SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Hostname Mismatch - certificate is issued for *.imigrasi.go.id, www.imigrasi.go.id, not for 206.211.117.34.bc.googleusercontent.com

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=10886400; preload
Content-Security-Policy
Weak
upgrade-insecure-requests
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
same-origin
Permissions-Policy
Present
geolocation=(self), microphone=()
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Significantly strengthen CSP directives

Performance Headers

1 headers
Vary
Performance
Accept-Encoding

Caching Headers

3 headers
Cache-Control
Caching
no-store, no-cache, must-revalidate
Expires
Caching
Thu, 19 Nov 1981 08:52:00 GMT
Pragma
Caching
no-cache

Content Headers

1 headers
Content-Type
Content
text/html; charset=UTF-8

Server Headers

1 headers
Server
Server
Apache/2.4.58 (Ubuntu)

CORS Headers

1 headers
Access-Control-Allow-Origin
Cors
(null)

Cookies Headers

1 headers
Set-Cookie
Cookies
dirjen_imigrasi-FRONTEND-CSRF=1c1c2b036d67a788004a82819ff759cbb96ecb4c0eb329cf68ad710bb14ebab5a%3A2%3A%7Bi%3A0%3Bs%3A29%3A%22dirjen_imigrasi-FRONTEND-CSRF%22%3Bi%3A1%3Bs%3A32%3A%22vR2-mbLtvhfEKIXxlhq83HINoy2DSPvM%22%3B%7D; path=/; HttpOnly; SameSite=Lax

Other Headers

3 headers
Alt-Svc
Other
h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Date
Other
Mon, 01 Dec 2025 06:12:51 GMT
Via
Other
1.1 google

Recommendations

Enable compression (gzip/brotli) to improve performance

Analysis completed in 1691ms