Security headers and locked-down service files are the baseline that scanner bots probe on everyone. Seen from the server response, no attacks on the site - <a href="https://aitunz.com/tool_security">site security audit</a>: exposed files, missing HSTS and CSP, version leaks.