Scan report
https://www.bing.com/
TLS certificate
- Subject
- r.bing.com
- Issuer
- Microsoft TLS G2 ECC CA OCSP 06
- Valid until
- 2027-03-10 00:55:59
- Days remaining
- 188
- Protocol
- TLSv1.3
- Cipher
- TLS_AES_256_GCM_SHA384
Open ports
Findings by category
HTTP Security Headers
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Recommendation: No action needed.
Content-Security-Policy: script-src https: 'strict-dynamic' 'report-sample' 'wasm-unsafe-eval' 'nonce-T7Gb9rf62vwSg9WWL0+iI9u+BEwoi6KwUBwXDgdJ5Do='; base-uri 'self';
Recommendation: No action needed.
X-Frame-Options: SAMEORIGIN
Recommendation: No action needed.
X-Content-Type-Options is missing, allowing browsers to MIME-sniff responses.
Recommendation: Add 'X-Content-Type-Options: nosniff'.
No Referrer-Policy set; full URLs (possibly containing sensitive data) may leak to third parties.
Recommendation: Add 'Referrer-Policy: strict-origin-when-cross-origin' or stricter.
Permissions-Policy: unload=()
Recommendation: No action needed.
SSL/TLS Certificate
Certificate valid for 188 more day(s).
Recommendation: No action needed.
Server negotiated a secure protocol version.
Recommendation: No action needed.
Security Misconfigurations
robots.txt lists 97 disallowed path(s), which can hint at sensitive areas.
Recommendation: Avoid relying on robots.txt to hide sensitive paths; use proper authentication instead.
Open Ports
Plain HTTP port is open — ensure it only redirects to HTTPS.
Recommendation: Configure automatic HTTP -> HTTPS redirects.
Port 443 (HTTPS) is reachable.
Recommendation: Confirm this service is intended to be publicly reachable.