Domain wechat.com responds in 489.71ms.
We flagged 3 configuration penalty item(s) that can leave your server exposed or reduce search engine trust.
Speed
âĄ
489.71 ms
Bottleneck (>200ms)
Total Links
đ
14
4 internal âĸ 10 external
Penalties
đ ī¸
3
Penalties applied
SSL Health
đ
TLSv1.3
Expires in: 171 days
Brand Spoofing Shield
âī¸
đĄī¸ PROTECTED
SPF: Configured
DMARC: QUARANTINE
Cookie Privacy Risk
đĒ
0 Cookie(s) Scanned
â All evaluated cookies secured.
Supply Chain SRI
đ
3 External Script(s)
â ī¸ 3 CDN script(s) lack SRI hashes.
Social Card Preview
đą
Missing OG Image
Title: Default HTML Title
đĄī¸ Complete Website Scorecard
Weighted evaluation & clear non-technical guides
-5 pts
Critical Fix Advisory
Content-Security-Policy header absent
âŧ
Why points were lost:
Automated security heuristics detected configuration vulnerabilities requiring remediation.
Plain English: Think of this like leaving your front door unlocked or leaving name tags on keys. It makes it easier for bad actors to target your system!
đ ī¸ Recommended Remediation Action
Implement strict DNS records, hide server version banners in your server config, and publish a DNS CAA record.
Click card again to collapse detail view.
-3 pts
Moderate Fix Advisory
X-Content-Type-Options header absent
âŧ
Why points were lost:
Automated security heuristics detected configuration vulnerabilities requiring remediation.
Plain English: Think of this like leaving your front door unlocked or leaving name tags on keys. It makes it easier for bad actors to target your system!
đ ī¸ Recommended Remediation Action
Implement strict DNS records, hide server version banners in your server config, and publish a DNS CAA record.
Click card again to collapse detail view.
-3 pts
Moderate Fix Advisory
Missing DNS CAA record (risk of unauthorized cert issuance)
âŧ
Why points were lost:
Automated security heuristics detected configuration vulnerabilities requiring remediation.
Plain English: Think of this like leaving your front door unlocked or leaving name tags on keys. It makes it easier for bad actors to target your system!
đ ī¸ Recommended Remediation Action
Implement strict DNS records, hide server version banners in your server config, and publish a DNS CAA record.
Click card again to collapse detail view.
+Preserved
Passed âĸ Transport Encryption
Active TLS Cipher Protocol (TLSv1.3)
âŧ
Why this helps: Protects user sessions and sensitive data against wiretapping and man-in-the-middle sniffing attacks.
Plain English: Your data travels in a heavily armored car so nobody can spy on passwords or credit card numbers.
đ Technical Deep Dive
Modern TLS 1.3 eliminates vulnerable cryptographic primitives, enforcing Perfect Forward Secrecy (PFS) and reducing handshake round-trips to just 1-RTT.
+Optimal
Passed âĸ Response Speed
Rapid Round-Trip Time (489.71ms)
âŧ
Why this helps: Fast server response keeps visitors engaged and directly boosts search engine ranking signals.
Plain English: Your page loads instantly so visitors don't get frustrated and leave.
⥠Core Web Vitals Impact
Server response under 200ms ensures minimal Time to First Byte (TTFB), laying a foundation for optimal Largest Contentful Paint (LCP) performance scores.
+Healthy
Passed âĸ Search Engine Metadata
Valid HTML Meta & Title Tag Structure
âŧ
Why this helps: Ensures Google and search crawlers can index your page title accurately.
Plain English: Search engines easily understand what your page is about so they can display it properly to users.
đ Search Crawler Insight
Well-formed title and description metadata maximize Click-Through Rates (CTR) in Search Engine Result Pages (SERPs).
+Verified
Passed âĸ Infrastructure Routing
Verified Autonomous Network Hosting (ASN None)
âŧ
Why this helps: Confirms your website is connected via an established, reliable hosting provider.
