Security Scan Results
https://desentupidoravaidarcerto.com.br
Scan complete
desentupidoravaidarcerto.com.br
Good Security
17 issues detected
Scanned 2 weeks ago
17
Total
0
Critical
0
High
3
Medium
WordPress version 6.9.4 detected
WP_DEBUG is disabled (no PHP errors visible)
PHP 8.3.30 detected (supported version)
X-Powered-By header exposed: PHP/8.3.30 — reveals server software
How to fix: Hide X-Powered-By header. In php.ini set expose_php = Off, or add Header unset X-Powered-By to .htaccess.
Missing security header: X-Frame-Options -- Prevents clickjacking attacks
How to fix: Add to .htaccess: Header always set X-Frame-Options "SAMEORIGIN" — prevents clickjacking attacks.
Missing security header: X-Content-Type-Options -- Prevents MIME-type sniffing
How to fix: Add to .htaccess: Header always set X-Content-Type-Options "nosniff" — prevents MIME-type sniffing.
Missing security header: Strict-Transport-Security -- Enforces HTTPS connections
How to fix: Add to .htaccess or nginx: Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
Missing security header: Referrer-Policy -- Controls referrer information
Missing security header: Permissions-Policy -- Controls browser feature access
1 of 6 security headers configured
SSL certificate valid (72 days remaining) — issued by Google Trust Services
HTTP correctly redirects to HTTPS
REST API user enumeration blocked
External JS from popular domain: code.jivosite.com (Tranco rank #3,916)
How to fix: This script is from a well-known domain (ranked in the top 100K globally). Likely legitimate, but verify it matches a service you intentionally added.
1 trusted external script(s): www.googletagmanager.com (Google)
1 external script(s) from popular domains (Tranco top 100K): code.jivosite.com
How to fix: These scripts are from globally popular domains. They are very likely legitimate services but were not in our curated whitelist.
Checked against 11 blacklist services
Want to find hidden issues?
This surface scan checks what's publicly visible. A deep scan connects via SSH to check file integrity, database injections, and hidden backdoors.
Run Deep Scan — $1