Recette de cuisine : 63 000 recettes de cuisine française et du monde

HTTPS

ANÁLISIS_OBJETIVO

cuisine.journaldesfemmes.fr

IP: 0.0.0.0

ASN: AS0

Un informe completo de análisis de seguridad y red para cuisine.journaldesfemmes.fr.

Puerto Principal: 443
Tiempo de Escaneo: 4/12/2026, 5:31:14 PM
Enlace de Informe Compartible: https://sechttp.com/scan/cuisine.journaldesfemmes.fr

Análisis de Seguridad Detallado

Análisis de Ruta de Ataque y Defensa contra DDoS

Atacante

Tráfico L4

Tráfico L7

AS0 (Unknown POP)

L4 Defendido

L7 Evadido

L4 Bloqueado

Tráfico L7

Su Servidor

Resumen de Defensa

Aunque Unknown proporciona una protección robusta contra ataques de capa 4 (nivel de red), su servidor sigue siendo potencialmente vulnerable a ataques sofisticados de capa 7 (nivel de aplicación) que pueden eludir las defensas estándar de CDN. Se recomiendan reglas WAF adicionales y medidas de seguridad en el lado de la aplicación.

Defensa de Capa 4

Unknown proporciona una protección robusta contra inundaciones SYN, amplificación UDP y ataques volumétricos en el borde de la red.

Vulnerabilidades de Capa 7

Los ataques de capa de aplicación dirigidos a puntos finales de API expuestos de 5 requieren reglas WAF adicionales y limitación de velocidad.

Encabezado HSTS Faltante o Inválido

MEDIUM

SEC-001

Descripción

El encabezado Strict-Transport-Security no está configurado correctamente, dejando el sitio vulnerable a ataques de tipo man-in-the-middle.

Recomendación

Implemente HSTS agregando el encabezado Strict-Transport-Security con un valor max-age adecuado para forzar conexiones HTTPS.

Exposición de Información Sensible en JavaScript

HIGH

JS-001

Descripción

Se encontraron 66 variables potencialmente sensibles expuestas en el código JavaScript del lado del cliente.

Recomendación

Revise y elimine la información sensible del código del lado del cliente. Use variables de entorno y procesamiento del lado del servidor para datos sensibles.

root@sechttp: /var/log/fuzz

 root@sechttp : ~ $ 
 >  [Code: 200]  
/api/microforum/avis/?id= [FUGA SENSIBLE]  
 >  [Code: 403]  
/api/microforum/avis/  [PROHIBIDO] 
 >  [Code: 404]  
/api/tagconf/   
 >  [Code: 200]  
/api/block/ [FUGA SENSIBLE]  
 >  [Code: 403]  
/api/contentconf/  [PROHIBIDO] 
 [+] Escaneo completado. Encontrado 2 fugas potenciales. 
root@sechttp:~$

Resultados del Escaneo de Puertos

   Puerto Servicio Estado Versión 
HTTP  CERRADO   -  
HTTPS  ABIERTO   TLS 1.3  
SSH  FILTRADO   -  
MySQL  CERRADO   -  
  

Puerto	Servicio	Estado	Versión
80	HTTP	CERRADO	-
443	HTTPS	ABIERTO	TLS 1.3
22	SSH	FILTRADO	-
3306	MySQL	CERRADO	-

Análisis de Encabezados HTTP

date: Sun, 12 Apr 2026 17:31:06 GMT 
pragma: no-cache 
expires: Sun, 12 Apr 2026 17:31:06 GMT 
x-ccm-lm: 1776014563 
connection: keep-alive 
x-served-by: lxc-varnish-jdf-04 
content-type: text/html; charset=UTF-8 
cache-control: max-age=0, no-cache 
last-modified: Sun, 12 Apr 2026 17:26:28 GMT 
content-length: 229085 
x-ccm-cache-tag: jdf_ctag_91 
x-frame-options: sameorigin 
x-www-served-by: vm_k8s_prod_21 
content-language: fr 
x-cache-esi-debug: Forwarded 
content-security-policy: frame-ancestors 'self' 

Actualmente en Pruebas

La información de peering está siendo analizada.

Actualmente en Pruebas

Los datos de puntos de intercambio de Internet están siendo recolectados.

Análisis de JavaScript

Security Analysis Alert

Client-side code analysis has identified potential security vulnerabilities and information disclosure risks.

