Scanned:
Score by axis
Watch this site's security
We'll email you if its security slips — a new vulnerability, an expiring certificate, a blacklisting. No account needed.
Security alerts only — nothing else, and no email unless something is wrong. Unsubscribe anytime.
Want more than security alerts?
Coming soonMonitor — daily re-scans across all five axes, instant alerts on new and cert expiry, Telegram & web push, and full history.
Add schema.org to enable rich results.
Recommendations are ranked by their impact on your score.
HTTPS & HTTP→HTTPS redirect
HTTPS available; HTTP redirects to HTTPS
TLS certificate validity
Valid; expires in 73 days
expires 2026-09-25 · YE1HSTS (Strict-Transport-Security)
Present
max-age=31536000; includeSubDomains; preloadContent-Security-Policy
No Content-Security-Policy header
Add a Content-Security-Policy to mitigate and injection.
Core security headers
All present
Mixed content (HTTP on HTTPS)
No insecure (http://) subresources
SPF email anti-spoofing
record present
v=spf1 include:_spf.google.com include:servers.mcsv.net include:spf.mandrillapp.com include:em4186.swell.store -allDMARC email anti-spoofing
record present
v=DMARC1;p=reject;sp=reject;pct=100;rua=mailto:22c84bb25c@rua.easydmarc.eu;ruf=mailto:22c84bb25c@ruf.easydmarc.eu;ri=86400;fo=1Vulnerable front-end libraries
No recognizable front-end library versions detected
CMS known vulnerabilities
No CMS detected
Time to First Byte
14 ms
Text compression
Enabled (br)
HTTP/2 or HTTP/3
HTTP/2.0
Cache-Control
No-Cache
Core Web Vitals (PageSpeed)
perf 90/100, 2294ms, 0.00 (field)
Page title
Smashing Magazine — For Web Designers And Developers
Meta description
120 characters
Magazine on CSS, JavaScript, front-end, accessibility, UX and design. For developers, designers and front-end engineers.Single H1
1 H1 tag(s)
Image alt text
26/26 images have alt (100%)
Structured data (JSON-LD)
No structured data
Add schema.org to enable rich results.
CMS detection
No CMS fingerprint detected
Web server
Netlify
CDN detection
Netlify
TLS version
TLS 1.3
IPv6 (AAAA record)
AAAA record present
2600:1f18:16e:df01::1f6Google Safe Browsing
Not flagged
Domain blacklist status
Not on major blocklists
checked: Spamhaus DBL, SURBLDomain age
Registered 2006-08-25 (~242 months)
Domain expiry
Expires in 42 days
2026-08-25Go deeper
The free scan reads what your site shows everyone. A Deep Audit does what an attacker does — it actively probes your verified site for what's really exposed.
These need active probing of your site: exposed .git/.env/backups, open admin panels, open ports, forgotten subdomains. Verify your domain and we'll show you what an attacker would find.
The deep scan is live and free while we're in beta. Verify your domain and run it now.
Active checks run only on a domain you've verified as yours, with your consent. We detect — never exploit. Free in beta; $39 one-time after launch, no subscription — and early adopters keep the deep scan free.
Run a free deep scanEmbed this badge on your website — it links back to this full report.
<a href="https://chkweb.com/report/smashingmagazine.com"><img src="https://chkweb.com/badge/smashingmagazine.com.svg" alt="Website security checked by CheckWeb" /></a>