Security Report Summary
D
Site: https://www.metrowebsites.com/domains/quotenearme-com/
IP Address: 212.71.124.188
Report Time: 06 Nov 2026 22:54:32 UTC
Headers:
  • Strict-Transport-Security
  • Content-Security-Policy
  • X-Frame-Options
  • X-Content-Type-Options
  • Referrer-Policy
  • Permissions-Policy
Advanced:
Your site could be at risk, let’s perform a deeper security analysis of your site and APIs:
Missing Headers
Content-Security-PolicyContent Security Policy is an effective measure to protect your site from XSS attacks. By whitelisting sources of approved content, you can prevent the browser from loading malicious assets.
X-Frame-OptionsX-Frame-Options tells the browser whether you want to allow your site to be framed or not. By preventing a browser from framing your site you can defend against attacks like clickjacking. Recommended value "X-Frame-Options: SAMEORIGIN".
X-Content-Type-OptionsX-Content-Type-Options stops a browser from trying to MIME-sniff the content type and forces it to stick with the declared content-type. The only valid value for this header is "X-Content-Type-Options: nosniff".
Referrer-PolicyReferrer Policy is a new header that allows a site to control how much information the browser includes with navigations away from a document and should be set by all sites.
Permissions-PolicyPermissions Policy is a new header that allows a site to control which features and APIs can be used in the browser.
Raw Headers
HTTP/2200
content-typetext/html
content-encodinggzip
set-cookieic_env=ic%5Froot%5Fkey%3D308182301d060d2b0601040182dc7c0503010201060c2b0601040182dc7c05030201036100814c0e6ec71fab583b08bd81373c255c3c371b2e84863c98a4f1e08b74235d14fb5d9c0cd546d9685f913a0c0b2cc5341583bf4b4392e467db96d65b9bb4cb717112f8472e0d5a4d14505ffd7484b01291091c5f87b98883463f98091a0baaae; Secure; SameSite=None; Partitioned
etag"1130d470d8bce0641069294bcaabe5b6a2a39726227fa7f28057d12eced3c59c"
ic-certificateexpressiondefault_certification(ValidationArgs{certification: Certification{no_request_certification: Empty{}, response_certification: ResponseCertification{certified_response_headers: ResponseHeaderList{headers: ["content-type", "content-encoding", "set-cookie", "etag"]}}}})
ic-certificateversion=2, certificate=:2dn3o2R0cmVlgwGDAYMBggRYIMsWkh4PB/HJqaIt99m/VboAk35SGLmUizdYwIeriK7VgwJIY2FuaXN0ZXKDAYIEWCAbvaBAnwkuJ0lbjFqkI4SVX9CkHbrRlTUEgKh7s/yXDoMBgwGCBFggYcZjae7pxnGCG9/sBAaEsQr83dC2hfYXYTL1fFxALgmDAYIEWCDgfuiU9XA2cWmB/pkgT7+tnZuPHui0pmud8oaK452UyoMBgwGCBFggbj8rY8S4UDq4FsJfDnscP/cXKUE/cqAZ/e8hT5Rf7kmDAYMBggRYIJ5lOExQueOxykIOnI5YX0lcWxtp7zYqDDRfxyXzSTvNgwGDAYIEWCBHEdlOgkgw9+ryjY04UlNOoeaErZdcHxnYkjzzo1zEF4MBgwGDAYMBgwJKAAAAAAEwjqsBAYMBgwGDAYMCTmNlcnRpZmllZF9kYXRhggNYIEc3pK4HxlljdSgqGk/Gdbk0xL0FeaJ4G+TXGI5GwntVggRYIFT1R8eQR2h09oFX7ICl729YqR/etwTxoetbA507m+G9ggRYIKZYZMB5LpJPUhXGZPm0jTqVkF/pNc1qhHoA3Jas8b8oggRYIKIdTcmkiLngSxtyF5H23QlMW/bjZInO+UIZIJxsBr8gggRYIE4roJR5YvfcIagoZTp27RAoDFdZyfZ2B/E4i2NOA+C/ggRYIPIBbtOZTiuLJ3P7hPwqGj1tE5+uNu6rA7kst6ePoV