Diagnostics

Metrics

http

A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.

CAA Record

Some nginx servers have the version on the response header. Useful when you need to find specific CVEs on your targets.

Nginx version detect

Wappalyzer Technology Detection

This template searches for missing HTTP security headers. The impact of these missing headers can vary.


HTTP Missing Security Headers

Checks if external script and stylesheet tags in the HTML response are missing the Subresource Integrity (SRI) attribute.


Missing Subresource Integrity

Detects Matomo (formerly Piwik) Web Analytics & RUM artifacts. Identifies Standard Tracking, Image Tracking, Tag Manager, and Cloud instances using strict matching.


Matomo (Piwik) RUM - Tech Detect

WAF Detection

OpenSSH Service - Detect

Extract the issuer's organization from the target's certificate. Issuers are entities which sign and distribute certificates.


Detect SSL Certificate Issuer

Extract the Subject Alternative Name (SAN) from the target's certificate. SAN facilitates the usage of additional hostnames with the same certificate.


SSL DNS Names

TLS version detection is a security process used to determine the version of the Transport Layer Security (TLS) protocol used by a computer or server.
It is important to detect the TLS version in order to ensure secure communication between two computers or servers.


TLS Version - Detect

_pk_id.1.c83d

_pk_ses.1.c83d

Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.

Ubuntu

Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.

Nginx

Matomo Analytics is a free and open-source web analytics application, that runs on a PHP/MySQL web-server.

Matomo Analytics

JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.

jsDelivr

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

Progressive Web Apps (PWAs) are web apps built and enhanced with modern APIs to deliver enhanced capabilities, reliability, and installability while reaching anyone, anywhere, on any device, all with a single codebase.

Percentage of responses with status code 2xx

Percentage of responses with status code 3xx

Percentage of responses with status code 4xx

Percentage of endpoints with content type application/javascript

Percentage of endpoints with content type application/octet-stream

Percentage of endpoints with content type application/x-redhat-package-manager

Percentage of endpoints with content type image/png

Percentage of endpoints with content type text/css

Percentage of endpoints with content type text/html

name	domain	httpOnly	secure
_pk_id.1.c83d	diagcps.eservices.esante.gouv.fr	❌	❌
_pk_ses.1.c83d	diagcps.eservices.esante.gouv.fr	❌	❌

type	url	details
jsdelivr	cdn.jsdelivr.net/npm/@gou...	Host files locally
jsdelivr	cdn.jsdelivr.net/npm/@gou...	Host files locally
jsdelivr	cdn.jsdelivr.net/npm/@gou...	Host files locally
jsdelivr	cdn.jsdelivr.net/npm/@gou...	Host files locally
jsdelivr	cdn.jsdelivr.net/npm/@gou...	Host files locally
jsdelivr	cdn.jsdelivr.net/npm/@gou...	Host files locally
jsdelivr	cdn.jsdelivr.net/npm/@gou...	Host files locally
jsdelivr	cdn.jsdelivr.net/npm/@gou...	Host files locally
jsdelivr	cdn.jsdelivr.net/npm/@gou...	Host files locally
jsdelivr	cdn.jsdelivr.net/npm/@gou...	Host files locally
jsdelivr	cdn.jsdelivr.net/npm/@gou...	Host files locally
jsdelivr	cdn.jsdelivr.net/npm/@gou...	Host files locally
jsdelivr	cdn.jsdelivr.net/npm/@gou...	Host files locally

flag	country	hostname	ip	city
	France	diagcps.eservices.esante.gouv.fr	51.15.255.124	Paris
	États-Unis	cdn.jsdelivr.net	151.101.129.229	?

https://diagcps.eservices.esante.gouv.fr

LightHouse

https://diagcps.eservices.esante.gouv.fr/environ 3 heures

Système de design de l'état

Eco-index

GES: 1.28 gramme(s) par visite

Eau : 1.92 cl par visite

Ça veut dire quoi ?

Cookiesenviron 3 heures

Scripts tiersenviron 3 heures

Déclaration de mise en accessibilité

Conformité partielle