Infrastructure - https://www.ameli.fr BeaverCheck Audit

B

DNS Records

4 A records, 20 ms lookup

REVIEW

4 A records, 20 ms lookup

Resolves to 4 IPv4 address(es)

Got: 141.101.90.104, 141.101.90.105, 141.101.90.106, 141.101.90.107

Has 4 IPv6 (AAAA) record(s)

Got: 2a06:98c1:3200::90:83, 2a06:98c1:3200::90:82, 2a06:98c1:3200::90:81, 2a06:98c1:3200::90:80

CNAME record at zone apex

A CNAME at the zone apex can break MX and NS records. Use ALIAS/ANAME or A records instead.

Got: www.ameli.fr.cdn.cloudflare.net

No NS records found

No MX records — email not configured via DNS

CAA records not checked

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

No SPF record found in TXT records

SPF helps prevent email spoofing. Add a TXT record starting with 'v=spf1'.

DNS resolution time: 20 ms

Got: 20 ms

A	141.101.90.104, 141.101.90.105, 141.101.90.106, 141.101.90.107
AAAA	2a06:98c1:3200::90:83, 2a06:98c1:3200::90:82, 2a06:98c1:3200::90:81, 2a06:98c1:3200::90:80
CNAME	www.ameli.fr.cdn.cloudflare.net
NS	—
MX	—
TXT	—
CAA	Lookup not available with standard resolver

Resolved in 20 ms

A CNAME at the zone apex can break MX and NS records. Use ALIAS/ANAME or A records instead.

Why this matters

CNAME at the apex (example.com) breaks every other apex record (MX, TXT, NS) — DNS-protocol violation per RFC 1034.

Learn more ▾

RFC 1034 forbids CNAME alongside other records at the same name. Some DNS providers offer ALIAS / ANAME / flattened-CNAME records that work around this — use those instead. Otherwise apex-level CNAME breaks email (no MX), domain ownership verification (no TXT), and more.

Source: RFC 1034

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

SPF helps prevent email spoofing. Add a TXT record starting with 'v=spf1'.

Why this matters

Without SPF, receiving servers can't validate sending IPs — your domain is easier to spoof in phishing.

Learn more ▾

SPF complements DMARC. Both should be published. SPF records list authorized sending IPs (e.g., `v=spf1 include:_spf.google.com ~all` for Google Workspace). After publishing, verify in Google Postmaster Tools or mxtoolbox.

Source: RFC 7208 (SPF)

B

TLS Certificate Expiry & Recommendations

239 days until leaf cert expires — 3 issues to address

REVIEW

Certificate validity

239

days left

0d 30d 60d 90d+

Recommended actions

Submit your domain to hstspreload.org to be added to the Chrome preload list
Enable DNSSEC on your domain for DNS spoofing protection
Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy

A+

Redirect Chain

No redirects — direct access

PASS

No redirects — direct access

Got: https://www.ameli.fr

https://www.ameli.fr

47 ms · HTTP/1.1 FINAL

#	URL	Status	Time	Protocol	Server
1	https://www.ameli.fr	200	47 ms	HTTP/1.1	cloudflare

A+

IPv6 Readiness

IPv6 reachable (1 ms)

PASS

IPv6 reachable (1 ms)

IPv6 is configured and reachable at 2a06:98c1:3200::90:83, 2a06:98c1:3200::90:82, 2a06:98c1:3200::90:81, 2a06:98c1:3200::90:80

Got: 1 ms connect

IPv6 Ready

AAAA Records 2a06:98c1:3200::90:83, 2a06:98c1:3200::90:82, 2a06:98c1:3200::90:81, 2a06:98c1:3200::90:80 Connection Reachable (1 ms)

