{"history":[{"id":121193755,"scanned_at":"2026-09-15T10:58:16.689Z","grade":"F","score":0},{"id":132419012,"scanned_at":"2026-10-30T22:06:48.250Z","grade":"F","score":10},{"id":134725073,"scanned_at":"2026-11-10T22:17:45.681Z","grade":"F","score":0}],"scan":{"id":134975999,"algorithm_version":6,"scanned_at":"2026-11-12T03:15:23.536Z","error":null,"grade":"F","response_headers":{"nel":"{\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}","date":"Thu, 12 Nov 2026 03:15:24 GMT","link":"; rel=\"alternate\"; hreflang=\"en\", ; rel=\"alternate\"; hreflang=\"zh\", ; rel=\"alternate\"; hreflang=\"x-default\", ; rel=\"describedby\"; type=\"text/plain\"","vary":"RSC, Accept, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Next-Url, X-Vinext-Interception-Context, X-Vinext-Mounted-Slots, X-Vinext-Rsc-Render-Mode, Cookie, Authorization","cf-ray":"a5925f385b0eca33-SEA","server":"cloudflare","alt-svc":"h3=\":443\"; ma=86400","report-to":"{\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x5WM2njTLaPUo2oX6vqdrEoOgUettdTkq8QNxiCToZuBttcmx7v0gwGVsLUe%2F15ULQZQleu9vcI8qQ2DmIwqY3GrAxGfTsd3EUlZajXywJzy00gNQTPmrQcHm6SPQUxGbiSl\"}]}","connection":"close","set-cookie":"NEXT_LOCALE=en; Path=/; SameSite=lax","content-type":"text/html; charset=utf-8","cache-control":"no-store, must-revalidate","server-timing":"cfEdge;dur=408,cfOrigin;dur=0,cfWorker;dur=387","content-signal":"search=yes, ai-input=yes","transfer-encoding":"chunked","x-public-html-cache":"MISS"},"score":0,"status_code":200,"tests_failed":6,"tests_passed":6,"tests_quantity":12},"tests":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","link":"/en-US/docs/Web/Security/Practical_implementation_guides/CSP","title":"Content Security Policy (CSP)","pass":false,"result":"csp-not-implemented","score_description":"

\n Content Security Policy (CSP) header not implemented\n

","recommendation":"

\n Implement one, see MDN's Content Security Policy (CSP) documentation.\n

","score_modifier":-25,"data":null,"http":false,"meta":false,"policy":null,"num_policies":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","link":"/en-US/docs/Web/Security/Practical_implementation_guides/Cookies","title":"Cookies","pass":false,"result":"cookies-without-secure-flag","score_description":"

\n Cookies set without using the Secure flag or set over HTTP.\n

","recommendation":"

\n Use Secure flag and set up HSTS.\n

","score_modifier":-20,"data":{"NEXT_LOCALE":{"path":"/","port":null,"domain":"musicvideoai.pro","samesite":"lax"}},"same_site":false},"cross-origin-embedder-policy":{"expectation":"coep-not-implemented","name":"cross-origin-embedder-policy","link":"/en-US/docs/Web/HTTP/Reference/Headers/Cross-Origin-Embedder-Policy","title":"Cross Origin Embedder Policy","pass":true,"result":"coep-not-implemented","score_description":"

\n Cross-Origin-Embedder-Policy header not implemented.\n

","recommendation":"

\n Set to require-corp or credentialless.\n

","score_modifier":0,"data":null,"http":false},"cross-origin-opener-policy":{"expectation":"coop-not-implemented","name":"cross-origin-opener-policy","link":"/en-US/docs/Web/HTTP/Reference/Headers/Cross-Origin-Opener-Policy","title":"Cross Origin Opener Policy","pass":true,"result":"coop-not-implemented","score_description":"

\n Cross-Origin-Opener-Policy header not implemented.\n

","recommendation":"

\n Set to same-origin, same-origin-allow-popups, or noopener-allow-popups.\n

","score_modifier":0,"data":null,"http":false},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","link":"/en-US/docs/Web/Security/Practical_implementation_guides/CORS","title":"Cross Origin Resource Sharing (CORS)","pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"

\n Content is not visible via cross-origin resource sharing (CORS) files or headers.\n

","recommendation":"","score_modifier":0,"data":null},"redirection":{"expectation":"redirection-to-https","name":"redirection","link":"/en-US/docs/Web/Security/Practical_implementation_guides/TLS#http_redirection","title":"Redirection","pass":false,"result":"redirection-missing","score_description":"

\n Does not redirect to an HTTPS site.\n

","recommendation":"

\n Redirect to the same host on HTTPS first, then redirect to the final host on HTTPS.\n

","score_modifier":-20,"route":["http://musicvideoai.pro/"],"redirects":false,"status_code":200,"destination":"http://musicvideoai.pro/"},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","link":"/en-US/docs/Web/Security/Practical_implementation_guides/Referrer_policy","title":"Referrer Policy","pass":null,"result":"referrer-policy-not-implemented","score_description":"

\n Referrer-Policy header not implemented.\n

","recommendation":"

\n Set to strict-origin-when-cross-origin at a minimum.\n

","score_modifier":0,"data":null,"http":false,"meta":false},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","link":"/en-US/docs/Web/Security/Practical_implementation_guides/TLS#http_strict_transport_security_implementation","title":"Strict Transport Security (HSTS)","pass":false,"result":"hsts-not-implemented","score_description":"

\n Strict-Transport-Security header not implemented.\n

","recommendation":"

\n Add HSTS. Consider rolling out with shorter periods first (as suggested on https://hstspreload.org/).\n

","score_modifier":-20,"data":null,"max_age":null,"preload":false,"preloaded":false,"include_sub_domains":false},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","link":"/en-US/docs/Web/Security/Subresource_Integrity","title":"Subresource Integrity","pass":true,"result":"sri-implemented-and-external-scripts-loaded-securely","score_description":"

\n Subresource Integrity (SRI) is implemented and all scripts are loaded securely.\n

","recommendation":"","score_modifier":5,"data":{"https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092":{"integrity":"sha512-UKNk8GbxkABxKcXYuLkO16EleLGUkcvJWtpSNmExE0Too3ZaFAxTscNWEc1OdAv5/BikHawapSCaiD2XCmp+Bw==","crossorigin":"anonymous"}}},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","link":"/en-US/docs/Web/Security/Practical_implementation_guides/MIME_types","title":"X-Content-Type-Options","pass":false,"result":"x-content-type-options-not-implemented","score_description":"

\n X-Content-Type-Options header not implemented.\n

","recommendation":"

\n Set to nosniff.\n

","score_modifier":-5,"data":null},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","link":"/en-US/docs/Web/Security/Attacks/Clickjacking","title":"X-Frame-Options","pass":false,"result":"x-frame-options-not-implemented","score_description":"

\n X-Frame-Options (XFO) header not implemented.\n

","recommendation":"

\n Implement frame-ancestors CSP.\n

","score_modifier":-20,"data":null},"cross-origin-resource-policy":{"expectation":"corp-implemented-with-same-site","name":"cross-origin-resource-policy","link":"/en-US/docs/Web/Security/Practical_implementation_guides/CORP","title":"Cross Origin Resource Policy","pass":null,"result":"corp-not-implemented","score_description":"

\n Cross Origin Resource Policy (CORP) is not implemented (defaults to cross-origin).\n

","recommendation":"","score_modifier":0,"data":null,"http":false,"meta":false}}}