1. Email & DNS Posture (DoH)
SPF Record (v=spf1)MISSING (Spoofable)
DMARC Policy (_dmarc)MISSING (No Policy)
2. HTTP Headers & PHP2Shell (CVE-2026-109618)
HTTPS / TransportHTTPS (TLS OK)
PHP2Shell (X-Powered-By)Not Exposed
HSTS (Strict-Transport)MISSING
Clickjacking (CSP / XFO)MISSING