Diagnostics

Metrics

A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.

CAA Record

Allowed Options Method

Setting the XSS-Protection header is deprecated. Setting the header to anything other than `0` can actually introduce an XSS vulnerability.

XSS-Protection Header - Cross-Site Scripting

Checks whether cookies in the HTTP response contain the HttpOnly attribute. If the HttpOnly flag is set, it means that the cookie is HTTP-only


Cookies without HttpOnly attribute - Detect

Checks whether cookies in the HTTP response contain the Secure attribute. If the Secure flag is set, it means that the cookie can only be transmitted over HTTPS


Cookies without Secure attribute - Detect

This template searches for missing HTTP security headers. The impact of these missing headers can vary.


HTTP Missing Security Headers

TLS version detection is a security process used to determine the version of the Transport Layer Security (TLS) protocol used by a computer or server.
It is important to detect the TLS version in order to ensure secure communication between two computers or servers.


TLS Version - Detect

Extract the issuer's organization from the target's certificate. Issuers are entities which sign and distribute certificates.


Detect SSL Certificate Issuer

Extract the Subject Alternative Name (SAN) from the target's certificate. SAN facilitates the usage of additional hostnames with the same certificate.


SSL DNS Names

YOMe1h3tgHKNQxhV6V7n5g__

default-src 'none' ; connect-src http: https: ws: ;  font-src 'self' http: https: ws: data: ; img-src 'self' http: https: ws: data: ; media-src 'self' https: http: ws:; script-src 'self' http: https: ws:; style-src 'self' 'unsafe-inline' http: https: ws:;

site SCAE RGA

TYPO3 is a free and open-source Web content management system written in PHP.

TYPO3 CMS

PHP is a general-purpose scripting language used for web development.

core-js is a modular standard library for JavaScript, with polyfills for cutting-edge ECMAScript features.

core-js

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

Webpack is an open-source JavaScript module bundler.

Webpack

Progressive Web Apps (PWAs) are web apps built and enhanced with modern APIs to deliver enhanced capabilities, reliability, and installability while reaching anyone, anywhere, on any device, all with a single codebase.

Module Federation is a webpack technology for dynamically loading parts of other independently deployed builds.

flag	country	hostname	ip	city
	France	www.sca-rga.interieur.gouv.fr	143.196.253.130	?

https://www.sca-rga.interieur.gouv.fr

LightHouse

https://www.sca-rga.interieur.gouv.fr/environ 1 heure

Système de design de l'état

Eco-index

GES: 1.32 gramme(s) par visite

Eau : 1.98 cl par visite

Ça veut dire quoi ?

Cookiesenviron 1 heure

Scripts tiersenviron 1 heure

Déclaration de mise en accessibilité

name	domain	httpOnly	secure
YOMe1h3tgHKNQxhV6V7n5g__	www.sca-rga.interieur.gouv.fr	❌	❌