strategyhub.com.ua

Scanned:

Score by axis

Want one of these looked at properly?

This scan is broad and passive — it reads what your site shows everyone, across all five areas. A deep audit takes one of those areas and goes all the way down on your site specifically.

Deep security auditDeep SEO audit

No email, no sign-up. Pick the one you care about.

Watch this site's security

We'll email you if its security slips: a new vulnerability, an expiring certificate, a blacklisting. No account needed.

Security alerts only. Nothing else, and no email unless something is wrong. Unsubscribe anytime.

Want more than security alerts?

Coming soon

Monitor: daily re-scans across all five axes, instant alerts on new and cert expiry, Telegram & web push, and full history.

Changes since your last scan

Previous scan:

We checked different things this time, so we can't compare the scores.

52Reputation

Measurement changed(1)

Fix what matters first

  1. 1
    HTTPS & HTTP→HTTPS redirectHow to fix this →

    Add a permanent (301) redirect from http:// to https://.

    +5
  2. 2
    Core security headersHow to fix this →

    Add X-Content-Type-Options, X-Frame-Options, and Referrer-Policy.

    +5
  3. 3
    HSTS (Strict-Transport-Security)How to fix this →

    Add `Strict-Transport-Security: max-age=31536000; includeSubDomains`.

    +4
  4. 4
    Content-Security-PolicyHow to fix this →

    Add a Content-Security-Policy to mitigate and injection.

    +2
  5. 5
    Mixed content (HTTP on HTTPS)How to fix this →

    Serve all scripts, styles, images and media over https:// (browsers block insecure active content).

    +2

Recommendations are ranked by their impact on your score.

All checks

Security

51/ 100
  • Warn

    HTTPS & HTTP→HTTPS redirect

    HTTPS available, but HTTP does not redirect to HTTPS

    Add a permanent (301) redirect from http:// to https://.

  • Pass

    TLS certificate validity

    Valid; expires in 45 days

    expires 2026-10-22 · YR2

    Good: valid certificate with 30 days or more to expiry

  • Warn

    HSTS (Strict-Transport-Security)

    No Strict-Transport-Security header

    Add `Strict-Transport-Security: max-age=31536000; includeSubDomains`.

  • Warn

    Content-Security-Policy

    No Content-Security-Policy header

    Add a Content-Security-Policy to mitigate and injection.

  • Fail

    Core security headers

    None present

    Add X-Content-Type-Options, X-Frame-Options, and Referrer-Policy.

  • Warn

    Mixed content (HTTP on HTTPS)

    7 insecure subresource(s), e.g. http://strategyhub.com.ua/wp-content/plugins/wordpress-popul…

    Serve all scripts, styles, images and media over https:// (browsers block insecure active content).

  • Pass

    SPF email anti-spoofing

    record present

    v=spf1 +a +mx +ip4:185.253.218.120 ~all
  • Pass

    DMARC email anti-spoofing

    record present

    v=DMARC1; p=none;
  • N/A

    Vulnerable front-end libraries

    No recognizable front-end library versions detected

  • N/A

    CMS known vulnerabilities

    WordPress detected, but no reliable version — no vulnerability claim

Performance

100/ 100
  • Pass

    Time to First Byte

    Fast

    215 ms

    Fast: under 800 ms · Moderate: 800–1800 ms · Slow: over 1800 ms

  • Pass

    Text compression

    Enabled

    gzip
  • Pass

    HTTP/2 or HTTP/3

    Modern

    HTTP/2.0

    Modern: HTTP/2 or HTTP/3 · Outdated: HTTP/1.1 or older

  • Pass

    Cache-Control

    Present

    public
  • Pass

    Core Web Vitals (PageSpeed)

    perf 99/100, 1.8 s, 0.00 (lab)

    Good: 2.5 s or less

SEO

100/ 100
  • Pass

    Page title

    51 characters

    StrategyHub — новини, огляди та гайди по стратегіях

    Good: 10–70 characters

  • Pass

    Meta description

    131 characters

    Новини, патчі, огляди та гайди по стратегічних іграх. Civilization VII, Frostpunk 2, Manor Lords, RTS та TBS стратегії українською.

