z/HI3tO4aaUMum3KysY5sC8v3vi7rryGidgzHQhrtP0ZXWW5UH/k7umLS/P/XXWnCFpc2Lxa1uDGfc2im7xibRoPP+JNZszN76euFlls6jyEXAiwnVr14tVVTewLK0OWs5SJHpEKp8PGMZRDj59EmMvokWwzL6QzNZ6vVAp00oOm05sbspNY9+MFqGKKUsKvhFGEa4XmRNxDe6KswLcjPZB+NKHZ0QWFd4ip5C5XmEK/8qIPjwVr9dah9+oiHGGO8Wx7gJAMF5DTmkvW7GhqCKj1LmHnabjzc8av6kxWVQZi/C7HCm9i/W4wio+JA2EAFLqNL3GPNbK9kau4yPhQt/c7zxzo0OHnlsV4THCG7oOCd3cfCiyfQcb3FBt6OSpaKRZxjCLBwP00r0fAgMBAAGjggHZMIIB1TASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUrOyGj0s3HLh/FxsZ0K7oTuM0XBIwZAYDVR0jBF0wW4AUGu3+QTmQtCRZvgHyUtVF9lo53BGhOKQ2MDQxCzAJBgNVBAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hggkA/tzjAQ/JSP8wSQYDVR0gBEIwQDA+BgoqgXoBgTEBAAECMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmNlcnRpZ25hLmZyL2F1dG9yaXRlcy8wfAYIKwYBBQUHAQEEcDBuMDQGCCsGAQUFBzAChihodHRwOi8vYXV0b3JpdGUuY2VydGlnbmEuZnIvY2VydGlnbmEuZGVyMDYGCCsGAQUFBzAChipodHRwOi8vYXV0b3JpdGUuZGhpbXlvdGlzLmNvbS9jZXJ0aWduYS5kZXIwYQYDVR0fBFowWDApoCegJYYjaHR0cDovL2NybC5jZXJ0aWduYS5mci9jZXJ0aWduYS5jcmwwK6ApoCeGJWh0dHA6Ly9jcmwuZGhpbXlvdGlzLmNvbS9jZXJ0aWduYS5jcmwwDQYJKoZIhvcNAQELBQADggEBAGLft7gIuGPZVfg0cTM+HT2xAZFPDb/2+siH06x+dH044zMKbBINbRzhKipwB1A3MW8FQjveE9tyrfyuqZE/X+o2SlGcdNV44ybYkxo4f6kcLEavV/IW+oFEnojZlhpksYcxrvQoEyqkAwshe8IS2KtZHKVACrt+XSs0lwvy7ALGmHaF7A4by6cZWItA7Lhj8XWp+8tBJDj7HocRbWtxzEODdBuyMgJzFrNjc+97J0vH/K0+3yjmkczpKshMA0tM+MF9XDMN/MuwrPmUWGO/fHiqHgUp8yqeWtl1n44ZxkkK1t9GRwhnDWLv73/xhTmdhWYQ/reo0GbgBoLiltKmIJQ=\n-----END CERTIFICATE-----" }, { "id": "intermediate_cert_fingerprintSHA256 <#1>", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" }, { "id": "intermediate_cert_notBefore <#1>", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "2015-11-25 11:33" }, { "id": "intermediate_cert_notAfter <#1>", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "2025-11-22 11:33" }, { "id": "intermediate_cert_expiration <#1>", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "ok > 40 days" }, { "id": "intermediate_cert_chain <#1>", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "Certigna Services CA <-- Certigna" }, { "id": "intermediate_cert_badOCSP", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "intermediate certificate(s) is/are ok" }, { "id": "HTTP_status_code", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", - "finding": "301 Moved Permanently ('/')" + "finding": "403 Forbidden ('/')" }, { "id": "HTTP_clock_skew", - "ip": "siicea.ars.sante.fr/185.194.82.62", - "port": "443", - "severity": "INFO", - "finding": "0 seconds from localtime" - }, - { - "id": "HTTP_headerTime", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", - "finding": "1721542060" - }, - { - "id": "HSTS_time", - "ip": "siicea.ars.sante.fr/185.194.82.62", - "port": "443", - "severity": "OK", - "finding": "365 days (=31536000 seconds) > 15552000 seconds" - }, - { - "id": "HSTS_subdomains", - "ip": "siicea.ars.sante.fr/185.194.82.62", - "port": "443", - "severity": "OK", - "finding": "includes subdomains" + "finding": "Got no HTTP time, maybe try different URL?" }, { - "id": "HSTS_preload", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "id": "HSTS", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", - "severity": "INFO", - "finding": "domain is NOT marked for preloading" + "severity": "LOW", + "finding": "not offered" }, { "id": "HPKP", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "No support for HTTP Public Key Pinning" }, { "id": "banner_server", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", - "finding": "No Server banner line in header, interesting!" + "finding": "BigIP" }, { "id": "banner_application", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "No application banner found" }, { "id": "cookie_count", - "ip": "siicea.ars.sante.fr/185.194.82.62", - "port": "443", - "severity": "INFO", - "finding": "1 at '/' (30x detected, better try target URL of 30x)" - }, - { - "id": "cookie_secure", - "ip": "siicea.ars.sante.fr/185.194.82.62", - "port": "443", - "severity": "OK", - "finding": "All (1) at '/' marked as secure" - }, - { - "id": "cookie_httponly", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", - "finding": "1/1 at '/' marked as HttpOnly (30x detected, better try target URL of 30x)" + "finding": "0 at '/' (30x detected, better try target URL of 30x)" }, { "id": "security_headers", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "MEDIUM", "finding": "--" }, { "id": "banner_reverseproxy", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "cwe": "CWE-200", @@ -72602,7 +67336,7 @@ }, { "id": "heartbleed", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2014-0160", @@ -72611,7 +67345,7 @@ }, { "id": "CCS", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2014-0224", @@ -72620,7 +67354,7 @@ }, { "id": "ticketbleed", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2016-9244", @@ -72629,7 +67363,7 @@ }, { "id": "ROBOT", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", @@ -72638,7 +67372,7 @@ }, { "id": "secure_renego", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cwe": "CWE-310", @@ -72646,7 +67380,7 @@ }, { "id": "secure_client_renego", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2011-1473", @@ -72655,7 +67389,7 @@ }, { "id": "CRIME_TLS", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2012-4929", @@ -72664,7 +67398,7 @@ }, { "id": "BREACH", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2013-3587", @@ -72673,7 +67407,7 @@ }, { "id": "POODLE_SSL", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2014-3566", @@ -72682,14 +67416,14 @@ }, { "id": "fallback_SCSV", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "finding": "no protocol below TLS 1.2 offered" }, { "id": "SWEET32", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2016-2183 CVE-2016-6329", @@ -72698,7 +67432,7 @@ }, { "id": "FREAK", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2015-0204", @@ -72707,7 +67441,7 @@ }, { "id": "DROWN", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2016-0800 CVE-2016-0703", @@ -72716,16 +67450,16 @@ }, { "id": "DROWN_hint", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "cve": "CVE-2016-0800 CVE-2016-0703", "cwe": "CWE-310", - "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=5F7F249D21AA10AF22280741985FCAFCB4E441E718C3222C6BE32293CCFFDD2F" + "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=D5364360B496947787EA425C07E27A9841F23955E80B7783DC064BE4ED8E5FD5" }, { "id": "LOGJAM", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -72734,7 +67468,7 @@ }, { "id": "LOGJAM-common_primes", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -72743,7 +67477,7 @@ }, { "id": "BEAST", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2011-3389", @@ -72752,7 +67486,7 @@ }, { "id": "LUCKY13", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2013-0169", @@ -72761,7 +67495,7 @@ }, { "id": "winshock", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2014-6321", @@ -72770,7 +67504,7 @@ }, { "id": "RC4", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", "cve": "CVE-2013-2566 CVE-2015-2808", @@ -72779,361 +67513,346 @@ }, { "id": "clientsimulation-android_60", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_70", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_81", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_90", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_X", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_11", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_12", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-chrome_79_win10", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-chrome_101_win10", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-firefox_66_win81", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-firefox_100_win10", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-ie_6_xp", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_win7", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_xp", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win7", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win81", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_winphone81", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win10", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-edge_15_win10", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-edge_101_win10_21h2", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_121_ios_122", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_130_osx_10146", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_154_osx_1231", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java_7u25", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-java_8u161", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java1102", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java1703", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-go_1178", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-libressl_283", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_102e", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_110l", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_111d", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_303", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-apple_mail_16_0", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-thunderbird_91_9", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "rating_spec", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" }, { "id": "rating_doc", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" }, { "id": "protocol_support_score", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "100" }, { "id": "protocol_support_score_weighted", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "30" }, { "id": "key_exchange_score", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "90" }, { "id": "key_exchange_score_weighted", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "27" }, { "id": "cipher_strength_score", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "60" }, { "id": "cipher_strength_score_weighted", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "24" }, { "id": "final_score", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", "finding": "81" }, { "id": "overall_grade", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "OK", - "finding": "A+" + "finding": "A" + }, + { + "id": "grade_cap_reason_1", + "ip": "sivss.sante.fr/185.194.82.118", + "port": "443", + "severity": "INFO", + "finding": "Grade capped to A. HSTS is not offered" }, { "id": "scanTime", - "ip": "siicea.ars.sante.fr/185.194.82.62", + "ip": "sivss.sante.fr/185.194.82.118", "port": "443", "severity": "INFO", - "finding": "89" + "finding": "88" } ], "thirdparties": { "trackers": [], - "cookies": [ - { - "name": "SIICEA_COOKIE", - "value": "1ea2cc92837bbe05b292b67c66545e81", - "domain": "siicea.ars.sante.fr", - "path": "/", - "expires": -1, - "size": 45, - "httpOnly": false, - "secure": true, - "session": true, - "sameParty": false, - "sourceScheme": "Secure", - "sourcePort": 443 - } - ], + "cookies": [], "headers": { - "accept-ranges": "bytes", "connection": "Keep-Alive", - "content-length": "2592", - "content-type": "text/html; charset=UTF-8", - "date": "Sun, 21 Jul 2024 06:06:43 GMT", - "keep-alive": "timeout=5, max=100", - "last-modified": "Fri, 03 Feb 2023 09:20:47 GMT", - "set-cookie": "SIICEA_COOKIE=1ea2cc92837bbe05b292b67c66545e81; path=/; secure", - "strict-transport-security": "max-age=31536000; includeSubDomains", - "x-forwarded-proto": "https" + "content-length": "119", + "server": "BigIP" }, "endpoints": [ { - "hostname": "siicea.ars.sante.fr", - "ip": "185.194.82.62", + "hostname": "sivss.sante.fr", + "ip": "185.194.82.118", "geoip": { "continent": { "code": "EU", @@ -73191,61 +67910,28 @@ }, "wappalyzer": { "urls": { - "https://siicea.ars.sante.fr/si-ice/": { + "https://sivss.sante.fr/": { "status": 403 } }, "technologies": [ { - "slug": "bootstrap", - "name": "Bootstrap", - "description": "Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.", - "confidence": 100, - "version": null, - "icon": "Bootstrap.svg", - "website": "https://getbootstrap.com", - "cpe": "cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 66, - "slug": "ui-frameworks", - "name": "UI frameworks" - } - ] - }, - { - "slug": "jquery", - "name": "jQuery", - "description": "jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.", - "confidence": 100, - "version": "1.11.0", - "icon": "jQuery.svg", - "website": "https://jquery.com", - "cpe": "cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 59, - "slug": "javascript-libraries", - "name": "JavaScript libraries" - } - ] - }, - { - "slug": "hsts", - "name": "HSTS", - "description": "HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.", + "slug": "f5-bigip", + "name": "F5 BigIP", + "description": "F5's BIG-IP is a family of products covering software and hardware designed around application availability, access control, and security solutions.", "confidence": 100, "version": null, - "icon": "default.svg", - "website": "https://www.rfc-editor.org/rfc/rfc6797#section-6.1", - "cpe": null, + "icon": "F5.png", + "website": "https://www.f5.com/products/big-ip-services", + "cpe": "cpe:2.3:a:f5:big-ip:*:*:*:*:*:*:*:*", "categories": [ { - "id": 16, - "slug": "security", - "name": "Security" + "id": 64, + "slug": "reverse-proxies", + "name": "Reverse proxies" } - ] + ], + "rootPath": true } ] }, @@ -73265,12 +67951,11 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "C", "testsslExpireSoon": false, - "testsslExpireDate": "2024-12-27T22:59:00.000Z", - "testsslGrade": "A+", - "cookiesGrade": "B", - "cookiesCount": 1, + "testsslExpireDate": "2025-04-25T21:59:00.000Z", + "testsslGrade": "A", + "cookiesGrade": "A", + "cookiesCount": 0, "trackersGrade": "A", "trackersCount": 0, "declaration-a11y": "F" @@ -73278,277 +67963,12 @@ }, { "404": null, - "url": "https://simulateurap.emploi.gouv.fr", - "category": "dnum", - "tags": [ - "emploi" - ], - "http": null, - "updownio": null, - "nmap": null, - "dependabot": null, - "codescan": null, - "testssl": [ - { - "id": "scanProblem", - "ip": "simulateurap.emploi.gouv.fr/", - "port": "443", - "severity": "FATAL", - "finding": "No IPv4/IPv6 address(es) for 'simulateurap.emploi.gouv.fr' available" - }, - { - "id": "scanTime", - "ip": "simulateurap.emploi.gouv.fr/", - "port": "443", - "severity": "WARN", - "finding": "Scan interrupted" - } - ], - "thirdparties": { - "trackers": null, - "cookies": null, - "headers": null - }, - "wappalyzer": { - "urls": { - "https://simulateurap.emploi.gouv.fr/": { - "status": 0, - "error": "Hostname could not be resolved (simulateurap.emploi.gouv.fr)" - } - }, - "technologies": [] - }, - "zap": null, - "nuclei": [ - { - "template": "dns/caa-fingerprint.yaml", - "template-url": "https://templates.nuclei.sh/public/caa-fingerprint", - "template-id": "caa-fingerprint", - "template-path": "/home/runner/nuclei-templates/dns/caa-fingerprint.yaml", - "info": { - "name": "CAA Record", - "author": [ - "pdteam" - ], - "tags": [ - "dns", - "caa" - ], - "description": "A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.", - "reference": [ - "https://support.dnsimple.com/articles/caa-record/#whats-a-caa-record" - ], - "severity": "info", - "metadata": { - "max-request": 1 - }, - "classification": { - "cve-id": null, - "cwe-id": [ - "cwe-200" - ] - } - }, - "type": "dns", - "host": "simulateurap.emploi.gouv.fr.", - "matched-at": "simulateurap.emploi.gouv.fr", - "timestamp": "2024-07-21T06:19:36.502839683Z", - "matcher-status": true - } - ], - "lhr": [], - "screenshot": false, - "stats": null, - "github_repository": null, - "budget_page": null, - "declaration-a11y": { - "mention": null - }, - "declaration-rgpd": null, - "betagouv": null, - "ecoindex": null, - "sonarcloud": null, - "dsfr": null, - "summary": { - "cookiesGrade": null, - "cookiesCount": null, - "trackersGrade": null, - "trackersCount": null, - "declaration-a11y": "F" - } - }, - { - "404": null, - "url": "https://sivss.sante.fr", + "url": "https://solidarites-sante.gouv.fr", "category": "dnum", "tags": [ "sante" ], - "http": { - "url": "https://sivss.sante.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 06:14:43 GMT", - "grade": "D", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Connection": "Keep-Alive", - "Content-Length": "119", - "Server": "BigIP" - }, - "scan_id": 53623619, - "score": 30, - "start_time": "Sun, 21 Jul 2024 06:14:40 GMT", - "state": "FINISHED", - "status_code": 403, - "tests_failed": 4, - "tests_passed": 7, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": null, - "sameSite": null - }, - "pass": true, - "result": "cookies-not-found", - "score_description": "No cookies detected", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": null, - "redirects": true, - "route": [ - "http://sivss.sante.fr/", - "https://sivss.sante.fr/" - ], - "status_code": null - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": null, - "includeSubDomains": false, - "max-age": null, - "preload": false, - "preloaded": false - }, - "pass": false, - "result": "hsts-not-implemented", - "score_description": "HTTP Strict Transport Security (HSTS) header not implemented", - "score_modifier": -20 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-response-not-html", - "score_description": "Subresource Integrity (SRI) is only needed for html resources", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-content-type-options-not-implemented", - "score_description": "X-Content-Type-Options header not implemented", - "score_modifier": -5 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-frame-options-not-implemented", - "score_description": "X-Frame-Options (XFO) header not implemented", - "score_modifier": -20 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -73556,70 +67976,70 @@ "testssl": [ { "id": "service", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "HTTP" }, { "id": "pre_128cipher", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No 128 cipher limit bug" }, { "id": "SSLv2", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "SSLv3", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "TLS1", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_1", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_2", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "TLS1_3", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not offered + downgraded to weaker protocol" }, { "id": "ALPN", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "cipherlist_NULL", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -73627,7 +68047,7 @@ }, { "id": "cipherlist_aNULL", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -73635,7 +68055,7 @@ }, { "id": "cipherlist_EXPORT", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -73643,7 +68063,7 @@ }, { "id": "cipherlist_LOW", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -73651,7 +68071,7 @@ }, { "id": "cipherlist_3DES_IDEA", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -73659,7 +68079,7 @@ }, { "id": "cipherlist_OBSOLETED", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -73667,434 +68087,441 @@ }, { "id": "cipherlist_STRONG_NOFS", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "cipherlist_STRONG_FS", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "cipher_order-tls1_2", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "server" }, { "id": "cipherorder_TLSv1_2", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "cipher_order", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "server" }, { "id": "FS", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "FS_ciphers", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "FS_ECDHE_curves", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "prime256v1 secp384r1" }, { "id": "TLS_extensions", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'extended master secret/#23'" }, { "id": "TLS_session_ticket", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "no -- no lifetime advertised" }, { "id": "SSL_sessionID_support", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "yes" }, { "id": "sessionresumption_ticket", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not supported" }, { "id": "sessionresumption_ID", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "supported" }, { "id": "TLS_timestamp", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "random" }, { "id": "cert_compression", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "N/A" }, { "id": "clientAuth", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "none" }, { "id": "cert_numbers", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "1" }, { "id": "cert_signatureAlgorithm", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "SHA256 with RSA" }, { "id": "cert_keySize", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "RSA 2048 bits (exponent is 65537)" }, { "id": "cert_keyUsage", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "Digital Signature, Key Encipherment" }, { "id": "cert_extKeyUsage", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLS Web Server Authentication" }, { "id": "cert_serialNumber", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "B30737D46351C8DA0D9C5B9F0F367AC8" + "finding": "06A6AE87B7717BC864B896B10B90307B" }, { "id": "cert_serialNumberLen", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "16" }, { "id": "cert_fingerprintSHA1", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "5AD762C067ECFA6EE3C4ED38DCC67D1B6A5E51D7" + "finding": "CC1EA6FB7D25290BECB6692B0A604BF044918366" }, { "id": "cert_fingerprintSHA256", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "D5364360B496947787EA425C07E27A9841F23955E80B7783DC064BE4ED8E5FD5" + "finding": "FD0BB5AA9BD6B374F8B7E08D2337AE3CBC961F98A2183008223EE4BC1835CEF0" }, { "id": "cert", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" + "finding": "-----BEGIN CERTIFICATE-----\nMIIJ1TCCB72gAwIBAgIQBqauh7dxe8hkuJaxC5AwezANBgkqhkiG9w0BAQsFADB9MQswCQYDVQQGEwJGUjESMBAGA1UECgwJREhJTVlPVElTMRwwGgYDVQQLDBMwMDAyIDQ4MTQ2MzA4MTAwMDM2MR0wGwYDVQRhDBROVFJGUi00ODE0NjMwODEwMDAzNjEdMBsGA1UEAwwUQ2VydGlnbmEgU2VydmljZXMgQ0EwHhcNMjQwMzI1MjMwMDAwWhcNMjQxMDAyMjE1OTU5WjCBjTELMAkGA1UEBhMCRlIxDjAMBgNVBAcMBVBBUklTMUEwPwYDVQQKDDhTRUNSRVRBUklBVCBHRU5FUkFMIE1JTklTVEVSRVMgQ0hBUkdFUyBBRkZBSVJFUyBTT0NJQUxFUzEWMBQGA1UEAwwNc2FudGUuZ291di5mcjETMBEGA1UEBRMKUzMwNDQ5Mzg3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMpuRPOTZVQS3cSmqBYVMEkyPJ6UlunWZKOzDze12dmgvlJSBjDyNIEPNQKP9eH4w95AyzyAlIUxA093oAmBUTKiu2jVBP30fzpkgcqO8BOQ5BsFdl3f+tSeA0qfZ93syjTXWKBmzZloret5BR/6yCSthiTWBaK2z5+AIMJjOtfAvF5oJF9Xf7MXIa3R2byLzDTjDe5o5xLD7loyidCPgASh8LrghP5l5TTvBNbEJ+iGaRNyTBIFWTNT9kf3518GuB9uErheq8rd/kMcIvD44dVMCD/jzhYfQgx2OTi4x7GnW96nMGrABYXf/heTQqlY01ggI3tetTRuIhPSGw6OcUECAwEAAaOCBT4wggU6MIHkBggrBgEFBQcBAQSB1zCB1DA4BggrBgEFBQcwAoYsaHR0cDovL2F1dG9yaXRlLmRoaW15b3Rpcy5jb20vc2VydmljZXNjYS5kZXIwNgYIKwYBBQUHMAKGKmh0dHA6Ly9hdXRvcml0ZS5jZXJ0aWduYS5mci9zZXJ2aWNlc2NhLmRlcjAuBggrBgEFBQcwAYYiaHR0cDovL3NlcnZpY2VzY2Eub2NzcC5jZXJ0aWduYS5mcjAwBggrBgEFBQcwAYYkaHR0cDovL3NlcnZpY2VzY2Eub2NzcC5kaGlteW90aXMuY29tMB8GA1UdIwQYMBaAFKzsho9LNxy4fxcbGdCu6E7jNFwSMAwGA1UdEwEB/wQCMAAwYQYDVR0gBFowWDAIBgZngQwBAgIwTAYLKoF6AYExAgUBAQEwPTA7BggrBgEFBQcCARYvaHR0cHM6Ly93d3cuY2VydGlnbmEuY29tL2F1dG9yaXRlLWNlcnRpZmljYXRpb24wZQYDVR0fBF4wXDAtoCugKYYnaHR0cDovL2NybC5kaGlteW90aXMuY29tL3NlcnZpY2VzY2EuY3JsMCugKaAnhiVodHRwOi8vY3JsLmNlcnRpZ25hLmZyL3NlcnZpY2VzY2EuY3JsMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA4GA1UdDwEB/wQEAwIFoDCCAY8GA1UdEQSCAYYwggGCghlzb2xpZGFyaXRlcy1zYW50ZS5nb3V2LmZyghhlYXVwb3RhYmxlLnNhbnRlLmdvdXYuZnKCF3d3dy5tZWRpY2FtZW50cy5nb3V2LmZygiBtb25iaWxhbnByZXZlbnRpb24uc2FudGUuZ291di5mcoIkd3d3Lm1vbmJpbGFucHJldmVudGlvbi5zYW50ZS5nb3V2LmZygh13d3cuc29saWRhcml0ZXMtc2FudGUuZ291di5mcoIYd3d3LnNvY2lhbC1zYW50ZS5nb3V2LmZyghF3d3cuc2FudGUuZ291di5mcoIcd3d3LmVhdXBvdGFibGUuc2FudGUuZ291di5mcoITbWVkaWNhbWVudHMuZ291di5mcoINc2FudGUuZ291di5mcoIUc29jaWFsLXNhbnRlLmdvdXYuZnKCIGFjY2VzLW9yaWdpbmVzLWFtcC5zYW50ZS5nb3V2LmZygiR3d3cuYWNjZXMtb3JpZ2luZXMtYW1wLnNhbnRlLmdvdXYuZnIwHQYDVR0OBBYEFIeBUcH4Yag5aGwtlEYm3LLWspQIMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY56AkTNAAAEAwBHMEUCIQCQGWHA43Dx7XoX9s6YMW5Y/Mqb9rBqRGyW0zRxq3z3JwIgfL5RAUWRZKgiayGghVI2DFy2U6fktIUzjuVr41ekGKwAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY56AkUiAAAEAwBHMEUCIQDJqzf5XHwtP0HAMS9Dr43CfbcIcHqHyUogizfQVXxE8wIgezfiwBt4AtNTFChzEYYneoFtUuwNV0z5UU4sXVMbofYAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAY56AkZjAAAEAwBIMEYCIQCuovxI87AtHE+TgIyOseOh+5Az31K/2g3GP7CHpTTE+wIhALga+QOOPJtmafBVZ35/MTb8OkLnIe50F9ULy1vRf935MA0GCSqGSIb3DQEBCwUAA4ICAQCmbFSOzya2sqPn+mKD/uJOH8AuIzN4SpMXsUneEvrL+60BACYcGXQDqNgu44FhsD3dKXuXX5Ln54lQpP7wAt1Xmu3DF8tYzad462wMCgLV2Ap53WGCx+iRZrBIEiNIN7/BxkrDRcLo1Cead69M8AOhZEZ6jPz2ELuts2HFx3LXOyRCQKaAjrCY7DaEAzbFIU0Fq9chCTaiBAR9zC+0qzDV2bIYv/DSoaWGKR9EIeRWDHnlYpazJ45gKjJlnRywabid20V5Orr3eeNFKQJKgguqLqT9TvxM2CeLCiuxNMvLsF3z4a2YFm17HKOoZHCO9c4YgY5n1xRu+ZnkpNDanAy4nBfOjwVRyxw75lhLFGVrg6oox9BCRSqNMiz4M00PtG1uJk7RkkRypGw3PIOFKriKOsUMHKS+Afpn9hbGJ+5QtLt7Q5LhAet06AREAMd2hGv+xpwkcM/lxE2nHICfXmNhMhsVym7BefXWMRjp2Jv2tKTKiiOyoAQDaOaDvAUILbszr2UWaCpqmNdBgKseC03FBUzUW2jJ3kQrMx5atUU0tEXYL6ljf+QoUoAGwdP3hp5oHOAs0m43ia7HItn3ffveuE+ywErAabknrEvmIeSsX0DRbFkGWjnBlt4+yU/IRav2brivboIiKvqt3GBOCJcB8+jP29zz521W5szdQUaeNQ==\n-----END CERTIFICATE-----" }, { "id": "cert_commonName", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", - "finding": "sivss.sante.fr" + "finding": "sante.gouv.fr" }, { "id": "cert_commonName_wo_SNI", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "sivss.sante.fr" + "finding": "sante.gouv.fr" }, { "id": "cert_subjectAltName", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "sivss.sante.fr" + "finding": "solidarites-sante.gouv.fr eaupotable.sante.gouv.fr www.medicaments.gouv.fr monbilanprevention.sante.gouv.fr www.monbilanprevention.sante.gouv.fr www.solidarites-sante.gouv.fr www.social-sante.gouv.fr www.sante.gouv.fr www.eaupotable.sante.gouv.fr medicaments.gouv.fr sante.gouv.fr social-sante.gouv.fr acces-origines-amp.sante.gouv.fr www.acces-origines-amp.sante.gouv.fr" }, { "id": "cert_trust", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", - "finding": "Ok via SAN and CN (same w/o SNI)" + "finding": "Ok via SAN (same w/o SNI)" }, { "id": "cert_chain_of_trust", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "passed." }, { "id": "cert_certificatePolicies_EV", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_expirationStatus", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", - "finding": "278 >= 60 days" + "finding": "66 >= 60 days" }, { "id": "cert_notBefore", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "2024-04-14 22:00" + "finding": "2024-03-25 23:00" }, { "id": "cert_notAfter", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", - "finding": "2025-04-25 21:59" + "finding": "2024-10-02 21:59" }, { "id": "cert_extlifeSpan", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "certificate has no extended life time according to browser forum" }, { "id": "cert_eTLS", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "not present" }, { "id": "cert_crlDistributionPoints", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" }, { "id": "cert_ocspURL", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" }, { "id": "OCSP_stapling", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "cert_mustStapleExtension", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "--" }, { "id": "DNS_CAArecord", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "LOW", "finding": "--" }, { "id": "certificate_transparency", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "yes (certificate extension)" }, { "id": "certs_countServer", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "2" }, { "id": "certs_list_ordering_problem", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_caIssuers", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "Certigna Services CA (DHIMYOTIS from FR)" }, { "id": "intermediate_cert <#1>", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "intermediate_cert_fingerprintSHA256 <#1>", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" }, { "id": "intermediate_cert_notBefore <#1>", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "2015-11-25 11:33" }, { "id": "intermediate_cert_notAfter <#1>", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "2025-11-22 11:33" }, { "id": "intermediate_cert_expiration <#1>", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "ok > 40 days" }, { "id": "intermediate_cert_chain <#1>", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "Certigna Services CA <-- Certigna" }, { "id": "intermediate_cert_badOCSP", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "intermediate certificate(s) is/are ok" }, { "id": "HTTP_status_code", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "403 Forbidden ('/')" + "finding": "200 OK ('/')" }, { "id": "HTTP_clock_skew", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "Got no HTTP time, maybe try different URL?" }, { "id": "HSTS", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "HPKP", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No support for HTTP Public Key Pinning" }, { "id": "banner_server", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "BigIP" + "finding": "No Server banner line in header, interesting!" }, { "id": "banner_application", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No application banner found" }, { "id": "cookie_count", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "0 at '/' (30x detected, better try target URL of 30x)" + "finding": "0 at '/'" }, { - "id": "security_headers", - "ip": "sivss.sante.fr/185.194.82.118", + "id": "Cache-Control", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", - "severity": "MEDIUM", - "finding": "--" + "severity": "INFO", + "finding": "no-store, must-revalidate, no-cache" + }, + { + "id": "Pragma", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "port": "443", + "severity": "INFO", + "finding": "no-cache" }, { "id": "banner_reverseproxy", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "cwe": "CWE-200", @@ -74102,7 +68529,7 @@ }, { "id": "heartbleed", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2014-0160", @@ -74111,7 +68538,7 @@ }, { "id": "CCS", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2014-0224", @@ -74120,7 +68547,7 @@ }, { "id": "ticketbleed", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2016-9244", @@ -74129,7 +68556,7 @@ }, { "id": "ROBOT", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", @@ -74138,7 +68565,7 @@ }, { "id": "secure_renego", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cwe": "CWE-310", @@ -74146,7 +68573,7 @@ }, { "id": "secure_client_renego", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2011-1473", @@ -74155,7 +68582,7 @@ }, { "id": "CRIME_TLS", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2012-4929", @@ -74164,7 +68591,7 @@ }, { "id": "BREACH", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2013-3587", @@ -74173,7 +68600,7 @@ }, { "id": "POODLE_SSL", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2014-3566", @@ -74182,14 +68609,14 @@ }, { "id": "fallback_SCSV", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "no protocol below TLS 1.2 offered" }, { "id": "SWEET32", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2016-2183 CVE-2016-6329", @@ -74198,7 +68625,7 @@ }, { "id": "FREAK", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2015-0204", @@ -74207,7 +68634,7 @@ }, { "id": "DROWN", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2016-0800 CVE-2016-0703", @@ -74216,16 +68643,16 @@ }, { "id": "DROWN_hint", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "cve": "CVE-2016-0800 CVE-2016-0703", "cwe": "CWE-310", - "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=D5364360B496947787EA425C07E27A9841F23955E80B7783DC064BE4ED8E5FD5" + "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=FD0BB5AA9BD6B374F8B7E08D2337AE3CBC961F98A2183008223EE4BC1835CEF0" }, { "id": "LOGJAM", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -74234,7 +68661,7 @@ }, { "id": "LOGJAM-common_primes", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -74243,7 +68670,7 @@ }, { "id": "BEAST", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2011-3389", @@ -74252,7 +68679,7 @@ }, { "id": "LUCKY13", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2013-0169", @@ -74261,7 +68688,7 @@ }, { "id": "winshock", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2014-6321", @@ -74270,7 +68697,7 @@ }, { "id": "RC4", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "cve": "CVE-2013-2566 CVE-2015-2808", @@ -74279,346 +68706,348 @@ }, { "id": "clientsimulation-android_60", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_70", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_81", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_90", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_X", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_11", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-android_12", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-chrome_79_win10", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-chrome_101_win10", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-firefox_66_win81", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-firefox_100_win10", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-ie_6_xp", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_win7", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_xp", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win7", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win81", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_winphone81", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win10", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-edge_15_win10", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-edge_101_win10_21h2", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_121_ios_122", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_130_osx_10146", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-safari_154_osx_1231", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java_7u25", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-java_8u161", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java1102", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-java1703", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-go_1178", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-libressl_283", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_102e", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_110l", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_111d", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-openssl_303", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-apple_mail_16_0", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "clientsimulation-thunderbird_91_9", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "rating_spec", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" }, { "id": "rating_doc", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" }, { "id": "protocol_support_score", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "100" }, { "id": "protocol_support_score_weighted", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "30" }, { "id": "key_exchange_score", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "90" }, { "id": "key_exchange_score_weighted", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "27" }, { "id": "cipher_strength_score", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "60" }, { "id": "cipher_strength_score_weighted", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "24" }, { "id": "final_score", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "81" }, { "id": "overall_grade", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", "finding": "A" }, { "id": "grade_cap_reason_1", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", "finding": "Grade capped to A. HSTS is not offered" }, { "id": "scanTime", - "ip": "sivss.sante.fr/185.194.82.118", + "ip": "solidarites-sante.