{"engine":"web","target":"google.com","checked_at":"2026-10-29T19:50:22+00:00","cached":false,"duration_ms":3794,"error":null,"score":75,"counts":{"pass":6,"caution":2,"fail":1,"note":2,"skipped":0},"data":{"host":"google.com","ips":["142.251.30.138","142.251.30.139","142.251.30.100","142.251.30.113","142.251.30.101","142.251.30.102","2a00:1450:4009:c19:0:0:0:8a","2a00:1450:4009:c19:0:0:0:64","2a00:1450:4009:c19:0:0:0:66","2a00:1450:4009:c19:0:0:0:8b"],"http":{"start":"http:\/\/google.com\/","hops":[{"url":"http:\/\/google.com\/","ip":"142.251.30.138","status":301,"location":"http:\/\/www.google.com\/","ms":44},{"url":"http:\/\/www.google.com\/","ip":"142.251.151.119","status":200,"location":null,"ms":76}],"final":{"url":"http:\/\/www.google.com\/","status":200,"ip":"142.251.151.119","http_version":"HTTP\/1.1","headers":{"content-type":"text\/html; charset=UTF-8","date":"Thu, 29 Oct 2026 19:50:22 GMT","expires":"-1","cache-control":"private, max-age=0","content-security-policy-report-only":"object-src 'none';base-uri 'self';script-src 'nonce--f1T5qbyxLL4fjT19k2ONw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","content-encoding":"gzip","server":"gws","content-length":"32390","x-xss-protection":"0","x-frame-options":"SAMEORIGIN","set-cookie":"AEC=Aaa9EJoio-pjysgODa0sUgdGDbYuZIFFKd_6Z0B8z9CYhBuwdGRZEfQ50A; expires=Tue, 27-Apr-2027 19:50:22 GMT; path=\/; domain=.google.com; Secure; HttpOnly; SameSite=lax"},"body_bytes":90919,"timings":{"dns_ms":0,"connect_ms":6,"tls_ms":0,"ttfb_ms":68,"total_ms":76},"title":"Google"},"error":null,"loop":false},"https":{"start":"https:\/\/google.com\/","hops":[{"url":"https:\/\/google.com\/","ip":"142.251.30.138","status":301,"location":"https:\/\/www.google.com\/","ms":66},{"url":"https:\/\/www.google.com\/","ip":"142.251.155.119","status":200,"location":null,"ms":96}],"final":{"url":"https:\/\/www.google.com\/","status":200,"ip":"142.251.155.119","http_version":"HTTP\/2","headers":{"content-type":"text\/html; charset=UTF-8","date":"Thu, 29 Oct 2026 19:50:22 GMT","expires":"-1","cache-control":"private, max-age=0","content-security-policy-report-only":"object-src 'none';base-uri 'self';script-src 'nonce-RqOs5XY6JiHLwRSCheNzbw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https:\/\/csp.withgoogle.com\/csp\/gws\/other-hp","accept-ch":"Sec-CH-Prefers-Color-Scheme","p3p":"CP=\"This is not a P3P policy! See g.co\/p3phelp for more info.\"","content-encoding":"gzip","server":"gws","content-length":"32754","x-xss-protection":"0","x-frame-options":"SAMEORIGIN","set-cookie":"__Secure-ENID=CvABCAISogEBY3DFemRuInPkMpPMJk4LOQYB6jxD5UY-GF9S-4p5D3NKv1_Dl0v3tYlp_gQ3cZvDa3zrFKd-SeQW7WxP6klvOPHU7XTMqqzTOhdeZ99vY7U1Kym0EfVWKoKW96Oi3YjDJNqf1YmiKkvuXGRaZYsw7mKLxqQYMBGGFFT2NYY09VKMN5Ffp2wvG0qyqzti-kEI-iwvBQKa5d3TNeHiQDtYevAoAjJFAfsI_Gr0YA46FFxMXz1UYeaSrGDG-G26wAA2sPNSIU3TCU3okoY4wrTZg1Uvv134feVT2ToWdRBHM0eUSWsnIwKlzrcA; expires=Mon, 29-Nov-2027 12:08:40 GMT; path=\/; domain=.google.com; Secure; HttpOnly; SameSite=lax","alt-svc":"h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000"},"body_bytes":91574,"timings":{"dns_ms":0,"connect_ms":6,"tls_ms":0,"ttfb_ms":90,"total_ms":96},"title":"Google"},"error":null,"loop":false},"tls":{"verified":true,"verify_error":null,"cert":{"subject":"*.google.com","issuer":"Google Trust Services WE2","not_before":"2026-09-28T18:38:33+00:00","not_after":"2026-12-21T18:38:32+00:00","days_left":52,"sans":["*.google.com","*.appengine.google.com","*.bdn.dev","*.origin-test.bdn.dev","*.cloud.google.com","*.crowdsource.google.com","*.datacompute.google.com","*.google.ca","*.google.cl","*.google.co.in","*.google.co.jp","*.google.co.uk","*.google.com.ar","*.google.com.au","*.google.com.br","*.google.com.co","*.google.com.mx","*.google.com.tr","*.google.com.vn","*.google.de","*.google.es","*.google.fr","*.google.hu","*.google.it","*.google.nl","*.google.pl","*.google.pt","*.gemini.cloud.google.com","*.gstatic.com","*.metric.gstatic.com","*.gvt1.com","*.gcpcdn.gvt1.com","*.gvt2.com","*.gcp.gvt2.com","*.url.google.com","*.youtube-nocookie.com","*.ytimg.com","ai.android","android.com","*.android.com","*.flash.android.com","g.co","*.g.co","goo.gl","www.goo.gl","google-analytics.com","*.google-analytics.com","google.com","googlecommerce.com","*.googlecommerce.com","urchin.com","*.urchin.com","youtu.be","youtube.com","*.youtube.com","music.youtube.com","*.music.youtube.com","youtubeeducation.com","*.youtubeeducation.com","youtubekids.com","*.youtubekids.com","yt.be","*.yt.be","android.clients.google.com","*.aistudio.google.com"],"matches_host":true,"key_type":"ECDSA","key_bits":256,"signature_algorithm":"ecdsa-with-SHA256","serial":"A35B6BB056EFA86B10FC98B413F6EFE9","self_signed":false},"chain":[{"subject":"*.google.com","issuer":"WE2","not_after":"2026-12-21T18:38:32+00:00"},{"subject":"WE2","issuer":"GTS Root R4","not_after":"2029-02-20T14:00:00+00:00"},{"subject":"GTS Root R4","issuer":"GlobalSign Root CA","not_after":"2028-01-28T00:00:42+00:00"}],"negotiated":{"protocol":"TLSv1.3","cipher":"TLS_AES_256_GCM_SHA384","bits":256},"protocols":{"TLSv1":false,"TLSv1.1":false,"TLSv1.2":true,"TLSv1.3":true},"error":null},"headers":{"strict-transport-security":{"label":"HSTS","why":"Tells browsers to use HTTPS only.","value":null},"content-security-policy":{"label":"Content-Security-Policy","why":"Limits where scripts and content may load from.","value":null},"x-frame-options":{"label":"X-Frame-Options","why":"Blocks clickjacking by refusing to be framed.","value":"SAMEORIGIN"},"x-content-type-options":{"label":"X-Content-Type-Options","why":"Stops MIME-type sniffing.","value":null},"referrer-policy":{"label":"Referrer-Policy","why":"Controls what URL is leaked to other sites.","value":null},"permissions-policy":{"label":"Permissions-Policy","why":"Limits browser features such as camera or geolocation.","value":null}},"probe":{"region":"lon1","ping":{"target":"142.251.30.138","resolved_ip":"142.251.30.138","elapsed_ms":626,"sent":4,"received":4,"loss_pct":0,"rtt":{"min":10.803,"avg":10.815,"max":10.83,"mdev":0.01},"replies":[{"seq":1,"ttl":108,"ms":10.8},{"seq":2,"ttl":108,"ms":10.8},{"seq":3,"ttl":108,"ms":10.8},{"seq":4,"ttl":108,"ms":10.8}],"error":null},"trace":{"target":"142.251.30.138","resolved_ip":"142.251.30.138","elapsed_ms":3031,"hops":[{"hop":1,"ip":"185.119.110.1","loss_pct":0,"sent":1,"rtts_ms":{"best":1.194,"avg":1.194,"worst":1.194,"last":1.194},"ptr":null},{"hop":2,"ip":"185.27.244.17","loss_pct":0,"sent":1,"rtts_ms":{"best":7.738,"avg":7.738,"worst":7.738,"last":7.738},"ptr":"xe-0-1-5.juniper2.cwcs.net"},{"hop":3,"ip":"185.27.244.24","loss_pct":0,"sent":1,"rtts_ms":{"best":4.887,"avg":4.887,"worst":4.887,"last":4.887},"ptr":"xe-0-1-0.juniper1.thw.cwcs.net"},{"hop":4,"ip":"195.66.224.125","loss_pct":0,"sent":1,"rtts_ms":{"best":4.894,"avg":4.894,"worst":4.894,"last":4.894},"ptr":null},{"hop":5,"ip":"142.251.30.138","loss_pct":0,"sent":1,"rtts_ms":{"best":5.648,"avg":5.648,"worst":5.648,"last":5.648},"ptr":"sv-in-f138.1e100.net"}],"reached":true,"error":null},"ports":{"target":"142.251.30.138","resolved_ip":"142.251.30.138","ports":{"80":{"open":true,"connect_ms":6},"443":{"open":true,"connect_ms":5}}}},"hosting":{"ip":"142.251.30.138","asn":15169,"asn_name":"GOOGLE - Google LLC, US","prefix":"142.251.30.0\/24","ptr":"sv-in-f138.1e100.net","provider":"Google Cloud"},"headers_grade":{"score":15,"grade":"F","checks":[{"key":"hsts","label":"Strict-Transport-Security","ok":false,"points":0,"max":25,"why":"Missing: browsers keep trying plain HTTP."