Scanned:
Score by axis
Watch this site's security
We'll email you if its security slips — a new vulnerability, an expiring certificate, a blacklisting. No account needed.
Security alerts only — nothing else, and no email unless something is wrong. Unsubscribe anytime.
Want more than security alerts?
Coming soonMonitor — daily re-scans across all five axes, instant alerts on new and cert expiry, Telegram & web push, and full history.
Improve Core Web Vitals — see the PageSpeed Insights report for specifics.
Add an TXT record (v=spf1 …) so others can't spoof email from your domain.
Add a TXT record at _dmarc (v=DMARC1; p=…) to control spoofed-email handling.
Use a single <h1> per page.
Recommendations are ranked by their impact on your score.
HTTPS & HTTP→HTTPS redirect
HTTPS available; HTTP redirects to HTTPS
TLS certificate validity
Valid; expires in 77 days
expires 2026-10-09 · YE2Good: valid certificate with 30 days or more to expiry
HSTS (Strict-Transport-Security)
Present
max-age=31536000Content-Security-Policy
Present
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; …Core security headers
Missing: X-Frame-Options
present: X-Content-Type-Options, Referrer-PolicyAdd the missing headers: X-Frame-Options.
Mixed content (HTTP on HTTPS)
No insecure (http://) subresources
SPF email anti-spoofing
No record
Add an TXT record (v=spf1 …) so others can't spoof email from your domain.
DMARC email anti-spoofing
No record
Add a TXT record at _dmarc (v=DMARC1; p=…) to control spoofed-email handling.
Vulnerable front-end libraries
No recognizable front-end library versions detected
CMS known vulnerabilities
No CMS detected
Time to First Byte
Fast
125 msFast: under 800 ms · Moderate: 800–1800 ms · Slow: over 1800 ms
Text compression
Enabled
gzipHTTP/2 or HTTP/3
Modern
HTTP/2.0Modern: HTTP/2 or HTTP/3 · Outdated: HTTP/1.1 or older
Cache-Control
Present
public, max-age=60, stale-while-revalidate=300Core Web Vitals (PageSpeed)
perf 79/100, 5.4 s, 0.00 (lab)
Good: 2.5 s or less
Improve Core Web Vitals — see the PageSpeed Insights report for specifics.
Page title
52 characters
ARK - RUSSIA: русская вики, сервера, новости и гайдыGood: 10–70 characters
Meta description
138 characters
ARK - RUSSIA — русская база знаний и портал по ARK: вики существ и предметов, карты, гайды, новости и сервера Survival Evolved и Ascended.Good: 50–160 characters
Single H1
2 H1 tag(s)
Use a single <h1> per page.
Image alt text
1/2 images have alt (50%)
Good: 90% or more with alt text · Poor: under 50%
Add alt text to the remaining images.
Structured data (JSON-LD)
present
WebSiteCMS detection
No CMS fingerprint detected
Web server
Identified
nginx/1.24.0 (Ubuntu)CDN detection
No CDN fingerprint detected
TLS version
Up to date
TLS 1.3Up to date: TLS 1.2 or 1.3 · Deprecated: TLS 1.0 or 1.1
IPv6 (AAAA record)
No AAAA record
Add an AAAA record to serve visitors over IPv6.
Google Safe Browsing
Not flagged
checked: Google Safe BrowsingDomain blacklist status
Not on major blocklists
checked: Spamhaus DBL, SURBLDomain age
Registered ~8 years ago
2018-04-29Good: 90 days or more since registration
Domain expiry
Expires in 279 days
2027-04-29Good: 30 days or more to expiry
Go deeper
The free scan reads what your site shows everyone. A Deep Audit does what an attacker does — it actively probes your verified site for what's really exposed.
These need active probing of your site: exposed .git/.env/backups, open admin panels, open ports, forgotten subdomains. Verify your domain and we'll show you what an attacker would find.
The deep scan is live and free while we're in early access. Verify your domain and run it now.
Active checks run only on a domain you've verified as yours, with your consent. We detect — never exploit. Free in early access; $39 one-time after launch, no subscription — and early adopters keep the deep scan free.
Run a free deep scanEmbed this badge on your website — it links back to this full report.
<a href="https://chkweb.com/report/ark-russia.ru"><img src="https://chkweb.com/badge/ark-russia.ru.svg" alt="Website security checked by CheckWeb" /></a>