Security Report Summary
D
Site: https://www.metrowebsites.com/domains/quotenearme-com/
IP Address: 212.71.124.188
Report Time: 12 Sep 2026 08:35:37 UTC
Headers:
  • Strict-Transport-Security
  • Content-Security-Policy
  • X-Frame-Options
  • X-Content-Type-Options
  • Referrer-Policy
  • Permissions-Policy
Advanced:
Your site could be at risk, let’s perform a deeper security analysis of your site and APIs:
Missing Headers
Content-Security-PolicyContent Security Policy is an effective measure to protect your site from XSS attacks. By whitelisting sources of approved content, you can prevent the browser from loading malicious assets.
X-Frame-OptionsX-Frame-Options tells the browser whether you want to allow your site to be framed or not. By preventing a browser from framing your site you can defend against attacks like clickjacking. Recommended value "X-Frame-Options: SAMEORIGIN".
X-Content-Type-OptionsX-Content-Type-Options stops a browser from trying to MIME-sniff the content type and forces it to stick with the declared content-type. The only valid value for this header is "X-Content-Type-Options: nosniff".
Referrer-PolicyReferrer Policy is a new header that allows a site to control how much information the browser includes with navigations away from a document and should be set by all sites.
Permissions-PolicyPermissions Policy is a new header that allows a site to control which features and APIs can be used in the browser.
Raw Headers
HTTP/2200
content-typetext/html
content-encodinggzip
set-cookieic_env=ic%5Froot%5Fkey%3D308182301d060d2b0601040182dc7c0503010201060c2b0601040182dc7c05030201036100814c0e6ec71fab583b08bd81373c255c3c371b2e84863c98a4f1e08b74235d14fb5d9c0cd546d9685f913a0c0b2cc5341583bf4b4392e467db96d65b9bb4cb717112f8472e0d5a4d14505ffd7484b01291091c5f87b98883463f98091a0baaae; Secure; SameSite=None; Partitioned
etag"27408b96a930a69967aab14bdd452e9675297fda6139f03d4e62d049c8e45729"
ic-certificateexpressiondefault_certification(ValidationArgs{certification: Certification{no_request_certification: Empty{}, response_certification: ResponseCertification{certified_response_headers: ResponseHeaderList{headers: ["content-type", "content-encoding", "set-cookie", "etag"]}}}})
ic-certificateversion=2, certificate=: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:, tree=:2dn3gwJJaHR0cF9leHBygwGDAYIEWCDaie0VtrDDsAiC/Fg7NA74k/BDdUSpeGIfxSmQxJpFgoMBggRYIN143tVthi60SPnZArWCPlBQWRZcc0gLQmCtKxh2poHkgwGCBFggbqdwLl9Cch5OLp5O3Z+BUw16TzltphfCUhTSbd0ql/WDAYMCR2RvbWFpbnODAYIEWCDlOjeQ7JydCoPY58ZMPlZJ6Ek5+P3OIrv6cTF69E+t1IMBggRYIGIumGdLhCQN8xhmrRslVGO94UaiXyth+boRlLWAjEdpgwGDAYIEWCDx2JAMhLeuH6+O07exsOfMEgPFIZgxHuvVjCqlvgNuOYMBggRYIFFAYPmkARpnSN6W9m+ou84qlKNf72S1rB4LKQf3+1d3gwGDAYIEWCBpdIrK2VTyi+sABPZpfUfwmCuAj0IBcExc2Rbfc+pPZoMBggRYIKgyxNdW0ueT4YAp7wETFjry+3YZ21iewWY/ji7ylpkFgwGDAYIEWCAKAnUQDrM5vk4EKOV/i/RLzAi6ye5VOuPus+1gfkXfgoMBggRYIGGcjvc+5sZUtvJ+/o9Wyptv+d1dmmZa4iw775VVQ4zXgwGCBFggWwvrxP9jZ63CJekJjFTtfwxwgyr4W5D1ulE+jVoofN+DAYMCT3F1b3RlbmVhcm1lLWNvbYMBgwJAgwJDPCQ+gwGDAlggXFf6IFs3j8gzzB4QuKooXVGsP6nElp9d1QwcyWWk7dmDAkCDAYMBgwJYIGp4yccZJMm6S4HAZjgK98p8ZHIcV/1xiQBZKTddL9sfggNAgwJYIH8Fbts2V4yxa4r+eUXwyTg4Iz/siThN/lgXVK8YodazggNAgwGDAlgg4Qj+zTfSZ6ymYM4btR3n0Fp/LHWlXq1x0g5lK+dawGGCA0CDAlgg/KJ7WorS92AIaZ9GQneDiSuWmxmX8T31uhUubWGTB/uCA0CDAlggyW+E+b5XCTHMDKAeZnaTmzhEEd5PCvQXBvvpSBGZS6ODAkCDAYMCWCANG0Ou6AM94S8+QDJst0hVLzgi/ocrYPG5h4jY0Fg2zIIDQIMCWCC/I2ReODJ56cWX24ncZr7twOgnobfbiUjwdY6rhDJ1SYIDQIIEWCB6vQ6He0Iv9ssUuXWgLJvsbYno3yp7KgAddD2zQki+poIEWCCbMmZWpBizn+a8UmhIo7av8t5LxQJ0wE4HXxBjwAaLkIIEWCARivG30MJRFtOXZ1RCuyW8JeKSlrQ3c/SUJQBIeCkjz4IEWCBFY294dp8naU9GE+x/TmB21N8GvVDN05C9in3f2RqHfIIEWCARLnZ5pggnnsz7SA2AwShvsgmHJCIm9YW+8L8C5tMwt4IEWCCHVUwcQUc5RPwhSbRfFGEu63g7gvTU9gY6RYO25hTtzYIEWCDdMRyD0VGQ1AP7zVpnSXK0vn7w1dos99GMOhecQCXptQ==:, expr_path=:2dn3hWlodHRwX2V4cHJnZG9tYWluc29xdW90ZW5lYXJtZS1jb21gYzwkPg==:
x-cache-ttl10
access-control-expose-headersaccept-ranges, content-length, content-range, x-request-id, x-ic-canister-id
access-control-allow-origin*
varyorigin, access-control-request-method, access-control-request-headers
content-length1025
x-ic-canister-idh5ahc-cyaaa-aaaaj-qr2vq-cai
strict-transport-securitymax-age=31536000; includeSubDomains
x-request-id01a094c2-0030-76f1-9a0d-501b10bd5609
dateSat, 12 Sep 2026 08:35:37 GMT
Upcoming Headers
Cross-Origin-Embedder-PolicyCross-Origin Embedder Policy allows a site to prevent assets being loaded that do not grant permission to load them via CORS or CORP.
Cross-Origin-Opener-PolicyCross-Origin Opener Policy allows a site to opt-in to Cross-Origin Isolation in the browser.
Cross-Origin-Resource-PolicyCross-Origin Resource Policy allows a resource owner to specify who can load the resource.
Additional Information
access-control-allow-originThis is a very lax CORS policy. Such a policy should only be used on a public CDN.
strict-transport-securityHTTP Strict Transport Security is an excellent feature to support on your site and strengthens your implementation of TLS by getting the User Agent to enforce the use of HTTPS.