aitextwatermarkremover.com

Scanned:

Want one of these looked at properly?

This scan is broad and passive — it reads what your site shows everyone, across all five areas. A deep audit takes one of those areas and goes all the way down on your site specifically.

No email, no sign-up. Pick the one you care about.

Watch this site's security

We'll email you if its security slips: a new vulnerability, an expiring certificate, a blacklisting. No account needed.

Security alerts only. Nothing else, and no email unless something is wrong. Unsubscribe anytime.

Want more than security alerts?

Coming soon

Monitor: daily re-scans across all five axes, instant alerts on new and cert expiry, Telegram & web push, and full history.

Changes since your last scan

Previous scan:

Overall

3979417Performance

Fix what matters first

  1. 1
    Time to First Byte

    Reduce with caching, a CDN, or faster backend responses.

    +4
  2. 2
    Meta description

    Aim for a meta description of about 50–160 characters.

    +2
  3. 3
    Domain age

    Newly registered domains carry less trust; this improves with age.

    +1

Recommendations are ranked by their impact on your score.

All checks

Security

100/ 100
  • Pass

    HTTPS & HTTP→HTTPS redirect

    HTTPS available; HTTP redirects to HTTPS

  • Pass

    TLS certificate validity

    Valid; expires in 75 days

    expires 2026-11-12 · WE1

    Good: valid certificate with 30 days or more to expiry

  • Pass

    HSTS (Strict-Transport-Security)

    Present

    max-age=31536000; includeSubDomains; preload
  • Pass

    Content-Security-Policy

    Present

    default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://acco…
  • Pass

    Core security headers

    All present

    present: X-Content-Type-Options, X-Frame-Options, Referrer-Policy
  • Pass

    Mixed content (HTTP on HTTPS)

    No insecure (http://) subresources

  • Pass

    SPF email anti-spoofing

    record present

    v=spf1 include:_spf.mx.cloudflare.net ~all
  • Pass

    DMARC email anti-spoofing

    record present

    v=DMARC1; p=reject;
  • N/A

    Vulnerable front-end libraries

    No recognizable front-end library versions detected

  • N/A

    CMS known vulnerabilities

    Next.js detected, but no reliable version — no vulnerability claim

Performance

83/ 100
  • Warn

    Time to First Byte

    Moderate

    1104 ms

    Fast: under 800 ms · Moderate: 800–1800 ms · Slow: over 1800 ms

    Reduce with caching, a CDN, or faster backend responses.

  • Pass

    Text compression

    Enabled

    br
  • Pass

    HTTP/2 or HTTP/3

    Modern

    HTTP/2.0 (HTTP/3 advertised)

    Modern: HTTP/2 or HTTP/3 · Outdated: HTTP/1.1 or older

  • Pass

    Cache-Control

    Present

    public, max-age=0, must-revalidate
  • Pass

    Core Web Vitals (PageSpeed)

    perf 94/100, 2.4 s, 0.00 (lab)

    Good: 2.5 s or less · 0.1 or less

SEO

91/ 100
  • Pass

    Page title

    47 characters

    AI Text Watermark Remover: Clean or Reconstruct

    Good: 10–70 characters

  • Warn

    Meta description

    171 characters

    AI Text Watermark Remover strips hidden Unicode for free. Pro rewrite reconstructs wording so statistical watermarks like Claude’s sampling mark are not left in the draft.

    Good: 50–160 characters

    Aim for a meta description of about 50–160 characters.

  • Pass
  • Pass

    robots.txt

    Present and not blocking

    https://aitextwatermarkremover.com/robots.txt
  • Pass
  • Pass

    Single H1

    1 H1 tag(s)

    AI Text Watermark Remover
  • Pass

    Image alt text

    34/37 images have alt (92%)

    Good: 90% or more with alt text · Poor: under 50%

  • Pass

    Structured data (JSON-LD)

    present

    FAQPage, Question, Answer, Organization, ImageObject, ContactPoint

One SEO problem on this page. What about the rest of the site?

That is one page, checked from the outside. The faults that cost the most traffic only show up across a whole site — pages sharing a title, sections nothing links to, canonicals pointing at URLs that are gone.

A full audit crawls up to 100 pages and checks

  • Indexability and crawling
  • On-page and content
  • Technical
  • Structured data and social previews
  • Links
  • Site-wide configuration

Free while in beta ($19 after launch). No domain verification — we only read pages your site already shows everyone.

Infrastructure

100/ 100
  • Pass

    CMS detection

    Detected

    Next.js
  • Pass

    Web server

    Identified

    cloudflare
  • Pass

    CDN detection

    Detected

    Cloudflare
  • Pass

    TLS version

    Up to date

    TLS 1.3

    Up to date: TLS 1.2 or 1.3 · Deprecated: TLS 1.0 or 1.1

  • Pass

    IPv6 (AAAA record)

    AAAA record present

    2606:4700:3035::ac43:ddce

Reputation

92/ 100
  • Pass

    Google Safe Browsing

    Not flagged

    checked: Google Safe Browsing
  • Pass

    Domain blacklist status

    Not on major blocklists

    checked: Spamhaus DBL, SURBL
  • Warn

    Domain age

    Registered ~17 days ago

    2026-08-11

    Good: 90 days or more since registration

    Newly registered domains carry less trust; this improves with age.

  • Pass

    Domain expiry

    Expires in 347 days

    2027-08-11

    Good: 30 days or more to expiry

Want one of these looked at properly?

This scan is broad and passive — it reads what your site shows everyone, across all five areas. A deep audit takes one of those areas and goes all the way down on your site specifically.

No email, no sign-up. Pick the one you care about.

Go deeper

This scan is passive. An attacker won't be.

The free scan reads what your site shows everyone. A Deep Audit does what an attacker does: it actively probes your verified site for what's really exposed.

This free scan (passive)

  • Security score
  • Known-CVE counts
  • Security headers
  • TLS & certificate
  • Blacklist & Safe Browsing

Deep Audit: active scan of your verified site

  • Per-CVE breakdown: IDs, severity, exploit availability, fix version
  • Exposed files (.git, .env, backups)
  • Directory listing
  • Open admin panels
  • Open ports
  • Subdomain exposure
  • Prioritized fix plan
  • Full PDF report

What we can't check without your permission

These need active probing of your site: exposed .git/.env/backups, open admin panels, open ports, forgotten subdomains. Verify your domain and we'll show you what an attacker would find.

How it works

  1. Verify your domain: a file or DNS record, about 2 minutes.
  2. We actively scan it: a few minutes; we email you when it's ready.
  3. Get your full report + PDF.

The deep scan is live and free while we're in beta. Verify your domain and run it now.

Active checks run only on a domain you've verified as yours, with your consent. We detect, never exploit. Free in beta; $39 one-time after launch, no subscription, and early adopters keep the deep scan free.

Run a free deep scan

Share this report

Request removal of this report

Recently checked

See all reports →