A+

Crawlability

robots.txt present, sitemap with 5586 URLs

PASS

robots.txt present, sitemap with 5586 URLs

robots.txt is present

Got: 9468 bytes

sitemap.xml is present

sitemap.xml is valid XML

sitemap.xml contains 5586 entries

robots.txt references sitemap

robots.txt 200 OK

Size 9468 B Sitemaps referenced 1 User-agents * Blocking No — crawling allowed

#

# robots.txt

#

# This file is to prevent the crawling and indexing of certain parts

# of your site by web crawlers and spiders run by sites like Yahoo!

# and Google. By telling these "robots" where not to go on your site,

# you save bandwidth and server resources.

#

# This file will be ignored unless it is at the root of your host:

# Used:    http://example.com/robots.txt

# Ignored: http://example.com/site/robots.txt

#

# For more information about the robots.txt standard, see:

# http://www.robotstxt.org/robotstxt.html


User-agent: *

Crawl-delay: 10
# CSS, JS, Images

Allow: /misc/*.css$

Allow: /misc/*.css?

Allow: /misc/*.js$

Allow: /misc/*.js?

Allow: /misc/*.gif

Allow: /misc/*.jpg

Allow: /misc/*.jpeg

Allow: /misc/*.png

Allow: /modules/*.css$

Allow: /modules/*.css?

Allow: /modules/*.js$

Allow: /modules/*.js?

Allow: /modules/*.gif

Allow: /modules/*.jpg

Allow: /modules/*.jpeg

Allow: /modules/*.png

Allow: /profiles/*.css$

Allow: /profiles/*.css?

Allow: /profiles/*.js$

Allow: /profiles/*.js?

Allow: /profiles/*.gif

Allow: /profiles/*.jpg

Allow: /profiles/*.jpeg

Allow: /profiles/*.png

Allow: /themes/*.css$

Allow: /themes/*.css?

Allow: /themes/*.js$

Allow: /themes/*.js?

