From 14413019b8039b7a73e46c6224d501986e7664b5 Mon Sep 17 00:00:00 2001 From: rhanka Date: Sun, 24 Mar 2024 01:05:38 +0000 Subject: [PATCH] update: https://deces.matchid.io --- .../aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/404.json | 24 +- .../http.json | 2 +- ...-aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlvLw==.html | 2 +- .../aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/lhr.json | 2170 +++++++++-------- .../nmapvuln.gnmap | 4 +- .../nmapvuln.html | 8 +- .../nmapvuln.nmap | 10 +- .../nmapvuln.xml | 14 +- .../nuclei.json | 207 +- .../screenshot.jpeg | Bin 164600 -> 147219 bytes .../testssl.csv | 332 +-- .../testssl.html | 32 +- .../testssl.json | 670 ++--- .../thirdparties.json | 100 +- .../aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/zap.html | 496 +--- .../aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/zap.json | 192 +- 16 files changed, 1838 insertions(+), 2425 deletions(-) diff --git a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/404.json b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/404.json index ddae255a..352532e5 100644 --- a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/404.json +++ b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/404.json @@ -16,7 +16,7 @@ "href": "https://deces.matchid.io/" }, "link": "https://deces.matchid.io/", - "line": "--2024-03-17 00:54:40-- https://deces.matchid.io/", + "line": "--2024-03-24 00:56:37-- https://deces.matchid.io/", "broken": false }, { @@ -35,7 +35,7 @@ "href": "https://deces.matchid.io/robots.txt" }, "link": "https://deces.matchid.io/robots.txt", - "line": "--2024-03-17 00:54:41-- https://deces.matchid.io/robots.txt", + "line": "--2024-03-24 00:56:38-- https://deces.matchid.io/robots.txt", "broken": false }, { @@ -54,7 +54,7 @@ "href": "https://deces.matchid.io/favicon.svg" }, "link": "https://deces.matchid.io/favicon.svg", - "line": "--2024-03-17 00:54:41-- https://deces.matchid.io/favicon.svg", + "line": "--2024-03-24 00:56:38-- https://deces.matchid.io/favicon.svg", "broken": false }, { @@ -73,7 +73,7 @@ "href": "https://deces.matchid.io/favicon-apple.png" }, "link": "https://deces.matchid.io/favicon-apple.png", - "line": "--2024-03-17 00:54:41-- https://deces.matchid.io/favicon-apple.png", + "line": "--2024-03-24 00:56:38-- https://deces.matchid.io/favicon-apple.png", "broken": false }, { @@ -92,7 +92,7 @@ "href": "https://deces.matchid.io/manifest.json" }, "link": "https://deces.matchid.io/manifest.json", - "line": "--2024-03-17 00:54:41-- https://deces.matchid.io/manifest.json", + "line": "--2024-03-24 00:56:39-- https://deces.matchid.io/manifest.json", "broken": false }, { @@ -111,7 +111,7 @@ "href": "https://deces.matchid.io/css/global.css" }, "link": "https://deces.matchid.io/css/global.css", - "line": "--2024-03-17 00:54:41-- https://deces.matchid.io/css/global.css", + "line": "--2024-03-24 00:56:39-- https://deces.matchid.io/css/global.css", "broken": false }, { @@ -130,7 +130,7 @@ "href": "https://deces.matchid.io/css/matchid.min.css" }, "link": "https://deces.matchid.io/css/matchid.min.css", - "line": "--2024-03-17 00:54:41-- https://deces.matchid.io/css/matchid.min.css", + "line": "--2024-03-24 00:56:39-- https://deces.matchid.io/css/matchid.min.css", "broken": false }, { @@ -149,7 +149,7 @@ "href": "https://deces.matchid.io/build/module/bundle.css" }, "link": "https://deces.matchid.io/build/module/bundle.css", - "line": "--2024-03-17 00:54:42-- https://deces.matchid.io/build/module/bundle.css", + "line": "--2024-03-24 00:56:39-- https://deces.matchid.io/build/module/bundle.css", "broken": false }, { @@ -168,7 +168,7 @@ "href": "https://deces.matchid.io/js/matchid.min.js" }, "link": "https://deces.matchid.io/js/matchid.min.js", - "line": "--2024-03-17 00:54:42-- https://deces.matchid.io/js/matchid.min.js", + "line": "--2024-03-24 00:56:39-- https://deces.matchid.io/js/matchid.min.js", "broken": false }, { @@ -187,7 +187,7 @@ "href": "https://deces.matchid.io/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js" }, "link": "https://deces.matchid.io/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js", - "line": "--2024-03-17 00:54:42-- https://deces.matchid.io/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js", + "line": "--2024-03-24 00:56:39-- https://deces.matchid.io/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js", "broken": false }, { @@ -206,7 +206,7 @@ "href": "https://deces.matchid.io/css/layers.svg" }, "link": "https://deces.matchid.io/css/layers.svg", - "line": "--2024-03-17 00:54:42-- https://deces.matchid.io/css/layers.svg", + "line": "--2024-03-24 00:56:39-- https://deces.matchid.io/css/layers.svg", "broken": false }, { @@ -225,7 +225,7 @@ "href": "https://deces.matchid.io/css/images/marker-icon.png" }, "link": "https://deces.matchid.io/css/images/marker-icon.png", - "line": "--2024-03-17 00:54:42-- https://deces.matchid.io/css/images/marker-icon.png", + "line": "--2024-03-24 00:56:40-- https://deces.matchid.io/css/images/marker-icon.png", "broken": false } ], diff --git a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/http.json b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/http.json index f1895b72..5df4a734 100644 --- a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/http.json +++ b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/http.json @@ -1 +1 @@ -{"url":"https://deces.matchid.io","algorithm_version":3,"end_time":"Sun, 17 Mar 2024 00:57:21 GMT","grade":"C+","hidden":false,"likelihood_indicator":"MEDIUM","response_headers":{"CF-Cache-Status":"DYNAMIC","CF-RAY":"8659073f19517209-SEA","Connection":"keep-alive","Content-Encoding":"gzip","Content-Security-Policy":"default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com","Content-Type":"text/html","Date":"Sun, 17 Mar 2024 00:57:20 GMT","Feature-Policy":"geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';","Last-Modified":"Wed, 06 Mar 2024 01:29:22 GMT","NEL":"{\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}","Referrer-Policy":"same-origin","Report-To":"{\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0bqTGOwqDHtIpUvCmnHvd%2BTSeRm0AQLSSiP9kxDSDcGsIQUzGoJp2Opvolh0nsACkcK6NqfW6z3FgBp7sY4AEwFvsUXrZdIxA%2Bc6Kx2uUfVoVF8zUgvtVhZ%2BJit9c%2Fpv7ptS\"}],\"group\":\"cf-nel\",\"max_age\":604800}","Server":"cloudflare","Strict-Transport-Security":"max-age=15552000; includeSubDomains; preload","Transfer-Encoding":"chunked","X-Content-Type-Options":"nosniff","X-Frame-Options":"*.matchid.io","X-XSS-Protection":"1; mode=block","alt-svc":"h3=\":443\"; ma=86400"},"scan_id":48950893,"score":60,"start_time":"Sun, 17 Mar 2024 00:57:19 GMT","state":"FINISHED","status_code":200,"tests_failed":2,"tests_passed":9,"tests_quantity":11,"details":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","output":{"data":{"connect-src":["region1.analytics.google.com","pagead2.googlesyndication.com","csi.gstatic.com","'self'","www.data.gouv.fr","www.google-analytics.com","analytics.google.com","cloudflareinsights.com","stats.g.doubleclick.net"],"default-src":["'self'"],"font-src":["'self'","data:"],"frame-src":["tpc.googlesyndication.com","www.google.com","matchid.io","'self'","google.com","googleads.g.doubleclick.net"],"img-src":["c.basemaps.cartocdn.com","b.basemaps.cartocdn.com","www.google.fr","pagead2.googlesyndication.com","a.basemaps.cartocdn.com","'self'","matchid.io","www.google-analytics.com","upload.wikimedia.org","stats.g.doubleclick.net"],"script-src":["tpc.googlesyndication.com","'unsafe-eval'","www.google.ca","www.googletagservices.com","adservice.google.fr","static.cloudflareinsights.com","www.google.com","ajax.cloudflare.com","fundingchoicesmessages.google.com","'self'","pagead2.googlesyndication.com","www.googletagmanager.com","www.google-analytics.com","'unsafe-inline'","analytics.google.com","partner.googleadservices.com","adservice.google.com"],"style-src":["https:","'self'","'unsafe-inline'"]},"http":true,"meta":false,"numPolicies":1,"policy":{"antiClickjacking":false,"defaultNone":false,"insecureBaseUri":true,"insecureFormAction":true,"insecureSchemeActive":false,"insecureSchemePassive":false,"strictDynamic":false,"unsafeEval":true,"unsafeInline":true,"unsafeInlineStyle":true,"unsafeObjects":false}},"pass":false,"result":"csp-implemented-with-unsafe-inline","score_description":"Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.","score_modifier":-20},"contribute":{"expectation":"contribute-json-only-required-on-mozilla-properties","name":"contribute","output":{"data":null},"pass":true,"result":"contribute-json-only-required-on-mozilla-properties","score_description":"Contribute.json isn't required on websites that don't belong to Mozilla","score_modifier":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","output":{"data":null,"sameSite":null},"pass":true,"result":"cookies-not-found","score_description":"No cookies detected","score_modifier":0},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","output":{"data":{"acao":null,"clientaccesspolicy":null,"crossdomain":null}},"pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"Content is not visible via cross-origin resource sharing (CORS) files or headers","score_modifier":0},"redirection":{"expectation":"redirection-to-https","name":"redirection","output":{"destination":"https://deces.matchid.io/","redirects":true,"route":["http://deces.matchid.io/","https://deces.matchid.io/"],"status_code":200},"pass":true,"result":"redirection-to-https","score_description":"Initial redirection is to HTTPS on same host, final destination is HTTPS","score_modifier":0},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","output":{"data":"same-origin","http":true,"meta":false},"pass":true,"result":"referrer-policy-private","score_description":"Referrer-Policy header set to \"no-referrer\", \"same-origin\", \"strict-origin\" or \"strict-origin-when-cross-origin\"","score_modifier":5},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","output":{"data":"max-age=15552000; includeSubDomains; preload","includeSubDomains":true,"max-age":15552000,"preload":true,"preloaded":false},"pass":true,"result":"hsts-implemented-max-age-at-least-six-months","score_description":"HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)","score_modifier":0},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","output":{"data":{"https://static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317":{"crossorigin":"anonymous","integrity":"sha512-euoFGowhlaLqXsPWQ48qSkBSCFs3DPRyiwVu3FjR96cMPx+Fr+gpWRhIafcHwqwCqWS42RZhIudOvEI+Ckf6MA=="}}},"pass":true,"result":"sri-implemented-and-external-scripts-loaded-securely","score_description":"Subresource Integrity (SRI) is implemented and all scripts are loaded securely","score_modifier":5},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","output":{"data":"nosniff"},"pass":true,"result":"x-content-type-options-nosniff","score_description":"X-Content-Type-Options header set to \"nosniff\"","score_modifier":0},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","output":{"data":"*.matchid.io"},"pass":false,"result":"x-frame-options-header-invalid","score_description":"X-Frame-Options (XFO) header cannot be recognized","score_modifier":-20},"x-xss-protection":{"expectation":"x-xss-protection-disabled","name":"x-xss-protection","output":{"data":"1; mode=block"},"pass":true,"result":"x-xss-protection-enabled-mode-block","score_description":"Deprecated X-XSS-Protection header set to \"1; mode=block\"","score_modifier":0}}} \ No newline at end of file +{"url":"https://deces.matchid.io","algorithm_version":3,"end_time":"Sun, 24 Mar 2024 00:58:14 GMT","grade":"C+","hidden":false,"likelihood_indicator":"MEDIUM","response_headers":{"CF-Cache-Status":"DYNAMIC","CF-RAY":"8692b62038bc2805-SEA","Connection":"keep-alive","Content-Encoding":"gzip","Content-Security-Policy":"default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com","Content-Type":"text/html","Date":"Sun, 24 Mar 2024 00:58:12 GMT","Feature-Policy":"geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';","Last-Modified":"Wed, 06 Mar 2024 01:29:22 GMT","NEL":"{\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}","Referrer-Policy":"same-origin","Report-To":"{\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sR9ewJZQ9w3xUI4Qt%2F5wnwtaaCZy49D4FwcKllyB7yvKXBtOzNA0KGZchNd%2F%2BD6%2FN47dl8J6G%2B%2Bpr3TBmQ8Nh%2FN%2BVgDycqyDVKMOAX5n7XlpKhN6yPdFXJCxpMJlGXtJwA6K\"}],\"group\":\"cf-nel\",\"max_age\":604800}","Server":"cloudflare","Strict-Transport-Security":"max-age=15552000; includeSubDomains; preload","Transfer-Encoding":"chunked","X-Content-Type-Options":"nosniff","X-Frame-Options":"*.matchid.io","X-XSS-Protection":"1; mode=block","alt-svc":"h3=\":443\"; ma=86400"},"scan_id":49223166,"score":60,"start_time":"Sun, 24 Mar 2024 00:58:11 GMT","state":"FINISHED","status_code":200,"tests_failed":2,"tests_passed":9,"tests_quantity":11,"details":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","output":{"data":{"connect-src":["cloudflareinsights.com","pagead2.googlesyndication.com","www.google-analytics.com","www.data.gouv.fr","region1.analytics.google.com","analytics.google.com","stats.g.doubleclick.net","csi.gstatic.com","'self'"],"default-src":["'self'"],"font-src":["data:","'self'"],"frame-src":["www.google.com","tpc.googlesyndication.com","matchid.io","googleads.g.doubleclick.net","'self'","google.com"],"img-src":["upload.wikimedia.org","a.basemaps.cartocdn.com","pagead2.googlesyndication.com","b.basemaps.cartocdn.com","www.google-analytics.com","matchid.io","www.google.fr","c.basemaps.cartocdn.com","stats.g.doubleclick.net","'self'"],"script-src":["www.google.com","adservice.google.com","pagead2.googlesyndication.com","tpc.googlesyndication.com","www.google-analytics.com","www.google.ca","static.cloudflareinsights.com","partner.googleadservices.com","'unsafe-eval'","fundingchoicesmessages.google.com","www.googletagservices.com","www.googletagmanager.com","analytics.google.com","adservice.google.fr","ajax.cloudflare.com","'unsafe-inline'","'self'"],"style-src":["https:","'unsafe-inline'","'self'"]},"http":true,"meta":false,"numPolicies":1,"policy":{"antiClickjacking":false,"defaultNone":false,"insecureBaseUri":true,"insecureFormAction":true,"insecureSchemeActive":false,"insecureSchemePassive":false,"strictDynamic":false,"unsafeEval":true,"unsafeInline":true,"unsafeInlineStyle":true,"unsafeObjects":false}},"pass":false,"result":"csp-implemented-with-unsafe-inline","score_description":"Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.","score_modifier":-20},"contribute":{"expectation":"contribute-json-only-required-on-mozilla-properties","name":"contribute","output":{"data":null},"pass":true,"result":"contribute-json-only-required-on-mozilla-properties","score_description":"Contribute.json isn't required on websites that don't belong to Mozilla","score_modifier":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","output":{"data":null,"sameSite":null},"pass":true,"result":"cookies-not-found","score_description":"No cookies detected","score_modifier":0},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","output":{"data":{"acao":null,"clientaccesspolicy":null,"crossdomain":null}},"pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"Content is not visible via cross-origin resource sharing (CORS) files or headers","score_modifier":0},"redirection":{"expectation":"redirection-to-https","name":"redirection","output":{"destination":"https://deces.matchid.io/","redirects":true,"route":["http://deces.matchid.io/","https://deces.matchid.io/"],"status_code":200},"pass":true,"result":"redirection-to-https","score_description":"Initial redirection is to HTTPS on same host, final destination is HTTPS","score_modifier":0},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","output":{"data":"same-origin","http":true,"meta":false},"pass":true,"result":"referrer-policy-private","score_description":"Referrer-Policy header set to \"no-referrer\", \"same-origin\", \"strict-origin\" or \"strict-origin-when-cross-origin\"","score_modifier":5},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","output":{"data":"max-age=15552000; includeSubDomains; preload","includeSubDomains":true,"max-age":15552000,"preload":true,"preloaded":false},"pass":true,"result":"hsts-implemented-max-age-at-least-six-months","score_description":"HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)","score_modifier":0},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","output":{"data":{}},"pass":true,"result":"sri-not-implemented-but-all-scripts-loaded-from-secure-origin","score_description":"Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin","score_modifier":0},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","output":{"data":"nosniff"},"pass":true,"result":"x-content-type-options-nosniff","score_description":"X-Content-Type-Options header set to \"nosniff\"","score_modifier":0},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","output":{"data":"*.matchid.io"},"pass":false,"result":"x-frame-options-header-invalid","score_description":"X-Frame-Options (XFO) header cannot be recognized","score_modifier":-20},"x-xss-protection":{"expectation":"x-xss-protection-disabled","name":"x-xss-protection","output":{"data":"1; mode=block"},"pass":true,"result":"x-xss-protection-enabled-mode-block","score_description":"Deprecated X-XSS-Protection header set to \"1; mode=block\"","score_modifier":0}}} \ No newline at end of file diff --git a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/lhr-aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlvLw==.html b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/lhr-aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlvLw==.html index 03ee3a52..e8f48c92 100644 --- a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/lhr-aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlvLw==.html +++ b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/lhr-aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlvLw==.html @@ -7583,7 +7583,7 @@ //# sourceURL=compiled-reportrenderer.js - + - - + - + diff --git a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/nuclei.json b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/nuclei.json index 11732a21..62c1967e 100644 --- a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/nuclei.json +++ b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/nuclei.json @@ -32,9 +32,9 @@ "type": "dns", "host": "deces.matchid.io.", "matched-at": "deces.matchid.io", - "request": ";; opcode: QUERY, status: NOERROR, id: 51720\n;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags:; udp: 4096\n\n;; QUESTION SECTION:\n;deces.matchid.io.\tIN\t CAA\n", - "response": ";; opcode: QUERY, status: NOERROR, id: 51720\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags:; udp: 1232\n\n;; QUESTION SECTION:\n;deces.matchid.io.\tIN\t CAA\n\n;; AUTHORITY SECTION:\nmatchid.io.\t1800\tIN\tSOA\ttia.ns.cloudflare.com. dns.cloudflare.com. 2334442361 10000 2400 604800 1800\n", - "timestamp": "2024-03-17T00:59:47.138147074Z", + "request": ";; opcode: QUERY, status: NOERROR, id: 50016\n;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags:; udp: 4096\n\n;; QUESTION SECTION:\n;deces.matchid.io.\tIN\t CAA\n", + "response": ";; opcode: QUERY, status: NOERROR, id: 50016\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags:; udp: 1232\n\n;; QUESTION SECTION:\n;deces.matchid.io.\tIN\t CAA\n\n;; AUTHORITY SECTION:\nmatchid.io.\t1800\tIN\tSOA\ttia.ns.cloudflare.com. dns.cloudflare.com. 2336515962 10000 2400 604800 1800\n", + "timestamp": "2024-03-24T01:00:43.025662623Z", "matcher-status": true }, { @@ -72,9 +72,9 @@ "extracted-results": [ "\"google-site-verification=R8qdKQhQRtLbMF_bALIP-CGC16_BJCZSy8Olu7RTzY8\"" ], - "request": ";; opcode: QUERY, status: NOERROR, id: 58621\n;; flags: rd ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags:; udp: 4096\n\n;; QUESTION SECTION:\n;deces.matchid.io.\tIN\t TXT\n", - "response": ";; opcode: QUERY, status: NOERROR, id: 58621\n;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags:; udp: 512\n\n;; QUESTION SECTION:\n;deces.matchid.io.\tIN\t TXT\n\n;; ANSWER SECTION:\ndeces.matchid.io.\t300\tIN\tTXT\t\"google-site-verification=R8qdKQhQRtLbMF_bALIP-CGC16_BJCZSy8Olu7RTzY8\"\n", - "timestamp": "2024-03-17T00:59:47.157507765Z", + "request": ";; opcode: QUERY, status: NOERROR, id: 36490\n;; flags: rd ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags:; udp: 4096\n\n;; QUESTION SECTION:\n;deces.matchid.io.\tIN\t TXT\n", + "response": ";; opcode: QUERY, status: NOERROR, id: 36490\n;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags:; udp: 512\n\n;; QUESTION SECTION:\n;deces.matchid.io.\tIN\t TXT\n\n;; ANSWER SECTION:\ndeces.matchid.io.\t300\tIN\tTXT\t\"google-site-verification=R8qdKQhQRtLbMF_bALIP-CGC16_BJCZSy8Olu7RTzY8\"\n", + "timestamp": "2024-03-24T01:00:43.977477289Z", "matcher-status": true }, { @@ -114,9 +114,9 @@ "1; mode=block" ], "request": "GET / HTTP/1.1\r\nHost: deces.matchid.io\r\nUser-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n", - "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 86590b079b4022cc-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 17 Mar 2024 00:59:55 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=A9WiFNs0lC6V7w5v6okJdnDMFfw9FKkME7dGWsnTrDU%2FtxvPua%2F%2FZhjiZK7zGNikgHZkj0g%2B4Z%2BIGQ9%2BQT48ojMAxmCSl3jJtm53IALBEMC3Hj8wFuEcFRXn0N%2BRTnDV7lRu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n\n", + "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 8692ba035bdc8f4f-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 24 Mar 2024 01:00:51 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=s5sbL7QSC20F%2B%2BiS08WLgBjMEvQsh1%2B23lWnQFyL8t0hgAfi34CsAq6W3ofSH0QKzdMsEX%2FTgnSLU1jR8nag7Bi1RLN5OxKLVHLpCcB5EUVnXm%2FxFZzRE8gmUWVKjyWYk%2FeH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n", "ip": "104.21.64.91", - "timestamp": "2024-03-17T00:59:55.61181906Z", + "timestamp": "2024-03-24T01:00:51.260004594Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://deces.matchid.io'", "matcher-status": true }, @@ -143,9 +143,9 @@ "host": "https://deces.matchid.io", "matched-at": "https://deces.matchid.io", "request": "GET / HTTP/1.1\r\nHost: deces.matchid.io\r\nUser-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n", - "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 86590b77b8ab6095-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 17 Mar 2024 01:00:13 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nUj4dEJkXUv6CT8KgZhr6kaHrbZ7kNaRKSvQBz0A4mOxE484qUu7fHEyvWLhTVmYdHEbXbC8BRo8PBT0%2FnKTtv7ufycvYOoJuBCKiuZi0uRZetrWk%2BvuFzuhfeJDkRM1%2Fx1u\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n\n", + "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 8692ba74a8ec8726-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 24 Mar 2024 01:01:09 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QSc%2FGw9gvhYNDTTkmcGWtnoQk6yHstlPmXH%2FaqIObznE0gZNY7qwcILiJWwI8oXRMavIYDlPm7ZHprRXipeJcqLDx%2BkHDUG%2B7gkC5gNeyQ%2BHQ6dRBI6LYowdFwnwWabAH2qc\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n", "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:00:13.683140254Z", + "timestamp": "2024-03-24T01:01:09.514328895Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://deces.matchid.io'", "matcher-status": true }, @@ -177,14 +177,14 @@ "max-request": 1 } }, - "matcher-name": "x-permitted-cross-domain-policies", + "matcher-name": "cross-origin-opener-policy", "type": "http", "host": "https://deces.matchid.io", "matched-at": "https://deces.matchid.io", "request": "GET / HTTP/1.1\r\nHost: deces.matchid.io\r\nUser-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n", - "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 86590b9dff3510be-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 17 Mar 2024 01:00:19 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rTIPhdZWvbImCJ4mCJb95OPAniiauqb5pqn2yWxDotL3HbnF210JoK%2B8a866H9zOSO4%2FyticngkY8sI48y4CHTYWMWeWP14rCN5aSI3PhQj3WWj560W%2FiXNJaPKonJxxjes7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n\n", + "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 8692ba9a1b642191-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 24 Mar 2024 01:01:15 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9EAlF%2FDj04FOCcgPoLNZjXI%2B77U1ij8Hf2i7udNJ57B7riXT7y3SldF%2BgN0ViN2q%2FHpEsfFznWLsTS3ckdRSV%2BNLIGb%2FQIe5Ini0bowLK5QJxJSGHH4VfWokSpvXHCINjj1Y\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n", "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:00:19.638147816Z", + "timestamp": "2024-03-24T01:01:15.341775103Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://deces.matchid.io'", "matcher-status": true }, @@ -216,14 +216,14 @@ "max-request": 1 } }, - "matcher-name": "clear-site-data", + "matcher-name": "cross-origin-resource-policy", "type": "http", "host": "https://deces.matchid.io", "matched-at": "https://deces.matchid.io", "request": "GET / HTTP/1.1\r\nHost: deces.matchid.io\r\nUser-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n", - "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 86590b9dff3510be-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 17 Mar 2024 01:00:19 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rTIPhdZWvbImCJ4mCJb95OPAniiauqb5pqn2yWxDotL3HbnF210JoK%2B8a866H9zOSO4%2FyticngkY8sI48y4CHTYWMWeWP14rCN5aSI3PhQj3WWj560W%2FiXNJaPKonJxxjes7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n\n", + "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 8692ba9a1b642191-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 24 Mar 2024 01:01:15 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9EAlF%2FDj04FOCcgPoLNZjXI%2B77U1ij8Hf2i7udNJ57B7riXT7y3SldF%2BgN0ViN2q%2FHpEsfFznWLsTS3ckdRSV%2BNLIGb%2FQIe5Ini0bowLK5QJxJSGHH4VfWokSpvXHCINjj1Y\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n", "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:00:19.638201136Z", + "timestamp": "2024-03-24T01:01:15.342013631Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://deces.matchid.io'", "matcher-status": true }, @@ -255,14 +255,14 @@ "max-request": 1 } }, - "matcher-name": "cross-origin-embedder-policy", + "matcher-name": "permissions-policy", "type": "http", "host": "https://deces.matchid.io", "matched-at": "https://deces.matchid.io", "request": "GET / HTTP/1.1\r\nHost: deces.matchid.io\r\nUser-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n", - "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 86590b9dff3510be-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 17 Mar 2024 01:00:19 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rTIPhdZWvbImCJ4mCJb95OPAniiauqb5pqn2yWxDotL3HbnF210JoK%2B8a866H9zOSO4%2FyticngkY8sI48y4CHTYWMWeWP14rCN5aSI3PhQj3WWj560W%2FiXNJaPKonJxxjes7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n\n", + "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 8692ba9a1b642191-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 24 Mar 2024 01:01:15 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9EAlF%2FDj04FOCcgPoLNZjXI%2B77U1ij8Hf2i7udNJ57B7riXT7y3SldF%2BgN0ViN2q%2FHpEsfFznWLsTS3ckdRSV%2BNLIGb%2FQIe5Ini0bowLK5QJxJSGHH4VfWokSpvXHCINjj1Y\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n", "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:00:19.638216635Z", + "timestamp": "2024-03-24T01:01:15.342171627Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://deces.matchid.io'", "matcher-status": true }, @@ -294,14 +294,14 @@ "max-request": 1 } }, - "matcher-name": "cross-origin-opener-policy", + "matcher-name": "x-permitted-cross-domain-policies", "type": "http", "host": "https://deces.matchid.io", "matched-at": "https://deces.matchid.io", "request": "GET / HTTP/1.1\r\nHost: deces.matchid.io\r\nUser-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n", - "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 86590b9dff3510be-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 17 Mar 2024 01:00:19 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rTIPhdZWvbImCJ4mCJb95OPAniiauqb5pqn2yWxDotL3HbnF210JoK%2B8a866H9zOSO4%2FyticngkY8sI48y4CHTYWMWeWP14rCN5aSI3PhQj3WWj560W%2FiXNJaPKonJxxjes7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n\n", + "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 8692ba9a1b642191-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 24 Mar 2024 01:01:15 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9EAlF%2FDj04FOCcgPoLNZjXI%2B77U1ij8Hf2i7udNJ57B7riXT7y3SldF%2BgN0ViN2q%2FHpEsfFznWLsTS3ckdRSV%2BNLIGb%2FQIe5Ini0bowLK5QJxJSGHH4VfWokSpvXHCINjj1Y\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n", "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:00:19.638229019Z", + "timestamp": "2024-03-24T01:01:15.342187787Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://deces.matchid.io'", "matcher-status": true }, @@ -333,14 +333,14 @@ "max-request": 1 } }, - "matcher-name": "cross-origin-resource-policy", + "matcher-name": "clear-site-data", "type": "http", "host": "https://deces.matchid.io", "matched-at": "https://deces.matchid.io", "request": "GET / HTTP/1.1\r\nHost: deces.matchid.io\r\nUser-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n", - "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 86590b9dff3510be-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 17 Mar 2024 01:00:19 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rTIPhdZWvbImCJ4mCJb95OPAniiauqb5pqn2yWxDotL3HbnF210JoK%2B8a866H9zOSO4%2FyticngkY8sI48y4CHTYWMWeWP14rCN5aSI3PhQj3WWj560W%2FiXNJaPKonJxxjes7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n\n", + "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 8692ba9a1b642191-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 24 Mar 2024 01:01:15 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9EAlF%2FDj04FOCcgPoLNZjXI%2B77U1ij8Hf2i7udNJ57B7riXT7y3SldF%2BgN0ViN2q%2FHpEsfFznWLsTS3ckdRSV%2BNLIGb%2FQIe5Ini0bowLK5QJxJSGHH4VfWokSpvXHCINjj1Y\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n", "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:00:19.6382512Z", + "timestamp": "2024-03-24T01:01:15.342200241Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://deces.matchid.io'", "matcher-status": true }, @@ -372,14 +372,14 @@ "max-request": 1 } }, - "matcher-name": "permissions-policy", + "matcher-name": "cross-origin-embedder-policy", "type": "http", "host": "https://deces.matchid.io", "matched-at": "https://deces.matchid.io", "request": "GET / HTTP/1.1\r\nHost: deces.matchid.io\r\nUser-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n", - "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 86590b9dff3510be-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 17 Mar 2024 01:00:19 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rTIPhdZWvbImCJ4mCJb95OPAniiauqb5pqn2yWxDotL3HbnF210JoK%2B8a866H9zOSO4%2FyticngkY8sI48y4CHTYWMWeWP14rCN5aSI3PhQj3WWj560W%2FiXNJaPKonJxxjes7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n\n", + "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 8692ba9a1b642191-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 24 Mar 2024 01:01:15 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9EAlF%2FDj04FOCcgPoLNZjXI%2B77U1ij8Hf2i7udNJ57B7riXT7y3SldF%2BgN0ViN2q%2FHpEsfFznWLsTS3ckdRSV%2BNLIGb%2FQIe5Ini0bowLK5QJxJSGHH4VfWokSpvXHCINjj1Y\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n", "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:00:19.638265968Z", + "timestamp": "2024-03-24T01:01:15.34221578Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://deces.matchid.io'", "matcher-status": true }, @@ -408,137 +408,12 @@ "host": "https://deces.matchid.io", "matched-at": "https://deces.matchid.io/robots.txt", "request": "GET /robots.txt HTTP/1.1\r\nHost: deces.matchid.io\r\nUser-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n", - "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nContent-Length: 34\r\nAccept-Ranges: bytes\r\nAge: 344\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=86400\r\nCf-Cache-Status: HIT\r\nCf-Ray: 86590bc37fd35078-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/plain\r\nDate: Sun, 17 Mar 2024 01:00:25 GMT\r\nEtag: \"65e7c6f2-22\"\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=h%2FT0VKIBtlens6cKp6E2aTYYHbJEvdWbbVdCiyZWlrFY3KWiReKB868zdb3%2Fhd98xxGfKTCfWjMwhzqmAkGS%2FFlaRR63EdxTEMEtmSOEdsOQUFbQQ0PJ9rOg1g5UObTSjfTU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\nUser-agent: AhrefsBot\nDisallow: /\n", + "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nContent-Length: 34\r\nAccept-Ranges: bytes\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=86400\r\nCf-Cache-Status: MISS\r\nCf-Ray: 8692babfcec66168-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/plain\r\nDate: Sun, 24 Mar 2024 01:01:21 GMT\r\nEtag: \"65e7c6f2-22\"\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pdvDNmgbnfTbg2A14hm4EonjK5OKWEmKIyxRNqbEgHm%2B%2F4bnDZpsgrtr8wYVGr6ST6H4OYxfqyIwPOYCnKij5IEwstComTGS4RZGITCLp7SFrDzgt4Q2gJiAWXa1uR4gyIAD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\nUser-agent: AhrefsBot\nDisallow: /\n", "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:00:25.526206209Z", + "timestamp": "2024-03-24T01:01:21.376351604Z", "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://deces.matchid.io/robots.txt'", "matcher-status": true }, - { - "template": "http/misconfiguration/missing-sri.yaml", - "template-url": "https://templates.nuclei.sh/public/missing-sri", - "template-id": "missing-sri", - "template-path": "/home/runner/nuclei-templates/http/misconfiguration/missing-sri.yaml", - "info": { - "name": "Missing Subresource Integrity", - "author": [ - "lucky0x0d", - "pulsesecurity.co.nz" - ], - "tags": [ - "compliance", - "js", - "sri", - "misconfig" - ], - "description": "Checks if script tags within the HTML response have Subresource Integrity implemented via the integrity attribute\n", - "reference": [ - "https://cheatsheetseries.owasp.org/cheatsheets/third_party_javascript_management_cheat_sheet.html#subresource-integrity" - ], - "severity": "info", - "metadata": { - "max-request": 1 - } - }, - "type": "http", - "host": "https://deces.matchid.io", - "matched-at": "https://deces.matchid.io/", - "extracted-results": [ - "https://static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317" - ], - "request": "GET / HTTP/1.1\r\nHost: deces.matchid.io\r\nUser-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)\r\nConnection: close\r\nAccept-Encoding: gzip\r\n\r\n", - "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 86590bdc5f3f61e4-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 17 Mar 2024 01:00:29 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1lFFWqJYbYTalYLyRHc8GCf11VXCCK9J8KI%2FWARg874xSiSAp%2FzyIihDw%2Bw0zv40WrVmh3NPiXVa0IAip6FeBNzzT3LvUahzYsXs6f1n72QbxGwkwGd1IzHhPC73%2Fayr17J2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n\n", - "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:00:29.619313154Z", - "curl-command": "curl -X 'GET' -d '' -H 'Host: deces.matchid.io' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://deces.matchid.io/'", - "matcher-status": true - }, - { - "template": "http/technologies/nacos-version.yaml", - "template-url": "https://templates.nuclei.sh/public/nacos-version", - "template-id": "nacos-version", - "template-path": "/home/runner/nuclei-templates/http/technologies/nacos-version.yaml", - "info": { - "name": "Nacos - Detect", - "author": [ - "arm!tage" - ], - "tags": [ - "tech", - "detect", - "nacos" - ], - "description": "Nacos was detected.\n", - "severity": "info", - "metadata": { - "max-request": 2, - "shodan-query": "title:\"Nacos\"", - "verified": true - }, - "classification": { - "cve-id": null, - "cwe-id": [ - "cwe-200" - ], - "cvss-metrics": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N" - } - }, - "type": "http", - "host": "https://deces.matchid.io", - "matched-at": "https://deces.matchid.io/v1/console/server/state?accessToken&username", - "extracted-results": [ - "\"version\":\"2024.2.4\"" - ], - "request": "GET /v1/console/server/state?accessToken&username HTTP/1.1\r\nHost: deces.matchid.io\r\nUser-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n", - "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 86590bf61fca115a-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 17 Mar 2024 01:00:33 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QKTgcjhMhu0Cn9NsMZ0HiFxS%2B%2Fqmch2C96Usd%2FjZQzSkigZcs8xx5gpc9jOcfFrAAtZlecq0iiFjPJ3y6m2vazRyKNfjIOphy0nXUkUJs0hknZiGupl6b7O4yJ8qyzPGplGn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n\n", - "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:00:33.729336273Z", - "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://deces.matchid.io/v1/console/server/state?accessToken&username'", - "matcher-status": true - }, - { - "template": "http/technologies/nacos-version.yaml", - "template-url": "https://templates.nuclei.sh/public/nacos-version", - "template-id": "nacos-version", - "template-path": "/home/runner/nuclei-templates/http/technologies/nacos-version.yaml", - "info": { - "name": "Nacos - Detect", - "author": [ - "arm!tage" - ], - "tags": [ - "tech", - "detect", - "nacos" - ], - "description": "Nacos was detected.\n", - "severity": "info", - "metadata": { - "max-request": 2, - "shodan-query": "title:\"Nacos\"", - "verified": true - }, - "classification": { - "cve-id": null, - "cwe-id": [ - "cwe-200" - ], - "cvss-metrics": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N" - } - }, - "type": "http", - "host": "https://deces.matchid.io", - "matched-at": "https://deces.matchid.io/nacos/v1/console/server/state?accessToken&username", - "extracted-results": [ - "\"version\":\"2024.2.4\"" - ], - "request": "GET /nacos/v1/console/server/state?accessToken&username HTTP/1.1\r\nHost: deces.matchid.io\r\nUser-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n", - "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 86590bf6dab910fb-ORD\r\nContent-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com\r\nContent-Type: text/html\r\nDate: Sun, 17 Mar 2024 01:00:33 GMT\r\nFeature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';\r\nLast-Modified: Wed, 06 Mar 2024 01:29:22 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReferrer-Policy: same-origin\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=B8dPf2Bqlh5GHIanPQ2yMCJlZKdktNiSJrDtexbLBctgVQZQnARwign9ImWZ%2BEp%2F4XK9X1jO5K2CoTp0B7H1fYbd3ZCVAT7ZXYXzu%2Bj2G27RLILauv0BwrK090D1cnpFkIvg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: *.matchid.io\r\nX-Xss-Protection: 1; mode=block\r\n\r\n\n\n\n\n\n\n\n\n\nmatchID - Moteur de recherche des décès\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\nSi vous voyez ce message, c'est que que votre navigateur est incompatible, ou bien que la connexion a posé\nproblème.\n
\nLes navigateurs supportés sont : Edge >= 79, Chrome >= 65, Firefox >= 68, Safari >=11\n
\nMaintenir la compatibilité du service avec les navigateurs anciens est une activité coûteuse, et le maintien\nd'une version ancienne de navigateur est risquée pour la sécurité de vos données. N'hésitez pas à faire\nune mise à jour !\n
\n\n\n\n", - "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:00:33.863291366Z", - "curl-command": "curl -X 'GET' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://deces.matchid.io/nacos/v1/console/server/state?accessToken&username'", - "matcher-status": true - }, { "template": "http/technologies/waf-detect.yaml", "template-url": "https://templates.nuclei.sh/public/waf-detect", @@ -570,14 +445,14 @@ ] } }, - "matcher-name": "cloudflare", + "matcher-name": "nginxgeneric", "type": "http", "host": "https://deces.matchid.io", "matched-at": "https://deces.matchid.io/", "request": "POST / HTTP/1.1\r\nHost: deces.matchid.io\r\nUser-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)\r\nConnection: close\r\nContent-Length: 27\r\nContent-Type: application/x-www-form-urlencoded\r\nAccept-Encoding: gzip\r\n\r\n_=", - "response": "HTTP/1.1 405 Method Not Allowed\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 86590bfbba6a2f2c-ORD\r\nContent-Type: text/html\r\nDate: Sun, 17 Mar 2024 01:00:34 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d3vgWEdaA961PpRZRhC09vt71e6MAUngcZ7JCjuEolSi3079DgIpl3OfncDRSZmtlUa4G2IxrqSxnTF1AYNIWyoNV9%2FVL%2Fj%2FvQMXCswEiMr6P%2FW1LOd8OCrjIMILLxudNWyn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\n\r\n\n405 Not Allowed\n\n

405 Not Allowed

\n
nginx
\n\n\n\n", + "response": "HTTP/1.1 405 Method Not Allowed\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 8692baf70a2c61ca-ORD\r\nContent-Type: text/html\r\nDate: Sun, 24 Mar 2024 01:01:30 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aTE6Y%2BfLU9cvWtiUctcnXRlIWaO8XA3bTdihYHguF5HsbzoCHpq%2FY2EWaJoJZnqWWQEf2wdcEZQGJKF4Dg%2FNoV%2B2m33GmSR6pe979cL0CM5LY8%2BQl0jECEjs075u5xzTrBCx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\n\r\n\n405 Not Allowed\n\n

405 Not Allowed

\n
nginx
\n\n\n", "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:00:34.642346194Z", + "timestamp": "2024-03-24T01:01:30.221564571Z", "curl-command": "curl -X 'POST' -d '_=' -H 'Content-Type: application/x-www-form-urlencoded' -H 'Host: deces.matchid.io' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://deces.matchid.io/'", "matcher-status": true }, @@ -612,14 +487,14 @@ ] } }, - "matcher-name": "nginxgeneric", + "matcher-name": "cloudflare", "type": "http", "host": "https://deces.matchid.io", "matched-at": "https://deces.matchid.io/", "request": "POST / HTTP/1.1\r\nHost: deces.matchid.io\r\nUser-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)\r\nConnection: close\r\nContent-Length: 27\r\nContent-Type: application/x-www-form-urlencoded\r\nAccept-Encoding: gzip\r\n\r\n_=", - "response": "HTTP/1.1 405 Method Not Allowed\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 86590bfbba6a2f2c-ORD\r\nContent-Type: text/html\r\nDate: Sun, 17 Mar 2024 01:00:34 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d3vgWEdaA961PpRZRhC09vt71e6MAUngcZ7JCjuEolSi3079DgIpl3OfncDRSZmtlUa4G2IxrqSxnTF1AYNIWyoNV9%2FVL%2Fj%2FvQMXCswEiMr6P%2FW1LOd8OCrjIMILLxudNWyn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\n\r\n\n405 Not Allowed\n\n

405 Not Allowed

\n
nginx
\n\n\n\n", + "response": "HTTP/1.1 405 Method Not Allowed\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nCf-Cache-Status: DYNAMIC\r\nCf-Ray: 8692baf70a2c61ca-ORD\r\nContent-Type: text/html\r\nDate: Sun, 24 Mar 2024 01:01:30 GMT\r\nNel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aTE6Y%2BfLU9cvWtiUctcnXRlIWaO8XA3bTdihYHguF5HsbzoCHpq%2FY2EWaJoJZnqWWQEf2wdcEZQGJKF4Dg%2FNoV%2B2m33GmSR6pe979cL0CM5LY8%2BQl0jECEjs075u5xzTrBCx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\n\r\n\n405 Not Allowed\n\n

405 Not Allowed

\n
nginx
\n\n\n", "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:00:34.642391218Z", + "timestamp": "2024-03-24T01:01:30.222111876Z", "curl-command": "curl -X 'POST' -d '_=' -H 'Content-Type: application/x-www-form-urlencoded' -H 'Host: deces.matchid.io' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://deces.matchid.io/'", "matcher-status": true }, @@ -650,7 +525,7 @@ "Let's Encrypt" ], "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:03:28.102023748Z", + "timestamp": "2024-03-24T01:04:23.761100124Z", "matcher-status": true }, { @@ -681,7 +556,7 @@ "matchid.io" ], "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:03:28.1021422Z", + "timestamp": "2024-03-24T01:04:23.761253251Z", "matcher-status": true }, { @@ -716,7 +591,7 @@ " SAN: [*.matchid.io matchid.io]" ], "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:03:28.102186112Z", + "timestamp": "2024-03-24T01:04:23.761301371Z", "matcher-status": true }, { @@ -747,7 +622,7 @@ "tls12" ], "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:03:28.118772892Z", + "timestamp": "2024-03-24T01:04:23.77919309Z", "matcher-status": true }, { @@ -778,7 +653,7 @@ "tls13" ], "ip": "104.21.64.91", - "timestamp": "2024-03-17T01:03:28.143268461Z", + "timestamp": "2024-03-24T01:04:23.801703282Z", "matcher-status": true } ] diff --git a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/screenshot.jpeg b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/screenshot.jpeg index 7babf1b08370084091c8ffb3d2bd76b63ed39377..6f9acd6a415c38f2e52e580f579d6b99e03b699b 100644 GIT binary patch delta 27571 zcmc$`2UL^k`Y+0idvr!dnHd#S+Bl+)BA^tJK8|An1XKhB1XKj1gdn|tDuZkbpdcVM zq7_mbZiw`pWYIXK);jgoF?++!H+;Nt9fKj_}G7vDci|Ni%1lcyOEUj2CJ5Dk06 zt3CAgzbbDMXwOMkJ|cyHgfBQ~U-3xC0z&LeNZwQ$pzBUCEfh-Nu1vn4nm7^m9$f@NU^0 z&Pq;pTK$6^D!wkv+}zytgD+!^HTUBfr2gIZ42H4B$m2kw1suAK_G8JS@9{f7_GFG2 zklQPLrq1|%U)vlRd^Zea)$$PO4Q}6p>wf>Y2WW(l1N8{e5SDf z@(eZ`Cfipq^o@wfw9&UWMMP%BW=h+P^DG|O555Vnn9R*9zA;pTn^EzZY!7C++U0R( zLtbGwzuBSTIjl&)dWs!39k@DuSLD+~HX+TuzjB+cg@wh~l$~(JSAHh{QiZY|ueWPb zXL!Go5(!8E_+aXnJ3#2>3QPSnFh$|DbdU7ws@%S(|AnqHO3F6+d|W#(*m z*RDXE9xrNq4#9F zb3#p(!tRp~PLDOGiW1dvy^rOI)y1}I!!>TbrTZ=HLVPHfucGs5))8a?!~M1RPqID{uUi-U_K^?k;8${2RJ^)rI-_jWi*T#%`z2+}*No z6#o6(pwEdDCpK%2Kkb)k(BgW%qpnCvbH0SkJT^71d${ZPWEpFmsc5~jI;O|`lt7xH z@@6ji_BbTM?pBO+5Ug^!T^PS>bwmlv=?Wcwbn3_psf|#T#7M;&C;G<-b<)o*BgHtHm4+Bq`IO5j*u&2anOu%E)WrfSNfnw>_B)3HQ!t$%+cvG8~myd;!biVvi6)-hDKPbX%n@#Wo?HcAjj)wxyfzJyY9cagnUmyMrV`KTR# z(n9iJ1;t~DiniFkP?<-dRo?sj3tUG&4tUbtI&2Oe}bx;iZpu_2l zHA+4*@@|VsV}lZ{`mMo1n@aDxpHE3WO0Wy9XjwwH7;T_h-KC+YEzCqmP+6ZZ!?kB^Y;+h3fk;4d*s{J(s@=5=%7wy5HV z@sH2F>i1`71aW3IEumJo*Er<~G)0ZJY!ju@g!p(WD`K(Ab@;=h9V(7z(C++`!N!EV z#uN<|0)N`cYk3fh=weWzg_vfYsVg84^j^N(Uec_Y_tBw5se1N}Hg`BSJa->DBkmZ1 zAgWmYYppC6+zT7#GNHa6wZgsX{obaOPqnW%$X-(Ve%6fL6HTVtPv|TqT zo+I_alct3F_Y!s~k9I>HyfCx0Oxz$Fe29$oc^XoP7M7Nlx@9h0tT)a0_;Y zDnYQ2?X}opA<^qj<1baOOy=#-3G`ksCewHQM8S8W;=|Ba4Z{xAI%lVLj$?i99l2(j z-s5M9#S=#A{f`xGDzCLXJ(g2Y&;)lfu{l+X{juJ`PB53Ca^=n6Z$i+HN2TO7n&>o| z;??ZzK}YSYCQ>pX*}XF7*zfc5cHDX`$ABT5GPJcjp|k=!a%2L>(@`7I5G)V1!FW4p zSuD3_&z=bk?&Zo7D_Jb~)4K3aE$}t-vcfO2JJeh*G#?#$@ZWryh`T=LYXE@Ub>e0aEP(`_1h|0eamhhK(jyIh6C z`}7jOS+{<=sE8$s>NX7%aPw`dj_70OO-*ABl_;vuPenKHa7sD1+*sn=mUSjoQw?q_ zQN?$Q$JV9JTMM%>+H#*>j!^ z2b?0LeJ`Gj+_^}qnK$N36%ln$b-`343t&*`5SHKV+qi9l%rSJfo+RnT1Mx*xp};Kft3SvWJ_q!;s-B2gpwYv7)xuIr|U7F zdR|5?gFBMIZdLjdT^Mt@M%_1%m#TL4-9Oixr84i1Z4ePzk{0&1LCJ{%kvcI8div~RLDvpgG$kfGxYhIT#va+&1hFF(gf0S2P z=|YzGD6pke95|2{bC1}eoGLE#izkYhO=U)Dsj9qr{tJs;MK)Ew+Pm;6$?Eoi_}_5ibJo((_t2gN&!nhAXv;{?bU$(_;z+oY*GAOh6y| zVfNA|JMu)kTrgJ$2M6vFnMSFVy~t*9>>jM&wDU2PwKjUcD6`GX%#1r>f+bBARw=?( zYW`+})WhE1-h z^FVb#C(+IhPosy-c3lJ4`M6*{*}984*XEVBRWJ3rh8sAPm6dVl3BnXT zXq(Q^2~mTbo11HIZ{Ipo7pY*ek}ei)4o{Fd!YbG~H7%UEI)04dE?J zbrC%6g)?A%-5Mq?75YZD&s66G4CY=kp0GI8HP)ogbbEQw z`-oCmP=}cXt5a#zZ6bA5J)v4*8mKL< zpjJ~CyN}&@qso_+}#oH8pMf^%Z5GlyCPHt!=Lu%&$A#P-LBm$bJQdrm`;E z1th5nEk#p_vTz;^WAy?5=d)^xFr~sJY%lt=Yo)x-tlunk5zmC>2WYkh3t0V9 zE2({vA%QyHCBToH;tw~C{yObSq{PEDkHKX$e13mlvXSY_>K&<+hOwqz_H|hiN>n?H%yMDco|cd%7|)K$8Zy^ znTeV{E^uG56u54+l@`InRj5!$C0-eL%ITj%%n}(JMb`L|F{+-07v-p6fkdc<- zVogvzeb@ax;R68^nF({N^K_?`g^5jn?uPfS&EmmuiJ7-Qvvqh^L)nJeDV_#lnUUn| z;}M%H1S?Z2{y|iq@051;&jIoMd_H>?%mPrNF^6a(K z1G7AH2e{OL&v*AJ!`NRxNJF@!jUe!*&Zn}gSuH&RW%$}vn5)jEF&@yQ#FcFOt}o+J z?ZPnuBqZx7N5#a%tTJePYt#l+mwPC%gl7o4I%tvZD^a`Q{TNK^ijjEhrHiMRQdeL@ zghUk%=~D5jfZ`_@WVSmSd-KD-VZb;(i2B*&c6L2!ZEXz(^4BQs*H>i72@(;x8Nw2F z3S*$~s|wIXf2on22l_lbQ^jtEIwCdUf)>UfsWczmEz2K2B^mN-xjbpJNc`i+?baB{ z)nxnOtA9o5u8glj8*bWSqW$rDN0J+LJwkfumOz7;`FL10%b_8@0(#Fpp!Pj}eK$@a zQq{yd`C$9G7Z1$UI~6(8XHq0QNPS$tfXAJ!^y-(2e@edj)OKn1W%iHUew;m}^ z^tpBt>f|u^y^#zc7BYT3NUgC*2^+u;qh^c9OJ5M167cEPhDkFgT;pJbY}&c!CmjGh zYf1kz-+FHdyy8LyJO&c2R=%VYwA5I)kB|}_GHo9oWCD~f>~d$?_g6^QKmLY@gNjT0 zi&fxS^zs`+=g*xh>JPC3VlwzPV(fuR^M{~;`84UYp-*9$STpJ)2$e@F>M@HQ8gvBn z*~Vn|{<%Cm{s9y1FMpv^JCmjzkUY5JR@kcrdO=FSXkw&diDl!``_%yp80_#{iX-Fr-csi? zdF8Dqk3}9Us+DPgVMeaNWgDk@LSGt#ou+g!*1B<0R~|M=Y5$HlQaw~GL%%Z%ym=Syq_W{LFz?-t$G4%$p>b-=uo$E$BN7Fv#T^pCpZ z1EE)`;0LPnFBbg(70+rIb373v@FH!X&L1o>eXfR>2?N)WX2^8R|uo=aS!qAJ?+-mKn5Y14@@pi=dK z2p)xtN{qs50{~TM<`)+idr!3PL7=4=iw}rEsL+|!*+{>+v>#XE$acofvO4S{lfUi-66cCe%Dj=zVfZg z4&+&2L}NI3eM3WAi4%Q+&C~;E%5<_10FAI)g7BO?tZN$#ppk&i7Vu*L@XqsQW^tP& zk7U4V?U$D~gad%klnNVRnw|bFXm85j`~hVt;#)u6Q-ZXZcGn=-Hv@;w)IgaN5fOZx zrnQQrS6k!un_^k*LH!k8PJ?>rZ*KBm^ay0oD-qsFs2Lg9ac_R{NAL<{uqI%Gm$R3! z@$`sEitgNp-JI6bYhT&D1Ic|NBEnx$ks%~1Z&7%#wBMJ3xg6HlS_X6K9)c;j&PuVj?IB`Sz>Dq z^Ikc4d6sg-9DP>AH$Q_!BKcxsaLF)$?4c~V?b*6<6<%YVu6QOj1OW&s&kwsMfEXZ| z1{Q4$l*ML%C6hP?5STviHlrOFz;Im|owcvD{zc>;@M3ub+NZ%2hIaMPjr;ISNYK&osvmRKOW)u>gG4RpmOwa5w~L^ zKdrq$zuh|<%l~@5YkzgQ>+5%~{qV=nUoTG%J?js)NE9}a|$kAD64AL;9H{>KAh{|(pl zpO5sP4+Pi$|7o4zJO9Jo`=2?|e?HKE-T!<4cSZbn9qC`^`ac{9`#)EDYbONP|9`6V z)(YZZ_y2!>T>t-25&wG&;$Qdwe{;H44 z|9l`!u_ z*!mBKtAfamgcJ_P16|%tzhBpC<|cm{m`cOFZSr$*#NZPm9{ZY}9NvwX;%2Ssm%@^7 zUV;B4kA4PTxD>TX#2suaY|B35Mo`2`Tsm?e$H$L;3KMGvKC<-Tk}WMX1mU0d&dyPg zVDv$c<4i3hoqe0Uxtm`y(9+R<5KoEqKLId&XioM zi$ThAq8=6s_!J>VK<`e#y)oym!hT;m7!ZkwCP}KhH|p<8eGG_|ve1mKt~=@Ls6H_U zjJgqAuU1eY`8tm&=$nza2Es-qEu!@Wx;XHSY!GIa1E!^a1ROdreKexA=T0k9mp}g~ zb#xY&Is|UEeNB{fvfRYS=e3I1cOsmcF^U!D!MMmU)Uu$$J z@NXm2C3IuB{iXnX!O0y)W*bN{Dfo~n>nfWcJV1*HpJi$}1cMBs9|O!@9po{*cQUSw zEgG$}bg|~a4&@U=pi_L!62u}Y1xWDk7gm#1Fel?sA&=>V+(Pic67j)9lIZ5eTm!nb zMz?`Pjv?U%(amdKi|=Y>f(|0D7n$~m{eZu=KP3+s3V>D%q`3hQJOm1+5e~-+4Pv7; z6uwBBW`D&|?}2k9BJB%q*<24j6eFEYBm$BL6a3npA9uvSF3<+$yvk=4UagL*(-6B+ zx%}#;U*q!Rw>KkXL;ZmfwvQ7E@}^kwz|!h>M{CE(alucux_FNaVj5y8iWS2#j~_q2 z_T}??M5C_IK=sO?F3?`)0k>*^``{!oub!hwbM;LcBIoALsn>*$G%UEEXuX8Yl(sFZm!LE4%lV zuYv(h2O$DhAr@@s{YW#pBPMJ6Vk;?gziHMmR0thh$zrI)#|a79$k$iC_Caw239SfX z&PZhPdiBi))o~hiwbV?%_?bVj}%Vp$KQG(4+nX`F$e67LDD^+##VQrlO~hDx+m z&omG=yl46}WI;06$g1+>%O5!437aYtj1i5g{E|7)!PLNwG(c_-NP&CxU0ht|AZjo& zl3>>i=UfcRQ7Mjbgc7(|4>|%>%Dd%Q_>h^o`6#%?XMmx5eLNx2q16Sncn+$1^gSkF z*BGHWA!T7gfd;tntwr{=feaHc!GLx)y}Gq-9+VtC@ZBz@0g*!912_atV0ote zy!+&|w?7Ni-P18r(A%8BO$-xkF+REriF~k}$S0g>KTP(9nstKvu7RWyhx*4h0~r1R zk%W8{{8_8WE7NbnC%D}OW$Sy8chE3oW zX74lIeHe*6Z~;hHKx|7t28wx4-I3ZBP!Ygb-VNTxVy`t=h2SY&OJNs z)^K3^5>P~EamkVz91yzFMsNg|78b&&(t84(&bBwk$Oxunu z2?&IZprR8gOI9_}vIOKsW@cuFhs=PXpuN;>UpMM;7MA-wbZAifoK}~=Xe_pydaX=k zvlkWvz$1VHOKmgOD)=aX>b$mQ7$hj!rGa?v1c4$g?NF2%fs=*O3{Ae0xi8KCH#oP3 z7w4XD#8qK|e05ML;LX{n#!%b<6z2}DQ$|KcD1kB@sXlNTY_>MIouwe{LA5u5>#YpF z=%wH%}uBR+na`IYx}Hy{P+f|=Qf4Li^R4ZS~~x??mfQrF8l5@kcCRrdI1ki&9V%-YQ`a=8#8U84tf!;3u zttQ%z$UN-}oGPe*R)!|I9MaE=Ar^rwm@xttx~qGk(;7blI<*5rFrezHBlDxUB4*G& zS|=XK35$7l1r};<1Jzgn7p6cw$|8Vrjw?-K3Ota7iDn!KS|x#tlhEY4ric)afuCVR zASF|-Du6#lEd&FN4%_n)Bqrn`?NtX|B}Q(`-ZLMN^ap~_Fw!9?KXrmdO<=fJDbT>^ zo=as1J0+*L$gK^x9hizEif?e=NKhX_0}@}630)ps<W-kO8GRDP(gV| zt`;U3!^Gp?7r^OsSlFc^l?!FkkS8Q<+XnjJKK}&sQ{HsmmktFX#(+JE@S@sA zRY4(=Ur?~AR7IU0vV1W^QCfxAYc(|FE(_;rs;D&uorB0xmT_v5oW^{k%9NRx)~B26 zltD`eV^g&oKiyq~GG$MXg-wQIF&R$uwD5=KHhZXUoBf)gZ36IXLS{kWH>s!vBfl7R zdXOXc>Z4MCVVsqpe-J#WLW_=k=;0a|phC2$Frc%33biWtxDtcx&rR_^vcSGntQ>!K z2@o#~%lC|G&mdzE##^&Z2ndrxn8mF{53maQ0eXhQKVJKet#sM2EBVGp2mgloEB>cH z>|&S;;81Rgf2cE4J~WqO5^?|;j~mT;cbY=u!oDJdr5>j)QQ@9CQ0HP$0tKQL;SL_L zTfYsDi;L5M>fJaV3q)YKbjO2S}pO7$_P{MuXC zZ9SC7C2XwSOpynr-u5gY&o(i@ST0W6zvvqU+#ebKc z0jHAFzv4_UfOsS_Al!edwyN}YE)L+fRNA{00Imh4AKHl_nonAgZ?j6MFGE;Ut_@J^3&@loy z2%$7%y1Z#=cba;QdeG7|$~JVn!?~hB#b)iIXk6~=5nKHw+qok(!FkA|N$e=2Qy9O0Sw2-$C@sc#4$BqyMMnNPr1yQkJ zC~3Cq_XUI;P)a3iC@Yy=-022!Flro>7MOr`gjxuM z&L|A+fy1>@vB1lYBE$pLspwRl{<r7${oTmenQQ{Gt)mn%KurmtL7(+04eeD#;1;&ww^<7+D z{Q?;*4Kz(4%QXVj3axp zH6Gy*dDu?%BTkcW-f~*sr&4VY%7Y3;m~y@0j;@@%OXTMU(Q9cIfT<`VhWJGM(>%sh8KVM}GLmy?QugxpJibRwZH4v0S25Q%zV-UBt1GN5Y2LLfDey>ch&I3jZ zgJx%`AK+zZrpSu~Th(v!60F_nBN2hV4m>b-Qgv%P(Pox{AUz^?h$^i)MrbQyV0sNh zAs7n<{5Hs0vt*tto^8L_f`_Exrrg~#g?^MN8?gBrz!^q{z zHt2yE%o|mhVR+RCFiDD0bP?LQA*e0np!~|4Od#5b0OP!>0Hg2GkJ4G{mR>L7=M)Uo zhB0&4@1)J462(K-9368f3u=O&pTG!0Kq%*pBDje1Rdu-_FhT3;&m);zGREcjZD(Pc5*z zrrqp>>%nn#hzzFcHb-HImxOH)GmfbSIM2uzB=lDcv=G??tahYV{d&vOKhJu?X)&~G z&~B7N95elPf9GWLId$2kJD|QO_cZ@f=EFkLO!~%A(pnH}^|J(-o9&*4u;*G}@2yK* zP++i+Oz`aMU``dY36N0tbN0QUZO#94;gP7egs4$Y-H=!4)28h#7$D z#Pn7@!n_boM&OG2B@%xP>Qg@k!L6=KUPh?>o~-3VG(%3SXnHDM(`OQbeAcRioDh(*|JpHM+3>ZMz`b`Eg zD3OC}(Syt;%8Wy0Hr%L{CY#zbq!9~4`A8TvRUn}u4FVkLXgU40Ck{eTl$D(*s1U zZb5fVNq?@}K3eU29MXUtslc< z(`d&${2^))0Ge=&913b~jz*0fdqs8n;WE6qNqGUgI6KwXY6ePsEr|rNJ77fwv?qbo zorbo9VuUb6JFUMZBcubE8Rfc>UA~s<256LTO;$we!f;)zsg;!#ai&Lp{v+3`UHvvrr)~+Is*!$jleoKA~X%5gKf7BL2_wY{xSr4$5>FC zwjRJDw;%q^G~2idy#;_70#_(**I8(joMW2p2%-^!HoF!|RiZRTpTNTv@+P|6Yv`Ym z=nd}#mCdOYnvYvwId&NO^mXsMpKN?!+GW785|tecKvipnW_WU)UlrivY`8J95MT8| zA)(5t!UmLHLeeYfG$`T$*@4F(8cD&e2q)4>!2lrW(eTt28k=~^qB+9M05?zwn65p4 zCI$r!`tl4#$e^cSV`)L|?hy9?(k;#9F@sm(t7aT|h^J&_==@K;9QMwFy7-%OW#Ty=*Lg35%f)FFbkXVTjGXeOrc#Se>5ok^<-hNS~B80Cndm%Uq0YG>bLX;7#gnEpz9)Cfu z&eAD04uYtA*Pg^e512uG4MjnaFb3~O*9u*JO=RLJL5rus^KFyTB|ymZ=KwGj5AbO4 zm2DN6*H|ib&1jh3`PD_CxIu;xJ-KL?Z`&R_{Pg!{ zPoMqv`|r;J;)Pqv7G+SojZ%+Q5EzQ z!0)a!PZXHAPS%K938!*;W2#W90BgB>UI3|zWlP^3S<5u)u z+z>}rCJ2k&Kp=8O_ z4zLJ>wM|AKs$8c)?mNE}f<%iulI~Aze0%n|<`>ocLYD?n02C}t9zDtuZ|0s4^lCI2 zpJwCNuLjzq1HE8;#nst)zclTlk*Bk5U;I(NnE`G2y%GxWuWfzc*Dt(@@aztH3=*Q| z2|$ChyeWBk@+b!XFhq%}_T_X49{C>ItH{l+#rh+1Mo3}Ojd_xYVH1AMO0K& zW3svu!Ko zN=m|#l!150^-h+<`vLSDn3&LC3YyK=GG3qyqIH8_ddizI`sh&Wki7VP#LA(wp0}__ z0EC!DrG{RlH^Fd%*fBZ-2fpjtgH+(XU_k;*YP` zb?v9KxBe~EgFXHBzw<~g=A5--nv-DTO*LOPNHG6bZy{~J{`nU<`fcCv^6#Z9 zrSmKGvUqp*#mbdQ<|nN9xt;T+`E^cLzif({2$B09F0w`?Z)>-kDkjawe-+(r`@8wIFfSB-ky7 z6*Sh^bbE`5e71C#z_bpw8U@}9D?hG42QLC3V}bzpyz zk8Vv$Ho%RBPCQAF$%4I;p1v#m&YeA^ZMF&mV&oV$vb6Du@QrDxt)@&FC*r)?mEazJ z4Tq-gsvYQ;)qmr7Zr7#f-XVQI)H+6D{mFOrw4CqiT8H`#9*|M1R#ghci*DNF!1zS{ z#amCnKDa!XlR1Bf+q$i=W=U?M)(&nz?5B zK39*o$z!gh=2!+bH43_~=*N7%9qvryl2m7w1#z-dbov>_wywSUlLITG5BR+jv2r?e z-2@H7B(cxjEUr$1uSqF!bP|wF&hRiF>hl;QntcKQwMYT{u>bMoZz7%S3pIo3{2-$lLm z*CDEpcjXMvX%yqV^A@nuwpLY|a^fRZmgEU0{aJX+bZ)}djT3?{toT#azD&LeIlJ8B zoJ&{G@srr-Lscx)BO)`DYS^|I%`2JBcFGu9(rVMPcid=Sn;~G~o5tU6Htu)COZw{R z&~*r%hQ!}fqXoma3`=v8H23JJI6BTeI;F%3nUCg$Y6=7WET3LSy{V<|aZTy~VRRiw z-i94=<)pY^;X$b#r`B7K>%Gy(C&yB_$$3Edc1PJ5R(L$h??hMIS*vD&jTMFkF#Arb zJAEda*gZ2U%G^_;>*;ZR+Hid|muZp_n(VjfK}d7oK}}YIbJge_^lh#EsgpUT=Y>&C zZNV)9!&Pzbeh$5n*ZU=NzD^>=Onkcnsq|W>?uNML+7RB<2u2D(&OOOflv;B68c{6Pw zbtXc_DCPoDLub*tTIacLsh7B*Txo0jT=Kl~OgXW@Teyiq$)2tr%W<;p^%n~0r8a>M zF&W(hx*pHTWN#h)N=%k#;TU{5+FNghc*{?3{*tD9h0YKmL=n11em?U%rtsXTw52Y6 zCPLP5Dm=k)+M=HPw{)lf%G+QsJx<(tpZBdt1^mA>-DxVK#<~ioihAmc!m^P+Fpl1Z zNurClS1*xoZ>3c2{b?|G)owBZ^RO9X`%g z8G73-tz+-fmT&Yp9r2>CJD;LX3zjm$^pcyaW}4oZ8q>S&sVPOLuq&Si9#}fC4=yca z96Bn}-C?GiMaKf44h;-6_Sp+d7bCJEcBdi2Mxp?cmg+$<-j+HNrH z?ob9Sd<7E|`;+Zz3GBv3oh79L%76g(EXeN3qcJAsc%^J;el>f{_HB(23b%-h4FQeH7y}9J(rH1GEchH0>?MT-%sKrn(E3fToT2gJi(QgYyV}8K>ez7l?Q}WWY5KJ+zpRl)FXhE( z?4rwTz{?sjcS7$btkVc@=$cy-sSqwS*ciUGCQ5&0-OcbjD|2Ih1L<2urdN1+ZS##K z4jp<38JWj_ol!q`c`mUHYM(FlsqNode_(hKCwA#leOp797Iv(M`$^%}sn*YN>7&7O z|6FKHNd*j=fcoKuO&1!I{1$FFSpV#&v+OY%GVug!4PZ%jH7v^p%MY1wZCz|RNsW3- ze{Yj9p<`(u`gTXph`Oq^J58(8V(JnI$#n^7v7^T~pN`o&)ej3wds-urUv%7*Qd6pm&DrNLg3qc^qM93dpSvuUOHRiG z*lF(VAX>=}884r#fsUGE>-y^%70!J-6An$Nk{{Yjq#X9r<7HA0*&6xONc(wb@fV{L zm-9?b)vjD>wQlUA2k(NJ8FZ2Fv&wC5y@5gVqYQH*dvV#SSaG%0#kNzNx^XDoJ2>8f z@kQz(075<4TLrEwAJP&78EUXIzsu?Oe=DayRY9WzAm6`OR6OPU`y#vhS?PP{m{Qx& z#b0n%N`m7PR@XwZ;&{08fo%1`}4Pv@{{VfC-E&3uPRsDeUF`>c7Kd-+D6vXH5e$;Ya) zrP$;EsqR(Nu1;QkGxmj<&8-dAnwZh=Xs^q$^$OfSuECLK9t;;wGWk(wR+}agJv+h^ zXXj&0=PRi#?o({V0}O1yH^Ya|mkk-3vM8CEQl1H_bzF@$Io;%Hm#QJ;W!|bW3omy0 zI}9^Kc)*Lcyx2~2%|nOIwJR~6umuX`FnHDLNm;ERbJnguEBRV|hlIl^y@in#G6j65pyHIWz99-cj! zD+&XG)>@q(Q~iWGZS3;&(t?pUvZ?VE{MT_;U9B~Rz9!CwZ71}29j|;JH5rANWo2P! zjAK;UWQ(-^%Owjx=59VB#Ucwb+nt6md~%VUPO&%fOPH2iN5@3KXvGEMVFiF3S)*$F z*B_E@Vc#BTPA2@2O?W&Sw(_m55pO0=&RHW*skFzl`MVv$=j^PO?k9yoY{Q10b=Ddt zt0OtiD<6c9n@_P81lr_@PJI)+-3V4`M@SeA6T5h|PscDM$TMCppul=t-h% zFLCRu$#Q;FMpczt%G-0--5N_7h5G3^__XJ~jQwBbhDzM?+OCLFE zA#P07=~*U_5xe-6?YwZIQPav)e6vK#LhSiH?|LKE8{d^+<{Qr$1q=lSIQEnGq}o_| zys6vawVbZ+vsh2ePT#uGd1W@D_|x*1SV4hpLvDwUPn_9dw_ZH)7JaCJdAg{8*lN!@ zDS54zKr~D*DkApRE;Z$gVXTDC`-)Spys{x)r`zHmFMJ$Incl7w{*A)WXKq@ZHK~3d z8dH}HI+kzb*akHLBguF9Jh#yNBreIKpo2V6`(VPFUByl&2}FiJPlaTT(YoU)EOK93 zorG|2WYzRVU&>IHUR+eIaCW(!GSZYeUrDak@S@F@wdWsJFnf-j5(|owcNv^;ith|g zuh?&juY7jFvM7K?nVXhWH=*C}5KAc9b_3d*{(Sc4#=lLmhjROy2?QtRT;akh?{0=r z#sBctuF$4U6XmQZYV4hrGt}Xf^Y1Au3hE6dLjPa;#dKpx@`XlSA;N>WglgqpMecFt zQYZgp$ntT+I~XP!-i{ZLO6}UnaelSZSi=h)U&{$Up2C>;H-O@Fc%FgMXP(n)A++>ylTPdRo$aw(Q+S)$UIo*T-x)@%&U0)8FtOKTa!e z?}LUH(oBNfenqRtB>4@uZ#@^ow92=J%G+pNy(~YL22&b7v3Y2VCFxJrAKl)Abh-g= zQGJh%O$cY_PUVqGL*=VFz7G8-LHC$xx)(~b<^h*DNi|HXz=cBpC zh!IUx&)|};O>RnX06t+dzfbJaV8CVz&~_4{B=yQedPw!*hcWwB?^h8K9VS;U*u%J5 zc*X55a_)5{w{kx*KXpQfl_9Xie0UE{0Eqy{2t}vJp`V|Jp+T>9S+%wB({*ReZlIeDT5M8GZejPEp0WzfGy+ zci545!ztI_)rgqUUcu*DrGUn_W;AY=!&vya=jU}CJOk5MqMi$i+q=Il=Y7EvqFmMc zF5jiDw;0@6c!yK1Wwxaz)33RDtHi;^>20A@a6nG~3yQDFBr_zo;8CkMEn& zIUbeiOt&$#jw0Lmn)NDTRR_#s_bwFN!VLfcoOv?o1OG#_lHCroensvtm~Y>YmaD2w zQFfUP)zeI22(RC8aRa`V0V3Pn8!QgbV9fW4W)3wUOaHL#Fnb&ymuoA&Q&M?wOwa1K z-*vj77zU30S2ciOAR=<;YT#Itd|oADNWcTlj$9N97Bj?dw9sk;U`3Id{nTJThGKSV@&qK$HsMcMYvNNE2DP8-x!)YHSWTI`r z(#zn=s|te9C26TgWs5Oi@JC$pqYDSKx_gftB8=`K$H>eqz3njFt8fGN1-o}wX);xB zR%5X_k=%IiDd3AuQ~WR=fal`Dymx|IW)Agn5*eXqziUl@{GG_D%hE`s|7$ILvt1u# zgcxscXu@fMdvzMFGv}tf5_X74VV`d}cRQYa`YdZNY|!k$$cf!*!)DLVo_2AKDWtNj z?@LP?s_rL|3NLhFKFRnbHQB0th~D73_=ly*eepB3>vO9XVY(r}|b$EX*wO0A5A#n4RgET9(jD^$lB$@4sSX z#1yCU%>?&SN9?7(a41LV$JlPV!#7oz@I_kJ2t*9SO)O^?X1`Zs@zWc5Z@OXzuJ*c@ zYrOC5^d8_vFX-y+)<0h&kgU(`GE<8@5EMEacwk~iQS_*}f2_$wR*vU#XVrw_30@_>2kOs##ZkzqrbmX#(Z(#E%7MPft!62yxq`)(4+szX?CC zz5I)vmdmG-0;WsJ1Mb|?vimEHE&g|41IF;b9s9!0&!=L2a-$h(aG5@pcd9+dywr%ngz0$F1WWxyw z=1Qq=m=Dr*EJDwkneBhDBlaqmNqa9}9l6X~VOml;lQIv4Lg6Z@h?M`G@G?!@f>N`f z>Na0k%JlGR9eA|lia(fF-C4~XaA3KLTdUZJ>BaY|C*U_Q7Eg2iGJX50_kzPK=g!)) z^Luh+wpy_QuVdqCS{FOs{jeis{22OAKL(T*5GR@&R@tkEfXi@(g!(*!J2ruxGW>FW zl=g;gh4nwsSrOe4v>*|amge0TU?HBi5KH~!8xzm8d2&}zc&>QkZD&x_EH}pc>ddzM z!m(S$zxgNCE49q@9>dIn*zI?9`$^f*>+s(=woykVB{vsVN<==_#Rr}Ugg}eKxPXJz z-`0iyJCREkf8@>{!5JaLC?`qv|0?dvqnf<3ICVNY)r!uHRS^Z-Q4m>DKwJQ!)hdQn z*&|9&l!z1%*(4A?t79#K!m!8^l1L>WYh;rxAygDJ1|ngJ5JErDc%fDn?*`_Mm_ zGfq#Z)#GE4xogIikHKs85|)i_Hg z=0|z{dnDDFGikn0E^l$k&z-&XCzIiynrt~RC{vy|(V|Les}~#Acbi|p504bGpJ_%y z7x;~#tE|c&gwiU6xgZn(Kn;){M1HpfVPt{0S1J87Yp#o?D0wn|d$@|?C_5UE+6J;( z9hEgJsd$x3$`xdq_^!T|Jv zpEu43unX|r0$`dft8!tZCuCH=9e{Q@^r3w{H0iRX0bqeDq6&5i4cpNGB0_9h*L>Z9 zw>DTD9nosW=mo7Pu4fjYHQLyV$B+Bdm3anpA`R5J`BjXduHu;=6BNT99k2RJ>^SbH zCiF+hOlUV2!$NWe9;XN6@^fX8>(sF!;Um?324Gd|wjALOk;f*G;`4<%rNwjK`UcU) z3Z-pX$ITH&$1)CJh^ABGjZ(tPnxSA30oBkN%uVC?wZrH-*&`QdB~XLPXd=$&xGH8d zxcNL|t@5_hcL|60D)8C1z&JMkbY_pdj~&vLiWGRwsJpwQ9MSHL8mL8+EW+xSb2`zG zgCP>Dl$`R@p6ZcWs`g=tG226}qAt`;Xu3`odTw+lt!Pl)W-4FifI-G(N**_LNak0N zqj{_L!cCMOffF>9N0uft`)88Elmd!~V7jYBsIXem5bZ4T9-0>0b^UV^*P`8*W01Wg zfRacCs}XW!KNWs&X6=)!kjt@}ZAfRcsFPW%tb9Brp8oMy27AGzz=$>$09Hg@5~DbA zWoWbLbj`+iqvtI0|5wP zRJpZ?P{Nc0fN7jNT+N5sDx#3+#OlDgsbH22Vkx;Kd<8QbZx-D}f-_Mb zSeCOTQd86gh6r9ClI6ZPc2`zbg|-%T+XCR1O{=xhB3!XnqI!+!+bgVMd?0gW490oa zgKnCeTP97VYa(+ba!!%RuMqqQmG zdzvq3gtR9kp`GJZ(S>5&viG0T|bh znsD$E)b0vQ>yc}jBnvQEKfn5>&-!YqN9l&D79+4acINH`wT&Gj zM2nF#`xA?&CTV>Kac6{`!Br>`L=_~Ug_)vJL1uV=>H%vD)7#dPxF4En4^Oz=)Qs%o zIPb-sP0p3g+f6a0vZ+%|sg@`UV^+{zl(~4M=&48bESF6cd+(oa2fw-wZtqQDbqtzF ze4WMY9rY!v9X=5j+Dte%_RUaXp}m#ZqhNw>TP<&g1Xlth7#%}s0tCO`JV;?Ds(maZ z)iUnyM{JLXOegHpo||Nat4HdD87_=;!cEOS+4!oq`QgcuB8!R{ z`FF%(d}_Wf-N=wm+YCZE&{k(&dbMdJ_*_-R4X)VpxspMp0F6xV^=0=n;$vgoi6~zM zbN0a?GP$l5>c3frmY)?=@99E_!(=Dlf7$-{FC_q9Xih*5 zIpVk_Yq`C49Q-st`qA|52>u>lE0u^ndub>(3DX_rLPSM3F%_UNOf)ne9V)f(8#_YM zym0s4PG2kBIZeN1XJdVua2~VbVd8ZR;r7Vyu>ukVaH}-PsVLNSK|+ByV|mCEg^oMfEr( zJZ0+CP^V=V)o(bakWL>dOt2PlkvVtA)IFRP-QfDmTdRFI*4oVML`Wx8efIl0ttiOA zH*uEz6TRYTXDSk-GAN+ffz?Wk7ZDYDxq&`3GY(UW$Yf)iSRDX=-OKLxu6zFT0nuEG zf-IRU*@+g2Vda2QwRwRQp`O|VHB`6?^yA&=nzjmy>h0X6;qCfm%YEG3bkGq&8zOmS z#pk_bSskFi>0r-KDj-Hy`t~Hl{a|Ex|H%G~Je*4R%DT%An+W8Khr25EG$d&(m}bxo z58pq1wX^!hE{F@czwd)B@4D>43cMT#?RI_os2P{(oGrbK{$ zWlHN!o#o9+decc2X`i#Iw8TVqvxr?IS+?{?<0Yg1{#ny{{E=$F4uWJ>**QJbFax#P z*S#F;qy?swi|v3mWM*H z5Y25q9?9s`G_q@o;Odxl;YcpgHhh&%0q@LZ`+0#Lh^I zD!8Xcyf3&cxKzZwSsTlZJPnOFc%14C(%u+XV9@oT!>R4HHYurhS8(e6XT}AwT}J_A zNX%4LT-ZmrE+KLFqraULhw89Wy00VQN1p7vEkv_~%gOE$^?{{^= zo4lAVM4AZivM}uh^h3!zsH(jHIX-|)CSr&VAV20~ryjV{u>=9VB43x6sIs6*hV#!d zUv^Uc2)PYPGD|=nd3lJ_l&C|a6+|flT+Re}&o*3p7^WJv77@%WuH+plz%`A!$K2rY zpeR4Wb+%+of=rI1o0~Z-8#6T#k4`v(w$HJQwzsPzpL~|_;!C{DawY~#j4~=HwQVip zAOQ~bL`$-~INz-VC~m^6Wns<+d7xn~AnpvWWvy9fWDmMqK%Hmwa_Bn?Hk};hllOAj z$wWZvfevTAt0GW$rv%VF6Nz>NAMo6upy+`zu`kpGCa~53bzzy(!yR;@`hmB- z%uYLZV+YH?;B>7Z{VqcV19*+vF zBVl!5t;=&n>@oM&bKTzB4x>@)bSY2ycluEk66sM*soOJq6WOpni1Enci4!n2L|JWC z1ojvJ$1B^8m`64h19EG}GBQ}$^re9`d`RJrr%asqx;2-l?jTGe~~4%B)RR$f2b?1-9S3fz`f456&hklcwv7{6cMNJG7;bLO;J(~O1_n2 zI<@MH8-6HVLPIbgU4q1_8gXut{cf4ODEbgMXQO_?LIrKqKbBKxUQjxsa@m`pyZ$rK zNbE4vEXKQfkR_BzOgp0OC~yCzF2DJ>7Fdu&2IM@z+Yi@yukXr$k*O3TOZ~q)T1Qpg z2yx2@eQ*RUcXhhl{H@N1+A9o(4 z_R&I54Nl~5{QrK(^#2SAg4_3nH##`W}5t8hcz-YYAzaBB~!h3o}Q2V z?)hzUJ{!%)#CPqAEuon087}SZ?cO0N88KSPdb*?MI^PDot*WvbmJ+pUj$)CXR@s04 zeSK4!38VHHw@AET-kaiM8TI34cHB0qRA^{u$o}&_x-I42oQ{*DJxo?Z9UYPFr8ggC zZj!j9I8;36;VALZw_rtrsG zK1Z!jxfeU{7({SL z48d*NWU)YstC~aXlTyZiwLCptdSf>a&+DWCy0)<<=De`Q^z7N-MNbt@oS-LY@?iz( zCULT{?Ua_5PS2ude}*|Sty#8wxro!C!MU?%c@7-Nkv}}tJUYF^eNm#{@&T~jlojwe+J*rN;+GLMDGSnfSiJBaDg*3Mx|*rQ95& z{Zeid&t@kZi$jdMzJE`^K2RF0teTd58eMeEYs%S+^Wep(m!+juRCDiC_6enGsi~wg zZmVS7bUFL3_wgzRT2AzuQCK-KI%~PX2CaMQn$-=W{603O3Lw@3S`|)O% zqgL|)*RiCJeO~JYdj+XqCzAWJty;9w&sS%e4K<}ja=CPGNmmfo&$>{H>tbDLT)%!j z-Z1|XHoZ2brsgMlp(&i2=`%K!K9Zl8XE8hdODW`}h=4%V)8vC5HJ2`4{7`WD=jbQ< z>W4>;%FD}#h+2hkxsR%@*d(qoZ{ED;+1c8rrZJa>+LBX?Cf}ZUN6k%r)>q7RO5V6} zqp<7Pg~DIoAH`%{xiY`%@j>-!>A8Zz!f~T??$q~T(y2C7@r;&bV+v*<;Ks^L3Bkd^ zE_`Vdlasw!E!OIaig)7&(yOKXZ{EDQQz_&u+cZB9PtE%$5{x&y!h$_sQw+Mc<7l_) zKudOYMq82l)Pwu??UbZ>jlJwT%FVGD-@beIAYnn2@}ZGyTeoc!x%ln)qJ;}}E~xA2 zC6wM|vF!N}P2KVG+Mk)9lVkAHm!Twbsb6Q{Q?9!7>_lYzz$2R?GGe2nb;^lOLv5yg zoXkv54qaBm63h5@xlfVQw@Lz3yEm7hvV4j0cdQW@jLbFKAR7IfYx;*ONU z{rmT^JJa=4`2+-%`WjQSm)L)D`s}WiY9%HnmTA?}ko3IAZ^wymeSL{Wg)VPS?d^Vf zeff`(5%Y$(=j^|~tHr)h9H%EF@RIbfcBf*^gWc-e<$<4kUtIkqrn4 zaOsH-61M(yz?)mzXv>x@rUB&|?uD<)%FG$Pbhdz#+|=}lsRRoyfcsY`O==xEawXKI zcX#3N%jL^hShAPQmgBPspW?P(Jawo1m8IhE-MeSnr+>nE_E(o9HT>o9x^?U1{djqK zN2h;Q^X=QG)=}Xr=H3;bkf3(qLXuXJP6UF+qk(N(w|)&-VEshGsi96;I{EtY^&!nq zBO}*s*bx7Db}XAi*zDfXVG$7#x`yg=(}47v8WnF&vB8i@`*aUqv-qJ}xla}P4cxQC zizUaJOk(bgI?kvz)2FHF>Cx|xY(=^0SEofxOmACT z4Xv%MdHML%PoIwX@ZrOQ;NZBKsqwxqC0E%37PMqpC0_pdU8I*~%bh!SMtc)eMV)7E za7emj9M$Z4G%`Wrgx<=zW|FF`)$r-MUq8Dz3p|XBLXSp!Qz7%`&rf2aX&MT&BT1Ro z6(ZsGG8&D85*BR3z-VPVUb@sEF;r0ZZJEKMMT^+1lJznzJ`|;}v9ZPE+IRKN%?{1I z^BM1n4b#)OlK%bnuF#q|)yR-&L2XVv0;2z1@b$in_Vx_&metg3x|_Ru=hv@K`};4X zFS~6;HD}a%2^Pi0hPu4HKxNJx7{hLRbbWJTLPCaZ`w=XD#gdYeiw+L;os~fWetu`h zxTHs3t?m6>T&%H)LztJJzn)B~$IRp#tbb)m#)C44ltzCqFRwP|junz~(?4UlnY=JA z$eev0zS4oQv9aQp`gydqwF4eJ;1Q$5w6STjTxJke#&2kyzC4iGIGX=?=6#aO$NSrk zVe9Z;c6F_+u2$ya;v#p$;3aFF$?HqWAAPsKTBnu5V*MQ(7cEs&S7(g1*qorNM`zl6 zHadCoBrgxoUT-@6Q)?@ucy6k=YW6CFAw}ueCu$3l-C|QbLuK{sH#9IvqNY2zC%;@} zVP$2Fx-`&Cwi#fSI5k^P=3Dpv{dV)1zJ)X0=<9 zeBQiyBY*DPInx%&pYQhf(i64Q!^S5@Ivl%ewhT09R@Prapxh+sqOo%2O0vfuiCUet zu}P&qeKP3$_D!ddEAP@k0$IqJT)Pe(GI%6rBU*S;Svfn$Lu#^n8v`NsNg$CQ z<7X}F0(>|`5Bh&$ zPXf#-TA7=hlgL>QJOdmiZ)9YI?N^6A&mVJLi=mM}RPghp|Loq_m`A@{|2pCB%Qim3 z)-^PgigXdu>cxRraReXnA!~3Q8(WBgmyeH@gM)+rSYKCH?0B1NYVF)$d|ceKC6uk$ z&6=7TrbWZnqa*XMMKd6sqoyr1tS1Ofp8`w+Fo2~6+} z#M`(ayngHGFcG5Uv==+xefjd`=*#7TIvML(S-Y`l!~tHgAdhExn+}vCQnhyYB{2n@%OWh|&YjJIX7$Hr^RiaW-MzyuIcYJ*bCMaXH#3*qV zj+Aq{43{j{f7TdyNK%qfvY6X!w7ZtA@_Bl?BlY8({H6o8GC+RMmPmYTY3V~+rK9lB z?_%jyk5R0x6fC}wc|}i4EAWho$+}IOl7VaVW@?LorS%G&M;zn7*CUyFAs0p>Yc*aF zKdE_h?fX#4MA@4wdxqOf6%-VnFFEEo_(|7`O(0=B^uqb`v5iKqO5>lYVtOYNb+x2F z^aG}OX2h4$ID7V+$P;}l0GH8nP8+kA*OszXV&VfrLK6IUDf8~!8Pl-W?61GBu?ZUS zv#|K;`Tit`S}FCT8bOHBCxY}=D96Oa^pYWT9u5b9=0CCxfg?oBCe-v@aP1YzA`iW< zlh*Rvj`?H+H|OlJqFS=(*u$)BY^G^RQBi-LuMX98aL73ML_B)=`aL?=stAa}5;R@@ z$WQ>e32QZb!soufehm1?OnYuVdGchoi<+g5RZEUPE=$jki#u*-XGfAGCe~DBdOa6c z%DKuw5&h$1rZZf%YM&#$b9}RtcB{w4>1SIjwatdQ4%XgT$0zJIF)XLqmyRrZR9Wg* zRMEs&FS*tsvXsN4XPjn?FXAVfQbU%NzWZqHF%*}P4N1C@6B849jVqX$sd|i+h~3w} z5~Y`jmec3SNJvPeo9Bm=cGpJIQ;nsQjSBTtRaLbT8{%A;ffSNnzdnxPh}WGu<(-(A z$hOBIj?vfHhZLfMQY5+0n@h4;V?$L_W60gQ23?cKTN#nQQY4Sl9XD>;Bx3tTMk!3H zm4Em=mI1-}6bY;u)SO4U74Vq#@nAXnmKP|Ek4R4sUlq0f6jv9k+$gcbyfMX)z(>jH z;nJ!x*_q6Xc6POWsl_R8{C8QR+$7^hS4p~$>>_uUJ>vG-U82s-EsMF`R2D2=S&s@g z)1+dhdS`rdQ%g&taj^%7#HA!TZw^O8s&u1(-E0;QLM~8REtYUBU_*%J`OFwVP7X2a z$K^hoTE56c*@cXznN;*n4HY-G6}k$P7pcddy(!LwY`{D#?o#?(WB;7AtHBtd{RUVQhO5$NhyDA>Dr`|>E@MW4e#EwXU}AX z^lZeU$9H4E1X=VrZ|FdV_wuWv}!$KE}d*oO=kuN)?I z=kDDC>vhk#sA)S)wH~1(0C*ofe5l)(hlI$HeLDH*bo$8e2CEtrlQNHs6|Z zuCzl{$(LI2R5#s}J~dM$Iy*Z{rk;B6_;J$QbeA-$MBlF+9h@1`PEJmMmM6B!-K|0V z=o}nui;^O1Smwm@{lW}m74q|JB2w)`-nez^*HyaeV&$V*uT(w{PEmYj39_5N8v$Q;n+FGAducuEBZ= zc=9Cq$B&D-`T2aCH_J#OW~W~aOyHZ_AiE#AF)%FbvyytxE@^4wuJ=#WU0m{z%{A53 zwqix&Un(0LwEqpOQo~DJ>ta+8OOecfxPSCy>%qSB3zSe@oA^2+v7%@Dog78z1 zh-^A_n$*5{>5I0u_p-CI=`#R`7O!rtHnl=|m#HVxr-wDVW7jS|5fROxJ%(y_c4^E^ zSIsHj_j?TUczAf?xhlQh$)YwjH8qFt?>3MbK`6p1?8QDQ9It!+d>=6T$@O~-_O_1q z_xFDr9Nc4LV}n<#vM6hz0{sx&!4Hvl!ib>G(grjF3>!7x^h%478zxPWvP#RtqX?`_ zeTtz(>!lW}AEToeYKykxbue;xC;+{Cz?|e0@#?!AhuRFW7zG-F9x(t9+5Jt$AGsw!76wt`v;2;@F6_tDQ7c8)G(Ec4eYnRaGla)pbKkVn{Cw%TL zYkC%@zfD+Eg!~;}UxL1u2W0*8v!~L*%Riz%T5@x9zx+*3;n%hc4z_i#{O9lC=N>$G zV1|j0**#2PYO`hP?(N&74!2M?Z3Q3u9mAyDQ`D9JT$r}vFm2WE|NFB3<;Rb@-0q|I zQw(y?SWFQJ6)Qax-)1#F&=QLb^eEGNh zas2)Ko~}1?J`9%5yR89BB(-oX<`>*R?8u@zE>T{7H;13q8nzeNbsD;k&-(wKM$VMhO z$#dQU)-`J`M&>X7bAdSOZ`$U6FZR!O(buzbPXGN^G-0lJGXMQo7gqgeenb7IF7$tS z9qK>y9{-oOUq$_AhVlRQ_VcL!pXT-d^nv~j7JpXP|LMQ|#}?y%zyJU9+tdEr{r}(J z{=eP-f8h52`~CkXZvVgC|9|B6|Lgw$Gq?Y*`~MH!{@?rm$8LYG!+Y@GSW*cUO%qf* zi21jrr5$oki$!;W9{@v>*BPkKx@wheWIkoGbLUREsqvwp!oot-GTW7vt9K6U+P`1@ z_U+piEm_Gfz~cQg1)*!!t_^tjFg`qdGbquv?m^+i2M<`E0Gvs>jNbG0tzOY13r6$I znKShfvWpijUi|sqZ_rNjoZGXI_8Zvblz@f=F((BSnwXQL15UN~6P23|8K!e!z$$AH zbX35-do|%RV*@SPz>LygYsid&`)0%roV z8+N6MJN8Dk*c7+++WBle`1IX7#SP3%gb4&$s|}jaqE*|ZJT(T2A7MO}E?o+|P5A+; z;~k?3gIQ7%@qTvh0~j7B&{F}$#nSU+gqxM6XQBw10p6sbXTB#YIxRQ1f=m5P5!2Id zgyDRiZ8N={7vnYg)k~0-gTump-it7gN%_SqH`YLCq*@nvLSG@A4k(lWfB$WumRg}i z5V4P<4|irtRgy}#yW8wHg)WJ~$G@roUEu)<;$`&I9Rm-gpIq_g-MjjdtBVOC^5KIT z>WxI8dqRd1RzWXY;^Mbk5Fire{dYcGM0+&J@8#>;h_dxTK)?->&COnPbWC>4581bGp96?X`48ZdzxDTj3Lp5rsAPWr z!CNm@kUtZ00OX(P05Dhc^K)L%cpM?XhBU8TvnB(aIMYB2zF28@Z{Jqc(9kIC(_gOS zhQVzva?juX=KcGVOjoJHz>Z^;>H?@iK?85zP52AfzlGN6Uw^D8$V2)Am&y5~$ z26H-Af(bOTpAZxk)dE)wg5DvWF#r06SdvDO&OIJD;JkX-J*>)JAeK9MQZK`AtAi<9F~e#uL#r+k#x;+ z8S6LCs>(ccC4X-5zg~jMgoFfEZf-#gdb%ZL13;^nZt9I+D$d;U@`AQ86D8$7X$D5^ zqJ!|<=WZe#LV`TEm;GI{FSm5c3Qkco2<4eK7Mqxu?0D1vDdYz~=z5T7i4I?0%!@C# z|A``~IoCcGl6tIaq})R*lfCSt1KFP~P_eSjkcB8})0T8T%ss1(sy01$E*gFSYnP!L zD>&u;DLgzmZ~cMAV#gs+O3h8%V=JxTI;4ZDoRpWS8KVgA1C~fH?acK&hn}Zk&E@GO zxp@ig_$c*UOEDa+)KN=uEj5Qm+5=hm&9m=Sfy&SK&{Ky`>;)PN!B?CFUIe@FNt1tldqidzv!s<&RR z;#bgnJ@)k7c!TI`*A~wAWb9>UhIBj|%_ZqFt-X*2I{BScrC8*xTT6aTOqfB~Bnpvr zZfBsJ75B!C??zJ?6DZBdt^^OR1R@*7Gw+@~4d50sPnR+Y80KlD7SHDC?syR+RjFZk zIx8yb6@RePSidgiKEr54%}!Li`eKSYC?UZI79HG-8fZwe+@QO)WmLfek_mDi1g+)t z#0Z47p#1#&ef#$_5McNa!4YrbK|Y4VaS_ajc>44R!W#rkwF;k2(U#7E*bPdEDfbZU zuu0dgS@RTv;S8RcA~B25{)p-!-gSt)nV196nHIQB%pD3lWfIB}R(1l|#lN61TRaI6 z6tn(hwruWqRQKfc{dcLn4iwNoyO$kYY7A(UN6qf;?jr7!4%p1QVPd$+!Y!&fGQwbF ziVvh996Z3|37@52uTp17%OlYFZAWDpT~epYwtl^3>5UbjJL>jVA2JC!Swp95nv~zI z{YQa%N_g27w6Vd~mR?pLZ9YD}{hI7<-|ioCKxBCo*lJg?2|+@y$Ss%X>VGd-9CBo- z(gtbG#hXD;IzTM3eEVQ`%oq|G=(Q6RuBHK558E$9n6Zmv5PF7K-g40`cw*=%VtJg! z2cUYoz{g5#iT@KvvM9N*yk7NRi zDHv(C%Y(ZUSsr}}l{0pC2AL;>vp((O$p8x4)DC$tx&hl;;R)doI&;mO6V44H-YjS1 zR{>E)a+&K;VPg^tA*UhVKrK+T!fn7`Jem}OI^YNqB_YMgxnh%3TtR^W7$TAm6z9Fb zB-e?q-F31a%$`z3Z$t7UBF$EXNgIQ0QaE{1D~Q@-nB-%EEtzHAnt~x2&4Y!B_(oHPEIca(Lr4$K0>{F=Z+om8B~S_cuXP`>u_P+fHOA&iKU>Zr~y7N z%96bpx%-44G5B~5AY+ARfA+{fJd+X+^NH*DARTswBq$L?d&G!p7kkXGu3mk5^>%|y zivXzVL>xxCxBB?}C>cAqOp{XP%yk{NzJB8d-dYjKlz2Z7*Hb|B ze$HqM;L~PZw=Oy-=Kvzm8;}-A3xwlz86ULDoFfDv7V;j0oXxJTu3)dsCx+X5Ya*@& z?lI)OS`v;+y@lxSmjO;>9h9Ajn_T;rN3pT81}98{nIL~d{L4_S4wV!+^@3LSphV(Q ze+^)eriu!=BH>dKR$}mD(}z3raxzDN}yFl zLD9_6-AFnAKZ{wq|)~%YJ9fr+_ zS3p1$e-W{$=OF|hAQO?ffMEfdBC)vo-b)PC-&(!xUCOzR*_6;_1rd$P>J`OXpz>q@ zRYpfe#euE@?+59!@x|W@=&{OSOha9xJ#~omK?ECOpN0rPv{A#P5rqeXO1;L?0X5#+ znx9RK5YVO58QB*;KE=xrIMSQ(oJjU?g;WKKje6ATREe}5^VxWRd#hukp;p+s@lW=? z1a1&64v6aq|NcCe-d31x$|@?5n%?s>pNGyD2{!`F9twCpb;wsB*`W6FVnZcT)qEh% zK!z$|*~jeup3I0aU6QuD`Z@Hj1n|Xw|NVE&u(1+$L1T!BB?-d>0fS_QK0uxsK{QEg z4P$I9(AU>@k5NHfQWAgSycd{)WSz7lV`F13h>W9cu0y&>3x4lty??1J>w93=a;W#6 za2cp=yW&9R85S}T_>;V7x6>@tWXE^N$DVxRw>|N1|7LdIj_z)qKHk0Hf0*bHB$1MMFpK^A%>=vkt#gIp(t1EyTu zmipouO3hx*&B+PQlE~K+2%p0TO9k&-r~CaZFTxAx0IVsnETj6j6Xg= z=B18`RqlIzf7>J@l}ZkyW_A4(+od&cDg!nWxk+6g&(r2UZrIt?RSEGO&x5q2j^{ZU zCY21H-x3dN(U|gtq?Y!Vi{iy!pJ&bq2n=Fbp#GWv`q7Duh8!#z3`U7?i7hSY@n@BAG|6tQhsa_xm2)%=_;%-1n+>NCmxPX;tndH)nQ{i ziYJ0}bTZwvYTu%ceboN_(B^k&DjQpEbW98{WCv0z zY{>xv;}aKe=08;*+!q^9br^>!JraG$`w|u^zP)=@E?>TU2jv2+XL7z=$?%bhm>CoP z9~1tzva+gq|Gs_1m_ouQCIp+xujG^pXnoYDWc+%suQwt9)%+1QForM@SwhSAoYiI7 z!S&ws#~n`|JlL+O9hx2kn;%>)8Wf6FaO+QD=ul8{3yc>(5R6YCDAi>Ylvfvog@x_b zaRc(o>j9=FyfU^gYJy(LV;!y@jM3ufYmR8F4Lis14!e5wDi9$XN&UzR{;8>{#6^nm zF7A7-prS#v2ql5KoZO9aUv5EZ>0w*8^z>jWhOgU2UB z55*%V$3d`UtF*kalSmi$?u9>nx|Iktt$B{>&@9SC%fnTnae?i2oESb$b{2Lt$wHIk zLpE&Xs@}bdD76uW)o@8-`osRiDDM^)u0O*`nLNW3CpG-EY|YEu-t)E0i{W#qzYm{1xmR;7tn1`4QSHv@*?^@P=jg`kCnx&63Jrl8g7^Ft-E z3x~P{i>K9AuU?%uR5YciIUk0|7~)GLwHvCE^ULfxvfn^%3!wP4iSr>2NgPk;m$1MZ zKWSnI?^FyvCCWI9nT6P&1h-^7KvG_Zk3>|j%ts`p9ayZuKEb?KNx1>f3WE8AC?@ZU z7^O!<-#L7h$^6H+H!(lslalHYIy2y9w)&K#3fY!k$|9XaEDpc@KL{fkr%L9hyKks= zM5zC*U^;)9hq3{dQeD3c;CHf)0O4E)bGsDV!?BGCLqL+#t}wT!(z7GJF&^yW8xV_7 zL710ZSrl{UBE)2ZaftyM+qLS6L?dew;#)m{TrBnoqGa%q>q;AJC=+g6DC5$A9zmlp z8wVuFN)a%R9R~BCXr1E}06Id9A%WqL`e3oDSC8rFZ^>3B@Z;2}@bB*)ny@t=gx`VG zX{4Uedv@w@WJ*sW-A#IOY#{L%x4Q;10ddgaVOaocNtg`u_xESxr*uv&liIMrG2dw@ zEAEO@X1Rg1(x$mQ%(w+GxL*_!-=ntm@{pk$U_#6|SIGvGvkb77&4&XV%uFPfm_ z)@b4@x${`X++6W_WC#ZQXs~O@5seu}-Oo`b>~yDMv!w4_L!f2i^Cq8&lqcL;FK9%O zXhNr*k_|hTF#8Dx&-Ayh48~!4iG$|NQ=DJlJ={-r1WXw3Vtxfgy?l9u#FD*xYb-=g zSX#ISl5u3DrWA2DCMzQv3|v(uNoI>Bw#z}{xAmDc?>fKScwdVZPL zdOm<63}+1O4GL!A%RkQ6WyFj4s;jC-h_yMFYUI9qeSrQIO1)yqdXsQsReoDtEp~mz zV&4tHyHlykRvqUL#S%D^m|FB9l#+Cf>U|~;(t;RxQIrt(*otLl+u;Jl%M&^D?Aa(? zdMW3QC2^W#7>IFbOV(mZ;{U9{dI>FDBc{D02$_#6RZJsw0 z6(QUp&Fx#>bzBWeeH3hkMcJKo%@nAZ-QjE3u8o8s3a8y8rQ5`zvzW_ShCnhN9@SkK%%o*3cfL&O~ucC(-TWc~Hk zZE?t=AL{DXadKKFc%1)q3^Fc^D+klZo$&uy`IOqplRmImSZZnV9XOx^xP#Ihq-98t zi`83a&M6fP>%0X_!Pnmr`^cGBORyLDcI=2g+;Mi}PoOHVJFu!d2K5gN5K|+zW?fhE zZVR8eSGU(H4W*{1r!%eKz(8z=U7!c4VQ>CTX4s~Qxdf2Ga^?bM?7nA3p-0HRS;yV{ z{K85jdOzLo6aFPQ#^~`5Z799wJs?ZK9g@5%3J`*BfWZmutcy`fr&66 zTJ^vl>$tg7Nv{BL`+ocOZTr=dQ_ZFzI`S9|`XW$$35^QdI?3x#pFSP!3^K;5u4Yx- z%d`T6K!>}C*lGd!v{9h?fTevHW za(X~;u$j=4=b61Q;rRd&f50wHW)g#;DCuP7h5i#(>$btZzfDv7GVku)_hDNy=Xet; z>8iI-yq^NU2UAj=IAa8C39=2|?swEMkMlm9R^Ho~8g{gp*x5k0!cZH;)F_=480@TRR5nTWQ{}z2kvETq-BqWHV{#N#`@VnQ`HxRFE+;4FJ?)f9 zYMAAwxkMl(OQg2UJvP8yczsPB9i1+Z-ZkJ9HL13wRzck78+?wSML}1551H>Nm)R=F zk$A8o-!!u^FU8KJOt~XHZg=&*$R?^u=iq?@XbNe1%I)1#N{0nUDL`!p8cdFp)lOHq z)^OxjX8e$@X}_|eyV#z@GZ^H@g0JhiS^}Q`@ebX>KHNb#3`g)shy{^#e z-^=q8`@ht`{DZ(ii;vIGkzfuZB{A&MbsxSqtD|C+{LZQd#P2j|8f?(F5n0~u0G5P= zn>LRrtLWI+zSuC25BIjnf>=`QTgb#@0ZuVybKpN62~lwO6HhIm0Ube6K%T&!n3GR< z0j@z$R%={W@H=wkNIl#(0>(uKkU1KOrD$kK5NtU3 zbLejpB5WmzUi2D8s0QC1a!JFMZge()(9CzS;#wq+rzEAu9*~!rA&=6UzY>Mx$rCHbVyx4IxVV}!FKRs<8&m!0UnaNu zEE?uVXXXNZLj?&({nv|K){vatmVjHLoEJT~_l%X>-7fRJ>=v8sP0Eg2ni!>@30JMU zV_&ZFB(qcGvv15@Cnas|#p>SUGrcBs(=RXnCdN4M6X8frvM_QJ2Prsd$T;DqsUI{O znHIrTlS!)RxAWOsRU50pTDpNe)7lLLv@~&SI_h z)sm(ZeV?Y}B^2$Z)tf9iP(ByMme11Z<9Tg!D0D4qpB_a@Q`6B2{+QmzgR%uUMeF$S zTR>u=;#2>aYpj|7m_|M=L~)i0k1k;xw{QOoCC>BU4|O4SD99Pz>{M_PFei?@gw15w(=;;oqPx*v2IH7lIjtMz>UjkT7`wM4gj zTClRS$4O7OvyeoO5NkcDOyBYl7+5FSMSHzvg;?l$6f@AUot-$#_@AQ$_aa)Y~&{3G}3+7b(te* z!%zz-%6Ol*uH`eLF)Z4BkODs1gTIo65BLK-gGAU`!A(gSBzS0bef!2EES&K^!QI#g>q(!(3RV;$5 z3zX1K1qx)pL|{VfUjv}{L0ZM)T6L_cNR=cRX-FCl(>eBgl=oUYGBN?ziKQDzqEB+Y ziB1=>LDZ{n#fV27XVj`RgzdTtp_^z7v4@JNrEu#-gH zN1{p?1+DQkhz^Fi)WxI3m<2o~5Xc#}nrIXNZF%tC@~dnAW~@BRxBTPrg60T9g?RE2 zvpA$Z3OpEz#v&F|!NKhEYG!8LB8*bK9XW7KlE($fqLqy-b}vEptoKsA4GR`D%(ufN zE?c=W%S=pbLw|E-qOPk+1tkd1!4ElS2g=CAcJ_|Tbj|3>*9Uf3z#vJFH_;~@JDO+^ z0aj%iFJrF<`IMe_Xxp|(d3U=@m$Zi33hDVyHt0iCMaxD51gCH$9!uoJMplJ=K9>(4 zE?KeZXUyGk##z8>?0Zt_lA@S6D&40?s0wj#tGDh-;mUAX;8m~(v6l_6cSB`?uiDBmm ze~KlA3XETBL3vjRnkOvWxnP+*Ard1i$it&@<_ua!sS}nfsx}O%0-#P({jHZZSkD(p z&pL^nNPk_lTh^^uK;OneQ9RVOZ%{( zpqoH8M&lB;U*NukYIvS@@7C`xGgfA$ITo~RkuMJ6WGye?Uv>cj0k-RN8ocXzdwXd# z?4H6wr_Q(Qror`BeFs21Q8mk?4x<6#h$M>EC{B=w)cfYsfgQd)Y##(<5SHOkbEV z2n zbfBh&hD@@S3DoDE^Q6)6?0ot1VGQ=X!ccJuiL$;zL_p8MJK1Ptn1F&?+tg%sY2{0R z*#k1X0Y_r%A~G^qk?PM}e;LaEOJF$*%i=tWa=mswI~L$USWL|1Q;wZn30jR^K;<6Z zdjAV>|G@s~#Wa{Gq>a$TXf(Iv@a*}}%S;4|9T5CyzPEDdGSk+8Yr>be->X-D)zj%) zAYs+COFL)_%%|+$q|7dv&_98LuY^i=Cag%ftH9^Rjc=%NB zRN}v80$Uc~BNaV8iwrQCTu7^;;r5lC7Yoqy(*y^=M~f?HiL9~6y!Ynp8T#RfO$l<5 z8#EG6!>lg!*af|pl)s54?>ec8FAEB$e^lTwby6L}*xq5fu@gu!_b814ajUjVs`mCgubj z(cAK(wsy6cP1`Hf28vm`cI-HuNI!$V9=QnXh*lSCYibY3_=((-Q!ij^xjB=+sPtJI z=F!&9?(n&DJ0NJ7Wh8eEov03M$MRcRQq-344MCK(JLObkZSCodftmMub}Q)@|l{GL|wg_m33jX+HJHCmgiL@87S4#0Wjm(Sj-v7V3jjo1N(!5-V`HlEF+DvF2k}i>sYU`?BOH7DcPhQab?yfT-$H;~ zg~z=C7nLx_3Ow5VprFMM6>oslxLtt`^R43I9OmW}B-2tB4Cg#RGO}?61zCI#{a6Ac zLgP@btIyA%;^{>Iu777|i`8uUF0ZV-m`2*8zvkuT=9VBZVzTlt4IGh?p~1XgR-0=Ke7=jUyvkKcmrqo(!3L{9wrwFSjB^NN)Zl9L6vC{Sl^ zV;|4o^7TD-`SL-$LquJVikjLL^yfA;H*XacZRpNHVA{T8M?_W@8-T+e)Ax^;!u0@_ zCOkKH1B7frRN_n`K_wi$jI7MeGO#%#n5NBAQe2>BgN4o4=;`a<4+vP~Eq4_iWgD*7 zBlvP2r|sRfYjHFc9qo+OD1>tY@S?zO5zn8mL3QffpH^|#=VQU;{m>32@%wi4Bp)*~ z<9Yn#No{@oHMGneNu;AYVFOy$#X_#;jukuo(BJ9C5)&I6i3is; zR-xgXm4{zYa6R7*oK-QZ+b(kG&_?XBLThT*pZ$}+e1Yd*|9nM;CnlaqYOZf;YO>@z zJi2;#ZNj=YXP{8Hz)og4x z&~DXu0JgeX#(Yn#S5US$!M`v&7f7Ue%(ytaxNH>?S`95;q?v8w#=AuJ%AiEiK~d4( z-+vdF{p{JZNR(SQZ>EuB8k$zp4d@9iFfS~En!3~S&fqc!jF}Fomx+g&nIg~@u0cu| z`KSlmgXertU=U~Y%-SNVgT6;>oB1jV9t7G+L)4jXw$BjPg&^X;dm^!Z!-frKGBe<> zdq;&ybA!x2uBiAINLSS*@7mh9Ks3rgfBQJq__MH(lX>h{$*R;j3}miX?ZQiM|{*R=+-wr0hsF)b?iEfXIBeJq-2uS{- zX|SaHb>RYk(bOO%0dL~%Eh#XQVCsqqO7$EJ%q%sJ3meDG6rh`N0`8A{VPS$xNvjQ;*D*6CSU<&O{AKeMAc>2NZZ>f!`U3w7PKN z+1WR1K(8N8%DBU2l~Nmd#n$FpjnF>{V72#(HL}&Sv_A`X)IU~(xAwz_`SBXdAbX}o zn^M?%wVysQ>+9=-6ZA@+bAc7l_UCt{I1OHG@0X=isfo<#qtR+hqt$kYoMt?07}#$vPo zn^z*K$;oA5bJOP!h>L%P-;b;2@(QK}4-|Glzg&d>hs#lDiHVP1vfPOi%TcTI>roV- zYMU&U39hx0=h=aJe%+xG3oEOmuC5YL#uUo|9TE2y=-oss`O}Dqc~E}1e;jO!FOibI z5}`K-_uZ$0%WJVS&}J()kC$dFHOI;N=-jAZ?CsUlXbDST;E_Qr68HWU^AI{vU`q zX>Rgwt#GUR^8-XCpbOSzi=I-EkxDNE(Gmy*Fh54|;gujG7xVh>^0IvxKUgsLH+{8d zho;H}_ooOH&v#k2enl!h8`aO%SUhB?H1Tnw#}#?6%i6sXq_6b?b?