Data Exposure
Email Address Exposure Check
Email addresses in HTML code are easily harvested by bots. Learn how to mask them to avoid spam and impersonation.
What this test checks
This test checks whether email addresses are publicly exposed in your site's HTML code. Spam bots harvest these addresses to send unsolicited messages. Moreover, exposed addresses can be used for phishing or identity theft. Even if emails are displayed on the page, their plaintext presence in the HTML makes them vulnerable.
Our recommendation
Mask email addresses in your HTML code using protection techniques: conversion to ASCII codes, JavaScript, image display, or a contact form. Avoid placing plaintext emails even in HTML comments. Use services like Cloudflare Email Obfuscation to automate masking.
Security tests
Read more
Server Configuration