{"engine":"web","target":"example.co.uk","checked_at":"2026-10-30T22:19:14+00:00","cached":false,"duration_ms":3808,"error":null,"score":95,"counts":{"pass":8,"caution":1,"fail":0,"note":2,"skipped":0},"data":{"host":"example.co.uk","ips":["104.21.2.18","172.67.128.149","2606:4700:3033:0:0:0:6815:212","2606:4700:3033:0:0:0:ac43:8095"],"http":{"start":"http:\/\/example.co.uk\/","hops":[{"url":"http:\/\/example.co.uk\/","ip":"104.21.2.18","status":301,"location":"https:\/\/theukdomain.uk","ms":32},{"url":"https:\/\/theukdomain.uk","ip":"162.159.134.42","status":200,"location":null,"ms":80}],"final":{"url":"https:\/\/theukdomain.uk","status":200,"ip":"162.159.134.42","http_version":"HTTP\/2","headers":{"date":"Fri, 30 Oct 2026 22:19:14 GMT","content-type":"text\/html; charset=UTF-8","cf-ray":"a52dcce6fc6793f5-LHR","cf-cache-status":"HIT","age":"3305","cache-control":"public, max-age=0, s-maxage=3600","last-modified":"Fri, 30 Oct 2026 21:24:08 GMT","link":"<https:\/\/theukdomain.uk\/wp-json\/>; rel=\"https:\/\/api.w.org\/\", <https:\/\/theukdomain.uk\/wp-json\/wp\/v2\/pages\/7>; rel=\"alternate\"; title=\"JSON\"; type=\"application\/json\", <https:\/\/theukdomain.uk\/>; rel=shortlink","server":"cloudflare","strict-transport-security":"max-age=63072000","vary":"Accept-Encoding","ki-cf-cache-status":"HIT","x-edge-location-klb":"1","ki-cache-tag":"59f9da11-d01d-4c92-a5a6-9169285478fa,47ca57118a372fcd527edd1d6a04cdf3f1d50664eb468847bc03439c09dab00e","ki-cache-type":"Edge","ki-edge":"v=28.6.1;mv=99.9.9","ki-origin":"o1i","unset":"X-Powered-By","x-content-type-options":"nosniff","x-kinsta-cache":"HIT","x-xss-protection":"1; mode=block","set-cookie":"__cf_bm=Fg222ncMepSFX9J6YUVZsBl6uDv9X9q2glLFB3nq0qI-1793398754.3991885-1.0.1.1-VRgHjR09GBFvhp4up2wkO2psX.4MBa9oehQ6CPIfe8MIHLpkP9mUcdmosXvmKYgd2rTqiaN7apkJAyWc532rgC5s6JLFHW4np2WCwZ4jvVHGEuOFDwOAyDgimQuzfm6S; HttpOnly; SameSite=None; Secure; Path=\/; Domain=theukdomain.uk; Expires=Fri, 30 Oct 2026 22:49:14 GMT","report-to":"{\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TwNJ9kOZGl5mgL3Ae6SxNO6pq7r3uJ%2Fh%2B7iiLvoQTYEnVh0Nch4CzZDbUXHybfSOIqP12bXpvGdMnpui5P7SHgbEN4otbAr7Ouw%2BzlUvdBzkdJvyFD3tErvPQ%2FH3Mmjf\"}]}","nel":"{\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}","content-encoding":"br","alt-svc":"h3=\":443\"; ma=86400"},"body_bytes":155964,"timings":{"dns_ms":0,"connect_ms":6,"tls_ms":0,"ttfb_ms":74,"total_ms":80},"title":"Home - The UK Domain"},"error":null,"loop":false},"https":{"start":"https:\/\/example.co.uk\/","hops":[{"url":"https:\/\/example.co.uk\/","ip":"104.21.2.18","status":301,"location":"https:\/\/theukdomain.uk","ms":50},{"url":"https:\/\/theukdomain.uk","ip":"162.159.134.42","status":200,"location":null,"ms":71}],"final":{"url":"https:\/\/theukdomain.uk","status":200,"ip":"162.159.134.42","http_version":"HTTP\/2","headers":{"date":"Fri, 