content-security-policy

Content Security Policy (CSP) header not implemented

cookies

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

redirection

Initial redirection from HTTP to HTTPS is to a different host, preventing HSTS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, and external scripts are loaded over HTTP or use protocol-relative URLs via src="//..."

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) header not implemented

x-xss-protection

Deprecated X-XSS-Protection header set to "1; mode=block"

Diagnostics

Metrics

SPF Record - Detection

A DNS TXT record was detected. The TXT record lets a domain admin leave notes on a DNS server.

DNS TXT Record Detected

An MX record was detected. MX records direct emails to a mail exchange server.

MX Record Detection

A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.

CAA Record

An NS record was detected. An NS record delegates a subdomain to a set of name servers.

NS Record Detection

A template to detect HTML Forms in page response.


Form Detection

RDAP (Registration Data Access Protocol) is a standard defined by the IETF to replace the whois protocol
in queries for information about Internet resource records such as domain names, IP addresses, and ASNs.


RDAP WHOIS

Checks if script tags within the HTML response have Subresource Integrity implemented via the integrity attribute


Missing Subresource Integrity

WordPress Detect

Extract the issuer's organization from the target's certificate. Issuers are entities which sign and distribute certificates.


Detect SSL Certificate Issuer

Extract the Subject Alternative Name (SAN) from the target's certificate. SAN facilitates the usage of additional hostnames with the same certificate.


SSL DNS Names

TLS version detection is a security process used to determine the version of the Transport Layer Security (TLS) protocol used by a computer or server.
It is important to detect the TLS version in order to ensure secure communication between two computers or servers.


Impact	Description	Documentation
-50		Doc Subresource Integrity.
-25		Doc Content Security Policy. L'extension github.com/april/laboratory permet de générer la CSP pour votre application.
-20		Doc header X-Frame-Options.
-5		-

https://certificationprofessionnelle.fr

Mozilla HTTP observatoryenviron 7 heures

SSL

Grade capped to A. HSTS is not offered

Expiration : 17/06/2025

Nucleienviron 6 heures

Séverité	Name	Matcher
info	SPF Record - Detection	spf-record-detect
info	DNS TXT Record Detected	txt-fingerprint
info	MX Record Detection	mx-fingerprint
info	CAA Record	caa-fingerprint
info	NS Record Detection	nameserver-fingerprint
info	Form Detection	form-detection
info	RDAP WHOIS	rdap-whois
info	RDAP WHOIS	rdap-whois
info	RDAP WHOIS	rdap-whois
info	RDAP WHOIS	rdap-whois
info	RDAP WHOIS	rdap-whois
info	RDAP WHOIS	rdap-whois
info	RDAP WHOIS	rdap-whois
info	RDAP WHOIS	rdap-whois
info	RDAP WHOIS	rdap-whois
info	RDAP WHOIS	rdap-whois
info	RDAP WHOIS	rdap-whois
info	RDAP WHOIS	rdap-whois
info	Missing Subresource Integrity	missing-sri
info	WordPress Detect	wordpress-detect
info	Detect SSL Certificate Issuer	ssl-issuer
info	SSL DNS Names	ssl-dns-names
info	TLS Version - Detect	tls-version
info	TLS Version - Detect	tls-version