Security Report Summary
R
Redirect: Click here to follow the redirect to https://www.metrowebsites.com/domains/quotenearme-com/.
Site: https://www.metrowebsites.com/domains/quotenearme-com
IP Address: 212.71.124.188
Report Time: 06 Nov 2026 19:12:09 UTC
Headers:
  • Strict-Transport-Security
  • Content-Security-Policy
  • X-Frame-Options
  • X-Content-Type-Options
  • Referrer-Policy
  • Permissions-Policy
Advanced:
Perform a deeper security analysis of your website and APIs:
Missing Headers
Content-Security-PolicyContent Security Policy is an effective measure to protect your site from XSS attacks. By whitelisting sources of approved content, you can prevent the browser from loading malicious assets.
X-Frame-OptionsX-Frame-Options tells the browser whether you want to allow your site to be framed or not. By preventing a browser from framing your site you can defend against attacks like clickjacking. Recommended value "X-Frame-Options: SAMEORIGIN".
X-Content-Type-OptionsX-Content-Type-Options stops a browser from trying to MIME-sniff the content type and forces it to stick with the declared content-type. The only valid value for this header is "X-Content-Type-Options: nosniff".
Referrer-PolicyReferrer Policy is a new header that allows a site to control how much information the browser includes with navigations away from a document and should be set by all sites.
Permissions-PolicyPermissions Policy is a new header that allows a site to control which features and APIs can be used in the browser.
Warnings
Response is not HTMLThe content-type of the response does not indicate HTML. Not all headers, and therefore the score, may be appropriate.
Raw Headers
HTTP/2307
content-typetext/plain
location/domains/quotenearme-com/
ic-certificateexpressiondefault_certification(ValidationArgs{certification: Certification{no_request_certification: Empty{}, response_certification: ResponseCertification{certified_response_headers: ResponseHeaderList{headers: ["content-type", "content-type", "location"]}}}})
ic-certificateversion=2, certificate=:2dn3o2R0cmVlgwGDAYMBggRYIMsWkh4PB/HJqaIt99m/VboAk35SGLmUizdYwIeriK7VgwJIY2FuaXN0ZXKDAYIEWCB0+LYpNmi/wmbrRuL3Or+b5V6UfGR23JtwgbmzJzDQpYMBgwGCBFggYcZjae7pxnGCG9/sBAaEsQr83dC2hfYXYTL1fFxALgmDAYIEWCB4u/R2AxRhV0KIY96kinGVrh4KfyI4ZOEbylAfPJS2roMBgwGCBFggbj8rY8S4UDq4FsJfDnscP/cXKUE/cqAZ/e8hT5Rf7kmDAYMBggRYIJ5lOExQueOxykIOnI5YX0lcWxtp7zYqDDRfxyXzSTvNgwGDAYIEWCBHEdlOgkgw9+ryjY04UlNOoeaErZdcHxnYkjzzo1zEF4MBgwGDAYMBgwJKAAAAAAEwjqsBAYMBgwGDAYMCTmNlcnRpZmllZF9kYXRhggNYIEc3pK4HxlljdSgqGk/Gdbk0xL0FeaJ4G+TXGI5GwntVggRYIFT1R8eQR2h09oFX7ICl729YqR/etwTxoetbA507m+G9ggRYIKZYZMB5LpJPUhXGZPm0jTqVkF/pNc1qhHoA3Jas8b8oggRYIKIdTcmkiLngSxtyF5H23QlMW/bjZInO+UIZIJxsBr8gggRYIE4roJR5YvfcIagoZTp27RAoDFdZyfZ2B/E4i2NOA+C/ggRYIPIBbtOZTiuLJ3P7hPwqGj1tE5+uNu6rA7kst6ePoV1aggRYII/Ux1DA4iBLYiUEblCN1fdpA/u/pZFEUpo6h1t1RuDlggRYIGFW2sLTf7JK1kLRJQHxU37TuaHy9OZEDhMPXoOZI/lsggRYIMxE0dQH6Iz4AZz5gWel7rdFRpgVboBgRdE43Da6RdI2ggRYIFtAEe8U6sQKmCU2xqHv26LIZ0Lj0jI1dJUgV+bxA7eAggRYIOvdoruY3yFstk8ECgp1EA/k2yZe/hP6ptrROGq4KmEBggRYIIXcOALThrL26fyOlEO1/oH8I64pc4PP+I3V70eEh/+WggRYIKMUfk/jqsntAv4Z/VYDNQHHdxeNE2mYRqZ0GhWdH0ongwGCBFgg9wJUGnqaOJkLGvPcaipkKVH22GqAEmsDa7OaHj7lVt2DAYIEWCB5RHfdYdC/30CIey+1p4Hy4AigtiOfDxFjLtjsSNDYDIMCRHRpbWWCA0m/i7mLx9Di8hhpc2lnbmF0dXJlWDCVAp8eqCkHty5y2CrltgjEWuWRjsVltkOJsVLsUXFW6iC97+NsGjarzT0JCsIOx4pqZGVsZWdhdGlvbqJpc3VibmV0X2lkWB3+Mg8vu7nUnI5u28ydhewJa/ZFNR2Vu931VvfbAmtjZXJ0aWZpY2F0ZVkDDtnZ96JkdHJlZYMBgwGCBFgg4sdwIIx1bzmRrNaCObFb5pvmhMxdugheChdxJK1/haGDAYMCT2NhbmlzdGVyX3Jhbmdlc4MBggRYIKp43P++/w0StP38mpnW1n8sE+v1+sGxk1sQt7xmdSYlgwGCBFgg9aDYdp10wvkFcAypT/DaFh/lIuvZ1xGToRLn+Dw0moyDAYIEWCBRPgP8Gu/uyqqhRxEViz+Y2sUyYqqF8yuX8qpSOtVbGIMCWB3+Mg8vu7nUnI5u28ydhewJa/ZFNR2Vu931VvfbAoMCSgAAAAABMAAAAQGCA1gb2dn3gYJKAAAAAAEwAAABAUoAAAAAAT///wEBggRYIEVEoDkf8eCeTKDK8Lbaa5Vg0lcYgvP8BMI10u6xZai3gwGCBFggXPdYyUIWYpQD1mB2e9BP4HScx9bgzK0ujwEPp5RGK3eDAYMCRnN1Ym5ldIMBggRYIP2Gr1zxUGjiilJR11uQ5Fspp6k1dFsy3LRdwyfRpMKlgwGCBFggQcltDyFoIBl+VYfW6UCIyDocjg0iGRzRzG5R0nXSjPGDAYIEWCA8pobPagaEYxltWK0qpTLZB5lVcUU8LHx8B0+GgnG8a4MCWB3+Mg8vu7nUnI5u28ydhewJa/ZFNR2Vu931VvfbAoMBgwGCBFgg1Mn0VBqJUcvPABS03RnSk0Y7vrX4L591j+8xLgrQFnGDAkpwdWJsaWNfa2V5ggNYhTCBgjAdBg0rBgEEAYLcfAUDAQIBBgwrBgEEAYLcfAUDAgEDYQCypnQQg5liI/gzhGZnQKPqz4znjG05/s3uWCpbJDwVhwa7IV85a6BCnSGI357xdnITBtBIqqWPa0E0V91j7xpW3iN45xykRCAeKeSQ43kAmOku6F4BQqM++AbIOIrsa6+DAkR0eXBlggNLYXBwbGljYXRpb26DAkR0aW1lggNJzsrmoZjM4vIYaXNpZ25hdHVyZVgwrv/a4EKjNbHGMTeeRD7zqCy3FFzA+PRVx4fFzWLU6c9EhgHjIuHYy0NFBTSUZFyO:, tree=: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:, expr_path=:2dn3hGlodHRwX2V4cHJnZG9tYWluc29xdW90ZW5lYXJtZS1jb21jPCQ+:
access-control-expose-headersaccept-ranges, content-length, content-range, x-request-id, x-ic-canister-id
access-control-allow-origin*
varyorigin, access-control-request-method, access-control-request-headers
content-length0
x-ic-canister-idh5ahc-cyaaa-aaaaj-qr2vq-cai
strict-transport-securitymax-age=31536000; includeSubDomains
x-request-id01a1b246-864a-7431-be6a-2b7e2fe659cd
dateFri, 06 Nov 2026 19:12:09 GMT
Upcoming Headers
Cross-Origin-Embedder-PolicyCross-Origin Embedder Policy allows a site to prevent assets being loaded that do not grant permission to load them via CORS or CORP.
Cross-Origin-Opener-PolicyCross-Origin Opener Policy allows a site to opt-in to Cross-Origin Isolation in the browser.
Cross-Origin-Resource-PolicyCross-Origin Resource Policy allows a resource owner to specify who can load the resource.
Additional Information
access-control-allow-originThis is a very lax CORS policy. Such a policy should only be used on a public CDN.
strict-transport-securityHTTP Strict Transport Security is an excellent feature to support on your site and strengthens your implementation of TLS by getting the User Agent to enforce the use of HTTPS.