30 Oct 2026 22:19:14 GMT","content-type":"text\/html; charset=UTF-8","cf-ray":"a52dcce7e9d0efe0-LHR","cf-cache-status":"HIT","age":"3305","cache-control":"public, max-age=0, s-maxage=3600","last-modified":"Fri, 30 Oct 2026 21:24:08 GMT","link":"<https:\/\/theukdomain.uk\/wp-json\/>; rel=\"https:\/\/api.w.org\/\", <https:\/\/theukdomain.uk\/wp-json\/wp\/v2\/pages\/7>; rel=\"alternate\"; title=\"JSON\"; type=\"application\/json\", <https:\/\/theukdomain.uk\/>; rel=shortlink","server":"cloudflare","strict-transport-security":"max-age=63072000","vary":"Accept-Encoding","ki-cf-cache-status":"HIT","x-edge-location-klb":"1","ki-cache-tag":"59f9da11-d01d-4c92-a5a6-9169285478fa,47ca57118a372fcd527edd1d6a04cdf3f1d50664eb468847bc03439c09dab00e","ki-cache-type":"Edge","ki-edge":"v=28.6.1;mv=99.9.9","ki-origin":"o1i","unset":"X-Powered-By","x-content-type-options":"nosniff","x-kinsta-cache":"HIT","x-xss-protection":"1; mode=block","set-cookie":"__cf_bm=99wyH2tQ9Wb7AjrRv1coBcDFtRi677LuAlMvHVs3LkA-1793398754.5509567-1.0.1.1-rWtQSTxMn__YmQSlq16JCMMBnR3dI8MYd0X79grent5OrrsEhMaeBCNpbZS9qQROEjyd_lq8f3qbxdBR8h5NeDd1tff_zT7U4Us.vjAuv0j6eN8IpU70swKyfUVw_YBb; HttpOnly; SameSite=None; Secure; Path=\/; Domain=theukdomain.uk; Expires=Fri, 30 Oct 2026 22:49:14 GMT","report-to":"{\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ID0Wxjapv2RNPYA5ZYbBR5qAx3%2FxWR6liMRliShRN7nGMB4owbobmWWkgqXQIAEhCxZv%2BItbH71OffOEnS9j3LE7j2gbhdUi4No2lWpNxDmAXEjs%2BzH4t%2FWDa%2FVC8%2FY1\"}]}","nel":"{\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}","content-encoding":"br","alt-svc":"h3=\":443\"; ma=86400"},"body_bytes":155964,"timings":{"dns_ms":0,"connect_ms":6,"tls_ms":0,"ttfb_ms":64,"total_ms":71},"title":"Home - The UK Domain"},"error":null,"loop":false},"tls":{"verified":true,"verify_error":null,"cert":{"subject":"example.co.uk","issuer":"Google Trust Services WE1","not_before":"2026-09-03T08:19:57+00:00","not_after":"2026-12-02T09:19:40+00:00","days_left":32,"sans":["example.co.uk","*.example.co.uk"],"matches_host":true,"key_type":"ECDSA","key_bits":256,"signature_algorithm":"ecdsa-with-SHA256","serial":"6DF96629F4BE40C60EB3577DF92AE6A7","self_signed":false},"chain":[{"subject":"example.co.uk","issuer":"WE1","not_after":"2026-12-02T09:19:40+00:00"},{"subject":"WE1","issuer":"GTS Root R4","not_after":"2029-02-20T14:00:00+00:00"},{"subject":"GTS Root R4","issuer":"GlobalSign Root CA","not_after":"2028-01-28T00:00:42+00:00"}],"negotiated":{"protocol":"TLSv1.3","cipher":"TLS_AES_256_GCM_SHA384","bits":256},"protocols":{"TLSv1":false,"TLSv1.1":false,"TLSv1.2":true,"TLSv1.3":true},"error":null},"headers":{"strict-transport-security":{"label":"HSTS","why":"Tells browsers to use HTTPS only.","value":"max-age=63072000"},"content-security-policy":{"label":"Content-Security-Policy","why":"Limits where scripts and content may load