Variables de JavaScript Expuestas

66 Found

Variables exposed in client-side code that may contain sensitive information

# Security Assessment: Variable Exposure Analysis
 
LEAK
 
API
 ,e)});else{console.warn( 

Risk: Information disclosure via client-side exposure
 
LEAK
 
dev
 null 

Risk: Information disclosure via client-side exposure
 
LEAK
 
key
 getTranslation 

Risk: Information disclosure via client-side exposure
 
LEAK
 
url
 /api/contentconf/ 

Risk: Information disclosure via client-side exposure
 
LEAK
 
code
 MODULE_NOT_FOUND 

Risk: Information disclosure via client-side exposure
 
LEAK
 
keys
 n 

Risk: Information disclosure via client-side exposure
 
LEAK
 
test
 \x3c!--@MOD:widget@{ 

Risk: Information disclosure via client-side exposure
 
LEAK
 
email
 void 

Risk: Information disclosure via client-side exposure
 
LEAK
 
keyup
 1 

Risk: Information disclosure via client-side exposure
 
LEAK
 
token
 t 

Risk: Information disclosure via client-side exposure
 
LEAK
 
COOKIE
 D, dd M yy 

Risk: Information disclosure via client-side exposure
 
LEAK
 
access
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
author
 o 

Risk: Information disclosure via client-side exposure
 
LEAK
 
client
 +e.clientId+ 

Risk: Information disclosure via client-side exposure
 
LEAK
 
domain
 null 

Risk: Information disclosure via client-side exposure
 
LEAK
 
getUrl
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
mailto
 redac 

Risk: Information disclosure via client-side exposure
 
LEAK
 
baseUrl
 // 

Risk: Information disclosure via client-side exposure
 
LEAK
 
dataKey
 data-channelId 

Risk: Information disclosure via client-side exposure
 
LEAK
 
fileAPI
 +E);var T,S=(j||C)&&!E;!1!==t.iframe&&(t.iframe||S)?t.closeKeepAlive?e.get(t.closeKeepAlive,function(){T=N(y)}):T=N(y):T=(j||C)&&E?M(y):e.ajax(t),p.removeData( 

Risk: Information disclosure via client-side exposure
 
LEAK
 
keyCode
 e 

Risk: Information disclosure via client-side exposure
 
LEAK
 
keydown
 1 

Risk: Information disclosure via client-side exposure
 
LEAK
 
sitekey
 6LfcECcUAAAAANw9v7LQYqYsrkQmseAxos7r8wQP 

Risk: Information disclosure via client-side exposure
 
LEAK
 
urlHash
 window 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_doKeyUp
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_keydown
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
adDomain
 null 

Risk: Information disclosure via client-side exposure
 
LEAK
 
b.domain
 <empty_value> 

Risk: Information disclosure via client-side exposure
 
LEAK
 
charCode
 e 

Risk: Information disclosure via client-side exposure
 
LEAK
 
clientId
 breakingnews 

Risk: Information disclosure via client-side exposure
 
LEAK
 
keypress
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
shareUrl
 encodeURIComponent 

Risk: Information disclosure via client-side exposure
 
LEAK
 
snapItem
 s 

Risk: Information disclosure via client-side exposure
 
LEAK
 
urlLabel
 m 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_isNumber
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_keyEvent
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
i.keydown
 _keydown 

Risk: Information disclosure via client-side exposure
 
LEAK
 
wrapInner
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_doKeyDown
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_onKeyDown
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
b.clientId
 <empty_value> 

Risk: Information disclosure via client-side exposure
 
LEAK
 
contentUrl
 a 

Risk: Information disclosure via client-side exposure
 
LEAK
 
statusCode
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_doKeyPress
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_tabKeydown
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
credentials
 include 

Risk: Information disclosure via client-side exposure
 
LEAK
 
facebookUrl
 a 

Risk: Information disclosure via client-side exposure
 
LEAK
 
numberFormat
 null 

Risk: Information disclosure via client-side exposure
 
LEAK
 
pinterestUrl
 a 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_panelKeyDown
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_panelKeydown
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
defaultDomain
 fc 

Risk: Information disclosure via client-side exposure
 
LEAK
 
getPublicPath
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
maxRatingKeys
 100 

Risk: Information disclosure via client-side exposure
 
LEAK
 
urlParameters
 window 

Risk: Information disclosure via client-side exposure
 
LEAK
 
getResourceUrl
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
numberOfMonths
 1 

Risk: Information disclosure via client-side exposure
 
LEAK
 
storageKeyName
 ccmratings 

Risk: Information disclosure via client-side exposure
 
LEAK
 
ratingKeysToDrop
 90 

Risk: Information disclosure via client-side exposure
 
LEAK
 
jPaginationNumber
 paginationNumber 

Risk: Information disclosure via client-side exposure
 
LEAK
 
pinterestMediaUrl
 a 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_getNumberOfMonths
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_closeOnClickOutside
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_intersectsWithSides
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
defaultOptions.dataKey
 data-channelId 

Risk: Information disclosure via client-side exposure
 
LEAK
 
getUrlForExternalResource
 function 

Risk: Information disclosure via client-side exposure
 
Total: 66 exposed variables found

Análisis de Dominios API

16 Domains

External API domains discovered in client-side code

EXTERNAL_API_DOMAIN

jqueryui.com

Reachable

HTTPS Enabled

Security Note: