hogum
api-xperience.com

api-xperience.com security report

Certificate, security headers, email authentication, DNS, registration, and exposed hosts — from public sources.

13risk

Low

Minor observations only.

0Critical
0High
1Medium
1Low
0Info
Collected 15.3sfrom cache
  1. Certificate Transparency0
  2. DNS resolution2
  3. Network ownership0
  4. CDN / WAF detection0
  5. Exposed ports & CVEs2
  6. Registration
  7. DNS posture3
  8. Email authentication1
  9. Certificate
  10. Security headers5
  11. Archived URLs
  12. Analysis2
  • noteCertificate inspection is unavailable in this runtime.
  • noteNetwork ownership lookup is unavailable in this runtime; ASN and org are omitted.
  • noteCDN/WAF detection is unavailable in this runtime.
  • note2 hosts were identified as CDN/edge infrastructure from ASN ownership rather than a cdncheck fingerprint.
final https://www.visa.com/en-usstatus 200time 285msstack cloudflare
  • ✓http:// redirects to https://
  • ✓Strict-Transport-Security
    max-age=31536000; includeSubdomains;
  • ✓Content-Security-Policy
    self
  • ✓Clickjacking protection
    SAMEORIGIN
  • ✓X-Content-Type-Options
    nosniff
  • ✓Referrer-Policy
    strict-origin-when-cross-origin, no-referrer-when-downgrade
  • –Permissions-Policyoptional
  • –security.txt publishedoptional — tells researchers where to report bugs
  • ✓Cookie _cfuvid
    Secure · HttpOnly · SameSite=none
  • –No MX records — domain does not receive mail
  • ✗SPF
    no record
  • ✓DMARCp=reject
    v=DMARC1; p=reject; rua=mailto:dmarc_agg@auth.returnpath.net; ruf=mailto:dmarc_afrf@auth.returnpath.net; rf=afrf; fo=1; pct=100
  • –MTA-STSn/a
AddressPortsCVEsEdgeNetwork
172.65.64.17
api-xperience.com
80
0Cloudflare~
—
172.65.64.16
api-xperience.com
80
0Cloudflare~
—
Archived URLs

Endpoints the Wayback Machine has kept — config files, backups, scripts. Slow to fetch, so it is here on request.