Domain usailan.com responds in 3528.99ms.
We flagged 5 configuration penalty item(s) that can leave your server exposed or reduce search engine trust.
Speed
⚡
3528.99 ms
Bottleneck (>200ms)
Total Links
🔗
438
407 internal • 12 external
Penalties
🛠️
5
Penalties applied
SSL Health
🔒
TLSv1.3
Expires in: 62 days
Brand Spoofing Shield
✉️
⚠️ VULNERABLE
SPF: Configured
DMARC: NONE
Cookie Privacy Risk
🍪
2 Cookie(s) Scanned
⚠️ 1 cookie(s) missing HttpOnly/Secure flags.
Supply Chain SRI
🔗
22 External Script(s)
⚠️ 10 CDN script(s) lack SRI hashes.
Social Card Preview
📱
Missing OG Image
Title: Default HTML Title
🛡️ Complete Website Scorecard
Weighted evaluation & clear non-technical guides
-5 pts
Critical Fix Advisory
Content-Security-Policy header absent
▼
Why points were lost:
Automated security heuristics detected configuration vulnerabilities requiring remediation.
Plain English: Think of this like leaving your front door unlocked or leaving name tags on keys. It makes it easier for bad actors to target your system!
🛠️ Recommended Remediation Action
Implement strict DNS records, hide server version banners in your server config, and publish a DNS CAA record.
Click card again to collapse detail view.
-3 pts
Moderate Fix Advisory
X-Content-Type-Options header absent
▼
Why points were lost:
Automated security heuristics detected configuration vulnerabilities requiring remediation.
Plain English: Think of this like leaving your front door unlocked or leaving name tags on keys. It makes it easier for bad actors to target your system!
🛠️ Recommended Remediation Action
Implement strict DNS records, hide server version banners in your server config, and publish a DNS CAA record.
Click card again to collapse detail view.
-3 pts
Moderate Fix Advisory
Strict-Transport-Security header absent
▼
Why points were lost:
Automated security heuristics detected configuration vulnerabilities requiring remediation.
Plain English: Think of this like leaving your front door unlocked or leaving name tags on keys. It makes it easier for bad actors to target your system!
🛠️ Recommended Remediation Action
Implement strict DNS records, hide server version banners in your server config, and publish a DNS CAA record.
Why points were lost:
Domain lacks strict SPF or DMARC enforcement records, allowing malicious actors to impersonate your brand in customer inboxes.
Plain English: Think of this like leaving your front door unlocked or leaving name tags on keys. It makes it easier for bad actors to target your system!
🛠️ Recommended Remediation Action
Implement strict DNS records, hide server version banners in your server config, and publish a DNS CAA record.
Click card again to collapse detail view.
-3 pts
Moderate Fix Advisory
Missing DNS CAA record (risk of unauthorized cert issuance)
▼
Why points were lost:
Automated security heuristics detected configuration vulnerabilities requiring remediation.
Plain English: Think of this like leaving your front door unlocked or leaving name tags on keys. It makes it easier for bad actors to target your system!
🛠️ Recommended Remediation Action
Implement strict DNS records, hide server version banners in your server config, and publish a DNS CAA record.
Click card again to collapse detail view.
+Preserved
Passed • Transport Encryption
Active TLS Cipher Protocol (TLSv1.3)
▼
Why this helps: Protects user sessions and sensitive data against wiretapping and man-in-the-middle sniffing attacks.
Plain English: Your data travels in a heavily armored car so nobody can spy on passwords or credit card numbers.
🔒 Technical Deep Dive
Modern TLS 1.3 eliminates vulnerable cryptographic primitives, enforcing Perfect Forward Secrecy (PFS) and reducing handshake round-trips to just 1-RTT.
+Optimal
Passed • Response Speed
Rapid Round-Trip Time (3528.99ms)
▼
Why this helps: Fast server response keeps visitors engaged and directly boosts search engine ranking signals.
Plain English: Your page loads instantly so visitors don't get frustrated and leave.
⚡ Core Web Vitals Impact
Server response under 200ms ensures minimal Time to First Byte (TTFB), laying a foundation for optimal Largest Contentful Paint (LCP) performance scores.
+Healthy
Passed • Search Engine Metadata
Valid HTML Meta & Title Tag Structure
▼
Why this helps: Ensures Google and search crawlers can index your page title accurately.
Plain English: Search engines easily understand what your page is about so they can display it properly to users.
🔍 Search Crawler Insight
Well-formed title and description metadata maximize Click-Through Rates (CTR) in Search Engine Result Pages (SERPs).
+Verified
Passed • Infrastructure Routing
Verified Autonomous Network Hosting (ASN 13335)
▼
Why this helps: Confirms your website is connected via an established, reliable hosting provider.
Plain English: Your website lives in a reputable, trustworthy neighborhood online.
🌐 BGP Routing Verification
Valid ASN route records confirm clean network reputation, reducing IP blocklist risks across email and web gateways.
🌍 Network Infrastructure & DNS Compliance
Server hosting profile, CAA records, and GeoIP data
Server IP Address
104.21.74.20
DNS CAA Authorization Records
⚠️ Missing DNS CAA Record
ISP / ASN Provider
CLOUDFLARENET
ASN 13335
Location & Timezone
📍 Unknown
Server Software
cloudflare
🔍 Live Search Snippet Simulator
Simulate search result listings across web engines
🌐
https://www.usailan.com/
Amerika’nın Türkçe İlan Sitesi | USAilan.com
Amerika’daki Türklerin 15 yıllık güvenilir adresi. İş ve eleman ilanları, satılık ve kiralık evler ile odalar burada. Güvenle ilan verin, hızla sonuç alın.
Title Len
45
Meta Desc
155
No Alt Imgs
4
Forms
2
Deep Inspection Hub
💡 SEO & Content Recommendations
Metadata and ranking enhancements
3 Notes
⚡No H1 heading found
⚡4 images lack an alt attribute
⚡Missing OpenGraph social sharing image
Link Distribution Footprint
Int: 407 Ext: 12
Detailed Inspect Lists
🔀 Redirect Chain (1)▼
1. https://usailan.com/
🛡️ SSL Alt Names (2)▼
*.usailan.com
usailan.com
🌐 External Domains (9)▼
facebook.com
instagram.com
oguz.law
t.me
twitter.com
wa.me
www.instagram.com
www.linkedin.com
www.youtube.com
Auditor Status
ℹ️ Auditor Limitations (6)▼
• Historical uptime monitoring
• Full-site crawling
• Malware or phishing analysis
• External blacklist/reputation checks
• Vulnerability exploitation or authenticated testing
• Real-browser Core Web Vitals
ℹ️ How Our Scoring Engine Works
Every website starts with a baseline score of 100 points. Points are deducted based on automated security scans and web server configuration heuristics.
🔴 Critical Penalties (-5 pts):
Severe vulnerabilities such as an expiring SSL certificate or missing Content Security Policy (CSP) headers.
🟡 Moderate Penalties (-3 pts):
Advisories like missing MIME sniffing protection or minor security header omissions.
Passed checks do not add extra points above 100, but confirm that your server maintains essential safeguards.