    Good: 50–160 characters

  • Pass

    Canonical URL

    Present

    https://strategyhub.com.ua
  • Pass

    robots.txt

    Present and not blocking

    https://strategyhub.com.ua/robots.txt
  • Pass

    XML sitemap

    Found

    https://strategyhub.com.ua/sitemap_index.xml
  • Pass

    Single H1

    1 H1 tag(s)

    Star Wars: Zero Company — огляд після релізу: чи виправдала гра очікування
  • Pass

    Image alt text

    14/14 images have alt (100%)

    Good: 90% or more with alt text · Poor: under 50%

  • Pass

    Structured data (JSON-LD)

    present

    Organization, ImageObject, WebSite, SearchAction, CollectionPage

This page is clean. What about the rest of the site?

A clean page is a good sign and not a verdict on the site. The faults that cost the most traffic only exist between pages, so a single-page check cannot see them at all.

A full audit crawls up to 100 pages and checks

  • Indexability and crawling
  • On-page and content
  • Technical
  • Structured data and social previews
  • Links
  • Site-wide configuration
Run a full SEO auditWhat it covers →

Free while in beta ($19 after launch). No domain verification — we only read pages your site already shows everyone.

Infrastructure

83/ 100
  • Pass

    CMS detection

    Detected

    WordPress
  • Pass

    Web server

    Identified

    Apache
  • N/A

    CDN detection

    No CDN fingerprint detected

  • Pass

    TLS version

    Up to date

    TLS 1.3

    Up to date: TLS 1.2 or 1.3 · Deprecated: TLS 1.0 or 1.1

  • Warn

    IPv6 (AAAA record)

    No AAAA record

    Add an AAAA record to serve visitors over IPv6.

Reputation

100/ 100
  • Pass

    Google Safe Browsing

    Not flagged

    checked: Google Safe Browsing
  • Pass

    Domain blacklist status

    Not on major blocklists

    checked: Spamhaus DBL, SURBL
  • Pass

    Domain age

    Registered ~3 months ago

    2026-05-24

    Good: 90 days or more since registration

  • Pass

    Domain expiry

    Expires in 258 days

    2027-05-24

    Good: 30 days or more to expiry

Want one of these looked at properly?

This scan is broad and passive — it reads what your site shows everyone, across all five areas. A deep audit takes one of those areas and goes all the way down on your site specifically.

Deep security auditDeep SEO audit

No email, no sign-up. Pick the one you care about.

Go deeper

This scan is passive. An attacker won't be.

The free scan reads what your site shows everyone. A Deep Audit does what an attacker does: it actively probes your verified site for what's really exposed.

This free scan (passive)

  • Security score
  • Known-CVE counts
  • Security headers
  • TLS & certificate
  • Blacklist & Safe Browsing

Deep Audit: active scan of your verified site

  • Per-CVE breakdown: IDs, severity, exploit availability, fix version
  • Exposed files (.git, .env, backups)
  • Directory listing
  • Open admin panels
  • Open ports
  • Subdomain exposure
  • Prioritized fix plan
  • Full PDF report

What we can't check without your permission

These need active probing of your site: exposed .git/.env/backups, open admin panels, open ports, forgotten subdomains. Verify your domain and we'll show you what an attacker would find.

How it works

  1. Verify your domain: a file or DNS record, about 2 minutes.
  2. We actively scan it: a few minutes; we email you when it's ready.
  3. Get your full report + PDF.

The deep scan is live and free while we're in beta. Verify your domain and run it now.

Active checks run only on a domain you've verified as yours, with your consent. We detect, never exploit. Free in beta; $39 one-time after launch, no subscription, and early adopters keep the deep scan free.

Run a free deep scan

Share this report

Share on XShare on LinkedIn

Request removal of this report

Recently checked

See all reports →