pourlascience.fr security report

Certificate, security headers, email authentication, DNS, registration, and exposed hosts — from public sources.

62risk

Elevated

Several issues worth triaging this week.

1Critical

0High

2Medium

1Low

2Info

Collected 11 hours ago24.1sfrom cache

Headers—

unavailable

Certificate Transparency5
DNS resolution4
Network ownership0
CDN / WAF detection0
Exposed ports & CVEs8
Registration
DNS posture3
Email authentication2
Certificate
Security headers
Archived URLs
Analysis6

noteCertificate inspection is unavailable in this runtime.
noteNetwork ownership lookup is unavailable in this runtime; ASN and org are omitted.
noteCDN/WAF detection is unavailable in this runtime.
noteSecurity headers did not complete (Too many redirects.https://pourlascience.fr/, https://www.pourlascience.fr/, https://sso.qiota.com/api/v1/authorize?redirect_uri=https%3A%2F%2Fwww.pourlascience.fr%2Flogin&error_uri=https%3A%2F%2Fwww.pourlascience.fr%2Fauth%2Ferror&response_type=code&client_id=5ffef4870fbb4&scope=email&uri_referer=http%3A%2F%2Fwww.pourlascience.fr&referer=hc5s8OrIRu, https://www.pourlascience.fr/auth/error?error=bad_credential&referer=hc5s8OrIRu&redirect_uri=https://www.pourlascience.fr/login&uri_referer=http://www.pourlascience.fr&scope=email&error_uri=https://www.pourlascience.fr/auth/error, http://www.pourlascience.fr/, https://www.pourlascience.fr/, https://sso.qiota.com/api/v1/authorize?redirect_uri=https%3A%2F%2Fwww.pourlascience.fr%2Flogin&error_uri=https%3A%2F%2Fwww.pourlascience.fr%2Fauth%2Ferror&response_type=code&client_id=5ffef4870fbb4&scope=email&uri_referer=http%3A%2F%2Fwww.pourlascience.fr&referer=hc5s8OrIRu, https://www.pourlascience.fr/auth/error?error=bad_credential&referer=hc5s8OrIRu&redirect_uri=https://www.pourlascience.fr/login&uri_referer=http://www.pourlascience.fr&scope=email&error_uri=https://www.pourlascience.fr/auth/error, http://www.pourlascience.fr/, https://www.pourlascience.fr/, https://sso.qiota.com/api/v1/authorize?redirect_uri=https%3A%2F%2Fwww.pourlascience.fr%2Flogin&error_uri=https%3A%2F%2Fwww.pourlascience.fr%2Fauth%2Ferror&response_type=code&client_id=5ffef4870fbb4&scope=email&uri_referer=http%3A%2F%2Fwww.pourlascience.fr&referer=hc5s8OrIRu, https://www.pourlascience.fr/auth/error?error=bad_credential&referer=hc5s8OrIRu&redirect_uri=https://www.pourlascience.fr/login&uri_referer=http://www.pourlascience.fr&scope=email&error_uri=https://www.pourlascience.fr/auth/error, http://www.pourlascience.fr/, https://www.pourlascience.fr/, https://sso.qiota.com/api/v1/authorize?redirect_uri=https%3A%2F%2Fwww.pourlascience.fr%2Flogin&error_uri=https%3A%2F%2Fwww.pourlascience.fr%2Fauth%2Ferror&response_type=code&client_id=5ffef4870fbb4&scope=email&uri_referer=http%3A%2F%2Fwww.pourlascience.fr&referer=hc5s8OrIRu, https://www.pourlascience.fr/auth/error?error=bad_credential&referer=hc5s8OrIRu&redirect_uri=https://www.pourlascience.fr/login&uri_referer=http://www.pourlascience.fr&scope=email&error_uri=https://www.pourlascience.fr/auth/error, http://www.pourlascience.fr/, https://www.pourlascience.fr/, https://sso.qiota.com/api/v1/authorize?redirect_uri=https%3A%2F%2Fwww.pourlascience.fr%2Flogin&error_uri=https%3A%2F%2Fwww.pourlascience.fr%2Fauth%2Ferror&response_type=code&client_id=5ffef4870fbb4&scope=email&uri_referer=http%3A%2F%2Fwww.pourlascience.fr&referer=hc5s8OrIRu, https://www.pourlascience.fr/auth/error?error=bad_credential&referer=hc5s8OrIRu&redirect_uri=https://www.pourlascience.fr/login&uri_referer=http://www.pourlascience.fr&scope=email&error_uri=https://www.pourlascience.fr/auth/error, http://www.pourlascience.fr/). Results below are partial.

