content-security-policy

Content Security Policy (CSP) implemented with unsafe sources inside style-src. This includes 'unsafe-inline', data: or overly broad sources such as https:.

cookies

Cookies set without using the Secure flag, but transmission over HTTP prevented by HSTS

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

Referrer-Policy header set to "no-referrer", "same-origin", "strict-origin" or "strict-origin-when-cross-origin"

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) header set to SAMEORIGIN or DENY

x-xss-protection

Deprecated X-XSS-Protection header set to "0" (disabled)

default-src 'self';style-src 'self' 'unsafe-inline' https://genii-script.tolk.ai https://fonts.googleapis.com;script-src 'self' https://tag.aticdn.net https://*.ants.gouv.fr https://gva.et-gv.fr https://genii-script.tolk.ai 'nonce-9ae7b15e-9c5f-43eb-b636-b04528761f31';frame-src 'self' https://www.youtube.com/ https://www.dailymotion.com/;connect-src 'self' https://geo.api.gouv.fr https://*.xiti.com https://*.ants.gouv.fr https://genii-api.tolk.ai https://genii-messages.tolk.ai wss://genii-messages.tolk.ai;font-src 'self' https://fonts.gstatic.com data:;img-src 'self' https: data:;object-src 'none';base-uri 'self';form-action 'self'

Diagnostics

Metrics

An MX record was detected. MX records direct emails to a mail exchange server.

MX Record Detection

SPF Record - Detection

SPF records in DNS containing a PTR mechanism are spoofable.

Spoofable SPF Records with PTR Mechanism

A DNS TXT record was detected. The TXT record lets a domain admin leave notes on a DNS server.

DNS TXT Record Detected

A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.

CAA Record

DNS DMARC - Detect

An NS record was detected. An NS record delegates a subdomain to a set of name servers.

NS Record Detection

Checks whether cookies in the HTTP response contain the Secure attribute. If the Secure flag is set, it means that the cookie can only be transmitted over HTTPS


Cookies without Secure attribute - Detect

This template searches for missing HTTP security headers. The impact of these missing headers can vary.


HTTP Missing Security Headers

RDAP (Registration Data Access Protocol) is a standard defined by the IETF to replace the whois protocol
in queries for information about Internet resource records such as domain names, IP addresses, and ASNs.


RDAP WHOIS

Extract the issuer's organization from the target's certificate. Issuers are entities which sign and distribute certificates.


Detect SSL Certificate Issuer

Extract the Subject Alternative Name (SAN) from the target's certificate. SAN facilitates the usage of additional hostnames with the same certificate.


SSL DNS Names

TLS version detection is a security process used to determine the version of the Transport Layer Security (TLS) protocol used by a computer or server.
It is important to detect the TLS version in order to ensure secure communication between two computers or servers.


TLS Version - Detect

__uzmd

__uzmc

atauthority

atuserid

__uzme

__uzmb

__uzma

default-src 'self';style-src 'self' 'unsafe-inline' https://genii-script.tolk.ai https://fonts.googleapis.com;script-src 'self' https://tag.aticdn.net https://*.ants.gouv.fr https://gva.et-gv.fr https://genii-script.tolk.ai 'nonce-4928f62e-8079-4865-90df-4ff09eee6f37';frame-src 'self' https://www.youtube.com/ https://www.dailymotion.com/;connect-src 'self' https://geo.api.gouv.fr https://*.xiti.com https://*.ants.gouv.fr https://genii-api.tolk.ai https://genii-messages.tolk.ai wss://genii-messages.tolk.ai;font-src 'self' https://fonts.gstatic.com data:;img-src 'self' https: data:;object-src 'none';base-uri 'self';form-action 'self'

site de l'ANTS

MUI(formerly Material UI) is a simple and customisable component library to build faster, beautiful, and more accessible React applications.

React is an open-source JavaScript library for building user interfaces or UI components.

React

JSS is an authoring tool for CSS which allows you to use JavaScript to describe styles in a declarative, conflict-free and reusable way.

core-js is a modular standard library for JavaScript, with polyfills for cutting-edge ECMAScript features.

core-js

AT Internet Analyzer

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

Babel is a free and open-source transcompiler for writing next generation JavaScript.

Babel

Open Graph is a protocol that is used to integrate any web page into the social graph.

type	url	details
at-internet	tag.aticdn.net/611581/sma...	Ensure your TOS notify the AT internet usage
xiti	logs1412.xiti.com/hit.xit...	Use hosted Matomo instance

flag	country	hostname	ip	city
	Allemagne	ants.gouv.fr	66.22.33.160	Francfort-sur-le-Main
	États Unis	tag.aticdn.net	13.35.122.26	?
	États Unis	logs1412.xiti.com	18.238.193.55	?

https://ants.gouv.fr

LightHouse

https://ants.gouv.fr/environ 1 heure

Système de design de l'état

Eco-index

GES: 1.86 gramme(s) par visite

Eau : 2.79 cl par visite

Ça veut dire quoi ?

Cookiesenviron 1 heure

Scripts tiersenviron 1 heure

Déclaration de mise en accessibilité

Conformité partielle

name	domain	httpOnly	secure
__uzmd	ants.gouv.fr	✔️	❌
__uzmc	ants.gouv.fr	✔️	❌
atauthority	.ants.gouv.fr	❌	❌
atuserid	.ants.gouv.fr	❌	❌
__uzme	ants.gouv.fr	✔️	❌
__uzmb	ants.gouv.fr	✔️	❌
__uzma	ants.gouv.fr	✔️	❌