1aggRYII/Ux1DA4iBLYiUEblCN1fdpA/u/pZFEUpo6h1t1RuDlggRYIGFW2sLTf7JK1kLRJQHxU37TuaHy9OZEDhMPXoOZI/lsggRYIMxE0dQH6Iz4AZz5gWel7rdFRpgVboBgRdE43Da6RdI2ggRYIFtAEe8U6sQKmCU2xqHv26LIZ0Lj0jI1dJUgV+bxA7eAggRYIFlQt+Xloh8WSPvQLBiKYGdcDVYyDZToskIEpy9ga2BrggRYIPQv5Wmkf9+dtyLbJL5rmpnHOOL1o0FROMOvinuw7r3RggRYIPlhZHGfDqAbztLboLaRKYHkGd5UGNqV1hCkU1Nig4BrgwGCBFggh5Xiwi1JXOhSmBdLRBlTF5VBSW6jJ+sytHgasy0VIi2DAYIEWCDx5h7ivSNfrQ7b5TGLIBgIicKSurBq0x76TzAf1YorzIMCRHRpbWWCA0nule6X8dTl8hhpc2lnbmF0dXJlWDCXvo7G13u8Ei4ExJIg5a23GNyyHJmLOgPBuOv1OJPx6IODKMe4dpLjmSOBnDDO0N9qZGVsZWdhdGlvbqJpc3VibmV0X2lkWB3+Mg8vu7nUnI5u28ydhewJa/ZFNR2Vu931VvfbAmtjZXJ0aWZpY2F0ZVkDDtnZ96JkdHJlZYMBgwGCBFgghev49Qg98PqsJk80WQQplOZLznzok/UQvPX/KWM4xhODAYMCT2NhbmlzdGVyX3Jhbmdlc4MBggRYIKp43P++/w0StP38mpnW1n8sE+v1+sGxk1sQt7xmdSYlgwGCBFgg9aDYdp10wvkFcAypT/DaFh/lIuvZ1xGToRLn+Dw0moyDAYIEWCBRPgP8Gu/uyqqhRxEViz+Y2sUyYqqF8yuX8qpSOtVbGIMCWB3+Mg8vu7nUnI5u28ydhewJa/ZFNR2Vu931VvfbAoMCSgAAAAABMAAAAQGCA1gb2dn3gYJKAAAAAAEwAAABAUoAAAAAAT///wEBggRYIBmXYLcUUXaSZtBUi4x/bEUlDL8+u3TjEbIPRnTmatTWgwGCBFggejyRh+gadvMmW9+HcSYIux9tTRoeGarybjXD+4hci52DAYMCRnN1Ym5ldIMBggRYIP2Gr1zxUGjiilJR11uQ5Fspp6k1dFsy3LRdwyfRpMKlgwGCBFggPmoRHhU87FZ6YeqN+V19Nl5QEZA895QMHGVtECTGDkuDAYIEWCA8pobPagaEYxltWK0qpTLZB5lVcUU8LHx8B0+GgnG8a4MCWB3+Mg8vu7nUnI5u28ydhewJa/ZFNR2Vu931VvfbAoMBgwGCBFgg1Mn0VBqJUcvPABS03RnSk0Y7vrX4L591j+8xLgrQFnGDAkpwdWJsaWNfa2V5ggNYhTCBgjAdBg0rBgEEAYLcfAUDAQIBBgwrBgEEAYLcfAUDAgEDYQCypnQQg5liI/gzhGZnQKPqz4znjG05/s3uWCpbJDwVhwa7IV85a6BCnSGI357xdnITBtBIqqWPa0E0V91j7xpW3iN45xykRCAeKeSQ43kAmOku6F4BQqM++AbIOIrsa6+DAkR0eXBlggNLYXBwbGljYXRpb26DAkR0aW1lggNJx7WE5trS5fIYaXNpZ25hdHVyZVgwioqPuCpZ1soP/eGzcq29ELNLH6Bl7PGWGrzGNn9wkoiKEC6Ml85es1UWxaYUypXD:, tree=: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:, expr_path=:2dn3hWlodHRwX2V4cHJnZG9tYWluc29xdW90ZW5lYXJtZS1jb21gYzwkPg==:
x-cache-ttl10
access-control-expose-headersaccept-ranges, content-length, content-range, x-request-id, x-ic-canister-id
access-control-allow-origin*
varyorigin, access-control-request-method, access-control-request-headers
content-length1035
x-ic-canister-idh5ahc-cyaaa-aaaaj-qr2vq-cai
strict-transport-securitymax-age=31536000; includeSubDomains
x-request-id01a1b312-1efc-7180-ad72-8af9b2c4a3f8
dateFri, 06 Nov 2026 22:54:32 GMT
Upcoming Headers
Cross-Origin-Embedder-PolicyCross-Origin Embedder Policy allows a site to prevent assets being loaded that do not grant permission to load them via CORS or CORP.
Cross-Origin-Opener-PolicyCross-Origin Opener Policy allows a site to opt-in to Cross-Origin Isolation in the browser.
Cross-Origin-Resource-PolicyCross-Origin Resource Policy allows a resource owner to specify who can load the resource.
Additional Information
access-control-allow-originThis is a very lax CORS policy. Such a policy should only be used on a public CDN.
strict-transport-securityHTTP Strict Transport Security is an excellent feature to support on your site and strengthens your implementation of TLS by getting the User Agent to enforce the use of HTTPS.