Allow: /themes/*.gif

Allow: /themes/*.jpg

Allow: /themes/*.jpeg

Allow: /themes/*.png

Allow: /themes/*.svg

Allow: /themes/custom/ameli/fonts/

# geolocalisation

Disallow: /haute-loire/

Disallow: /indre/

Disallow: /doubs/

Disallow: /haute-saone/

Disallow: /haut-rhin/

Disallow: /llle-et-vilaine/

Disallow: /hauts-de-seine/

Disallow: /haute-savoie/

Disallow: /vaucluse/

Disallow: /martinique/

Disallow: /finistere/

Disallow: /lille-douai/

Disallow: /eure-et-loir/

Disallow: /eure/

Disallow: /var/

Disallow: /morbihan/

Disallow: /artois/

Disallow: /paris/

Disallow: /guyane/

Disallow: /loire-atlantique/

Disallow: /val-de-marne/

Disallow: /manche/

Disallow: /nievre/

Disallow: /somme/

Disallow: /ain/

Disallow: /territoire-de-belfort/

Disallow: /maine-et-loire/

Disallow: /orne/

Disallow: /haute-garonne/

Disallow: /haute-corse/

Disallow: /savoie/

Disallow: /lot/

Disallow: /cher/

Disallow: /hautes-alpes/

Disallow: /vosges/

Disallow: /moselle/

Disallow: /oise/

Disallow: /yonne/

Disallow: /aisne/

Disallow: /sarthe/

Disallow: /gers/

Disallow: /jura/

Disallow: /marne/

Disallow: /guadeloupe/

Disallow: /drome/

Disallow: /aude/

Disallow: /roubaix-tourcoing/

Disallow: /flandres-dunkerque-armentieres/

Disallow: /cotes-d-armor/

Disallow: /aveyron/

Disallow: /vendee/

Disallow: /loire/

Disallow: /gironde/

Disallow: /alpes-maritimes/

Disallow: /allier/

Disallow: /ariege/

Disallow: /lot-et-garonne/

Disallow: /haute-marne/

Disallow: /puy-de-dome/

Disallow: /ardennes/

Disallow: /pau/

Disallow: /vienne/

Disallow: /landes/

Disallow: /herault/

Disallow: /gard/

Disallow: /pyrenees-orientales/

Disallow: /rhone/

Disallow: /charente/

Disallow: /isere/

Disallow: /bas-rhin/

Disallow: /cote-d-opale/

Disallow: /meurthe-et-moselle/

Disallow: /aube/

Disallow: /alpes-de-haute-provence/

Disallow: /tarn/

Disallow: /hainaut/

Disallow: /le-havre/

Disallow: /rouen-elbeuf-dieppe-seine-maritime/

Disallow: /la-reunion/

Disallow: /deux-sevres/

Disallow: /seine-et-marne/

Disallow: /correze/

Disallow: /val-d-oise/

Disallow: /corse-du-sud/

Disallow: /yvelines/

Disallow: /charente-maritime/

Disallow: /saone-et-loire/

Disallow: /cote-d-or/

Disallow: /creuse/

Disallow: /seine-saint-denis/

Disallow: /essonne/

Disallow: /ardeche/

Disallow: /bouches-du-rhone/

Disallow: /lozere/

Disallow: /meuse/

Disallow: /loiret/

Disallow: /haute-vienne/

Disallow: /indre-et-loire/

Disallow: /dordogne/

Disallow: /cantal/

Disallow: /bayonne/

Disallow: /calvados/

Disallow: /hautes-pyrenees/

Disallow: /loir-et-cher/

Disallow: /tarn-et-garonne/

Disallow: /mayenne/

Disallow: /mayotte/

Allow: /haute-loire/assure/actualites/

Allow: /indre/assure/actualites/

Allow: /doubs/assure/actualites/

Allow: /haute-saone/assure/actualites/

Allow: /haut-rhin/assure/actualites/

Allow: /llle-et-vilaine/assure/actualites/

Allow: /hauts-de-seine/assure/actualites/

Allow: /haute-savoie/assure/actualites/

Allow: /vaucluse/assure/actualites/

Allow: /martinique/assure/actualites/

Allow: /finistere/assure/actualites/

Allow: /lille-douai/assure/actualites/

Allow: /eure-et-loir/assure/actualites/

Allow: /eure/assure/actualites/

Allow: /var/assure/actualites/

Allow: /morbihan/assure/actualites/

Allow: /artois/assure/actualites/

Allow: /paris/assure/actualites/

Allow: /guyane/assure/actualites/

Allow: /loire-atlantique/assure/actualites/

Allow: /val-de-marne/assure/actualites/

Allow: /manche/assure/actualites/

Allow: /nievre/assure/actualites/

Allow: /somme/assure/actualites/

Allow: /ain/assure/actualites/

Allow: /territoire-de-belfort/assure/actualites/

Allow: /maine-et-loire/assure/actualites/

Allow: /orne/assure/actualites/

Allow: /haute-garonne/assure/actualites/

Allow: /haute-corse/assure/actualites/

Allow: /savoie/assure/actualites/

Allow: /lot/assure/actualites/

Allow: /cher/assure/actualites/

Allow: /hautes-alpes/assure/actualites/

Allow: /vosges/assure/actualites/

Allow: /moselle/assure/actualites/

Allow: /oise/assure/actualites/

Allow: /yonne/assure/actualites/

Allow: /aisne/assure/actualites/

Allow: /sarthe/assure/actualites/

