TECHNICAL SECURITY

herocosmetics.com.au

8 of 11 transport and response-security signals were detected. This measures visible technical configuration, not merchant legitimacy.

92/100Observed signal score

Observation coverage: 100%. Unknown signals are excluded from the score, not treated as passed.

strong signalsScan 2026-09-21Confidence: mediumMethod 1.0.0
Automated analysis does not guarantee the safety of a future transaction.

Response and transport signals

HTTPS encryption

detected

Final page uses HTTPS

Observation confidence: medium · Weight 30

TLS certificate

detected

8 days remaining

Observation confidence: medium · Weight 25

Public DNS

detected

2 public address(es) found

Observation confidence: medium · Weight 10

Secure redirect

detected

HTTP request reaches HTTPS through 1 hop(s)

Observation confidence: medium · Weight 10

HSTS

detected

Header detected on the final response

Observation confidence: medium · Weight 8

Content Security Policy

not detected

Optional defence header not detected

Observation confidence: medium · Weight 5

Clickjacking protection

detected

Header detected on the final response

Observation confidence: medium · Weight 3

MIME protection

detected

Header detected on the final response

Observation confidence: medium · Weight 3

Referrer Policy

not detected

Optional defence header not detected

Observation confidence: medium · Weight 2

Permissions Policy

not detected

Optional defence header not detected

Observation confidence: medium · Weight 1

Secure cookies

detected

No insecure final-response cookies detected

Observation confidence: medium · Weight 3

Missing information and limits

Corrections

No editorial adjustments are attached to the fields used in this analysis. Correction date: not recorded.

Sources and observation date

These are URLs recorded by the shared scan, not endorsements or independent identity checks.

Last scan: . Methodology 1.0.0. View the original WSI report.