← new scan
~/scans/phoenix-cia.com.report
⇣ export pdf
target phoenix-cia.com
resolved151.101.2.159
scanned 2026-10-12 15:16:28
modules 7 of 7 completed
// overall risk
▲ HIGH Risk
13 issues across 7 modules — 1 high, 5 medium, 7 low
0 critical
1 high
5 medium
7 low
0 ok
// module scores
· WHOIS & DNS LOW · SSL / TLS Certificate LOW ◐ CMS Detection MEDIUM ▲ Security Headers HIGH ◐ Raw HTTP Headers MEDIUM ✓ External JS Libraries OK ✓ Malware & Blocklists OK
// detailed findings click any row to expand
01
WHOIS & DNS
DNS records retrieved — SPF & DMARC present
· LOW
▸
02
SSL / TLS Certificate
Valid certificate, expires in 52 days — TLSv1.3
· LOW
▸
03
CMS Detection
WordPress detected — 2 plugins found
◐ MEDIUM
▸
04
Security Headers
5 of 7 headers missing
▲ HIGH
▾
// raw output
HSTS                        MISSING
CSP                         MISSING
X-Frame-Options             MISSING
X-Content-Type-Options      ok (nosniff)
Referrer-Policy             ok (no-referrer-when-downgrade)
Permissions-Policy          MISSING
Cross-Origin-Opener         MISSING
// findings (8)
  • ◐ medium HSTS not set — browsers may allow HTTP connections
  • ▲ high X-Frame-Options missing — clickjacking attacks possible
  • ◐ medium Content-Security-Policy missing — site exposed to XSS injection
  • ◐ medium Permissions-Policy missing — browser features not restricted
  • · low Cross-Origin-Opener-Policy not set
  • ✓ ok Referrer-Policy is configured
  • ✓ ok X-Content-Type-Options is configured
  • · low No /.well-known/security.txt — researchers cannot find a contact for vulnerability reports
05
Raw HTTP Headers
HTTP/3 · 25 headers · Flywheel/5.1.0
◐ MEDIUM
▸
06
External JS Libraries
No external JS libraries detected
✓ OK
▸
07
Malware & Blocklists
Clean — not present on any monitored blocklist
✓ OK
▸
// end of report · phoenix-cia.com · 2026-10-12 15:16:28 ↻ scan again