},{"key":"csp","label":"Content-Security-Policy","ok":false,"points":0,"max":25,"why":"Missing: no defence in depth against injected scripts."},{"key":"nosniff","label":"X-Content-Type-Options","ok":false,"points":0,"max":10,"why":"nosniff stops MIME-type guessing."},{"key":"frame","label":"X-Frame-Options \/ frame-ancestors","ok":true,"points":15,"max":15,"why":"Pages cannot be framed by other sites."},{"key":"referrer","label":"Referrer-Policy","ok":false,"points":0,"max":10,"why":"Missing: full URLs may leak to other sites."},{"key":"permissions","label":"Permissions-Policy","ok":false,"points":0,"max":10,"why":"Switches off browser features the site does not use."},{"key":"coop","label":"Cross-Origin-Opener-Policy","ok":false,"points":0,"max":5,"why":"Isolates the window from cross-origin openers."}],"penalties":[]},"tls_score":{"score":95,"grade":"A","checks":[{"key":"valid","label":"Certificate within validity","ok":true,"points":25,"max":25,"why":"Valid for 52 more days."},{"key":"trusted","label":"Chain verifies to a trusted root","ok":true,"points":20,"max":20,"why":"Full chain sent and trusted."},{"key":"name","label":"Certificate matches the host name","ok":true,"points":10,"max":10,"why":"Host name is on the certificate."},{"key":"key","label":"Key strength","ok":true,"points":10,"max":10,"why":"ECDSA 256-bit."},{"key":"sig","label":"Signature algorithm","ok":true,"points":5,"max":5,"why":"ecdsa-with-sha256"},{"key":"legacy","label":"Legacy protocols refused","ok":true,"points":15,"max":15,"why":"TLS 1.0\/1.1 refused."},{"key":"tls13","label":"TLS 1.3 offered","ok":true,"points":10,"max":10,"why":"Modern clients get TLS 1.3."},{"key":"hsts","label":"HSTS sent","ok":false,"points":0,"max":5,"why":"Pins the browser to HTTPS after the first visit."}]}},"findings":[{"level":"pass","code":"WEB-HTTPS-OK","title":"Site answers over HTTPS","detail":"HTTP 200 in 96 ms","facet":"web"},{"level":"caution","code":"WEB-HTTP-NO-REDIRECT","title":"Plain HTTP serves content instead of redirecting to HTTPS","fix":"Redirect http:\/\/ to https:\/\/ with a 301.","facet":"web"},{"level":"fail","code":"SEC-HEADERS-GRADE","title":"Security headers grade F","detail":"15 \/ 100: almost no browser protections are declared.","fix":"Start with Strict-Transport-Security and X-Content-Type-Options, then add a Content-Security-Policy in report-only mode.","facet":"web"},{"level":"caution","code":"HSTS-MISSING","title":"No HTTP Strict Transport Security header","detail":"Browsers may still try plain HTTP first on each visit.","fix":"Send \"Strict-Transport-Security: max-age=31536000; includeSubDomains\".","facet":"web"},{"level":"note","code":"CSP-MISSING","title":"No Content-Security-Policy","facet":"web"},{"level":"note","code":"NOSNIFF-MISSING","title":"No X-Content-Type-Options header","facet":"web"},{"level":"pass","code":"TLS-SCORE","title":"TLS score 95 (A)","detail":"On our published rubric: validity, trust, key, protocols, HSTS.","facet":"web"},{"level":"pass","code":"TLS-VALIDITY-OK","title":"Certificate valid for 52 more days","detail":"2026-12-21T18:38:32+00:00","facet":"web"},{"level":"pass","code":"TLS-TRUSTED","title":"Certificate chain verifies","detail":"Google Trust Services WE2","facet":"web"},{"level":"pass","code":"TLS-MODERN","title":"TLS 1.3 supported; legacy protocols refused","detail":"TLSv1.3","facet":"web"},{"level":"pass","code":"PING-OK","title":"Responds to ping from LON1","detail":"avg 10.815 ms","facet":"web"}],"raw":[]}