HTTPS Readiness test

Input

Check here if your site complies with the HTTPS best practices

Domain analysis: www.Ahobetting.com

  • No redirect to https - Best practice is to use HTTPS always/everywhere
  • IP address: 62.75.159.67

    • Certificate details

  • This SSL Certificate was created for ahobetting.com but is also valid for www.Ahobetting.com
  • Certificate issued by Let's Encrypt, of type R3 (auto renewal)
  • Certificate start date: Apr 10 11:11:25 2022 GMT
  • Certificate expiration: Jul 9 11:11:24 2022 GMT (in 47 days)
  • Certificate validity period: 90 days (probably automated renewal)
  • Encryption algorithm: TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
    • More certificate details?
  • SSL Labs: get more detailed HTTPS report
  • Mozilla Observatory: get more detailed HTTPS report

    • HTTPS Headers

  • Missing HTTP header x-xss-protection - should be 1; mode=block
  • Missing HTTP header x-frame-options - should be SAMEORIGIN
  • Missing HTTP header content-security-policy - create at least a minimal one
  • Missing HTTP header strict-transport-security (HSTS)
  • For a GDPR-focused review of your domain, use Churlie GDPR Checkup

    • Content details

  • Mixed content: this page uses insecure content from www.ahobetting.com, master-big.com, oi68.tinypic.com, livescore.realty, paidtipster.com, basketballpredictions.net, bookmakers.name, paidtipsters.com, www.betzvi.com, www.betded.com, i.imgur.com

    • How to get https for your site

  • Let’s Encrypt is a free, automated, and open Certificate Authority.
    Example: cloudfleet.io, scotthelme.co.uk
  • Cloudflare One-Click SSL (also on the Free Plan)
    Example: toolstud.io
  • Paid certificates: Verisign, GeoTrust, Comodo, DigiCert, Thawte, Globalsign
    Example: www.amazon.com, www.mozilla.org, twitter.com

    • References

  • Google Chrome and/or Search will punish your website for insecure content and practices. In short, every site should be https://, and should send every visitor of their http:// site to the secure one.
  • Google Chrome: Our plan to label HTTP sites as non-secure is taking place in gradual steps
  • Data Security Action Plan, step 1: Implement strict encryption measures on all network traffic
  • BuiltWith: SSL by Default Usage Statistics
  • Analysis of the Alexa Top 1M sites: HTTPS, HSTS, CSP