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "51" + "finding": "92" } ], "thirdparties": { "trackers": [], "cookies": [], "headers": { - "connection": "Keep-Alive", - "content-length": "119", - "server": "BigIP" + "cache-control": "no-store, must-revalidate, no-cache", + "connection": "close", + "content-length": "245", + "content-type": "text/html", + "pragma": "no-cache" }, "endpoints": [ { - "hostname": "sivss.sante.fr", - "ip": "185.194.82.118", + "hostname": "solidarites-sante.gouv.fr", + "ip": "185.194.82.27", "geoip": { "continent": { "code": "EU", @@ -74676,34 +69105,147 @@ }, "wappalyzer": { "urls": { - "https://sivss.sante.fr/": { - "status": 403 + "https://solidarites-sante.gouv.fr/": { + "status": 0, + "error": "net::ERR_CONNECTION_RESET at https://solidarites-sante.gouv.fr/ (https://solidarites-sante.gouv.fr/)" } }, - "technologies": [ - { - "slug": "f5-bigip", - "name": "F5 BigIP", - "description": "F5's BIG-IP is a family of products covering software and hardware designed around application availability, access control, and security solutions.", - "confidence": 100, - "version": null, - "icon": "F5.png", - "website": "https://www.f5.com/products/big-ip-services", - "cpe": "cpe:2.3:a:f5:big-ip:*:*:*:*:*:*:*:*", - "categories": [ - { - "id": 64, - "slug": "reverse-proxies", - "name": "Reverse proxies" - } - ], - "rootPath": true - } - ] + "technologies": [] }, "zap": null, "nuclei": [], - "lhr": [], + "lhr": [ + { + "requestedUrl": "https://solidarites-sante.gouv.fr/", + "finalUrl": "https://sante.gouv.fr/", + "fetchTime": "2024-07-28T06:30:55.749Z", + "runWarnings": [ + "The page may not be loading as expected because your test URL (https://solidarites-sante.gouv.fr/) was redirected to https://sante.gouv.fr/. Try testing the second URL directly." + ], + "categories": { + "performance": { + "title": "Performance", + "id": "performance", + "score": 0.24 + }, + "accessibility": { + "title": "Accessibility", + "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", + "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", + "id": "accessibility", + "score": 0.94 + }, + "best-practices": { + "title": "Best Practices", + "id": "best-practices", + "score": 0.8 + }, + "seo": { + "title": "SEO", + "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", + "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", + "id": "seo", + "score": 0.91 + }, + "pwa": { + "title": "Progressive Web App", + "description": "These checks validate the aspects of a Progressive Web App. [Learn more](https://developers.google.com/web/progressive-web-apps/checklist).", + "manualDescription": "These checks are required by the baseline [PWA Checklist](https://developers.google.com/web/progressive-web-apps/checklist) but are not automatically checked by Lighthouse. They do not affect your score but it's important that you verify them manually.", + "id": "pwa", + "score": 0.58 + } + }, + "audits": { + "metrics": { + "id": "metrics", + "title": "Metrics", + "description": "Collects all available metrics.", + "score": null, + "scoreDisplayMode": "informative", + "numericValue": 10823, + "numericUnit": "millisecond", + "details": { + "type": "debugdata", + "items": [ + { + "firstContentfulPaint": 6660, + "firstMeaningfulPaint": 6660, + "largestContentfulPaint": 8902, + "firstCPUIdle": 7711, + "interactive": 10823, + "speedIndex": 15118, + "estimatedInputLatency": 239, + "totalBlockingTime": 558, + "maxPotentialFID": 676, + "cumulativeLayoutShift": 0, + "cumulativeLayoutShiftAllFrames": 0, + "observedTimeOrigin": 0, + "observedTimeOriginTs": 322595975, + "observedNavigationStart": 0, + "observedNavigationStartTs": 322595975, + "observedFirstPaint": 3998, + "observedFirstPaintTs": 326594270, + "observedFirstContentfulPaint": 3998, + "observedFirstContentfulPaintTs": 326594270, + "observedFirstMeaningfulPaint": 4064, + "observedFirstMeaningfulPaintTs": 326660447, + "observedLargestContentfulPaint": 3998, + "observedLargestContentfulPaintTs": 326594270, + "observedTraceEnd": 15263, + "observedTraceEndTs": 337858772, + "observedLoad": 13794, + "observedLoadTs": 336390110, + "observedDomContentLoaded": 4062, + "observedDomContentLoadedTs": 326658062, + "observedCumulativeLayoutShift": 0, + "observedCumulativeLayoutShiftAllFrames": 0, + "observedFirstVisualChange": 3974, + "observedFirstVisualChangeTs": 326569975, + "observedLastVisualChange": 14223, + "observedLastVisualChangeTs": 336818975, + "observedSpeedIndex": 7368, + "observedSpeedIndexTs": 329963968 + }, + { + "lcpInvalidated": false + } + ] + } + }, + "diagnostics": { + "id": "diagnostics", + "title": "Diagnostics", + "description": "Collection of useful page vitals.", + "score": null, + "scoreDisplayMode": "informative", + "details": { + "type": "debugdata", + "items": [ + { + "numRequests": 46, + "numScripts": 5, + "numStylesheets": 3, + "numFonts": 4, + "numTasks": 869, + "numTasksOver10ms": 13, + "numTasksOver25ms": 9, + "numTasksOver50ms": 7, + "numTasksOver100ms": 5, + "numTasksOver500ms": 0, + "rtt": 1.9259999999999997, + "throughput": 5422368.633254404, + "maxRtt": 148.356, + "maxServerLatency": 20.445000000000007, + "totalByteWeight": 2042002, + "totalTaskTime": 1271.8610000000015, + "mainDocumentTransferSize": 74661 + } + ] + } + } + } + } + ], "screenshot": true, "stats": null, "github_repository": null, @@ -74714,234 +69256,37 @@ "declaration-rgpd": null, "betagouv": null, "ecoindex": null, - "sonarcloud": null, - "dsfr": null, - "summary": { - "httpGrade": "D", - "testsslExpireSoon": false, - "testsslExpireDate": "2025-04-25T21:59:00.000Z", - "testsslGrade": "A", - "cookiesGrade": "A", - "cookiesCount": 0, - "trackersGrade": "A", - "trackersCount": 0, - "declaration-a11y": "F" - } - }, - { - "404": null, - "url": "https://solidarites-sante.gouv.fr", - "category": "dnum", - "tags": [ - "sante" - ], - "http": { - "url": "https://solidarites-sante.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 06:25:27 GMT", - "grade": "B-", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Type": "text/html; charset=utf-8", - "Date": "Sun, 21 Jul 2024 06:25:25 GMT", - "Keep-Alive": "timeout=5, max=99", - "Last-Modified": "Sun, 21 Jul 2024 06:25:25 GMT", - "Link": ";rel=\"preload\";as=\"style\"", - "Set-Cookie": "BIGipServerpool-dicom-portail-dares.cegedim.cloud-HTTP=!6BryS/ilGD5V8qJWDPlD0yXzT0UGhnYIjgWultc0SA2z/fg++zNJMot5HcLbLDdaMjBz90rnwpmScVOpYZquBMCNnqDo; path=/; Httponly; Secure, TS01f99fc7=01352d3811ac9990fbae4191ad8cfb6ce6d80691c73a159729453c80ec695bf01701b785b8606dcd927e2daf73828beb9c8842ba41; Path=/, TS1349abd5027=087dc22938ab2000b1d223d25c1bf5a497a2a40f3cdb6a8ce85db45fb86ae3dd80323a397b87126008b0f3f95d1130000418f1f3262496db3e55d652a1ac4c5506361bcbbe3029466a279fc23a608bbf04cae193cf30d0f4f55daab746ed0cc1; Path=/", - "Strict-Transport-Security": "max-age=31536000", - "Transfer-Encoding": "chunked", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "SAMEORIGIN", - "X-Spip-Cache": "21600" - }, - "scan_id": 53623890, - "score": 65, - "start_time": "Sun, 21 Jul 2024 06:25:22 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 3, - "tests_passed": 8, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dicom-portail-dares.cegedim.cloud-HTTP": { - "domain": "sante.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS01f99fc7": { - "domain": "sante.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TS1349abd5027": { - "domain": "sante.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag-but-protected-by-hsts", - "score_description": "Cookies set without using the Secure flag, but transmission over HTTP prevented by HSTS", - "score_modifier": -5 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://sante.gouv.fr", - "redirects": true, - "route": [ - "http://solidarites-sante.gouv.fr/", - "https://sante.gouv.fr" - ], - "status_code": 301 - }, - "pass": false, - "result": "redirection-off-host-from-http", - "score_description": "Initial redirection from HTTP to HTTPS is to a different host, preventing HSTS", - "score_modifier": -5 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000", - "includeSubDomains": false, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "sonarcloud": null, + "dsfr": null, + "summary": { + "testsslExpireSoon": false, + "testsslExpireDate": "2024-10-02T21:59:00.000Z", + "testsslGrade": "A", + "cookiesGrade": "A", + "cookiesCount": 0, + "trackersGrade": "A", + "trackersCount": 0, + "lighthouse_performance": 0.24, + "lighthouse_performanceGrade": "E", + "lighthouse_accessibility": 0.94, + "lighthouse_accessibilityGrade": "A", + "lighthouse_best-practices": 0.8, + "lighthouse_best-practicesGrade": "B", + "lighthouse_seo": 0.91, + "lighthouse_seoGrade": "A", + "lighthouse_pwa": 0.58, + "lighthouse_pwaGrade": "C", + "declaration-a11y": "F" + } + }, + { + "404": null, + "url": "https://sports.gouv.fr", + "category": "dnum", + "tags": [ + "sports" + ], + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -74949,70 +69294,77 @@ "testssl": [ { "id": "service", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "HTTP" }, { "id": "pre_128cipher", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "No 128 cipher limit bug" }, { "id": "SSLv2", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "SSLv3", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "TLS1", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_1", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_2", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "TLS1_3", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", - "severity": "INFO", - "finding": "not offered + downgraded to weaker protocol" + "severity": "OK", + "finding": "offered with final" + }, + { + "id": "ALPN_HTTP2", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "h2" }, { "id": "ALPN", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "not offered" + "finding": "http/1.1" }, { "id": "cipherlist_NULL", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -75020,7 +69372,7 @@ }, { "id": "cipherlist_aNULL", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -75028,7 +69380,7 @@ }, { "id": "cipherlist_EXPORT", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -75036,7 +69388,7 @@ }, { "id": "cipherlist_LOW", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -75044,7 +69396,7 @@ }, { "id": "cipherlist_3DES_IDEA", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -75052,7 +69404,7 @@ }, { "id": "cipherlist_OBSOLETED", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -75060,449 +69412,420 @@ }, { "id": "cipherlist_STRONG_NOFS", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "cipherlist_STRONG_FS", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "cipher_order-tls1_2", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "NOT a cipher order configured" + }, + { + "id": "cipher-tls1_2_xc030", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", - "finding": "server" + "finding": "TLSv1.2 xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" }, { - "id": "cipherorder_TLSv1_2", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "cipher-tls1_2_x9f", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "TLSv1.2 x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + }, + { + "id": "cipher-tls1_2_xc02f", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "TLSv1.2 xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + }, + { + "id": "cipher-tls1_2_x9e", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "TLSv1.2 x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + }, + { + "id": "supportedciphers_TLSv1_2", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "ECDHE-RSA-AES256-GCM-SHA384" + "finding": "ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256" }, { "id": "cipher_order", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", - "severity": "OK", - "finding": "server" + "severity": "INFO", + "finding": "NOT a cipher order configured" }, { "id": "FS", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "FS_ciphers", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384" }, { "id": "FS_ECDHE_curves", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", - "finding": "prime256v1 secp384r1" + "finding": "prime256v1 secp384r1 secp521r1" }, { "id": "TLS_extensions", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'extended master secret/#23'" + "finding": "'supported versions/#43' 'key share/#51' 'server name/#0' 'supported_groups/#10'" }, { "id": "TLS_session_ticket", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "no -- no lifetime advertised" }, { "id": "SSL_sessionID_support", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "yes" }, { "id": "sessionresumption_ticket", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "not supported" }, { "id": "sessionresumption_ID", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "supported" }, { "id": "TLS_timestamp", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "random" }, { - "id": "cert_compression", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "certificate_compression", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "N/A" + "finding": "none" }, { "id": "clientAuth", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "none" }, { "id": "cert_numbers", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "1" }, { "id": "cert_signatureAlgorithm", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "SHA256 with RSA" }, { "id": "cert_keySize", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "RSA 2048 bits (exponent is 65537)" }, { "id": "cert_keyUsage", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "Digital Signature, Key Encipherment" }, { "id": "cert_extKeyUsage", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "TLS Web Server Authentication" }, { "id": "cert_serialNumber", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "06A6AE87B7717BC864B896B10B90307B" + "finding": "EBEDBB618D65BD46B5DA2AFD805997B2" }, { "id": "cert_serialNumberLen", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "16" }, { "id": "cert_fingerprintSHA1", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "CC1EA6FB7D25290BECB6692B0A604BF044918366" + "finding": "4C161C7DA3A3BA96BC1A38C73D76A0231A74394C" }, { "id": "cert_fingerprintSHA256", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "FD0BB5AA9BD6B374F8B7E08D2337AE3CBC961F98A2183008223EE4BC1835CEF0" + "finding": "3BE2A1645EFEE42B10B4F2B64ED56743B49417D9606B4D5F2389064DDA5B3DAE" }, { "id": "cert", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" + "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "cert_commonName", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", - "finding": "sante.gouv.fr" + "finding": "www.sports.gouv.fr" }, { "id": "cert_commonName_wo_SNI", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "sante.gouv.fr" + "finding": "*.dedie.ate.info" }, { "id": "cert_subjectAltName", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "solidarites-sante.gouv.fr eaupotable.sante.gouv.fr www.medicaments.gouv.fr monbilanprevention.sante.gouv.fr www.monbilanprevention.sante.gouv.fr www.solidarites-sante.gouv.fr www.social-sante.gouv.fr www.sante.gouv.fr www.eaupotable.sante.gouv.fr medicaments.gouv.fr sante.gouv.fr social-sante.gouv.fr acces-origines-amp.sante.gouv.fr www.acces-origines-amp.sante.gouv.fr" + "finding": "back.sports.gouv.fr isoprod.back.sports.gouv.fr www.lebonsportpourmoi.sports.gouv.fr preventionete.sports.gouv.fr www.preventionhiver.sports.gouv.fr sports.gouv.fr www.developpement-durable.sports.gouv.fr lebonsportpourmoi.sports.gouv.fr www.sports.gouv.fr test.back.sports.gouv.fr developpement-durable.sports.gouv.fr www.preventionete.sports.gouv.fr preventionhiver.sports.gouv.fr isoprod.sports.gouv.fr test.sports.gouv.fr" }, { "id": "cert_trust", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", - "finding": "Ok via SAN (same w/o SNI)" + "finding": "Ok via SAN (SNI mandatory)" }, { "id": "cert_chain_of_trust", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "passed." }, { "id": "cert_certificatePolicies_EV", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_expirationStatus", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", - "finding": "73 >= 60 days" + "finding": "267 >= 60 days" }, { "id": "cert_notBefore", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "2024-03-25 23:00" + "finding": "2024-04-21 22:00" }, { "id": "cert_notAfter", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", - "finding": "2024-10-02 21:59" + "finding": "2025-04-21 21:59" }, { "id": "cert_extlifeSpan", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "certificate has no extended life time according to browser forum" }, { "id": "cert_eTLS", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "not present" }, { "id": "cert_crlDistributionPoints", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" }, { "id": "cert_ocspURL", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" }, { "id": "OCSP_stapling", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "cert_mustStapleExtension", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "--" }, { "id": "DNS_CAArecord", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "LOW", "finding": "--" }, { "id": "certificate_transparency", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "yes (certificate extension)" }, { "id": "certs_countServer", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "2" }, { "id": "certs_list_ordering_problem", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_caIssuers", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "Certigna Services CA (DHIMYOTIS from FR)" }, { "id": "intermediate_cert <#1>", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "intermediate_cert_fingerprintSHA256 <#1>", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" }, { "id": "intermediate_cert_notBefore <#1>", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "2015-11-25 11:33" }, { "id": "intermediate_cert_notAfter <#1>", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "2025-11-22 11:33" }, { "id": "intermediate_cert_expiration <#1>", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "ok > 40 days" }, { "id": "intermediate_cert_chain <#1>", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "Certigna Services CA <-- Certigna" }, { "id": "intermediate_cert_badOCSP", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "intermediate certificate(s) is/are ok" }, { "id": "HTTP_status_code", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "200 OK ('/')" - }, - { - "id": "HTTP_clock_skew", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "Got no HTTP time, maybe try different URL?" - }, - { - "id": "HSTS", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "LOW", - "finding": "not offered" - }, - { - "id": "HPKP", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "No support for HTTP Public Key Pinning" - }, - { - "id": "banner_server", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "No Server banner line in header, interesting!" - }, - { - "id": "banner_application", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "No application banner found" - }, - { - "id": "cookie_count", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "0 at '/'" - }, - { - "id": "Cache-Control", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "no-store, must-revalidate, no-cache" - }, - { - "id": "Pragma", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", - "severity": "INFO", - "finding": "no-cache" + "severity": "WARN", + "finding": "HTTP header request failed" }, { - "id": "banner_reverseproxy", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "scanProblem", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", - "severity": "INFO", - "cwe": "CWE-200", - "finding": "--" + "severity": "WARN", + "finding": "HTTP header was repeatedly zero." }, { "id": "heartbleed", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2014-0160", @@ -75511,7 +69834,7 @@ }, { "id": "CCS", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2014-0224", @@ -75520,7 +69843,7 @@ }, { "id": "ticketbleed", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2016-9244", @@ -75529,7 +69852,7 @@ }, { "id": "ROBOT", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", @@ -75538,7 +69861,7 @@ }, { "id": "secure_renego", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cwe": "CWE-310", @@ -75546,16 +69869,16 @@ }, { "id": "secure_client_renego", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2011-1473", "cwe": "CWE-310", - "finding": "not vulnerable, mitigated" + "finding": "likely not vulnerable (timed out)" }, { "id": "CRIME_TLS", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2012-4929", @@ -75564,7 +69887,7 @@ }, { "id": "BREACH", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2013-3587", @@ -75573,7 +69896,7 @@ }, { "id": "POODLE_SSL", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2014-3566", @@ -75582,14 +69905,14 @@ }, { "id": "fallback_SCSV", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "finding": "no protocol below TLS 1.2 offered" }, { "id": "SWEET32", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2016-2183 CVE-2016-6329", @@ -75598,7 +69921,7 @@ }, { "id": "FREAK", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2015-0204", @@ -75607,7 +69930,7 @@ }, { "id": "DROWN", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2016-0800 CVE-2016-0703", @@ -75616,16 +69939,16 @@ }, { "id": "DROWN_hint", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "cve": "CVE-2016-0800 CVE-2016-0703", "cwe": "CWE-310", - "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=FD0BB5AA9BD6B374F8B7E08D2337AE3CBC961F98A2183008223EE4BC1835CEF0" + "finding": "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=3BE2A1645EFEE42B10B4F2B64ED56743B49417D9606B4D5F2389064DDA5B3DAE" }, { "id": "LOGJAM", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -75634,16 +69957,16 @@ }, { "id": "LOGJAM-common_primes", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", "cwe": "CWE-310", - "finding": "no DH key with <= TLS 1.2" + "finding": "--" }, { "id": "BEAST", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2011-3389", @@ -75652,7 +69975,7 @@ }, { "id": "LUCKY13", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2013-0169", @@ -75661,7 +69984,7 @@ }, { "id": "winshock", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2014-6321", @@ -75670,7 +69993,7 @@ }, { "id": "RC4", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "OK", "cve": "CVE-2013-2566 CVE-2015-2808", @@ -75679,1235 +70002,331 @@ }, { "id": "clientsimulation-android_60", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + "finding": "No connection" }, { "id": "clientsimulation-android_70", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_81", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_90", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-android_X", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-android_11", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-android_12", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-chrome_79_win10", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-chrome_101_win10", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-firefox_66_win81", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" - }, - { - "id": "clientsimulation-firefox_100_win10", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" - }, - { - "id": "clientsimulation-ie_6_xp", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "No connection" - }, - { - "id": "clientsimulation-ie_8_win7", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "No connection" - }, - { - "id": "clientsimulation-ie_8_xp", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "No connection" - }, - { - "id": "clientsimulation-ie_11_win7", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "No connection" - }, - { - "id": "clientsimulation-ie_11_win81", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "No connection" - }, - { - "id": "clientsimulation-ie_11_winphone81", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "No connection" - }, - { - "id": "clientsimulation-ie_11_win10", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" - }, - { - "id": "clientsimulation-edge_15_win10", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" - }, - { - "id": "clientsimulation-edge_101_win10_21h2", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" - }, - { - "id": "clientsimulation-safari_121_ios_122", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" - }, - { - "id": "clientsimulation-safari_130_osx_10146", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" - }, - { - "id": "clientsimulation-safari_154_osx_1231", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" - }, - { - "id": "clientsimulation-java_7u25", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "No connection" - }, - { - "id": "clientsimulation-java_8u161", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", - "port": "443", - "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" - }, - { - "id": "clientsimulation-java1102", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { - "id": "clientsimulation-java1703", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-firefox_100_win10", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { - "id": "clientsimulation-go_1178", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-ie_6_xp", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "No connection" }, { - "id": "clientsimulation-libressl_283", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-ie_8_win7", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "No connection" }, { - "id": "clientsimulation-openssl_102e", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-ie_8_xp", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "No connection" }, { - "id": "clientsimulation-openssl_110l", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-ie_11_win7", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" }, { - "id": "clientsimulation-openssl_111d", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-ie_11_win81", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "No connection" }, { - "id": "clientsimulation-openssl_303", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-ie_11_winphone81", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + "finding": "No connection" }, { - "id": "clientsimulation-apple_mail_16_0", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-ie_11_win10", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { - "id": "clientsimulation-thunderbird_91_9", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-edge_15_win10", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { - "id": "rating_spec", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-edge_101_win10_21h2", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { - "id": "rating_doc", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-safari_121_ios_122", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" + "finding": "No connection" }, { - "id": "protocol_support_score", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-safari_130_osx_10146", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "100" + "finding": "No connection" }, { - "id": "protocol_support_score_weighted", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-safari_154_osx_1231", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "30" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { - "id": "key_exchange_score", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-java_7u25", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "90" + "finding": "No connection" }, { - "id": "key_exchange_score_weighted", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-java_8u161", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "27" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { - "id": "cipher_strength_score", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-java1102", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "60" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { - "id": "cipher_strength_score_weighted", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-java1703", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "24" + "finding": "TLSv1.3 