from.","value":null},"x-frame-options":{"label":"X-Frame-Options","why":"Blocks clickjacking by refusing to be framed.","value":null},"x-content-type-options":{"label":"X-Content-Type-Options","why":"Stops MIME-type sniffing.","value":"nosniff"},"referrer-policy":{"label":"Referrer-Policy","why":"Controls what URL is leaked to other sites.","value":null},"permissions-policy":{"label":"Permissions-Policy","why":"Limits browser features such as camera or geolocation.","value":null}},"probe":{"region":"lon1","ping":{"target":"104.21.2.18","resolved_ip":"104.21.2.18","elapsed_ms":625,"sent":4,"received":4,"loss_pct":0,"rtt":{"min":5.329,"avg":5.397,"max":5.494,"mdev":0.066},"replies":[{"seq":1,"ttl":58,"ms":5.33},{"seq":2,"ttl":58,"ms":5.43},{"seq":3,"ttl":58,"ms":5.49},{"seq":4,"ttl":58,"ms":5.34}],"error":null},"trace":{"target":"104.21.2.18","resolved_ip":"104.21.2.18","elapsed_ms":3021,"hops":[{"hop":1,"ip":"185.119.110.1","loss_pct":0,"sent":1,"rtts_ms":{"best":1.04,"avg":1.04,"worst":1.04,"last":1.04},"ptr":null},{"hop":2,"ip":"185.27.244.17","loss_pct":0,"sent":1,"rtts_ms":{"best":4.833,"avg":4.833,"worst":4.833,"last":4.833},"ptr":"xe-0-1-5.juniper2.cwcs.net"},{"hop":3,"ip":"185.27.244.24","loss_pct":0,"sent":1,"rtts_ms":{"best":4.713,"avg":4.713,"worst":4.713,"last":4.713},"ptr":"xe-0-1-0.juniper1.thw.cwcs.net"},{"hop":4,"ip":"195.66.225.179","loss_pct":0,"sent":1,"rtts_ms":{"best":16.501,"avg":16.501,"worst":16.501,"last":16.501},"ptr":"linx-lon1.as13335.net"},{"hop":5,"ip":"141.101.71.1","loss_pct":0,"sent":1,"rtts_ms":{"best":7.773,"avg":7.773,"worst":7.773,"last":7.773},"ptr":null},{"hop":6,"ip":"141.101.71.125","loss_pct":0,"sent":1,"rtts_ms":{"best":6.034,"avg":6.034,"worst":6.034,"last":6.034},"ptr":null},{"hop":7,"ip":"104.21.2.18","loss_pct":0,"sent":1,"rtts_ms":{"best":5.408,"avg":5.408,"worst":5.408,"last":5.408},"ptr":null}],"reached":true,"error":null},"ports":{"target":"104.21.2.18","resolved_ip":"104.21.2.18","ports":{"80":{"open":true,"connect_ms":5},"443":{"open":true,"connect_ms":5}}}},"hosting":{"ip":"104.21.2.18","asn":13335,"asn_name":"CLOUDFLARENET - Cloudflare, Inc., US","prefix":"104.21.0.0\/20","ptr":null,"provider":"Cloudflare"},"headers_grade":{"score":35,"grade":"D","checks":[{"key":"hsts","label":"Strict-Transport-Security","ok":true,"points":25,"max":25,"why":"Present with a six-month or longer max-age."},{"key":"csp","label":"Content-Security-Policy","ok":false,"points":0,"max":25,"why":"Missing: no defence in depth against injected scripts."},{"key":"nosniff","label":"X-Content-Type-Options","ok":true,"points":10,"max":10,"why":"nosniff stops MIME-type guessing."},{"key":"frame","label":"X-Frame-Options \/ frame-ancestors","ok":false,"points":0,"max":15,"why":"Missing: pages can be framed for click-jacking."},{"key":"referrer","label":"Referrer-Policy","ok":false,"points":0,"max":10,"why":"Missing: full URLs may leak to other sites."