turing.argosec.com.br · DNS
Result Detail
DNS| Host | Type | Answer | TTL |
|---|---|---|---|
| 188.114.96.3 | — | ||
| 188.114.97.3 | — | ||
| 2a06:98c1:3120::3 | — | ||
| 2a06:98c1:3121::3 | — |
Result Detail
HEADERAlerts
- Strict-Transport-Security: HSTS max-age 15552000 is below the recommended 15768000 seconds
- Content-Security-Policy: Content-Security-Policy missing
- X-Content-Type-Options: Header missing
- Permissions-Policy: Permissions-Policy missing
- Cross-Origin-Opener-Policy: Header missing
- Cross-Origin-Embedder-Policy: Header missing
- Cross-Origin-Resource-Policy: Header missing
- Expect-CT: Expect-CT missing
- X-Permitted-Cross-Domain-Policies: Header missing
- Access-Control-Allow-Origin: Access-Control-Allow-Origin missing
- Server: Sensitive header exposed
- Origin-Agent-Cluster: Header missing
Normalized headers
| date | Fri, 03 Apr 2026 22:54:39 GMT |
|---|---|
| content-type | text/html; charset=UTF-8 |
| cache-control | private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 |
| expires | Thu, 01 Jan 1970 00:00:01 GMT |
| referrer-policy | same-origin |
| nel | {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} |
| x-frame-options | SAMEORIGIN |
| strict-transport-security | max-age=15552000; includeSubDomains; preload |
| report-to | {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Z0eAVa%2FekL4D3kGgFcSFN3uNrVy%2B4CX5DWH6XJOozbMj%2FN3DsJjM319GjTd4EQuIt%2BcIAjNN0TxxSbZhLMeeBs6qLxBw6pj7WneufNeeHSO2bnJqU2tAqT0BLmsti%2F4ohBYEHp8AP7A%3D"}]} |
| server | cloudflare |
| cf-ray | 9e6ba8086c43d299-FRA |
Transport
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Strict-Transport-Security | ❌ Missing | max-age=15552000; includeSubDomains; preload | max-age>=15768000; includeSubDomains; preload | HSTS max-age 15552000 is below the recommended 15768000 seconds | Critical | Strict-Transport-Security: max-age=63072000; includeSubDomains; preload |
| Expect-CT | ❌ Missing | enforce; max-age>=86400 | Expect-CT missing | Medium | Expect-CT: enforce, max-age=86400, report-uri="https://report.example.com" |
Content Security
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Content-Security-Policy | ❌ Missing | default-src 'self'; frame-ancestors 'none' | Content-Security-Policy missing | Critical | Content-Security-Policy: default-src 'self'; frame-ancestors 'none' |
MIME
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| X-Content-Type-Options | ❌ Missing | nosniff | Header missing | High | X-Content-Type-Options: nosniff |
Framing
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| X-Frame-Options | ✅ Passed | SAMEORIGIN | DENY or SAMEORIGIN | Value accepted | High | X-Frame-Options: DENY |
Privacy
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Referrer-Policy | ✅ Passed | same-origin | strict-origin-when-cross-origin / same-origin | strict-origin-when-cross-origin | Medium | Referrer-Policy: strict-origin-when-cross-origin |
Browser Features
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Permissions-Policy | ❌ Missing | camera=(); geolocation=(); microphone=() | Permissions-Policy missing | Medium | Permissions-Policy: camera=(), geolocation=(), microphone=() |
Cross-Origin
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Cross-Origin-Opener-Policy | ❌ Missing | same-origin | Header missing | High | Cross-Origin-Opener-Policy: same-origin | |
| Cross-Origin-Embedder-Policy | ❌ Missing | require-corp | Header missing | High | Cross-Origin-Embedder-Policy: require-corp | |
| Cross-Origin-Resource-Policy | ❌ Missing | same-origin | Header missing | Medium | Cross-Origin-Resource-Policy: same-origin | |