TLS_AES_256_GCM_SHA384" }, { - "id": "final_score", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-go_1178", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "81" + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { - "id": "overall_grade", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-libressl_283", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", - "severity": "OK", - "finding": "A" + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" }, { - "id": "grade_cap_reason_1", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-openssl_102e", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "Grade capped to A. HSTS is not offered" + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, { - "id": "scanTime", - "ip": "solidarites-sante.gouv.fr/185.194.82.27", + "id": "clientsimulation-openssl_110l", + "ip": "sports.gouv.fr/185.75.143.93", "port": "443", "severity": "INFO", - "finding": "89" - } - ], - "thirdparties": { - "trackers": [], - "cookies": [], - "headers": { - "cache-control": "no-store, must-revalidate, no-cache", - "connection": "close", - "content-length": "245", - "content-type": "text/html", - "pragma": "no-cache" - }, - "endpoints": [ - { - "hostname": "solidarites-sante.gouv.fr", - "ip": "185.194.82.27", - "geoip": { - "continent": { - "code": "EU", - "geoname_id": 6255148, - "names": { - "de": "Europa", - "en": "Europe", - "es": "Europa", - "fr": "Europe", - "ja": "ヨーロッパ", - "pt-BR": "Europa", - "ru": "Европа", - "zh-CN": "欧洲" - } - }, - "country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - }, - "location": { - "accuracy_radius": 500, - "latitude": 48.8582, - "longitude": 2.3387, - "time_zone": "Europe/Paris" - }, - "registered_country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - } - } - } - ] - }, - "wappalyzer": { - "urls": { - "https://solidarites-sante.gouv.fr/": { - "status": 0, - "error": "net::ERR_CONNECTION_RESET at https://solidarites-sante.gouv.fr/ (https://solidarites-sante.gouv.fr/)" - } + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" }, - "technologies": [] - }, - "zap": null, - "nuclei": [], - "lhr": [ { - "requestedUrl": "https://solidarites-sante.gouv.fr/", - "finalUrl": "https://sante.gouv.fr/", - "fetchTime": "2024-07-21T06:24:49.528Z", - "runWarnings": [ - "The page may not be loading as expected because your test URL (https://solidarites-sante.gouv.fr/) was redirected to https://sante.gouv.fr/. Try testing the second URL directly." - ], - "categories": { - "performance": { - "title": "Performance", - "id": "performance", - "score": 0.39 - }, - "accessibility": { - "title": "Accessibility", - "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", - "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", - "id": "accessibility", - "score": 0.94 - }, - "best-practices": { - "title": "Best Practices", - "id": "best-practices", - "score": 0.8 - }, - "seo": { - "title": "SEO", - "description": "These checks ensure that your page is optimized for search engine results ranking. There are additional factors Lighthouse does not check that may affect your search ranking. [Learn more](https://support.google.com/webmasters/answer/35769).", - "manualDescription": "Run these additional validators on your site to check additional SEO best practices.", - "id": "seo", - "score": 0.91 - }, - "pwa": { - "title": "Progressive Web App", - "description": "These checks validate the aspects of a Progressive Web App. [Learn more](https://developers.google.com/web/progressive-web-apps/checklist).", - "manualDescription": "These checks are required by the baseline [PWA Checklist](https://developers.google.com/web/progressive-web-apps/checklist) but are not automatically checked by Lighthouse. They do not affect your score but it's important that you verify them manually.", - "id": "pwa", - "score": 0.58 - } - }, - "audits": { - "metrics": { - "id": "metrics", - "title": "Metrics", - "description": "Collects all available metrics.", - "score": null, - "scoreDisplayMode": "informative", - "numericValue": 10140, - "numericUnit": "millisecond", - "details": { - "type": "debugdata", - "items": [ - { - "firstContentfulPaint": 5598, - "firstMeaningfulPaint": 5667, - "largestContentfulPaint": 6712, - "firstCPUIdle": 6914, - "interactive": 10140, - "speedIndex": 14006, - "estimatedInputLatency": 13, - "totalBlockingTime": 119, - "maxPotentialFID": 150, - "cumulativeLayoutShift": 0, - "cumulativeLayoutShiftAllFrames": 0, - "observedTimeOrigin": 0, - "observedTimeOriginTs": 383376204, - "observedNavigationStart": 0, - "observedNavigationStartTs": 383376204, - "observedFirstPaint": 3460, - "observedFirstPaintTs": 386836386, - "observedFirstContentfulPaint": 3460, - "observedFirstContentfulPaintTs": 386836386, - "observedFirstMeaningfulPaint": 3464, - "observedFirstMeaningfulPaintTs": 386840383, - "observedLargestContentfulPaint": 3460, - "observedLargestContentfulPaintTs": 386836386, - "observedTraceEnd": 14851, - "observedTraceEndTs": 398227174, - "observedLoad": 13792, - "observedLoadTs": 397168471, - "observedDomContentLoaded": 3447, - "observedDomContentLoadedTs": 386822842, - "observedCumulativeLayoutShift": 0, - "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 3441, - "observedFirstVisualChangeTs": 386817204, - "observedLastVisualChange": 14141, - "observedLastVisualChangeTs": 397517204, - "observedSpeedIndex": 6979, - "observedSpeedIndexTs": 390355052 - }, - { - "lcpInvalidated": false - } - ] - } - }, - "diagnostics": { - "id": "diagnostics", - "title": "Diagnostics", - "description": "Collection of useful page vitals.", - "score": null, - "scoreDisplayMode": "informative", - "details": { - "type": "debugdata", - "items": [ - { - "numRequests": 46, - "numScripts": 5, - "numStylesheets": 3, - "numFonts": 4, - "numTasks": 949, - "numTasksOver10ms": 10, - "numTasksOver25ms": 5, - "numTasksOver50ms": 2, - "numTasksOver100ms": 1, - "numTasksOver500ms": 0, - "rtt": 8.088000000000001, - "throughput": 5648510.539354995, - "maxRtt": 138.865, - "maxServerLatency": 29.238, - "totalByteWeight": 2010161, - "totalTaskTime": 645.2729999999985, - "mainDocumentTransferSize": 73557 - } - ] - } - } - } - } - ], - "screenshot": true, - "stats": null, - "github_repository": null, - "budget_page": null, - "declaration-a11y": { - "mention": null - }, - "declaration-rgpd": null, - "betagouv": null, - "ecoindex": null, - "sonarcloud": null, - "dsfr": null, - "summary": { - "httpGrade": "B-", - "testsslExpireSoon": false, - "testsslExpireDate": "2024-10-02T21:59:00.000Z", - "testsslGrade": "A", - "cookiesGrade": "A", - "cookiesCount": 0, - "trackersGrade": "A", - "trackersCount": 0, - "lighthouse_performance": 0.39, - "lighthouse_performanceGrade": "D", - "lighthouse_accessibility": 0.94, - "lighthouse_accessibilityGrade": "A", - "lighthouse_best-practices": 0.8, - "lighthouse_best-practicesGrade": "B", - "lighthouse_seo": 0.91, - "lighthouse_seoGrade": "A", - "lighthouse_pwa": 0.58, - "lighthouse_pwaGrade": "C", - "declaration-a11y": "F" - } - }, - { - "404": null, - "url": "https://sports.gouv.fr", - "category": "dnum", - "tags": [ - "sports" - ], - "http": { - "url": "https://sports.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 06:29:35 GMT", - "grade": "B", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Cache-Control": "max-age=86400, public", - "Cache-Tags": "HIT", - "Connection": "keep-alive", - "Content-Encoding": "gzip", - "Content-Length": "22027", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sun, 21 Jul 2024 06:29:33 GMT", - "ETag": "W/\"1721539889\"", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Last-Modified": "Sun, 21 Jul 2024 05:31:29 GMT", - "Server": "nginx", - "Strict-Transport-Security": "max-age=31536000; includeSubdomains", - "Vary": "Accept-Encoding", - "X-Cache": "HIT", - "X-Cache-Age": "3483", - "X-Cache-Hits": "102", - "X-Cache-TTL": "86400.000", - "X-Cacheable": "YES", - "X-Content-Type-Options": "nosniff", - "X-Drupal-Dynamic-Cache": "HIT", - "X-Frame-Options": "SAMEORIGIN", - "X-UA-Compatible": "IE=edge" - }, - "scan_id": 53623986, - "score": 70, - "start_time": "Sun, 21 Jul 2024 06:29:31 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 2, - "tests_passed": 9, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": null, - "sameSite": null - }, - "pass": true, - "result": "cookies-not-found", - "score_description": "No cookies detected", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://www.sports.gouv.fr/", - "redirects": true, - "route": [ - "http://sports.gouv.fr/", - "https://www.sports.gouv.fr/" - ], - "status_code": 301 - }, - "pass": false, - "result": "redirection-off-host-from-http", - "score_description": "Initial redirection from HTTP to HTTPS is to a different host, preventing HSTS", - "score_modifier": -5 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubdomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, - "updownio": null, - "nmap": null, - "dependabot": null, - "codescan": null, - "testssl": [ + "id": "clientsimulation-openssl_111d", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.3 TLS_AES_256_GCM_SHA384" + }, { - "id": "scanProblem", + "id": "clientsimulation-openssl_303", "ip": "sports.gouv.fr/185.75.143.93", "port": "443", - "severity": "FATAL", - "finding": "Can't connect to '185.75.143.93:443' Make sure a firewall is not between you and your scanning target!" + "severity": "INFO", + "finding": "TLSv1.3 TLS_AES_256_GCM_SHA384" + }, + { + "id": "clientsimulation-apple_mail_16_0", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + }, + { + "id": "clientsimulation-thunderbird_91_9", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" + }, + { + "id": "rating_spec", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" + }, + { + "id": "rating_doc", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" + }, + { + "id": "protocol_support_score", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "100" + }, + { + "id": "protocol_support_score_weighted", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "30" + }, + { + "id": "key_exchange_score", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "90" + }, + { + "id": "key_exchange_score_weighted", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "27" + }, + { + "id": "cipher_strength_score", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "90" + }, + { + "id": "cipher_strength_score_weighted", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "36" + }, + { + "id": "final_score", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "INFO", + "finding": "93" + }, + { + "id": "overall_grade", + "ip": "sports.gouv.fr/185.75.143.93", + "port": "443", + "severity": "OK", + "finding": "A+" }, { "id": "scanTime", "ip": "sports.gouv.fr/185.75.143.93", "port": "443", - "severity": "WARN", - "finding": "Scan interrupted" + "severity": "INFO", + "finding": "1049" } ], "thirdparties": { - "trackers": [ - { - "type": "unknown", - "url": "https://livemap.getwemap.com/dom.html?emmid=26679&token=KPP7I766XIMZYDFJF2WUF9XS6" - }, - { - "type": "unknown", - "url": "https://livemap.getwemap.com/dom?emmid=26679&token=KPP7I766XIMZYDFJF2WUF9XS6" - }, - { - "type": "unknown", - "url": "https://livemap.getwemap.com/js/sdk.min.js" - }, - { - "type": "unknown", - "url": "https://livemap.getwemap.com/js/iframe.min.js" - }, - { - "type": "unknown", - "url": "https://livemap.getwemap.com/js/livemap.6c2bec5f6c28369da8c5.bundle.js" - }, - { - "type": "unknown", - "url": "https://livemap.getwemap.com/js/livemap.3f9870cf8d827d048966.bundle.js" - }, - { - "type": "unknown", - "url": "https://livemap.getwemap.com/js/livemap.8875020b0cf5c64ffdd1.bundle.js" - }, - { - "type": "unknown", - "url": "https://livemap.getwemap.com/js/livemap.d1d4e64041e3e4e71b76.bundle.js" - }, - { - "type": "unknown", - "url": "https://livemap.getwemap.com/js/livemap.ffc846c93a4341fdb499.bundle.js" - }, - { - "type": "unknown", - "url": "https://livemap.getwemap.com/js/livemap.647fbe1a0f7176b289b4.bundle.js" - }, - { - "type": "unknown", - "url": "https://api.getwemap.com/v3.0/livemaps/26679?ltoken=KPP7I766XIMZYDFJF2WUF9XS6" - }, - { - "type": "unknown", - "url": "https://livemap.getwemap.com/fonts/OpenSans/Open_Sans_Bold.json" - }, - { - "type": "unknown", - "url": "https://livemap.getwemap.com/js/livemap.c741d35c0011454fce48.bundle.js" - }, - { - "type": "unknown", - "url": "https://api.getwemap.com/images/users/0b8f0bf85dd57a6821f857b0.19707933.png?width=60&height=60" - }, - { - "type": "google tag manager", - "url": "https://www.googletagmanager.com/gtag/js?id=G-4X3648Q25Q", - "details": { - "id": "google tag manager", - "message": "Use hosted Matomo instance" - } - }, - { - "type": "unknown", - "url": "https://analytics.maaap.it/matomo.js" - }, - { - "type": "unknown", - "url": "https://livemap.getwemap.com/js/livemap.6b294e0024adea582604.bundle.js" - }, - { - "type": "unknown", - "url": "https://livemap.getwemap.com/js/livemap.3d336d7c3070c1a72668.bundle.js" - }, - { - "type": "unknown", - "url": "https://livemap.getwemap.com/js/livemap.169a5a5e9a0b42c555a4.bundle.js" - }, - { - "type": "unknown", - "url": "https://livemap.getwemap.com/img/logo-with-brand.png" - }, - { - "type": "unknown", - "url": "https://analytics.maaap.it/matomo.php?action_name=Livemap%20-%20Wemap&idsite=2&rec=1&r=530488&h=6&m=29&s=51&url=https%3A%2F%2Flivemap.getwemap.com%2Fdom%3Femmid%3D26679%26token%3DKPP7I766XIMZYDFJF2WUF9XS6&urlref=https%3A%2F%2Fwww.sports.gouv.fr%2F&_id=915ea0d9c1de649f&_idn=1&send_image=0&_refts=1721543392&_ref=https%3A%2F%2Fwww.sports.gouv.fr%2F&dimension1=26679&dimension2=26679&pv_id=9ttV0C&pf_net=0&pf_srv=45&pf_tfr=1&pf_dm1=288&pf_dm2=539&pf_onl=0&uadata=%7B%22fullVersionList%22%3A%5B%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22%22%2C%22platformVersion%22%3A%22%22%7D&cookie=1&res=800x600" - }, - { - "type": "unknown", - "url": "https://analytics.getwemap.com/collect?event=pageview&fingerprint=c7881578fbfabffc3618923b007f1b01&livemap=26679&location=https%3A%2F%2Flivemap.getwemap.com%2Fdom%3Femmid%3D26679%26token%3DKPP7I766XIMZYDFJF2WUF9XS6&referrer=https%3A%2F%2Fwww.sports.gouv.fr%2F&tracker=c1ed4317-6666-4037-87c9-f8a9a58e55cf" - }, - { - "type": "unknown", - "url": "https://vector.getwemap.com/styles/wemap-v1-fr.json" - }, - { - "type": "unknown", - "url": "https://vector.getwemap.com/data/osm2vectortiles.json" - }, - { - "type": "unknown", - "url": "https://vector.getwemap.com/styles/wemap-v1-fr/sprite.json" - }, - { - "type": "unknown", - "url": "https://vector.getwemap.com/styles/wemap-v1-fr/sprite.png" - }, - { - "type": "unknown", - "url": "https://analytics.maaap.it/matomo.php?e_c=map&e_a=init&e_n=mapbox&e_v=NaN&ca=1&idsite=2&rec=1&r=930011&h=6&m=29&s=52&url=https%3A%2F%2Flivemap.getwemap.com%2Fdom%3Femmid%3D26679%26token%3DKPP7I766XIMZYDFJF2WUF9XS6&urlref=https%3A%2F%2Fwww.sports.gouv.fr%2F&_id=7e3c973ec92e9097&_idn=1&send_image=0&_refts=1721543392&_ref=https%3A%2F%2Fwww.sports.gouv.fr%2F&dimension1=26679&dimension2=26679&pf_net=0&pf_srv=45&pf_tfr=1&pf_dm1=288&pf_dm2=539&pf_onl=0&pv_id=9ttV0C&uadata=%7B%22fullVersionList%22%3A%5B%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22%22%2C%22platformVersion%22%3A%22%22%7D&cookie=1&res=800x600" - } - ], - "cookies": [], - "headers": { - "accept-ranges": "bytes", - "cache-control": "max-age=86400, public", - "cache-tags": "HIT", - "content-encoding": "gzip", - "content-language": "fr", - "content-length": "22027", - "content-type": "text/html; charset=UTF-8", - "date": "Sun, 21 Jul 2024 06:29:50 GMT", - "etag": "W/\"1721539889\"", - "expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "last-modified": "Sun, 21 Jul 2024 05:31:29 GMT", - "server": "nginx", - "strict-transport-security": "max-age=31536000; includeSubdomains", - "vary": "Accept-Encoding", - "x-cache": "HIT", - "x-cache-age": "3500", - "x-cache-hits": "106", - "x-cache-ttl": "86400.000", - "x-cacheable": "YES", - "x-content-type-options": "nosniff", - "x-drupal-dynamic-cache": "HIT", - "x-frame-options": "SAMEORIGIN", - "x-ua-compatible": "IE=edge" - }, - "endpoints": [ - { - "hostname": "sports.gouv.fr", - "ip": "185.75.143.93", - "geoip": { - "continent": { - "code": "EU", - "geoname_id": 6255148, - "names": { - "de": "Europa", - "en": "Europe", - "es": "Europa", - "fr": "Europe", - "ja": "ヨーロッパ", - "pt-BR": "Europa", - "ru": "Европа", - "zh-CN": "欧洲" - } - }, - "country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - }, - "location": { - "accuracy_radius": 500, - "latitude": 48.8582, - "longitude": 2.3387, - "time_zone": "Europe/Paris" - }, - "registered_country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - } - } - }, - { - "hostname": "livemap.getwemap.com", - "ip": "104.18.19.244", - "geoip": { - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - } - } - }, - { - "hostname": "api.getwemap.com", - "ip": "104.18.19.244", - "geoip": { - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - } - } - }, - { - "hostname": "www.googletagmanager.com", - "ip": "142.251.46.232", - "geoip": { - "city": { - "geoname_id": 5116931, - "names": { - "en": "Farmingdale" - } - }, - "continent": { - "code": "NA", - "geoname_id": 6255149, - "names": { - "de": "Nordamerika", - "en": "North America", - "es": "Norteamérica", - "fr": "Amérique du Nord", - "ja": "北アメリカ", - "pt-BR": "América do Norte", - "ru": "Северная Америка", - "zh-CN": "北美洲" - } - }, - "country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - }, - "location": { - "accuracy_radius": 1000, - "latitude": 40.7306, - "longitude": -73.4313, - "metro_code": 501, - "time_zone": "America/New_York" - }, - "postal": { - "code": "11735" - }, - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - }, - "subdivisions": [ - { - "geoname_id": 5128638, - "iso_code": "NY", - "names": { - "de": "New York", - "en": "New York", - "es": "Nueva York", - "fr": "New York", - "ja": "ニューヨーク州", - "pt-BR": "Nova Iorque", - "ru": "Нью-Йорк", - "zh-CN": "纽约州" - } - } - ] - } - }, - { - "hostname": "analytics.maaap.it", - "ip": "104.18.6.199", - "geoip": { - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - } - } - }, - { - "hostname": "analytics.getwemap.com", - "ip": "18.203.193.195", - "geoip": { - "city": { - "geoname_id": 2964574, - "names": { - "de": "Dublin", - "en": "Dublin", - "es": "Dublín", - "fr": "Dublin", - "ja": "ダブリン", - "pt-BR": "Dublin", - "ru": "Дублин", - "zh-CN": "都柏林" - } - }, - "continent": { - "code": "EU", - "geoname_id": 6255148, - "names": { - "de": "Europa", - "en": "Europe", - "es": "Europa", - "fr": "Europe", - "ja": "ヨーロッパ", - "pt-BR": "Europa", - "ru": "Европа", - "zh-CN": "欧洲" - } - }, - "country": { - "geoname_id": 2963597, - "is_in_european_union": true, - "iso_code": "IE", - "names": { - "de": "Irland", - "en": "Ireland", - "es": "Irlanda", - "fr": "Irlande", - "ja": "アイルランド", - "pt-BR": "Irlanda", - "ru": "Ирландия", - "zh-CN": "爱尔兰" - } - }, - "location": { - "accuracy_radius": 200, - "latitude": 53.3379, - "longitude": -6.2591, - "time_zone": "Europe/Dublin" - }, - "postal": { - "code": "D02" - }, - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - }, - "subdivisions": [ - { - "geoname_id": 7521314, - "iso_code": "L", - "names": { - "en": "Leinster", - "fr": "Leinster", - "ja": "レンスター", - "ru": "Ленстер" - } - } - ] - } - }, - { - "hostname": "vector.getwemap.com", - "ip": "104.18.19.244", - "geoip": { - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - } - } - } - ] + "trackers": null, + "cookies": null, + "headers": null }, "wappalyzer": { "urls": { @@ -77150,7 +70569,7 @@ { "requestedUrl": "https://sports.gouv.fr/", "finalUrl": "https://www.sports.gouv.fr/", - "fetchTime": "2024-07-21T06:28:50.431Z", + "fetchTime": "2024-07-28T06:33:48.995Z", "runWarnings": [ "The page may not be loading as expected because your test URL (https://sports.gouv.fr/) was redirected to https://www.sports.gouv.fr/. Try testing the second URL directly." ], @@ -77158,14 +70577,14 @@ "performance": { "title": "Performance", "id": "performance", - "score": 0.11 + "score": 0.36 }, "accessibility": { "title": "Accessibility", "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", "id": "accessibility", - "score": 0.8 + "score": 0.86 }, "best-practices": { "title": "Best Practices", @@ -77194,49 +70613,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 22082, + "numericValue": 16492, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 3992, - "firstMeaningfulPaint": 3992, - "largestContentfulPaint": 25078, - "firstCPUIdle": 18125, - "interactive": 22082, - "speedIndex": 31444, - "estimatedInputLatency": 60, - "totalBlockingTime": 1141, - "maxPotentialFID": 406, - "cumulativeLayoutShift": 0.7153011881510416, - "cumulativeLayoutShiftAllFrames": 0.0013937174479166667, + "firstContentfulPaint": 3985, + "firstMeaningfulPaint": 3985, + "largestContentfulPaint": 3985, + "firstCPUIdle": 14529, + "interactive": 16492, + "speedIndex": 8330, + "estimatedInputLatency": 69, + "totalBlockingTime": 853, + "maxPotentialFID": 407, + "cumulativeLayoutShift": 0.0006973037719726563, + "cumulativeLayoutShiftAllFrames": 0.0006973037719726563, "observedTimeOrigin": 0, - "observedTimeOriginTs": 594417827, + "observedTimeOriginTs": 458954571, "observedNavigationStart": 0, - "observedNavigationStartTs": 594417827, - "observedFirstPaint": 1366, - "observedFirstPaintTs": 595783924, - "observedFirstContentfulPaint": 1366, - "observedFirstContentfulPaintTs": 595783924, - "observedFirstMeaningfulPaint": 1366, - "observedFirstMeaningfulPaintTs": 595783924, - "observedLargestContentfulPaint": 27735, - "observedLargestContentfulPaintTs": 622152351, - "observedTraceEnd": 28942, - "observedTraceEndTs": 623360223, - "observedLoad": 27730, - "observedLoadTs": 622147408, - "observedDomContentLoaded": 1705, - "observedDomContentLoadedTs": 596122583, - "observedCumulativeLayoutShift": 0.7153011881510416, - "observedCumulativeLayoutShiftAllFrames": 0.0013937174479166667, - "observedFirstVisualChange": 1375, - "observedFirstVisualChangeTs": 595792827, - "observedLastVisualChange": 28323, - "observedLastVisualChangeTs": 622740827, - "observedSpeedIndex": 17386, - "observedSpeedIndexTs": 611803694 + "observedNavigationStartTs": 458954571, + "observedFirstPaint": 875, + "observedFirstPaintTs": 459829187, + "observedFirstContentfulPaint": 875, + "observedFirstContentfulPaintTs": 459829187, + "observedFirstMeaningfulPaint": 875, + "observedFirstMeaningfulPaintTs": 459829187, + "observedLargestContentfulPaint": 875, + "observedLargestContentfulPaintTs": 459829187, + "observedTraceEnd": 27738, + "observedTraceEndTs": 486692645, + "observedLoad": 26682, + "observedLoadTs": 485636458, + "observedDomContentLoaded": 25841, + "observedDomContentLoadedTs": 484795625, + "observedCumulativeLayoutShift": 0.0006973037719726563, + "observedCumulativeLayoutShiftAllFrames": 0.0006973037719726563, + "observedFirstVisualChange": 860, + "observedFirstVisualChangeTs": 459814571, + "observedLastVisualChange": 26576, + "observedLastVisualChangeTs": 485530571, + "observedSpeedIndex": 2913, + "observedSpeedIndexTs": 461868025 }, { "lcpInvalidated": false @@ -77254,23 +70673,23 @@ "type": "debugdata", "items": [ { - "numRequests": 87, - "numScripts": 20, - "numStylesheets": 3, - "numFonts": 5, - "numTasks": 6268, - "numTasksOver10ms": 24, - "numTasksOver25ms": 14, - "numTasksOver50ms": 5, - "numTasksOver100ms": 2, + "numRequests": 71, + "numScripts": 17, + "numStylesheets": 2, + "numFonts": 4, + "numTasks": 1942, + "numTasksOver10ms": 21, + "numTasksOver25ms": 9, + "numTasksOver50ms": 6, + "numTasksOver100ms": 1, "numTasksOver500ms": 0, - "rtt": 1.8330000000000002, - "throughput": 23418572.24804925, - "maxRtt": 153.537, - "maxServerLatency": 320.62700000000405, - "totalByteWeight": 3788239, - "totalTaskTime": 1755.3090000000018, - "mainDocumentTransferSize": 22525 + "rtt": 1.8419999999999996, + "throughput": 31747913.91435754, + "maxRtt": 104.68900000000001, + "maxServerLatency": 325.23299999999654, + "totalByteWeight": 2958111, + "totalTaskTime": 944.7989999999972, + "mainDocumentTransferSize": 22808 } ] } @@ -77292,15 +70711,17 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B", - "cookiesGrade": "A", - "cookiesCount": 0, - "trackersGrade": "F", - "trackersCount": 27, - "lighthouse_performance": 0.11, - "lighthouse_performanceGrade": "F", - "lighthouse_accessibility": 0.8, - "lighthouse_accessibilityGrade": "B", + "testsslExpireSoon": false, + "testsslExpireDate": "2025-04-21T21:59:00.000Z", + "testsslGrade": "A+", + "cookiesGrade": null, + "cookiesCount": null, + "trackersGrade": null, + "trackersCount": null, + "lighthouse_performance": 0.36, + "lighthouse_performanceGrade": "D", + "lighthouse_accessibility": 0.86, + "lighthouse_accessibilityGrade": "A", "lighthouse_best-practices": 0.87, "lighthouse_best-practicesGrade": "A", "lighthouse_seo": 0.79, @@ -77317,199 +70738,7 @@ "tags": [ "social" ], - "http": { - "url": "https://stop-violences-femmes.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 06:33:09 GMT", - "grade": "B", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Access-Control-Allow-Origin": "*", - "Cache-Control": "max-age=43200, public", - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sun, 21 Jul 2024 06:33:08 GMT", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Keep-Alive": "timeout=5, max=99", - "Last-Modified": "Sun, 21 Jul 2024 04:05:09 GMT", - "Set-Cookie": "BIGipServerpool-arlv-production.cegedim.cloud-TCP80=!IuT3adH4u4ubvuVWDPlD0yXzT0UGhibovu+AxU4VGbKqms4UoBXOlN5enijJ7D5DBeCmza3yE8QL0X/u1k7WfjeFd+k=; path=/; Httponly; Secure", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Transfer-Encoding": "chunked", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff, nosniff", - "X-Drupal-Cache": "HIT", - "X-Drupal-Dynamic-Cache": "MISS", - "X-Frame-Options": "SAMEORIGIN", - "X-Generator": "Drupal 10 (https://www.drupal.org)" - }, - "scan_id": 53624068, - "score": 70, - "start_time": "Sun, 21 Jul 2024 06:33:05 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 2, - "tests_passed": 9, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-arlv-production.cegedim.cloud-TCP80": { - "domain": "arretonslesviolences.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - } - }, - "sameSite": false - }, - "pass": true, - "result": "cookies-secure-with-httponly-sessions", - "score_description": "All cookies use the Secure flag and all session cookies use the HttpOnly flag", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": "*", - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-implemented-with-public-access", - "score_description": "Public content is visible via cross-origin resource sharing (CORS) Access-Control-Allow-Origin header", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://arretonslesviolences.gouv.fr", - "redirects": true, - "route": [ - "http://stop-violences-femmes.gouv.fr/", - "https://stop-violences-femmes.gouv.fr/", - "https://arretonslesviolences.gouv.fr" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff, nosniff" - }, - "pass": false, - "result": "x-content-type-options-header-invalid", - "score_description": "X-Content-Type-Options header cannot be recognized", - "score_modifier": -5 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -77855,7 +71084,7 @@ "ip": "stop-violences-femmes.gouv.fr/185.194.82.152", "port": "443", "severity": "OK", - "finding": "241 >= 60 days" + "finding": "234 >= 60 days" }, { "id": "cert_notBefore", @@ -78009,14 +71238,14 @@ "ip": "stop-violences-femmes.gouv.fr/185.194.82.152", "port": "443", "severity": "INFO", - "finding": "-1 seconds from localtime" + "finding": "0 seconds from localtime" }, { "id": "HTTP_headerTime", "ip": "stop-violences-femmes.gouv.fr/185.194.82.152", "port": "443", "severity": "INFO", - "finding": "1721543664" + "finding": "1722149170" }, { "id": "HSTS_time", @@ -78593,7 +71822,7 @@ "ip": "stop-violences-femmes.gouv.fr/185.194.82.152", "port": "443", "severity": "INFO", - "finding": "87" + "finding": "51" } ], "thirdparties": { @@ -78601,7 +71830,7 @@ "cookies": [ { "name": "BIGipServerpool-arlv-production.cegedim.cloud-TCP80", - "value": "!FFD3Tq3tTBUTXyFWDPlD0yXzT0UGhr1W8vt7tuZynHsSden04Rr3FeS/Ff2YD6vpYKgo+WArr/qpqGb229BKwsBCYEQ=", + "value": "!WNtotRERUZX42eBWDPlD0yXzT0UGhjNb3D7OtRzUTMkecJrpcxkVCzHvuIH1uUXt6Xjdux83m3Slo08eFuPtw+33F7g=", "domain": "arretonslesviolences.gouv.fr", "path": "/", "expires": -1, @@ -78617,21 +71846,22 @@ "headers": { "access-control-allow-origin": "*", "cache-control": "max-age=43200, public", - "connection": "Keep-Alive", + "connection": "Upgrade, Keep-Alive", "content-encoding": "gzip", "content-type": "text/html; charset=UTF-8", "content-language": "fr", - "date": "Sun, 21 Jul 2024 06:33:27 GMT", + "date": "Sun, 28 Jul 2024 06:45:36 GMT", "expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "keep-alive": "timeout=5, max=99", - "last-modified": "Sun, 21 Jul 2024 04:05:09 GMT", - "set-cookie": "BIGipServerpool-arlv-production.cegedim.cloud-TCP80=!FFD3Tq3tTBUTXyFWDPlD0yXzT0UGhr1W8vt7tuZynHsSden04Rr3FeS/Ff2YD6vpYKgo+WArr/qpqGb229BKwsBCYEQ=; path=/; Httponly; Secure", + "keep-alive": "timeout=5, max=100", + "last-modified": "Sun, 28 Jul 2024 03:40:31 GMT", + "set-cookie": "BIGipServerpool-arlv-production.cegedim.cloud-TCP80=!WNtotRERUZX42eBWDPlD0yXzT0UGhjNb3D7OtRzUTMkecJrpcxkVCzHvuIH1uUXt6Xjdux83m3Slo08eFuPtw+33F7g=; path=/; Httponly; Secure", "strict-transport-security": "max-age=31536000; includeSubDomains", "transfer-encoding": "chunked", + "upgrade": "h2,h2c", "vary": "Accept-Encoding", "x-content-type-options": "nosniff\nnosniff", "x-drupal-cache": "HIT", - "x-drupal-dynamic-cache": "MISS", + "x-drupal-dynamic-cache": "HIT", "x-frame-options": "SAMEORIGIN", "x-generator": "Drupal 10 (https://www.drupal.org)" }, @@ -78728,7 +71958,7 @@ { "requestedUrl": "https://stop-violences-femmes.gouv.fr/", "finalUrl": "https://arretonslesviolences.gouv.fr/", - "fetchTime": "2024-07-21T06:32:27.708Z", + "fetchTime": "2024-07-28T06:43:59.687Z", "runWarnings": [ "The page may not be loading as expected because your test URL (https://stop-violences-femmes.gouv.fr/) was redirected to https://arretonslesviolences.gouv.fr/. Try testing the second URL directly." ], @@ -78736,7 +71966,7 @@ "performance": { "title": "Performance", "id": "performance", - "score": 0.53 + "score": 0.51 }, "accessibility": { "title": "Accessibility", @@ -78772,49 +72002,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 30500, + "numericValue": 22625, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 2752, - "firstMeaningfulPaint": 3374, - "largestContentfulPaint": 4234, - "firstCPUIdle": 4842, - "interactive": 30500, - "speedIndex": 36369, + "firstContentfulPaint": 2710, + "firstMeaningfulPaint": 3326, + "largestContentfulPaint": 4682, + "firstCPUIdle": 4524, + "interactive": 22625, + "speedIndex": 35241, "estimatedInputLatency": 13, - "totalBlockingTime": 112, - "maxPotentialFID": 169, + "totalBlockingTime": 84, + "maxPotentialFID": 146, "cumulativeLayoutShift": 0, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 334998234, + "observedTimeOriginTs": 342123352, "observedNavigationStart": 0, - "observedNavigationStartTs": 334998234, - "observedFirstPaint": 2326, - "observedFirstPaintTs": 337323765, - "observedFirstContentfulPaint": 2326, - "observedFirstContentfulPaintTs": 337323765, - "observedFirstMeaningfulPaint": 2326, - "observedFirstMeaningfulPaintTs": 337323765, - "observedLargestContentfulPaint": 2326, - "observedLargestContentfulPaintTs": 337323765, - "observedTraceEnd": 12763, - "observedTraceEndTs": 347761347, - "observedLoad": 11706, - "observedLoadTs": 346703943, - "observedDomContentLoaded": 2243, - "observedDomContentLoadedTs": 337241047, + "observedNavigationStartTs": 342123352, + "observedFirstPaint": 1620, + "observedFirstPaintTs": 343742956, + "observedFirstContentfulPaint": 1620, + "observedFirstContentfulPaintTs": 343742956, + "observedFirstMeaningfulPaint": 1620, + "observedFirstMeaningfulPaintTs": 343742956, + "observedLargestContentfulPaint": 1620, + "observedLargestContentfulPaintTs": 343742956, + "observedTraceEnd": 12344, + "observedTraceEndTs": 354467196, + "observedLoad": 11288, + "observedLoadTs": 353411109, + "observedDomContentLoaded": 1532, + "observedDomContentLoadedTs": 343655830, "observedCumulativeLayoutShift": 0, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 2321, - "observedFirstVisualChangeTs": 337319234, - "observedLastVisualChange": 12071, - "observedLastVisualChangeTs": 347069234, - "observedSpeedIndex": 10416, - "observedSpeedIndexTs": 345413850 + "observedFirstVisualChange": 1629, + "observedFirstVisualChangeTs": 343752352, + "observedLastVisualChange": 11729, + "observedLastVisualChangeTs": 353852352, + "observedSpeedIndex": 10013, + "observedSpeedIndexTs": 352136081 }, { "lcpInvalidated": false @@ -78836,19 +72066,19 @@ "numScripts": 7, "numStylesheets": 3, "numFonts": 4, - "numTasks": 1477, - "numTasksOver10ms": 6, - "numTasksOver25ms": 4, + "numTasks": 1517, + "numTasksOver10ms": 5, + "numTasksOver25ms": 3, "numTasksOver50ms": 0, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 138.963, - "throughput": 30952407.066130083, - "maxRtt": 143.334, - "maxServerLatency": 4.819000000000017, - "totalByteWeight": 10625847, - "totalTaskTime": 395.99299999999783, - "mainDocumentTransferSize": 10575 + "rtt": 95.64399999999999, + "throughput": 43802526.97777282, + "maxRtt": 95.804, + "maxServerLatency": 0.9689999999999941, + "totalByteWeight": 10625838, + "totalTaskTime": 333.9379999999981, + "mainDocumentTransferSize": 10566 } ] } @@ -78869,7 +72099,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B", "testsslExpireSoon": false, "testsslExpireDate": "2025-03-19T22:59:00.000Z", "testsslGrade": "A+", @@ -78877,7 +72106,7 @@ "cookiesCount": 1, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.53, + "lighthouse_performance": 0.51, "lighthouse_performanceGrade": "C", "lighthouse_accessibility": 0.81, "lighthouse_accessibilityGrade": "B", @@ -78898,213 +72127,7 @@ "travail", "emploi" ], - "http": { - "url": "https://travail-emploi.