{
    "host": "arkoselabs.com",
    "host_url": "https://www.arkoselabs.com/",
    "task_id": "b19e48d5-e7f1-48f5-a1b2-e8f25c01c1cb",
    "status": "COMPLETED",
    "inline_connection": "Yes",
    "original_header": {
        "Content-Type": "text/html; charset=UTF-8",
        "Transfer-Encoding": "chunked",
        "Connection": "keep-alive",
        "Server": "nginx",
        "Date": "Sun, 15 Feb 2026 09:30:19 GMT",
        "Content-Encoding": "gzip",
        "X-Cache-Group": "normal",
        "Cache-Control": "max-age=600, must-revalidate",
        "Content-Security-Policy": "default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:",
        "Cross-Origin-Resource-Policy": "cross-origin",
        "Link": "<https://www.arkoselabs.com/wp-json/>; rel=\"https://api.w.org/\", <https://www.arkoselabs.com/wp-json/wp/v2/pages/32448>; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", <https://www.arkoselabs.com/>; rel=shortlink",
        "Permissions-Policy": "accelerometer=(), ambient-light-sensor=(), autoplay=(self \"https://www.youtube.com\" \"https://player.vimeo.com\"), battery=(), browsing-topics=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(self \"https://www.youtube.com\" \"https://player.vimeo.com\"), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(self \"https://www.youtube.com\" \"https://player.vimeo.com\"), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()",
        "Referrer-Policy": "origin-when-cross-origin",
        "Strict-Transport-Security": "max-age=31536000;",
        "X-Content-Type-Options": "nosniff",
        "X-Frame-Options": "SAMEORIGIN",
        "X-Powered-By": "Acorn 5.0.5 (Laravel 12.16.0)",
        "X-Cacheable": "SHORT",
        "Vary": "Accept-Encoding,Accept-Encoding,Accept-Encoding,Accept-Encoding,Cookie",
        "X-Cache": "Hit from cloudfront",
        "Via": "1.1 153a29b6f73d1188a3a2c0797369516a.cloudfront.net (CloudFront)",
        "X-Amz-Cf-Pop": "BOM78-P4",
        "Alt-Svc": "h3=\":443\"; ma=86400",
        "X-Amz-Cf-Id": "ho1YthzEGCJH3e2D-ck52LKG3W8-Vnesi8gX1KsYQ2sFNsIhEBz5IQ==",
        "Age": "170"
    },
    "ip_address": "108.158.46.123",
    "hosting_provider": "Amazon Web Services (AWS)",
    "registrar": null,
    "cms": "WordPress",
    "cms_cve": null,
    "server": "nginx",
    "server_disclosure_cve": null,
    "programming_language": "acorn 5.0.5 (laravel 12.16.0)",
    "technology_disclosure_cve": null,
    "mixed_content_analysis": null,
    "operating_system": "Linux/Unix",
    "open_ports": [
        "443",
        "80"
    ],
    "database_technology": null,
    "javascript_libraries": null,
    "javascript_libraries_cve": null,
    "secure_connection": "Yes",
    "directory_listing": null,
    "passwords_submitted_unencrypted": null,
    "missing_security_headers": [
        "X-XSS-PROTECTION",
        "X-PERMITTED-CROSS-DOMAIN"
    ],
    "missing_content_security_policy_header": null,
    "missing_strict_transport_security_header": null,
    "missing_referrer_policy_header": null,
    "missing_x_content_type_options_header": null,
    "missing_httponly_flag_in_cookies": {
        "issue": "Missing HttpOnly flag in cookies",
        "severity": "High",
        "cwe_id": "CWE-1004",
        "cwe_description": "Cookies accessible by JavaScript can be stolen via XSS.",
        "fix": "Set the HttpOnly flag to prevent client-side script access."
    },
    "missing_secure_flag_in_cookies": {
        "issue": "Missing Secure flag in cookies",
        "severity": "High",
        "cwe_id": "CWE-614",
        "cwe_description": "Cookies without the Secure flag may be sent over unencrypted connections.",
        "fix": "Enable the Secure flag for all session or sensitive cookies."
    },
    "secret_files_detection": [
        "https://www.arkoselabs.com/robots.txt",
        "https://www.arkoselabs.com/sitemap.xml"
    ],
    "robots_txt_file_found": null,
    "waf_detection": [
        "AWS WAF"
    ],
    "ssl_certificate": "Certificate is valid",
    "loose_cookie_domain": null,
    "csp_header_analysis": "Misconfigured",
    "openapi_disclosure": null,
    "password_leakage": null,
    "error_messages_analysis": null,
    "path_disclosure": null,
    "rate_limit_headers": {
        "issue": "Missing Rate Limit header",
        "severity": "Medium",
        "cwe_id": "CWE-770",
        "cwe_description": "Improper control of resource consumption may enable brute-force or DoS attacks.",
        "fix": "Implement rate limiting and add headers such as 'X-RateLimit-Limit' and 'Retry-After'."