Allow: /gers/assure/actualites/

Allow: /jura/assure/actualites/

Allow: /marne/assure/actualites/

Allow: /guadeloupe/assure/actualites/

Allow: /drome/assure/actualites/

Allow: /aude/assure/actualites/

Allow: /roubaix-tourcoing/assure/actualites/

Allow: /flandres-dunkerque-armentieres/assure/actualites/

Allow: /cotes-d-armor/assure/actualites/

Allow: /aveyron/assure/actualites/

Allow: /vendee/assure/actualites/

Allow: /loire/assure/actualites/

Allow: /gironde/assure/actualites/

Allow: /alpes-maritimes/assure/actualites/

Allow: /allier/assure/actualites/

Allow: /ariege/assure/actualites/

Allow: /lot-et-garonne/assure/actualites/

Allow: /haute-marne/assure/actualites/

Allow: /puy-de-dome/assure/actualites/

Allow: /ardennes/assure/actualites/

Allow: /pau/assure/actualites/

Allow: /vienne/assure/actualites/

Allow: /landes/assure/actualites/

Allow: /herault/assure/actualites/

Allow: /gard/assure/actualites/

Allow: /pyrenees-orientales/assure/actualites/

Allow: /rhone/assure/actualites/

Allow: /charente/assure/actualites/

Allow: /isere/assure/actualites/

Allow: /bas-rhin/assure/actualites/

Allow: /cote-d-opale/assure/actualites/

Allow: /meurthe-et-moselle/assure/actualites/

Allow: /aube/assure/actualites/

Allow: /alpes-de-haute-provence/assure/actualites/

Allow: /tarn/assure/actualites/

Allow: /hainaut/assure/actualites/

Allow: /le-havre/assure/actualites/

Allow: /rouen-elbeuf-dieppe-seine-maritime/assure/actualites/

Allow: /la-reunion/assure/actualites/

Allow: /deux-sevres/assure/actualites/

Allow: /seine-et-marne/assure/actualites/

Allow: /correze/assure/actualites/

Allow: /val-d-oise/assure/actualites/

Allow: /corse-du-sud/assure/actualites/

Allow: /yvelines/assure/actualites/

Allow: /charente-maritime/assure/actualites/

Allow: /saone-et-loire/assure/actualites/

Allow: /cote-d-or/assure/actualites/

Allow: /creuse/assure/actualites/

Allow: /seine-saint-denis/assure/actualites/

Allow: /essonne/assure/actualites/

Allow: /ardeche/assure/actualites/

Allow: /bouches-du-rhone/assure/actualites/

Allow: /lozere/assure/actualites/

Allow: /meuse/assure/actualites/

Allow: /loiret/assure/actualites/

Allow: /haute-vienne/assure/actualites/

Allow: /indre-et-loire/assure/actualites/

Allow: /dordogne/assure/actualites/

Allow: /cantal/assure/actualites/

Allow: /bayonne/assure/actualites/

Allow: /calvados/assure/actualites/

Allow: /hautes-pyrenees/assure/actualites/

Allow: /loir-et-cher/assure/actualites/

Allow: /tarn-et-garonne/assure/actualites/

Allow: /mayenne/assure/actualites/

Allow: /mayotte/assure/actualites/

# Directories

Disallow: /includes/

Disallow: /misc/

Disallow: /modules/

Disallow: /profiles/

Disallow: /scripts/

Disallow: /themes/

Disallow: /ameli_localisation_popin/

# Files

Disallow: /CHANGELOG.txt

Disallow: /cron.php

Disallow: /INSTALL.mysql.txt

Disallow: /INSTALL.pgsql.txt

Disallow: /INSTALL.sqlite.txt

Disallow: /install.php

Disallow: /INSTALL.txt

Disallow: /LICENSE.txt

Disallow: /MAINTAINERS.txt

Disallow: /update.php

Disallow: /UPGRADE.txt

Disallow: /xmlrpc.php

# Paths (clean URLs)

Disallow: /admin/

Disallow: /comment/reply/

Disallow: /filter/tips/

Disallow: /node/add/

Disallow: /search/

Disallow: /user/register/

Disallow: /user/password/

Disallow: /user/login/

Disallow: /user/logout/

# Paths (no clean URLs)

Disallow: /?q=admin/

Disallow: /?q=comment/reply/

Disallow: /?q=filter/tips/

Disallow: /?q=node/add/

Disallow: /?q=search/

Disallow: /?q=user/password/

Disallow: /?q=user/register/

Disallow: /?q=user/login/

Disallow: /?q=user/logout/

Disallow: /*?text=

Disallow: *page=print

Disallow: /node/*/feedback/

Disallow: /fileadmin/documents/

Disallow: /sites/default/files/Documents/

Disallow: /*.pdf

Disallow: /node/*/backlinks

Disallow: /index.php/*

Disallow: /chirurgien-dentiste/aide-la-codification-des-actes-prothetiques/*

Disallow: /*.PDF

Disallow: */recherche?search=

Disallow: /*.xls

Disallow: /*.xlsx

Disallow: /ameli-menu/

Disallow: /accueil-de-la-ccam/*


Sitemap: https://www.ameli.fr/sitemap.xml

sitemap.xml 200 OK

Type URL Set URLs 5586 entries Valid XML Yes

Sample URLs:

