{ "scan": { "algorithmVersion": 4, "grade": "C", "error": null, "score": 50, "statusCode": 200, "testsFailed": 3, "testsPassed": 7, "testsQuantity": 10, "responseHeaders": { "date": "Thu, 14 May 2026 04:18:20 GMT", "content-type": "text/html", "content-length": "13929", "connection": "close", "last-modified": "Sun, 26 Apr 2026 07:08:50 GMT", "etag": "\"69edba02-3669\"", "accept-ranges": "bytes", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "server": "HTTPS", "x-content-type-options": "nosniff", "x-xss-protection": "\"1; mode=block\"", "x-frame-options": "'SAMEORIGIN'", "referrer-policy": "origin" } }, "tests": { "content-security-policy": { "expectation": "csp-implemented-with-no-unsafe", "pass": false, "result": "csp-not-implemented", "scoreModifier": -25, "data": null, "http": false, "meta": false, "policy": null, "numPolicies": 0 }, "cookies": { "expectation": "cookies-secure-with-httponly-sessions", "pass": true, "result": "cookies-not-found", "scoreModifier": 0, "data": null, "sameSite": false }, "cross-origin-resource-sharing": { "expectation": "cross-origin-resource-sharing-not-implemented", "pass": true, "result": "cross-origin-resource-sharing-not-implemented", "scoreModifier": 0, "data": null }, "redirection": { "expectation": "redirection-to-https", "pass": true, "result": "redirection-to-https", "scoreModifier": 0, "destination": "https://water.europa.eu/", "redirects": true, "route": [ "http://water.europa.eu/", "https://water.europa.eu/" ], "statusCode": 200 }, "referrer-policy": { "expectation": "referrer-policy-private", "pass": false, "result": "referrer-policy-unsafe", "scoreModifier": -5, "data": "origin", "http": true, "meta": false }, "strict-transport-security": { "expectation": "hsts-implemented-max-age-at-least-six-months", "pass": true, "result": "hsts-implemented-max-age-at-least-six-months", "scoreModifier": 0, "data": "max-age=31536000; includeSubDomains; preload", "includeSubDomains": true, "maxAge": 31536000, "preload": true, "preloaded": false }, "subresource-integrity": { "expectation": "sri-implemented-and-external-scripts-loaded-securely", "pass": true, "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", "scoreModifier": 0, "data": {} }, "x-content-type-options": { "expectation": "x-content-type-options-nosniff", "pass": true, "result": "x-content-type-options-nosniff", "scoreModifier": 0, "data": "nosniff" }, "x-frame-options": { "expectation": "x-frame-options-sameorigin-or-deny", "pass": false, "result": "x-frame-options-header-invalid", "scoreModifier": -20, "data": "'SAMEORIGIN'" }, "cross-origin-resource-policy": { "expectation": "corp-implemented-with-same-site", "pass": true, "result": "corp-not-implemented", "scoreModifier": 0, "data": null, "http": false, "meta": false } } }