=`J4Z&s@mc-gnyD2U_=~dFs`Sj z3L?D&=>cS{TC?U#R~Y4?qc2qV8Y9r%+smQis?Je>Ho&bC5}c6tXr9IZ0KxD~n<=B~ z_@6J2m+Z9d{|<*3Y_iwCeLJgRt*Lo9UgIUE1wCEC`_He0+RDtwmslIRwKmumc2evT zCeYnFIksB{i|0I!Z}+PWW&87-t7onW(T@Kaf&cBBFjJb-@_#?`zrNS9zw#exWL@wd z{!Z1hpOtK0yZKKdiHNKU0{V9XakLV7m=B{4&7`e6C)i$Uj&> zVBk1DjP%SoVSaf66cmH^wx=wmdEhi3s9a?@Y-rVn4F}^)7EeyEyp9cyv=p9`!;VVj zSyt8!3<^l1Rq&&Xu|GL^v%jCZ0IN-Sbo8Qsf3WLql(%D zfMA$=Cg8px6EmDj%`As4mrM(oy&Iz&N9X=Jdh~F#TC3eeYIrye?@u(^P2Tpf_@SJOHk$MbLSQT zdpbBeM&Od@x|OlD-AgzW(TwQEK2-w)X4HOZA08W}RzL!~7Z}JyJL5b|E+{Wwf>oOa zwBw%!|Nk@4#3*$mtHFB{&;(7uU*-{n0~!q>=;E;s_)nH|drWMhEG#T&G)%rrAs1QZ z;PTSoT!^%%d7`WXR=)|X?0*^dLIQt)Y}|?iCP4K(gYR2``8zdihr&nE)qOz!kiIYopwsfFnzJ&6D|eYJ@;9 zID>7KbLDVSjIC?O5dq~m^v3?xt5>7CY5gaGaWAxFtpLIHveB6GCg-i(Q;06Tm_nUr zK@oiKt~~$_T6I6E(p2^YbpT8>Wm$2W!ke-EC&x;}4D{lzMnZ)MdjnkROQ26)DqtCm z46lF+@B8^(0htszRtA^ZhHn=S0;=DJMdH@Fir&7y5qKh=Vjq3>m`eUQgd%QPT4vf8 z?9<~XPFzh)Uz+tw8T^Ok;m=BkQ~}LCC@xPR1`z?LCFFlyXo9d_frt z%JJ)K>i)JIw_p2;rhlBk87dn{9=5OPap2j#`)^zoD#xH%0r-;nz-YlJV#(2AD8Jw@ zS%5B(1DE>QVW1p_c)_VT|B(BnFib|LtgO6=10bne3uyu_88-ay1Wq;?LEkdtm!aMC zgq={oX*_`h(b3c*pi*S1!VX5}zjJ0GiIX92L3lyL*^E7p+{9Iuxbx36ofx*cd;3pX zVtUiu%u$S!AOMjkPcNTax_!-3bi>>VGWK}bUYu`m^k~^8-}a7UhQW?FeHZ4b<3CB={(`-LN%V)LT2iE#ZtJ`0qis z{A_KX1)eaH&}2}}&}0(nU%$QamvLH@2R8vQm5#ptHXQ4*aR{n|Tn7?($*H}Y_w8GQ zs+K2FfJPd(`E^r<~Q@);Cic`;HAO{25#` zo@f7JiduFJ1B1Kh5w0BV(z-3)r}LR-Ox)2B}(2Fc0GQ%iA1*F1`%(yYuaE%~6KtwtpV z-jaP0FW_$)90@wQy6sr~Tn)b%T_{fv*nM3{zzp32sqQwK%T3w}F1vHVI&d5Az(~YU zLasSD{H3C@3bH|i&OaoG=c^qKoSd9n%naMi|*7wRW9_afq;Y&sI5 zaw{w|BZEf6;S)GGz~mleJ0_?+zb6yt4y_w)IG5aq;no zWhvRK&NeVLtm5MG0gn{2aa(`_aE=DX8?#Y&Hh=HpE!WI?oFNR-JV_%%zaGEt^MyF# z>GivJtb7_-+1cAb2LN8kX|7v@Dt7qC50r`v0MB4WB%AY;ld@JcT9?)a)28#Sr18NMMLw*A4a@GdJIDbh&e#(B7C@vsVY1 z$EPQ^233y0DiV&+jT5?1*j`hMe^o@ePuXHu8zoM{4Z94fZ9Z*cYO1uQg>%J<6*3A)NQOaN$A{ z903WSyUT&*oBb(0SI6VvNQwd}caH9rs-TyEZK-vbO60Io#NWF|9Np8tO+$dku=DWo zmBPzI5D8WkK_m$Y%K&nKVb&ySMMyA*{KE*s&x$mG)A3sKb_}AS;uemUUnMI(9qEHdUf#*e%*4j3TS{*h(VK95!TkNuISy{3tYhkgKFf9kEgIh4T>nY4c#lBwpt%( zDE(Aepx>~db;uoB0Cs^8be(<>+K{zvFJ3&Nq_hG`SPkd{bW(MoaqK1tF6?&_^x=O2 z?D+zcZ~cOj$TTiOE8+$22L_hY{*Eww(;8AKV_(oJUM=9GW22>b;vw>K|^D4XCA%g`{0HMGb3RG_dg@%KmK%s}Hq*%**wjyx@CHd8>3$9$f zs+1Lk?0fLw1|*{#3K@Y(n6f8`qSow7d;8x=tt`DwZ4D*|20M=@FLo*D0GRjdjSF0k(+> zVX+F0$crG62|s+{!i85d!KR+ZYmq*rjbJsnb|=gj9*qN6)A2*5VL!Xxv$~* zMqUio0N1he^0 zEAcAC^zIRUQY+6)GUOU_alkFfaNy}5^HDAfO%oCmN8tU~`u`R89Z*$e*|rzZ!m&Y(Nl6iUB05fS?E{IUiIM6CjdQBp478B?pODM9D!wK{6;8BqQl^iGOa? z>VEH6kN&MnY=*)KqcYv7rzhq%6H;TTz$mMrY((*-AYFgDW7$o1pIJjIsJTh5XLH#G17w zBzbf5G#E&L(QgJ%X2$AEZb75X)v+=QylUaxgE%Cp6G zI-5{!!O2R>QBdhdv7EJiBw?Or`!A2Qg=lyc;9O?x~-8+1kdDD z9X@|Py6X0&-xJ%nrfsk7PbF0Z?KQOjbAub3v?Rfz!@aiP)yqf6RY(`mJ-w3mswIAL zmjJSs5OnoP_V5h$;=2M_=XOE)=KxvnsuQ)S^-FvEOiRu-*Dnq*(a0hsV(}Cfr}9w> z#SP_M3(MbYhabB8I6347@@AFrqLx#piUaCBNVWos>!x`FzACay&cFVo#4jOeJs34V>5H%$il>5M~7sw?%~vY2VmNWA`$}@ z0s=Wqe_N%oT?c-gys^T06_NDhh$9<2Ym>PW5)wdxdK`MKcpkz9DJ7PPn06+#H|`P^ z5#gv~num;NHatx8Uz5(A#I><)aP5&R!i%`6g^7b>FPFCs{yxJb_KL#~M!3N9?#!Pe zy^J15$M6r$*nQO->3n8I{?Xx_(I7zF_u5wNXh1vd$+a;~SV-vZxsIr_8fF&r*v7S*8{bjL7eAZo7L{wNwimDLI=QV${mP!w z4viU2t4=ncSB?}Y0B3Ll@WGivBr4=7J(#%1kIAH!_cK4#q<`%=PHYS{XI0fxQ5Am+ zsw+k<3YHzv8hHjS`|mEUvgn{Je!R5HR!Aw! z#jR(7FNQ|!RwV!h{?gmGGKd>Z_Y8wBLJ9`&a}eq&%y6I0sL^F)Hu`1^*f#3Mq9Nky zOwO4lu&}B{Sh4yg6b>a{2Yn#~@V?4zlpoL{&P61dusHTQ4&0#hqW{BW~pW{5j_P(tD zx6O8c*r!r&w9xTF)%GlYW3j4M(_&%sh?u`9Obb&wAYKMw^)-ri0_Bc++-aq#k1HMY zy2orr#^$0B6g>#(98I4KV`F0pmjst*#gi4nDVmCWyu5GV+CXrNJ;XQ&kWFYMP~E%) z!$Fi2FsjmINUpN|826~Y%hiVJ9lGro5+435Mu7{QH8v(BmIS(3P<4q^MMXx=fmaC{ zP*=Ybcdl(kMFr~FJ$S>xA8SSe91b0theS-cbhKKZLK(x`#1FWGIRi7Ximti4r++z? z^mX2xjtI$@Cqg>J7ck9tR<7Bw;a7;ayuozv%DhyGy>7#0rz@fkOT!0W1@_i$aFzH; zfSfz=Q}!{M)fV+U=vag>OL0a7MEEA+EwUIBpWT1_)RR_`+xf0ZQFe!#LE18z*J zYAibVU{ZPDkNubwa1kj0sczo#<+ZJg_pICAR6le~xS)2l)E_A23v_xJLqk4TJq{f_ z=mOCP4k!*ngc9-c@d2xG0h^a=2FEmGgE$_R8bzZ^8??hoEPT+Cno&6zcgjJdKu8o_ z%}Gm7C-N>({7MM>(xX)+E>i3+dqQ(Es(pu!3MXV_a8C~BNQ0laLEIjs7rjO!JxWwv zEC|^ck?4LvK+!SNeV%7STUvqw1Kq*YE(cMM;r-J<78ZG2KzAWAX#wZqu0^W&)3^{@ zq7$fucbJop=vv+({3yrbS$W$?tyy%(Me$euS?S!s{6Y@(nQ5CY3#fKn5N}Gg*ygME z^Ysk;sci^dopF-mVO?hzN>n8&E{!>GGGu=IXm!_cr|lX^=~cELYL-6#c-DK!Eh))l z`B#Z6UkVdEI*lhiJmye0D^DRSES7eb0Gl@F%ASjGdxOv*-U~DZE+6WjyAWzD#y{^0 zE1zx4|7Ntby85hjsuq8e5r1N0A~+ht4vlLmUB+bRv& zFC_J-wF;t}E!1*c_y!?XXDu6gN~blR$m#Fzzr5$+E>vcSO{THqAjiPpxIx`Vymn7S z+p!*+Xrg0c2s2p3-C(htmRnFDsF|ruv^m;q^zqeGX0(I0B_q%08|K-+e&ZlIza!>E z<|V0C=?}7JB~AHUKXR(pdHrBpySe|=F5Fk``CVq%ZL$UvI|CdslwcZ4V?Vz?K#$xv zDXK!!;pB8%716$9F`oa)*&Q7n506DCWpCcFK|nMcsR-rW?E(f_|00@$guh1#Bir;G z+{Xh+hd&@yaMiFgNn<`Sk3i`sj)84hpo9rSJO*{Ty@p?v-#@FMK%w^Ov4}&54_^j( z?)_W|Mt$|@6KomigkZbUuvv8S{5|m2h%8>g!Dc%gp`fqyFK~ZzXwUiZB<7k;)DPF> zE4zMP*boIU%=obh7A{&acdM$-|8Q2==Ky2H^!6XGvL7`r=336c!hCyJMe?JumB>ZV zYwyRq2jTc*`#LZ7<+EolAZiI9x#R~s=P*p5Fk4OYJzy|j105nV78ZhF3*2z4-z;7p zqkfuAIcA2nS&D%zeS@a$X1i#82^tZ@(3Efi#^tz7t%pY~Y;9karXB;oi;)tLt0hJ| zS-(FkrOeIGHW-rdkig7Y1w$}c2g1_su-bW;@DE`^G$G6y@67dht_PsKQ%d9$7v zNPK6gsCjjgBNLjUKgjiz2+U~bsACI5$I@dHEWG_nO2VSqki>Au(`Y#2;Qf=?&kuyY zL0REKARkPPSz?rhti3brEa1_vg3Cf9ROt?=d%%8oB~6>&T%oyuJHGi+bUGF~MnGht zlD+}`_*?%yLCTP13uL#Qn3i8E0Njw9o9nXY;qQC*;fk)_-dtdTy?lK1x4WUz{Q?zi zla51|u%)#%I}LdHGC1W$Xi3~I-h)~!#D9lZQe5*`*1j3x=<$B^>{+hcij6MAo zMz8tOT=kx)V7!@YKrvvIEqhNTGt5QFq<28L@^iwO_wO%-ZUv=BVAeXM54trDJG#KBT5bxkX1uvt23wE&*IevrgPcZccG- zQs2IYj)>s)B2a5%f}yZJ|Ec{vx9VJre7 zhbmn8Vzk6zaTE|l4jdApq>gf z17Z3U{3#InsNB4~-G>iz;UJM)dyK>am1ni(!vT!O&Gh0LYLhG`!ufagPj;6@h2%>zw)EjA6G_gEi4o)+Bg~ z_FVPzTYLNl7xSYM@}+!z5zHY`6u7W|`Lllg8}Pby-QE2PjQk+`2x%W8t{7|CrusrN zX-;cNup8vHvrX;5pK3aG(;=P9n40nr^)zhtX#M*2T7q%qDQK^ct(DeD(y^F#qa1*X z0v~Uetn4pP3W>l4v*a8Vp*tOwAXODB3ERB9&sO<``d3>h)~AMVW`0CMzZBfLR+*R#BNd=4&Q?y z>x?5fKEu@wx9ozf12pOcI14Nig56$kS;6Tr(G>sJcE6Kok&z9?;YME&W@Vvcf|rDb zGw=7`UEt`^d2!Yt@+CFrE~ty$C$tn5X90zo#?zx)Xj8I8$z|@NBUdlO zHiF3)o)8a#2Vl=vthMIr5cuR^mxQFYq-_wZae7L`;U7N!(od@e2F6sXegefpeCF3E z-oLvWO4!u&%g-i2V))wG=?V+i8nBC;3$88QutroGSqp&{%($(s?Oj(UG2De5T>rkl ze$ICj-m;^a?Mm>!K|=-sM_{X2%@N-NSDrrQ#fBq#XpM*J<5FU1K`#WP#w+lb9onTI z{R>{~hrjUNQQysXR+0Zt^BwuiQ|N!%?;1NhC9Z86qrL+ZxBIl^=UG>u>&v)g$rP8w z@~`_~fgpr2*yi3cg{|(@64$fE5HHYA%7KxZZ-4`+{MVlr^Ery3OL`fo@c|%`@{j1}E9wQZB zqrw1j8-C1sxr8oV0#T8oR&;Ifnhs>miT97y1-47??=E%Xr@4PMo(uZx_n;<+ERW|- zmLaA$;n{HBT%@-3s;}=yBNeZ&d=JrQ03SFvBpMytrs=4g?c&2^E~78t7L+w^^!2?Z zhOECbcm24(ss9N5A}{B_?!D?07l)ATEdNqhwgnvSyZ=T1L%Hv+cr3~G13j`YUAh$Z zb9NNyu2-(O4_Rj4`tQ~^Lv@T@f}einwr#%yA1?1|`+dAQ{Nvww>;zL)Kq*D)(mfg* zPat=?4=?|*k*{5w_GbZ7Hy!C_9uLLiiKHz^+c^Wxe=ZO-VTf~%WqbYI4}AhtNNh}K z(WqWgY!anFIqWiGA}l#q(6Tir52ZW{1I^q3Ghr3j@w{Jf@hpUWBl_q*8JQCZxR<%9 zXTX{$k~vVJ8JU<|A=Ql9K;GV=RJnP52gZkpwAjbcLg{IRcWD<;kX2{ zJ&}9o!4s#bwqpz`<(1)KTPSqQr8EiWv7Hcod$G6bOOsK?dj$s0zOo1AH+HNK896y9 z<~<(S(_K&q!qK&x*SiTii(T+&`=Gu4>C-ouI=qzkDm+MZ`?wG`nooxM9%Z7tqH69|N&yKs5*08<*1CyBqBdzzNIWX8=sX`H)y@2zM<= zR5_HEXulxc4GR{yLVaHZ;a7H4W5nqYKo3qfkfJ`Tf`6G0}+Q9rXVF z&MceY@4MIN+@E~(wQO`utbcaodGNX6ximD}&x9}!yTh%aBZU|nwH!M*q_TsJ7{XBI z5!{Jr)cfJE3Op`-^h;+UdVp#I(&Nz8ZGc&vac`L9OsYDPwXuoqD z12EnT84JnP6U5JPi6H=P)Gx$=jRQ}mI9y2JBgl|s%Fz|29fPmT88ZnTjWL_6)~5Hhm|w!icUjYn{;2B5gqoGnf;SI#L0=QPtu6c;Tlb z5g&&k1|d!gU_KP$_dG00bZHSU0#2j3L0V^~O*?@}XP++wJ5hh{lq20@Un8xD{$`ci zLWI}H{o2Xq(@`|-)6`ssy^H!^ZtT9>eYBb7Sq)(@B3punliWgnl|Zp8c!|ifkhlIo z#p;IF3_yvg7KFV*teBm$`h^yM4t-*9D@uwiAbkqj+&FhXo{tC7okPvX06dlyQxx7ih}=yWPT_0~zF@hO z<6`Wgxe~oJEZQcZVPGdmkVxc(OO194j-h&Rh1~awJGyan&rVZ}*GQM*NI$CH*#?Y! zYB);7k@+L+W=pjhskr=1#M!(L6Bt0dF*vv`SD)Gr9)d8uM3t0Torz%lP&It>Qfb^f zRPI02e3p8!5|WZQXoT}Xkuorn11;&1XhS$cG>{2!7HQNZz9zU}0cvi+`vnGSI&I~# zAPyHe-3hn8(f1Sz$x~?MCNL1YXE6=(>vYg3n@lm0B@2!^b}YQHb~XAQOUr?4IvqwB z$TN-RdiAP?W!kZbcYv~NG)%u*0B;ancqfth5r;0M&*hPl_!`py@gEMFu^eiQ6C)66 zdnT~Ufs#p)ic#IGeqq6v7K8pF#AFzmh&@_12eYKu>!?-dnie;`LJ@(G2ihzNoH!HKq0tOKl&&sfY?Q47awYys8&R&Voo#_t{h5_aZMIS}<;QY9TPowx%Yv@*9Ry-@bcy2HbGO zeU$EeIn!k;e5jEBQEtuKBt6@D9K)3;cMw%Cw36q8?>cGLF(7(dcyg`20kkJ@y>YNe(Y`0X6f=@Nv{5M4?@XRxI9}89j7>9QY8j4nX=wzv5fa zymLtWIC5l`z0xlVaKKASu7FG7susW7v4|@$MS!r0fhdm%x1@_glRN3UTDx`{8Zc#% z%1CrV%Mc3RRZ!>&cY?@is|dH|P#0B0Oi2>s1LeFH*f2C2UL?U1q!0(C5RKWjaTb4M zG`QaWh;lsSSOf-`5bD!=9Dc}~ck z{UUJ=nSfA@;20mek$Zc4cWG+}4xgjInF`E$g>utd55th>0hYnYua)6w_kN*}pr9Zu zNW2q?SI5Y70v}x~r^#=Xiivp{x2LgR+{G?GV;Xzxb>C3a{VvZqFXVI?m2NDvh!3g= zs;&qwC=G(z6#8h({NoGey?v6oezoha`CNOB-IkHlj+>UbZ9M3w<-4G>nVAA-7afc{cQ{&WO&JO=RvTkeJLLt8hTGtL!+;r znUUnEf|IcI;q+Z1a7rdDMiT*E5N+n@L`cxIAC(DSw6#^#yP|*mG0*sV>@*Aw*X)a$ z9El3dh}zG@83`2aye0cC8jWV_OB!3ThLthO!5qy$VJJ41^JqH_ehlm`udRL1Lrsnz zkJXpQ0H1q+0OWwWDx4J$DC`T;tT}3;Jxc7YH7pmoC`>Sq&Z}Hmd<)9JB7`w>ut55V z$*h4e=|Ies^l6ZG80wT5K>L9F9l_$AYcP|n5c#SfK#hTbRm>?poT+7=w~oOS5f)|y zG>n~wisg?Jh#B|}6OnIiIB7N)_Q!9gTXpR)Xb6_hCwrrhmEkbWwjpecu#5~TGx#1; z$Hp*%-TIT6%BAF_%-^(9;QGkDAvpw-HcH0pM++=T z#7*um7AH6Ftt_?ywLk&d#N*(t!R6KhGv}Hl)gAMoiJbd%8^Uh$i@4&mHffmHQ9#FW zujC_e{4y&Sw-bbe%>YCMkhsVLmg>J(!ofkECjvbsFSGlIJ{o@*PH?dt*3=Au%Djq9 zbu5QUeQUYsb~vhvp}fYyppLid8zyCC02d6(kvt50@etEKiwgC4%&C3ogYeiyJ7;QI z?CCu4SO|{|6Ro-`R59n}n=h}0)gJ|x2EdjqXoO7C*tlfdiCx*Zs3qQ*S#N-QJDzTD z1p&w(euZ@Hc$?Lg4ZdnR$AkJR?_s*I&CZE3;aI$K{Jjak9rV`6I+IroTB~l}9v;?$ z#r5?!4s?KPCl%w8;mFRBsP}X zj)!80&RBDBXoi@|R~3D7FF2?>K&m^?OxRjbkO&CtSHkjw{(BqkytkGLZ-n)~7!LV3 z{k%KiOgEa@W-Sv-KelMII(ZNJ5S$t7o|W5=TRjC}5``Gt54W8mNVJ@VH0Kt<;5MPP zlK1si6f7}(KzV@@I1QD{4m~pD)QN%ikDG96VS%WZW zlQY1zyEX6MR!i~d+a9!t;!DxZ+X^`VjUiji9BOLB+=UcwnD>z3Gum7CrgFK(PeJ+Rzzfnm{4t4le1#;<#oY za77KiwiQKKSKbwj)t)&~nDB$_(u|=;7R6#6FSs=356rc4G|75!_3BmFMmD1vRRu*R zj{NjOn20JjYITzyJE?<7AzJvS>k&!&&2UUB0^?&$Qf6AKWY2~k3+${IAKnaY%hG*} zN=jLj;d5(+_ztA`B4~d76-gNhbyD>4E;H}7YFZcerS^yhz3=oT-6nqi5#zP3Qfd=* zi22QMjTY*8O8Vh_Y}Fkp^UojkiNvU8N(xiM@}+7R`p|afz&~>N^mK9;s=5E=&iZ;tLlGGV@oAQ>C4#hK?ZRvGZX>@PB zI=;~GN4Vt@MB;+VMg)g@puU9Q;mRk0*t+Qx$q+F7iXfP8mNu?2HN)J70qzY-Cu=jD z9FjcgDJfz^yN0p1|GJ9fYD{Z5ph4{|f(jIucFWvmVh-lEOXKf5fR1wWtl1)#ql?Q@ zeEMPy3d*p?tQGu%zxF@sa)v9a5X&`|nw%KusN4$IhVddkYwOLPl0)j*9xDPwGQPQM zbK4y1cETPCF=pR||JW`ho)CFs%W~`aWZD*pgZmAW6U;8kuUXM}?V%C>9-iUXoYnjE zF?2PzNTlHbo`xYxhU3ZR26pWqQIy?Zn>;bnQKK}mM9Ao1{ZL{O19n?e2=y9sXbL@a zto!PB)EVs?=14YnBW+>ia9|(*gPW%x$6OjyH`}Jz0)7RQ1!P;1h$^aq8{0 zz8-orI;n~f3M_i5#>{h=y`1$nbB!;%Z=~O|%_f_aq&q#(H>QuVa-wix3ZiS&w1;_i zg>G9q?7I1jGJ3DT85>`tgSoLuSgBpSGmojMwPL{O{>h2){s|_XUgz@)XJ51+0~IZz z55Gg#zX%C#Wl3fYTp1H7+i~vXX59>ly;rGOd7y-AOl#z%`n((=Z4_hXO99-aV(@V* zA>yKV4MfyOb3%C9v`!ucBpwUQ8E7FmV9^WTpvUC3!>bgF?>FD2meR6p>C(PZPv`hL znZn(de=&gFjD^79k9?A-z28B|#D8*&(}aP)wjZXj7&K9DuB>2xP3{&in-O}iyk)6a zwSInl@(zW{Z#;Vx6ckt^lJ%p_@HneLWJXJmPn08LlPC^eD#z|ZE0QRf+#(zdU|wUA zoaVRcsr9xVQ^)xp`59CPu1lR3VALYw!kF~KOM=CuCe zf-e*-9NmL})=y(%1V~zi@L$#D3=dc_2`(g_V2p_l%B?tzmtNZ@G(!v;Vc$zLr--o< z2xcUq%tvp%OT6PTI6@JgorE2vC6P`}Lw=pw3Dhdp( zRk3L6gFY$|B$ol2j|hIX+fc|QI%yJUQ7qc^nZ6cWfC@k;K;3OTqE;jpV-fi_P)}0r zeRoZ8{FB(3^q^|~C7Rpyb8iz^fU}D7pufF8dHrkg=Kzw}F$t}T1fNHbac{gYGn+~W zy6eQxxT~goL7Y$Sh@?_6zT^%b?x4ZD$JDhi3IW>;k?ZfFK<1~9^ zh_xVzC}D5q3$$S(#htYXVeJDvJDFf^=&Cd6I>^AKO**1wU``28w2radK+{S*cO2tGK6Tgn@!lk9h+!OKnT~^< zxmoqnu4R(uFZ9|vrP}Z;F&OPBG{*G`IDuu0%6!F+*jTuCJ9;+*+1i`n2TbX*-04tws&kkDHh*oAjNvc-u-W5Pp>to%!gn=|>#oM@vLcg?S^2yJ9lm za-tRO63yB@_G)gnqcTB@&{)8*&_7ksnIR7<}mn2Fr|@ z>VT6<$Znp3O3KnE5i>}kLVGXFwi5qIn~5L0Q?c!lVBq-8kusUrNMsUyxoZNu)ihE7 zi$0?fxg775VUvKfgo;s(^U0HmZ++(XOu8_Cw9e*<6)T5e5%|_wVH7nI_P}YV>fX)^ zr+Aegz@nXPc~|TR=9-O+jLZp^Jo&~|k6(E709??yq5eAeNp)~M-sn&&EqXy)ytXw{ zrkK(U+|qL#1y6ukhA2TCnA^~YRoVj3Spqp>`-RVM@yJ3nr4`yfrOcEdcmV;&^6qB4 zcs)uXfT5~TDWjIsUyrPiQ+daHUo` z!zS<<@NxWao(HbZT2jXU90)lNtB`~T7&HvAl|>zg&!-waADDH{xH;D=P19tZIQQTuib_pB)8cdmr@j z)T_=G$?(E-vmGe=!o$P!UGsiV*+EzzRGgvL=pPW{g+>BQqS2T{-)mSPj zPw*nfU9Hod=<|=m`6?sG)nbQ7TZ-Sb&j_RC>(zdK=E?D2a z8`r;+lvA$T*w#5%rh1VCA1D|pV`F7L4^?T%1XZT7wWaae9_PXCXlEoLY-4lbm;pt| z4Hh_qNguy&hpH?Vl{tQr7xS$4<7}A+#*xXqW{zK$73B1S9zUITXWa^^{@*Cw;XTS2 z>aWM$x`~0Qd0RPMdK_EDNyd5l^eHKU8C~lD(QCx2=iiBP>M|BYtOfkqL~2{{+IN+QC;H>hkD zzh5@+&fj5tT^@#And2-3LsS(@cAQg}`gUE#(w^@7^af7TlMWuOZLQv-Bo4&$z^dXn ztIR*c2fD*HlFpL&Zm#fzPqT$iO?1%3(xeRXeH=UWcoa1Dwv*dugr4G@z0?QzArv)l z&Mn2%lwTCMK6osoaVL+NY5HqhABR2@jB3x1<27Ed0m!H&QjWHEI9pEdjQGW#{c<`1 zb)wQa5$Kg_LvKE|lcN?h50fM;@PS(~H;(loOzNZQQtC6%H(7{d^hxF<$(Rqo$1_^n zF?705jT%%#j!KQi(;yjx@#R&^ePi>?>5KHyaMBeNn3KZeIhZu4uE2UK?CjWb&+yKg zJw=fZFbAn?H3OKBQPVJC?aWMVU_9|w&RHK6^JH$&r zi0NXm&yfP}FpwP+ZSi#)BO=u5sqov|_bUwpZyS%kN4fzEu)-?849{OI?br=fy!Aj8 z$Io2wl5P09v5ORLAQh~VU+8&UYnP|G(W43JJ5YRf(Oo5U}9gY&Z|3W=xwF2e0 zIS*;G53Vpn&>D#ehkE&U{;_)D4Ba4wPm7IiHTwYymKv4W&nq!vqrq*%s&{Oyc-J?%fFS%F`(2 zsymBWqVquZC?EjqVA}p1N+H>Qxm_>;);NHdTilW( z&srPRNu`_CAJ|i9gDF=Mupu#Mz3P;hgN|j+nXo{=wG1cXifqQC-YDlIw=pmaNt$dw zz(fo4{0(7a^0nkxxYq@Iv}rV&i`s5L?Q#ewI?Bxb7=P2*Ta9hyT@ii+XT-HtFnxyP zjfJe@Lv_R*C=EWL6;UKiArOdmyolS5l7_5}$w5kY(iijk4e?AwzuXcuM`^*$Y)$-l zbiG9y0e}+2jhBzVI)4&FKo06~_vP+yl_{S5hO<*okU!OOW--W0oE$5e)W_6cR>S0Y z1OMZwvTv3PZ}}vSKlDgnz-@vW0n&b;@&k-YbGl=h(%k6<_~x}-Z@z&O<>Um_A>)bg zoA!+~iPA54y43=ngX#xjlr|jMsI353!p?37mP{la;n=aqp`id6@%DzpPn*GfocH%S zyWxJvX4=LLN~+=&K51OSh|Z*rl&jML*g|AlCqMCd>%^n1xCoHs1$s3&)-o(ADL&qZ zX`K3@-RnLT5D^c450GbVij#1CnG(CWUYM&KlmEPm2>ISmk?CSYie)^?4@GKVEHQL`deAEpnoVq@W^CNyi^4SF@d zngh1QoB}&sedum*skXnCxjcbthE)_o8JKAd)&NEd24o1W8&z%|<54(#_%No2+-KwX z#d5}7ve^JX$YAN5TgM2=!53uvXnEoCaHM~-Aw900(UHfU6AY&c5*fA1X?&2bL>_!T ziRmg&Uyza(>ugkP_EW%| zIP7l-KR!|8c>4@OD1uH9OV21zas7&G<=5yG4?;I!5{jJ^O;RX9xdml#-rsriTk7Pz zzC507>m~hE9dUY4$sDHg9rIiVA&9-XXlxfWdQXK|M}Z7TUT&NaNV9)}6&s3DcoE34 zL;h;%VD$>vK<{(lXM^T=@AGaZm>Rv~!K7*g;92oG0+}QYXMRo5*&Zuu7$t+|+UGN; z+d;yJLpoIstMFZ&jV>;_qlsUnKic_tgyEHYX~L|Jmv!%;06Ed%p3l{J06XpAL}c0g z{JKLUH5#Y@P{$?JSmVuY)=3-2Yddah`vlaVBTkZ1xkHMEKxJW2v&Lmh3w^tjQJE9U zk+^cFn9M%!;LZWt0|gcSev2~No(A-_QWLFmk`sg_BQYaKYAEK&QR=9#Uh(Shfi1?W zM|v+p8%@Vg^=@yWV2S13M{%~_J}dL>p1oA)Sy}^T3H8q@SlL~Zw6$TRBB?LA#EBmy z1EW%Rw7Qa4o|_u`wj8HA*Gb`V6=SV!2NBUH6J43!Z6$w)tY=0jw*ne%EZ`Dr`3=aA z+kxtgd17^{LM@}ucdURurVz%afpdMKVL!06Xse7@Rz}BxB3KZ&wtYm{=mD58byBvO z#VxTD?khzcvU<8CC=jtp3v}j+r&|NRvU>8-*x*aBA`2dY+O|8sq3^$`w{~F-Dq^R_ zAxaRUU`3)d2DVe882(RkJiq^Z=j6zYk@hE6&p&uoR_~oF=|k!TciuY9Kq++ng1JF~1_NPeMAnw=#Hl+`p@4^(*hEfaaw0cz8fHf10<3Gd*pXw$x z@X%Cg)h4GBboE!Z#Tj8Il0txJWk_>29TMqf2j*#Scw}M>%8k@mcB)kX2;!X$pclY2 zS=o+*Dl;jAD6z25FY;yN)3-ROR}}C6D4`fdCB$(qahqXsI$hiXiq3_6+EsP zV>r|Uv^h&-h&7eUC*`sLPE_b6T60}2KV@@*X6g{bl1*de!x+ zM>Y7Z6~#Fco+BAJ1=By6Yf6-Yz}95w3>*5L9n8bZy>zR<0_ZRVkY?fVkF;XuLkl_2#Jfq*cJh`=pS+mx{=`Eh8s zwO1vm#Q-8CE!%M}7nLkS3y`M`as(#e+#@<$x&y^DO?vSeg{?OrBtMFpsjCwxOyoYq zsJQb@Z-{mWoyXj+DhnV2wuvpI%!j@~H48`CDG~UK#!Y>wYlIrW1QS63dQ+9)4x}Fb zwB9$Q&xS>)IZ`Sho>bw`6&Q=Ir+ss$%nHH7>c%wW5K0nZ+s{9sYjauNuR)WMS{L3e zw8J^G1J28q~Q8v zd~JVplV2?IQ>ziVAj}bA$a`JvFS$fB^zMmSoh4Y4)EYN+$4-&EodxcXY&^o-gSsQq zDb6iYunQ*gEeFr=t_%!0J&ih>+yf>0lqh~gcqBmtr)e?H+!f92h_X~d*IX-6e*L8j zpc?wE+IyAcR=Xl&9d9DD5p3O`Qkl+A=n4ciB9Kmz{C5bKG({&)x^dgDCnMij!3qVP zFyC$`figcz<-tw?LPvXaNKicC@o&4yN($_8!?mD-Wo*)M`bx+Q&Gt)x__5U6Pq@YJ(g>9cWVFds%V^ zXvc{KMn8ZsJ*1~X8D8hUeme3$`Os5bD&h^ZM7;i+2T}6v8ZUAZG7|Ah1Y`a35iiKc zz{c0dh=SzK*n<4g^rqRASuROPcx}J2^3^i#{Ko%kPEq~kJZq}HHpeZluc2P2*~sy zP_GS8xsia6W6?fzYlwNZVv5njy%soC&JgQ?G@+5r-Y1!Xf~v3YJ&Hx~NZVw=eXp1( zJzeyE=%FE)-!bJRKy?#_mTrj+_}h0+)kc6z`miIecf$I<_AU&L^TNhP00L z`O`O>b&%Q!*gp*tomrA1!x(F7psPlNFlcFZ{rTlVcb)(=vHGPa`)ki<&6d;N7$->b zW;r$k;gAWn#4=1HkYJ>eqD$eg-psjWYbD73y9gss@JjgtEme!*vQuubS=~zCgn*rg zs;+9P7(s+_d-e_Jpb&NRhc;C&xs+YgFAn|e_W%0mW}iRB^0xzvnxA<{gQJM705fW| zMtpM|>p;Yd7lnM%tUN-Q68?s=TdEE{3}bJ6NLXDWYTnEXNVz;AkwGRj3m2o`USP$!wXVy(J`3jXCReBfo>u zU6mU(JeF?(7^RKv{s>+d$*m0$;ObnS`mS}{b61G@ph*JN&o&ZtKt_8m`GjMB*Arxq zFewNp#Vlaf0w!wBCkPdg2UGx2NSW2Ankh%h3b4gImDB|*1HiCw6k{M}@wYn{_D~5A za#=kG078&Trz%5uNsu;i{hnW)Dv*@>v0Orlw*y3x^00-D2XY6g-tb1JXgJXd>4gw; zFqf226<}frp@n#6-Qir1&+0QiVx-gr89q%)3_D!#t>lvef$HLa^2ovN% zlB$70)O4iMo`i<3!va&rk|vT4$u(1E2uK8dA5s%b8t1K%UEVLTLrBPnPcaDPV$^Vn z1&S9`o@+q4k*#&Xjf#5mMN$O1l`fzNG5}?O@2IElFQ!G=}Y{)3}*sA@Q*n!=;NoIw5M!Afd}$t$!$9-sT_oE7%9Ud`Wz57VdOW$_ea zM{}9<7W<9HqU+&<9|r@0f=Mj!8WUqQq;D>wwid(GVN+-jga}K!@!Vm}FXWxm8ddhA zh$chV1aZoPAu7Qd6U`LMGj?Y_uko)W-!n{aR?(ZiV(Pnh&LIIaGJU9e46|;E=pa>3 z!zoDag7n9n6tBf*)~_Ud*iVvix{L8^1AN*ccW+z2)(mL3nOnZAFWcN`0g`uPjm!CmaT{`|%I zm24~j{KbOX-%n$O{|#R=_rn*I$QR|F16d{rd1pxJ+}wcYOc)U);~sU+_=d&d=-9Xn*~F$lv!@ z&+VVR&eZplfBm=1P(RiI`J;d3b^g(1sDJNrBe(fqmI0=b{VSIB|8<>zbQ$vg|BcIS z>T{8Q{agm$*WaJvfc(+Fbs79z|Np6F@bmir=>6b%{7YXCfcry-v2)lt^a&dKex}+Z~Si_+tm8|PbD9G`XB56|J(hL z2lCI{&Y%15-x_tMUK@>uWq{!hKfeAm%RuQ@qAGv?`e&XS`H9BKBxBCCW_U+8= 30 days","","" -"cert_notBefore","deces.matchid.io/172.67.179.218","443","INFO","2024-02-15 00:54","","" -"cert_notAfter","deces.matchid.io/172.67.179.218","443","OK","2024-05-15 00:54","","" -"cert_extlifeSpan","deces.matchid.io/172.67.179.218","443","OK","certificate has no extended life time according to browser forum","","" -"cert_eTLS","deces.matchid.io/172.67.179.218","443","INFO","not present","","" -"cert_crlDistributionPoints","deces.matchid.io/172.67.179.218","443","INFO","--","","" -"cert_ocspURL","deces.matchid.io/172.67.179.218","443","INFO","http://e1.o.lencr.org","","" -"OCSP_stapling","deces.matchid.io/172.67.179.218","443","OK","offered","","" -"cert_ocspRevoked","deces.matchid.io/172.67.179.218","443","WARN","unable to verify response","","" -"cert_mustStapleExtension","deces.matchid.io/172.67.179.218","443","INFO","--","","" -"DNS_CAArecord","deces.matchid.io/172.67.179.218","443","LOW","--","","" -"certificate_transparency","deces.matchid.io/172.67.179.218","443","OK","yes (certificate extension)","","" -"certs_countServer","deces.matchid.io/172.67.179.218","443","INFO","4","","" -"certs_list_ordering_problem","deces.matchid.io/172.67.179.218","443","INFO","no","","" -"cert_caIssuers","deces.matchid.io/172.67.179.218","443","INFO","E1 (Let's Encrypt from US)","","" -"intermediate_cert <#1>","deces.matchid.io/172.67.179.218","443","INFO","-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----","","" -"intermediate_cert_fingerprintSHA256 <#1>","deces.matchid.io/172.67.179.218","443","INFO","46494E30379059DF18BE52124305E606FC59070E5B21076CE113954B60517CDA","","" -"intermediate_cert_notBefore <#1>","deces.matchid.io/172.67.179.218","443","INFO","2020-09-04 00:00","","" -"intermediate_cert_notAfter <#1>","deces.matchid.io/172.67.179.218","443","OK","2025-09-15 16:00","","" -"intermediate_cert_expiration <#1>","deces.matchid.io/172.67.179.218","443","OK","ok > 40 days","","" -"intermediate_cert_chain <#1>","deces.matchid.io/172.67.179.218","443","INFO","E1 <-- ISRG Root X2","","" -"intermediate_cert <#2>","deces.matchid.io/172.67.179.218","443","INFO","-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----","","" -"intermediate_cert_fingerprintSHA256 <#2>","deces.matchid.io/172.67.179.218","443","INFO","8B05B68CC659E5ED0FCB38F2C942FBFD200E6F2FF9F85D63C6994EF5E0B02701","","" -"intermediate_cert_notBefore <#2>","deces.matchid.io/172.67.179.218","443","INFO","2020-09-04 00:00","","" -"intermediate_cert_notAfter <#2>","deces.matchid.io/172.67.179.218","443","OK","2025-09-15 16:00","","" -"intermediate_cert_expiration <#2>","deces.matchid.io/172.67.179.218","443","OK","ok > 40 days","","" -"intermediate_cert_chain <#2>","deces.matchid.io/172.67.179.218","443","INFO","ISRG Root X2 <-- ISRG Root X1","","" -"intermediate_cert <#3>","deces.matchid.io/172.67.179.218","443","INFO","-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----","","" -"intermediate_cert_fingerprintSHA256 <#3>","deces.matchid.io/172.67.179.218","443","INFO","6D99FB265EB1C5B3744765FCBC648F3CD8E1BFFAFDC4C2F99B9D47CF7FF1C24F","","" -"intermediate_cert_notBefore <#3>","deces.matchid.io/172.67.179.218","443","INFO","2021-01-20 19:14","","" -"intermediate_cert_notAfter <#3>","deces.matchid.io/172.67.179.218","443","OK","2024-09-30 18:14","","" -"intermediate_cert_expiration <#3>","deces.matchid.io/172.67.179.218","443","OK","ok > 40 days","","" -"intermediate_cert_chain <#3>","deces.matchid.io/172.67.179.218","443","INFO","ISRG Root X1 <-- DST Root CA X3","","" -"intermediate_cert_badOCSP","deces.matchid.io/172.67.179.218","443","OK","intermediate certificate(s) is/are ok","","" -"HTTP_status_code","deces.matchid.io/172.67.179.218","443","INFO","200 OK ('/')","","" -"HTTP_clock_skew","deces.matchid.io/172.67.179.218","443","INFO","0 seconds from localtime","","" -"HTTP_headerTime","deces.matchid.io/172.67.179.218","443","INFO","1710637085","","" -"HSTS_time","deces.matchid.io/172.67.179.218","443","OK","180 days (=15552000 seconds) > 15552000 seconds","","" -"HSTS_subdomains","deces.matchid.io/172.67.179.218","443","OK","includes subdomains","","" -"HSTS_preload","deces.matchid.io/172.67.179.218","443","OK","domain IS marked for preloading","","" -"HPKP","deces.matchid.io/172.67.179.218","443","INFO","No support for HTTP Public Key Pinning","","" -"banner_server","deces.matchid.io/172.67.179.218","443","INFO","cloudflare","","" -"banner_application","deces.matchid.io/172.67.179.218","443","INFO","No application banner found","","" -"cookie_count","deces.matchid.io/172.67.179.218","443","INFO","0 at '/'","","" -"X-Frame-Options","deces.matchid.io/172.67.179.218","443","OK","*.matchid.io","","" -"X-Content-Type-Options","deces.matchid.io/172.67.179.218","443","OK","nosniff","","" -"Content-Security-Policy","deces.matchid.io/172.67.179.218","443","OK","default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com","","" -"X-XSS-Protection","deces.matchid.io/172.67.179.218","443","INFO","1; mode=block","","" -"Referrer-Policy","deces.matchid.io/172.67.179.218","443","INFO","same-origin","","" -"banner_reverseproxy","deces.matchid.io/172.67.179.218","443","INFO","--","","CWE-200" -"heartbleed","deces.matchid.io/172.67.179.218","443","OK","not vulnerable, no heartbeat extension","CVE-2014-0160","CWE-119" -"CCS","deces.matchid.io/172.67.179.218","443","OK","not vulnerable","CVE-2014-0224","CWE-310" -"ticketbleed","deces.matchid.io/172.67.179.218","443","OK","not vulnerable","CVE-2016-9244","CWE-200" -"ROBOT","deces.matchid.io/172.67.179.218","443","OK","not vulnerable, no RSA key transport cipher","CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168","CWE-203" -"secure_renego","deces.matchid.io/172.67.179.218","443","OK","supported","","CWE-310" -"secure_client_renego","deces.matchid.io/172.67.179.218","443","OK","not vulnerable","CVE-2011-1473","CWE-310" -"CRIME_TLS","deces.matchid.io/172.67.179.218","443","OK","not vulnerable","CVE-2012-4929","CWE-310" -"BREACH","deces.matchid.io/172.67.179.218","443","MEDIUM","potentially VULNERABLE, br gzip HTTP compression detected - only supplied '/' tested","CVE-2013-3587","CWE-310" -"POODLE_SSL","deces.matchid.io/172.67.179.218","443","OK","not vulnerable, no SSLv3","CVE-2014-3566","CWE-310" -"fallback_SCSV","deces.matchid.io/172.67.179.218","443","OK","no protocol below TLS 1.2 offered","","" -"SWEET32","deces.matchid.io/172.67.179.218","443","OK","not vulnerable","CVE-2016-2183 CVE-2016-6329","CWE-327" -"FREAK","deces.matchid.io/172.67.179.218","443","OK","not vulnerable","CVE-2015-0204","CWE-310" -"DROWN","deces.matchid.io/172.67.179.218","443","OK","not vulnerable on this host and port","CVE-2016-0800 CVE-2016-0703","CWE-310" -"DROWN_hint","deces.matchid.io/172.67.179.218","443","INFO","no RSA certificate, can't be used with SSLv2 elsewhere","CVE-2016-0800 CVE-2016-0703","CWE-310" -"LOGJAM","deces.matchid.io/172.67.179.218","443","OK","not vulnerable, no DH EXPORT ciphers,","CVE-2015-4000","CWE-310" -"LOGJAM-common_primes","deces.matchid.io/172.67.179.218","443","OK","no DH key with <= TLS 1.2","CVE-2015-4000","CWE-310" -"BEAST","deces.matchid.io/172.67.179.218","443","OK","not vulnerable, no SSL3 or TLS1","CVE-2011-3389","CWE-20" -"LUCKY13","deces.matchid.io/172.67.179.218","443","LOW","potentially vulnerable, uses TLS CBC ciphers","CVE-2013-0169","CWE-310" -"winshock","deces.matchid.io/172.67.179.218","443","OK","not vulnerable","CVE-2014-6321","CWE-94" -"RC4","deces.matchid.io/172.67.179.218","443","OK","not vulnerable","CVE-2013-2566 CVE-2015-2808","CWE-310" -"clientsimulation-android_60","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305-OLD","","" -"clientsimulation-android_70","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" -"clientsimulation-android_81","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" -"clientsimulation-android_90","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" -"clientsimulation-android_X","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" -"clientsimulation-android_11","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" -"clientsimulation-android_12","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" -"clientsimulation-chrome_79_win10","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" -"clientsimulation-chrome_101_win10","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" -"clientsimulation-firefox_66_win81","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" -"clientsimulation-firefox_100_win10","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" -"clientsimulation-ie_6_xp","deces.matchid.io/172.67.179.218","443","INFO","No connection","","" -"clientsimulation-ie_8_win7","deces.matchid.io/172.67.179.218","443","INFO","No connection","","" -"clientsimulation-ie_8_xp","deces.matchid.io/172.67.179.218","443","INFO","No connection","","" -"clientsimulation-ie_11_win7","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" -"clientsimulation-ie_11_win81","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" -"clientsimulation-ie_11_winphone81","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" -"clientsimulation-ie_11_win10","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" -"clientsimulation-edge_15_win10","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" -"clientsimulation-edge_101_win10_21h2","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" -"clientsimulation-safari_121_ios_122","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_CHACHA20_POLY1305_SHA256","","" -"clientsimulation-safari_130_osx_10146","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_CHACHA20_POLY1305_SHA256","","" -"clientsimulation-safari_154_osx_1231","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" -"clientsimulation-java_7u25","deces.matchid.io/172.67.179.218","443","INFO","No connection","","" -"clientsimulation-java_8u161","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" -"clientsimulation-java1102","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" -"clientsimulation-java1703","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" -"clientsimulation-go_1178","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" -"clientsimulation-libressl_283","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305","","" -"clientsimulation-openssl_102e","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" -"clientsimulation-openssl_110l","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305","","" -"clientsimulation-openssl_111d","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" -"clientsimulation-openssl_303","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" -"clientsimulation-apple_mail_16_0","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" -"clientsimulation-thunderbird_91_9","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" -"rating_spec","deces.matchid.io/172.67.179.218","443","INFO","SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)","","" -"rating_doc","deces.matchid.io/172.67.179.218","443","INFO","https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide","","" -"protocol_support_score","deces.matchid.io/172.67.179.218","443","INFO","100","","" -"protocol_support_score_weighted","deces.matchid.io/172.67.179.218","443","INFO","30","","" -"key_exchange_score","deces.matchid.io/172.67.179.218","443","INFO","100","","" -"key_exchange_score_weighted","deces.matchid.io/172.67.179.218","443","INFO","30","","" -"cipher_strength_score","deces.matchid.io/172.67.179.218","443","INFO","60","","" -"cipher_strength_score_weighted","deces.matchid.io/172.67.179.218","443","INFO","24","","" -"final_score","deces.matchid.io/172.67.179.218","443","INFO","84","","" -"overall_grade","deces.matchid.io/172.67.179.218","443","OK","A+","","" "service","deces.matchid.io/104.21.64.91","443","INFO","HTTP","","" "pre_128cipher","deces.matchid.io/104.21.64.91","443","INFO","No 128 cipher limit bug","","" "SSLv2","deces.matchid.io/104.21.64.91","443","OK","not offered","","" @@ -212,7 +48,7 @@ "cert_trust_wildcard","deces.matchid.io/104.21.64.91","443","LOW","trust is via wildcard","","" "cert_chain_of_trust","deces.matchid.io/104.21.64.91","443","OK","passed.","","" "cert_certificatePolicies_EV","deces.matchid.io/104.21.64.91","443","INFO","no","","" -"cert_expirationStatus","deces.matchid.io/104.21.64.91","443","OK","58 >= 30 days","","" +"cert_expirationStatus","deces.matchid.io/104.21.64.91","443","OK","51 >= 30 days","","" "cert_notBefore","deces.matchid.io/104.21.64.91","443","INFO","2024-02-15 00:54","","" "cert_notAfter","deces.matchid.io/104.21.64.91","443","OK","2024-05-15 00:54","","" "cert_extlifeSpan","deces.matchid.io/104.21.64.91","443","OK","certificate has no extended life time according to browser forum","","" @@ -248,7 +84,7 @@ "intermediate_cert_badOCSP","deces.matchid.io/104.21.64.91","443","OK","intermediate certificate(s) is/are ok","","" "HTTP_status_code","deces.matchid.io/104.21.64.91","443","INFO","200 OK ('/')","","" "HTTP_clock_skew","deces.matchid.io/104.21.64.91","443","INFO","0 seconds from localtime","","" -"HTTP_headerTime","deces.matchid.io/104.21.64.91","443","INFO","1710637126","","" +"HTTP_headerTime","deces.matchid.io/104.21.64.91","443","INFO","1711241938","","" "HSTS_time","deces.matchid.io/104.21.64.91","443","OK","180 days (=15552000 seconds) > 15552000 seconds","","" "HSTS_subdomains","deces.matchid.io/104.21.64.91","443","OK","includes subdomains","","" "HSTS_preload","deces.matchid.io/104.21.64.91","443","OK","domain IS marked for preloading","","" @@ -327,3 +163,167 @@ "cipher_strength_score_weighted","deces.matchid.io/104.21.64.91","443","INFO","24","","" "final_score","deces.matchid.io/104.21.64.91","443","INFO","84","","" "overall_grade","deces.matchid.io/104.21.64.91","443","OK","A+","","" +"service","deces.matchid.io/172.67.179.218","443","INFO","HTTP","","" +"pre_128cipher","deces.matchid.io/172.67.179.218","443","INFO","No 128 cipher limit bug","","" +"SSLv2","deces.matchid.io/172.67.179.218","443","OK","not offered","","" +"SSLv3","deces.matchid.io/172.67.179.218","443","OK","not offered","","" +"TLS1","deces.matchid.io/172.67.179.218","443","INFO","not offered","","" +"TLS1_1","deces.matchid.io/172.67.179.218","443","INFO","not offered","","" +"TLS1_2","deces.matchid.io/172.67.179.218","443","OK","offered","","" +"TLS1_3","deces.matchid.io/172.67.179.218","443","OK","offered with final","","" +"ALPN_HTTP2","deces.matchid.io/172.67.179.218","443","OK","h2","","" +"ALPN","deces.matchid.io/172.67.179.218","443","INFO","http/1.1","","" +"cipherlist_NULL","deces.matchid.io/172.67.179.218","443","OK","not offered","","CWE-327" +"cipherlist_aNULL","deces.matchid.io/172.67.179.218","443","OK","not offered","","CWE-327" +"cipherlist_EXPORT","deces.matchid.io/172.67.179.218","443","OK","not offered","","CWE-327" +"cipherlist_LOW","deces.matchid.io/172.67.179.218","443","OK","not offered","","CWE-327" +"cipherlist_3DES_IDEA","deces.matchid.io/172.67.179.218","443","INFO","not