- Nikto v2.6.0
---------------------------------------------------------------------------
+ Target IP:          13.32.214.166
+ Target Hostname:    kayetlynnjohnson.smugmug.com
+ Target Port:        80
+ Platform:           Unknown
+ Start Time:         2026-10-08 20:11:59 (GMT0)
---------------------------------------------------------------------------
+ Server: nginx
+ [999986] /: Retrieved via header: 1.1 76ea4124553a6a24f128f56848dd62cc.cloudfront.net (CloudFront).
+ [999100] /: Uncommon header(s) 'x-ttfb' found, with contents: 0.0127.
+ [999100] /: Uncommon header(s) 'x-env' found, with contents: a=live, b=www, c=e8889be1, d=i-033aaa657addea6a4.
+ [999100] /: Uncommon header(s) 'x-request-id' found, with contents: Root=1-6ac7f90f-448cbf7106351b155e0e40a1.
+ [999100] /: Uncommon header(s) 'smug-cdn' found, with contents: cloudfront (via kayetlynnjohnson.smugmug.com).
+ [999100] /: Uncommon header(s) 'x-ttfb-l' found, with contents: .
+ [999100] /: Uncommon header(s) 'x-s' found, with contents: 100.13.28:1430238.
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [999986] /favicon.ico: Retrieved powered-by header: SmugMug/1.0.
+ [999100] /favicon.ico: Uncommon header(s) 'our-values' found, with contents: 4/5 - Dare.
+ [999100] /favicon.ico: Uncommon header(s) 'powered-by' found, with contents: SmugMug/1.0.
+ [999100] /favicon.ico: Uncommon header(s) 'hiring' found, with contents: How to love what you do: https://jobs.smugmug.com/.
+ [999100] /favicon.gif: Uncommon header(s) 'surrogate-control' found, with contents: no-store, max=age=0.
+ [999100] /favicon.gif: Uncommon header(s) 'ourvalues' found, with contents: Empower Passion (#5 of 5).
+ [999100] /favicon.gif: Uncommon header(s) 'mib' found, with contents: 2.
+ [999100] /favicon.gif: Uncommon header(s) 'edge-control' found, with contents: no-store.
+ [999962] /: Server banner changed from 'nginx' to 'CloudFront'.
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [95] /: Cookie csd created without the httponly flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
+ [95] /: Cookie sp created without the httponly flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
+ [999986] /nikto-test-yzxek2ZA.html: Retrieved x-powered-by header: SmugMug/1.0.
+ [000427] /nikto-test-yzxek2ZA.html: Link header(s) found with value(s): <https://cdn.smugmug.com>; rel="preconnect", <https://cdn.smugmug.com/include/js/smugpage/core-top-f37ec30d346e530e8b834b822c6cf338.js>; rel="preload"; as="script"; crossorigin, <https://cdn.smugmug.com>; rel="preconnect", <https://cdn.smugmug.com/include/js/smugpage/core-config-152ab43cabcdd07c6f33a35f585107ec.js>; rel="preload"; as="script"; crossorigin, <https://cdn.smugmug.com>; rel="preconnect", <https://cdn.smugmug.com/img/fonts/sofia-pro/v2/stylesheet.css>; rel="preload"; as="style", <https://cdn.smugmug.com>; rel="preconnect", <https://api.smugmug.com>; rel="preconnect", <https://photos.smugmug.com>; rel="preconnect", <//videos.smugmug.com>; rel="dns-prefetch", <https://cdn.smugmug.com>; rel="preconnect", <https://cdn.smugmug.com/css/color/p/359/1618245357-d9b5d449a67c24bb854659c8c209bfb5.css>; rel="preload"; as="style", <https://cdn.smugmug.com>; rel="preconnect", <https://cdn.smugmug.com/css/custom/p/359/1618245357-d9b5d449a67c24bb854659c8c209bfb5.css>; rel="preload"; as="style", <http://google-fonts.smugmug.com>; rel="preconnect", <http://google-fonts.smugmug.com/css?subset=latin-ext&family=Roboto%7CRoboto>; rel="preload"; as="style", <https://cdn.smugmug.com>; rel="preconnect", <https://cdn.smugmug.com/include/css/0/0/0/smugmug/core-e11c7233e2dccfad65acda1f2321dcc9.css>; rel="preload"; as="style", <https://cdn.smugmug.com>; rel="preconnect", <https://cdn.smugmug.com/include/css/0/0/0/smugmug/widget_bundle-20bc74bce7e7338ca255e98030267d05.css>; rel="preload"; as="style", <https://cdn.smugmug.com>; rel="preconnect", <https://cdn.smugmug.com/include/css/0/0/0/smugmug/gallery_bundle-9e107fdab2f26d45f631ccc76cedc6cc.css>; rel="preload"; as="style", <https://cdn.smugmug.com>; rel="preconnect", <https://cdn.smugmug.com/include/widgetcombo/combo.css?widget-36096541-2-2-p-4830281-1-1715177832-min.css&widget-36096542-41-2-p-4830281-1-1791487551-min.css&widget-36096543-40-2-p-4830281-1-1715177832-min.css>; rel="preload"; as="style", <https://try.abtasty.com>; rel="preconnect", <https://try.abtasty.com/0a7c2e6feead46ef941dc02b6eb64fcb.js>; rel="preload"; as="script", <https://cdn.smugmug.com>; rel="preconnect", <https://cdn.smugmug.com/include/js/bundles/nodepagewithwidgets-DPUKLR63.js>; rel="preload"; as="script"; crossorigin. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Link
+ [999100] /nikto-test-yzxek2ZA.html: Uncommon header(s) 'smug-meta-prefetch-files' found, with contents: /services/prefetch/?token=786778d979ad7de8d72cd7e3718673271b6df98b.
+ [999100] /nikto-test-yzxek2ZA.html: Uncommon header(s) 'smug-meta-prefetch' found, with contents: {"prefetch-manifest":"/services/prefetch/?token=786778d979ad7de8d72cd7e3718673271b6df98b-json"}.
+ [999100] /nikto-test-yzxek2ZA.html: Uncommon header(s) 'x-amz-cloudfront-prefetch-file' found, with contents: /services/prefetch/?token=786778d979ad7de8d72cd7e3718673271b6df98b.
+ Scan terminated: 0 errors and 27 items reported on the remote host
+ End Time:           2026-10-08 20:13:00 (GMT0) (61 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested