Security Report forchatgptlogin.com

HTTPS response

HTTPS returned status 200.

Valid TLS certificate

The TLS certificate is valid for this domain.

HTTP redirects to HTTPS

HTTP does not redirect to HTTPS.

To earn 5/5, return a 301 or 308 from every HTTP URL to the same path and query on HTTPS.

Modern TLS

TLSv1.3 was negotiated.

Strict transport security

Strict-Transport-Security covers at least 180 days.

Content security policy

Content-Security-Policy is enforced but does not restrict script sources.

To earn 10/10, add an effective script restriction, for example: Content-Security-Policy: default-src 'self'; script-src 'self'; object-src 'none'; base-uri 'self'. Add only the exact external hosts the site needs.

Frame protection

The response limits which sites may frame it.

Content type protection

Content type sniffing is disabled.

Referrer policy

Referrer-Policy uses strict-origin-when-cross-origin.

Browser permissions policy

Permissions-Policy is missing.

To earn 5/5, disable all three tested capabilities: Permissions-Policy: camera=(), microphone=(), geolocation=(). Add separate directives for capabilities the site intentionally allows.

DNSSEC

DNSSEC validation data was not found.

To earn 8/8, enable DNSSEC at the DNS provider and publish its DS record through the registrar; then confirm the delegation validates without errors.

Certificate authority restriction

No CAA record was found.

To earn 7/7, publish at least one CAA issue record for the CA you use, for example: CAA 0 issue "letsencrypt.org". Replace the CA name if another provider issues your certificate.

Known malware reports

No active malware-distribution URL was reported.

Threat-blocking DNS

2 threat-protection resolvers returned the domain.

Domain blocklists

The domain did not match the checked domain blocklists.