| Origin-Agent-Cluster | ❌ Missing | ?1 | Header missing | Low | Origin-Agent-Cluster: ?1 |
Caching
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Cache-Control | ✅ Passed | private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 | no-store, private, max-age=0 | no-store, private, max-age=0 | High | Cache-Control: no-store, private, max-age=0 |
Legacy
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| X-Permitted-Cross-Domain-Policies | ❌ Missing | none | Header missing | Low | X-Permitted-Cross-Domain-Policies: none |
CORS
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Access-Control-Allow-Origin | ❌ Missing | Scoped origin (no wildcard) | Access-Control-Allow-Origin missing | Medium | Access-Control-Allow-Origin: https://app.example.com |
Information Disclosure
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Server | ❌ Missing | cloudflare | Header removed or generic | Sensitive header exposed | High | Remove Server header or set to a generic token |
| X-Powered-By | ✅ Passed | Header removed | Header not exposed | High | Remove X-Powered-By header | |
| X-AspNet-Version | ✅ Passed | Header removed | Header not exposed | Medium | Remove framework version headers |
Raw headers
HTTP/2 403
date: Fri, 03 Apr 2026 22:54:39 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
referrer-policy: same-origin
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains; preload
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Z0eAVa%2FekL4D3kGgFcSFN3uNrVy%2B4CX5DWH6XJOozbMj%2FN3DsJjM319GjTd4EQuIt%2BcIAjNN0TxxSbZhLMeeBs6qLxBw6pj7WneufNeeHSO2bnJqU2tAqT0BLmsti%2F4ohBYEHp8AP7A%3D"}]}
server: cloudflare
cf-ray: 9e6ba8086c43d299-FRA
Result Detail
SSL| Check name | Status | Value |
|---|---|---|
| certificate chain is complete | ✅ Passed | 4 |
| root CA is trusted | ✅ Passed | Trusted |
| cert valid for | ✅ Passed | 88 |
| chain certs are valid until | ✅ Passed | 01.07.2026 |
| CN matches Domainname | ✅ Passed | turing.argosec.com.br |
| certificate subject | ✅ Passed | CN=turing.argosec.com.br |
| certificate issuer | ✅ Passed | C=US, O=Google Trust Services, CN=WE1 |
| signature algorithm | ✅ Passed | ecdsa-with-SHA256 |
| TLS protocol | ✅ Passed | TLSv1.3 TLS_AES_256_GCM_SHA384 |
| Subject Alternative Names | ✅ Passed | turing.argosec.com.br |
| Public Key | ✅ Passed | EC 256 |
Certificate chain
| # | Common name | Issuer | Valid until | CA |
|---|---|---|---|---|
| 0 | turing.argosec.com.br | C=US, O=Google Trust Services, CN=WE1 | 01.07.2026 03:50:48 | No |
| 1 | turing.argosec.com.br | C=US, O=Google Trust Services, CN=WE1 | 01.07.2026 03:50:48 | No |
| 2 | WE1 | C=US, O=Google Trust Services LLC, CN=GTS Root R4 | 20.02.2029 15:00:00 | Yes |
| 3 | GTS Root R4 | C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA | 28.01.2028 01:00:42 | Yes |
TLS details
| Negotiated protocol | TLSv1.3 |
|---|---|
| Cipher suite | TLS_AES_256_GCM_SHA384 (256 bit) |
| Cipher version | TLSv1.3 |
| Perfect Forward Secrecy | Attention |
| Earliest chain expiry | 01.07.2026 03:50 |
Fingerprints
| SHA-256 | 47:60:0C:D1:A0:0B:AC:C0:99:57:C0:4E:AF:A3:17:BD:07:A7:6E:CA:E1:A5:32:97:E8:E2:97:D0:19:B8:54:A2 |
|---|---|
| SHA-1 | D6:71:D0:74:5F:E4:85:2B:CF:7B:DE:69:F3:02:8B:36:79:92:E7:43 |
Revocation
Trust evaluation
Attempted: Yes
Trusted: Yes
OpenSSL diagnostic command
openssl s_client -connect turing.argosec.com.br:443 -servername turing.argosec.com.br
Result Detail
WAFReal WAF results become available after signing up. Until then we show you a small teaser from the imagination department.
- Shield level Mythisch
- Watchers Gremlins im Standby
- Last attack Story folgt nach Registrierung