HTTPS encryption
detectedFinal page uses HTTPS
Observation confidence: medium · Weight 30
TECHNICAL SECURITY
aliexpress.com
4 of 11 transport and response-security signals were detected. This measures visible technical configuration, not merchant legitimacy.
73/100Observed signal score
Observation coverage: 100%. Unknown signals are excluded from the score, not treated as passed.
Automated analysis does not guarantee the safety of a future transaction.
Response and transport signals
TLS certificate
detected101 days remaining
Observation confidence: medium · Weight 25
Public DNS
detected2 public address(es) found
Observation confidence: medium · Weight 10
Secure redirect
not detectedHTTP did not finish on HTTPS
Observation confidence: medium · Weight 10
HSTS
detectedHeader detected on the final response
Observation confidence: medium · Weight 8
Content Security Policy
not detectedOptional defence header not detected
Observation confidence: medium · Weight 5
Clickjacking protection
not detectedOptional defence header not detected
Observation confidence: medium · Weight 3
MIME protection
not detectedOptional defence header not detected
Observation confidence: medium · Weight 3
Referrer Policy
not detectedOptional defence header not detected
Observation confidence: medium · Weight 2
Permissions Policy
not detectedOptional defence header not detected
Observation confidence: medium · Weight 1
Secure cookies
not detectedOne or more cookies lack the Secure flag
Observation confidence: medium · Weight 3
Missing information and limits
- Secure redirect: not detected
- Content Security Policy: not detected
- Clickjacking protection: not detected
- MIME protection: not detected
- Referrer Policy: not detected
- Permissions Policy: not detected
- Secure cookies: not detected
- The scanner does not perform penetration testing or verify fulfilment of orders.
- The automatic scan did not establish that this website operates a store.
Corrections
No editorial adjustments are attached to the fields used in this analysis. Correction date: not recorded.
Sources and observation date
These are URLs recorded by the shared scan, not endorsements or independent identity checks.
- https://aliexpress.com/ scan source · 2026-08-24
Last scan: . Methodology 1.0.0. View the original WSI report.