Plain English: Your website lives in a reputable, trustworthy neighborhood online.
đ BGP Routing Verification
Valid ASN route records confirm clean network reputation, reducing IP blocklist risks across email and web gateways.
đ Network Infrastructure & DNS Compliance
Server hosting profile, CAA records, and GeoIP data
Server IP Address
43.169.32.137
DNS CAA Authorization Records
â ī¸ Missing DNS CAA Record
ISP / ASN Provider
Not available
ASN None
Location & Timezone
đ Singapore
(SG)
TZ: Asia/Singapore
Server Software
TencentEdgeOne
đ Live Search Snippet Simulator
Simulate search result listings across web engines
đ
https://www.wechat.com/en
WeChat - Connects with over 1 billion users | Chats ¡ Calls ¡ Life Services
WeChat is a social communication app serving over 1 billion users, supporting free chat, HD voice and video calls, Moments, and mobile payments, making communication and life more convenient.
Title Len
75
Meta Desc
191
No Alt Imgs
0
Forms
0
Deep Inspection Hub
đĄ SEO & Content Recommendations
Metadata and ranking enhancements
5 Notes
âĄTitle longer than 60 characters
âĄMeta description longer than 160 characters
âĄNo H1 heading found
âĄNo canonical URL declared
âĄMissing OpenGraph social sharing image
Link Distribution Footprint
Int: 4 Ext: 10
Detailed Inspect Lists
đ Redirect Chain (2)âŧ
1. https://wechat.com/
2. https://www.wechat.com/
đĄī¸ SSL Alt Names (51)âŧ
weixin.qq.com
*.mp.weixin.qq.com
*.my-qcloud.com
*.open.weixin.qq.com
*.pr.qq.com
*.pr.weixin.qq.com
*.sec.wechat.com
*.security.wechat.com
*.shuru.qq.com
*.support.wechatapp.com
*.test.qq.com
*.url.cn
*.we.qq.com
*.webeans.weixin.qq.com
*.wechat.com
*.wechat.org
*.wechatapp.com
*.wechatlegal.net
*.weixin.com
*.weixin.qq.com
*.weixin110.qq.com
*.welm.weixin.qq.com
*.weops.qq.com
*.wx.qq.com
*.wx2.qq.com
comm.weixin.qq.com
icrash.qq.com
ifeedback.qq.com
open.weixin.qq.com
pr.qq.com
shuru.qq.com
swift.qq.com
test.qq.com
url.cn
we.qq.com
wechat.com
wechat.design
wechat.org
wechatapp.com
wechatlegal.net
weixin.com
weixin110.qq.com
weops.qq.com
weui.io
wx.qq.com
wx110.qq.com
wx2.qq.com
wxtest.qq.com
*.dns.weixin.qq.com
*.iot-tencent.com
*.weixin.qq.com.cn
đ External Domains (9)âŧ
apps.microsoft.com
cs.help.wechat.com
mac.weixin.qq.com
newsroom.wechat.com
safety.wechat.com
weixin.qq.com
www.facebook.com
www.linkedin.com
x.com
Auditor Status
âšī¸ Auditor Limitations (6)âŧ
âĸ Historical uptime monitoring
âĸ Full-site crawling
âĸ Malware or phishing analysis
âĸ External blacklist/reputation checks
âĸ Vulnerability exploitation or authenticated testing
âĸ Real-browser Core Web Vitals
âšī¸ How Our Scoring Engine Works
Every website starts with a baseline score of 100 points. Points are deducted based on automated security scans and web server configuration heuristics.
đ´ Critical Penalties (-5 pts):
Severe vulnerabilities such as an expiring SSL certificate or missing Content Security Policy (CSP) headers.
đĄ Moderate Penalties (-3 pts):
Advisories like missing MIME sniffing protection or minor security header omissions.
Passed checks do not add extra points above 100, but confirm that your server maintains essential safeguards.