Strict-Transport-Security is set with a max-age of at least one year, which keeps browsers pinned to HTTPS.

max-age=31536000; includeSubDomains

A CSP is configured, limiting which scripts and resources the browser will execute.

default-src 'self'

X-Frame-Options limits who can embed your site in a frame.

DENY

`nosniff` is set, preventing browsers from executing files as the wrong type.

nosniff

Referrer leakage is controlled by an explicit policy.

strict-origin-when-cross-origin

Neither `Server` nor `X-Powered-By` discloses implementation details.

The server uses TLS 1.2 or newer, avoiding known protocol weaknesses.

TLSv1.3

The certificate is trusted and not near expiry (valid to Wed, 12 May 2027 19:18:48 GMT).

valid_to: Wed, 12 May 2027 19:18:48 GMT

An SPF record is published, telling receivers which servers may send mail for your domain.

v=spf1 -all

DMARC is actively telling receivers how to handle mail that fails authentication.

v=DMARC1; p=reject

A DKIM public key was found, enabling signed email.

v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQE

All 1 cookie(s) set Secure, HttpOnly, and SameSite.

All referenced resources on this HTTPS page use secure URLs.

No known credential patterns were found in the page source.