Web & Email Security Test
← Web Test Home
F
Test Information
Targetdrewmckissick.com
Resolved To:http://drewmckissick.com/
IPv4:173.236.195.36
Scan ID #:120
Scan Time (UTC):2021-04-17 14:20:00
Response Code (HTTP):200
Response Code (HTTPS):0
Score:0/115
Tests Passed:17/25
Domain Information
Changed:
2021-02-02
Created:
2007-02-01
Expires:
2022-02-01
Related Tests
Score floored at 0. Original score was -19.
Overall Scores
Test | Pass | Score | Max | Min | Reason | Recommended Apache Config | More |
---|---|---|---|---|---|---|---|
HTTPS Availability | ❌ | -40 | 0 | -40 | Site is not available over HTTPS | — | |
SSL and TLS Protocols | ➖ | 0 | 0 | -5 | N/A (site not available over HTTPS) | SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 | 🛈 |
HSTS (Strict Transport Security) | ➖ | 0 | 0 | -15 | N/A (Site is not available over HTTPS) | Header set Strict-Transport-Security max-age=31536000; includeSubDomains; preload | 🛈 |
Expect Certificate Transparency | ➖ | 0 | 0 | -5 | N/A (Expect-CT header only effective on HTTPS connections) | — | |
HTTP Compression | ➖ | 0 | 1 | 0 | Exempt (site not available over HTTPS) | SetEnv no-gzip 1 | 🛈 |
Cache Control | ➖ | 0 | 0 | -5 | Exempt (site not available over HTTPS) | Header set Cache-Control "no-store, no-cache, must-revalidate" | |
Cookies | ✅ | 0 | 0 | -20 | N/A (No cookies sent) | — | |
Subresource Integrity | ❌ | -10 | 5 | -10 | Scripts loaded (see subtable for details) |
| 🛈 |
Content-Security-Policy | ❌ | -24 | 0 | -24 | Content-Security-Policy header not sent | Header set Content-Security-Policy " | 🛈 |
Feature-Policy | ➖ | 0 | 5 | 0 | Feature-Policy header not sent | Header set Feature-Policy "autoplay 'self';" | |
Report-To | ➖ | 0 | 1 | 0 | No Report-To header sent | Header set Report-To: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://[your-endpoint].report-uri.com/a/d/g"}],"include_subdomains":true} | |
Network Error Logging | ➖ | 0 | 1 | 0 | N/A (Requires Report-To header) | Header set NEL: {"report_to":"default","max_age":31536000,"include_subdomains":true} | |
Referrer Policy | ➖ | 0 | 2 | -5 | Referrer-Policy header not sent | Header always set Referrer-Policy "no-referrer-when-downgrade" | |
X-Content-Type-Options | ❌ | -10 | 0 | -10 | X-Content-Type-Options header not implemented | Header set X-Content-Type-Options "nosniff" | |
X-XSS-Protection | ❌ | -10 | 0 | -10 | X-XSS-Protection header not implemented | Header set X-XSS-Protection "1; mode=block" | |
X-Frame-Options | ❌ | -10 | 0 | -10 | X-Frame-Options header not implemented | Header set X-Frame-Options "DENY" | |
X-Powered-By | ✅ | 0 | 0 | -3 | X-Powered-By header not sent | Header unset "X-Powered-By" | |
X-AspNet-Version | ✅ | 0 | 0 | -1 | X-AspNet-Version header not sent | — | |
X-AspNetMvc-Version | ✅ | 0 | 0 | -1 | X-AspNetMvc-Version header not sent | — | |
Server Header | ✅ | 0 | 0 | -2 | Server header sent, with general, non-specific value Apache | ServerTokens Prod | |
Cross-Origin Resource Sharing | ✅ | 0 | 0 | -15 | CORS header not implemented | — | |
DNSSEC (DNS Security Extensions) | ❌ | -5 | 0 | -5 | Domain is not signed with a valid signature | — | |
IPv6 Reachability | ➖ | 0 | 0 | -5 | Nameservers not available via IPv6, so site can't support IPv6 | — | |
SPF (Sender Policy Framework) | ✅ | 0 | 0 | -10 | SPF record associated with this domain | — | |
DMARC (Domain-based Message Authentication, Reporting, and Confidence) | ❌ | -10 | 0 | -10 | An MX record was found for this hostname, but no DMARC record exists | — |
Subresource Integrity (External JavaScript)
Maximum score for any and all scripts is 5 and minimum score for any and all scripts is -10.
