Web & Email Security Test
← Web Test Home
F
Test Information
Target24-7intouch.com
Resolved To:https://24-7intouch.com/
IPv4:141.193.213.11
141.193.213.10
141.193.213.10
Scan ID #:189
Scan Time (UTC):2021-09-24 17:57:05
Response Code (HTTP):301
Response Code (HTTPS):200
Score:0/120
Tests Passed:14/25
Domain Information
Changed:
2021-07-15
Created:
2001-09-13
Expires:
2022-09-13
Related Tests
Overall Scores
Test | Pass | Score | Max | Min | Reason | Recommended Apache Config | More |
---|---|---|---|---|---|---|---|
HTTPS Availability | ✅ | 0 | 0 | -40 | Site is available over HTTPS and HTTP redirects to HTTPS with same hostname | — | |
SSL and TLS Protocols | ➖ | 0 | 5 | -20 | TLS v1.3 is supported but TLS v1.2 is not supported. Most clients aren't TLS 1.3 capable yet, so you should still support TLS 1.2 for now. | SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 | 🛈 |
HSTS (Strict Transport Security) | ❌ | -15 | 0 | -15 | Site is available over HTTPS but no HSTS header sent | Header set Strict-Transport-Security max-age=31536000; includeSubDomains; preload | 🛈 |
Expect Certificate Transparency | ❌ | -5 | 0 | -5 | Site available over HTTPS but no certificate transparency directives | — | |
HTTP Compression | ➖ | 0 | 1 | 0 | HTTP compression is supported | SetEnv no-gzip 1 | 🛈 |
Cache Control | ❌ | -5 | 0 | -5 | Cache-Control directives are not adequate for sensitive data | Header set Cache-Control "no-store, no-cache, must-revalidate" | |
Cookies | ✅ | 0 | 0 | -20 | N/A (No cookies sent) | — | |
Subresource Integrity | ❌ | -5 | 5 | -10 | Scripts loaded (see subtable for details) |
| 🛈 |
Content-Security-Policy | ❌ | -24 | 0 | -24 | Content-Security-Policy header not sent | Header set Content-Security-Policy " | 🛈 |
Feature-Policy | ➖ | 0 | 5 | 0 | Feature-Policy header not sent | Header set Feature-Policy "autoplay 'self';" | |
Report-To | ➖ | 0 | 1 | 0 | No Report-To header sent | Header set Report-To: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://[your-endpoint].report-uri.com/a/d/g"}],"include_subdomains":true} | |
Network Error Logging | ➖ | 0 | 1 | 0 | N/A (Requires Report-To header) | Header set NEL: {"report_to":"default","max_age":31536000,"include_subdomains":true} | |
Referrer Policy | ➖ | 0 | 2 | -5 | Referrer-Policy header not sent | Header always set Referrer-Policy "no-referrer-when-downgrade" | |
X-Content-Type-Options | ❌ | -10 | 0 | -10 | X-Content-Type-Options header not implemented | Header set X-Content-Type-Options "nosniff" | |
X-XSS-Protection | ❌ | -10 | 0 | -10 | X-XSS-Protection header not implemented | Header set X-XSS-Protection "1; mode=block" | |
X-Frame-Options | ❌ | -10 | 0 | -10 | X-Frame-Options header not implemented | Header set X-Frame-Options "DENY" | |
X-Powered-By | ❌ | -3 | 0 | -3 | X-Powered-By header sent, with value WP Engine | Header unset "X-Powered-By" | |
X-AspNet-Version | ✅ | 0 | 0 | -1 | X-AspNet-Version header not sent | — | |
X-AspNetMvc-Version | ✅ | 0 | 0 | -1 | X-AspNetMvc-Version header not sent | — | |
Server Header | ✅ | 0 | 0 | -2 | Server header sent, with general, non-specific value nginx | ServerTokens Prod | |
Cross-Origin Resource Sharing | ✅ | 0 | 0 | -15 | CORS header not implemented | — | |
DNSSEC (DNS Security Extensions) | ❌ | -5 | 0 | -5 | Domain is not signed with a valid signature | — | |
IPv6 Reachability | ❌ | -5 | 0 | -5 | Nameservers available via IPv6, but web server is not | — | |
SPF (Sender Policy Framework) | ✅ | 0 | 0 | -10 | SPF record associated with this domain | — | |
DMARC (Domain-based Message Authentication, Reporting, and Confidence) | ➖ | -3 | 0 | -10 | Insufficiently strict (none) DMARC record associated with this domain | — |
Subresource Integrity (External JavaScript)
Maximum score for any and all scripts is 5 and minimum score for any and all scripts is -10.
