Domain Security Compliance Scanner

SSL:

Expiration: 2025-06-29 (62 days remaining)

Issuer: Let's Encrypt

Authority: E5

Download Certificate

TLS Configuration:

TLS (Transport Layer Security) encrypts data in transit, protecting against eavesdropping and tampering. Strong TLS configurations use up-to-date protocols and ciphers to ensure the highest level of security.

Content Security Policy (CSP):

CSP prevents XSS and data injection attacks by specifying allowed content sources, reducing malicious code execution risks. Consider implementing it for enhanced security.

X-Frame-Options:

X-Frame-Options header is missing. This header prevents clickjacking by controlling page rendering in frames. Without it, malicious sites could embed your page, potentially tricking users into unwanted actions.

HTTP Strict Transport Security (HSTS):

HSTS forces browsers to use HTTPS, preventing downgrade attacks and cookie hijacking.

Cookie Security:

Mixed Content:

Mixed content (HTTP resources on HTTPS pages) poses security risks, enabling potential attacks and content injection. Modern browsers may block it, breaking site functionality.

Web Application Firewall (WAF):

A Web Application Firewall (WAF) helps protect your website from various attacks such as SQL injection, cross-site scripting (XSS), and other common exploits.

HTTP Security Headers:

Server Version:

Not announcing version can enhance security, but regular updates are still crucial.

DNSSEC:

DNSSEC adds a layer of trust to your domain name. It helps prevent DNS spoofing and cache poisoning attacks. Consider enabling it for enhanced security.

Nameservers:

• ns1.gazduire.net (185.248.199.9)
• ns2.gazduire.net (178.62.207.207)

DMARC:

DMARC helps prevent email spoofing and protects your domain from unauthorized use in phishing attacks.

DKIM:

DKIM adds a digital signature to emails, verifying that they were sent by an authorized sender and weren't altered in transit.