Domain google.com responds in 58.8ms.
We flagged 3 configuration penalty item(s) that can leave your server exposed or reduce search engine trust.
Speed
âĄ
58.8 ms
Excellent (<100ms)
Total Links
đ
10
8 internal âĸ 2 external
Penalties
đ ī¸
3
Penalties applied
SSL Health
đ
TLSv1.3
Expires in: 59 days
Brand Spoofing Shield
âī¸
đĄī¸ PROTECTED
SPF: Configured
DMARC: REJECT
Cookie Privacy Risk
đĒ
3 Cookie(s) Scanned
â ī¸ 2 cookie(s) missing HttpOnly/Secure flags.
Supply Chain SRI
đ
0 External Script(s)
â CDN scripts secure or self-hosted.
Social Card Preview
đą
Missing OG Image
Title: Default HTML Title
đĄī¸ Complete Website Scorecard
Weighted evaluation & clear non-technical guides
-5 pts
Critical Fix Advisory
Content-Security-Policy header absent
âŧ
Why points were lost:
Automated security heuristics detected configuration vulnerabilities requiring remediation.
Plain English: Think of this like leaving your front door unlocked or leaving name tags on keys. It makes it easier for bad actors to target your system!
đ ī¸ Recommended Remediation Action
Implement strict DNS records, hide server version banners in your server config, and publish a DNS CAA record.
Click card again to collapse detail view.
-3 pts
Moderate Fix Advisory
X-Content-Type-Options header absent
âŧ
Why points were lost:
Automated security heuristics detected configuration vulnerabilities requiring remediation.
Plain English: Think of this like leaving your front door unlocked or leaving name tags on keys. It makes it easier for bad actors to target your system!
đ ī¸ Recommended Remediation Action
Implement strict DNS records, hide server version banners in your server config, and publish a DNS CAA record.
Click card again to collapse detail view.
-3 pts
Moderate Fix Advisory
Strict-Transport-Security header absent
âŧ
Why points were lost:
Automated security heuristics detected configuration vulnerabilities requiring remediation.
Plain English: Think of this like leaving your front door unlocked or leaving name tags on keys. It makes it easier for bad actors to target your system!
đ ī¸ Recommended Remediation Action
Implement strict DNS records, hide server version banners in your server config, and publish a DNS CAA record.
Click card again to collapse detail view.
+Preserved
Passed âĸ Transport Encryption
Active TLS Cipher Protocol (TLSv1.3)
âŧ
Why this helps: Protects user sessions and sensitive data against wiretapping and man-in-the-middle sniffing attacks.
Plain English: Your data travels in a heavily armored car so nobody can spy on passwords or credit card numbers.
đ Technical Deep Dive
Modern TLS 1.3 eliminates vulnerable cryptographic primitives, enforcing Perfect Forward Secrecy (PFS) and reducing handshake round-trips to just 1-RTT.
+Optimal
Passed âĸ Response Speed
Rapid Round-Trip Time (58.8ms)
âŧ
Why this helps: Fast server response keeps visitors engaged and directly boosts search engine ranking signals.
Plain English: Your page loads instantly so visitors don't get frustrated and leave.
⥠Core Web Vitals Impact
Server response under 200ms ensures minimal Time to First Byte (TTFB), laying a foundation for optimal Largest Contentful Paint (LCP) performance scores.
+Healthy
Passed âĸ Search Engine Metadata
Valid HTML Meta & Title Tag Structure
âŧ
Why this helps: Ensures Google and search crawlers can index your page title accurately.
Plain English: Search engines easily understand what your page is about so they can display it properly to users.
đ Search Crawler Insight
Well-formed title and description metadata maximize Click-Through Rates (CTR) in Search Engine Result Pages (SERPs).
+Verified
Passed âĸ Infrastructure Routing
Verified Autonomous Network Hosting (ASN 15169)
âŧ
Why this helps: Confirms your website is connected via an established, reliable hosting provider.
Plain English: Your website lives in a reputable, trustworthy neighborhood online.
đ BGP Routing Verification
Valid ASN route records confirm clean network reputation, reducing IP blocklist risks across email and web gateways.
đ Network Infrastructure & DNS Compliance
Server hosting profile, CAA records, and GeoIP data
Server IP Address
142.251.153.119
DNS CAA Authorization Records
â Configured (0 issue "pki.goog")
ISP / ASN Provider
GOOGLE
ASN 15169
Location & Timezone
đ United States
(US)
TZ: America/Chicago
Server Software
gws
đ Live Search Snippet Simulator
Simulate search result listings across web engines
đ
https://www.google.com/
Google
Search the world's information, including webpages, images, videos and more. Google has many special features to help you find exactly what you're looking for.
Title Len
6
Meta Desc
159
No Alt Imgs
0
Forms
1
Deep Inspection Hub
đĄ SEO & Content Recommendations
Metadata and ranking enhancements
4 Notes
âĄNo H1 heading found
âĄNo canonical URL declared
âĄMissing viewport meta tag
âĄMissing OpenGraph social sharing image
Link Distribution Footprint
Int: 8 Ext: 2
Detailed Inspect Lists
đ Redirect Chain (1)âŧ
1. https://google.com/
đĄī¸ SSL Alt Names (65)âŧ
*.google.com
*.appengine.google.com
*.bdn.dev
*.origin-test.bdn.dev
*.cloud.google.com
*.crowdsource.google.com
*.datacompute.google.com
*.google.ca
*.google.cl
*.google.co.in
*.google.co.jp
*.google.co.uk
*.google.com.ar
*.google.com.au
*.google.com.br
*.google.com.co
*.google.com.mx
*.google.com.tr
*.google.com.vn
*.google.de
*.google.es
*.google.fr
*.google.hu
*.google.it
*.google.nl
*.google.pl
*.google.pt
*.gemini.cloud.google.com
*.gstatic.com
*.metric.gstatic.com
*.gvt1.com
*.gcpcdn.gvt1.com
*.gvt2.com
*.gcp.gvt2.com
*.url.google.com
*.youtube-nocookie.com
*.ytimg.com
ai.android
android.com
*.android.com
*.flash.android.com
g.co
*.g.co
goo.gl
www.goo.gl
google-analytics.com
*.google-analytics.com
google.com
googlecommerce.com
*.googlecommerce.com
urchin.com
*.urchin.com
youtu.be
youtube.com
*.youtube.com
music.youtube.com
*.music.youtube.com
youtubeeducation.com
*.youtubeeducation.com
youtubekids.com
*.youtubekids.com
yt.be
*.yt.be
android.clients.google.com
*.aistudio.google.com
đ External Domains (2)âŧ
accounts.google.com
mail.google.com
Auditor Status
âšī¸ Auditor Limitations (6)âŧ
âĸ Historical uptime monitoring
âĸ Full-site crawling
âĸ Malware or phishing analysis
âĸ External blacklist/reputation checks
âĸ Vulnerability exploitation or authenticated testing
âĸ Real-browser Core Web Vitals
âšī¸ How Our Scoring Engine Works
Every website starts with a baseline score of 100 points. Points are deducted based on automated security scans and web server configuration heuristics.
đ´ Critical Penalties (-5 pts):
Severe vulnerabilities such as an expiring SSL certificate or missing Content Security Policy (CSP) headers.
đĄ Moderate Penalties (-3 pts):
Advisories like missing MIME sniffing protection or minor security header omissions.
Passed checks do not add extra points above 100, but confirm that your server maintains essential safeguards.