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 06:43:56 GMT", - "grade": "B", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Connection": "Keep-Alive", - "Content-Encoding": "gzip", - "Content-Length": "45742", - "Content-Type": "text/html; charset=utf-8", - "Date": "Sun, 21 Jul 2024 06:43:54 GMT", - "Keep-Alive": "timeout=5, max=99", - "Last-Modified": "Sun, 21 Jul 2024 06:43:54 GMT", - "Link": ";rel=\"preload\";as=\"style\"", - "Set-Cookie": "BIGipServerpool-dicom-portail-dares2.cegedim.cloud-HTTP=!AvSC5AZm08A47OxWDPlD0yXzT0UGhrtNB9jfhEpp02tOTz4tahdULei+VWtC9cRnDVmHNt+hvdVIjxQEhPS7hUW/i/+g; path=/; Httponly; Secure, TS01f99fc7=01352d38119b728bf2ada3711596d72065cb4bff866f32079caa53a3c8ed607e71a82961ae2ea16e494fecb019e6a0ef7abab4b709; Path=/, TS1349abd5027=087dc22938ab2000de49fb98c890f2bd59eb68591954c8431a49f047e5bdb8e53b1a197f21d42ffe08fbedd9691130003e4f7706ecf007442043db11367e7492f1ca45f93fcd244386c3510084b8190b8a3e6aa37906547ae6ea09203f7bc9c3; Path=/", - "Strict-Transport-Security": "max-age=31536000", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "DENY", - "X-Spip-Cache": "2592000" - }, - "scan_id": 53624572, - "score": 70, - "start_time": "Sun, 21 Jul 2024 06:43:52 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 2, - "tests_passed": 9, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-dicom-portail-dares2.cegedim.cloud-HTTP": { - "domain": "travail-emploi.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS01f99fc7": { - "domain": "travail-emploi.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TS1349abd5027": { - "domain": "travail-emploi.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag-but-protected-by-hsts", - "score_description": "Cookies set without using the Secure flag, but transmission over HTTP prevented by HSTS", - "score_modifier": -5 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://travail-emploi.gouv.fr/", - "redirects": true, - "route": [ - "http://travail-emploi.gouv.fr/", - "https://travail-emploi.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000", - "includeSubDomains": false, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "DENY" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -79450,7 +72473,7 @@ "ip": "travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "OK", - "finding": "257 >= 60 days" + "finding": "250 >= 60 days" }, { "id": "cert_notBefore", @@ -80167,7 +73190,7 @@ "ip": "travail-emploi.gouv.fr/185.194.82.27", "port": "443", "severity": "INFO", - "finding": "47" + "finding": "48" } ], "thirdparties": { @@ -80273,20 +73296,22 @@ { "requestedUrl": "https://travail-emploi.gouv.fr/", "finalUrl": "https://travail-emploi.gouv.fr/", - "fetchTime": "2024-07-21T06:43:33.860Z", - "runWarnings": [], + "fetchTime": "2024-07-28T06:47:51.964Z", + "runWarnings": [ + "The tested device appears to have a slower CPU than Lighthouse expects. This can negatively affect your performance score. Learn more about [calibrating an appropriate CPU slowdown multiplier](https://github.com/GoogleChrome/lighthouse/blob/master/docs/throttling.md#cpu-throttling)." + ], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.16 + "score": 0.03 }, "accessibility": { "title": "Accessibility", "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", "id": "accessibility", - "score": 0.89 + "score": 0.91 }, "best-practices": { "title": "Best Practices", @@ -80315,49 +73340,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 12253, + "numericValue": 17355, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 5143, - "firstMeaningfulPaint": 6154, - "largestContentfulPaint": 6384, - "firstCPUIdle": 9955, - "interactive": 12253, - "speedIndex": 10275, - "estimatedInputLatency": 411, - "totalBlockingTime": 1853, - "maxPotentialFID": 797, - "cumulativeLayoutShift": 0, - "cumulativeLayoutShiftAllFrames": 0.0014524762110726644, + "firstContentfulPaint": 7979, + "firstMeaningfulPaint": 8206, + "largestContentfulPaint": 9229, + "firstCPUIdle": 17516, + "interactive": 17355, + "speedIndex": 18283, + "estimatedInputLatency": 1634, + "totalBlockingTime": 8258, + "maxPotentialFID": 2526, + "cumulativeLayoutShift": 0.5005579630533854, + "cumulativeLayoutShiftAllFrames": 0.0015970278061247477, "observedTimeOrigin": 0, - "observedTimeOriginTs": 325828606, + "observedTimeOriginTs": 293667054, "observedNavigationStart": 0, - "observedNavigationStartTs": 325828606, - "observedFirstPaint": 1742, - "observedFirstPaintTs": 327570626, - "observedFirstContentfulPaint": 1742, - "observedFirstContentfulPaintTs": 327570626, - "observedFirstMeaningfulPaint": 2439, - "observedFirstMeaningfulPaintTs": 328267470, - "observedLargestContentfulPaint": 1742, - "observedLargestContentfulPaintTs": 327570626, - "observedTraceEnd": 7559, - "observedTraceEndTs": 333387456, - "observedLoad": 6502, - "observedLoadTs": 332330378, - "observedDomContentLoaded": 1722, - "observedDomContentLoadedTs": 327550568, - "observedCumulativeLayoutShift": 0, - "observedCumulativeLayoutShiftAllFrames": 0.0014524762110726644, - "observedFirstVisualChange": 1741, - "observedFirstVisualChangeTs": 327569606, - "observedLastVisualChange": 7291, - "observedLastVisualChangeTs": 333119606, - "observedSpeedIndex": 4269, - "observedSpeedIndexTs": 330097462 + "observedNavigationStartTs": 293667054, + "observedFirstPaint": 4776, + "observedFirstPaintTs": 298443028, + "observedFirstContentfulPaint": 5235, + "observedFirstContentfulPaintTs": 298902346, + "observedFirstMeaningfulPaint": 5235, + "observedFirstMeaningfulPaintTs": 298902346, + "observedLargestContentfulPaint": 5235, + "observedLargestContentfulPaintTs": 298902346, + "observedTraceEnd": 14965, + "observedTraceEndTs": 308632092, + "observedLoad": 13910, + "observedLoadTs": 307576589, + "observedDomContentLoaded": 5353, + "observedDomContentLoadedTs": 299020303, + "observedCumulativeLayoutShift": 0.5005579630533854, + "observedCumulativeLayoutShiftAllFrames": 0.0015970278061247477, + "observedFirstVisualChange": 4637, + "observedFirstVisualChangeTs": 298304054, + "observedLastVisualChange": 14187, + "observedLastVisualChangeTs": 307854054, + "observedSpeedIndex": 8618, + "observedSpeedIndexTs": 302285075 }, { "lcpInvalidated": false @@ -80379,19 +73404,19 @@ "numScripts": 15, "numStylesheets": 5, "numFonts": 6, - "numTasks": 914, - "numTasksOver10ms": 24, - "numTasksOver25ms": 15, - "numTasksOver50ms": 10, - "numTasksOver100ms": 7, - "numTasksOver500ms": 1, - "rtt": 2.645000000000003, - "throughput": 7586073.403338584, - "maxRtt": 87.76099999999951, - "maxServerLatency": 77.40899999999999, - "totalByteWeight": 1627007, - "totalTaskTime": 2313.7599999999966, - "mainDocumentTransferSize": 46816 + "numTasks": 863, + "numTasksOver10ms": 29, + "numTasksOver25ms": 27, + "numTasksOver50ms": 16, + "numTasksOver100ms": 11, + "numTasksOver500ms": 3, + "rtt": 2.1019999999999897, + "throughput": 5018442.834728094, + "maxRtt": 83.96100000000001, + "maxServerLatency": 13.969000000000008, + "totalByteWeight": 1613788, + "totalTaskTime": 5079.339000000002, + "mainDocumentTransferSize": 46806 } ] } @@ -80399,7 +73424,7 @@ } } ], - "screenshot": true, + "screenshot": false, "stats": null, "github_repository": null, "budget_page": null, @@ -80412,7 +73437,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B", "testsslExpireSoon": false, "testsslExpireDate": "2025-04-04T21:59:00.000Z", "testsslGrade": "A", @@ -80420,9 +73444,9 @@ "cookiesCount": 0, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.16, + "lighthouse_performance": 0.03, "lighthouse_performanceGrade": "F", - "lighthouse_accessibility": 0.89, + "lighthouse_accessibility": 0.91, "lighthouse_accessibilityGrade": "A", "lighthouse_best-practices": 0.8, "lighthouse_best-practicesGrade": "B", @@ -80437,246 +73461,7 @@ "404": null, "url": "https://www.1jeune1solution.gouv.fr", "category": "dnum", - "http": { - "url": "https://www.1jeune1solution.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 06:48:46 GMT", - "grade": "B+", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "CF-Cache-Status": "DYNAMIC", - "CF-RAY": "8a693f3b6848a385-SEA", - "Connection": "keep-alive", - "Content-Encoding": "gzip", - "Content-Type": "text/html; charset=utf-8", - "Date": "Sun, 21 Jul 2024 06:48:44 GMT", - "Server": "cloudflare", - "Transfer-Encoding": "chunked", - "alt-svc": "h3=\":443\"; ma=86400", - "content-security-policy": "default-src 'self' *.fabrique.social.gouv.fr *.meilisearch.io/multi-search *.meilisearch.com/multi-search 1j1s-front.osc-fr1.scalingo.io *.1jeune1solution.gouv.fr; script-src 'self' yssn.1jeune1solution.gouv.fr https://matomo.fabrique.social.gouv.fr/ https://*.adform.net; img-src 'self' *.google.com data: cos-njord-dgefp-1j1s-prod.storage-eb4.cegedim.cloud yssn.1jeune1solution.gouv.fr https://matomo.fabrique.social.gouv.fr/ img.youtube.com jedonnemonavis.numerique.gouv.fr; style-src 'self' 'unsafe-inline' yssn.1jeune1solution.gouv.fr https://matomo.fabrique.social.gouv.fr/; frame-ancestors 'none'; frame-src 'self' *.apprentissage.beta.gouv.fr immersion-facile.beta.gouv.fr deposer-offre.www.1jeune1solution.gouv.fr *.youtube-nocookie.com simulateur-alternance.1jeune1solution.gouv.fr https://*.adform.net mes-aides.francetravail.fr; form-action 'self'; base-uri 'none';", - "referrer-policy": "no-referrer, strict-origin-when-cross-origin", - "strict-transport-security": "max-age=31536000, max-age=63072000; includeSubDomains; preload", - "vary": "Accept-Encoding", - "x-content-type-options": "nosniff", - "x-dns-prefetch-control": "on", - "x-request-id": "caa1c1cc-9634-4dff-a831-038d9b46d366" - }, - "scan_id": 53624665, - "score": 80, - "start_time": "Sun, 21 Jul 2024 06:48:42 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 1, - "tests_passed": 10, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": { - "base-uri": [ - "'none'" - ], - "default-src": [ - "*.meilisearch.io/multi-search", - "*.meilisearch.com/multi-search", - "*.1jeune1solution.gouv.fr", - "*.fabrique.social.gouv.fr", - "'self'", - "1j1s-front.osc-fr1.scalingo.io" - ], - "form-action": [ - "'self'" - ], - "frame-ancestors": [ - "'none'" - ], - "frame-src": [ - "simulateur-alternance.1jeune1solution.gouv.fr", - "mes-aides.francetravail.fr", - "https://*.adform.net", - "*.apprentissage.beta.gouv.fr", - "*.youtube-nocookie.com", - "'self'", - "immersion-facile.beta.gouv.fr", - "deposer-offre.www.1jeune1solution.gouv.fr" - ], - "img-src": [ - "cos-njord-dgefp-1j1s-prod.storage-eb4.cegedim.cloud", - "jedonnemonavis.numerique.gouv.fr", - "yssn.1jeune1solution.gouv.fr", - "'self'", - "img.youtube.com", - "https://matomo.fabrique.social.gouv.fr/", - "data:", - "*.google.com" - ], - "script-src": [ - "https://*.adform.net", - "yssn.1jeune1solution.gouv.fr", - "https://matomo.fabrique.social.gouv.fr/", - "'self'" - ], - "style-src": [ - "yssn.1jeune1solution.gouv.fr", - "https://matomo.fabrique.social.gouv.fr/", - "'unsafe-inline'", - "'self'" - ] - }, - "http": true, - "meta": false, - "numPolicies": 1, - "policy": { - "antiClickjacking": true, - "defaultNone": false, - "insecureBaseUri": false, - "insecureFormAction": false, - "insecureSchemeActive": false, - "insecureSchemePassive": false, - "strictDynamic": false, - "unsafeEval": false, - "unsafeInline": false, - "unsafeInlineStyle": true, - "unsafeObjects": false - } - }, - "pass": true, - "result": "csp-implemented-with-unsafe-inline-in-style-src-only", - "score_description": "Content Security Policy (CSP) implemented with unsafe sources inside style-src. This includes 'unsafe-inline', data: or overly broad sources such as https:.", - "score_modifier": 0 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": null, - "sameSite": null - }, - "pass": true, - "result": "cookies-not-found", - "score_description": "No cookies detected", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://www.1jeune1solution.gouv.fr/", - "redirects": true, - "route": [ - "http://www.1jeune1solution.gouv.fr/", - "https://www.1jeune1solution.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": "no-referrer, strict-origin-when-cross-origin", - "http": true, - "meta": false - }, - "pass": true, - "result": "referrer-policy-private", - "score_description": "Referrer-Policy header set to \"no-referrer\", \"same-origin\", \"strict-origin\" or \"strict-origin-when-cross-origin\"", - "score_modifier": 5 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000, max-age=63072000; includeSubDomains; preload", - "includeSubDomains": false, - "max-age": null, - "preload": false, - "preloaded": false - }, - "pass": false, - "result": "hsts-header-invalid", - "score_description": "HTTP Strict Transport Security (HSTS) header cannot be recognized", - "score_modifier": -20 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": null - }, - "pass": true, - "result": "x-frame-options-implemented-via-csp", - "score_description": "X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive", - "score_modifier": 5 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -80684,77 +73469,77 @@ "testssl": [ { "id": "service", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "HTTP" }, { "id": "pre_128cipher", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "No 128 cipher limit bug" }, { "id": "SSLv2", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "SSLv3", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "TLS1", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_1", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_2", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "TLS1_3", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "offered with final" }, { "id": "ALPN_HTTP2", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "h2" }, { "id": "ALPN", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "http/1.1" }, { "id": "cipherlist_NULL", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -80762,7 +73547,7 @@ }, { "id": "cipherlist_aNULL", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -80770,7 +73555,7 @@ }, { "id": "cipherlist_EXPORT", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -80778,7 +73563,7 @@ }, { "id": "cipherlist_LOW", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -80786,7 +73571,7 @@ }, { "id": "cipherlist_3DES_IDEA", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -80794,7 +73579,7 @@ }, { "id": "cipherlist_OBSOLETED", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "LOW", "cwe": "CWE-310", @@ -80802,462 +73587,462 @@ }, { "id": "cipherlist_STRONG_NOFS", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "cipherlist_STRONG_FS", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "cipher_order-tls1_2", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "server" }, { "id": "cipherorder_TLSv1_2", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "cipher_order", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "server -- TLS 1.3 client determined" }, { "id": "FS", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "FS_ciphers", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-CHACHA20-POLY1305-OLD" }, { "id": "FS_ECDHE_curves", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "prime256v1 secp384r1 secp521r1" }, { "id": "TLS_extensions", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'key share/#51' 'supported versions/#43' 'extended master secret/#23' 'application layer protocol negotiation/#16' 'compress_certificate/#27'" }, { "id": "TLS_session_ticket", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "valid for 64800 seconds only (= 60 days" + "finding": "364 >= 60 days" }, { "id": "cert_notBefore", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "2024-06-25 22:00" }, { "id": "cert_notAfter", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "2025-07-27 21:59" }, { "id": "cert_extlifeSpan", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "certificate has no extended life time according to browser forum" }, { "id": "cert_eTLS", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "not present" }, { "id": "cert_crlDistributionPoints", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" }, { "id": "cert_ocspURL", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" }, { "id": "OCSP_stapling", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "cert_mustStapleExtension", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "--" }, { "id": "DNS_CAArecord", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "issue=certigna.fr, issue=digicert.com;, issue=entrust.net, issue=letsencrypt.org, issue=pki.goog;, issue=sectigo.com" }, { "id": "certificate_transparency", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "yes (certificate extension)" }, { "id": "certs_countServer", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "2" }, { "id": "certs_list_ordering_problem", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_caIssuers", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "Certigna Services CA (DHIMYOTIS from FR)" }, { "id": "intermediate_cert <#1>", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "intermediate_cert_fingerprintSHA256 <#1>", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" }, { "id": "intermediate_cert_notBefore <#1>", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "2015-11-25 11:33" }, { "id": "intermediate_cert_notAfter <#1>", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "2025-11-22 11:33" }, { "id": "intermediate_cert_expiration <#1>", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "ok > 40 days" }, { "id": "intermediate_cert_chain <#1>", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "Certigna Services CA <-- Certigna" }, { "id": "intermediate_cert_badOCSP", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "intermediate certificate(s) is/are ok" }, { "id": "HTTP_status_code", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "403 Forbidden ('/')" }, { "id": "HTTP_clock_skew", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "0 seconds from localtime" }, { "id": "HTTP_headerTime", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", - "finding": "1721544566" + "finding": "1722150244" }, { "id": "HSTS", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "HPKP", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "No support for HTTP Public Key Pinning" }, { "id": "banner_server", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "cloudflare" }, { "id": "banner_application", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "No application banner found" }, { "id": "cookie_count", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "0 at '/' (30x detected, better try target URL of 30x)" }, { "id": "X-Frame-Options", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "SAMEORIGIN" }, { "id": "Permissions-Policy", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()" }, { "id": "Referrer-Policy", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "same-origin" }, { "id": "Cache-Control", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0" }, { "id": "banner_reverseproxy", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "cwe": "CWE-200", @@ -81265,7 +74050,7 @@ }, { "id": "heartbleed", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cve": "CVE-2014-0160", @@ -81274,7 +74059,7 @@ }, { "id": "CCS", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cve": "CVE-2014-0224", @@ -81283,7 +74068,7 @@ }, { "id": "ticketbleed", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cve": "CVE-2016-9244", @@ -81292,7 +74077,7 @@ }, { "id": "ROBOT", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", @@ -81301,7 +74086,7 @@ }, { "id": "secure_renego", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cwe": "CWE-310", @@ -81309,7 +74094,7 @@ }, { "id": "secure_client_renego", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cve": "CVE-2011-1473", @@ -81318,7 +74103,7 @@ }, { "id": "CRIME_TLS", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cve": "CVE-2012-4929", @@ -81327,7 +74112,7 @@ }, { "id": "BREACH", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "MEDIUM", "cve": "CVE-2013-3587", @@ -81336,7 +74121,7 @@ }, { "id": "POODLE_SSL", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cve": "CVE-2014-3566", @@ -81345,14 +74130,14 @@ }, { "id": "fallback_SCSV", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "no protocol below TLS 1.2 offered" }, { "id": "SWEET32", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cve": "CVE-2016-2183 CVE-2016-6329", @@ -81361,7 +74146,7 @@ }, { "id": "FREAK", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cve": "CVE-2015-0204", @@ -81370,7 +74155,7 @@ }, { "id": "DROWN", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cve": "CVE-2016-0800 CVE-2016-0703", @@ -81379,7 +74164,7 @@ }, { "id": "DROWN_hint", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "cve": "CVE-2016-0800 CVE-2016-0703", @@ -81388,7 +74173,7 @@ }, { "id": "LOGJAM", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -81397,7 +74182,7 @@ }, { "id": "LOGJAM-common_primes", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -81406,7 +74191,7 @@ }, { "id": "BEAST", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cve": "CVE-2011-3389", @@ -81415,7 +74200,7 @@ }, { "id": "LUCKY13", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "LOW", "cve": "CVE-2013-0169", @@ -81424,7 +74209,7 @@ }, { "id": "winshock", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cve": "CVE-2014-6321", @@ -81433,7 +74218,7 @@ }, { "id": "RC4", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "cve": "CVE-2013-2566 CVE-2015-2808", @@ -81442,399 +74227,399 @@ }, { "id": "clientsimulation-android_60", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305-OLD" }, { "id": "clientsimulation-android_70", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_81", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_90", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-android_X", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-android_11", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-android_12", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-chrome_79_win10", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-chrome_101_win10", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-firefox_66_win81", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-firefox_100_win10", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-ie_6_xp", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_win7", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_xp", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win7", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-SHA" }, { "id": "clientsimulation-ie_11_win81", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-SHA" }, { "id": "clientsimulation-ie_11_winphone81", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-SHA" }, { "id": "clientsimulation-ie_11_win10", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-edge_15_win10", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-edge_101_win10_21h2", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-safari_121_ios_122", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_CHACHA20_POLY1305_SHA256" }, { "id": "clientsimulation-safari_130_osx_10146", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_CHACHA20_POLY1305_SHA256" }, { "id": "clientsimulation-safari_154_osx_1231", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-java_7u25", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-java_8u161", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-java1102", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-java1703", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_256_GCM_SHA384" }, { "id": "clientsimulation-go_1178", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-libressl_283", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" }, { "id": "clientsimulation-openssl_102e", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-openssl_110l", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" }, { "id": "clientsimulation-openssl_111d", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_256_GCM_SHA384" }, { "id": "clientsimulation-openssl_303", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_256_GCM_SHA384" }, { "id": "clientsimulation-apple_mail_16_0", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-thunderbird_91_9", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "rating_spec", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" }, { "id": "rating_doc", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" }, { "id": "protocol_support_score", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "100" }, { "id": "protocol_support_score_weighted", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "30" }, { "id": "key_exchange_score", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "90" }, { "id": "key_exchange_score_weighted", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "27" }, { "id": "cipher_strength_score", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "60" }, { "id": "cipher_strength_score_weighted", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "24" }, { "id": "final_score", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "81" }, { "id": "overall_grade", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "OK", "finding": "A" }, { "id": "grade_cap_reason_1", - "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", + "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", "port": "443", "severity": "INFO", "finding": "Grade capped to A. HSTS is not offered" }, { "id": "service", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "HTTP" }, { "id": "pre_128cipher", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "No 128 cipher limit bug" }, { "id": "SSLv2", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "SSLv3", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "not offered" }, { "id": "TLS1", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_1", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "not offered" }, { "id": "TLS1_2", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "TLS1_3", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "offered with final" }, { "id": "ALPN_HTTP2", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "h2" }, { "id": "ALPN", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "http/1.1" }, { "id": "cipherlist_NULL", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -81842,7 +74627,7 @@ }, { "id": "cipherlist_aNULL", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -81850,7 +74635,7 @@ }, { "id": "cipherlist_EXPORT", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -81858,7 +74643,7 @@ }, { "id": "cipherlist_LOW", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cwe": "CWE-327", @@ -81866,7 +74651,7 @@ }, { "id": "cipherlist_3DES_IDEA", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "cwe": "CWE-310", @@ -81874,7 +74659,7 @@ }, { "id": "cipherlist_OBSOLETED", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "LOW", "cwe": "CWE-310", @@ -81882,462 +74667,462 @@ }, { "id": "cipherlist_STRONG_NOFS", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "cipherlist_STRONG_FS", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "cipher_order-tls1_2", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "server" }, { "id": "cipherorder_TLSv1_2", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "cipher_order", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "server -- TLS 1.3 client determined" }, { "id": "FS", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "offered" }, { "id": "FS_ciphers", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-CHACHA20-POLY1305-OLD" }, { "id": "FS_ECDHE_curves", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "prime256v1 secp384r1 secp521r1" }, { "id": "TLS_extensions", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'key share/#51' 'supported versions/#43' 'extended master secret/#23' 'application layer protocol negotiation/#16' 'compress_certificate/#27'" }, { "id": "TLS_session_ticket", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "valid for 64800 seconds only (= 60 days" + "finding": "364 >= 60 days" }, { "id": "cert_notBefore", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "2024-06-25 22:00" }, { "id": "cert_notAfter", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "2025-07-27 21:59" }, { "id": "cert_extlifeSpan", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "certificate has no extended life time according to browser forum" }, { "id": "cert_eTLS", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "not present" }, { "id": "cert_crlDistributionPoints", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "http://crl.dhimyotis.com/servicesca.crl http://crl.certigna.fr/servicesca.crl" }, { "id": "cert_ocspURL", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "http://servicesca.ocsp.certigna.fr http://servicesca.ocsp.dhimyotis.com" }, { "id": "OCSP_stapling", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "cert_mustStapleExtension", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "--" }, { "id": "DNS_CAArecord", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "issue=certigna.fr, issue=digicert.com;, issue=entrust.net, issue=letsencrypt.org, issue=pki.goog;, issue=sectigo.com" }, { "id": "certificate_transparency", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "yes (certificate extension)" }, { "id": "certs_countServer", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "2" }, { "id": "certs_list_ordering_problem", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "no" }, { "id": "cert_caIssuers", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "Certigna Services CA (DHIMYOTIS from FR)" }, { "id": "intermediate_cert <#1>", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" }, { "id": "intermediate_cert_fingerprintSHA256 <#1>", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "71E653BFBF5E72515B4099BBD5EC8872812B47C6EC1FA9ADD327E1C92C9EA16D" }, { "id": "intermediate_cert_notBefore <#1>", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "2015-11-25 11:33" }, { "id": "intermediate_cert_notAfter <#1>", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "2025-11-22 11:33" }, { "id": "intermediate_cert_expiration <#1>", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "ok > 40 days" }, { "id": "intermediate_cert_chain <#1>", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "Certigna Services CA <-- Certigna" }, { "id": "intermediate_cert_badOCSP", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "intermediate certificate(s) is/are ok" }, { "id": "HTTP_status_code", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "403 Forbidden ('/')" }, { "id": "HTTP_clock_skew", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "0 seconds from localtime" }, { "id": "HTTP_headerTime", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", - "finding": "1721544621" + "finding": "1722150297" }, { "id": "HSTS", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "LOW", "finding": "not offered" }, { "id": "HPKP", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "No support for HTTP Public Key Pinning" }, { "id": "banner_server", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "cloudflare" }, { "id": "banner_application", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "No application banner found" }, { "id": "cookie_count", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "0 at '/' (30x detected, better try target URL of 30x)" }, { "id": "X-Frame-Options", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "SAMEORIGIN" }, { "id": "Permissions-Policy", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()" }, { "id": "Referrer-Policy", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "same-origin" }, { "id": "Cache-Control", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0" }, { "id": "banner_reverseproxy", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "cwe": "CWE-200", @@ -82345,7 +75130,7 @@ }, { "id": "heartbleed", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cve": "CVE-2014-0160", @@ -82354,7 +75139,7 @@ }, { "id": "CCS", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cve": "CVE-2014-0224", @@ -82363,7 +75148,7 @@ }, { "id": "ticketbleed", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cve": "CVE-2016-9244", @@ -82372,7 +75157,7 @@ }, { "id": "ROBOT", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cve": "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", @@ -82381,7 +75166,7 @@ }, { "id": "secure_renego", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cwe": "CWE-310", @@ -82389,7 +75174,7 @@ }, { "id": "secure_client_renego", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cve": "CVE-2011-1473", @@ -82398,7 +75183,7 @@ }, { "id": "CRIME_TLS", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cve": "CVE-2012-4929", @@ -82407,7 +75192,7 @@ }, { "id": "BREACH", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "MEDIUM", "cve": "CVE-2013-3587", @@ -82416,7 +75201,7 @@ }, { "id": "POODLE_SSL", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cve": "CVE-2014-3566", @@ -82425,14 +75210,14 @@ }, { "id": "fallback_SCSV", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "no protocol below TLS 1.2 offered" }, { "id": "SWEET32", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cve": "CVE-2016-2183 CVE-2016-6329", @@ -82441,7 +75226,7 @@ }, { "id": "FREAK", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cve": "CVE-2015-0204", @@ -82450,7 +75235,7 @@ }, { "id": "DROWN", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cve": "CVE-2016-0800 CVE-2016-0703", @@ -82459,7 +75244,7 @@ }, { "id": "DROWN_hint", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "cve": "CVE-2016-0800 CVE-2016-0703", @@ -82468,7 +75253,7 @@ }, { "id": "LOGJAM", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -82477,7 +75262,7 @@ }, { "id": "LOGJAM-common_primes", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cve": "CVE-2015-4000", @@ -82486,7 +75271,7 @@ }, { "id": "BEAST", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cve": "CVE-2011-3389", @@ -82495,7 +75280,7 @@ }, { "id": "LUCKY13", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "LOW", "cve": "CVE-2013-0169", @@ -82504,7 +75289,7 @@ }, { "id": "winshock", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cve": "CVE-2014-6321", @@ -82513,7 +75298,7 @@ }, { "id": "RC4", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "cve": "CVE-2013-2566 CVE-2015-2808", @@ -82522,322 +75307,322 @@ }, { "id": "clientsimulation-android_60", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305-OLD" }, { "id": "clientsimulation-android_70", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_81", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-android_90", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-android_X", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-android_11", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-android_12", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-chrome_79_win10", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-chrome_101_win10", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-firefox_66_win81", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-firefox_100_win10", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-ie_6_xp", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_win7", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_8_xp", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-ie_11_win7", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-SHA" }, { "id": "clientsimulation-ie_11_win81", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-SHA" }, { "id": "clientsimulation-ie_11_winphone81", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-SHA" }, { "id": "clientsimulation-ie_11_win10", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-edge_15_win10", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-edge_101_win10_21h2", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-safari_121_ios_122", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_CHACHA20_POLY1305_SHA256" }, { "id": "clientsimulation-safari_130_osx_10146", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_CHACHA20_POLY1305_SHA256" }, { "id": "clientsimulation-safari_154_osx_1231", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-java_7u25", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "No connection" }, { "id": "clientsimulation-java_8u161", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-java1102", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-java1703", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_256_GCM_SHA384" }, { "id": "clientsimulation-go_1178", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "clientsimulation-libressl_283", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" }, { "id": "clientsimulation-openssl_102e", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-openssl_110l", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" }, { "id": "clientsimulation-openssl_111d", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_256_GCM_SHA384" }, { "id": "clientsimulation-openssl_303", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_256_GCM_SHA384" }, { "id": "clientsimulation-apple_mail_16_0", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" }, { "id": "clientsimulation-thunderbird_91_9", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "TLSv1.3 TLS_AES_128_GCM_SHA256" }, { "id": "rating_spec", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" }, { "id": "rating_doc", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" }, { "id": "protocol_support_score", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "100" }, { "id": "protocol_support_score_weighted", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "30" }, { "id": "key_exchange_score", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "90" }, { "id": "key_exchange_score_weighted", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "27" }, { "id": "cipher_strength_score", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "60" }, { "id": "cipher_strength_score_weighted", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "24" }, { "id": "final_score", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "81" }, { "id": "overall_grade", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "OK", "finding": "A" }, { "id": "grade_cap_reason_1", - "ip": "www.1jeune1solution.gouv.fr/172.67.40.181", + "ip": "www.1jeune1solution.gouv.fr/104.22.66.98", "port": "443", "severity": "INFO", "finding": "Grade capped to A. HSTS is not offered" @@ -83189,7 +75974,7 @@ "ip": "www.1jeune1solution.gouv.fr/104.22.67.98", "port": "443", "severity": "OK", - "finding": "371 >= 60 days" + "finding": "364 >= 60 days" }, { "id": "cert_notBefore", @@ -83350,7 +76135,7 @@ "ip": "www.1jeune1solution.gouv.fr/104.22.67.98", "port": "443", "severity": "INFO", - "finding": "1721544676" + "finding": "1722150351" }, { "id": "HSTS", @@ -83927,7 +76712,7 @@ "ip": "www.1jeune1solution.gouv.fr/104.22.67.98", "port": "443", "severity": "INFO", - "finding": "167" + "finding": "162" } ], "thirdparties": { @@ -83938,7 +76723,7 @@ "value": "!eulerian=wait!matomocloud=wait!youtube=wait", "domain": "www.1jeune1solution.gouv.fr", "path": "/", - "expires": 1753080540, + "expires": 1753686217, "size": 56, "httpOnly": false, "secure": true, @@ -83952,23 +76737,23 @@ "headers": { "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "DYNAMIC", - "cf-ray": "8a693f9dab312d22-IAD", + "cf-ray": "8aa302ab0a7bfaf8-SJC", "content-encoding": "br", "content-security-policy": "default-src 'self' *.fabrique.social.gouv.fr *.meilisearch.io/multi-search *.meilisearch.com/multi-search 1j1s-front.osc-fr1.scalingo.io *.1jeune1solution.gouv.fr; script-src 'self' yssn.1jeune1solution.gouv.fr https://matomo.fabrique.social.gouv.fr/ https://*.adform.net; img-src 'self' *.google.com data: cos-njord-dgefp-1j1s-prod.storage-eb4.cegedim.cloud yssn.1jeune1solution.gouv.fr https://matomo.fabrique.social.gouv.fr/ img.youtube.com jedonnemonavis.numerique.gouv.fr; style-src 'self' 'unsafe-inline' yssn.1jeune1solution.gouv.fr https://matomo.fabrique.social.gouv.fr/; frame-ancestors 'none'; frame-src 'self' *.apprentissage.beta.gouv.fr immersion-facile.beta.gouv.fr deposer-offre.www.1jeune1solution.gouv.fr *.youtube-nocookie.com simulateur-alternance.1jeune1solution.gouv.fr https://*.adform.net mes-aides.francetravail.fr; form-action 'self'; base-uri 'none';", "content-type": "text/html; charset=utf-8", - "date": "Sun, 21 Jul 2024 06:48:59 GMT", + "date": "Sun, 28 Jul 2024 07:03:37 GMT", "referrer-policy": "no-referrer, strict-origin-when-cross-origin", "server": "cloudflare", "strict-transport-security": "max-age=31536000\nmax-age=63072000; includeSubDomains; preload", "vary": "Accept-Encoding", "x-content-type-options": "nosniff", "x-dns-prefetch-control": "on", - "x-request-id": "1e5e927a-f002-4e7c-ba73-0082870ef8a0" + "x-request-id": "cfe22f0f-7572-4545-bd37-edc925260def" }, "endpoints": [ { "hostname": "www.1jeune1solution.gouv.fr", - "ip": "104.22.67.98", + "ip": "104.22.66.98", "geoip": { "registered_country": { "geoname_id": 6252001, @@ -84261,7 +77046,7 @@ "type": "dns", "host": "www.1jeune1solution.gouv.fr.", "matched-at": "www.1jeune1solution.gouv.fr", - "timestamp": "2024-07-21T06:52:12.631029054Z", + "timestamp": "2024-07-28T07:06:48.422198363Z", "matcher-status": true }, { @@ -84297,7 +77082,7 @@ "extracted-results": [ "www.1jeune1solution.gouv.fr.cdn.cloudflare.net." ], - "timestamp": "2024-07-21T06:52:13.67350665Z", + "timestamp": "2024-07-28T07:06:49.706801559Z", "matcher-status": true }, { @@ -84329,7 +77114,7 @@ "host": "https://www.1jeune1solution.gouv.fr", "matched-at": "https://www.1jeune1solution.gouv.fr", "ip": "104.22.66.98", - "timestamp": "2024-07-21T06:52:19.652816409Z", + "timestamp": "2024-07-28T07:06:55.580152667Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.1jeune1solution.gouv.fr'", "matcher-status": true }, @@ -84357,7 +77142,7 @@ "host": "https://www.1jeune1solution.gouv.fr", "matched-at": "https://www.1jeune1solution.gouv.fr", "ip": "104.22.66.98", - "timestamp": "2024-07-21T06:52:40.219740012Z", + "timestamp": "2024-07-28T07:07:16.193595073Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.1jeune1solution.gouv.fr'", "matcher-status": true }, @@ -84389,12 +77174,12 @@ "max-request": 1 } }, - "matcher-name": "content-security-policy", + "matcher-name": "strict-transport-security", "type": "http", "host": "https://www.1jeune1solution.gouv.fr", "matched-at": "https://www.1jeune1solution.gouv.fr", "ip": "104.22.66.98", - "timestamp": "2024-07-21T06:52:45.57849923Z", + "timestamp": "2024-07-28T07:07:22.407997664Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.1jeune1solution.gouv.fr'", "matcher-status": true }, @@ -84426,12 +77211,12 @@ "max-request": 1 } }, - "matcher-name": "x-content-type-options", + "matcher-name": "content-security-policy", "type": "http", "host": "https://www.1jeune1solution.gouv.fr", "matched-at": "https://www.1jeune1solution.gouv.fr", "ip": "104.22.66.98", - "timestamp": "2024-07-21T06:52:45.578535618Z", + "timestamp": "2024-07-28T07:07:22.408055332Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.1jeune1solution.gouv.fr'", "matcher-status": true }, @@ -84463,12 +77248,12 @@ "max-request": 1 } }, - "matcher-name": "x-permitted-cross-domain-policies", + "matcher-name": "x-content-type-options", "type": "http", "host": "https://www.1jeune1solution.gouv.fr", "matched-at": "https://www.1jeune1solution.gouv.fr", "ip": "104.22.66.98", - "timestamp": "2024-07-21T06:52:45.578546419Z", + "timestamp": "2024-07-28T07:07:22.408072083Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.1jeune1solution.gouv.fr'", "matcher-status": true }, @@ -84500,12 +77285,12 @@ "max-request": 1 } }, - "matcher-name": "clear-site-data", + "matcher-name": "x-permitted-cross-domain-policies", "type": "http", "host": "https://www.1jeune1solution.gouv.fr", "matched-at": "https://www.1jeune1solution.gouv.fr", "ip": "104.22.66.98", - "timestamp": "2024-07-21T06:52:45.578560435Z", + "timestamp": "2024-07-28T07:07:22.40808665Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.1jeune1solution.gouv.fr'", "matcher-status": true }, @@ -84537,12 +77322,12 @@ "max-request": 1 } }, - "matcher-name": "strict-transport-security", + "matcher-name": "clear-site-data", "type": "http", "host": "https://www.1jeune1solution.gouv.fr", "matched-at": "https://www.1jeune1solution.gouv.fr", "ip": "104.22.66.98", - "timestamp": "2024-07-21T06:52:45.578579841Z", + "timestamp": "2024-07-28T07:07:22.408099795Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.1jeune1solution.gouv.fr'", "matcher-status": true }, @@ -84582,55 +77367,56 @@ "host": "https://www.1jeune1solution.gouv.fr", "matched-at": "https://www.1jeune1solution.gouv.fr/", "ip": "104.22.66.98", - "timestamp": "2024-07-21T06:53:00.742662632Z", + "timestamp": "2024-07-28T07:07:36.63507833Z", "curl-command": "curl -X 'POST' -d '_=' -H 'Content-Type: application/x-www-form-urlencoded' -H 'Host: www.1jeune1solution.gouv.fr' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.1jeune1solution.gouv.fr/'", "matcher-status": true }, { - "template": "ssl/detect-ssl-issuer.yaml", - "template-url": "https://templates.nuclei.sh/public/ssl-issuer", - "template-id": "ssl-issuer", - "template-path": "/home/runner/nuclei-templates/ssl/detect-ssl-issuer.yaml", + "template": "ssl/tls-version.yaml", + "template-url": "https://templates.nuclei.sh/public/tls-version", + "template-id": "tls-version", + "template-path": "/home/runner/nuclei-templates/ssl/tls-version.yaml", "info": { - "name": "Detect SSL Certificate Issuer", + "name": "TLS Version - Detect", "author": [ - "lingtren" + "pdteam", + "pussycat0x" ], "tags": [ "ssl", "tls" ], - "description": "Extract the issuer's organization from the target's certificate. Issuers are entities which sign and distribute certificates.\n", + "description": "TLS version detection is a security process used to determine the version of the Transport Layer Security (TLS) protocol used by a computer or server.\nIt is important to detect the TLS version in order to ensure secure communication between two computers or servers.\n", "severity": "info", "metadata": { - "max-request": 1 + "max-request": 4 } }, "type": "ssl", "host": "www.1jeune1solution.gouv.fr", "matched-at": "www.1jeune1solution.gouv.fr:443", "extracted-results": [ - "DHIMYOTIS" + "tls12" ], "ip": "104.22.66.98", - "timestamp": "2024-07-21T07:00:19.960233954Z", + "timestamp": "2024-07-28T07:15:15.091663886Z", "matcher-status": true }, { - "template": "ssl/ssl-dns-names.yaml", - "template-url": "https://templates.nuclei.sh/public/ssl-dns-names", - "template-id": "ssl-dns-names", - "template-path": "/home/runner/nuclei-templates/ssl/ssl-dns-names.yaml", + "template": "ssl/detect-ssl-issuer.yaml", + "template-url": "https://templates.nuclei.sh/public/ssl-issuer", + "template-id": "ssl-issuer", + "template-path": "/home/runner/nuclei-templates/ssl/detect-ssl-issuer.yaml", "info": { - "name": "SSL DNS Names", + "name": "Detect SSL Certificate Issuer", "author": [ - "pdteam" + "lingtren" ], "tags": [ "ssl", "tls" ], - "description": "Extract the Subject Alternative Name (SAN) from the target's certificate. SAN facilitates the usage of additional hostnames with the same certificate.\n", + "description": "Extract the issuer's organization from the target's certificate. Issuers are entities which sign and distribute certificates.\n", "severity": "info", "metadata": { "max-request": 1 @@ -84640,46 +77426,45 @@ "host": "www.1jeune1solution.gouv.fr", "matched-at": "www.1jeune1solution.gouv.fr:443", "extracted-results": [ - "1jeune1solution.gouv.fr", - "edito.1jeune1solution.gouv.fr", - "www.1jeune1solution.gouv.fr", - "recette.1jeune1solution.gouv.fr", - "stage.1jeune1solution.gouv.fr", - "sms.1jeune1solution.gouv.fr" + "DHIMYOTIS" ], "ip": "104.22.66.98", - "timestamp": "2024-07-21T07:00:19.960369898Z", + "timestamp": "2024-07-28T07:15:15.570228546Z", "matcher-status": true }, { - "template": "ssl/tls-version.yaml", - "template-url": "https://templates.nuclei.sh/public/tls-version", - "template-id": "tls-version", - "template-path": "/home/runner/nuclei-templates/ssl/tls-version.yaml", + "template": "ssl/ssl-dns-names.yaml", + "template-url": "https://templates.nuclei.sh/public/ssl-dns-names", + "template-id": "ssl-dns-names", + "template-path": "/home/runner/nuclei-templates/ssl/ssl-dns-names.yaml", "info": { - "name": "TLS Version - Detect", + "name": "SSL DNS Names", "author": [ - "pdteam", - "pussycat0x" + "pdteam" ], "tags": [ "ssl", "tls" ], - "description": "TLS version detection is a security process used to determine the version of the Transport Layer Security (TLS) protocol used by a computer or server.\nIt is important to detect the TLS version in order to ensure secure communication between two computers or servers.\n", + "description": "Extract the Subject Alternative Name (SAN) from the target's certificate. SAN facilitates the usage of additional hostnames with the same certificate.\n", "severity": "info", "metadata": { - "max-request": 4 + "max-request": 1 } }, "type": "ssl", "host": "www.1jeune1solution.gouv.fr", "matched-at": "www.1jeune1solution.gouv.fr:443", "extracted-results": [ - "tls12" + "www.1jeune1solution.gouv.fr", + "recette.1jeune1solution.gouv.fr", + "stage.1jeune1solution.gouv.fr", + "sms.1jeune1solution.gouv.fr", + "1jeune1solution.gouv.fr", + "edito.1jeune1solution.gouv.fr" ], "ip": "104.22.66.98", - "timestamp": "2024-07-21T07:00:20.817562485Z", + "timestamp": "2024-07-28T07:15:15.570367495Z", "matcher-status": true }, { @@ -84710,7 +77495,7 @@ "tls13" ], "ip": "104.22.66.98", - "timestamp": "2024-07-21T07:00:21.561539161Z", + "timestamp": "2024-07-28T07:15:16.361793966Z", "matcher-status": true } ], @@ -84718,13 +77503,13 @@ { "requestedUrl": "https://www.1jeune1solution.gouv.fr/", "finalUrl": "https://www.1jeune1solution.gouv.fr/", - "fetchTime": "2024-07-21T06:48:35.631Z", + "fetchTime": "2024-07-28T07:03:01.495Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.84 + "score": 0.85 }, "accessibility": { "title": "Accessibility", @@ -84736,7 +77521,7 @@ "best-practices": { "title": "Best Practices", "id": "best-practices", - "score": 1 + "score": 0.93 }, "seo": { "title": "SEO", @@ -84760,49 +77545,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 3552, + "numericValue": 3026, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 1071, - "firstMeaningfulPaint": 1071, - "largestContentfulPaint": 4252, - "firstCPUIdle": 3477, - "interactive": 3552, - "speedIndex": 2699, + "firstContentfulPaint": 1215, + "firstMeaningfulPaint": 1365, + "largestContentfulPaint": 4246, + "firstCPUIdle": 2876, + "interactive": 3026, + "speedIndex": 2832, "estimatedInputLatency": 13, - "totalBlockingTime": 122, - "maxPotentialFID": 156, - "cumulativeLayoutShift": 0.06842481994628907, + "totalBlockingTime": 110, + "maxPotentialFID": 161, + "cumulativeLayoutShift": 0.047646899753146704, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 368156915, + "observedTimeOriginTs": 326853228, "observedNavigationStart": 0, - "observedNavigationStartTs": 368156915, - "observedFirstPaint": 418, - "observedFirstPaintTs": 368574758, - "observedFirstContentfulPaint": 418, - "observedFirstContentfulPaintTs": 368574758, - "observedFirstMeaningfulPaint": 418, - "observedFirstMeaningfulPaintTs": 368574758, - "observedLargestContentfulPaint": 573, - "observedLargestContentfulPaintTs": 368730104, - "observedTraceEnd": 1965, - "observedTraceEndTs": 370121416, - "observedLoad": 909, - "observedLoadTs": 369066096, - "observedDomContentLoaded": 420, - "observedDomContentLoadedTs": 368576556, - "observedCumulativeLayoutShift": 0.06842481994628907, + "observedNavigationStartTs": 326853228, + "observedFirstPaint": 559, + "observedFirstPaintTs": 327412252, + "observedFirstContentfulPaint": 588, + "observedFirstContentfulPaintTs": 327441063, + "observedFirstMeaningfulPaint": 676, + "observedFirstMeaningfulPaintTs": 327529198, + "observedLargestContentfulPaint": 868, + "observedLargestContentfulPaintTs": 327721075, + "observedTraceEnd": 11170, + "observedTraceEndTs": 338022836, + "observedLoad": 10114, + "observedLoadTs": 336967021, + "observedDomContentLoaded": 715, + "observedDomContentLoadedTs": 327568313, + "observedCumulativeLayoutShift": 0.047646899753146704, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 395, - "observedFirstVisualChangeTs": 368551915, - "observedLastVisualChange": 994, - "observedLastVisualChangeTs": 369150915, - "observedSpeedIndex": 563, - "observedSpeedIndexTs": 368719917 + "observedFirstVisualChange": 600, + "observedFirstVisualChangeTs": 327453228, + "observedLastVisualChange": 866, + "observedLastVisualChangeTs": 327719228, + "observedSpeedIndex": 849, + "observedSpeedIndexTs": 327702058 }, { "lcpInvalidated": false @@ -84824,19 +77609,19 @@ "numScripts": 13, "numStylesheets": 3, "numFonts": 2, - "numTasks": 451, - "numTasksOver10ms": 6, - "numTasksOver25ms": 3, + "numTasks": 518, + "numTasksOver10ms": 5, + "numTasksOver25ms": 2, "numTasksOver50ms": 0, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 5.35, - "throughput": 28245793.18414515, - "maxRtt": 87.757, - "maxServerLatency": 20.929000000000002, - "totalByteWeight": 748224, - "totalTaskTime": 228.7339999999986, - "mainDocumentTransferSize": 9024 + "rtt": 2.0380000000000003, + "throughput": 19252787.410495218, + "maxRtt": 144.874, + "maxServerLatency": 15.428999999999998, + "totalByteWeight": 748120, + "totalTaskTime": 218.51299999999887, + "mainDocumentTransferSize": 9057 } ] } @@ -84858,7 +77643,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B+", "testsslExpireSoon": false, "testsslExpireDate": "2025-07-27T21:59:00.000Z", "testsslGrade": "A", @@ -84866,11 +77650,11 @@ "cookiesCount": 1, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.84, + "lighthouse_performance": 0.85, "lighthouse_performanceGrade": "A", "lighthouse_accessibility": 0.98, "lighthouse_accessibilityGrade": "A", - "lighthouse_best-practices": 1, + "lighthouse_best-practices": 0.93, "lighthouse_best-practicesGrade": "A", "lighthouse_seo": 1, "lighthouse_seoGrade": "A", @@ -84886,246 +77670,7 @@ "tags": [ "sports" ], - "http": { - "url": "https://www.agencedusport.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 06:52:16 GMT", - "grade": "B", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Cache-Control": "must-revalidate, no-cache, private", - "Connection": "Keep-Alive", - "Content-Security-Policy": "frame-ancestors 'self';", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sun, 21 Jul 2024 06:52:11 GMT", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Keep-Alive": "timeout=5, max=100", - "Set-Cookie": "BIGipServerpool-ansr-prod.cegedim.cloud-HTTP=!cBQF5LIn0zhaD2JWDPlD0yXzT0UGhtnD1IGj4hDeiUdxAhIZOfKs2wRCkGxw3hoJ7aE0lyWUDfos/2Eb3vpwIszM7+U=; path=/; Httponly; Secure, TS432cd817029=087dc22938ab2800e08669219fd723b447b7dbb393bf872a804ca6d15ead63c6acdba87181affc909a14c9d79992d4fa; Max-Age=30; Path=/, TSd75b6639027=087dc22938ab200061a955035b65cce33d20b046f29d099eb0ee16dd41129965bc4f146275c02965086ec38132113000c2dd2c120f5dd5c508a3317c3ae236f45f130e1027866b449ef7f2b6d69cb906c70ce95e9f1eee32f408f17546bbc4d4; Path=/", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Transfer-Encoding": "chunked", - "Vary": "Accept-Encoding", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "sameorigin" - }, - "scan_id": 53624721, - "score": 70, - "start_time": "Sun, 21 Jul 2024 06:52:08 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 3, - "tests_passed": 8, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": { - "frame-ancestors": [ - "'self'" - ] - }, - "http": true, - "meta": false, - "numPolicies": 1, - "policy": { - "antiClickjacking": true, - "defaultNone": false, - "insecureBaseUri": true, - "insecureFormAction": true, - "insecureSchemeActive": false, - "insecureSchemePassive": false, - "strictDynamic": false, - "unsafeEval": false, - "unsafeInline": true, - "unsafeInlineStyle": true, - "unsafeObjects": true - } - }, - "pass": false, - "result": "csp-implemented-with-unsafe-inline", - "score_description": "Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.", - "score_modifier": -20 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-ansr-prod.cegedim.cloud-HTTP": { - "domain": "www.agencedusport.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS432cd817029": { - "domain": "www.agencedusport.fr", - "expires": 1721544765, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TSd75b6639027": { - "domain": "www.agencedusport.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag-but-protected-by-hsts", - "score_description": "Cookies set without using the Secure flag, but transmission over HTTP prevented by HSTS", - "score_modifier": -5 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://www.agencedusport.fr/", - "redirects": true, - "route": [ - "http://www.agencedusport.fr/", - "https://www.agencedusport.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": { - "https://ajax.googleapis.com/ajax/libs/jquery/2.1.0/jquery.min.js": { - "crossorigin": null, - "integrity": null - }, - "https://static.addtoany.com/menu/page.js": { - "crossorigin": null, - "integrity": null - }, - "https://use.fontawesome.com/releases/v5.13.1/js/all.js": { - "crossorigin": "anonymous", - "integrity": null - }, - "https://use.fontawesome.com/releases/v5.13.1/js/v4-shims.js": { - "crossorigin": "anonymous", - "integrity": null - } - } - }, - "pass": false, - "result": "sri-not-implemented-but-external-scripts-loaded-securely", - "score_description": "Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS", - "score_modifier": -5 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "sameorigin" - }, - "pass": true, - "result": "x-frame-options-implemented-via-csp", - "score_description": "X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive", - "score_modifier": 5 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -85471,7 +78016,7 @@ "ip": "www.agencedusport.fr/185.194.82.230", "port": "443", "severity": "OK", - "finding": "246 >= 60 days" + "finding": "239 >= 60 days" }, { "id": "cert_notBefore", @@ -86188,7 +78733,7 @@ "ip": "www.agencedusport.fr/185.194.82.230", "port": "443", "severity": "INFO", - "finding": "88" + "finding": "48" } ], "thirdparties": { @@ -86570,20 +79115,20 @@ { "requestedUrl": "https://www.agencedusport.fr/", "finalUrl": "https://www.agencedusport.fr/", - "fetchTime": "2024-07-21T06:51:33.156Z", + "fetchTime": "2024-07-28T07:03:51.036Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.12 + "score": 0.14 }, "accessibility": { "title": "Accessibility", "description": "These checks highlight opportunities to [improve the accessibility of your web app](https://developers.google.com/web/fundamentals/accessibility). Only a subset of accessibility issues can be automatically detected so manual testing is also encouraged.", "manualDescription": "These items address areas which an automated testing tool cannot cover. Learn more in our guide on [conducting an accessibility review](https://developers.google.com/web/fundamentals/accessibility/how-to-review).", "id": "accessibility", - "score": 0.72 + "score": 0.7 }, "best-practices": { "title": "Best Practices", @@ -86612,49 +79157,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 35282, + "numericValue": 61918, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 4197, - "firstMeaningfulPaint": 4197, - "largestContentfulPaint": 28846, - "firstCPUIdle": 15085, - "interactive": 35282, - "speedIndex": 22682, - "estimatedInputLatency": 2044, - "totalBlockingTime": 3205, - "maxPotentialFID": 3039, - "cumulativeLayoutShift": 0.00041744613647460937, - "cumulativeLayoutShiftAllFrames": 0.00041744613647460937, + "firstContentfulPaint": 3675, + "firstMeaningfulPaint": 3760, + "largestContentfulPaint": 16304, + "firstCPUIdle": 17637, + "interactive": 61918, + "speedIndex": 44499, + "estimatedInputLatency": 2992, + "totalBlockingTime": 7639, + "maxPotentialFID": 4222, + "cumulativeLayoutShift": 0, + "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 416213824, + "observedTimeOriginTs": 401666630, "observedNavigationStart": 0, - "observedNavigationStartTs": 416213824, - "observedFirstPaint": 2051, - "observedFirstPaintTs": 418264905, - "observedFirstContentfulPaint": 2051, - "observedFirstContentfulPaintTs": 418264905, - "observedFirstMeaningfulPaint": 2073, - "observedFirstMeaningfulPaintTs": 418286899, - "observedLargestContentfulPaint": 6861, - "observedLargestContentfulPaintTs": 423075037, - "observedTraceEnd": 19531, - "observedTraceEndTs": 435744860, - "observedLoad": 17931, - "observedLoadTs": 434144979, - "observedDomContentLoaded": 2677, - "observedDomContentLoadedTs": 418891029, - "observedCumulativeLayoutShift": 0.00041744613647460937, - "observedCumulativeLayoutShiftAllFrames": 0.00041744613647460937, - "observedFirstVisualChange": 2052, - "observedFirstVisualChangeTs": 418265824, - "observedLastVisualChange": 8119, - "observedLastVisualChangeTs": 424332824, - "observedSpeedIndex": 5337, - "observedSpeedIndexTs": 421550804 + "observedNavigationStartTs": 401666630, + "observedFirstPaint": 1393, + "observedFirstPaintTs": 403059687, + "observedFirstContentfulPaint": 1632, + "observedFirstContentfulPaintTs": 403298275, + "observedFirstMeaningfulPaint": 1710, + "observedFirstMeaningfulPaintTs": 403376457, + "observedLargestContentfulPaint": 2836, + "observedLargestContentfulPaintTs": 404502514, + "observedTraceEnd": 22106, + "observedTraceEndTs": 423772682, + "observedLoad": 21044, + "observedLoadTs": 422710927, + "observedDomContentLoaded": 2007, + "observedDomContentLoadedTs": 403674080, + "observedCumulativeLayoutShift": 0, + "observedCumulativeLayoutShiftAllFrames": 0, + "observedFirstVisualChange": 1633, + "observedFirstVisualChangeTs": 403299630, + "observedLastVisualChange": 21516, + "observedLastVisualChangeTs": 423182630, + "observedSpeedIndex": 14902, + "observedSpeedIndexTs": 416568670 }, { "lcpInvalidated": false @@ -86672,23 +79217,23 @@ "type": "debugdata", "items": [ { - "numRequests": 135, - "numScripts": 26, + "numRequests": 107, + "numScripts": 19, "numStylesheets": 5, "numFonts": 8, - "numTasks": 15138, - "numTasksOver10ms": 25, - "numTasksOver25ms": 10, - "numTasksOver50ms": 8, - "numTasksOver100ms": 4, - "numTasksOver500ms": 2, - "rtt": 1.532, - "throughput": 10116657.012236051, - "maxRtt": 151.016, - "maxServerLatency": 61.475, - "totalByteWeight": 21393741, - "totalTaskTime": 4655.045999999979, - "mainDocumentTransferSize": 134740 + "numTasks": 12576, + "numTasksOver10ms": 35, + "numTasksOver25ms": 18, + "numTasksOver50ms": 10, + "numTasksOver100ms": 7, + "numTasksOver500ms": 5, + "rtt": 1.5399999999999991, + "throughput": 12697635.644463576, + "maxRtt": 72.042, + "maxServerLatency": 27.241, + "totalByteWeight": 32245640, + "totalTaskTime": 6920.221000000158, + "mainDocumentTransferSize": 134543 } ] } @@ -86709,7 +79254,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B", "testsslExpireSoon": false, "testsslExpireDate": "2025-03-24T22:59:00.000Z", "testsslGrade": "A", @@ -86717,9 +79261,9 @@ "cookiesCount": 0, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.12, + "lighthouse_performance": 0.14, "lighthouse_performanceGrade": "F", - "lighthouse_accessibility": 0.72, + "lighthouse_accessibility": 0.7, "lighthouse_accessibilityGrade": "B", "lighthouse_best-practices": 0.67, "lighthouse_best-practicesGrade": "B", @@ -86737,231 +79281,7 @@ "tags": [ "sante" ], - "http": { - "url": "https://www.ars.sante.