offered","","CWE-310" +"cipherlist_OBSOLETED","deces.matchid.io/172.67.179.218","443","LOW","offered","","CWE-310" +"cipherlist_STRONG_NOFS","deces.matchid.io/172.67.179.218","443","INFO","not offered","","" +"cipherlist_STRONG_FS","deces.matchid.io/172.67.179.218","443","OK","offered","","" +"cipher_order-tls1_2","deces.matchid.io/172.67.179.218","443","OK","server","","" +"cipherorder_TLSv1_2","deces.matchid.io/172.67.179.218","443","INFO","ECDHE-ECDSA-AES128-GCM-SHA256","","" +"cipher_order","deces.matchid.io/172.67.179.218","443","OK","server -- TLS 1.3 client determined","","" +"FS","deces.matchid.io/172.67.179.218","443","OK","offered","","" +"FS_ciphers","deces.matchid.io/172.67.179.218","443","INFO","ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-CHACHA20-POLY1305-OLD","","" +"FS_ECDHE_curves","deces.matchid.io/172.67.179.218","443","OK","prime256v1","","" +"TLS_extensions","deces.matchid.io/172.67.179.218","443","INFO","'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'next protocol/#13172' 'key share/#51' 'supported versions/#43' 'extended master secret/#23' 'application layer protocol negotiation/#16' 'compress_certificate/#27'","","" +"TLS_session_ticket","deces.matchid.io/172.67.179.218","443","INFO","valid for 64800 seconds only (= 30 days","","" +"cert_notBefore","deces.matchid.io/172.67.179.218","443","INFO","2024-02-15 00:54","","" +"cert_notAfter","deces.matchid.io/172.67.179.218","443","OK","2024-05-15 00:54","","" +"cert_extlifeSpan","deces.matchid.io/172.67.179.218","443","OK","certificate has no extended life time according to browser forum","","" +"cert_eTLS","deces.matchid.io/172.67.179.218","443","INFO","not present","","" +"cert_crlDistributionPoints","deces.matchid.io/172.67.179.218","443","INFO","--","","" +"cert_ocspURL","deces.matchid.io/172.67.179.218","443","INFO","http://e1.o.lencr.org","","" +"OCSP_stapling","deces.matchid.io/172.67.179.218","443","OK","offered","","" +"cert_ocspRevoked","deces.matchid.io/172.67.179.218","443","WARN","unable to verify response","","" +"cert_mustStapleExtension","deces.matchid.io/172.67.179.218","443","INFO","--","","" +"DNS_CAArecord","deces.matchid.io/172.67.179.218","443","LOW","--","","" +"certificate_transparency","deces.matchid.io/172.67.179.218","443","OK","yes (certificate extension)","","" +"certs_countServer","deces.matchid.io/172.67.179.218","443","INFO","4","","" +"certs_list_ordering_problem","deces.matchid.io/172.67.179.218","443","INFO","no","","" +"cert_caIssuers","deces.matchid.io/172.67.179.218","443","INFO","E1 (Let's Encrypt from US)","","" +"intermediate_cert <#1>","deces.matchid.io/172.67.179.218","443","INFO","-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----","","" +"intermediate_cert_fingerprintSHA256 <#1>","deces.matchid.io/172.67.179.218","443","INFO","46494E30379059DF18BE52124305E606FC59070E5B21076CE113954B60517CDA","","" +"intermediate_cert_notBefore <#1>","deces.matchid.io/172.67.179.218","443","INFO","2020-09-04 00:00","","" +"intermediate_cert_notAfter <#1>","deces.matchid.io/172.67.179.218","443","OK","2025-09-15 16:00","","" +"intermediate_cert_expiration <#1>","deces.matchid.io/172.67.179.218","443","OK","ok > 40 days","","" +"intermediate_cert_chain <#1>","deces.matchid.io/172.67.179.218","443","INFO","E1 <-- ISRG Root X2","","" +"intermediate_cert <#2>","deces.matchid.io/172.67.179.218","443","INFO","-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----","","" +"intermediate_cert_fingerprintSHA256 <#2>","deces.matchid.io/172.67.179.218","443","INFO","8B05B68CC659E5ED0FCB38F2C942FBFD200E6F2FF9F85D63C6994EF5E0B02701","","" +"intermediate_cert_notBefore <#2>","deces.matchid.io/172.67.179.218","443","INFO","2020-09-04 00:00","","" +"intermediate_cert_notAfter <#2>","deces.matchid.io/172.67.179.218","443","OK","2025-09-15 16:00","","" +"intermediate_cert_expiration <#2>","deces.matchid.io/172.67.179.218","443","OK","ok > 40 days","","" +"intermediate_cert_chain <#2>","deces.matchid.io/172.67.179.218","443","INFO","ISRG Root X2 <-- ISRG Root X1","","" +"intermediate_cert <#3>","deces.matchid.io/172.67.179.218","443","INFO","-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----","","" +"intermediate_cert_fingerprintSHA256 <#3>","deces.matchid.io/172.67.179.218","443","INFO","6D99FB265EB1C5B3744765FCBC648F3CD8E1BFFAFDC4C2F99B9D47CF7FF1C24F","","" +"intermediate_cert_notBefore <#3>","deces.matchid.io/172.67.179.218","443","INFO","2021-01-20 19:14","","" +"intermediate_cert_notAfter <#3>","deces.matchid.io/172.67.179.218","443","OK","2024-09-30 18:14","","" +"intermediate_cert_expiration <#3>","deces.matchid.io/172.67.179.218","443","OK","ok > 40 days","","" +"intermediate_cert_chain <#3>","deces.matchid.io/172.67.179.218","443","INFO","ISRG Root X1 <-- DST Root CA X3","","" +"intermediate_cert_badOCSP","deces.matchid.io/172.67.179.218","443","OK","intermediate certificate(s) is/are ok","","" +"HTTP_status_code","deces.matchid.io/172.67.179.218","443","INFO","200 OK ('/')","","" +"HTTP_clock_skew","deces.matchid.io/172.67.179.218","443","INFO","0 seconds from localtime","","" +"HTTP_headerTime","deces.matchid.io/172.67.179.218","443","INFO","1711241978","","" +"HSTS_time","deces.matchid.io/172.67.179.218","443","OK","180 days (=15552000 seconds) > 15552000 seconds","","" +"HSTS_subdomains","deces.matchid.io/172.67.179.218","443","OK","includes subdomains","","" +"HSTS_preload","deces.matchid.io/172.67.179.218","443","OK","domain IS marked for preloading","","" +"HPKP","deces.matchid.io/172.67.179.218","443","INFO","No support for HTTP Public Key Pinning","","" +"banner_server","deces.matchid.io/172.67.179.218","443","INFO","cloudflare","","" +"banner_application","deces.matchid.io/172.67.179.218","443","INFO","No application banner found","","" +"cookie_count","deces.matchid.io/172.67.179.218","443","INFO","0 at '/'","","" +"X-Frame-Options","deces.matchid.io/172.67.179.218","443","OK","*.matchid.io","","" +"X-Content-Type-Options","deces.matchid.io/172.67.179.218","443","OK","nosniff","","" +"Content-Security-Policy","deces.matchid.io/172.67.179.218","443","OK","default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com","","" +"X-XSS-Protection","deces.matchid.io/172.67.179.218","443","INFO","1; mode=block","","" +"Referrer-Policy","deces.matchid.io/172.67.179.218","443","INFO","same-origin","","" +"banner_reverseproxy","deces.matchid.io/172.67.179.218","443","INFO","--","","CWE-200" +"heartbleed","deces.matchid.io/172.67.179.218","443","OK","not vulnerable, no heartbeat extension","CVE-2014-0160","CWE-119" +"CCS","deces.matchid.io/172.67.179.218","443","OK","not vulnerable","CVE-2014-0224","CWE-310" +"ticketbleed","deces.matchid.io/172.67.179.218","443","OK","not vulnerable","CVE-2016-9244","CWE-200" +"ROBOT","deces.matchid.io/172.67.179.218","443","OK","not vulnerable, no RSA key transport cipher","CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168","CWE-203" +"secure_renego","deces.matchid.io/172.67.179.218","443","OK","supported","","CWE-310" +"secure_client_renego","deces.matchid.io/172.67.179.218","443","OK","not vulnerable","CVE-2011-1473","CWE-310" +"CRIME_TLS","deces.matchid.io/172.67.179.218","443","OK","not vulnerable","CVE-2012-4929","CWE-310" +"BREACH","deces.matchid.io/172.67.179.218","443","MEDIUM","potentially VULNERABLE, br gzip HTTP compression detected - only supplied '/' tested","CVE-2013-3587","CWE-310" +"POODLE_SSL","deces.matchid.io/172.67.179.218","443","OK","not vulnerable, no SSLv3","CVE-2014-3566","CWE-310" +"fallback_SCSV","deces.matchid.io/172.67.179.218","443","OK","no protocol below TLS 1.2 offered","","" +"SWEET32","deces.matchid.io/172.67.179.218","443","OK","not vulnerable","CVE-2016-2183 CVE-2016-6329","CWE-327" +"FREAK","deces.matchid.io/172.67.179.218","443","OK","not vulnerable","CVE-2015-0204","CWE-310" +"DROWN","deces.matchid.io/172.67.179.218","443","OK","not vulnerable on this host and port","CVE-2016-0800 CVE-2016-0703","CWE-310" +"DROWN_hint","deces.matchid.io/172.67.179.218","443","INFO","no RSA certificate, can't be used with SSLv2 elsewhere","CVE-2016-0800 CVE-2016-0703","CWE-310" +"LOGJAM","deces.matchid.io/172.67.179.218","443","OK","not vulnerable, no DH EXPORT ciphers,","CVE-2015-4000","CWE-310" +"LOGJAM-common_primes","deces.matchid.io/172.67.179.218","443","OK","no DH key with <= TLS 1.2","CVE-2015-4000","CWE-310" +"BEAST","deces.matchid.io/172.67.179.218","443","OK","not vulnerable, no SSL3 or TLS1","CVE-2011-3389","CWE-20" +"LUCKY13","deces.matchid.io/172.67.179.218","443","LOW","potentially vulnerable, uses TLS CBC ciphers","CVE-2013-0169","CWE-310" +"winshock","deces.matchid.io/172.67.179.218","443","OK","not vulnerable","CVE-2014-6321","CWE-94" +"RC4","deces.matchid.io/172.67.179.218","443","OK","not vulnerable","CVE-2013-2566 CVE-2015-2808","CWE-310" +"clientsimulation-android_60","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305-OLD","","" +"clientsimulation-android_70","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" +"clientsimulation-android_81","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" +"clientsimulation-android_90","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" +"clientsimulation-android_X","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" +"clientsimulation-android_11","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" +"clientsimulation-android_12","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" +"clientsimulation-chrome_79_win10","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" +"clientsimulation-chrome_101_win10","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" +"clientsimulation-firefox_66_win81","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" +"clientsimulation-firefox_100_win10","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" +"clientsimulation-ie_6_xp","deces.matchid.io/172.67.179.218","443","INFO","No connection","","" +"clientsimulation-ie_8_win7","deces.matchid.io/172.67.179.218","443","INFO","No connection","","" +"clientsimulation-ie_8_xp","deces.matchid.io/172.67.179.218","443","INFO","No connection","","" +"clientsimulation-ie_11_win7","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" +"clientsimulation-ie_11_win81","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" +"clientsimulation-ie_11_winphone81","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" +"clientsimulation-ie_11_win10","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" +"clientsimulation-edge_15_win10","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" +"clientsimulation-edge_101_win10_21h2","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" +"clientsimulation-safari_121_ios_122","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_CHACHA20_POLY1305_SHA256","","" +"clientsimulation-safari_130_osx_10146","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_CHACHA20_POLY1305_SHA256","","" +"clientsimulation-safari_154_osx_1231","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" +"clientsimulation-java_7u25","deces.matchid.io/172.67.179.218","443","INFO","No connection","","" +"clientsimulation-java_8u161","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" +"clientsimulation-java1102","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" +"clientsimulation-java1703","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" +"clientsimulation-go_1178","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" +"clientsimulation-libressl_283","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305","","" +"clientsimulation-openssl_102e","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" +"clientsimulation-openssl_110l","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305","","" +"clientsimulation-openssl_111d","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" +"clientsimulation-openssl_303","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" +"clientsimulation-apple_mail_16_0","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256","","" +"clientsimulation-thunderbird_91_9","deces.matchid.io/172.67.179.218","443","INFO","TLSv1.3 TLS_AES_128_GCM_SHA256","","" +"rating_spec","deces.matchid.io/172.67.179.218","443","INFO","SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)","","" +"rating_doc","deces.matchid.io/172.67.179.218","443","INFO","https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide","","" +"protocol_support_score","deces.matchid.io/172.67.179.218","443","INFO","100","","" +"protocol_support_score_weighted","deces.matchid.io/172.67.179.218","443","INFO","30","","" +"key_exchange_score","deces.matchid.io/172.67.179.218","443","INFO","100","","" +"key_exchange_score_weighted","deces.matchid.io/172.67.179.218","443","INFO","30","","" +"cipher_strength_score","deces.matchid.io/172.67.179.218","443","INFO","60","","" +"cipher_strength_score_weighted","deces.matchid.io/172.67.179.218","443","INFO","24","","" +"final_score","deces.matchid.io/172.67.179.218","443","INFO","84","","" +"overall_grade","deces.matchid.io/172.67.179.218","443","OK","A+","","" diff --git a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/testssl.html b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/testssl.html index caede9aa..f6364053 100644 --- a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/testssl.html +++ b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/testssl.html @@ -21,17 +21,17 @@ ########################################################### Using "OpenSSL 1.0.2-bad (1.0.2k-dev)" [~183 ciphers] - on fv-az692-637:/home/testssl/bin/openssl.Linux.x86_64 + on fv-az1205-275:/home/testssl/bin/openssl.Linux.x86_64 (built: "Sep 1 14:03:44 2022", platform: "linux-x86_64") -Testing all IPv4 addresses (port 443): 172.67.179.218 104.21.64.91 +Testing all IPv4 addresses (port 443): 104.21.64.91 172.67.179.218 ----------------------------------------------------- - Start 2024-03-17 00:57:50 -->> 172.67.179.218:443 (deces.matchid.io) <<-- + Start 2024-03-24 00:58:43 -->> 104.21.64.91:443 (deces.matchid.io) <<-- - Further IP addresses: 104.21.64.91 2606:4700:3030::6815:405b - 2606:4700:3031::ac43:b3da - rDNS (172.67.179.218): -- + Further IP addresses: 172.67.179.218 2606:4700:3031::ac43:b3da + 2606:4700:3030::6815:405b + rDNS (104.21.64.91): -- Service detected: HTTP @@ -97,7 +97,7 @@ "compress_certificate/#27" Session Ticket RFC 5077 hint 64800 seconds, session tickets keys seems to be rotated < daily SSL Session ID support yes - Session Resumption Tickets: yes, ID: yes + Session Resumption Tickets: yes, ID: no TLS clock skew Random values, no fingerprinting possible Certificate Compression 0002/Brotli Client Authentication none @@ -115,7 +115,7 @@ https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=5EF4365D64D5D14DD7380946FFD65FCBCDC3BB141139C9614514CD19CE1919D7 Chain of trust Ok EV cert (experimental) no - Certificate Validity (UTC) 58 >= 30 days (2024-02-15 00:54 --> 2024-05-15 00:54) + Certificate Validity (UTC) 51 >= 30 days (2024-02-15 00:54 --> 2024-05-15 00:54) ETS/"eTLS", visibility info not present Certificate Revocation List -- OCSP URI http://e1.o.lencr.org @@ -250,14 +250,14 @@ Final Score 84 Overall Grade A+ - Done 2024-03-17 00:58:30 [ 41s] -->> 172.67.179.218:443 (deces.matchid.io) <<-- + Done 2024-03-24 00:59:23 [ 42s] -->> 104.21.64.91:443 (deces.matchid.io) <<-- ----------------------------------------------------- - Start 2024-03-17 00:58:31 -->> 104.21.64.91:443 (deces.matchid.io) <<-- + Start 2024-03-24 00:59:23 -->> 172.67.179.218:443 (deces.matchid.io) <<-- - Further IP addresses: 172.67.179.218 2606:4700:3030::6815:405b - 2606:4700:3031::ac43:b3da - rDNS (104.21.64.91): -- + Further IP addresses: 104.21.64.91 2606:4700:3031::ac43:b3da + 2606:4700:3030::6815:405b + rDNS (172.67.179.218): -- Service detected: HTTP @@ -341,7 +341,7 @@ https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=5EF4365D64D5D14DD7380946FFD65FCBCDC3BB141139C9614514CD19CE1919D7 Chain of trust Ok EV cert (experimental) no - Certificate Validity (UTC) 58 >= 30 days (2024-02-15 00:54 --> 2024-05-15 00:54) + Certificate Validity (UTC) 51 >= 30 days (2024-02-15 00:54 --> 2024-05-15 00:54) ETS/"eTLS", visibility info not present Certificate Revocation List -- OCSP URI http://e1.o.lencr.org @@ -476,10 +476,10 @@ Final Score 84 Overall Grade A+ - Done 2024-03-17 00:59:11 [ 82s] -->> 104.21.64.91:443 (deces.matchid.io) <<-- + Done 2024-03-24 01:00:04 [ 83s] -->> 172.67.179.218:443 (deces.matchid.io) <<-- ----------------------------------------------------- -Done testing now all IP addresses (on port 443): 172.67.179.218 104.21.64.91 +Done testing now all IP addresses (on port 443): 104.21.64.91 172.67.179.218 diff --git a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/testssl.json b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/testssl.json index afab7b2b..352b2219 100644 --- a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/testssl.json +++ b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/testssl.json @@ -1,77 +1,77 @@ [ { "id" : "service", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "HTTP" } , { "id" : "pre_128cipher", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "No 128 cipher limit bug" } , { "id" : "SSLv2", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "not offered" } , { "id" : "SSLv3", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "not offered" } , { "id" : "TLS1", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "not offered" } , { "id" : "TLS1_1", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "not offered" } , { "id" : "TLS1_2", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "TLS1_3", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "offered with final" } , { "id" : "ALPN_HTTP2", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "h2" } , { "id" : "ALPN", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "http/1.1" } , { "id" : "cipherlist_NULL", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", @@ -79,7 +79,7 @@ } , { "id" : "cipherlist_aNULL", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", @@ -87,7 +87,7 @@ } , { "id" : "cipherlist_EXPORT", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", @@ -95,7 +95,7 @@ } , { "id" : "cipherlist_LOW", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", @@ -103,7 +103,7 @@ } , { "id" : "cipherlist_3DES_IDEA", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "cwe" : "CWE-310", @@ -111,7 +111,7 @@ } , { "id" : "cipherlist_OBSOLETED", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "LOW", "cwe" : "CWE-310", @@ -119,581 +119,581 @@ } , { "id" : "cipherlist_STRONG_NOFS", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "not offered" } , { "id" : "cipherlist_STRONG_FS", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "cipher_order-tls1_2", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "server" } , { "id" : "cipherorder_TLSv1_2", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "cipher_order", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "server -- TLS 1.3 client determined" } , { "id" : "FS", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "FS_ciphers", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-CHACHA20-POLY1305-OLD" } , { "id" : "FS_ECDHE_curves", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "prime256v1" } , { "id" : "TLS_extensions", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'next protocol/#13172' 'key share/#51' 'supported versions/#43' 'extended master secret/#23' 'application layer protocol negotiation/#16' 'compress_certificate/#27'" } , { "id" : "TLS_session_ticket", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "valid for 64800 seconds only (= 30 days" + "finding" : "51 >= 30 days" } , { "id" : "cert_notBefore", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "2024-02-15 00:54" } , { "id" : "cert_notAfter", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "2024-05-15 00:54" } , { "id" : "cert_extlifeSpan", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "certificate has no extended life time according to browser forum" } , { "id" : "cert_eTLS", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "not present" } , { "id" : "cert_crlDistributionPoints", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "--" } , { "id" : "cert_ocspURL", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "http://e1.o.lencr.org" } , { "id" : "OCSP_stapling", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "cert_ocspRevoked", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "WARN", "finding" : "unable to verify response" } , { "id" : "cert_mustStapleExtension", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "--" } , { "id" : "DNS_CAArecord", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "LOW", "finding" : "--" } , { "id" : "certificate_transparency", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "yes (certificate extension)" } , { "id" : "certs_countServer", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "4" } , { "id" : "certs_list_ordering_problem", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "no" } , { "id" : "cert_caIssuers", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "E1 (Let's Encrypt from US)" } , { "id" : "intermediate_cert <#1>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "-----BEGIN CERTIFICATE-----\nMIICxjCCAk2gAwIBAgIRALO93/inhFu86QOgQTWzSkUwCgYIKoZIzj0EAwMwTzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2VhcmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDIwHhcNMjAwOTA0MDAwMDAwWhcNMjUwOTE1MTYwMDAwWjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3MgRW5jcnlwdDELMAkGA1UEAxMCRTEwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQkXC2iKv0cS6Zdl3MnMayyoGli72XoprDwrEuf/xwLcA/TmC9N/A8AmzfwdAVXMpcuBe8qQyWj+240JxP2T35p0wKZXuskR5LBJJvmsSGPwSSB/GjMH2m6WPUZIvd0xhajggEIMIIBBDAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFFrz7Sv8NsI3eblSMOpUb89Vyy6sMB8GA1UdIwQYMBaAFHxClq7eS0g7+pL4nozPbYupcjeVMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcwAoYWaHR0cDovL3gyLmkubGVuY3Iub3JnLzAnBgNVHR8EIDAeMBygGqAYhhZodHRwOi8veDIuYy5sZW5jci5vcmcvMCIGA1UdIAQbMBkwCAYGZ4EMAQIBMA0GCysGAQQBgt8TAQEBMAoGCCqGSM49BAMDA2cAMGQCMHt01VITjWH+Dbo/AwCd89eYhNlXLr3pD5xcSAQh8suzYHKOl9YST8pE9kLJ03uGqQIwWrGxtO3qYJkgsTgDyj2gJrjubi1K9sZmHzOa25JK1fUpE8ZwYii6I4zPPS/Lgul/\n-----END CERTIFICATE-----" } , { "id" : "intermediate_cert_fingerprintSHA256 <#1>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "46494E30379059DF18BE52124305E606FC59070E5B21076CE113954B60517CDA" } , { "id" : "intermediate_cert_notBefore <#1>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "2020-09-04 00:00" } , { "id" : "intermediate_cert_notAfter <#1>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "2025-09-15 16:00" } , { "id" : "intermediate_cert_expiration <#1>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "ok > 40 days" } , { "id" : "intermediate_cert_chain <#1>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "E1 <-- ISRG Root X2" } , { "id" : "intermediate_cert <#2>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" } , { "id" : "intermediate_cert_fingerprintSHA256 <#2>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "8B05B68CC659E5ED0FCB38F2C942FBFD200E6F2FF9F85D63C6994EF5E0B02701" } , { "id" : "intermediate_cert_notBefore <#2>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "2020-09-04 00:00" } , { "id" : "intermediate_cert_notAfter <#2>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "2025-09-15 16:00" } , { "id" : "intermediate_cert_expiration <#2>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "ok > 40 days" } , { "id" : "intermediate_cert_chain <#2>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "ISRG Root X2 <-- ISRG Root X1" } , { "id" : "intermediate_cert <#3>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" } , { "id" : "intermediate_cert_fingerprintSHA256 <#3>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "6D99FB265EB1C5B3744765FCBC648F3CD8E1BFFAFDC4C2F99B9D47CF7FF1C24F" } , { "id" : "intermediate_cert_notBefore <#3>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "2021-01-20 19:14" } , { "id" : "intermediate_cert_notAfter <#3>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "2024-09-30 18:14" } , { "id" : "intermediate_cert_expiration <#3>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "ok > 40 days" } , { "id" : "intermediate_cert_chain <#3>", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "ISRG Root X1 <-- DST Root CA X3" } , { "id" : "intermediate_cert_badOCSP", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "intermediate certificate(s) is/are ok" } , { "id" : "HTTP_status_code", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "200 OK ('/')" } , { "id" : "HTTP_clock_skew", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "0 seconds from localtime" } , { "id" : "HTTP_headerTime", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", - "finding" : "1710637085" + "finding" : "1711241938" } , { "id" : "HSTS_time", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "180 days (=15552000 seconds) > 15552000 seconds" } , { "id" : "HSTS_subdomains", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "includes subdomains" } , { "id" : "HSTS_preload", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "domain IS marked for preloading" } , { "id" : "HPKP", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "No support for HTTP Public Key Pinning" } , { "id" : "banner_server", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "cloudflare" } , { "id" : "banner_application", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "No application banner found" } , { "id" : "cookie_count", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "0 at '/'" } , { "id" : "X-Frame-Options", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "*.matchid.io" } , { "id" : "X-Content-Type-Options", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "nosniff" } , { "id" : "Content-Security-Policy", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com" } , { "id" : "X-XSS-Protection", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "1; mode=block" } , { "id" : "Referrer-Policy", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "same-origin" } , { "id" : "banner_reverseproxy", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "cwe" : "CWE-200", @@ -701,7 +701,7 @@ } , { "id" : "heartbleed", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-0160", @@ -710,7 +710,7 @@ } , { "id" : "CCS", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-0224", @@ -719,7 +719,7 @@ } , { "id" : "ticketbleed", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-9244", @@ -728,7 +728,7 @@ } , { "id" : "ROBOT", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", @@ -737,7 +737,7 @@ } , { "id" : "secure_renego", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cwe" : "CWE-310", @@ -745,7 +745,7 @@ } , { "id" : "secure_client_renego", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cve" : "CVE-2011-1473", @@ -754,7 +754,7 @@ } , { "id" : "CRIME_TLS", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cve" : "CVE-2012-4929", @@ -763,7 +763,7 @@ } , { "id" : "BREACH", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "MEDIUM", "cve" : "CVE-2013-3587", @@ -772,7 +772,7 @@ } , { "id" : "POODLE_SSL", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-3566", @@ -781,14 +781,14 @@ } , { "id" : "fallback_SCSV", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "no protocol below TLS 1.2 offered" } , { "id" : "SWEET32", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-2183 CVE-2016-6329", @@ -797,7 +797,7 @@ } , { "id" : "FREAK", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-0204", @@ -806,7 +806,7 @@ } , { "id" : "DROWN", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-0800 CVE-2016-0703", @@ -815,7 +815,7 @@ } , { "id" : "DROWN_hint", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "cve" : "CVE-2016-0800 CVE-2016-0703", @@ -824,7 +824,7 @@ } , { "id" : "LOGJAM", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-4000", @@ -833,7 +833,7 @@ } , { "id" : "LOGJAM-common_primes", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-4000", @@ -842,7 +842,7 @@ } , { "id" : "BEAST", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cve" : "CVE-2011-3389", @@ -851,7 +851,7 @@ } , { "id" : "LUCKY13", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "LOW", "cve" : "CVE-2013-0169", @@ -860,7 +860,7 @@ } , { "id" : "winshock", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-6321", @@ -869,7 +869,7 @@ } , { "id" : "RC4", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "cve" : "CVE-2013-2566 CVE-2015-2808", @@ -878,392 +878,392 @@ } , { "id" : "clientsimulation-android_60", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305-OLD" } , { "id" : "clientsimulation-android_70", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_81", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_90", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-android_X", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-android_11", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-android_12", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-chrome_79_win10", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-chrome_101_win10", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-firefox_66_win81", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-firefox_100_win10", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-ie_6_xp", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_8_win7", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_8_xp", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_11_win7", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-ie_11_win81", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-ie_11_winphone81", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-ie_11_win10", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-edge_15_win10", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-edge_101_win10_21h2", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-safari_121_ios_122", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_CHACHA20_POLY1305_SHA256" } , { "id" : "clientsimulation-safari_130_osx_10146", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_CHACHA20_POLY1305_SHA256" } , { "id" : "clientsimulation-safari_154_osx_1231", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-java_7u25", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-java_8u161", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-java1102", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-java1703", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_256_GCM_SHA384" } , { "id" : "clientsimulation-go_1178", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-libressl_283", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305" } , { "id" : "clientsimulation-openssl_102e", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-openssl_110l", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305" } , { "id" : "clientsimulation-openssl_111d", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_256_GCM_SHA384" } , { "id" : "clientsimulation-openssl_303", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_256_GCM_SHA384" } , { "id" : "clientsimulation-apple_mail_16_0", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-thunderbird_91_9", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "rating_spec", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" } , { "id" : "rating_doc", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" } , { "id" : "protocol_support_score", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "100" } , { "id" : "protocol_support_score_weighted", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "30" } , { "id" : "key_exchange_score", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "100" } , { "id" : "key_exchange_score_weighted", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "30" } , { "id" : "cipher_strength_score", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "60" } , { "id" : "cipher_strength_score_weighted", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "24" } , { "id" : "final_score", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "INFO", "finding" : "84" } , { "id" : "overall_grade", - "ip" : "deces.matchid.io/172.67.179.218", + "ip" : "deces.matchid.io/104.21.64.91", "port" : "443", "severity" : "OK", "finding" : "A+" } , { "id" : "service", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "HTTP" } , { "id" : "pre_128cipher", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "No 128 cipher limit bug" } , { "id" : "SSLv2", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "not offered" } , { "id" : "SSLv3", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "not offered" } , { "id" : "TLS1", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "not offered" } , { "id" : "TLS1_1", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "not offered" } , { "id" : "TLS1_2", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "TLS1_3", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "offered with final" } , { "id" : "ALPN_HTTP2", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "h2" } , { "id" : "ALPN", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "http/1.1" } , { "id" : "cipherlist_NULL", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", @@ -1271,7 +1271,7 @@ } , { "id" : "cipherlist_aNULL", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", @@ -1279,7 +1279,7 @@ } , { "id" : "cipherlist_EXPORT", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", @@ -1287,7 +1287,7 @@ } , { "id" : "cipherlist_LOW", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", @@ -1295,7 +1295,7 @@ } , { "id" : "cipherlist_3DES_IDEA", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "cwe" : "CWE-310", @@ -1303,7 +1303,7 @@ } , { "id" : "cipherlist_OBSOLETED", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "LOW", "cwe" : "CWE-310", @@ -1311,581 +1311,581 @@ } , { "id" : "cipherlist_STRONG_NOFS", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "not offered" } , { "id" : "cipherlist_STRONG_FS", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "cipher_order-tls1_2", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "server" } , { "id" : "cipherorder_TLSv1_2", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "cipher_order", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "server -- TLS 1.3 client determined" } , { "id" : "FS", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "FS_ciphers", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-CHACHA20-POLY1305-OLD" } , { "id" : "FS_ECDHE_curves", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "prime256v1" } , { "id" : "TLS_extensions", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'next protocol/#13172' 'key share/#51' 'supported versions/#43' 'extended master secret/#23' 'application layer protocol negotiation/#16' 'compress_certificate/#27'" } , { "id" : "TLS_session_ticket", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "valid for 64800 seconds only (= 30 days" + "finding" : "51 >= 30 days" } , { "id" : "cert_notBefore", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "2024-02-15 00:54" } , { "id" : "cert_notAfter", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "2024-05-15 00:54" } , { "id" : "cert_extlifeSpan", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "certificate has no extended life time according to browser forum" } , { "id" : "cert_eTLS", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "not present" } , { "id" : "cert_crlDistributionPoints", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "--" } , { "id" : "cert_ocspURL", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "http://e1.o.lencr.org" } , { "id" : "OCSP_stapling", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "cert_ocspRevoked", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "WARN", "finding" : "unable to verify response" } , { "id" : "cert_mustStapleExtension", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "--" } , { "id" : "DNS_CAArecord", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "LOW", "finding" : "--" } , { "id" : "certificate_transparency", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "yes (certificate extension)" } , { "id" : "certs_countServer", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "4" } , { "id" : "certs_list_ordering_problem", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "no" } , { "id" : "cert_caIssuers", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "E1 (Let's Encrypt from US)" } , { "id" : "intermediate_cert <#1>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" } , { "id" : "intermediate_cert_fingerprintSHA256 <#1>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "46494E30379059DF18BE52124305E606FC59070E5B21076CE113954B60517CDA" } , { "id" : "intermediate_cert_notBefore <#1>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "2020-09-04 00:00" } , { "id" : "intermediate_cert_notAfter <#1>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "2025-09-15 16:00" } , { "id" : "intermediate_cert_expiration <#1>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "ok > 40 days" } , { "id" : "intermediate_cert_chain <#1>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "E1 <-- ISRG Root X2" } , { "id" : "intermediate_cert <#2>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----" } , { "id" : "intermediate_cert_fingerprintSHA256 <#2>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "8B05B68CC659E5ED0FCB38F2C942FBFD200E6F2FF9F85D63C6994EF5E0B02701" } , { "id" : "intermediate_cert_notBefore <#2>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "2020-09-04 00:00" } , { "id" : "intermediate_cert_notAfter <#2>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "2025-09-15 16:00" } , { "id" : "intermediate_cert_expiration <#2>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "ok > 40 days" } , { "id" : "intermediate_cert_chain <#2>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "ISRG Root X2 <-- ISRG Root X1" } , { "id" : "intermediate_cert <#3>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "-----BEGIN CERTIFICATE-----\nMIIFYDCCBEigAwIBAgIQQAF3ITfU6UK47naqPGQKtzANBgkqhkiG9w0BAQsFADA/MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMTDkRTVCBSb290IENBIFgzMB4XDTIxMDEyMDE5MTQwM1oXDTI0MDkzMDE4MTQwM1owTzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2VhcmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCt6CRz9BQ385ueK1coHIe+3LffOJCMbjzmV6B493XCov71am72AE8o295ohmxEk7axY/0UEmu/H9LqMZshftEzPLpI9d1537O4/xLxIZpLwYqGcWlKZmZsj348cL+tKSIG8+TA5oCu4kuPt5l+lAOf00eXfJlII1PoOK5PCm+DLtFJV4yAdLbaL9A4jXsDcCEbdfIwPPqPrt3aY6vrFk/CjhFLfs8L6P+1dy70sntK4EwSJQxwjQMpoOFTJOwT2e4ZvxCzSow/iaNhUd6shweU9GNx7C7ib1uYgeGJXDR5bHbvO5BieebbpJovJsXQEOEO3tkQjhb7t/eo98flAgeYjzYIlefiN5YNNnWe+w5ysR2bvAP5SQXYgd0FtCrWQemsAXaVCg/Y39W9Eh81LygXbNKYwagJZHduRze6zqxZXmidf3LWicUGQSk+WT7dJvUkyRGnWqNMQB9GoZm1pzpRboY7nn1ypxIFeFntPlF4FQsDj43QLwWyPntKHEtzBRL8xurgUBN8Q5N0s8p0544fAQjQMNRbcTa0B7rBMDBcSLeCO5imfWCKoqMpgsy6vYMEG6KDA0Gh1gXxG8K28Kh8hjtGqEgqiNx2mna/H2qlPRmP6zjzZN7IKw0KKP/32+IVQtQi0Cdd4Xn+GOdwiK1O5tmLOsbdJ1Fu/7xk9TNDTwIDAQABo4IBRjCCAUIwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwSwYIKwYBBQUHAQEEPzA9MDsGCCsGAQUFBzAChi9odHRwOi8vYXBwcy5pZGVudHJ1c3QuY29tL3Jvb3RzL2RzdHJvb3RjYXgzLnA3YzAfBgNVHSMEGDAWgBTEp7Gkeyxx+tvhS5B1/8QVYIWJEDBUBgNVHSAETTBLMAgGBmeBDAECATA/BgsrBgEEAYLfEwEBATAwMC4GCCsGAQUFBwIBFiJodHRwOi8vY3BzLnJvb3QteDEubGV0c2VuY3J5cHQub3JnMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuaWRlbnRydXN0LmNvbS9EU1RST09UQ0FYM0NSTC5jcmwwHQYDVR0OBBYEFHm0WeZ7tuXkAXOACIjIGlj26ZtuMA0GCSqGSIb3DQEBCwUAA4IBAQAKcwBslm7/DlLQrt2M51oGrS+o44+/yQoDFVDC5WxCu2+b9LRPwkSICHXM6webFGJueN7sJ7o5XPWioW5WlHAQU7G75K/QosMrAdSW9MUgNTP52GE24HGNtLi1qoJFlcDyqSMo59ahy2cI2qBDLKobkx/J3vWraV0T9VuGWCLKTVXkcGdtwlfFRjlBz4pYg1htmf5X6DYO8A4jqv2Il9DjXA6USbW1FzXSLr9Ohe8Y4IWS6wY7bCkjCWDcRQJMEhg76fsO3txE+FiYruq9RUWhiF1myv4Q6W+CyBFCDfvp7OOGAN6dEOM4+qR9sdjoSYKEBpsr6GtPAQw4dy753ec5\n-----END CERTIFICATE-----" } , { "id" : "intermediate_cert_fingerprintSHA256 <#3>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "6D99FB265EB1C5B3744765FCBC648F3CD8E1BFFAFDC4C2F99B9D47CF7FF1C24F" } , { "id" : "intermediate_cert_notBefore <#3>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "2021-01-20 19:14" } , { "id" : "intermediate_cert_notAfter <#3>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "2024-09-30 18:14" } , { "id" : "intermediate_cert_expiration <#3>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "ok > 40 days" } , { "id" : "intermediate_cert_chain <#3>", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "ISRG Root X1 <-- DST Root CA X3" } , { "id" : "intermediate_cert_badOCSP", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "intermediate certificate(s) is/are ok" } , { "id" : "HTTP_status_code", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "200 OK ('/')" } , { "id" : "HTTP_clock_skew", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "0 seconds from localtime" } , { "id" : "HTTP_headerTime", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", - "finding" : "1710637126" + "finding" : "1711241978" } , { "id" : "HSTS_time", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "180 days (=15552000 seconds) > 15552000 seconds" } , { "id" : "HSTS_subdomains", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "includes subdomains" } , { "id" : "HSTS_preload", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "domain IS marked for preloading" } , { "id" : "HPKP", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "No support for HTTP Public Key Pinning" } , { "id" : "banner_server", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "cloudflare" } , { "id" : "banner_application", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "No application banner found" } , { "id" : "cookie_count", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "0 at '/'" } , { "id" : "X-Frame-Options", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "*.matchid.io" } , { "id" : "X-Content-Type-Options", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "nosniff" } , { "id" : "Content-Security-Policy", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com" } , { "id" : "X-XSS-Protection", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "1; mode=block" } , { "id" : "Referrer-Policy", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "same-origin" } , { "id" : "banner_reverseproxy", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "cwe" : "CWE-200", @@ -1893,7 +1893,7 @@ } , { "id" : "heartbleed", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-0160", @@ -1902,7 +1902,7 @@ } , { "id" : "CCS", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-0224", @@ -1911,7 +1911,7 @@ } , { "id" : "ticketbleed", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-9244", @@ -1920,7 +1920,7 @@ } , { "id" : "ROBOT", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", @@ -1929,7 +1929,7 @@ } , { "id" : "secure_renego", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cwe" : "CWE-310", @@ -1937,7 +1937,7 @@ } , { "id" : "secure_client_renego", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cve" : "CVE-2011-1473", @@ -1946,7 +1946,7 @@ } , { "id" : "CRIME_TLS", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cve" : "CVE-2012-4929", @@ -1955,7 +1955,7 @@ } , { "id" : "BREACH", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "MEDIUM", "cve" : "CVE-2013-3587", @@ -1964,7 +1964,7 @@ } , { "id" : "POODLE_SSL", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-3566", @@ -1973,14 +1973,14 @@ } , { "id" : "fallback_SCSV", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "no protocol below TLS 1.2 offered" } , { "id" : "SWEET32", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-2183 CVE-2016-6329", @@ -1989,7 +1989,7 @@ } , { "id" : "FREAK", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-0204", @@ -1998,7 +1998,7 @@ } , { "id" : "DROWN", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-0800 CVE-2016-0703", @@ -2007,7 +2007,7 @@ } , { "id" : "DROWN_hint", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "cve" : "CVE-2016-0800 CVE-2016-0703", @@ -2016,7 +2016,7 @@ } , { "id" : "LOGJAM", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-4000", @@ -2025,7 +2025,7 @@ } , { "id" : "LOGJAM-common_primes", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-4000", @@ -2034,7 +2034,7 @@ } , { "id" : "BEAST", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cve" : "CVE-2011-3389", @@ -2043,7 +2043,7 @@ } , { "id" : "LUCKY13", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "LOW", "cve" : "CVE-2013-0169", @@ -2052,7 +2052,7 @@ } , { "id" : "winshock", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-6321", @@ -2061,7 +2061,7 @@ } , { "id" : "RC4", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "cve" : "CVE-2013-2566 CVE-2015-2808", @@ -2070,324 +2070,324 @@ } , { "id" : "clientsimulation-android_60", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305-OLD" } , { "id" : "clientsimulation-android_70", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_81", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_90", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-android_X", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-android_11", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-android_12", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-chrome_79_win10", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-chrome_101_win10", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-firefox_66_win81", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-firefox_100_win10", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-ie_6_xp", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_8_win7", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_8_xp", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_11_win7", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-ie_11_win81", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-ie_11_winphone81", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-ie_11_win10", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-edge_15_win10", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-edge_101_win10_21h2", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-safari_121_ios_122", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_CHACHA20_POLY1305_SHA256" } , { "id" : "clientsimulation-safari_130_osx_10146", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_CHACHA20_POLY1305_SHA256" } , { "id" : "clientsimulation-safari_154_osx_1231", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-java_7u25", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-java_8u161", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-java1102", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-java1703", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_256_GCM_SHA384" } , { "id" : "clientsimulation-go_1178", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "clientsimulation-libressl_283", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305" } , { "id" : "clientsimulation-openssl_102e", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-openssl_110l", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305" } , { "id" : "clientsimulation-openssl_111d", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_256_GCM_SHA384" } , { "id" : "clientsimulation-openssl_303", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_256_GCM_SHA384" } , { "id" : "clientsimulation-apple_mail_16_0", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-thunderbird_91_9", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" } , { "id" : "rating_spec", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)" } , { "id" : "rating_doc", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide" } , { "id" : "protocol_support_score", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "100" } , { "id" : "protocol_support_score_weighted", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "30" } , { "id" : "key_exchange_score", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "100" } , { "id" : "key_exchange_score_weighted", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "30" } , { "id" : "cipher_strength_score", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "60" } , { "id" : "cipher_strength_score_weighted", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "24" } , { "id" : "final_score", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", "finding" : "84" } , { "id" : "overall_grade", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "OK", "finding" : "A+" } , { "id" : "scanTime", - "ip" : "deces.matchid.io/104.21.64.91", + "ip" : "deces.matchid.io/172.67.179.218", "port" : "443", "severity" : "INFO", - "finding" : "82" + "finding" : "83" } ] diff --git a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/thirdparties.json b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/thirdparties.json index 2d3b0db4..114f824b 100644 --- a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/thirdparties.json +++ b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/thirdparties.json @@ -22,7 +22,7 @@ }, { "type": "google", - "url": "https://analytics.google.com/g/collect?v=2&tid=G-49J1J0GERX>m=45je43d0v892384882za200&_p=1710637056315&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=1001559062.1710637056&ul=en-us&sr=800x600&uaa=&uab=&uafvl=&uamb=0&uam=&uap=&uapv=&uaw=0&pscdl=noapi&_s=1&sid=1710637056&sct=1&seg=0&dl=https%3A%2F%2Fdeces.matchid.io%2Fsearch&dt=matchID%20-%20Moteur%20de%20recherche%20des%20personnes%20d%C3%A9c%C3%A9d%C3%A9es&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=837", + "url": "https://analytics.google.com/g/collect?v=2&tid=G-49J1J0GERX>m=45je43k0v892384882za200&_p=1711241908841&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=120817971.1711241909&ul=en-us&sr=800x600&uaa=&uab=&uafvl=&uamb=0&uam=&uap=&uapv=&uaw=0&pscdl=noapi&_s=1&sid=1711241908&sct=1&seg=0&dl=https%3A%2F%2Fdeces.matchid.io%2Fsearch&dt=matchID%20-%20Moteur%20de%20recherche%20des%20personnes%20d%C3%A9c%C3%A9d%C3%A9es&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=841", "details": { "id": "google", "message": "Use hosted Matomo instance" @@ -30,7 +30,7 @@ }, { "type": "google analytics", - "url": "https://stats.g.doubleclick.net/g/collect?v=2&tid=G-49J1J0GERX&cid=1001559062.1710637056>m=45je43d0v892384882za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0", + "url": "https://stats.g.doubleclick.net/g/collect?v=2&tid=G-49J1J0GERX&cid=120817971.1711241909>m=45je43k0v892384882za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0", "details": { "id": "google analytics", "message": "Use hosted Matomo instance" @@ -38,7 +38,7 @@ }, { "type": "google", - "url": "https://analytics.google.com/g/collect?v=2&tid=G-49J1J0GERX>m=45je43d0v892384882za200&_p=1710637056315&gcd=13l3l3l3l1&npa=0&dma=0&cid=1001559062.1710637056&ul=en-us&sr=800x600&uaa=&uab=&uafvl=&uamb=0&uam=&uap=&uapv=&uaw=0&pscdl=noapi&sid=1710637056&sct=1&seg=0&dl=https%3A%2F%2Fdeces.matchid.io%2Fsearch&dt=matchID%20-%20Moteur%20de%20recherche%20des%20personnes%20d%C3%A9c%C3%A9d%C3%A9es&_s=2&tfd=856", + "url": "https://analytics.google.com/g/collect?v=2&tid=G-49J1J0GERX>m=45je43k0v892384882za200&_p=1711241908841&gcd=13l3l3l3l1&npa=0&dma=0&cid=120817971.1711241909&ul=en-us&sr=800x600&uaa=&uab=&uafvl=&uamb=0&uam=&uap=&uapv=&uaw=0&pscdl=noapi&sid=1711241908&sct=1&seg=0&dl=https%3A%2F%2Fdeces.matchid.io%2Fsearch&dt=matchID%20-%20Moteur%20de%20recherche%20des%20personnes%20d%C3%A9c%C3%A9d%C3%A9es&_s=2&tfd=860", "details": { "id": "google", "message": "Use hosted Matomo instance" @@ -46,11 +46,11 @@ }, { "type": "unknown", - "url": "https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202403130201/show_ads_impl.js" + "url": "https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202403210101/show_ads_impl.js?bust=31082131" }, { "type": "google analytics", - "url": "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6277851622494904&output=html&adk=1812271804&adf=3025194257&lmt=1709688562&plat=1%3A8%2C2%3A8%2C3%3A2162688%2C4%3A2162688%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1048576%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fdeces.matchid.io%2Fsearch&pra=5&wgl=1&easpi=0&asro=0&aseiel=1~2~4~6~8~9~10~11~12~13~14~15~16~17~18~19~20~21&uach=WyIiLCIiLCIiLCIiLCIiLG51bGwsMCxudWxsLCIiLG51bGwsMF0.&dt=1710637056377&bpp=15&bdt=723&idt=223&shv=r20240313&mjsv=m202403130201&ptt=9&saldr=aa&abxe=1&nras=1&correlator=3431290131096&frm=20&pv=2&ga_vid=1001559062.1710637056&ga_sid=1710637057&ga_hid=771879605&ga_fc=1&u_tz=0&u_his=2&u_h=600&u_w=800&u_ah=600&u_aw=800&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=800&bih=600&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C42532524%2C95325974%2C95327950%2C95327955%2C95325785&oid=2&pvsid=4198778842078168&tmod=1680459200&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C800%2C0%2C800%2C600%2C800%2C600&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=33792&bc=31&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&ifi=1&uci=a!1&fsb=1&dtd=241", + "url": "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6277851622494904&output=html&adk=1812271804&adf=3025194257&lmt=1709688562&plat=1%3A8%2C2%3A8%2C3%3A2162688%2C4%3A2162688%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1048576%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fdeces.matchid.io%2Fsearch&pra=5&wgl=1&easpi=0&asro=0&uach=WyIiLCIiLCIiLCIiLCIiLG51bGwsMCxudWxsLCIiLG51bGwsMF0.&dt=1711241908905&bpp=14&bdt=721&idt=224&shv=r20240320&mjsv=m202403210101&ptt=9&saldr=aa&abxe=1&nras=1&correlator=7419196857454&frm=20&pv=2&ga_vid=120817971.1711241909&ga_sid=1711241909&ga_hid=229599750&ga_fc=1&u_tz=0&u_his=2&u_h=600&u_w=800&u_ah=600&u_aw=800&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=800&bih=600&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31081576%2C31082033%2C44798934%2C95326315%2C31082131%2C95320378%2C31081792&oid=2&pvsid=4207171047842736&tmod=2055764357&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C800%2C0%2C800%2C600%2C800%2C600&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=33792&bc=31&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&ifi=1&uci=a!1&fsb=1&dtd=246", "details": { "id": "google analytics", "message": "Use hosted Matomo instance" @@ -58,7 +58,7 @@ }, { "type": "unknown", - "url": "https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20240313&st=env" + "url": "https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20240320&st=env" }, { "type": "unknown", @@ -78,35 +78,35 @@ }, { "type": "unknown", - "url": "https://pagead2.googlesyndication.com/bg/J7jMHEcdr0lVSatsUU1en4le0CiJfA3--2xrJ7e0v4U.js" + "url": "https://pagead2.googlesyndication.com/bg/ClgGLJT-anMFFp_jPcSPgTpNjWBfoBtPLqdYJvwYrrQ.js" }, { "type": "unknown", - "url": "https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gda_r20240313&jk=4198778842078168&rc=" + "url": "https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gda_r20240320&jk=4207171047842736&rc=" }, { "type": "unknown", - "url": "https://tpc.googlesyndication.com/generate_204?NRWE2g" + "url": "https://tpc.googlesyndication.com/generate_204?0vUFnQ" }, { "type": "unknown", - "url": "https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20240313&jk=4198778842078168&bg=!mpmlmdbNAAY_ejuoH3o7ADQBe5WfOMd-XqJhbE4IXiqyi6zcj4ud9pMuidQQ2vspQRZjbr3FSVMRMpoibzrfhnyDlaItAgAAAFFSAAAAAmgBB5kDGxWeIUZlcVChbDL-SNz0lWWRJjd_vAfUuntDhlRWpl1jyCtdOevzaJfkmbUelJ-6wq61DiSyIwHA0SDY8SnUnryzxaoqj_HoDUYdRGJknUT8d-iVPv2zu6X16RTn7FFOLUiuvI1N0yD_fmRF3CF1AE-RSIZlx629ARfAYBNBHHMH7pmx3xn77ouPYsthCRBPuNUseU1qp4hCy90III5tGTdtlHHQxvNTg4V-TaLYFFJC1jB4BzuMc0P7fYA8vzOUXE-sOAO5GEaPLsLy0_7xQDQ8rnNk-Fa2jekv5drY-n6-bVaQy8pbF4zZusIsNtPiChnK0M89JQ7cQnOjKq3Wb4YG074bHUHEl5FTw_Nv8MKfMzE4j4iSTgRmhHxuXWAR1qjo2IfFMRonGcyvG5_-KzgWXQXRzbn-vhKOQVcJ2Bhcf0vg8fWEcEGMUjXZYo4e18Slpb9LbI303kkDdjJ7mBMGOFwA30Dh_FhNNbhD0YAbPDlM1sSVraeotjDlP-d9h0--9nzL42k6gX1KI13jCKlNFk9CsLqp1RU_aGQW4vpZRXiVeC4JQLHUlUb5tillsjSkKXMaMtGvKoPsu2vfaJT_dxWoF_mq6TiRGmiuOIDE3qP3OL7ZD7AsEhlvGy91UCzOlB4rIVZzsNq6K_LsO2XTkDtQV5Wctetms2clVKAvTXC0emf5vaQblMK_lve8EhtoL1PD_22dQ58NcQUsFrzS3ElvXtfoI6LHNBJ-iiwnjRQrqHQ3CjJlxxz0qCWlPik79wKypVjcd_-or_h5lZOyaTOriQiOIRrfDIU6JC1F08d8Wnz3e7_sTHN6GoAa2C-SqLjpJ26gRqS3V37gQRZURX8UilkQIqa1PvR28D2fHLqtUMJrnAdld45FlYl05T4HawN5eFeRISkUnveruBJ76bmDzY3LsfVzWwmxiNQuyRBXNA1BLgh7wKMs79_yWhnd_mAdx-h5oGlHTZmg-D_gDGx2omwj1hVlt9Lgr-JIOd4NB-9JM8j7yOPCsJ1Fyz3hs-hApR2hc63QwHih8oxvnCgqoWdKX5hrJQ" + "url": "https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20240320&jk=4207171047842736&bg=!HB-lH1DNAAZaswqNerM7ADQBe5WfOALZKhGxTWdvNwUh62Ti4pvCFhf2yGxc9NX8jjPZmKWlfrHvswyfBJ8Mhiyj8e-IAgAAAFVSAAAAA2gBB34ANGPDK3ePDHVihgsYkmrDeV2eIfC38iYeOj8SCgayk85ghA__MOINHgWE_ZpgFFOMUF43aJwKABY1701QWCm1_S2JTFLtnJYHBhORXSXbmQKmNJVd2zGYHv1l73QY2IRjFRimGJfJljTL5I4s7Gf1dkKtaHZFCLEDEZMq6LojiofzACDsDuqHY3HQlnjUM8CAD5cn5mIsZpVSwh9dgxeHHi4AVFBWIm6Nk_dHVeGeGGd7CX4VlxPEmurCMje251iYEe4ALQ81xn7SF8RyksDazc4vPnM0a701TTM3I_rfv58k4zVyXXffo_mwR72RE0w5kPSetdJkr4YmaEXpVcaejNv1OagUieJbgt5Q9UazsbxJ984BRMWRRP-eNSld4d69V-eiTYXKJdVyMhk1IWAB_534TD2Vaagkk-bcgem_6yZ6O_e9G6UlmCmT8sOt3PKQE2h-jM5ntw-uSplLyzXSQQlCIzdtwaXF2TASCoU9LgKoqeADmG5gfS-t7oEwyuWUSv1oW-Gk0OhrTwikcW0MCaY6Ui6n7ytncvPNhLexiVXxTnUwLHLmrazK0FVNdbySsCmI9WZiOyBYzMNthzPb6mPiXpCKi-sNx5RBg5nmR8s0m6-EOqhxheX_XN4aDWTnwtSAM7Ui7BVuOI7uNUgldzqH9ljLCjf6gOOPcqaM3Z9bAlcQTmcMC94i6njLI5XMVAUa5RPjV11OVqiNUKG61jO_TNPq62SYFau7rnY2kj9flEJxbQHaCvlewsGmSSzornuHM7YFVilz3u-9xfdgqgL2jSGc_RVKbhGFfbpW3xu8aE-zY__G2dqQR9Q5pBDWcZIivNoZm35ir2GLbVVWGtHoBT7NkwsOPQien7gvdFDQW0fRDlJJFj7Nc8KkqapJqmzf3NDMYZhQJXAx3krOn1plSxdKlPKL4ChOMzIPQk63wBAa5_l3dOJIM0WrQxWxJC8i_oKBZWxQsyNemXx_YeQadrL63PpKK5K78yDwUEL6TzMrf-MN" } ], "cookies": [], "headers": { "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "DYNAMIC", - "cf-ray": "8659079d189c10c4-ORD", + "cf-ray": "8692b6854b2089f4-ORD", "content-encoding": "br", "content-security-policy": "default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com", "content-type": "text/html", - "date": "Sun, 17 Mar 2024 00:57:35 GMT", + "date": "Sun, 24 Mar 2024 00:58:28 GMT", "feature-policy": "geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'self';accelerometer 'self';fullscreen 'self';payment 'none';", "last-modified": "Wed, 06 Mar 2024 01:29:22 GMT", "nel": "{\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}", "referrer-policy": "same-origin", - "report-to": "{\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WxlrEJXyPNZXAGhgWKkP3uR%2BlfvDc3i1Vjm5DMlkRG%2BP63WQl10He5%2Bjzv0N2iY%2FeI9HMVUiEZ9MWOgAsU0gzK6GLoAe2sJUBGZoVEhSPocLLvtAXSNj%2FDD3JCZVpSOjs2C6\"}],\"group\":\"cf-nel\",\"max_age\":604800}", + "report-to": "{\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qzZNx8saGtl6oFX1BTf9FI4RLuxP85ownqpruJexl6DuD6C1dE%2Br0kAWKwb4b%2B%2F2m%2FcxdwmJRXJj7a93o%2ByuYPB0SAA73QmS6K8L0vJJRRpUuC0Lv8Fjp1xNSASEKJnNV2jr\"}],\"group\":\"cf-nel\",\"max_age\":604800}", "server": "cloudflare", "strict-transport-security": "max-age=15552000; includeSubDomains; preload", "x-content-type-options": "nosniff", @@ -190,7 +190,7 @@ }, { "hostname": "www.googletagmanager.com", - "ip": "172.217.4.200", + "ip": "142.250.190.104", "geoip": { "continent": { "code": "NA", @@ -244,14 +244,8 @@ }, { "hostname": "pagead2.googlesyndication.com", - "ip": "142.251.32.2", + "ip": "142.250.191.98", "geoip": { - "city": { - "geoname_id": 5133273, - "names": { - "en": "Queens" - } - }, "continent": { "code": "NA", "geoname_id": 6255149, @@ -281,14 +275,10 @@ } }, "location": { - "accuracy_radius": 500, - "latitude": 40.66, - "longitude": -73.839, - "metro_code": 501, - "time_zone": "America/New_York" - }, - "postal": { - "code": "11414" + "accuracy_radius": 1000, + "latitude": 37.751, + "longitude": -97.822, + "time_zone": "America/Chicago" }, "registered_country": { "geoname_id": 6252001, @@ -303,28 +293,12 @@ "ru": "США", "zh-CN": "美国" } - }, - "subdivisions": [ - { - "geoname_id": 5128638, - "iso_code": "NY", - "names": { - "de": "New York", - "en": "New York", - "es": "Nueva York", - "fr": "New York", - "ja": "ニューヨーク州", - "pt-BR": "Nova Iorque", - "ru": "Нью-Йорк", - "zh-CN": "纽约州" - } - } - ] + } } }, { "hostname": "analytics.google.com", - "ip": "216.239.34.181", + "ip": "172.217.1.110", "geoip": { "continent": { "code": "NA", @@ -356,9 +330,9 @@ }, "location": { "accuracy_radius": 1000, - "latitude": 34.0544, - "longitude": -118.244, - "time_zone": "America/Los_Angeles" + "latitude": 37.751, + "longitude": -97.822, + "time_zone": "America/Chicago" }, "registered_country": { "geoname_id": 6252001, @@ -373,28 +347,12 @@ "ru": "США", "zh-CN": "美国" } - }, - "subdivisions": [ - { - "geoname_id": 5332921, - "iso_code": "CA", - "names": { - "de": "Kalifornien", - "en": "California", - "es": "California", - "fr": "Californie", - "ja": "カリフォルニア州", - "pt-BR": "Califórnia", - "ru": "Калифорния", - "zh-CN": "加州" - } - } - ] + } } }, { "hostname": "stats.g.doubleclick.net", - "ip": "142.251.176.155", + "ip": "142.251.165.156", "geoip": { "city": { "geoname_id": 5116931, @@ -474,7 +432,7 @@ }, { "hostname": "googleads.g.doubleclick.net", - "ip": "142.250.191.162", + "ip": "142.250.191.226", "geoip": { "continent": { "code": "NA", @@ -528,7 +486,7 @@ }, { "hostname": "tpc.googlesyndication.com", - "ip": "142.250.191.225", + "ip": "142.250.191.193", "geoip": { "continent": { "code": "NA", @@ -582,7 +540,7 @@ }, { "hostname": "www.google.com", - "ip": "172.217.2.36", + "ip": "142.250.191.228", "geoip": { "continent": { "code": "NA", diff --git a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/zap.html b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/zap.html index 5870438a..e1230274 100644 --- a/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/zap.html +++ b/results/aHR0cHM6Ly9kZWNlcy5tYXRjaGlkLmlv/zap.html @@ -127,7 +127,7 @@

