content-security-policy

Content Security Policy (CSP) header not implemented

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header not implemented

subresource-integrity

Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin

x-content-type-options

X-Content-Type-Options header not implemented

x-frame-options

X-Frame-Options (XFO) header not implemented

x-xss-protection

Deprecated X-XSS-Protection header not implemented

Diagnostics

Metrics

http

https

socks

pvuniwien

amqp

unknown

tcpwrapped

DNS SaaS Service Detection

A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.

CAA Record

Allowed Options Method

Some Apache servers have the version on the response header. The OpenSSL version can be also obtained

Apache Detection

FingerprintHub Technology Fingerprint tests run in nuclei.

FingerprintHub Technology Fingerprint

This template searches for missing HTTP security headers. The impact of these missing headers can vary.


HTTP Missing Security Headers

robots.txt endpoint prober

WAF Detection

Extract the issuer's organization from the target's certificate. Issuers are entities which sign and distribute certificates.


Detect SSL Certificate Issuer

Extract the Subject Alternative Name (SAN) from the target's certificate. SAN facilitates the usage of additional hostnames with the same certificate.


SSL DNS Names

TLS version detection is a security process used to determine the version of the Transport Layer Security (TLS) protocol used by a computer or server.
It is important to detect the TLS version in order to ensure secure communication between two computers or servers.


TLS Version - Detect

_pk_ses.147.204e

_pk_id.147.204e

Websites that have a shopping cart or checkout page, either using a known ecommerce platform or a custom solution.

Cart Functionality

TYPO3 is a free and open-source Web content management system written in PHP.

TYPO3 CMS

PHP is a general-purpose scripting language used for web development.

Apache is a free and open-source cross-platform web server software.

Apache HTTP Server

Matomo Analytics is a free and open-source web analytics application, that runs on a PHP/MySQL web-server.

Matomo Analytics

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

Cloudflare

Progressive Web Apps (PWAs) are web apps built and enhanced with modern APIs to deliver enhanced capabilities, reliability, and installability while reaching anyone, anywhere, on any device, all with a single codebase.

Open Graph is a protocol that is used to integrate any web page into the social graph.

name	domain	httpOnly	secure
_pk_ses.147.204e	www.conseiller-numerique.gouv.fr	❌	❌
_pk_id.147.204e	www.conseiller-numerique.gouv.fr	❌	❌

flag	country	hostname	ip	city
	France	www.conseiller-numerique.gouv.fr	46.252.181.103	?

https://www.conseiller-numerique.gouv.fr

LightHouse

https://www.conseiller-numerique.gouv.fr/environ 3 heures

Eco-index

GES: 1.62 gramme(s) par visite

Eau : 2.43 cl par visite

Ça veut dire quoi ?

Cookiesenviron 3 heures

Scripts tiersenviron 3 heures

Déclaration de mise en accessibilité

non-conforme