Checks

assetlinks.json is empty

/.well-known/assetlinks.json exists but contains no statements.

Why it matters

An empty Digital Asset Links file does not bind the site to an Android app.

What to do

Publish valid statements or remove the file.

Reference

Server and framework disclosure headers reveal implementation details useful to attackers.

OWASP WSTG — Fingerprint Web Server