    },
    "email_extraction": null,
    "xml_rpc_endpoint_detection": null,
    "http_methods_allowed": [
        "GET",
        "POST",
        "PUT",
        "PATCH",
        "DELETE",
        "OPTIONS",
        "HEAD"
    ],
    "enabled_debug_method": "No",
    "enabled_options_method": "Yes",
    "cross_domain_inclusion": [
        "cdn.cookielaw.org",
        "chat-application.com",
        "munchkin.marketo.net",
        "marketo.clearbit.com",
        "www.googletagmanager.com",
        "player.vimeo.com"
    ],
    "file_upload": null,
    "client_access_policies": null,
    "x_frame_options": "Properly Configured",
    "x_xss_protection": "Missing x-xss-protection header",
    "htaccess_exposure": null,
    "host_header_injection": null,
    "captcha_detection": null,
    "password_field_with_autocomplete": null,
    "spf": null,
    "dmarc": "v=DMARC1; p=reject; rua=mailto:postmaster@arkoselabs.com; ruf=mailto:postmaster@arkoselabs.com",
    "dkim": {
        "google": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WGKNiBagT7eR/nlojcYZGw70niustmkxS68eF8UZfFIKk7yC0/J5ehV4s6M77+YuwEflfgW3mpFQ/u/mQzLrUDl2V3A9ALYKYzAG2R+LE0sLF1uNgCvuwQVGNJpnRXOXaRdtfW3qF0+/lPbI6D+9ydlKYh1rppZLrlI21I3MwfNi5EgiSJI6SmDFfmMYx5dtCZTP3joiVEc0uPdsJCkaEX1yEJrdfTSNC76fmCT+9zM4Bq8DwXUclgQvkvndfe3stQO8p3bg4SPTIVtthAPD8WpnleP6tq70xPtLhviWysyc3XL9lbs7stc//vXiN3LkQ1uuJ+ItyC6qFHN2NXvXQIDAQAB"
    },
    "unencrypted_viewstate": null,
    "total_scans": [
        "Inline Connection",
        "Ip-Address",
        "Cloud_Provider",
        "Server Disclosure",
        "Technology Disclosure",
        "Cms Detection",
        "Mixed Content Analysis",
        "Operating-System",
        "Open Ports Scan",
        "Database",
        "Javascript Libraries",
        "Secure Connection Check",
        "Directories Listing Exposed",
        "Password Exposing Pages",
        "Missing Security Headers",
        "Missing Content-Security-Policy",
        "Missing Strict-Transport-Security",
        "Missing Referrer-Policy",
        "Missing X-Content-Type-Options",
        "Missing Cookie http flag",
        "Missing Cookie secure flag",
        "Secret Files Detection",
        "Security File Detection",
        "WAF-Detection",
        "SSL Certificate Validation",
        "Loose Cookie Domain",
        "CSP Header Analysis",
        "OpenAPI Disclosure",
        "Password Leak Detection",
        "Path Disclosure",
        "Error Messages Analysis",
        "Rate Limit Headers",
        "Email Extraction",
        "Xml-RPC Endpoint Detection",
        "HTTP Methods Allowed",
        "Enabled Debug Method",
        "Enabled OPTIONS Method",
        "Cross-Domain Inclusion",
        "File Upload Detection",
        "Client Access Policies",
        "X-FRAME OPTIONS",
        "X-XSS PROTECTION",
        ".htaccess Exposure",
        "Captcha Detection",
        "Password field with autocomplete",
        "DKIM",
        "SPF",
        "DMARC",
        "Host Header Injection",
        "Unencrypted Viewstate"
    ],
    "executive_summary": {
        "Total Checks Passed": 25,
        "Passed Cases": [
            "Mixed Content (HTTP on HTTPS)",
            "Javascript Libraries",
            "Secure Connection",
            "Directory Listing Exposed",
            "Passwords submitted unencrypted",
            "Missing Content-Security-Policy header",
            "Missing Strict-Transport-Security header",
            "Missing Referrer-Policy header",
            "Missing X-Content-Type-Options header",
            "WAF Detection",
            "SSL Certificate",
            "Loose cookie domain",
            "OpenAPI Disclosure",
            "Password Leakage",
            "Error Messages Analysis",
            "Path Disclosure",
            "Emails exposed",
            " Not Enabled Debug Method",
            "File Upload Detection",
            "Client Access Policies",
            ".htaccess Exposure",
            "Host Header Injection",
            "SPF",
            "DMARC",
            "DKIM"
        ],
        "Total Checks Failed": 17,
        "Failed Cases": [
            "Server Disclosure",
            "Technology Disclosure",
            "Open Ports Scan",
            "Missing Security Headers",
            "Missing HttpOnly flag in cookies",
            "Missing Secure flag in cookies",
            "Secret Files Detection",
            "robots.txt file found",
            "security.txt file not found",
            "Rate Limit Headers",
            "Enabled OPTIONS Method",
            "Cross-Domain Inclusion",
            "X-FRAME OPTIONS",
            "X-XSS PROTECTION",
            "Captcha checking",
            "Password field with autocomplete",
            "Unencrypted Viewstate"
        ],
        "Total CWEs Found": 4
    },
    "total_scan_time": "23.8 seconds",
    "scan_start_timestamp": "2026-02-15 09:33:09"
}