- Scan ID:
- 02e1d51a-03bf-4206-a2b4-d85cf11b1dbcFinished
- Submitted URL:
- http://wbnv.in/a/46idV67Redirected
- Report Finished:
Risks · 0 found
Practices that may pose security risks
Security Headers · 4 found
HTTP response headers that can harden the security of a web application
Learn more...| Name | Value | Support | Info |
|---|---|---|---|
| Strict-Transport-Security | max-age=31536000 | Good | Declare that a website is only accessible over a secure connection (HTTPS). Click to learn more... |
| X-Frame-Options | — | Good | Indicate whether a browser should be allowed to render a page in a <frame>, <iframe>, <embed> or <object>. Click to learn more... |
| X-Content-Type-Options | nosniff | Good | Indicate that the MIME types advertised in the Content-Type headers should be followed and not be changed. Click to learn more... |
| Content-Security-Policy | default-src data: blob: 'unsafe-inline' v2assets.zopim.io wss://*.zopim.com static.zdassets.com ekr.zdassets.com ekr.zendesk.com webnovelhelp.zendesk.com *.zopim.com zendesk-eu.my.sentry.io *.webnovel.com *.yueimg.com *.google-analytics.com *.facebook.com *.cos.na-ashburn.myqcloud.com *.cos.na-toronto.myqcloud.com *.picca.myqcloud.com *.quora.com *.taboola.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.googletagmanager.com *.file.myqcloud.com *.tenor.com *.yuewen.com *.gstatic.com *.g.doubleclick.net *.googlesyndication.com *.googleapis.com *.facebook.net ads.trafficjunky.net hm.baidu.com aegis.cdn-go.cn *.tencent.com; script-src data: 'nonce-d2Vibm92ZWw=' 'unsafe-eval' *.webnovel.com *.yueimg.com *.googleapis.com *.google-analytics.com *.facebook.net *.facebook.com *.quora.com *.taboola.com *.googletagmanager.com *.google.com *.googletagservices.com *.g.doubleclick.net *.gstatic.com *.googlesyndication.com *.ampproject.org static.zdassets.com ekr.zdassets.com ekr.zendesk.com webnovelhelp.zendesk.com *.zopim.com zendesk-eu.my.sentry.io hm.baidu.com aegis.cdn-go.cn *.tencent.com; style-src data: 'unsafe-inline' *.webnovel.com *.yueimg.com *.googleapis.com *.google.com; frame-ancestors *.webnovel.com *.google.com m-webnovel-com.cdn.ampproject.org webapp.gameloop.com; frame-src *.yueimg.com *.webnovel.com *.g.doubleclick.net *.facebook.com *.google.com *.twitter.com *.googletagmanager.com *.googlesyndication.com; font-src blob: *.webnovel.com data: *; report-uri /csp-report/release/csp-log | Good | Control resources the user agent is allowed to load for a given page. Click to learn more... |
| Referrer-Policy | — | Good | Control how much referrer information should be included with requests. Click to learn more... |
| Clear-Site-Data | — | Good | Control the data stored by a client browser for their origins. Click to learn more... |
| X-Permitted-Cross-Domain-Policies | — | Good | Control whether a web client such as Adobe Flash Player or Adobe Acrobat has permission to handle data across domains. Click to learn more... |
| Permissions-Policy | — | New | Allow and deny the use of browser features in a document or iframe. Click to learn more... |
| Cross-Origin-Embedder-Policy | — | New | Configure embedding cross-origin resources into the document. Click to learn more... |
| Cross-Origin-Opener-Policy | — | New | Ensure a top-level document does not share a browsing context group with cross-origin documents. Click to learn more... |
| Cross-Origin-Resource-Policy | — | New | Request that the browser blocks no-cors cross-origin/cross-site requests to the given resource. Click to learn more... |
| X-XSS-Protection | 1; mode=block | Deprecated | Deprecated. Stops pages from loading when they detect reflected cross-site scripting (XSS) attacks. Click to learn more... |
| Feature-Policy | — | Deprecated | Deprecated. Replaced by the Permissions-Policy header. Click to learn more... |
| Expect-CT | — | Deprecated | Deprecated. Opt in to reporting and/or enforcement of Certificate Transparency requirements. Click to learn more... |
| Public-Key-Pins | — | Deprecated | Deprecated. Allows HTTPS websites to resist impersonation by attackers using mis-issued or otherwise fraudulent certificates. Click to learn more... |
Security Violations · 0 found
Requests or resources offending security policies
Certificates · 14 found
SSL/TLS Certificates enable websites to encrypt transactions between the client and the server and provide server identity verification
| Subject | Issue date | Expiry date |
|---|---|---|
| *.webnovel.com | Jan 29, 2024, 00:00:00 | Feb 18, 2025, 23:59:59 |
| upload.video.google.com | Aug 26, 2024, 07:12:45 | Nov 18, 2024, 07:12:44 |
| *.yueimg.com | Jan 29, 2024, 00:00:00 | Feb 18, 2025, 23:59:59 |
| *.dwin1.com | Oct 18, 2023, 00:00:00 | Nov 15, 2024, 23:59:59 |
| *.g.doubleclick.net | Aug 26, 2024, 06:33:44 | Nov 18, 2024, 06:33:43 |
| *.google-analytics.com | Aug 26, 2024, 06:33:47 | Nov 18, 2024, 06:33:46 |
| baidu.com | Jul 8, 2024, 01:41:02 | Aug 9, 2025, 01:41:01 |
| *.gstatic.com | Aug 26, 2024, 07:12:45 | Nov 18, 2024, 07:12:44 |
| *.google.com | Aug 26, 2024, 06:33:47 | Nov 18, 2024, 06:33:46 |
| *.facebook.com | Jun 30, 2024, 00:00:00 | Sep 28, 2024, 23:59:59 |