- Generated on Sun, 17 Mar 2024 00:57:04 + Generated on Sun, 24 Mar 2024 00:57:54

@@ -206,22 +206,22 @@

Alerts

CSP: Wildcard Directive Medium - 3 + 2 CSP: script-src unsafe-eval Medium - 3 + 2 CSP: script-src unsafe-inline Medium - 3 + 2 CSP: style-src unsafe-inline Medium - 3 + 2 Sub Resource Integrity Attribute Missing @@ -246,7 +246,7 @@

Alerts

Base64 Disclosure Informational - 12 + 10 Information Disclosure - Suspicious Comments @@ -261,12 +261,12 @@

Alerts

Re-examine Cache-control Directives Informational - 4 + 5 Retrieved from Cache Informational - 7 + 1 Sec-Fetch-Dest Header is Missing @@ -349,40 +349,6 @@

Alert Detail

The following directives either allow wildcard sources (or ancestors), are not defined, or are overly broadly defined: style-src, frame-ancestors, form-action -The directive(s): frame-ancestors, form-action are among the directives that do not fallback to default-src, missing/excluding them is the same as allowing anything. - - - - URL - https://deces.matchid.io/ - - - Method - GET - - - Parameter - Content-Security-Policy - - - Attack - - - - Evidence - default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com - - - Other Info - The following directives either allow wildcard sources (or ancestors), are not defined, or are overly broadly defined: -style-src, frame-ancestors, form-action - The directive(s): frame-ancestors, form-action are among the directives that do not fallback to default-src, missing/excluding them is the same as allowing anything. @@ -422,7 +388,7 @@

Alert Detail

Instances - 3 + 2 Solution @@ -516,37 +482,6 @@

Alert Detail

script-src includes unsafe-eval. - - URL - https://deces.matchid.io/ - - - Method - GET - - - Parameter - Content-Security-Policy - - - Attack - - - - Evidence - default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com - - - Other Info - script-src includes unsafe-eval. - - URL @@ -580,7 +515,7 @@

Alert Detail

Instances - 3 + 2 Solution @@ -674,37 +609,6 @@

Alert Detail

script-src includes unsafe-inline. - - URL - https://deces.matchid.io/ - - - Method - GET - - - Parameter - Content-Security-Policy - - - Attack - - - - Evidence - default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com - - - Other Info - script-src includes unsafe-inline. - - URL @@ -738,7 +642,7 @@

Alert Detail

Instances - 3 + 2 Solution @@ -832,37 +736,6 @@

Alert Detail

style-src includes unsafe-inline. - - URL - https://deces.matchid.io/ - - - Method - GET - - - Parameter - Content-Security-Policy - - - Attack - - - - Evidence - default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com - - - Other Info - style-src includes unsafe-inline. - - URL @@ -896,7 +769,7 @@

Alert Detail

Instances - 3 + 2 Solution @@ -1488,43 +1361,12 @@

Alert Detail

Evidence - 2BUSRoYYMPWjsDQLsFXUpmJeYlbOlbF - - - Other Info - �F�0���4 �UԦb^bVΕ� - - - - URL - https://deces.matchid.io - - - Method - GET - - - Parameter - - - - Attack - - - - Evidence - 2BkQiSRuvMruOga3WSxZtMwwEibnt9G3K2 + lswP9P2Ej8XUR1Dyj13dkuVJRJERMtmT5bw Other Info - ��$n���:�Y,Y��0&�ѷ+ + ��������GP�]ݒ�ID�2ٓ� @@ -1550,12 +1392,12 @@