A+

URL Variants

www/non-www, trailing slash, HTTP→HTTPS

PASS

www/non-www, trailing slash, HTTP→HTTPS

www/non-www redirect configured correctly (preferred: www)

HTTP correctly 301-redirects to HTTPS

www / non-www

200https://www.ameli.fr/

301https://ameli.fr/

Preferred variant: www

HTTP → HTTPS

301http://www.ameli.fr/ → https://www.ameli.fr/

Consistent

A

Domain Intelligence

ameli.fr — via CSC CORPORATE DOMAINS INC., 23 years, 11 months old, hosted on ALTERWAYHOSTING-NETWORK www.alterway.fr, FR

PASS

ameli.fr — via CSC CORPORATE DOMAINS INC., 23 years, 11 months old, hosted on ALTERWAYHOSTING-NETWORK www.alterway.fr, FR

Domain expires in 88 days

Consider enabling auto-renewal to prevent accidental expiration.

Got: Expires Jul 5, 2026

Registrar: CSC CORPORATE DOMAINS INC.

Hosting: ALTERWAYHOSTING-NETWORK www.alterway.fr, FR

Got: AS41628

Domain expiry

EXPIRED

July 5, 2026

SSL certificate

239 days

Issued by Sectigo Limited

Domain age

23 years, 11 months

Registered August 21, 2002

DNSSEC

Status unknown

Protects against DNS spoofing

Hosting

ALTERWAYHOSTING-NETWORK www.alterway.fr, FR

ASN AS41628

89.31.147.88

Registrar

CSC CORPORATE DOMAINS INC.

Lock status unknown 2 NS records

Expiry timeline

Today

+1 year

Domain expiry SSL expiry Danger zone (≤30 days)

Recommended actions

Domain has EXPIRED — renew immediately to avoid total site outage

Registrar CSC CORPORATE DOMAINS INC.

Created August 21, 2002 (23 years, 11 months ago)

Expires July 5, 2026 (2 months)

Last Updated July 6, 2025

Name Servers dns1.cscdns.net, dns2.cscdns.net

Registrant Caisse nationale de l'Assurance Maladie - Cnam

Hosting

IP Address 89.31.147.88

ASN AS41628 (ALTERWAYHOSTING-NETWORK www.alterway.fr, FR)

Provider ALTERWAYHOSTING-NETWORK www.alterway.fr, FR

Data source: rdap (0.4s)

Consider enabling auto-renewal to prevent accidental expiration.

Why this matters

Domain expiry approaching — renew immediately and ensure auto-renew + alerting are configured.

Source: ICANN renewal policy

A+

HTTP Probe Timing

Total 141 ms — DNS, TCP, TLS, TTFB, content transfer breakdown

PASS

DNS Lookup

4 ms

TCP Connect

1 ms

TLS Handshake

45 ms

Time to First Byte

140 ms

Total Time

141 ms

Connection waterfall

DNS Lookup 4 ms TCP Connect 1 ms TLS Handshake 45 ms Server Processing 89 ms Content Transfer 2 ms

A

CDN & Delivery

Cloudflare (DYNAMIC)

PASS

Cloudflare (DYNAMIC)

Site is served via Cloudflare CDN (edge: WAW)

Got: cf-ray: 9e8bd82e1db7bf97-WAW

CDN cache status: DYNAMIC

CDN Detected: Cloudflare

Provider Cloudflare Cache Status DYNAMIC Evidence cf-ray: 9e8bd82e1db7bf97-WAW