Script | Pass | Score | Reason | HTTPS |
---|---|---|---|---|
https://c0.wp.com/c/5.7.1/wp-includes/js/jquery/jquery.min.js | ❌ | -5 | Script is external but does not use SRI | ✅ |
https://c0.wp.com/c/5.7.1/wp-includes/js/jquery/jquery-migrate.min.js | ❌ | -5 | Script is external but does not use SRI | ✅ |
http://drewmckissick.com/wp-content/themes/discoverpro/js/modernizr.js?ver=2.6.1 | ✅ | -10 | Script is not loaded securely | ➖ |
http://drewmckissick.com/wp-content/plugins/simple-social-icons/svgxuse.js?ver=1.1.21 | ✅ | -10 | Script is not loaded securely | ➖ |
http://drewmckissick.com/wp-content/plugins/media-element-html5-video-and-audio-player/mediaelement/v4/mediaelement-and-player.min.js?ver=4.2.8 | ✅ | -10 | Script is not loaded securely | ➖ |
http://drewmckissick.com/wp-content/themes/discoverpro/js/superfish.js?ver=1.0 | ✅ | -10 | Script is not loaded securely | ➖ |
http://drewmckissick.com/wp-content/themes/discoverpro/js/jquery.custom.js?ver=1.0 | ✅ | -10 | Script is not loaded securely | ➖ |
http://drewmckissick.com/wp-content/themes/discoverpro/js/jquery.fitvids.js?ver=1.0 | ✅ | -10 | Script is not loaded securely | ➖ |
http://drewmckissick.com/wp-content/themes/discoverpro/js/jquery.flexslider.js?ver=2.1 | ✅ | -10 | Script is not loaded securely | ➖ |
http://drewmckissick.com/wp-content/themes/discoverpro/js/selectnav.js?ver=0.1 | ✅ | -10 | Script is not loaded securely | ➖ |
http://drewmckissick.com/wp-content/themes/discoverpro/js/responsive-scripts.js?ver=1.2.1 | ✅ | -10 | Script is not loaded securely | ➖ |
http://drewmckissick.com/wp-content/plugins/mad-mimi-wp/assets/pagecount.min.js?ver=2.5.3 | ✅ | -10 | Script is not loaded securely | ➖ |
https://c0.wp.com/p/jetpack/9.5/_inc/build/photon/photon.min.js | ❌ | -5 | Script is external but does not use SRI | ✅ |
http://drewmckissick.com/wp-content/plugins/easy-digital-downloads/assets/js/edd-ajax.min.js?ver=2.10.1 | ✅ | -10 | Script is not loaded securely | ➖ |
https://c0.wp.com/p/jetpack/9.5/_inc/build/facebook-embed.min.js | ❌ | -5 | Script is external but does not use SRI | ✅ |
https://c0.wp.com/p/jetpack/9.5/_inc/build/twitter-timeline.min.js | ❌ | -5 | Script is external but does not use SRI | ✅ |
https://c0.wp.com/c/5.7.1/wp-includes/js/comment-reply.min.js | ❌ | -5 | Script is external but does not use SRI | ✅ |
https://c0.wp.com/c/5.7.1/wp-includes/js/wp-embed.min.js | ❌ | -5 | Script is external but does not use SRI | ✅ |
http://drewmckissick.com/wp-content/plugins/mad-mimi-wp/assets/vendor/tooltipster/tooltipster.bundle.min.js?ver=2.5.3 | ✅ | -10 | Script is not loaded securely | ➖ |
http://drewmckissick.com/wp-content/plugins/mad-mimi-wp/assets/vendor/featherlight/release/featherlight.min.js?ver=2.5.3 | ✅ | -10 | Script is not loaded securely | ➖ |
http://drewmckissick.com/wp-content/plugins/mad-mimi-wp/assets/vendor/jstz/jstz.min.js?ver=2.5.3 | ✅ | -10 | Script is not loaded securely | ➖ |
http://drewmckissick.com/wp-content/plugins/mad-mimi-wp/assets/script.js?ver=2.5.3 | ✅ | -10 | Script is not loaded securely | ➖ |
https://stats.wp.com/e-202115.js | ❌ | -5 | Script is external but does not use SRI | ✅ |
Raw Headers
dateSat, 17 Apr 2021 14:19:59 GMT
serverApache
pragmano-cache
expiresThu, 19 Nov 1981 08:52:00 GMT
cache-controlno-store, no-cache, must-revalidate
link<https://wp.me/P3Ger3-M>; rel=shortlink
varyAccept-Encoding,User-Agent
content-encodinggzip
content-typetext/html; charset=UTF-8
via1.1 voip.phreaknet.org
transfer-encodingchunked
Test History
Results hidden from public stats are not shown here.
2 years ago | 0 |
Was this test helpful? Are there things we could improve? If so, please let us know! If you'd like to support it, donations are greatly appreciated.