},{"key":"permissions","label":"Permissions-Policy","ok":false,"points":0,"max":10,"why":"Switches off browser features the site does not use."},{"key":"coop","label":"Cross-Origin-Opener-Policy","ok":false,"points":0,"max":5,"why":"Isolates the window from cross-origin openers."}],"penalties":["X-XSS-Protection is obsolete and can introduce problems in old browsers."]},"tls_score":{"score":100,"grade":"A","checks":[{"key":"valid","label":"Certificate within validity","ok":true,"points":25,"max":25,"why":"Valid for 32 more days."},{"key":"trusted","label":"Chain verifies to a trusted root","ok":true,"points":20,"max":20,"why":"Full chain sent and trusted."},{"key":"name","label":"Certificate matches the host name","ok":true,"points":10,"max":10,"why":"Host name is on the certificate."},{"key":"key","label":"Key strength","ok":true,"points":10,"max":10,"why":"ECDSA 256-bit."},{"key":"sig","label":"Signature algorithm","ok":true,"points":5,"max":5,"why":"ecdsa-with-sha256"},{"key":"legacy","label":"Legacy protocols refused","ok":true,"points":15,"max":15,"why":"TLS 1.0\/1.1 refused."},{"key":"tls13","label":"TLS 1.3 offered","ok":true,"points":10,"max":10,"why":"Modern clients get TLS 1.3."},{"key":"hsts","label":"HSTS sent","ok":true,"points":5,"max":5,"why":"Pins the browser to HTTPS after the first visit."}]}},"findings":[{"level":"pass","code":"WEB-HTTPS-OK","title":"Site answers over HTTPS","detail":"HTTP 200 in 71 ms","facet":"web"},{"level":"pass","code":"WEB-HTTP-REDIRECTS","title":"Plain HTTP redirects to HTTPS","detail":"https:\/\/theukdomain.uk","facet":"web"},{"level":"caution","code":"SEC-HEADERS-GRADE","title":"Security headers grade D","detail":"35 \/ 100 on our rubric","fix":"Add HSTS, a Content-Security-Policy, nosniff and frame-ancestors; see the Learn guide on security headers.","facet":"web"},{"level":"pass","code":"HSTS-OK","title":"HSTS is enabled","detail":"max-age=63072000","facet":"web"},{"level":"note","code":"CSP-MISSING","title":"No Content-Security-Policy","facet":"web"},{"level":"note","code":"XFO-MISSING","title":"No clickjacking protection (X-Frame-Options or frame-ancestors)","facet":"web"},{"level":"pass","code":"TLS-SCORE","title":"TLS score 100 (A)","detail":"On our published rubric: validity, trust, key, protocols, HSTS.","facet":"web"},{"level":"pass","code":"TLS-VALIDITY-OK","title":"Certificate valid for 32 more days","detail":"2026-12-02T09:19:40+00:00","facet":"web"},{"level":"pass","code":"TLS-TRUSTED","title":"Certificate chain verifies","detail":"Google Trust Services WE1","facet":"web"},{"level":"pass","code":"TLS-MODERN","title":"TLS 1.3 supported; legacy protocols refused","detail":"TLSv1.3","facet":"web"},{"level":"pass","code":"PING-OK","title":"Responds to ping from LON1","detail":"avg 5.397 ms","facet":"web"}],"raw":[]}