Exclusive overview of your website security scan for tsyndicate.com. The scan, conducted on 2025-01-07, focusing on HTTP Header Analysis. Our precise investigation detected 17 issues and pinpointed unusual activities.
HTTP Security Report Summary
- Passes tests: 0
- Failed tests: 17
- Total performed tests: 17
HTTP Security Headers
Failed
Critical! Without CSP, your site is wide open to cross-site scripting (XSS) attacks, risking data theft and site defacement.
Failed
Critical! Without CSP, malicious scripts could be executed on your site, leading to data breaches and other serious security issues.
Failed
Warning! Failing to implement this header exposes users to potential clickjacking attacks.
Failed
Warning! Without this header, your website may be more vulnerable to XSS attacks.
Failed
Warning! Not having this header could allow attackers to exploit MIME type vulnerabilities.
Failed
Warning! Without setting this header, sensitive information may be leaked through referrer URLs.
Failed
Warning! Lack of this header means less control over potentially security-sensitive browser features.
Failed
Critical! Without HPKP, your users may be exposed to fraudulent certificates, compromising secure connections.
Failed
Warning! Without proper CORS settings, unauthorized domains may access resources, potentially exposing sensitive data.
Failed
Warning! Without this header, your site's content might be embedded into malicious sites.
Failed
Warning! Lack of this header could allow attacks such as tab-nabbing.
Failed
Warning! Without it, unauthorized sites might use your resources in potentially harmful ways.
Failed
Warning! Failing to set this header leaves your users more exposed to certain types of attacks.
Failed
Warning! Without this header, connections might not adhere to Certificate Transparency requirements.
Failed
Warning! Without this, attackers might gather sensitive timing information.
Failed
Warning! Exposing the server signature might provide attackers with valuable information to exploit known vulnerabilities.
Info
This header is not found, and its absence has no impact on security.
Raw Headers
SSL/TLS Analysis
Passed
Sun, 02 Mar 2025 08:38:21 +0000
Passed
Let's Encrypt
Failed
Insecure TLS1.0 supported
Insecure TLS1.1 supported
OK TLS1.2 supported
OK TLS1.3 supported
Insecure SSLv2 supported
Insecure SSLv3 supported
Passed
OK - ECDHE-RSA-AES128-GCM-SHA256
OK - ECDHE-RSA-AES256-GCM-SHA384
OK - DHE-RSA-AES256-GCM-SHA384
OK - DHE-RSA-AES128-GCM-SHA256
OK - ECDHE-ECDSA-AES256-GCM-SHA384
OK - ECDHE-ECDSA-AES128-GCM-SHA256