Shodan matched these CVEs against the service banners it saw on 212.95.72.192 (pourlascience.fr), which advertise php 8.1.29. These are version-fingerprint matches, not confirmed exploits: a distribution may have back-ported the fix while leaving the banner unchanged. Severity reflects the volume of known issues associated with this host, not a CVSS score. CVE-2025-14180 CVE-2025-14178 CVE-2025-14177 CVE-2025-6491 CVE-2025-1861 CVE-2025-1736 CVE-2025-1735 CVE-2025-1734 CVE-2025-1220 CVE-2025-1219 CVE-2025-1217 CVE-2024-11236 CVE-2024-11234 CVE-2024-11233 CVE-2024-9026 ...and 7 more
What to do
Confirm the running versions on 212.95.72.192 and compare them against the current security release for each package before treating any single CVE as live.
CVE-2025-14180 ↗CVE-2025-14178 ↗CVE-2025-14177 ↗CVE-2025-6491 ↗CVE-2025-1861 ↗
asset: 212.95.72.192
212.95.72.192 (pourlascience.fr) reports php 8.1.29. Publishing precise versions lets anyone match the host against a CVE feed without probing it, which is how targets get shortlisted for mass exploitation after a new advisory lands.
What to do
Suppress version tokens in server banners (for example `ServerTokens Prod` in Apache) and keep the packages current.
asset: 212.95.72.192
FTP transmits credentials in cleartext.
What to do
Restrict 21/tcp to a VPN, bastion, or allow-listed source range.
asset: 212.95.72.192:21
Answers for this domain are not signed, so a resolver cannot tell a forged response from a real one.
What to do
Enable DNSSEC at your DNS host and publish the DS record at the registrar.
asset: pourlascience.fr
Mail to this domain can be downgraded to plaintext by an on-path attacker, because senders have no way to know TLS is required.
What to do
Publish an MTA-STS policy (a TXT record plus a small HTTPS-hosted file).
asset: pourlascience.fr
Any public certificate authority may issue certificates for this domain. CAA lets you name the ones allowed to.
What to do
Add a CAA record naming your CA, e.g. `0 issue "letsencrypt.org"`.
asset: pourlascience.fr

✓Receives mail via 1 server
pourlascience-fr.mail.protection.outlook.com
!SPFends in ~all
v=spf1 include:spf.protection.outlook.com include:spf.mandrillapp.com include:spf.sendinblue.com mx ~all
✓DMARCp=reject
v=DMARC1; p=reject; rua=mailto:dpls@pourlascience.fr;
!MTA-STSinbound mail can be downgraded to plaintext

!DNSSECanswers can be forged
–CAAany CA may issue
–IPv6 (AAAA)IPv4 only
✓3 nameservers
ns-191-c.gandi.net ns-41-b.gandi.net ns-7-a.gandi.net

✓Registered with GANDI28.5 years old
pourlascience.fr
✓Registration expiry174 days
2027-02-28
✓Transfer lock
client transfer prohibited
✓3 nameservers at registry
ns-191-c.gandi.net ns-41-b.gandi.net ns-7-a.gandi.net

Address	Ports	CVEs	Edge	Network
212.95.72.192 pourlascience.fr +1	2180443	22	direct	—
217.70.184.56 boutique.pourlascience.fr +3	80443	0	direct	—
54.38.250.4 abo.pourlascience.fr +2	80443	0	direct	—
217.70.184.50 blogs.pourlascience.fr +2	80	0	direct	—

Archived URLs

Endpoints the Wayback Machine has kept — config files, backups, scripts. Slow to fetch, so it is here on request.

pourlascience.fr security report

Elevated

Findings

Email authentication

DNS

Registration

Hosts

Hostnames