Check Detail
cryven.info · DNS
Passed
Grade A
100.0%
Result Detail
DNS| Host | Type | Answer | TTL |
|---|---|---|---|
| 80.253.249.90 | — |
Result Detail
HEADERAlerts
- Strict-Transport-Security: HSTS max-age 15552000 is below the recommended 15768000 seconds
- Content-Security-Policy: Content-Security-Policy missing
- Permissions-Policy: Permissions-Policy missing
- Cross-Origin-Embedder-Policy: Header missing
- Expect-CT: Expect-CT missing
- Access-Control-Allow-Origin: Access-Control-Allow-Origin missing
Normalized headers
| cross-origin-opener-policy | same-origin |
|---|---|
| cross-origin-resource-policy | same-origin |
| origin-agent-cluster | ?1 |
| referrer-policy | no-referrer |
| strict-transport-security | max-age=15552000; includeSubDomains |
| x-content-type-options | nosniff |
| x-dns-prefetch-control | off |
| x-download-options | noopen |
| x-frame-options | DENY |
| x-permitted-cross-domain-policies | none |
| x-xss-protection | 0 |
| content-type | application/json; charset=utf-8 |
| content-length | 0 |
| cache-control | no-store |
| date | Sat, 16 May 2026 21:00:09 GMT |
| connection | close |
Transport
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Strict-Transport-Security | ❌ Missing | max-age=15552000; includeSubDomains | max-age>=15768000; includeSubDomains; preload | HSTS max-age 15552000 is below the recommended 15768000 seconds | Critical | Strict-Transport-Security: max-age=63072000; includeSubDomains; preload |
| Expect-CT | ❌ Missing | enforce; max-age>=86400 | Expect-CT missing | Medium | Expect-CT: enforce, max-age=86400, report-uri="https://report.example.com" |
Content Security
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Content-Security-Policy | ❌ Missing | default-src 'self'; frame-ancestors 'none' | Content-Security-Policy missing | Critical | Content-Security-Policy: default-src 'self'; frame-ancestors 'none' |
MIME
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| X-Content-Type-Options | ✅ Passed | nosniff | nosniff | Value matches recommendation | High | X-Content-Type-Options: nosniff |
Framing
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| X-Frame-Options | ✅ Passed | DENY | DENY or SAMEORIGIN | Value accepted | High | X-Frame-Options: DENY |
Privacy
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Referrer-Policy | ✅ Passed | no-referrer | strict-origin-when-cross-origin / same-origin | strict-origin-when-cross-origin | Medium | Referrer-Policy: strict-origin-when-cross-origin |
Browser Features
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Permissions-Policy | ❌ Missing | camera=(); geolocation=(); microphone=() | Permissions-Policy missing | Medium | Permissions-Policy: camera=(), geolocation=(), microphone=() |
Cross-Origin
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Cross-Origin-Opener-Policy | ✅ Passed | same-origin | same-origin | Value matches recommendation | High | Cross-Origin-Opener-Policy: same-origin |
| Cross-Origin-Embedder-Policy | ❌ Missing | require-corp | Header missing | High | Cross-Origin-Embedder-Policy: require-corp | |
| Cross-Origin-Resource-Policy | ✅ Passed | same-origin | same-origin | Value matches recommendation | Medium | Cross-Origin-Resource-Policy: same-origin |
| Origin-Agent-Cluster | ✅ Passed | ?1 | ?1 | Value matches recommendation | Low | Origin-Agent-Cluster: ?1 |
Caching
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Cache-Control | ✅ Passed | no-store | no-store, private, max-age=0 | no-store, private, max-age=0 | High | Cache-Control: no-store, private, max-age=0 |
Legacy
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| X-Permitted-Cross-Domain-Policies | ✅ Passed | none | none | Value matches recommendation | Low | X-Permitted-Cross-Domain-Policies: none |
CORS
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Access-Control-Allow-Origin | ❌ Missing | Scoped origin (no wildcard) | Access-Control-Allow-Origin missing | Medium | Access-Control-Allow-Origin: https://app.example.com |
Information Disclosure
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Server | ✅ Passed | Header removed or generic | Header not exposed | High | Remove Server header or set to a generic token | |
| X-Powered-By | ✅ Passed | Header removed | Header not exposed | High | Remove X-Powered-By header | |
| X-AspNet-Version | ✅ Passed | Header removed | Header not exposed | Medium | Remove framework version headers |
Raw headers
HTTP/1.1 405 Method Not Allowed Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains x-content-type-options: nosniff X-DNS-Prefetch-Control: off X-Download-Options: noopen x-frame-options: DENY X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 content-type: application/json; charset=utf-8 content-length: 0 cache-control: no-store date: Sat, 16 May 2026 21:00:09 GMT connection: close
Result Detail
SSL| Check name | Status | Value |
|---|---|---|
| certificate chain is complete | ✅ Passed | 3 |
| root CA is trusted | ✅ Passed | Trusted |
| cert valid for | ✅ Passed | 89 |
| chain certs are valid until | ✅ Passed | 13.08.2026 |
| CN matches Domainname | ✅ Passed | cryven.info |
| certificate subject | ✅ Passed | CN=cryven.info |
| certificate issuer | ✅ Passed | C=US, O=Let's Encrypt, CN=E7 |
| signature algorithm | ✅ Passed | ecdsa-with-SHA384 |
| TLS protocol | ✅ Passed | TLSv1.3 TLS_AES_256_GCM_SHA384 |
| Subject Alternative Names | ✅ Passed | cryven.info |
| Public Key | ✅ Passed | EC 256 |
Certificate chain
| # | Common name | Issuer | Valid until | CA |
|---|---|---|---|---|
| 0 | cryven.info | C=US, O=Let's Encrypt, CN=E7 | 13.08.2026 16:17:30 | No |
| 1 | cryven.info | C=US, O=Let's Encrypt, CN=E7 | 13.08.2026 16:17:30 | No |
| 2 | E7 | C=US, O=Internet Security Research Group, CN=ISRG Root X1 | 13.03.2027 00:59:59 | Yes |
TLS details
| Negotiated protocol | TLSv1.3 |
|---|---|
| Cipher suite | TLS_AES_256_GCM_SHA384 (256 bit) |
| Cipher version | TLSv1.3 |
| Perfect Forward Secrecy | Attention |
| Earliest chain expiry | 13.08.2026 16:17 |
Fingerprints
| SHA-256 | A1:B2:03:44:F5:EA:A1:ED:1F:A9:57:D3:C1:3D:56:D9:B8:DF:3E:92:BA:BE:91:46:2F:9F:1D:BE:A9:C0:05:D3 |
|---|---|
| SHA-1 | 18:2B:3C:65:58:97:15:87:30:B8:67:D4:9A:DB:CB:DA:9D:A5:FD:46 |
Revocation
OCSP URLs
—
CRL URLs
Full Name:
URI:http://e7.c.lencr.org/12.crl
Issuer URLs (AIA)
http://e7.i.lencr.org/
OCSP Must-Staple
No
Trust evaluation
Attempted: Yes
Trusted: Yes
OpenSSL diagnostic command
openssl s_client -connect cryven.info:443 -servername cryven.info
Result Detail
WAFSign up to use!
Ownership verification required
Real WAF results become available after signing up. Until then we show you a small teaser from the imagination department.
- Shield level Mythisch
- Watchers Gremlins im Standby
- Last attack Story folgt nach Registrierung