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 07:01:47 GMT", - "grade": "D", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Age": "12", - "Cache-Control": "max-age=86400, public", - "Connection": "keep-alive", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sun, 21 Jul 2024 07:01:22 GMT", - "ETag": "W/\"1721545281-gzip\"", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Last-Modified": "Sun, 21 Jul 2024 07:01:21 GMT", - "Transfer-Encoding": "chunked", - "Vary": "Cookie,Accept-Encoding", - "X-Cache": "HIT", - "X-Cache-Hits": "2", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "SAMEORIGIN", - "set-cookie": "fid=sante_ars_front2; path=/; HttpOnly; secure; SameSite=Strict, BIGipServerpool-ars.cegedim.cloud-HTTP=834951434.49431.0000; path=/; Httponly; Secure, TS510afef7029=087dc22938ab2800e0f7914f6b3455b6f437749828767f72060426fbf6471d31198481f00cab8d7fdd1f6e97b6a55af5; Max-Age=30; Path=/, TSdfa203d6027=087dc22938ab200021e761ebe384d8c24d70002e35b2622dd954fd235f0344e978d265ee34847c9b08a52b59081130001e9a777f438cf616632ac92c20ecad1d6f3375d087431b8ab22a83b0e6b69e79d0a18930e9907a8d73eb3f7b0794a502; Path=/" - }, - "scan_id": 53624865, - "score": 30, - "start_time": "Sun, 21 Jul 2024 07:01:42 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 4, - "tests_passed": 7, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-ars.cegedim.cloud-HTTP": { - "domain": "www.ars.sante.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS510afef7029": { - "domain": "www.ars.sante.fr", - "expires": 1721545337, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TSdfa203d6027": { - "domain": "www.ars.sante.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "fid": { - "domain": "www.ars.sante.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": "Strict", - "secure": true - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag", - "score_description": "Cookies set without using the Secure flag or set over HTTP", - "score_modifier": -20 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://www.ars.sante.fr/", - "redirects": true, - "route": [ - "http://www.ars.sante.fr/", - "https://www.ars.sante.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": null, - "includeSubDomains": false, - "max-age": null, - "preload": false, - "preloaded": false - }, - "pass": false, - "result": "hsts-not-implemented", - "score_description": "HTTP Strict Transport Security (HSTS) header not implemented", - "score_modifier": -20 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": { - "https://tag.aticdn.net/piano-analytics.js": { - "crossorigin": null, - "integrity": null - } - } - }, - "pass": false, - "result": "sri-not-implemented-but-external-scripts-loaded-securely", - "score_description": "Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS", - "score_modifier": -5 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -87307,7 +79627,7 @@ "ip": "www.ars.sante.fr/185.194.82.45", "port": "443", "severity": "OK", - "finding": "257 >= 60 days" + "finding": "250 >= 60 days" }, { "id": "cert_notBefore", @@ -88024,7 +80344,7 @@ "ip": "www.ars.sante.fr/185.194.82.45", "port": "443", "severity": "INFO", - "finding": "89" + "finding": "92" } ], "thirdparties": { @@ -88289,7 +80609,7 @@ { "requestedUrl": "https://www.ars.sante.fr/", "finalUrl": "https://www.ars.sante.fr/", - "fetchTime": "2024-07-21T07:01:30.692Z", + "fetchTime": "2024-07-28T07:06:21.968Z", "runWarnings": [], "categories": { "performance": { @@ -88331,49 +80651,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 12162, + "numericValue": 14678, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 4189, - "firstMeaningfulPaint": 6136, - "largestContentfulPaint": 8176, - "firstCPUIdle": 10973, - "interactive": 12162, - "speedIndex": 9658, - "estimatedInputLatency": 1930, - "totalBlockingTime": 3560, - "maxPotentialFID": 2896, - "cumulativeLayoutShift": 0.000025554656982421874, + "firstContentfulPaint": 4171, + "firstMeaningfulPaint": 4767, + "largestContentfulPaint": 6703, + "firstCPUIdle": 13934, + "interactive": 14678, + "speedIndex": 9477, + "estimatedInputLatency": 2822, + "totalBlockingTime": 6672, + "maxPotentialFID": 4012, + "cumulativeLayoutShift": 0.00173737907409668, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 370562525, + "observedTimeOriginTs": 359456276, "observedNavigationStart": 0, - "observedNavigationStartTs": 370562525, - "observedFirstPaint": 1529, - "observedFirstPaintTs": 372091394, - "observedFirstContentfulPaint": 1529, - "observedFirstContentfulPaintTs": 372091394, - "observedFirstMeaningfulPaint": 2094, - "observedFirstMeaningfulPaintTs": 372656277, - "observedLargestContentfulPaint": 2094, - "observedLargestContentfulPaintTs": 372656277, - "observedTraceEnd": 5080, - "observedTraceEndTs": 375642507, - "observedLoad": 3779, - "observedLoadTs": 374341408, - "observedDomContentLoaded": 2079, - "observedDomContentLoadedTs": 372641712, - "observedCumulativeLayoutShift": 0.000025554656982421874, + "observedNavigationStartTs": 359456276, + "observedFirstPaint": 1665, + "observedFirstPaintTs": 361121560, + "observedFirstContentfulPaint": 1665, + "observedFirstContentfulPaintTs": 361121560, + "observedFirstMeaningfulPaint": 2021, + "observedFirstMeaningfulPaintTs": 361477172, + "observedLargestContentfulPaint": 2241, + "observedLargestContentfulPaintTs": 361697736, + "observedTraceEnd": 5940, + "observedTraceEndTs": 365396744, + "observedLoad": 3106, + "observedLoadTs": 362562330, + "observedDomContentLoaded": 2338, + "observedDomContentLoadedTs": 361793937, + "observedCumulativeLayoutShift": 0.00173737907409668, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 1539, - "observedFirstVisualChangeTs": 372101525, - "observedLastVisualChange": 3905, - "observedLastVisualChangeTs": 374467525, - "observedSpeedIndex": 3131, - "observedSpeedIndexTs": 373693385 + "observedFirstVisualChange": 1645, + "observedFirstVisualChangeTs": 361101276, + "observedLastVisualChange": 4129, + "observedLastVisualChangeTs": 363585276, + "observedSpeedIndex": 2740, + "observedSpeedIndexTs": 362196512 }, { "lcpInvalidated": false @@ -88395,19 +80715,19 @@ "numScripts": 7, "numStylesheets": 4, "numFonts": 10, - "numTasks": 1361, - "numTasksOver10ms": 11, - "numTasksOver25ms": 5, + "numTasks": 1531, + "numTasksOver10ms": 15, + "numTasksOver25ms": 9, "numTasksOver50ms": 4, "numTasksOver100ms": 2, - "numTasksOver500ms": 1, - "rtt": 8.483000000000004, - "throughput": 6116728.632349649, - "maxRtt": 135.888, - "maxServerLatency": 68.863, - "totalByteWeight": 1600361, - "totalTaskTime": 1548.132999999996, - "mainDocumentTransferSize": 105173 + "numTasksOver500ms": 2, + "rtt": 1.343, + "throughput": 5516890.468134651, + "maxRtt": 148.914, + "maxServerLatency": 63.92399999999999, + "totalByteWeight": 1600352, + "totalTaskTime": 2360.2469999999917, + "mainDocumentTransferSize": 105180 } ] } @@ -88428,7 +80748,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "D", "testsslExpireSoon": false, "testsslExpireDate": "2025-04-04T21:59:00.000Z", "testsslGrade": "A", @@ -88456,209 +80775,7 @@ "tags": [ "social" ], - "http": { - "url": "https://www.associations.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 07:07:34 GMT", - "grade": "C-", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Connection": "Keep-Alive", - "Content-Type": "text/html; charset=utf-8", - "Date": "Sun, 21 Jul 2024 07:07:33 GMT", - "Keep-Alive": "timeout=5, max=100", - "Last-Modified": "Sun, 21 Jul 2024 07:07:33 GMT", - "Set-Cookie": "BIGipServerpool-djepva-association2.cegedim.cloud-HTTP=!TGRkCtuT171b8ApWDPlD0yXzT0UGhqH6Y6V/HlmDmHkg4PTbyOpEEneFDFVRXpfEGil2/R44VFfrJYA4KFW/B9nIVPA=; path=/; Httponly; Secure, TS001e3eee029=087dc22938ab280064f0a5aaba13dc065f22a787072dc8610aca4fa0a5367c1fa045014adb4bf5067e42188dfa87e871; Max-Age=30; Path=/, TS30a1dafb027=087dc22938ab2000e4cc46d416e986cdc24fffb59315462ff45ad24190e7b1409791c500577fa0430822cf329e1130004947aa69d59e20b5943b15d36f5ff33f3a38ed6f730d681882dffd98b9d745189f7fca92116675c030eed603dde429e3; Path=/", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Transfer-Encoding": "chunked", - "Vary": "Accept-Encoding", - "X-Spip-Cache": "86400" - }, - "scan_id": 53624943, - "score": 45, - "start_time": "Sun, 21 Jul 2024 07:07:31 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 4, - "tests_passed": 7, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-djepva-association2.cegedim.cloud-HTTP": { - "domain": "www.associations.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS001e3eee029": { - "domain": "www.associations.gouv.fr", - "expires": 1721545684, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TS30a1dafb027": { - "domain": "www.associations.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag-but-protected-by-hsts", - "score_description": "Cookies set without using the Secure flag, but transmission over HTTP prevented by HSTS", - "score_modifier": -5 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://www.associations.gouv.fr/", - "redirects": true, - "route": [ - "http://www.associations.gouv.fr/", - "https://www.associations.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-content-type-options-not-implemented", - "score_description": "X-Content-Type-Options header not implemented", - "score_modifier": -5 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-frame-options-not-implemented", - "score_description": "X-Frame-Options (XFO) header not implemented", - "score_modifier": -20 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -89004,7 +81121,7 @@ "ip": "www.associations.gouv.fr/185.194.83.17", "port": "443", "severity": "OK", - "finding": "330 >= 60 days" + "finding": "323 >= 60 days" }, { "id": "cert_notBefore", @@ -89990,13 +82107,13 @@ { "requestedUrl": "https://www.associations.gouv.fr/", "finalUrl": "https://www.associations.gouv.fr/", - "fetchTime": "2024-07-21T07:07:17.948Z", + "fetchTime": "2024-07-28T07:22:40.318Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.1 + "score": 0.11 }, "accessibility": { "title": "Accessibility", @@ -90032,49 +82149,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 18222, + "numericValue": 19337, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 5438, - "firstMeaningfulPaint": 5779, - "largestContentfulPaint": 7696, - "firstCPUIdle": 16865, - "interactive": 18222, - "speedIndex": 15826, - "estimatedInputLatency": 4697, - "totalBlockingTime": 8994, - "maxPotentialFID": 6355, + "firstContentfulPaint": 5257, + "firstMeaningfulPaint": 5281, + "largestContentfulPaint": 7391, + "firstCPUIdle": 18044, + "interactive": 19337, + "speedIndex": 13452, + "estimatedInputLatency": 5883, + "totalBlockingTime": 10688, + "maxPotentialFID": 7838, "cumulativeLayoutShift": 0.014529278013441298, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 313254062, + "observedTimeOriginTs": 307998715, "observedNavigationStart": 0, - "observedNavigationStartTs": 313254062, - "observedFirstPaint": 1362, - "observedFirstPaintTs": 314616548, - "observedFirstContentfulPaint": 1362, - "observedFirstContentfulPaintTs": 314616548, - "observedFirstMeaningfulPaint": 1420, - "observedFirstMeaningfulPaintTs": 314674420, - "observedLargestContentfulPaint": 1510, - "observedLargestContentfulPaintTs": 314764427, - "observedTraceEnd": 7250, - "observedTraceEndTs": 320504479, - "observedLoad": 6193, - "observedLoadTs": 319446694, - "observedDomContentLoaded": 1362, - "observedDomContentLoadedTs": 314615893, + "observedNavigationStartTs": 307998715, + "observedFirstPaint": 1920, + "observedFirstPaintTs": 309919020, + "observedFirstContentfulPaint": 1920, + "observedFirstContentfulPaintTs": 309919020, + "observedFirstMeaningfulPaint": 2009, + "observedFirstMeaningfulPaintTs": 310008162, + "observedLargestContentfulPaint": 1950, + "observedLargestContentfulPaintTs": 309949044, + "observedTraceEnd": 6403, + "observedTraceEndTs": 314402026, + "observedLoad": 2470, + "observedLoadTs": 310468726, + "observedDomContentLoaded": 1924, + "observedDomContentLoadedTs": 309923028, "observedCumulativeLayoutShift": 0.014529278013441298, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 1366, - "observedFirstVisualChangeTs": 314620062, - "observedLastVisualChange": 6416, - "observedLastVisualChangeTs": 319670062, - "observedSpeedIndex": 5123, - "observedSpeedIndexTs": 318377431 + "observedFirstVisualChange": 1905, + "observedFirstVisualChangeTs": 309903715, + "observedLastVisualChange": 5505, + "observedLastVisualChangeTs": 313503715, + "observedSpeedIndex": 4577, + "observedSpeedIndexTs": 312575996 }, { "lcpInvalidated": false @@ -90096,19 +82213,19 @@ "numScripts": 9, "numStylesheets": 23, "numFonts": 6, - "numTasks": 1818, - "numTasksOver10ms": 14, - "numTasksOver25ms": 10, - "numTasksOver50ms": 6, - "numTasksOver100ms": 3, + "numTasks": 924, + "numTasksOver10ms": 25, + "numTasksOver25ms": 15, + "numTasksOver50ms": 9, + "numTasksOver100ms": 4, "numTasksOver500ms": 2, - "rtt": 6.0169999999999995, - "throughput": 9345988.530690683, - "maxRtt": 91.80400000000009, - "maxServerLatency": 17.192, - "totalByteWeight": 1361443, - "totalTaskTime": 3214.592000000001, - "mainDocumentTransferSize": 66289 + "rtt": 5.742000000000001, + "throughput": 9060395.668330412, + "maxRtt": 87.806, + "maxServerLatency": 17.90100000000004, + "totalByteWeight": 1196013, + "totalTaskTime": 4103.799000000004, + "mainDocumentTransferSize": 66281 } ] } @@ -90129,7 +82246,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "C-", "testsslExpireSoon": false, "testsslExpireDate": "2025-06-16T21:59:00.000Z", "testsslGrade": "A", @@ -90137,7 +82253,7 @@ "cookiesCount": 0, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.1, + "lighthouse_performance": 0.11, "lighthouse_performanceGrade": "F", "lighthouse_accessibility": 0.84, "lighthouse_accessibilityGrade": "A", @@ -90157,193 +82273,7 @@ "tags": [ "sante" ], - "http": { - "url": "https://www.cng.sante.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 07:11:05 GMT", - "grade": "F", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Age": "269", - "Cache-Control": "max-age=31536000, public", - "Connection": "keep-alive", - "Content-Encoding": "gzip", - "Content-Length": "17855", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Sun, 21 Jul 2024 07:06:31 GMT", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Last-Modified": "Sun, 21 Jul 2024 07:06:31 GMT", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Vary": "Cookie,Accept-Encoding", - "X-Cache-Hits": "14", - "X-Cache-Status": "HIT", - "X-Content-Type-Options": "nosniff, nosniff", - "X-Drupal-Cache": "MISS", - "X-Drupal-Dynamic-Cache": "MISS", - "X-Frame-Options": "SAMEORIGIN", - "X-Varnish": "23493029 23492967" - }, - "scan_id": 53624976, - "score": 20, - "start_time": "Sun, 21 Jul 2024 07:10:59 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 3, - "tests_passed": 8, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": null, - "sameSite": null - }, - "pass": true, - "result": "cookies-not-found", - "score_description": "No cookies detected", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://www.cng.sante.fr/", - "redirects": true, - "route": [ - "http://www.cng.sante.fr/", - "https://www.cng.sante.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": { - "//app.robofabrica.tech/widget/script": { - "crossorigin": null, - "integrity": null - } - } - }, - "pass": false, - "result": "sri-not-implemented-and-external-scripts-not-loaded-securely", - "score_description": "Subresource Integrity (SRI) not implemented, and external scripts are loaded over HTTP or use protocol-relative URLs via src=\"//...\"", - "score_modifier": -50 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff, nosniff" - }, - "pass": false, - "result": "x-content-type-options-header-invalid", - "score_description": "X-Content-Type-Options header cannot be recognized", - "score_modifier": -5 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -90689,7 +82619,7 @@ "ip": "www.cng.sante.fr/185.194.83.19", "port": "443", "severity": "OK", - "finding": "117 >= 60 days" + "finding": "110 >= 60 days" }, { "id": "cert_notBefore", @@ -90843,21 +82773,21 @@ "ip": "www.cng.sante.fr/185.194.83.19", "port": "443", "severity": "INFO", - "finding": "-2 seconds from localtime" + "finding": "-126 seconds from localtime" }, { "id": "HTTP_headerTime", "ip": "www.cng.sante.fr/185.194.83.19", "port": "443", "severity": "INFO", - "finding": "1721545591" + "finding": "1722151253" }, { "id": "HTTP_headerAge", "ip": "www.cng.sante.fr/185.194.83.19", "port": "443", "severity": "INFO", - "finding": "349 seconds" + "finding": "104 seconds" }, { "id": "HSTS_time", @@ -90942,7 +82872,7 @@ "port": "443", "severity": "INFO", "cwe": "CWE-200", - "finding": "X-Varnish: 24502431 23492967X-Cache-Status: HITX-Cache-Hits: 20" + "finding": "X-Varnish: 26578581 26663744X-Cache-Status: HITX-Cache-Hits: 8" }, { "id": "heartbleed", @@ -91441,7 +83371,7 @@ "ip": "www.cng.sante.fr/185.194.83.19", "port": "443", "severity": "INFO", - "finding": "95" + "finding": "98" } ], "thirdparties": { @@ -91456,7 +83386,7 @@ }, { "type": "unknown", - "url": "https://stats-analytics.cegedim.cloud/matomo.php?action_name=Le%20CNG&idsite=12&rec=1&r=563194&h=7&m=11&s=21&url=https%3A%2F%2Fwww.cng.sante.fr%2F&_id=5194ce64db8d57ec&_idn=1&send_image=0&_refts=0&cookie=1&res=800x600&pv_id=qPLy8s&pf_net=440&pf_srv=142&pf_tfr=1&uadata=%7B%22fullVersionList%22%3A%5B%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22%22%2C%22platformVersion%22%3A%22%22%7D" + "url": "https://stats-analytics.cegedim.cloud/matomo.php?action_name=Le%20CNG&idsite=12&rec=1&r=942777&h=7&m=23&s=40&url=https%3A%2F%2Fwww.cng.sante.fr%2F&_id=2cca389d0257e5ad&_idn=1&send_image=0&_refts=0&cookie=1&res=800x600&pv_id=qO0iiQ&pf_net=465&pf_srv=151&pf_tfr=1&uadata=%7B%22fullVersionList%22%3A%5B%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22%22%2C%22platformVersion%22%3A%22%22%7D" }, { "type": "google fonts", @@ -91569,7 +83499,7 @@ "value": "1", "domain": "www.cng.sante.fr", "path": "/", - "expires": 1721547681, + "expires": 1722153220, "size": 16, "httpOnly": false, "secure": false, @@ -91581,10 +83511,10 @@ }, { "name": "_pk_id.12.d79b", - "value": "5194ce64db8d57ec.1721545881.", + "value": "2cca389d0257e5ad.1722151421.", "domain": "www.cng.sante.fr", "path": "/", - "expires": 1755501081, + "expires": 1756106621, "size": 42, "httpOnly": false, "secure": false, @@ -91597,25 +83527,25 @@ ], "headers": { "accept-ranges": "bytes", - "age": "288", + "age": "42", "cache-control": "max-age=31536000, public", "connection": "keep-alive", "content-encoding": "gzip", - "content-length": "17855", + "content-length": "18099", "content-type": "text/html; charset=UTF-8", "content-language": "fr", - "date": "Sun, 21 Jul 2024 07:06:31 GMT", + "date": "Sun, 28 Jul 2024 07:20:53 GMT", "expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "last-modified": "Sun, 21 Jul 2024 07:06:31 GMT", + "last-modified": "Sun, 28 Jul 2024 07:20:52 GMT", "strict-transport-security": "max-age=31536000; includeSubDomains", "vary": "Cookie,Accept-Encoding", - "x-cache-hits": "16", + "x-cache-hits": "3", "x-cache-status": "HIT", "x-content-type-options": "nosniff\nnosniff", - "x-drupal-cache": "MISS", + "x-drupal-cache": "HIT", "x-drupal-dynamic-cache": "MISS", "x-frame-options": "SAMEORIGIN", - "x-varnish": "23493048 23492967" + "x-varnish": "26884561 26663744" }, "endpoints": [ { @@ -91830,8 +83760,68 @@ }, { "hostname": "fonts.googleapis.com", - "ip": "172.217.14.74", + "ip": "142.250.189.202", + "geoip": { + "continent": { + "code": "NA", + "geoname_id": 6255149, + "names": { + "de": "Nordamerika", + "en": "North America", + "es": "Norteamérica", + "fr": "Amérique du Nord", + "ja": "北アメリカ", + "pt-BR": "América do Norte", + "ru": "Северная Америка", + "zh-CN": "北美洲" + } + }, + "country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + }, + "location": { + "accuracy_radius": 1000, + "latitude": 37.751, + "longitude": -97.822, + "time_zone": "America/Chicago" + }, + "registered_country": { + "geoname_id": 6252001, + "iso_code": "US", + "names": { + "de": "USA", + "en": "United States", + "es": "Estados Unidos", + "fr": "États Unis", + "ja": "アメリカ", + "pt-BR": "EUA", + "ru": "США", + "zh-CN": "美国" + } + } + } + }, + { + "hostname": "fonts.gstatic.com", + "ip": "142.251.214.131", "geoip": { + "city": { + "geoname_id": 5116931, + "names": { + "en": "Farmingdale" + } + }, "continent": { "code": "NA", "geoname_id": 6255149, @@ -91862,45 +83852,15 @@ }, "location": { "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" + "latitude": 40.7306, + "longitude": -73.4313, + "metro_code": 501, + "time_zone": "America/New_York" }, - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" - } - } - } - }, - { - "hostname": "fonts.gstatic.com", - "ip": "142.250.188.227", - "geoip": { - "continent": { - "code": "NA", - "geoname_id": 6255149, - "names": { - "de": "Nordamerika", - "en": "North America", - "es": "Norteamérica", - "fr": "Amérique du Nord", - "ja": "北アメリカ", - "pt-BR": "América do Norte", - "ru": "Северная Америка", - "zh-CN": "北美洲" - } + "postal": { + "code": "11735" }, - "country": { + "registered_country": { "geoname_id": 6252001, "iso_code": "US", "names": { @@ -91914,26 +83874,22 @@ "zh-CN": "美国" } }, - "location": { - "accuracy_radius": 1000, - "latitude": 37.751, - "longitude": -97.822, - "time_zone": "America/Chicago" - }, - "registered_country": { - "geoname_id": 6252001, - "iso_code": "US", - "names": { - "de": "USA", - "en": "United States", - "es": "Estados Unidos", - "fr": "États Unis", - "ja": "アメリカ", - "pt-BR": "EUA", - "ru": "США", - "zh-CN": "美国" + "subdivisions": [ + { + "geoname_id": 5128638, + "iso_code": "NY", + "names": { + "de": "New York", + "en": "New York", + "es": "Nueva York", + "fr": "New York", + "ja": "ニューヨーク州", + "pt-BR": "Nova Iorque", + "ru": "Нью-Йорк", + "zh-CN": "纽约州" + } } - } + ] } } ] @@ -92225,7 +84181,7 @@ { "requestedUrl": "https://www.cng.sante.fr/", "finalUrl": "https://www.cng.sante.fr/", - "fetchTime": "2024-07-21T07:10:45.038Z", + "fetchTime": "2024-07-28T07:23:06.646Z", "runWarnings": [], "categories": { "performance": { @@ -92267,49 +84223,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 22973, + "numericValue": 23332, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 8557, - "firstMeaningfulPaint": 8557, - "largestContentfulPaint": 19885, - "firstCPUIdle": 8557, - "interactive": 22973, - "speedIndex": 17829, + "firstContentfulPaint": 8898, + "firstMeaningfulPaint": 8898, + "largestContentfulPaint": 20762, + "firstCPUIdle": 8898, + "interactive": 23332, + "speedIndex": 18861, "estimatedInputLatency": 13, - "totalBlockingTime": 87, - "maxPotentialFID": 134, - "cumulativeLayoutShift": 0.40089435662163625, - "cumulativeLayoutShiftAllFrames": 0.39925495571560327, + "totalBlockingTime": 37, + "maxPotentialFID": 118, + "cumulativeLayoutShift": 0.4057553270128038, + "cumulativeLayoutShiftAllFrames": 0.39375, "observedTimeOrigin": 0, - "observedTimeOriginTs": 300917719, + "observedTimeOriginTs": 383767011, "observedNavigationStart": 0, - "observedNavigationStartTs": 300917719, - "observedFirstPaint": 2290, - "observedFirstPaintTs": 303207918, - "observedFirstContentfulPaint": 2290, - "observedFirstContentfulPaintTs": 303207918, - "observedFirstMeaningfulPaint": 2290, - "observedFirstMeaningfulPaintTs": 303207918, - "observedLargestContentfulPaint": 3306, - "observedLargestContentfulPaintTs": 304224181, - "observedTraceEnd": 4683, - "observedTraceEndTs": 305600547, - "observedLoad": 3622, - "observedLoadTs": 304539549, - "observedDomContentLoaded": 3173, - "observedDomContentLoadedTs": 304090772, - "observedCumulativeLayoutShift": 0.40089435662163625, - "observedCumulativeLayoutShiftAllFrames": 0.39925495571560327, - "observedFirstVisualChange": 2286, - "observedFirstVisualChangeTs": 303203719, - "observedLastVisualChange": 3570, - "observedLastVisualChangeTs": 304487719, - "observedSpeedIndex": 3116, - "observedSpeedIndexTs": 304033338 + "observedNavigationStartTs": 383767011, + "observedFirstPaint": 2281, + "observedFirstPaintTs": 386048152, + "observedFirstContentfulPaint": 2281, + "observedFirstContentfulPaintTs": 386048152, + "observedFirstMeaningfulPaint": 2281, + "observedFirstMeaningfulPaintTs": 386048152, + "observedLargestContentfulPaint": 3537, + "observedLargestContentfulPaintTs": 387304274, + "observedTraceEnd": 5221, + "observedTraceEndTs": 388987612, + "observedLoad": 4165, + "observedLoadTs": 387931986, + "observedDomContentLoaded": 3426, + "observedDomContentLoadedTs": 387192541, + "observedCumulativeLayoutShift": 0.4057553270128038, + "observedCumulativeLayoutShiftAllFrames": 0.39375, + "observedFirstVisualChange": 2284, + "observedFirstVisualChangeTs": 386051011, + "observedLastVisualChange": 4050, + "observedLastVisualChangeTs": 387817011, + "observedSpeedIndex": 3314, + "observedSpeedIndexTs": 387080683 }, { "lcpInvalidated": false @@ -92331,19 +84287,19 @@ "numScripts": 49, "numStylesheets": 37, "numFonts": 9, - "numTasks": 1662, + "numTasks": 1826, "numTasksOver10ms": 10, "numTasksOver25ms": 4, - "numTasksOver50ms": 2, - "numTasksOver100ms": 1, + "numTasksOver50ms": 1, + "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 8.506, - "throughput": 10393177.782398634, - "maxRtt": 136.886, - "maxServerLatency": 140.63200000000003, - "totalByteWeight": 2043378, - "totalTaskTime": 682.3839999999985, - "mainDocumentTransferSize": 18513 + "rtt": 1.8670000000000002, + "throughput": 8876006.12908537, + "maxRtt": 152.017, + "maxServerLatency": 153.966, + "totalByteWeight": 2106375, + "totalTaskTime": 461.12799999999686, + "mainDocumentTransferSize": 18754 } ] } @@ -92364,7 +84320,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "F", "testsslExpireSoon": false, "testsslExpireDate": "2024-11-15T22:59:00.000Z", "testsslGrade": "A+", @@ -92393,216 +84348,7 @@ "social", "travail" ], - "http": { - "url": "https://www.egalite-femmes-hommes.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 07:20:18 GMT", - "grade": "D", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Age": "4104", - "Cache-Control": "max-age=10800, public", - "Connection": "keep-alive", - "Content-Type": "text/html; charset=UTF-8", - "Content-language": "fr", - "Date": "Thu, 18 Jul 2024 08:06:10 GMT", - "ETag": "W/\"1721289965-gzip\"", - "Expires": "Sun, 19 Nov 1978 05:00:00 GMT", - "Last-Modified": "Thu, 18 Jul 2024 08:06:05 GMT", - "Set-Cookie": "BIGipServerpool-handicap-v2.cegedim.cloud-HTTP=3485751562.20480.0000; path=/; Httponly; Secure, TSf3779cae029=087dc22938ab28004ee91b75dc5fea02397516b362e14688a5c533772805a3113524f558eeef1a026b8201f98b50881a; Max-Age=30; Path=/, TS300431cb027=087dc22938ab20007ad9ca0ad4a31e3abc6825e4d8f777f14746059f1fc7ed2b51a868cc5ad1c027088a9b6f3f113000c9ff5165d02f3aecd7aa80f014172618b39291f630f5ad1931d566ee08f343d5134a2ce977106a2e203ecf8bceb7b1e6; Path=/", - "Transfer-Encoding": "chunked", - "Vary": "Cookie,Accept-Encoding", - "X-Cache": "HIT", - "X-Cache-Hits": "32", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "SAMEORIGIN" - }, - "scan_id": 53625095, - "score": 35, - "start_time": "Sun, 21 Jul 2024 07:20:12 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 3, - "tests_passed": 8, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-handicap-v2.cegedim.cloud-HTTP": { - "domain": "www.egalite-femmes-hommes.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS300431cb027": { - "domain": "www.egalite-femmes-hommes.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - }, - "TSf3779cae029": { - "domain": "www.egalite-femmes-hommes.gouv.fr", - "expires": 1721546447, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag", - "score_description": "Cookies set without using the Secure flag or set over HTTP", - "score_modifier": -20 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://www.egalite-femmes-hommes.gouv.fr/", - "redirects": true, - "route": [ - "http://www.egalite-femmes-hommes.gouv.fr/", - "https://www.egalite-femmes-hommes.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": null, - "includeSubDomains": false, - "max-age": null, - "preload": false, - "preloaded": false - }, - "pass": false, - "result": "hsts-not-implemented", - "score_description": "HTTP Strict Transport Security (HSTS) header not implemented", - "score_modifier": -20 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -92948,7 +84694,7 @@ "ip": "www.egalite-femmes-hommes.gouv.fr/185.194.82.206", "port": "443", "severity": "OK", - "finding": "358 >= 60 days" + "finding": "351 >= 60 days" }, { "id": "cert_notBefore", @@ -93841,13 +85587,13 @@ { "requestedUrl": "https://www.egalite-femmes-hommes.gouv.fr/", "finalUrl": "https://www.egalite-femmes-hommes.gouv.fr/", - "fetchTime": "2024-07-21T07:19:59.482Z", + "fetchTime": "2024-07-28T07:25:56.379Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.28 + "score": 0.26 }, "accessibility": { "title": "Accessibility", @@ -93883,49 +85629,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 14355, + "numericValue": 16177, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 3331, - "firstMeaningfulPaint": 3331, - "largestContentfulPaint": 4617, - "firstCPUIdle": 13582, - "interactive": 14355, - "speedIndex": 8760, - "estimatedInputLatency": 3484, - "totalBlockingTime": 8084, - "maxPotentialFID": 4839, + "firstContentfulPaint": 3432, + "firstMeaningfulPaint": 3432, + "largestContentfulPaint": 4677, + "firstCPUIdle": 15365, + "interactive": 16177, + "speedIndex": 9361, + "estimatedInputLatency": 4633, + "totalBlockingTime": 9823, + "maxPotentialFID": 6275, "cumulativeLayoutShift": 0.008052463107638888, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 261406886, + "observedTimeOriginTs": 385218056, "observedNavigationStart": 0, - "observedNavigationStartTs": 261406886, - "observedFirstPaint": 1562, - "observedFirstPaintTs": 262969106, - "observedFirstContentfulPaint": 1562, - "observedFirstContentfulPaintTs": 262969106, - "observedFirstMeaningfulPaint": 1562, - "observedFirstMeaningfulPaintTs": 262969106, - "observedLargestContentfulPaint": 1718, - "observedLargestContentfulPaintTs": 263125291, - "observedTraceEnd": 5289, - "observedTraceEndTs": 266695887, - "observedLoad": 2100, - "observedLoadTs": 263507027, - "observedDomContentLoaded": 1571, - "observedDomContentLoadedTs": 262977425, + "observedNavigationStartTs": 385218056, + "observedFirstPaint": 1507, + "observedFirstPaintTs": 386724863, + "observedFirstContentfulPaint": 1507, + "observedFirstContentfulPaintTs": 386724863, + "observedFirstMeaningfulPaint": 1507, + "observedFirstMeaningfulPaintTs": 386724863, + "observedLargestContentfulPaint": 1655, + "observedLargestContentfulPaintTs": 386873309, + "observedTraceEnd": 5576, + "observedTraceEndTs": 390793759, + "observedLoad": 2102, + "observedLoadTs": 387320363, + "observedDomContentLoaded": 1512, + "observedDomContentLoadedTs": 386730339, "observedCumulativeLayoutShift": 0.008052463107638888, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 1565, - "observedFirstVisualChangeTs": 262971886, - "observedLastVisualChange": 4365, - "observedLastVisualChangeTs": 265771886, - "observedSpeedIndex": 2994, - "observedSpeedIndexTs": 264400924 + "observedFirstVisualChange": 1499, + "observedFirstVisualChangeTs": 386717056, + "observedLastVisualChange": 4733, + "observedLastVisualChangeTs": 389951056, + "observedSpeedIndex": 3148, + "observedSpeedIndexTs": 388366131 }, { "lcpInvalidated": false @@ -93947,19 +85693,19 @@ "numScripts": 13, "numStylesheets": 4, "numFonts": 4, - "numTasks": 1139, - "numTasksOver10ms": 23, - "numTasksOver25ms": 13, + "numTasks": 1406, + "numTasksOver10ms": 24, + "numTasksOver25ms": 15, "numTasksOver50ms": 8, "numTasksOver100ms": 5, "numTasksOver500ms": 2, - "rtt": 20.879, - "throughput": 6746236.518441158, - "maxRtt": 90.022, - "maxServerLatency": 63.845, - "totalByteWeight": 802055, - "totalTaskTime": 3165.2339999999995, - "mainDocumentTransferSize": 59197 + "rtt": 24.552, + "throughput": 7312919.6645350205, + "maxRtt": 90.24600000000001, + "maxServerLatency": 59.01800000000001, + "totalByteWeight": 925056, + "totalTaskTime": 3683.0759999999977, + "mainDocumentTransferSize": 59377 } ] } @@ -93980,7 +85726,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "D", "testsslExpireSoon": false, "testsslExpireDate": "2025-07-14T21:59:00.000Z", "testsslGrade": "A", @@ -93988,7 +85733,7 @@ "cookiesCount": 0, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.28, + "lighthouse_performance": 0.26, "lighthouse_performanceGrade": "E", "lighthouse_accessibility": 1, "lighthouse_accessibilityGrade": "A", @@ -94008,196 +85753,7 @@ "tags": [ "travail" ], - "http": { - "url": "https://www.sipsi.travail.