Script | Pass | Score | Reason | HTTPS |
---|---|---|---|---|
https://24-7intouch.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend.js?ver=7.13.0 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/plugins/popup-builder/public/js/Popup.js?ver=3.69.5 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/plugins/popup-builder/public/js/PopupConfig.js?ver=3.69.5 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/plugins/popup-builder/public/js/PopupBuilder.js?ver=3.69.5 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.2.23 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.23 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.11.5 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
//fast.wistia.net/assets/external/E-v1.js?ver=5.8 | ✅ | 5 | Script is protocol-relative and loaded securely | ➖ |
https://24-7intouch.com/wp-content/themes/pro/cornerstone/assets/dist/js/site/cs-head.13a2f57.js | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/plugins/wp-cookie-allow/assets/js/blocked.js | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/plugins/wp-cookie-allow/assets/js/blocked.js | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/plugins/wp-cookie-allow/assets/js/blocked.js | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://fast.wistia.com/embed/medias/4okm679b6c.jsonp | ❌ | -5 | Script is external but does not use SRI | ✅ |
https://fast.wistia.com/assets/external/E-v1.js | ❌ | -5 | Script is external but does not use SRI | ✅ |
https://connect.livechatinc.com/api/v1/script/4c6f949e-3300-4f1d-abf7-b747ac93cbbb/widget.js | ❌ | -5 | Script is external but does not use SRI | ✅ |
https://24-7intouch.com/wp-content/plugins/image-map-pro-wordpress/js/image-map-pro.min.js?ver=5.1.6 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/themes/pro-child/js/jquery.equal.height.js?ver=1571258763 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/themes/pro-child/js/owl.carousel.min.js?ver=1571258763 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/themes/pro-child/js/jquery.magnific-popup.min.js?ver=1571258763 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/themes/pro-child/js/isotope.pkgd.min.js?ver=1571258764 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://player.vimeo.com/api/player.js?ver=5.8 | ❌ | -5 | Script is external but does not use SRI | ✅ |
https://24-7intouch.com/wp-content/themes/pro-child/js/vimeo.js?ver=1571258762 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/themes/pro-child/js/video.js?ver=1571258761 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/themes/pro-child/js/functions.js?ver=1571258761 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-includes/js/comment-reply.min.js?ver=5.8 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/themes/pro/cornerstone/assets/dist/js/site/cs-body.13a2f57.js | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/plugins/wp-cookie-allow/framework/assets/js/wpie-common.min.js?ver=2.0.3 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/plugins/wp-cookie-allow/modules/frontend/js/wpca-frontend.min.js?ver=3.2.11 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/plugins/wp-cookie-allow/modules/consent-log/js/wpca-consent-log.min.js?ver=3.2.11 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/themes/pro/framework/dist/js/site/x.js?ver=3.0.4 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/plugins/ubermenu/assets/js/ubermenu.min.js?ver=3.7.3 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-includes/js/jquery/ui/effect.min.js?ver=1.12.1 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-content/plugins/the-grid/frontend/assets/js/the-grid.min.js?ver=2.7.3 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
https://24-7intouch.com/wp-includes/js/wp-embed.min.js?ver=5.8 | ✅ | 5 | Script is absolute-path same-origin and loaded securely | ✅ |
Raw Headers
servernginx
dateFri, 24 Sep 2021 17:57:05 GMT
content-typetext/html; charset=UTF-8
varyAccept-Encoding
varyAccept-Encoding
varyAccept-Encoding,Cookie
link<https://24-7intouch.com/wp-json/>; rel="https://api.w.org/"
link<https://24-7intouch.com/wp-json/wp/v2/pages/7>; rel="alternate"; type="application/json"
link<https://24-7intouch.com/>; rel=shortlink
x-powered-byWP Engine
x-cacheableSHORT
cache-controlmax-age=600, must-revalidate
x-cacheHIT: 23
x-cache-groupnormal
content-encodingbr
Test History
Results hidden from public stats are not shown here.
2 years ago | 0 |
Was this test helpful? Are there things we could improve? If so, please let us know! If you'd like to support it, donations are greatly appreciated.