example.co.uk
domain Headers D TLS 100 HTTPS 200 TLS 33 dHosted by Cloudflare (AS13335) · Address 104.21.2.18, 172.67.128.149, 2606:4700:3033:0:0:0:6815:212, 2606:4700:3033:0:0:0:ac43:8095 · HTTP/2 · 121 ms · Server cloudflare · “Home - The UK Domain”
Findings
-
Caution Security headers grade D SEC-HEADERS-GRADE
35 / 100 on our rubric
How to fix: Add HSTS, a Content-Security-Policy, nosniff and frame-ancestors; see the Learn guide on security headers.
-
Note No Content-Security-Policy CSP-MISSING
-
Note No clickjacking protection (X-Frame-Options or frame-ancestors) XFO-MISSING
-
Pass Site answers over HTTPS WEB-HTTPS-OK
HTTP 200 in 121 ms
-
Pass Plain HTTP redirects to HTTPS WEB-HTTP-REDIRECTS
https://theukdomain.uk
-
Pass HSTS is enabled HSTS-OK
max-age=63072000
-
Pass TLS score 100 (A) TLS-SCORE
On our published rubric: validity, trust, key, protocols, HSTS.
-
Pass Certificate valid for 33 more days TLS-VALIDITY-OK
2026-12-02T09:19:40+00:00
-
Pass Certificate chain verifies TLS-TRUSTED
Google Trust Services WE1
-
Pass TLS 1.3 supported; legacy protocols refused TLS-MODERN
TLSv1.3
-
Pass Responds to ping from LON1 PING-OK
avg 5.35 ms
HTTPS · redirect trail
301https://example.co.uk/→
200https://theukdomain.uk
- Final
- https://theukdomain.uk
- Timings
- DNS 0 · connect 6 · TLS 0 · first byte 107 · total 121 ms
- Body
- 155,964 bytes (br)
Plain HTTP · redirect trail
301http://example.co.uk/→
200https://theukdomain.uk
- Final
- https://theukdomain.uk
- Timings
- DNS 0 · connect 6 · TLS 0 · first byte 137 · total 148 ms
- Body
- 155,964 bytes (br)
TLS certificate score 100/100 · A
- 25/25Certificate within validityValid for 33 more days.
- 20/20Chain verifies to a trusted rootFull chain sent and trusted.
- 10/10Certificate matches the host nameHost name is on the certificate.
- 10/10Key strengthECDSA 256-bit.
- 5/5Signature algorithmecdsa-with-sha256
- 15/15Legacy protocols refusedTLS 1.0/1.1 refused.
- 10/10TLS 1.3 offeredModern clients get TLS 1.3.
- 5/5HSTS sentPins the browser to HTTPS after the first visit.
- Subject
- example.co.uk
- Issuer
- Google Trust Services WE1
- Valid
- 3 Sep 2026 – 2 Dec 2026 (33 days left)
- Key
- ECDSA 256-bit · ecdsa-with-SHA256
- Names
- example.co.uk, *.example.co.uk
- Chain
- verifies · 3 certificate(s)
- Negotiated
- TLSv1.3 · TLS_AES_256_GCM_SHA384
- Protocols
- TLSv1TLSv1.1TLSv1.2TLSv1.3
Security headers grade D · 35/100
- 25/25Strict-Transport-SecurityPresent with a six-month or longer max-age.
- 0/25Content-Security-PolicyMissing: no defence in depth against injected scripts.
- 10/10X-Content-Type-Optionsnosniff stops MIME-type guessing.
- 0/15X-Frame-Options / frame-ancestorsMissing: pages can be framed for click-jacking.
- 0/10Referrer-PolicyMissing: full URLs may leak to other sites.
- 0/10Permissions-PolicySwitches off browser features the site does not use.
- 0/5Cross-Origin-Opener-PolicyIsolates the window from cross-origin openers.
- X-XSS-Protection is obsolete and can introduce problems in old browsers.
- ✓ HSTS max-age=63072000
- – Content-Security-Policy Limits where scripts and content may load from.
- – X-Frame-Options Blocks clickjacking by refusing to be framed.
- ✓ X-Content-Type-Options nosniff
- – Referrer-Policy Controls what URL is leaked to other sites.
- – Permissions-Policy Limits browser features such as camera or geolocation.
Ping from LON1
4/4 replies · 0% loss · min/avg/max 5.325/5.35/5.398 ms
#1 5.35ms #2 5.33ms #3 5.4ms #4 5.33ms
Ports: 80 open443 open
Traceroute from LON1
| 1 | 185.119.110.1 | 1.067 ms | |
| 2 | 185.27.244.17 | xe-0-1-5.juniper2.cwcs.net | 5.063 ms |
| 3 | 185.27.244.24 | xe-0-1-0.juniper1.thw.cwcs.net | 4.632 ms |
| 4 | 195.66.225.179 | linx-lon1.as13335.net | 5.593 ms |
| 5 | 141.101.71.1 | 5.726 ms | |
| 6 | 141.101.71.125 | 5.834 ms | |
| 7 | 104.21.2.18 | 5.478 ms |