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 07:25:19 GMT", - "grade": "B", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Accept-Ranges": "bytes", - "Cache-Control": "no-cache, no-store, max-age=0, must-revalidate", - "Connection": "Keep-Alive", - "Content-Language": "fr-FR", - "Content-Type": "text/html;charset=ISO-8859-1", - "Date": "Sun, 21 Jul 2024 07:25:17 GMT", - "Expires": "0", - "Keep-Alive": "timeout=5, max=100", - "Last-Modified": "Fri, 01 Mar 2024 13:37:35 GMT", - "Pragma": "no-cache", - "Set-Cookie": "TS0160f77f=0171284ec36ae71a13b69512ec8cb923e1714c9dbf240eedca06ae203d8ce2a0cd6ad691015ceb0fd438d9b2d341b3a6ad97bec8e1; Path=/; Domain=.www.sipsi.travail.gouv.fr; ", - "Strict-Transport-Security": "max-age=31536000 ; includeSubDomains", - "Transfer-Encoding": "chunked", - "Vary": "Origin,Access-Control-Request-Method,Access-Control-Request-Headers", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "SAMEORIGIN", - "X-XSS-Protection": "1; mode=block" - }, - "scan_id": 53625163, - "score": 70, - "start_time": "Sun, 21 Jul 2024 07:25:17 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 2, - "tests_passed": 9, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "TS0160f77f": { - "domain": ".www.sipsi.travail.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag-but-protected-by-hsts", - "score_description": "Cookies set without using the Secure flag, but transmission over HTTP prevented by HSTS", - "score_modifier": -5 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": "*", - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-implemented-with-public-access", - "score_description": "Public content is visible via cross-origin resource sharing (CORS) Access-Control-Allow-Origin header", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://www.sipsi.travail.gouv.fr/", - "redirects": true, - "route": [ - "http://www.sipsi.travail.gouv.fr/", - "https://www.sipsi.travail.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000 ; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "SAMEORIGIN" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": "1; mode=block" - }, - "pass": true, - "result": "x-xss-protection-enabled-mode-block", - "score_description": "Deprecated X-XSS-Protection header set to \"1; mode=block\"", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -94543,7 +86099,7 @@ "ip": "www.sipsi.travail.gouv.fr/164.131.124.235", "port": "443", "severity": "OK", - "finding": "125 >= 60 days" + "finding": "118 >= 60 days" }, { "id": "cert_notBefore", @@ -94704,7 +86260,7 @@ "ip": "www.sipsi.travail.gouv.fr/164.131.124.235", "port": "443", "severity": "INFO", - "finding": "1721546763" + "finding": "1722152534" }, { "id": "HSTS_time", @@ -95317,7 +86873,7 @@ "cookies": [ { "name": "TS0160f77f", - "value": "0171284ec3838b86d81c036c0b614cad694430b18973bc21811e0ed46b6dd74ffe62ee1473d2fcf03bc4dce27db381084293534ea6", + "value": "0171284ec35e6a0a09d6a5ff6b0d19660285b659ca43c594ed645d87ad6accd50dec8d713f605fc6a8ced8d2e58852d9894150c35c", "domain": ".www.sipsi.travail.gouv.fr", "path": "/", "expires": -1, @@ -95336,12 +86892,12 @@ "connection": "Keep-Alive", "content-language": "en-US", "content-type": "text/html;charset=ISO-8859-1", - "date": "Sun, 21 Jul 2024 07:25:32 GMT", + "date": "Sun, 28 Jul 2024 07:41:43 GMT", "expires": "0", - "keep-alive": "timeout=5, max=100", + "keep-alive": "timeout=5, max=99", "last-modified": "Fri, 01 Mar 2024 13:37:35 GMT", "pragma": "no-cache", - "set-cookie": "TS0160f77f=0171284ec3838b86d81c036c0b614cad694430b18973bc21811e0ed46b6dd74ffe62ee1473d2fcf03bc4dce27db381084293534ea6; Path=/; Domain=.www.sipsi.travail.gouv.fr;", + "set-cookie": "TS0160f77f=0171284ec35e6a0a09d6a5ff6b0d19660285b659ca43c594ed645d87ad6accd50dec8d713f605fc6a8ced8d2e58852d9894150c35c; Path=/; Domain=.www.sipsi.travail.gouv.fr;", "strict-transport-security": "max-age=31536000 ; includeSubDomains", "transfer-encoding": "chunked", "vary": "Origin,Access-Control-Request-Method,Access-Control-Request-Headers", @@ -95635,7 +87191,7 @@ { "requestedUrl": "https://www.sipsi.travail.gouv.fr/", "finalUrl": "https://www.sipsi.travail.gouv.fr/", - "fetchTime": "2024-07-21T07:25:03.127Z", + "fetchTime": "2024-07-28T07:40:15.644Z", "runWarnings": [], "categories": { "performance": { @@ -95677,49 +87233,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 20719, + "numericValue": 20770, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 18700, - "firstMeaningfulPaint": 18775, - "largestContentfulPaint": 21661, - "firstCPUIdle": 18775, - "interactive": 20719, - "speedIndex": 18700, + "firstContentfulPaint": 18790, + "firstMeaningfulPaint": 18908, + "largestContentfulPaint": 21642, + "firstCPUIdle": 18908, + "interactive": 20770, + "speedIndex": 18790, "estimatedInputLatency": 13, - "totalBlockingTime": 149, - "maxPotentialFID": 208, + "totalBlockingTime": 171, + "maxPotentialFID": 237, "cumulativeLayoutShift": 0.9597667179107666, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 317839740, + "observedTimeOriginTs": 306352251, "observedNavigationStart": 0, - "observedNavigationStartTs": 317839740, - "observedFirstPaint": 371, - "observedFirstPaintTs": 318210309, - "observedFirstContentfulPaint": 2213, - "observedFirstContentfulPaintTs": 320052465, - "observedFirstMeaningfulPaint": 2213, - "observedFirstMeaningfulPaintTs": 320052465, - "observedLargestContentfulPaint": 2251, - "observedLargestContentfulPaintTs": 320091192, - "observedTraceEnd": 3748, - "observedTraceEndTs": 321588040, - "observedLoad": 2049, - "observedLoadTs": 319888942, - "observedDomContentLoaded": 2049, - "observedDomContentLoadedTs": 319888381, + "observedNavigationStartTs": 306352251, + "observedFirstPaint": 390, + "observedFirstPaintTs": 306741954, + "observedFirstContentfulPaint": 2255, + "observedFirstContentfulPaintTs": 308607084, + "observedFirstMeaningfulPaint": 2255, + "observedFirstMeaningfulPaintTs": 308607084, + "observedLargestContentfulPaint": 2288, + "observedLargestContentfulPaintTs": 308640409, + "observedTraceEnd": 3696, + "observedTraceEndTs": 310048333, + "observedLoad": 2083, + "observedLoadTs": 308435464, + "observedDomContentLoaded": 2083, + "observedDomContentLoadedTs": 308434924, "observedCumulativeLayoutShift": 0.9597667179107666, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 380, - "observedFirstVisualChangeTs": 318219740, - "observedLastVisualChange": 2830, - "observedLastVisualChangeTs": 320669740, - "observedSpeedIndex": 1695, - "observedSpeedIndexTs": 319534718 + "observedFirstVisualChange": 385, + "observedFirstVisualChangeTs": 306737251, + "observedLastVisualChange": 2852, + "observedLastVisualChangeTs": 309204251, + "observedSpeedIndex": 1719, + "observedSpeedIndexTs": 308071010 }, { "lcpInvalidated": false @@ -95741,18 +87297,18 @@ "numScripts": 3, "numStylesheets": 2, "numFonts": 3, - "numTasks": 885, - "numTasksOver10ms": 6, - "numTasksOver25ms": 4, - "numTasksOver50ms": 1, + "numTasks": 804, + "numTasksOver10ms": 8, + "numTasksOver25ms": 5, + "numTasksOver50ms": 2, "numTasksOver100ms": 1, "numTasksOver500ms": 0, - "rtt": 81.367, - "throughput": 21667670.77400793, - "maxRtt": 81.367, - "maxServerLatency": 5.524000000000001, - "totalByteWeight": 4438988, - "totalTaskTime": 372.0539999999994, + "rtt": 82.43400000000001, + "throughput": 22593645.43494303, + "maxRtt": 82.43400000000001, + "maxServerLatency": 3.859999999999985, + "totalByteWeight": 4438773, + "totalTaskTime": 414.05099999999965, "mainDocumentTransferSize": 7201 } ] @@ -95775,7 +87331,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "B", "testsslExpireSoon": false, "testsslExpireDate": "2024-11-23T22:59:00.000Z", "testsslGrade": "A+", @@ -95804,262 +87359,7 @@ "travail", "emploi" ], - "http": { - "url": "https://www.teleaccords.travail-emploi.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 07:30:06 GMT", - "grade": "A", - "hidden": false, - "likelihood_indicator": "LOW", - "response_headers": { - "Accept-Ranges": "bytes", - "Cache-Control": "no-cache, no-store, max-age=0, must-revalidate", - "Connection": "keep-alive", - "Content-Encoding": "gzip", - "Content-Language": "en-US", - "Content-Security-Policy": "default-src 'self' 'nonce-dsfr-index' 'nonce-javascript-index' 'nonce-roboto-index' 'nonce-icons-index' 'nonce-fontsgstatic'; object-src 'none';img-src 'self' data:; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' data: fonts.gstatic.com; connect-src 'self' https://api-adresse.data.gouv.fr/ https://geo.api.gouv.fr/ https://agadir-app.rct01.kleegroup.com/ https://*.auth.integ-app.daccord-ssg.net https://*.auth.valid-app.daccord-ssg.net; script-src 'self' 'nonce-dsfr-index' 'nonce-javascript-index' 'nonce-roboto-index' 'nonce-icons-index' 'nonce-fontsgstatic'", - "Content-Type": "text/html;charset=UTF-8", - "Date": "Sun, 21 Jul 2024 07:30:05 GMT", - "Expires": "0", - "Keep-Alive": "timeout=60", - "Last-Modified": "Thu, 04 Jul 2024 11:14:55 GMT", - "Pragma": "no-cache", - "Set-Cookie": "BIGipServerpool-accords-depot-prod.cegedim.cloud-TCP8080=!zq76t1Q6to8BhRFWDPlD0yXzT0UGhjhyB0fIjmKqAj3Xl7lzfgc4W2VJzVfs8KHPh0/05EdGgNr4XnH2kr16FU0RDxmT; path=/; Httponly; Secure, TS01ac8ac8=01352d38115a426d5ca69e861d0149f96a9bc36ef778c87a13579ede9aa86de5498c7d65f998c1a619e5e77fd6921b072f42d6047e; Path=/", - "Strict-Transport-Security": "max-age=31536000; includeSubDomains", - "Transfer-Encoding": "chunked", - "Vary": "origin,access-control-request-method,access-control-request-headers,accept-encoding", - "X-Content-Type-Options": "nosniff", - "X-Frame-Options": "DENY", - "X-XSS-Protection": "0" - }, - "scan_id": 53625232, - "score": 95, - "start_time": "Sun, 21 Jul 2024 07:30:02 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 1, - "tests_passed": 10, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": { - "connect-src": [ - "https://*.auth.valid-app.daccord-ssg.net", - "'self'", - "https://geo.api.gouv.fr/", - "https://*.auth.integ-app.daccord-ssg.net", - "https://api-adresse.data.gouv.fr/" - ], - "default-src": [ - "'nonce-javascript-index'", - "'self'", - "'nonce-icons-index'", - "'nonce-dsfr-index'", - "'nonce-fontsgstatic'", - "'nonce-roboto-index'" - ], - "font-src": [ - "fonts.gstatic.com", - "data:", - "'self'" - ], - "img-src": [ - "data:", - "'self'" - ], - "object-src": [ - "'none'" - ], - "script-src": [ - "'nonce-javascript-index'", - "'self'", - "'nonce-icons-index'", - "'nonce-dsfr-index'", - "'nonce-fontsgstatic'", - "'nonce-roboto-index'" - ], - "style-src": [ - "'unsafe-inline'", - "fonts.googleapis.com", - "'self'" - ] - }, - "http": true, - "meta": true, - "numPolicies": 2, - "policy": { - "antiClickjacking": false, - "defaultNone": false, - "insecureBaseUri": true, - "insecureFormAction": true, - "insecureSchemeActive": false, - "insecureSchemePassive": false, - "strictDynamic": false, - "unsafeEval": false, - "unsafeInline": false, - "unsafeInlineStyle": true, - "unsafeObjects": false - } - }, - "pass": true, - "result": "csp-implemented-with-unsafe-inline-in-style-src-only", - "score_description": "Content Security Policy (CSP) implemented with unsafe sources inside style-src. This includes 'unsafe-inline', data: or overly broad sources such as https:.", - "score_modifier": 0 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": { - "BIGipServerpool-accords-depot-prod.cegedim.cloud-TCP8080": { - "domain": "accords-depot.travail.gouv.fr", - "expires": null, - "httponly": true, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": true - }, - "TS01ac8ac8": { - "domain": "accords-depot.travail.gouv.fr", - "expires": null, - "httponly": false, - "max-age": null, - "path": "/", - "port": null, - "samesite": false, - "secure": false - } - }, - "sameSite": null - }, - "pass": false, - "result": "cookies-without-secure-flag-but-protected-by-hsts", - "score_description": "Cookies set without using the Secure flag, but transmission over HTTP prevented by HSTS", - "score_modifier": -5 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://accords-depot.travail.gouv.fr", - "redirects": true, - "route": [ - "http://www.teleaccords.travail-emploi.gouv.fr/", - "https://www.teleaccords.travail-emploi.gouv.fr/", - "https://accords-depot.travail.gouv.fr" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=31536000; includeSubDomains", - "includeSubDomains": true, - "max-age": 31536000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": "nosniff" - }, - "pass": true, - "result": "x-content-type-options-nosniff", - "score_description": "X-Content-Type-Options header set to \"nosniff\"", - "score_modifier": 0 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": "DENY" - }, - "pass": true, - "result": "x-frame-options-sameorigin-or-deny", - "score_description": "X-Frame-Options (XFO) header set to SAMEORIGIN or DENY", - "score_modifier": 0 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": "0" - }, - "pass": true, - "result": "x-xss-protection-disabled", - "score_description": "Deprecated X-XSS-Protection header set to \"0\" (disabled)", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -96405,7 +87705,7 @@ "ip": "www.teleaccords.travail-emploi.gouv.fr/164.131.124.217", "port": "443", "severity": "OK", - "finding": "100 >= 60 days" + "finding": "93 >= 60 days" }, { "id": "cert_notBefore", @@ -97115,7 +88415,7 @@ "ip": "www.teleaccords.travail-emploi.gouv.fr/164.131.124.217", "port": "443", "severity": "INFO", - "finding": "49" + "finding": "88" } ], "thirdparties": { @@ -97123,7 +88423,7 @@ "cookies": [ { "name": "TS01ac8ac8", - "value": "01352d3811cfc1fe8346ca756cc123277a74fe6740f8077117db9cb69a0ddabf25c1529965fcab97dc206831c4e5380a460bbe46cf", + "value": "01352d38111fe60b4edabae7b8d961ac2c802598141342c5ec014a18c06f0d98b1e16a354f19298aa795d993a99fb5f05ace2b31df", "domain": "accords-depot.travail.gouv.fr", "path": "/", "expires": -1, @@ -97137,7 +88437,7 @@ }, { "name": "BIGipServerpool-accords-depot-prod.cegedim.cloud-TCP8080", - "value": "!lnq1XD2ZH0XzcTNWDPlD0yXzT0UGhqwmt2g+wOXFlNOeZ4pI/sRUyx9UiS2LsOayLZ5rIVGKXXbCIoPf4KvsOztnnR9h", + "value": "!HKy/rVj+2fMyWiJWDPlD0yXzT0UGhlWrmMC5xZm65hy/VeHk54By0N5dj1wUHTXQQ6mSn1d0hCfoR8h0OSHCyR8HEFiU", "domain": "accords-depot.travail.gouv.fr", "path": "/", "expires": -1, @@ -97158,12 +88458,12 @@ "content-language": "en-US", "content-security-policy": "default-src 'self' 'nonce-dsfr-index' 'nonce-javascript-index' 'nonce-roboto-index' 'nonce-icons-index' 'nonce-fontsgstatic'; object-src 'none';img-src 'self' data:; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' data: fonts.gstatic.com; connect-src 'self' https://api-adresse.data.gouv.fr/ https://geo.api.gouv.fr/ https://agadir-app.rct01.kleegroup.com/ https://*.auth.integ-app.daccord-ssg.net https://*.auth.valid-app.daccord-ssg.net; script-src 'self' 'nonce-dsfr-index' 'nonce-javascript-index' 'nonce-roboto-index' 'nonce-icons-index' 'nonce-fontsgstatic'", "content-type": "text/html;charset=UTF-8", - "date": "Sun, 21 Jul 2024 07:30:20 GMT", + "date": "Sun, 28 Jul 2024 07:42:30 GMT", "expires": "0", "keep-alive": "timeout=60", "last-modified": "Thu, 04 Jul 2024 11:14:55 GMT", "pragma": "no-cache", - "set-cookie": "BIGipServerpool-accords-depot-prod.cegedim.cloud-TCP8080=!lnq1XD2ZH0XzcTNWDPlD0yXzT0UGhqwmt2g+wOXFlNOeZ4pI/sRUyx9UiS2LsOayLZ5rIVGKXXbCIoPf4KvsOztnnR9h; path=/; Httponly; Secure\nTS01ac8ac8=01352d3811cfc1fe8346ca756cc123277a74fe6740f8077117db9cb69a0ddabf25c1529965fcab97dc206831c4e5380a460bbe46cf; Path=/", + "set-cookie": "BIGipServerpool-accords-depot-prod.cegedim.cloud-TCP8080=!HKy/rVj+2fMyWiJWDPlD0yXzT0UGhlWrmMC5xZm65hy/VeHk54By0N5dj1wUHTXQQ6mSn1d0hCfoR8h0OSHCyR8HEFiU; path=/; Httponly; Secure\nTS01ac8ac8=01352d38111fe60b4edabae7b8d961ac2c802598141342c5ec014a18c06f0d98b1e16a354f19298aa795d993a99fb5f05ace2b31df; Path=/", "strict-transport-security": "max-age=31536000; includeSubDomains", "transfer-encoding": "chunked", "vary": "origin,access-control-request-method,access-control-request-headers,accept-encoding", @@ -97245,7 +88545,7 @@ { "requestedUrl": "https://www.teleaccords.travail-emploi.gouv.fr/", "finalUrl": "https://accords-depot.travail.gouv.fr/", - "fetchTime": "2024-07-21T07:29:48.983Z", + "fetchTime": "2024-07-28T07:41:59.442Z", "runWarnings": [ "The page may not be loading as expected because your test URL (https://www.teleaccords.travail-emploi.gouv.fr/) was redirected to https://accords-depot.travail.gouv.fr/. Try testing the second URL directly." ], @@ -97253,7 +88553,7 @@ "performance": { "title": "Performance", "id": "performance", - "score": 0.55 + "score": 0.51 }, "accessibility": { "title": "Accessibility", @@ -97289,49 +88589,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 5311, + "numericValue": 5358, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 4148, - "firstMeaningfulPaint": 4309, - "largestContentfulPaint": 5567, - "firstCPUIdle": 5240, - "interactive": 5311, - "speedIndex": 5229, - "estimatedInputLatency": 20, - "totalBlockingTime": 259, - "maxPotentialFID": 253, - "cumulativeLayoutShift": 0.7027429470486111, - "cumulativeLayoutShiftAllFrames": 0.7027429470486111, + "firstContentfulPaint": 4289, + "firstMeaningfulPaint": 4289, + "largestContentfulPaint": 5542, + "firstCPUIdle": 5188, + "interactive": 5358, + "speedIndex": 6924, + "estimatedInputLatency": 18, + "totalBlockingTime": 228, + "maxPotentialFID": 248, + "cumulativeLayoutShift": 0.7534691397349039, + "cumulativeLayoutShiftAllFrames": 0.7534691397349039, "observedTimeOrigin": 0, - "observedTimeOriginTs": 385676353, + "observedTimeOriginTs": 266582874, "observedNavigationStart": 0, - "observedNavigationStartTs": 385676353, - "observedFirstPaint": 1733, - "observedFirstPaintTs": 387409006, - "observedFirstContentfulPaint": 1733, - "observedFirstContentfulPaintTs": 387409006, - "observedFirstMeaningfulPaint": 1733, - "observedFirstMeaningfulPaintTs": 387409006, - "observedLargestContentfulPaint": 1812, - "observedLargestContentfulPaintTs": 387488213, - "observedTraceEnd": 3474, - "observedTraceEndTs": 389149881, - "observedLoad": 1554, - "observedLoadTs": 387230781, - "observedDomContentLoaded": 1554, - "observedDomContentLoadedTs": 387230646, - "observedCumulativeLayoutShift": 0.7027429470486111, - "observedCumulativeLayoutShiftAllFrames": 0.7027429470486111, - "observedFirstVisualChange": 1741, - "observedFirstVisualChangeTs": 387417353, - "observedLastVisualChange": 1858, - "observedLastVisualChangeTs": 387534353, - "observedSpeedIndex": 1815, - "observedSpeedIndexTs": 387491166 + "observedNavigationStartTs": 266582874, + "observedFirstPaint": 2950, + "observedFirstPaintTs": 269532531, + "observedFirstContentfulPaint": 2950, + "observedFirstContentfulPaintTs": 269532531, + "observedFirstMeaningfulPaint": 2950, + "observedFirstMeaningfulPaintTs": 269532531, + "observedLargestContentfulPaint": 3102, + "observedLargestContentfulPaintTs": 269684532, + "observedTraceEnd": 5333, + "observedTraceEndTs": 271916338, + "observedLoad": 2703, + "observedLoadTs": 269286280, + "observedDomContentLoaded": 2703, + "observedDomContentLoadedTs": 269286168, + "observedCumulativeLayoutShift": 0.7534691397349039, + "observedCumulativeLayoutShiftAllFrames": 0.7534691397349039, + "observedFirstVisualChange": 2956, + "observedFirstVisualChangeTs": 269538874, + "observedLastVisualChange": 3223, + "observedLastVisualChangeTs": 269805874, + "observedSpeedIndex": 3091, + "observedSpeedIndexTs": 269674046 }, { "lcpInvalidated": false @@ -97353,18 +88653,18 @@ "numScripts": 7, "numStylesheets": 1, "numFonts": 3, - "numTasks": 823, - "numTasksOver10ms": 9, - "numTasksOver25ms": 4, + "numTasks": 923, + "numTasksOver10ms": 7, + "numTasksOver25ms": 3, "numTasksOver50ms": 2, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 79.524, - "throughput": 13124919.87531912, - "maxRtt": 81.55199999999999, - "maxServerLatency": 2.4630000000000223, - "totalByteWeight": 2477647, - "totalTaskTime": 413.07499999999834, + "rtt": 150.969, + "throughput": 7467364.013088284, + "maxRtt": 151.022, + "maxServerLatency": 2.9080000000000155, + "totalByteWeight": 2477620, + "totalTaskTime": 342.85999999999837, "mainDocumentTransferSize": 3198 } ] @@ -97387,7 +88687,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "A", "testsslExpireSoon": false, "testsslExpireDate": "2024-10-29T22:59:00.000Z", "testsslGrade": "A", @@ -97395,7 +88694,7 @@ "cookiesCount": 2, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.55, + "lighthouse_performance": 0.51, "lighthouse_performanceGrade": "C", "lighthouse_accessibility": 1, "lighthouse_accessibilityGrade": "A", @@ -97761,7 +89060,7 @@ "ip": "www.telerc.travail.gouv.fr/164.131.124.212", "port": "443", "severity": "OK", - "finding": "344 >= 60 days" + "finding": "337 >= 60 days" }, { "id": "cert_notBefore", @@ -97915,14 +89214,14 @@ "ip": "www.telerc.travail.gouv.fr/164.131.124.212", "port": "443", "severity": "INFO", - "finding": "0 seconds from localtime" + "finding": "-1 seconds from localtime" }, { "id": "HTTP_headerTime", "ip": "www.telerc.travail.gouv.fr/164.131.124.212", "port": "443", "severity": "INFO", - "finding": "1721547652" + "finding": "1722152746" }, { "id": "HSTS_time", @@ -98506,7 +89805,7 @@ "ip": "www.telerc.travail.gouv.fr/164.131.124.212", "port": "443", "severity": "INFO", - "finding": "84" + "finding": "88" } ], "thirdparties": { @@ -98514,7 +89813,7 @@ "cookies": [ { "name": "TS010f2491", - "value": "0171284ec3a001239d3a6063da2afcfc30f5cc6f247a50f4e22a3349560872c3a4291b394e6772d519713b3d99695805f6c6cdba5dcc5c73c79e2131825ff90be201264af7", + "value": "0171284ec302ef89afad655ffeed2ef932009e85282da4847b8e053b12b6b010b181886d821593ef54f8cae30fa7525fbc22a7b43b997dccc3809c4c2bb731862d41630b96", "domain": ".www.telerc.travail.gouv.fr", "path": "/", "expires": -1, @@ -98528,7 +89827,7 @@ }, { "name": "Current_Session", - "value": "!UrN7/RDS6Rj9IHkq0Y9HAfEqe0u3ZsUADt7uLxPE5J5uSO9zynWfK8XA2Tq76olRMYIb020cAUec4aQ=", + "value": "!C/QktCGqHGJ8bXQq0Y9HAfEqe0u3ZjyLb8ltVeTUHEe0f7XPZsYed+JSYOy5Er5f6/9kbWyMGsC/db0=", "domain": "www.telerc.travail.gouv.fr", "path": "/", "expires": -1, @@ -98546,11 +89845,11 @@ "connection": "Keep-Alive", "content-length": "4096", "content-type": "text/html; charset=UTF-8", - "date": "Sun, 21 Jul 2024 07:39:58 GMT", + "date": "Sun, 28 Jul 2024 07:44:50 GMT", "etag": "\"1000-61b2745069e00\"", - "keep-alive": "timeout=5, max=100", + "keep-alive": "timeout=5, max=98", "last-modified": "Tue, 18 Jun 2024 10:08:56 GMT", - "set-cookie": "Current_Session=!UrN7/RDS6Rj9IHkq0Y9HAfEqe0u3ZsUADt7uLxPE5J5uSO9zynWfK8XA2Tq76olRMYIb020cAUec4aQ=; path=/; Httponly; Secure\nTS010f2491=0171284ec3a001239d3a6063da2afcfc30f5cc6f247a50f4e22a3349560872c3a4291b394e6772d519713b3d99695805f6c6cdba5dcc5c73c79e2131825ff90be201264af7; Path=/; Domain=.www.telerc.travail.gouv.fr;", + "set-cookie": "Current_Session=!C/QktCGqHGJ8bXQq0Y9HAfEqe0u3ZjyLb8ltVeTUHEe0f7XPZsYed+JSYOy5Er5f6/9kbWyMGsC/db0=; path=/; Httponly; Secure\nTS010f2491=0171284ec302ef89afad655ffeed2ef932009e85282da4847b8e053b12b6b010b181886d821593ef54f8cae30fa7525fbc22a7b43b997dccc3809c4c2bb731862d41630b96; Path=/; Domain=.www.telerc.travail.gouv.fr;", "strict-transport-security": "max-age=63072000; includeSubDomains" }, "endpoints": [ @@ -98865,7 +90164,7 @@ "type": "dns", "host": "www.telerc.travail.gouv.fr.", "matched-at": "www.telerc.travail.gouv.fr", - "timestamp": "2024-07-21T07:41:51.923400311Z", + "timestamp": "2024-07-28T07:46:47.82282118Z", "matcher-status": true }, { @@ -98905,7 +90204,7 @@ "1; mode=block" ], "ip": "164.131.124.212", - "timestamp": "2024-07-21T07:42:12.92788859Z", + "timestamp": "2024-07-28T07:47:10.515380881Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://www.telerc.travail.gouv.fr'", "matcher-status": true } @@ -98914,13 +90213,13 @@ { "requestedUrl": "https://www.telerc.travail.gouv.fr/", "finalUrl": "https://www.telerc.travail.gouv.fr/", - "fetchTime": "2024-07-21T07:38:00.134Z", + "fetchTime": "2024-07-28T07:43:55.716Z", "runWarnings": [], "categories": { "performance": { "title": "Performance", "id": "performance", - "score": 0.39 + "score": 0.31 }, "accessibility": { "title": "Accessibility", @@ -98956,49 +90255,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 16574, + "numericValue": 17681, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 760, - "firstMeaningfulPaint": 4809, - "largestContentfulPaint": 11572, - "firstCPUIdle": 4809, - "interactive": 16574, - "speedIndex": 6776, - "estimatedInputLatency": 30, - "totalBlockingTime": 448, - "maxPotentialFID": 166, - "cumulativeLayoutShift": 0.5087748646206326, + "firstContentfulPaint": 781, + "firstMeaningfulPaint": 4909, + "largestContentfulPaint": 11807, + "firstCPUIdle": 4909, + "interactive": 17681, + "speedIndex": 8799, + "estimatedInputLatency": 32, + "totalBlockingTime": 605, + "maxPotentialFID": 243, + "cumulativeLayoutShift": 0.5806391292148166, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 353812597, + "observedTimeOriginTs": 338343174, "observedNavigationStart": 0, - "observedNavigationStartTs": 353812597, - "observedFirstPaint": 578, - "observedFirstPaintTs": 354390253, - "observedFirstContentfulPaint": 3230, - "observedFirstContentfulPaintTs": 357042753, - "observedFirstMeaningfulPaint": 3243, - "observedFirstMeaningfulPaintTs": 357055182, - "observedLargestContentfulPaint": 3243, - "observedLargestContentfulPaintTs": 357055182, - "observedTraceEnd": 6234, - "observedTraceEndTs": 360046323, - "observedLoad": 3051, - "observedLoadTs": 356863111, - "observedDomContentLoaded": 3050, - "observedDomContentLoadedTs": 356863058, - "observedCumulativeLayoutShift": 0.5087748646206326, + "observedNavigationStartTs": 338343174, + "observedFirstPaint": 672, + "observedFirstPaintTs": 339015053, + "observedFirstContentfulPaint": 3210, + "observedFirstContentfulPaintTs": 341553550, + "observedFirstMeaningfulPaint": 3214, + "observedFirstMeaningfulPaintTs": 341556758, + "observedLargestContentfulPaint": 3214, + "observedLargestContentfulPaintTs": 341556758, + "observedTraceEnd": 5915, + "observedTraceEndTs": 344257908, + "observedLoad": 3014, + "observedLoadTs": 341357095, + "observedDomContentLoaded": 3014, + "observedDomContentLoadedTs": 341357040, + "observedCumulativeLayoutShift": 0.5806391292148166, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 589, - "observedFirstVisualChangeTs": 354401597, - "observedLastVisualChange": 4656, - "observedLastVisualChangeTs": 358468597, - "observedSpeedIndex": 2344, - "observedSpeedIndexTs": 356156420 + "observedFirstVisualChange": 659, + "observedFirstVisualChangeTs": 339002174, + "observedLastVisualChange": 4626, + "observedLastVisualChangeTs": 342969174, + "observedSpeedIndex": 2361, + "observedSpeedIndexTs": 340704038 }, { "lcpInvalidated": false @@ -99020,19 +90319,19 @@ "numScripts": 14, "numStylesheets": 3, "numFonts": 5, - "numTasks": 769, - "numTasksOver10ms": 9, + "numTasks": 757, + "numTasksOver10ms": 10, "numTasksOver25ms": 5, "numTasksOver50ms": 2, - "numTasksOver100ms": 0, + "numTasksOver100ms": 1, "numTasksOver500ms": 0, - "rtt": 133.812, - "throughput": 7303324.009627487, - "maxRtt": 152.071, - "maxServerLatency": 28.370000000000005, - "totalByteWeight": 3143800, - "totalTaskTime": 483.4189999999988, - "mainDocumentTransferSize": 4776 + "rtt": 144.339, + "throughput": 8178640.72112936, + "maxRtt": 151.752, + "maxServerLatency": 16.82099999999997, + "totalByteWeight": 3143746, + "totalTaskTime": 516.5349999999994, + "mainDocumentTransferSize": 4775 } ] } @@ -99061,8 +90360,8 @@ "cookiesCount": 2, "trackersGrade": "A", "trackersCount": 0, - "lighthouse_performance": 0.39, - "lighthouse_performanceGrade": "D", + "lighthouse_performance": 0.31, + "lighthouse_performanceGrade": "E", "lighthouse_accessibility": 0.98, "lighthouse_accessibilityGrade": "A", "lighthouse_best-practices": 0.87, @@ -99078,172 +90377,7 @@ "404": null, "url": "https://lca-wp.sbx.synaltic.app", "category": "dnum", - "http": { - "url": "https://lca-wp.sbx.synaltic.app", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 07:50:37 GMT", - "grade": "C", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Connection": "keep-alive", - "Content-Length": "146", - "Content-Type": "text/html", - "Date": "Sun, 21 Jul 2024 07:50:36 GMT", - "Strict-Transport-Security": "max-age=15724800; includeSubDomains" - }, - "scan_id": 53625759, - "score": 50, - "start_time": "Sun, 21 Jul 2024 07:50:35 GMT", - "state": "FINISHED", - "status_code": 404, - "tests_failed": 3, - "tests_passed": 8, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": null, - "sameSite": null - }, - "pass": true, - "result": "cookies-not-found", - "score_description": "No cookies detected", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": null, - "redirects": true, - "route": [ - "http://lca-wp.sbx.synaltic.app/" - ], - "status_code": null - }, - "pass": true, - "result": "redirection-all-redirects-preloaded", - "score_description": "All hosts redirected to are in the HTTP Strict Transport Security (HSTS) preload list", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": null, - "includeSubDomains": true, - "max-age": null, - "preload": false, - "preloaded": true - }, - "pass": true, - "result": "hsts-preloaded", - "score_description": "Preloaded via the HTTP Strict Transport Security (HSTS) preloading process", - "score_modifier": 5 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-no-scripts-loaded", - "score_description": "Subresource Integrity (SRI) is not needed since site contains no script tags", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-content-type-options-not-implemented", - "score_description": "X-Content-Type-Options header not implemented", - "score_modifier": -5 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-frame-options-not-implemented", - "score_description": "X-Frame-Options (XFO) header not implemented", - "score_modifier": -20 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -99596,7 +90730,7 @@ "ip": "lca-wp.sbx.synaltic.app/135.125.84.250", "port": "443", "severity": "OK", - "finding": "362 >= 60 days" + "finding": "355 >= 60 days" }, { "id": "cert_notBefore", @@ -99722,7 +90856,7 @@ "ip": "lca-wp.sbx.synaltic.app/135.125.84.250", "port": "443", "severity": "INFO", - "finding": "1721548286" + "finding": "1722153779" }, { "id": "HSTS_time", @@ -100299,76 +91433,13 @@ "ip": "lca-wp.sbx.synaltic.app/135.125.84.250", "port": "443", "severity": "INFO", - "finding": "51" + "finding": "49" } ], "thirdparties": { - "trackers": [], - "cookies": [], - "headers": { - "content-length": "548", - "content-type": "text/html", - "date": "Sun, 21 Jul 2024 07:50:51 GMT", - "strict-transport-security": "max-age=15724800; includeSubDomains" - }, - "endpoints": [ - { - "hostname": "lca-wp.sbx.synaltic.app", - "ip": "135.125.84.250", - "geoip": { - "continent": { - "code": "EU", - "geoname_id": 6255148, - "names": { - "de": "Europa", - "en": "Europe", - "es": "Europa", - "fr": "Europe", - "ja": "ヨーロッパ", - "pt-BR": "Europa", - "ru": "Европа", - "zh-CN": "欧洲" - } - }, - "country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - }, - "location": { - "accuracy_radius": 200, - "latitude": 48.8582, - "longitude": 2.3387, - "time_zone": "Europe/Paris" - }, - "registered_country": { - "geoname_id": 3017382, - "is_in_european_union": true, - "iso_code": "FR", - "names": { - "de": "Frankreich", - "en": "France", - "es": "Francia", - "fr": "France", - "ja": "フランス共和国", - "pt-BR": "França", - "ru": "Франция", - "zh-CN": "法国" - } - } - } - } - ] + "trackers": null, + "cookies": null, + "headers": null }, "wappalyzer": { "urls": { @@ -100431,44 +91502,7 @@ "type": "dns", "host": "lca-wp.sbx.synaltic.app.", "matched-at": "lca-wp.sbx.synaltic.app", - "timestamp": "2024-07-21T07:52:07.47592955Z", - "matcher-status": true - }, - { - "template": "http/misconfiguration/http-missing-security-headers.yaml", - "template-url": "https://templates.nuclei.sh/public/http-missing-security-headers", - "template-id": "http-missing-security-headers", - "template-path": "/home/runner/nuclei-templates/http/misconfiguration/http-missing-security-headers.yaml", - "info": { - "name": "HTTP Missing Security Headers", - "author": [ - "socketz", - "geeknik", - "g4l1t0", - "convisoappsec", - "kurohost", - "dawid-czarnecki", - "forgedhallpass", - "jub0bs" - ], - "tags": [ - "misconfig", - "headers", - "generic" - ], - "description": "This template searches for missing HTTP security headers. The impact of these missing headers can vary.