What we found
Nothing critical. This page lists what a crawler runs into. The paid report adds the evidence for each one and how to fix it.
- lowBoth https://toll402.dev/ and https://www.toll402.dev/ serve the page with 200 — neither redirects to the other.
- lowNo Strict-Transport-Security header.
- lowNo favicon declared in the HTML.
- lowStandard security headers are missing: Content-Security-Policy, X-Frame-Options (or CSP frame-ancestors), X-Content-Type-Options: nosniff.
Verify this
The badge below is generated from the same record and updates when the site is re-checked.
Anyone can read the record without paying: https://402registry.com/api/check?url=https://toll402.dev/