Alert Detail

Evidence - 2Bo85E0WeajuPYFCJsLJ6PDmv6veC1XTTm0vQl0LZ8B0P26ND8CjcbYvBnQVeLy5lDUynr + 2BLNKXgVvrhfQMetYwvc0tmRIEsfqvdYWFN9bLPk5C66MHXL20yzSVoorCS72NkmI8fRVZULBHYdKraMiJHQb7RJdcVa1deX41seitXdtzgaCQxEWvfnMJx9EpX Other Info - �<�My��=�B&����濫� U�Nm/B] g�t?n���q�/tx���52� + ��)x��_@ǭc ��ّ K��XXS}l���.�0u��L�IZ(�$���&#��U� v*�����o�Iu�Z�ח�[��ݷ8 DZ��0�}� @@ -1581,13 +1423,12 @@

Alert Detail

Evidence - 2BM1ZVlDr2k4F9W0oudSa2oIuLcXxqyxq57CCz0FGrRxt1KvwEoKVRd5GXlJU9rZaIMRwSjf2PTOHdwJ13z8UieBPb0iRlzB2m9dMATVeUV1 + 2FUPDVXIIoMNHjpu2JjjSd82Na1pSGp312xGJNNxo5FDqJ35AMk31jIbQCik5SIAwh5jgRV7f14X Other Info - �5eYC�i8մ��Rkj��Ƭ���� =�q�R��J -UyyIS��h��(����� �|�R'�=�"F\��o]0�yEu + �U U�"� :nؘ�I�65�iHjw�lF$�q��C����7�2@(��"�c�{^ @@ -1613,12 +1454,12 @@

Alert Detail

Evidence - 2F9TcHtmECgUwBqqyJm07QicD6R5lJ35VFy2uvqq90mrzXmjUaQgi0FbvwKrhabQsM3K + 2Bcgy92HmKl09fev7o8dMqU1ecO4WleDu2e Other Info - �_Sp{f(��ș����y���T\�����I��y�Q� �A[����а�� + � �݇��t����2�5yøZW��g @@ -1644,12 +1485,12 @@

Alert Detail

Evidence - BJf5QdJwusNdo6kBFRI3Q0XCjvG9XHaMTo3P7E8iV9eT9GP2XLkwvO + 2BdtKFH5zxAjqRiUUQPxwaWVxHbAGqzGC6ZKz7m0BmyNoGNg13e Other Info - ��A�p��]��7CEŽ�\v�N���O"Wד�c�\�0� + �m(Q��#��Q�����v��� �JϹ�l��c`�w @@ -1675,12 +1516,12 @@

Alert Detail

Evidence - 2BBwby0ZrZDCYGeUMC0RrXRPy3bqGQbNf7pz + 2FxttF2cQNYegDPsYWEdXn9vwDbbhcwCAYYhzkgX Other Info - �po-���`g�0-�tO�v���s + �\m�]�@��3�aa^o�6ۅ��!�H @@ -1706,12 +1547,12 @@

Alert Detail

Evidence - 2FC0JShVLXYqm8Qi8Unm5lkMmD4eUhC2x73raI8JJrZJ + 2FuqiBO0NV5V9CqImmvq2ukVWPea5dnO1zwbf2lQFB4f2eOZfJg1zjwoWYTvbs1Ubxu Other Info - �P�%(U-v*��"�I��Y �>R�ǽ�h� &�I + �[���5^U�*��k���X������<iP��|�5�<(Y��n�To @@ -1737,12 +1578,12 @@

Alert Detail

Evidence - 2B9T4ZzohszDpFbgZR8s1VNrwjvyDWY1 + 2BHw375DOaU47cUgIhh2sf1kQOSq87TSWZJtUOrYSvcTo4vSuH Other Info - �S���äV�e,�Sk�;� f5 + ��߾C9�8�� "v��d@���Y�mP��J���Ҹ @@ -1768,43 +1609,13 @@

Alert Detail

Evidence - 2BILW4FolkJMWdqD6iqXuIOTnWUcU77HTZSh1sxOkU0W - - - Other Info - � [�h�BLYڃ�*�����eS��M����N�M - - - - URL - https://deces.matchid.io/manifest.json - - - Method - GET - - - Parameter - - - - Attack - - - - Evidence - mJWTywfi26twQMcdMdYdJvapVLebgY + ZwruYTh5Ek5WUbepBXaPS4Drmeej3FIIgglKBn4vloWT1DyujXZuAnj Other Info - �����۫p@�1�&��T��� + g +�a8yNVQ��v�K����R� J~/����<��vnx @@ -1830,17 +1641,17 @@

Alert Detail

Evidence - 2Bg7Gy1g1BFhPMolG0OgC9Y0kSZzpeBH6bJQg5L + 15T0wU7n2toEymJ46TJc4pPGRYwxcCQRhXUGtbAUG24jWau0NhmFykhJkOWCJ2qboxZwdEWk9UytGlZbFbgY Other Info - �;-`�a<�%C� �4�&s��G�P�� + ה��N����bx�2\��E�1p$�u��n#Y��6��HI��'j��ptE��L�V[� Instances - 12 + 10 Solution @@ -1995,7 +1806,7 @@

Alert Detail

Evidence - <script defer src="/js/matchid.min.js" type="3e42580513e13eb4c7e96254-text/javascript"></script> + <script defer src="/js/matchid.min.js" type="785542294bdcd3b4644f8a30-text/javascript"></script> Alert Detail Evidence - <script defer src="/js/matchid.min.js" type="fb60056563dc27747d8e1062-text/javascript"></script> + <script defer src="/js/matchid.min.js" type="c2a068076550f683b37c1183-text/javascript"></script> Alert Detail Evidence - <script defer src="/js/matchid.min.js" type="8b9e819b3f076da0fb1f05de-text/javascript"></script> + <script defer src="/js/matchid.min.js" type="e50f44c200e6be6c7bda1dd6-text/javascript"></script> Alert Detail Evidence - <script defer src="/js/matchid.min.js" type="4a359324d280e793de99f73e-text/javascript"></script> + <script defer src="/js/matchid.min.js" type="6e8cf1975b4d0aa4349c3c5d-text/javascript"></script> Alert Detail + + URL + https://deces.matchid.io/robots.txt + + + Method + GET + + + Parameter + cache-control + + + Attack + + + + Evidence + max-age=86400 + + + Other Info + + + URL @@ -2271,7 +2113,7 @@

Alert Detail

Instances - 4 + 5 Solution @@ -2351,193 +2193,7 @@

Alert Detail

Evidence - Age: 1321 - - - Other Info - The presence of the 'Age' header indicates that that a HTTP/1.1 compliant caching server is in use. - - - - URL - https://deces.matchid.io/css/global.css - - - Method - GET - - - Parameter - - - - Attack - - - - Evidence - Age: 1322 - - - Other Info - The presence of the 'Age' header indicates that that a HTTP/1.1 compliant caching server is in use. - - - - URL - https://deces.matchid.io/css/matchid.min.css - - - Method - GET - - - Parameter - - - - Attack - - - - Evidence - Age: 139 - - - Other Info - The presence of the 'Age' header indicates that that a HTTP/1.1 compliant caching server is in use. - - - - URL - https://deces.matchid.io/favicon-apple.png - - - Method - GET - - - Parameter - - - - Attack - - - - Evidence - Age: 1324 - - - Other Info - The presence of the 'Age' header indicates that that a HTTP/1.1 compliant caching server is in use. - - - - URL - https://deces.matchid.io/favicon.svg - - - Method - GET - - - Parameter - - - - Attack - - - - Evidence - Age: 1323 - - - Other Info - The presence of the 'Age' header indicates that that a HTTP/1.1 compliant caching server is in use. - - - - URL - https://deces.matchid.io/js/matchid.min.js - - - Method - GET - - - Parameter - - - - Attack - - - - Evidence - Age: 139 - - - Other Info - The presence of the 'Age' header indicates that that a HTTP/1.1 compliant caching server is in use. - - - - URL - https://deces.matchid.io/robots.txt - - - Method - GET - - - Parameter - - - - Attack - - - - Evidence - Age: 140 + Age: 1113 Alert Detail Instances - 7 + 1 Solution @@ -2649,7 +2305,7 @@

Alert Detail

URL - https://deces.matchid.io/favicon.svg + https://deces.matchid.io/build/module/bundle.css Alert Detail URL - https://deces.matchid.io/favicon.svg + https://deces.matchid.io/build/module/bundle.css Alert Detail URL - https://deces.matchid.io/favicon.svg + https://deces.matchid.io/build/module/bundle.css Alert Detail URL - https://deces.matchid.io/favicon.svg + https://deces.matchid.io/build/module/bundle.css Ensure that your web server, application server, load balancer, etc. is properly configured to set the Content-Security-Policy header.

", "otherinfo": "

The following directives either allow wildcard sources (or ancestors), are not defined, or are overly broadly defined:

style-src, frame-ancestors, form-action

The directive(s): frame-ancestors, form-action are among the directives that do not fallback to default-src, missing/excluding them is the same as allowing anything.

", "reference": "

https://www.w3.org/TR/CSP/

https://caniuse.com/#search=content+security+policy

https://content-security-policy.com/

https://github.com/HtmlUnit/htmlunit-csp

https://developers.google.com/web/fundamentals/security/csp#policy_applies_to_a_wide_variety_of_resources

", @@ -70,14 +62,6 @@ "evidence": "default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com", "otherinfo": "script-src includes unsafe-eval." }, - { - "uri": "https://deces.matchid.io/", - "method": "GET", - "param": "Content-Security-Policy", - "attack": "", - "evidence": "default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com", - "otherinfo": "script-src includes unsafe-eval." - }, { "uri": "https://deces.matchid.io/sitemap.xml", "method": "GET", @@ -87,7 +71,7 @@ "otherinfo": "script-src includes unsafe-eval." } ], - "count": "3", + "count": "2", "solution": "

Ensure that your web server, application server, load balancer, etc. is properly configured to set the Content-Security-Policy header.

", "otherinfo": "

script-src includes unsafe-eval.

", "reference": "

https://www.w3.org/TR/CSP/

https://caniuse.com/#search=content+security+policy

https://content-security-policy.com/

https://github.com/HtmlUnit/htmlunit-csp

https://developers.google.com/web/fundamentals/security/csp#policy_applies_to_a_wide_variety_of_resources

", @@ -113,14 +97,6 @@ "evidence": "default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com", "otherinfo": "script-src includes unsafe-inline." }, - { - "uri": "https://deces.matchid.io/", - "method": "GET", - "param": "Content-Security-Policy", - "attack": "", - "evidence": "default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com", - "otherinfo": "script-src includes unsafe-inline." - }, { "uri": "https://deces.matchid.io/sitemap.xml", "method": "GET", @@ -130,7 +106,7 @@ "otherinfo": "script-src includes unsafe-inline." } ], - "count": "3", + "count": "2", "solution": "

Ensure that your web server, application server, load balancer, etc. is properly configured to set the Content-Security-Policy header.

", "otherinfo": "

script-src includes unsafe-inline.

", "reference": "

https://www.w3.org/TR/CSP/

https://caniuse.com/#search=content+security+policy

https://content-security-policy.com/

https://github.com/HtmlUnit/htmlunit-csp

https://developers.google.com/web/fundamentals/security/csp#policy_applies_to_a_wide_variety_of_resources

", @@ -156,14 +132,6 @@ "evidence": "default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com", "otherinfo": "style-src includes unsafe-inline." }, - { - "uri": "https://deces.matchid.io/", - "method": "GET", - "param": "Content-Security-Policy", - "attack": "", - "evidence": "default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com ajax.cloudflare.com www.googletagmanager.com fundingchoicesmessages.google.com www.google.com www.google.ca analytics.google.com www.google-analytics.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.fr;style-src https: 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' matchid.io a.basemaps.cartocdn.com b.basemaps.cartocdn.com c.basemaps.cartocdn.com upload.wikimedia.org pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net www.google.fr;connect-src 'self' www.data.gouv.fr cloudflareinsights.com www.google-analytics.com analytics.google.com csi.gstatic.com region1.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com; frame-src 'self' matchid.io www.google.com google.com googleads.g.doubleclick.net tpc.googlesyndication.com", - "otherinfo": "style-src includes unsafe-inline." - }, { "uri": "https://deces.matchid.io/sitemap.xml", "method": "GET", @@ -173,7 +141,7 @@ "otherinfo": "style-src includes unsafe-inline." } ], - "count": "3", + "count": "2", "solution": "

Ensure that your web server, application server, load balancer, etc. is properly configured to set the Content-Security-Policy header.

", "otherinfo": "

style-src includes unsafe-inline.

", "reference": "

https://www.w3.org/TR/CSP/

https://caniuse.com/#search=content+security+policy

https://content-security-policy.com/

https://github.com/HtmlUnit/htmlunit-csp

https://developers.google.com/web/fundamentals/security/csp#policy_applies_to_a_wide_variety_of_resources

", @@ -206,7 +174,7 @@ "reference": "

https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity

", "cweid": "345", "wascid": "15", - "sourceid": "28" + "sourceid": "32" }, { "pluginid": "10020", @@ -327,7 +295,7 @@ "reference": "

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy

https://developer.chrome.com/blog/feature-policy/

https://scotthelme.co.uk/a-new-security-header-feature-policy/

https://w3c.github.io/webappsec-feature-policy/

https://www.smashingmagazine.com/2018/12/feature-policy/

", "cweid": "693", "wascid": "15", - "sourceid": "23" + "sourceid": "21" }, { "pluginid": "10094", @@ -344,105 +312,89 @@ "method": "GET", "param": "", "attack": "", - "evidence": "2BUSRoYYMPWjsDQLsFXUpmJeYlbOlbF", - "otherinfo": "\uFFFD\\x0015\\x0012F\uFFFD\\x00180\uFFFD\uFFFD\uFFFD4\\x000b\uFFFDU\u0526b^bV\u0395\uFFFD" - }, - { - "uri": "https://deces.matchid.io", - "method": "GET", - "param": "", - "attack": "", - "evidence": "2BkQiSRuvMruOga3WSxZtMwwEibnt9G3K2", - "otherinfo": "\uFFFD\\x0019\\x0010\uFFFD$n\uFFFD\uFFFD\uFFFD:\\x0006\uFFFDY,Y\uFFFD\uFFFD0\\x0012&\uFFFD\u0477+" + "evidence": "lswP9P2Ej8XUR1Dyj13dkuVJRJERMtmT5bw", + "otherinfo": "\uFFFD\uFFFD\\x000f\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFDGP\uFFFD]\u0752\uFFFDID\uFFFD\\x00112\u0653\uFFFD" }, { "uri": "https://deces.matchid.io/", "method": "GET", "param": "", "attack": "", - "evidence": "2Bo85E0WeajuPYFCJsLJ6PDmv6veC1XTTm0vQl0LZ8B0P26ND8CjcbYvBnQVeLy5lDUynr", - "otherinfo": "\uFFFD\\x001a<\uFFFDM\\x0016y\uFFFD\uFFFD=\uFFFDB&\uFFFD\uFFFD\uFFFD\uFFFD\u6FEB\uFFFD\\x000bU\uFFFDNm/B]\\x000bg\uFFFDt?n\uFFFD\\x000f\uFFFD\uFFFDq\uFFFD/\\x0006t\\x0015x\uFFFD\uFFFD\uFFFD52\uFFFD" + "evidence": "2BLNKXgVvrhfQMetYwvc0tmRIEsfqvdYWFN9bLPk5C66MHXL20yzSVoorCS72NkmI8fRVZULBHYdKraMiJHQb7RJdcVa1deX41seitXdtzgaCQxEWvfnMJx9EpX", + "otherinfo": "\uFFFD\\x0012\uFFFD)x\\x0015\uFFFD\uFFFD_@\u01EDc\\x000b\uFFFD\uFFFD\u0651 K\\x001f\uFFFD\uFFFDXXS}l\uFFFD\uFFFD\uFFFD.\uFFFD0u\uFFFD\uFFFDL\uFFFDIZ(\uFFFD$\uFFFD\uFFFD\uFFFD&#\uFFFD\uFFFDU\uFFFD\\x000b\\x0004v\\x001d*\uFFFD\uFFFD\uFFFD\uFFFD\uFFFDo\uFFFDIu\uFFFDZ\uFFFD\u05D7\uFFFD[\\x001e\uFFFD\uFFFD\u07778\\x001a\t\\x000cDZ\uFFFD\uFFFD0\uFFFD}\\x0012\uFFFD" }, { "uri": "https://deces.matchid.io/build/module/bundle.css", "method": "GET", "param": "", "attack": "", - "evidence": "2BM1ZVlDr2k4F9W0oudSa2oIuLcXxqyxq57CCz0FGrRxt1KvwEoKVRd5GXlJU9rZaIMRwSjf2PTOHdwJ13z8UieBPb0iRlzB2m9dMATVeUV1", - "otherinfo": "\uFFFD\\x00135eYC\uFFFDi8\\x0017\u0574\uFFFD\uFFFDRkj\\x0008\uFFFD\uFFFD\\x0017\u01AC\uFFFD\uFFFD\uFFFD\uFFFD\\x000b=\\x0005\\x001a\uFFFDq\uFFFDR\uFFFD\uFFFDJ\nU\\x0017y\\x0019yIS\uFFFD\uFFFDh\uFFFD\\x0011\uFFFD(\uFFFD\uFFFD\uFFFD\uFFFD\\x001d\uFFFD\t\uFFFD|\uFFFDR'\uFFFD=\uFFFD\"F\\\uFFFD\uFFFDo]0\\x0004\uFFFDyEu" + "evidence": "2FUPDVXIIoMNHjpu2JjjSd82Na1pSGp312xGJNNxo5FDqJ35AMk31jIbQCik5SIAwh5jgRV7f14X", + "otherinfo": "\uFFFDU\\x000f\rU\uFFFD\"\uFFFD\r\\x001e:n\u0618\uFFFDI\uFFFD65\uFFFDiHjw\uFFFDlF$\uFFFDq\uFFFD\uFFFDC\uFFFD\uFFFD\uFFFD\\x0000\uFFFD7\uFFFD2\\x001b@(\uFFFD\uFFFD\"\\x0000\uFFFD\\x001ec\uFFFD\\x0015{^\\x0017" }, { "uri": "https://deces.matchid.io/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js", "method": "GET", "param": "", "attack": "", - "evidence": "2F9TcHtmECgUwBqqyJm07QicD6R5lJ35VFy2uvqq90mrzXmjUaQgi0FbvwKrhabQsM3K", - "otherinfo": "\uFFFD_Sp{f\\x0010(\\x0014\uFFFD\\x001a\uFFFD\u0219\uFFFD\uFFFD\\x0008\uFFFD\\x000f\uFFFDy\uFFFD\uFFFD\uFFFDT\\\uFFFD\uFFFD\uFFFD\uFFFD\uFFFDI\uFFFD\uFFFDy\uFFFDQ\uFFFD \uFFFDA[\uFFFD\\x0002\uFFFD\uFFFD\uFFFD\u0430\uFFFD\uFFFD" + "evidence": "2Bcgy92HmKl09fev7o8dMqU1ecO4WleDu2e", + "otherinfo": "\uFFFD\\x0017 \uFFFD\u0747\uFFFD\uFFFDt\uFFFD\uFFFD\uFFFD\uFFFD\\x001d2\uFFFD5y\u00F8ZW\uFFFD\uFFFDg" }, { "uri": "https://deces.matchid.io/css/global.css", "method": "GET", "param": "", "attack": "", - "evidence": "BJf5QdJwusNdo6kBFRI3Q0XCjvG9XHaMTo3P7E8iV9eT9GP2XLkwvO", - "otherinfo": "\\x0004\uFFFD\uFFFDA\uFFFDp\uFFFD\uFFFD]\uFFFD\uFFFD\\x0001\\x0015\\x00127CE\u008E\uFFFD\\v\uFFFDN\uFFFD\uFFFD\uFFFDO\"W\u05D3\uFFFDc\uFFFD\\\uFFFD0\uFFFD" + "evidence": "2BdtKFH5zxAjqRiUUQPxwaWVxHbAGqzGC6ZKz7m0BmyNoGNg13e", + "otherinfo": "\uFFFD\\x0017m(Q\uFFFD\uFFFD\\x0010#\uFFFD\\x0018\uFFFDQ\\x0003\uFFFD\uFFFD\uFFFD\uFFFD\uFFFDv\uFFFD\\x001a\uFFFD\uFFFD\\x000b\uFFFDJ\u03F9\uFFFD\\x0006l\uFFFD\uFFFDc`\uFFFDw" }, { "uri": "https://deces.matchid.io/css/matchid.min.css", "method": "GET", "param": "", "attack": "", - "evidence": "2BBwby0ZrZDCYGeUMC0RrXRPy3bqGQbNf7pz", - "otherinfo": "\uFFFD\\x0010po-\\x0019\uFFFD\uFFFD\uFFFD`g\uFFFD0-\\x0011\uFFFDtO\uFFFDv\uFFFD\\x0019\\x0006\uFFFD\uFFFDs" + "evidence": "2FxttF2cQNYegDPsYWEdXn9vwDbbhcwCAYYhzkgX", + "otherinfo": "\uFFFD\\m\uFFFD]\uFFFD@\uFFFD\\x001e\uFFFD3\uFFFDaa\\x001d^o\uFFFD6\u06C5\uFFFD\\x0002\\x0001\uFFFD!\uFFFDH\\x0017" }, { "uri": "https://deces.matchid.io/favicon-apple.png", "method": "GET", "param": "", "attack": "", - "evidence": "2FC0JShVLXYqm8Qi8Unm5lkMmD4eUhC2x73raI8JJrZJ", - "otherinfo": "\uFFFDP\uFFFD%(U-v*\uFFFD\uFFFD\"\uFFFDI\uFFFD\uFFFDY\\x000c\uFFFD>\\x001eR\\x0010\uFFFD\u01FD\uFFFDh\uFFFD\t&\uFFFDI" + "evidence": "2FuqiBO0NV5V9CqImmvq2ukVWPea5dnO1zwbf2lQFB4f2eOZfJg1zjwoWYTvbs1Ubxu", + "otherinfo": "\uFFFD[\uFFFD\uFFFD\\x0013\uFFFD5^U\uFFFD*\uFFFD\uFFFDk\uFFFD\uFFFD\uFFFD\\x0015X\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD<\\x001biP\\x0014\\x001e\\x001f\uFFFD\uFFFD|\uFFFD5\uFFFD<(Y\uFFFD\uFFFDn\uFFFDTo\\x001b" }, { "uri": "https://deces.matchid.io/favicon.svg", "method": "GET", "param": "", "attack": "", - "evidence": "2B9T4ZzohszDpFbgZR8s1VNrwjvyDWY1", - "otherinfo": "\uFFFD\\x001fS\uFFFD\uFFFD\uFFFD\u00E4V\uFFFDe\\x001f,\uFFFDSk\uFFFD;\uFFFD\rf5" + "evidence": "2BHw375DOaU47cUgIhh2sf1kQOSq87TSWZJtUOrYSvcTo4vSuH", + "otherinfo": "\uFFFD\\x0011\uFFFD\u07FEC9\uFFFD8\uFFFD\uFFFD \"\\x0018v\uFFFD\uFFFDd@\uFFFD\uFFFD\uFFFDY\uFFFDmP\uFFFD\uFFFDJ\uFFFD\\x0013\uFFFD\uFFFD\u04B8" }, { "uri": "https://deces.matchid.io/js/matchid.min.js", "method": "GET", "param": "", "attack": "", - "evidence": "2BILW4FolkJMWdqD6iqXuIOTnWUcU77HTZSh1sxOkU0W", - "otherinfo": "\uFFFD\\x0012\\x000b[\uFFFDh\uFFFDBLY\u0683\uFFFD*\uFFFD\uFFFD\uFFFD\uFFFD\uFFFDe\\x001cS\uFFFD\uFFFDM\uFFFD\uFFFD\uFFFD\uFFFDN\uFFFDM\\x0016" - }, - { - "uri": "https://deces.matchid.io/manifest.json", - "method": "GET", - "param": "", - "attack": "", - "evidence": "mJWTywfi26twQMcdMdYdJvapVLebgY", - "otherinfo": "\uFFFD\uFFFD\uFFFD\uFFFD\\x0007\uFFFD\u06EBp@\uFFFD\\x001d1\uFFFD\\x001d&\uFFFD\uFFFDT\uFFFD\uFFFD\uFFFD" + "evidence": "ZwruYTh5Ek5WUbepBXaPS4Drmeej3FIIgglKBn4vloWT1DyujXZuAnj", + "otherinfo": "g\n\uFFFDa8y\\x0012NVQ\uFFFD\uFFFD\\x0005v\uFFFDK\uFFFD\uFFFD\uFFFD\uFFFDR\\x0008\uFFFD\tJ\\x0006~/\uFFFD\uFFFD\uFFFD\uFFFD<\uFFFD\uFFFDvn\\x0002x" }, { "uri": "https://deces.matchid.io/sitemap.xml", "method": "GET", "param": "", "attack": "", - "evidence": "2Bg7Gy1g1BFhPMolG0OgC9Y0kSZzpeBH6bJQg5L", - "otherinfo": "\uFFFD\\x0018;\\x001b-`\uFFFD\\x0011a<\uFFFD%\\x001bC\uFFFD\\x000b\uFFFD4\uFFFD&s\uFFFD\uFFFDG\uFFFDP\uFFFD\uFFFD" + "evidence": "15T0wU7n2toEymJ46TJc4pPGRYwxcCQRhXUGtbAUG24jWau0NhmFykhJkOWCJ2qboxZwdEWk9UytGlZbFbgY", + "otherinfo": "\u05D4\uFFFD\uFFFDN\uFFFD\uFFFD\uFFFD\\x0004\uFFFDbx\uFFFD2\\\uFFFD\uFFFDE\uFFFD1p$\\x0011\uFFFDu\\x0006\uFFFD\uFFFD\\x0014\\x001bn#Y\uFFFD\uFFFD6\\x0019\uFFFD\uFFFDHI\uFFFD\uFFFD'j\uFFFD\uFFFD\\x0016ptE\uFFFD\uFFFDL\uFFFD\\x001aV[\\x0015\uFFFD\\x0018" } ], - "count": "12", + "count": "10", "solution": "

Manually confirm that the Base64 data does not leak sensitive information, and that the data cannot be aggregated/used to exploit other vulnerabilities.

", - "otherinfo": "

\uFFFD\\x0015\\x0012F\uFFFD\\x00180\uFFFD\uFFFD\uFFFD4\\x000b\uFFFDU\u0526b^bV\u0395\uFFFD

", + "otherinfo": "

\uFFFD\uFFFD\\x000f\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFDGP\uFFFD]\u0752\uFFFDID\uFFFD\\x00112\u0653\uFFFD

", "reference": "

https://projects.webappsec.org/w/page/13246936/Information%20Leakage

", "cweid": "200", "wascid": "13", - "sourceid": "1" + "sourceid": "16" }, { "pluginid": "10027", @@ -469,7 +421,7 @@ "reference": "", "cweid": "200", "wascid": "13", - "sourceid": "23" + "sourceid": "21" }, { "pluginid": "10109", @@ -486,7 +438,7 @@ "method": "GET", "param": "", "attack": "", - "evidence": "", + "evidence": "", "otherinfo": "No links have been found while there are scripts, which is an indication that this is a modern web application." }, { @@ -494,7 +446,7 @@ "method": "GET", "param": "", "attack": "", - "evidence": "", + "evidence": "", "otherinfo": "No links have been found while there are scripts, which is an indication that this is a modern web application." }, { @@ -502,7 +454,7 @@ "method": "GET", "param": "", "attack": "", - "evidence": "", + "evidence": "", "otherinfo": "No links have been found while there are scripts, which is an indication that this is a modern web application." }, { @@ -510,7 +462,7 @@ "method": "GET", "param": "", "attack": "", - "evidence": "", + "evidence": "", "otherinfo": "No links have been found while there are scripts, which is an indication that this is a modern web application." } ], @@ -520,7 +472,7 @@ "reference": "", "cweid": "-1", "wascid": "-1", - "sourceid": "8" + "sourceid": "1" }, { "pluginid": "10015", @@ -556,6 +508,14 @@ "evidence": "", "otherinfo": "" }, + { + "uri": "https://deces.matchid.io/robots.txt", + "method": "GET", + "param": "cache-control", + "attack": "", + "evidence": "max-age=86400", + "otherinfo": "" + }, { "uri": "https://deces.matchid.io/sitemap.xml", "method": "GET", @@ -565,7 +525,7 @@ "otherinfo": "" } ], - "count": "4", + "count": "5", "solution": "

For secure content, ensure the cache-control HTTP header is set with \"no-cache, no-store, must-revalidate\". If an asset should be cached consider setting the directives \"public, max-age, immutable\".

", "otherinfo": "", "reference": "

https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html#web-content-caching

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control

https://grayduck.mn/2021/09/13/cache-control-recommendations/

", @@ -588,65 +548,17 @@ "method": "GET", "param": "", "attack": "", - "evidence": "Age: 1321", - "otherinfo": "The presence of the 'Age' header indicates that that a HTTP/1.1 compliant caching server is in use." - }, - { - "uri": "https://deces.matchid.io/css/global.css", - "method": "GET", - "param": "", - "attack": "", - "evidence": "Age: 1322", - "otherinfo": "The presence of the 'Age' header indicates that that a HTTP/1.1 compliant caching server is in use." - }, - { - "uri": "https://deces.matchid.io/css/matchid.min.css", - "method": "GET", - "param": "", - "attack": "", - "evidence": "Age: 139", - "otherinfo": "The presence of the 'Age' header indicates that that a HTTP/1.1 compliant caching server is in use." - }, - { - "uri": "https://deces.matchid.io/favicon-apple.png", - "method": "GET", - "param": "", - "attack": "", - "evidence": "Age: 1324", - "otherinfo": "The presence of the 'Age' header indicates that that a HTTP/1.1 compliant caching server is in use." - }, - { - "uri": "https://deces.matchid.io/favicon.svg", - "method": "GET", - "param": "", - "attack": "", - "evidence": "Age: 1323", - "otherinfo": "The presence of the 'Age' header indicates that that a HTTP/1.1 compliant caching server is in use." - }, - { - "uri": "https://deces.matchid.io/js/matchid.min.js", - "method": "GET", - "param": "", - "attack": "", - "evidence": "Age: 139", - "otherinfo": "The presence of the 'Age' header indicates that that a HTTP/1.1 compliant caching server is in use." - }, - { - "uri": "https://deces.matchid.io/robots.txt", - "method": "GET", - "param": "", - "attack": "", - "evidence": "Age: 140", + "evidence": "Age: 1113", "otherinfo": "The presence of the 'Age' header indicates that that a HTTP/1.1 compliant caching server is in use." } ], - "count": "7", + "count": "1", "solution": "

Validate that the response does not contain sensitive, personal or user-specific information. If it does, consider the use of the following HTTP response headers, to limit, or prevent the content being stored and retrieved from the cache by another user:

Cache-Control: no-cache, no-store, must-revalidate, private

Pragma: no-cache

Expires: 0

This configuration directs both HTTP 1.0 and HTTP 1.1 compliant caching servers to not store the response, and to not retrieve the response (without validation) from the cache, in response to a similar request.

", "otherinfo": "

The presence of the 'Age' header indicates that that a HTTP/1.1 compliant caching server is in use.

", "reference": "

https://tools.ietf.org/html/rfc7234

https://tools.ietf.org/html/rfc7231

https://www.rfc-editor.org/rfc/rfc9110.html

", "cweid": "-1", "wascid": "-1", - "sourceid": "30" + "sourceid": "18" }, { "pluginid": "90005", @@ -667,7 +579,7 @@ "otherinfo": "" }, { - "uri": "https://deces.matchid.io/favicon.svg", + "uri": "https://deces.matchid.io/build/module/bundle.css", "method": "GET", "param": "Sec-Fetch-Dest", "attack": "", @@ -710,7 +622,7 @@ "otherinfo": "" }, { - "uri": "https://deces.matchid.io/favicon.svg", + "uri": "https://deces.matchid.io/build/module/bundle.css", "method": "GET", "param": "Sec-Fetch-Mode", "attack": "", @@ -753,7 +665,7 @@ "otherinfo": "" }, { - "uri": "https://deces.matchid.io/favicon.svg", + "uri": "https://deces.matchid.io/build/module/bundle.css", "method": "GET", "param": "Sec-Fetch-Site", "attack": "", @@ -796,7 +708,7 @@ "otherinfo": "" }, { - "uri": "https://deces.matchid.io/favicon.svg", + "uri": "https://deces.matchid.io/build/module/bundle.css", "method": "GET", "param": "Sec-Fetch-User", "attack": "",