\n", - "severity": "info", - "metadata": { - "max-request": 1 - } - }, - "matcher-name": "cross-origin-opener-policy", - "type": "http", - "host": "https://lca-wp.sbx.synaltic.app", - "matched-at": "https://lca-wp.sbx.synaltic.app", - "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:52:56.392286809Z", - "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://lca-wp.sbx.synaltic.app'", + "timestamp": "2024-07-28T08:03:41.563225259Z", "matcher-status": true }, { @@ -100499,12 +91533,12 @@ "max-request": 1 } }, - "matcher-name": "content-security-policy", + "matcher-name": "x-content-type-options", "type": "http", "host": "https://lca-wp.sbx.synaltic.app", "matched-at": "https://lca-wp.sbx.synaltic.app", "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:52:56.392336361Z", + "timestamp": "2024-07-28T08:04:28.748195004Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://lca-wp.sbx.synaltic.app'", "matcher-status": true }, @@ -100536,12 +91570,12 @@ "max-request": 1 } }, - "matcher-name": "x-frame-options", + "matcher-name": "referrer-policy", "type": "http", "host": "https://lca-wp.sbx.synaltic.app", "matched-at": "https://lca-wp.sbx.synaltic.app", "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:52:56.392352531Z", + "timestamp": "2024-07-28T08:04:28.748235861Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://lca-wp.sbx.synaltic.app'", "matcher-status": true }, @@ -100573,12 +91607,12 @@ "max-request": 1 } }, - "matcher-name": "x-permitted-cross-domain-policies", + "matcher-name": "cross-origin-embedder-policy", "type": "http", "host": "https://lca-wp.sbx.synaltic.app", "matched-at": "https://lca-wp.sbx.synaltic.app", "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:52:56.392365656Z", + "timestamp": "2024-07-28T08:04:28.748247502Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://lca-wp.sbx.synaltic.app'", "matcher-status": true }, @@ -100610,12 +91644,12 @@ "max-request": 1 } }, - "matcher-name": "referrer-policy", + "matcher-name": "content-security-policy", "type": "http", "host": "https://lca-wp.sbx.synaltic.app", "matched-at": "https://lca-wp.sbx.synaltic.app", "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:52:56.392382337Z", + "timestamp": "2024-07-28T08:04:28.748259845Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://lca-wp.sbx.synaltic.app'", "matcher-status": true }, @@ -100647,12 +91681,12 @@ "max-request": 1 } }, - "matcher-name": "cross-origin-embedder-policy", + "matcher-name": "x-frame-options", "type": "http", "host": "https://lca-wp.sbx.synaltic.app", "matched-at": "https://lca-wp.sbx.synaltic.app", "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:52:56.392395922Z", + "timestamp": "2024-07-28T08:04:28.748277298Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://lca-wp.sbx.synaltic.app'", "matcher-status": true }, @@ -100684,12 +91718,12 @@ "max-request": 1 } }, - "matcher-name": "permissions-policy", + "matcher-name": "x-permitted-cross-domain-policies", "type": "http", "host": "https://lca-wp.sbx.synaltic.app", "matched-at": "https://lca-wp.sbx.synaltic.app", "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:52:56.392410709Z", + "timestamp": "2024-07-28T08:04:28.748290883Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://lca-wp.sbx.synaltic.app'", "matcher-status": true }, @@ -100721,12 +91755,12 @@ "max-request": 1 } }, - "matcher-name": "x-content-type-options", + "matcher-name": "clear-site-data", "type": "http", "host": "https://lca-wp.sbx.synaltic.app", "matched-at": "https://lca-wp.sbx.synaltic.app", "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:52:56.392424685Z", + "timestamp": "2024-07-28T08:04:28.748304228Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://lca-wp.sbx.synaltic.app'", "matcher-status": true }, @@ -100758,12 +91792,12 @@ "max-request": 1 } }, - "matcher-name": "clear-site-data", + "matcher-name": "cross-origin-opener-policy", "type": "http", "host": "https://lca-wp.sbx.synaltic.app", "matched-at": "https://lca-wp.sbx.synaltic.app", "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:52:56.392440886Z", + "timestamp": "2024-07-28T08:04:28.748317463Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://lca-wp.sbx.synaltic.app'", "matcher-status": true }, @@ -100800,7 +91834,44 @@ "host": "https://lca-wp.sbx.synaltic.app", "matched-at": "https://lca-wp.sbx.synaltic.app", "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:52:56.392457096Z", + "timestamp": "2024-07-28T08:04:28.748333754Z", + "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://lca-wp.sbx.synaltic.app'", + "matcher-status": true + }, + { + "template": "http/misconfiguration/http-missing-security-headers.yaml", + "template-url": "https://templates.nuclei.sh/public/http-missing-security-headers", + "template-id": "http-missing-security-headers", + "template-path": "/home/runner/nuclei-templates/http/misconfiguration/http-missing-security-headers.yaml", + "info": { + "name": "HTTP Missing Security Headers", + "author": [ + "socketz", + "geeknik", + "g4l1t0", + "convisoappsec", + "kurohost", + "dawid-czarnecki", + "forgedhallpass", + "jub0bs" + ], + "tags": [ + "misconfig", + "headers", + "generic" + ], + "description": "This template searches for missing HTTP security headers. The impact of these missing headers can vary.\n", + "severity": "info", + "metadata": { + "max-request": 1 + } + }, + "matcher-name": "permissions-policy", + "type": "http", + "host": "https://lca-wp.sbx.synaltic.app", + "matched-at": "https://lca-wp.sbx.synaltic.app", + "ip": "135.125.84.250", + "timestamp": "2024-07-28T08:04:28.748348481Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://lca-wp.sbx.synaltic.app'", "matcher-status": true }, @@ -100840,7 +91911,7 @@ "host": "https://lca-wp.sbx.synaltic.app", "matched-at": "https://lca-wp.sbx.synaltic.app/", "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:53:21.154852896Z", + "timestamp": "2024-07-28T08:04:52.239745974Z", "curl-command": "curl -X 'POST' -d '_=' -H 'Content-Type: application/x-www-form-urlencoded' -H 'Host: lca-wp.sbx.synaltic.app' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://lca-wp.sbx.synaltic.app/'", "matcher-status": true }, @@ -100871,7 +91942,7 @@ "Acme Co" ], "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:53:44.485646866Z", + "timestamp": "2024-07-28T08:05:14.727409893Z", "matcher-status": true }, { @@ -100909,7 +91980,7 @@ "Issuer: Kubernetes Ingress Controller Fake Certificate" ], "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:53:44.485714222Z", + "timestamp": "2024-07-28T08:05:14.727479793Z", "matcher-status": true }, { @@ -100943,7 +92014,7 @@ "CN: Kubernetes Ingress Controller Fake Certificate" ], "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:53:44.485765859Z", + "timestamp": "2024-07-28T08:05:14.727514268Z", "matcher-status": true }, { @@ -100976,7 +92047,7 @@ "host": "lca-wp.sbx.synaltic.app", "matched-at": "lca-wp.sbx.synaltic.app:443", "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:53:44.485812315Z", + "timestamp": "2024-07-28T08:05:14.727543292Z", "matcher-status": true }, { @@ -101006,7 +92077,7 @@ "ingress.local" ], "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:53:44.485870213Z", + "timestamp": "2024-07-28T08:05:14.727591472Z", "matcher-status": true }, { @@ -101037,7 +92108,7 @@ "tls12" ], "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:53:46.142264353Z", + "timestamp": "2024-07-28T08:05:16.459226642Z", "matcher-status": true }, { @@ -101068,7 +92139,7 @@ "tls13" ], "ip": "135.125.84.250", - "timestamp": "2024-07-21T07:53:46.318475766Z", + "timestamp": "2024-07-28T08:05:16.626581177Z", "matcher-status": true } ], @@ -101086,14 +92157,13 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "C", "testsslExpireSoon": false, "testsslExpireDate": "2025-07-18T14:22:00.000Z", "testsslGrade": "T", - "cookiesGrade": "A", - "cookiesCount": 0, - "trackersGrade": "A", - "trackersCount": 0, + "cookiesGrade": null, + "cookiesCount": null, + "trackersGrade": null, + "trackersCount": null, "declaration-a11y": "F" } }, @@ -101104,178 +92174,7 @@ "tags": [ "jeunesse" ], - "http": { - "url": "https://mes-aides.1jeune1solution.beta.gouv.fr", - "algorithm_version": 3, - "end_time": "Sun, 21 Jul 2024 07:48:11 GMT", - "grade": "C", - "hidden": false, - "likelihood_indicator": "MEDIUM", - "response_headers": { - "Connection": "keep-alive", - "Content-Encoding": "gzip", - "Content-Type": "text/html", - "Date": "Sun, 21 Jul 2024 07:48:09 GMT", - "ETag": "W/\"669a86cb-1137\"", - "Last-Modified": "Fri, 19 Jul 2024 15:31:23 GMT", - "Server": "nginx/1.18.0", - "Strict-Transport-Security": "max-age=32850000; includeSubDomains", - "Transfer-Encoding": "chunked", - "Vary": "Accept-Encoding" - }, - "scan_id": 53625702, - "score": 50, - "start_time": "Sun, 21 Jul 2024 07:48:07 GMT", - "state": "FINISHED", - "status_code": 200, - "tests_failed": 3, - "tests_passed": 8, - "tests_quantity": 11, - "details": { - "content-security-policy": { - "expectation": "csp-implemented-with-no-unsafe", - "name": "content-security-policy", - "output": { - "data": null, - "http": false, - "meta": false, - "numPolicies": 0, - "policy": null - }, - "pass": false, - "result": "csp-not-implemented", - "score_description": "Content Security Policy (CSP) header not implemented", - "score_modifier": -25 - }, - "contribute": { - "expectation": "contribute-json-only-required-on-mozilla-properties", - "name": "contribute", - "output": { - "data": null - }, - "pass": true, - "result": "contribute-json-only-required-on-mozilla-properties", - "score_description": "Contribute.json isn't required on websites that don't belong to Mozilla", - "score_modifier": 0 - }, - "cookies": { - "expectation": "cookies-secure-with-httponly-sessions", - "name": "cookies", - "output": { - "data": null, - "sameSite": null - }, - "pass": true, - "result": "cookies-not-found", - "score_description": "No cookies detected", - "score_modifier": 0 - }, - "cross-origin-resource-sharing": { - "expectation": "cross-origin-resource-sharing-not-implemented", - "name": "cross-origin-resource-sharing", - "output": { - "data": { - "acao": null, - "clientaccesspolicy": null, - "crossdomain": null - } - }, - "pass": true, - "result": "cross-origin-resource-sharing-not-implemented", - "score_description": "Content is not visible via cross-origin resource sharing (CORS) files or headers", - "score_modifier": 0 - }, - "redirection": { - "expectation": "redirection-to-https", - "name": "redirection", - "output": { - "destination": "https://mes-aides.1jeune1solution.beta.gouv.fr/", - "redirects": true, - "route": [ - "http://mes-aides.1jeune1solution.beta.gouv.fr/", - "https://mes-aides.1jeune1solution.beta.gouv.fr/" - ], - "status_code": 200 - }, - "pass": true, - "result": "redirection-to-https", - "score_description": "Initial redirection is to HTTPS on same host, final destination is HTTPS", - "score_modifier": 0 - }, - "referrer-policy": { - "expectation": "referrer-policy-private", - "name": "referrer-policy", - "output": { - "data": null, - "http": false, - "meta": false - }, - "pass": true, - "result": "referrer-policy-not-implemented", - "score_description": "Referrer-Policy header not implemented", - "score_modifier": 0 - }, - "strict-transport-security": { - "expectation": "hsts-implemented-max-age-at-least-six-months", - "name": "strict-transport-security", - "output": { - "data": "max-age=32850000; includeSubDomains", - "includeSubDomains": true, - "max-age": 32850000, - "preload": false, - "preloaded": false - }, - "pass": true, - "result": "hsts-implemented-max-age-at-least-six-months", - "score_description": "HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)", - "score_modifier": 0 - }, - "subresource-integrity": { - "expectation": "sri-implemented-and-external-scripts-loaded-securely", - "name": "subresource-integrity", - "output": { - "data": {} - }, - "pass": true, - "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", - "score_description": "Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin", - "score_modifier": 0 - }, - "x-content-type-options": { - "expectation": "x-content-type-options-nosniff", - "name": "x-content-type-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-content-type-options-not-implemented", - "score_description": "X-Content-Type-Options header not implemented", - "score_modifier": -5 - }, - "x-frame-options": { - "expectation": "x-frame-options-sameorigin-or-deny", - "name": "x-frame-options", - "output": { - "data": null - }, - "pass": false, - "result": "x-frame-options-not-implemented", - "score_description": "X-Frame-Options (XFO) header not implemented", - "score_modifier": -20 - }, - "x-xss-protection": { - "expectation": "x-xss-protection-disabled", - "name": "x-xss-protection", - "output": { - "data": null - }, - "pass": true, - "result": "x-xss-protection-not-implemented", - "score_description": "Deprecated X-XSS-Protection header not implemented", - "score_modifier": 0 - } - } - }, + "http": null, "updownio": null, "nmap": null, "dependabot": null, @@ -101656,7 +92555,7 @@ "ip": "mes-aides.1jeune1solution.beta.gouv.fr/5.135.137.147", "port": "443", "severity": "OK", - "finding": "65 >= 30 days" + "finding": "58 >= 30 days" }, { "id": "cert_notBefore", @@ -101817,7 +92716,7 @@ "ip": "mes-aides.1jeune1solution.beta.gouv.fr/5.135.137.147", "port": "443", "severity": "INFO", - "finding": "1721548143" + "finding": "1722153612" }, { "id": "HSTS_time", @@ -102388,10 +93287,10 @@ "cookies": [ { "name": "cw_conversation", - "value": "eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiI1N2QwYzYwNi0wZjI4LTQzYjgtODYxMi00N2IzM2ZhNjYzMDciLCJpbmJveF9pZCI6NX0.YbQFqA14CTSE1Zf0IRHbFogMiDTaOL6Hx6fLlyvCjKI", + "value": "eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiJhM2E3OTc2NS1lZWQ2LTQ0MTAtYWU4Yy04Mjg1MjlmZmU2OGQiLCJpbmJveF9pZCI6NX0.BOr3sereGuj59KDyIE8RfGtALVG9t0zrKl6ZIVScgCQ", "domain": "mes-aides.1jeune1solution.beta.gouv.fr", "path": "/", - "expires": 1753084107, + "expires": 1753689576, "size": 167, "httpOnly": false, "secure": false, @@ -102406,7 +93305,7 @@ "value": "1", "domain": "mes-aides.1jeune1solution.beta.gouv.fr", "path": "/", - "expires": 1721549906, + "expires": 1722155375, "size": 17, "httpOnly": false, "secure": false, @@ -102418,10 +93317,10 @@ }, { "name": "_pk_id.165.3c0a", - "value": "7e5bcd5411aeb2ef.1721548107.", + "value": "4ad1fa43f55a9dcf.1722153576.", "domain": "mes-aides.1jeune1solution.beta.gouv.fr", "path": "/", - "expires": 1755503307, + "expires": 1756108776, "size": 43, "httpOnly": false, "secure": false, @@ -102435,9 +93334,9 @@ "headers": { "content-encoding": "gzip", "content-type": "text/html", - "date": "Sun, 21 Jul 2024 07:48:25 GMT", - "etag": "W/\"669a86cb-1137\"", - "last-modified": "Fri, 19 Jul 2024 15:31:23 GMT", + "date": "Sun, 28 Jul 2024 07:59:34 GMT", + "etag": "W/\"66a107ba-1137\"", + "last-modified": "Wed, 24 Jul 2024 13:55:06 GMT", "server": "nginx/1.18.0", "strict-transport-security": "max-age=32850000; includeSubDomains", "vary": "Accept-Encoding" @@ -102715,22 +93614,22 @@ "zap": null, "nuclei": [ { - "template": "dns/caa-fingerprint.yaml", - "template-url": "https://templates.nuclei.sh/public/caa-fingerprint", - "template-id": "caa-fingerprint", - "template-path": "/home/runner/nuclei-templates/dns/caa-fingerprint.yaml", + "template": "dns/txt-fingerprint.yaml", + "template-url": "https://templates.nuclei.sh/public/txt-fingerprint", + "template-id": "txt-fingerprint", + "template-path": "/home/runner/nuclei-templates/dns/txt-fingerprint.yaml", "info": { - "name": "CAA Record", + "name": "DNS TXT Record Detected", "author": [ "pdteam" ], "tags": [ "dns", - "caa" + "txt" ], - "description": "A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.", + "description": "A DNS TXT record was detected. The TXT record lets a domain admin leave notes on a DNS server.", "reference": [ - "https://support.dnsimple.com/articles/caa-record/#whats-a-caa-record" + "https://www.netspi.com/blog/technical/network-penetration-testing/analyzing-dns-txt-records-to-fingerprint-service-providers/" ], "severity": "info", "metadata": { @@ -102746,26 +93645,29 @@ "type": "dns", "host": "mes-aides.1jeune1solution.beta.gouv.fr.", "matched-at": "mes-aides.1jeune1solution.beta.gouv.fr", - "timestamp": "2024-07-21T07:49:49.868209024Z", + "extracted-results": [ + "\"google-site-verification=HPmBmQL1wAjNXTwozfdLx1SVDAacoObm-CFsvx53DzY\"" + ], + "timestamp": "2024-07-28T08:00:58.996199038Z", "matcher-status": true }, { - "template": "dns/txt-fingerprint.yaml", - "template-url": "https://templates.nuclei.sh/public/txt-fingerprint", - "template-id": "txt-fingerprint", - "template-path": "/home/runner/nuclei-templates/dns/txt-fingerprint.yaml", + "template": "dns/caa-fingerprint.yaml", + "template-url": "https://templates.nuclei.sh/public/caa-fingerprint", + "template-id": "caa-fingerprint", + "template-path": "/home/runner/nuclei-templates/dns/caa-fingerprint.yaml", "info": { - "name": "DNS TXT Record Detected", + "name": "CAA Record", "author": [ "pdteam" ], "tags": [ "dns", - "txt" + "caa" ], - "description": "A DNS TXT record was detected. The TXT record lets a domain admin leave notes on a DNS server.", + "description": "A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.", "reference": [ - "https://www.netspi.com/blog/technical/network-penetration-testing/analyzing-dns-txt-records-to-fingerprint-service-providers/" + "https://support.dnsimple.com/articles/caa-record/#whats-a-caa-record" ], "severity": "info", "metadata": { @@ -102781,10 +93683,7 @@ "type": "dns", "host": "mes-aides.1jeune1solution.beta.gouv.fr.", "matched-at": "mes-aides.1jeune1solution.beta.gouv.fr", - "extracted-results": [ - "\"google-site-verification=HPmBmQL1wAjNXTwozfdLx1SVDAacoObm-CFsvx53DzY\"" - ], - "timestamp": "2024-07-21T07:49:50.772290158Z", + "timestamp": "2024-07-28T08:00:59.070386209Z", "matcher-status": true }, { @@ -102824,7 +93723,7 @@ "host": "https://mes-aides.1jeune1solution.beta.gouv.fr", "matched-at": "https://mes-aides.1jeune1solution.beta.gouv.fr", "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:50:00.239256844Z", + "timestamp": "2024-07-28T08:01:10.042000318Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://mes-aides.1jeune1solution.beta.gouv.fr'", "matcher-status": true }, @@ -102856,7 +93755,7 @@ "nginx/1.18.0" ], "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:50:04.421666652Z", + "timestamp": "2024-07-28T08:01:10.050291221Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://mes-aides.1jeune1solution.beta.gouv.fr'", "matcher-status": true }, @@ -102884,7 +93783,7 @@ "host": "https://mes-aides.1jeune1solution.beta.gouv.fr", "matched-at": "https://mes-aides.1jeune1solution.beta.gouv.fr", "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:50:26.237240383Z", + "timestamp": "2024-07-28T08:01:37.248185346Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://mes-aides.1jeune1solution.beta.gouv.fr'", "matcher-status": true }, @@ -102916,12 +93815,12 @@ "max-request": 1 } }, - "matcher-name": "content-security-policy", + "matcher-name": "x-content-type-options", "type": "http", "host": "https://mes-aides.1jeune1solution.beta.gouv.fr", "matched-at": "https://mes-aides.1jeune1solution.beta.gouv.fr", "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:50:35.377828619Z", + "timestamp": "2024-07-28T08:01:46.7511626Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://mes-aides.1jeune1solution.beta.gouv.fr'", "matcher-status": true }, @@ -102953,12 +93852,12 @@ "max-request": 1 } }, - "matcher-name": "permissions-policy", + "matcher-name": "x-permitted-cross-domain-policies", "type": "http", "host": "https://mes-aides.1jeune1solution.beta.gouv.fr", "matched-at": "https://mes-aides.1jeune1solution.beta.gouv.fr", "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:50:35.37787744Z", + "timestamp": "2024-07-28T08:01:46.751203967Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://mes-aides.1jeune1solution.beta.gouv.fr'", "matcher-status": true }, @@ -102990,12 +93889,12 @@ "max-request": 1 } }, - "matcher-name": "x-content-type-options", + "matcher-name": "referrer-policy", "type": "http", "host": "https://mes-aides.1jeune1solution.beta.gouv.fr", "matched-at": "https://mes-aides.1jeune1solution.beta.gouv.fr", "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:50:35.377897297Z", + "timestamp": "2024-07-28T08:01:46.751223203Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://mes-aides.1jeune1solution.beta.gouv.fr'", "matcher-status": true }, @@ -103027,12 +93926,12 @@ "max-request": 1 } }, - "matcher-name": "referrer-policy", + "matcher-name": "cross-origin-embedder-policy", "type": "http", "host": "https://mes-aides.1jeune1solution.beta.gouv.fr", "matched-at": "https://mes-aides.1jeune1solution.beta.gouv.fr", "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:50:35.377913468Z", + "timestamp": "2024-07-28T08:01:46.751239964Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://mes-aides.1jeune1solution.beta.gouv.fr'", "matcher-status": true }, @@ -103069,7 +93968,7 @@ "host": "https://mes-aides.1jeune1solution.beta.gouv.fr", "matched-at": "https://mes-aides.1jeune1solution.beta.gouv.fr", "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:50:35.377932573Z", + "timestamp": "2024-07-28T08:01:46.751257897Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://mes-aides.1jeune1solution.beta.gouv.fr'", "matcher-status": true }, @@ -103101,12 +94000,12 @@ "max-request": 1 } }, - "matcher-name": "x-frame-options", + "matcher-name": "cross-origin-resource-policy", "type": "http", "host": "https://mes-aides.1jeune1solution.beta.gouv.fr", "matched-at": "https://mes-aides.1jeune1solution.beta.gouv.fr", "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:50:35.377950827Z", + "timestamp": "2024-07-28T08:01:46.751272775Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://mes-aides.1jeune1solution.beta.gouv.fr'", "matcher-status": true }, @@ -103138,12 +94037,12 @@ "max-request": 1 } }, - "matcher-name": "x-permitted-cross-domain-policies", + "matcher-name": "content-security-policy", "type": "http", "host": "https://mes-aides.1jeune1solution.beta.gouv.fr", "matched-at": "https://mes-aides.1jeune1solution.beta.gouv.fr", "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:50:35.37796845Z", + "timestamp": "2024-07-28T08:01:46.751286109Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://mes-aides.1jeune1solution.beta.gouv.fr'", "matcher-status": true }, @@ -103175,12 +94074,12 @@ "max-request": 1 } }, - "matcher-name": "clear-site-data", + "matcher-name": "permissions-policy", "type": "http", "host": "https://mes-aides.1jeune1solution.beta.gouv.fr", "matched-at": "https://mes-aides.1jeune1solution.beta.gouv.fr", "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:50:35.377983839Z", + "timestamp": "2024-07-28T08:01:46.751299143Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://mes-aides.1jeune1solution.beta.gouv.fr'", "matcher-status": true }, @@ -103212,12 +94111,12 @@ "max-request": 1 } }, - "matcher-name": "cross-origin-embedder-policy", + "matcher-name": "x-frame-options", "type": "http", "host": "https://mes-aides.1jeune1solution.beta.gouv.fr", "matched-at": "https://mes-aides.1jeune1solution.beta.gouv.fr", "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:50:35.377999287Z", + "timestamp": "2024-07-28T08:01:46.751311917Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://mes-aides.1jeune1solution.beta.gouv.fr'", "matcher-status": true }, @@ -103249,12 +94148,12 @@ "max-request": 1 } }, - "matcher-name": "cross-origin-resource-policy", + "matcher-name": "clear-site-data", "type": "http", "host": "https://mes-aides.1jeune1solution.beta.gouv.fr", "matched-at": "https://mes-aides.1jeune1solution.beta.gouv.fr", "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:50:35.378014265Z", + "timestamp": "2024-07-28T08:01:46.751325462Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://mes-aides.1jeune1solution.beta.gouv.fr'", "matcher-status": true }, @@ -103283,7 +94182,7 @@ "host": "https://mes-aides.1jeune1solution.beta.gouv.fr", "matched-at": "https://mes-aides.1jeune1solution.beta.gouv.fr/robots.txt", "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:50:45.160728659Z", + "timestamp": "2024-07-28T08:01:56.973751611Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://mes-aides.1jeune1solution.beta.gouv.fr/robots.txt'", "matcher-status": true }, @@ -103312,7 +94211,7 @@ "host": "https://mes-aides.1jeune1solution.beta.gouv.fr", "matched-at": "https://mes-aides.1jeune1solution.beta.gouv.fr/robots.txt", "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:50:45.16995628Z", + "timestamp": "2024-07-28T08:01:56.978513231Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://mes-aides.1jeune1solution.beta.gouv.fr/robots.txt'", "matcher-status": true }, @@ -103352,7 +94251,7 @@ "host": "https://mes-aides.1jeune1solution.beta.gouv.fr", "matched-at": "https://mes-aides.1jeune1solution.beta.gouv.fr/", "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:50:58.137104496Z", + "timestamp": "2024-07-28T08:02:10.556085307Z", "curl-command": "curl -X 'POST' -d '_=' -H 'Content-Type: application/x-www-form-urlencoded' -H 'Host: mes-aides.1jeune1solution.beta.gouv.fr' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://mes-aides.1jeune1solution.beta.gouv.fr/'", "matcher-status": true }, @@ -103404,7 +94303,7 @@ "SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3" ], "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:51:18.618628747Z", + "timestamp": "2024-07-28T08:02:31.657744076Z", "matcher-status": true }, { @@ -103434,7 +94333,7 @@ "Let's Encrypt" ], "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:51:20.004047118Z", + "timestamp": "2024-07-28T08:02:33.11799017Z", "matcher-status": true }, { @@ -103465,7 +94364,7 @@ "www.mes-aides.1jeune1solution.beta.gouv.fr" ], "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:51:20.004159718Z", + "timestamp": "2024-07-28T08:02:33.118101857Z", "matcher-status": true }, { @@ -103496,7 +94395,7 @@ "tls12" ], "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:51:21.611231789Z", + "timestamp": "2024-07-28T08:02:34.897062094Z", "matcher-status": true }, { @@ -103527,7 +94426,7 @@ "tls13" ], "ip": "5.135.137.147", - "timestamp": "2024-07-21T07:51:21.784009098Z", + "timestamp": "2024-07-28T08:02:35.09963118Z", "matcher-status": true } ], @@ -103535,7 +94434,7 @@ { "requestedUrl": "https://mes-aides.1jeune1solution.beta.gouv.fr/", "finalUrl": "https://mes-aides.1jeune1solution.beta.gouv.fr/", - "fetchTime": "2024-07-21T07:47:29.149Z", + "fetchTime": "2024-07-28T07:59:10.280Z", "runWarnings": [], "categories": { "performance": { @@ -103577,49 +94476,49 @@ "description": "Collects all available metrics.", "score": null, "scoreDisplayMode": "informative", - "numericValue": 6242, + "numericValue": 6118, "numericUnit": "millisecond", "details": { "type": "debugdata", "items": [ { - "firstContentfulPaint": 2726, - "firstMeaningfulPaint": 2804, - "largestContentfulPaint": 2978, - "firstCPUIdle": 6242, - "interactive": 6242, - "speedIndex": 3954, + "firstContentfulPaint": 2723, + "firstMeaningfulPaint": 2803, + "largestContentfulPaint": 2976, + "firstCPUIdle": 6118, + "interactive": 6118, + "speedIndex": 3999, "estimatedInputLatency": 13, - "totalBlockingTime": 140, - "maxPotentialFID": 116, - "cumulativeLayoutShift": 0.03770471530490452, + "totalBlockingTime": 144, + "maxPotentialFID": 120, + "cumulativeLayoutShift": 0.04593315972222222, "cumulativeLayoutShiftAllFrames": 0, "observedTimeOrigin": 0, - "observedTimeOriginTs": 376109369, + "observedTimeOriginTs": 374393874, "observedNavigationStart": 0, - "observedNavigationStartTs": 376109369, - "observedFirstPaint": 798, - "observedFirstPaintTs": 376907615, - "observedFirstContentfulPaint": 798, - "observedFirstContentfulPaintTs": 376907615, - "observedFirstMeaningfulPaint": 798, - "observedFirstMeaningfulPaintTs": 376907615, - "observedLargestContentfulPaint": 798, - "observedLargestContentfulPaintTs": 376907615, - "observedTraceEnd": 2799, - "observedTraceEndTs": 378908097, - "observedLoad": 1475, - "observedLoadTs": 377584754, - "observedDomContentLoaded": 758, - "observedDomContentLoadedTs": 376867735, - "observedCumulativeLayoutShift": 0.03770471530490452, + "observedNavigationStartTs": 374393874, + "observedFirstPaint": 830, + "observedFirstPaintTs": 375224224, + "observedFirstContentfulPaint": 830, + "observedFirstContentfulPaintTs": 375224224, + "observedFirstMeaningfulPaint": 830, + "observedFirstMeaningfulPaintTs": 375224224, + "observedLargestContentfulPaint": 830, + "observedLargestContentfulPaintTs": 375224224, + "observedTraceEnd": 2896, + "observedTraceEndTs": 377289730, + "observedLoad": 1542, + "observedLoadTs": 375935601, + "observedDomContentLoaded": 791, + "observedDomContentLoadedTs": 375184683, + "observedCumulativeLayoutShift": 0.04593315972222222, "observedCumulativeLayoutShiftAllFrames": 0, - "observedFirstVisualChange": 808, - "observedFirstVisualChangeTs": 376917369, - "observedLastVisualChange": 1508, - "observedLastVisualChangeTs": 377617369, - "observedSpeedIndex": 873, - "observedSpeedIndexTs": 376982253 + "observedFirstVisualChange": 841, + "observedFirstVisualChangeTs": 375234874, + "observedLastVisualChange": 1574, + "observedLastVisualChangeTs": 375967874, + "observedSpeedIndex": 905, + "observedSpeedIndexTs": 375298654 }, { "lcpInvalidated": false @@ -103641,19 +94540,19 @@ "numScripts": 6, "numStylesheets": 4, "numFonts": 3, - "numTasks": 837, + "numTasks": 842, "numTasksOver10ms": 7, "numTasksOver25ms": 2, "numTasksOver50ms": 1, "numTasksOver100ms": 0, "numTasksOver500ms": 0, - "rtt": 59.784, - "throughput": 15060336.723521844, - "maxRtt": 84.597, - "maxServerLatency": 41.53200000000002, - "totalByteWeight": 995268, - "totalTaskTime": 311.33899999999835, - "mainDocumentTransferSize": 1870 + "rtt": 64.031, + "throughput": 12462671.24145334, + "maxRtt": 87.734, + "maxServerLatency": 31.921999999999997, + "totalByteWeight": 995244, + "totalTaskTime": 307.080999999998, + "mainDocumentTransferSize": 1869 } ] } @@ -103675,7 +94574,6 @@ "sonarcloud": null, "dsfr": null, "summary": { - "httpGrade": "C", "testsslExpireSoon": false, "testsslExpireDate": "2024-09-24T10:21:00.000Z", "testsslGrade": "A+",