Scouts et Guides de France – L'aventure par nature

HTTPS

TARGET_ANALYSIS

sgdf.fr

IP: 0.0.0.0

ASN: AS0

A comprehensive security and network analysis report for sgdf.fr. Server: nginx.

Primary Port: 443
Scan Time: 4/12/2026, 7:28:19 PM
Shareable Report Link: https://sechttp.com/scan/sgdf.fr

Detailed Security Analysis

Attack Path & DDoS Defense Analysis

Attacker

L4 Traffic

L7 Traffic

AS0 (nginx POP)

L4 Defended

L7 Bypassed

L4 Blocked

L7 Traffic

Your Server

Defense Summary

While nginx provides robust protection against Layer 4 (network-level) attacks, your server remains potentially vulnerable to sophisticated Layer 7 (application-level) attacks that can bypass standard CDN defenses. Additional WAF rules and application-side security measures are recommended.

Layer 4 Defense

nginx provides robust SYN flood, UDP amplification, and volumetric attack protection at the network edge.

Layer 7 Vulnerabilities

Application-layer attacks targeting 0 exposed API endpoints require additional WAF rules and rate limiting.

Server Information Disclosure

LOW

INFO-001

Description

The server is disclosing its software type: nginx. This can help attackers identify potential vulnerabilities.

Recommendation

Configure your web server to hide or modify the Server header to prevent information disclosure.

Missing X-Frame-Options Header

MEDIUM

SEC-002

Description

The site is not protected against clickjacking attacks.

Recommendation

Add the X-Frame-Options header with value 'DENY' or 'SAMEORIGIN' to prevent clickjacking.

Sensitive Information Exposure in JavaScript

HIGH

JS-001

Description

Found 12 potentially sensitive variables exposed in client-side JavaScript code.

Recommendation

Review and remove sensitive information from client-side code. Use environment variables and server-side processing for sensitive data.

Currently Testing

No fuzzing data available for this scan.

Port Scan Results

   Port Service Status Version 
HTTP  CLOSED   -  
HTTPS  OPEN   TLS 1.3  
SSH  FILTERED   -  
MySQL  CLOSED   -  
  

Port	Service	Status	Version
80	HTTP	CLOSED	-
443	HTTPS	OPEN	TLS 1.3
22	SSH	FILTERED	-
3306	MySQL	CLOSED	-

HTTP Headers Analysis

date: Sun, 12 Apr 2026 19:28:07 GMT 
link: <https://sgdf.fr/wp-json/>; rel="https://api.w.org/", <https://sgdf.fr/wp-json/wp/v2/pages/3770>; rel="alternate"; title="JSON"; type="application/json", <https://sgdf.fr/>; rel=shortlink 
vary: Accept-Encoding 
server: nginx 
connection: keep-alive 
content-type: text/html; charset=UTF-8 
front-end-https: on 
transfer-encoding: chunked 
strict-transport-security: max-age=31536000; includeSubDomains; preload 

Currently Testing

Peering information is being analyzed.

Currently Testing

Internet Exchange data is being collected.

JavaScript Analysis

Security Analysis Alert

Client-side code analysis has identified potential security vulnerabilities and information disclosure risks.

Exposed JavaScript Variables

12 Found

Variables exposed in client-side code that may contain sensitive information

# Security Assessment: Variable Exposure Analysis
 
LEAK
 
key
 mount 

Risk: Information disclosure via client-side exposure
 
LEAK
 
url
 ajaxurl 

Risk: Information disclosure via client-side exposure
 
LEAK
 
phone
 ).concat(e.properties.telephone, 

Risk: Information disclosure via client-side exposure
 
LEAK
 
access
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
domain
 ).concat(r, 

Risk: Information disclosure via client-side exposure
 
LEAK
 
mailto
 ).concat(e.properties.courriel.toLowerCase(), 

Risk: Information disclosure via client-side exposure
 
LEAK
 
iconUrl
 /wp-content/themes/sgdf/assets/images/elements/markers/marker_audace_active.webp 

Risk: Information disclosure via client-side exposure
 
LEAK
 
Keyboard
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
nodeValue
 n 

Risk: Information disclosure via client-side exposure
 
LEAK
 
wrapInner
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
statusCode
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
searchClient
 t 

Risk: Information disclosure via client-side exposure
 
Total: 12 exposed variables found

API Domain Analysis

5 Domains

External API domains discovered in client-side code

EXTERNAL_API_DOMAIN

ws.sgdf.fr

Reachable

HTTPS Enabled

Security Note: