- Nikto 
---------------------------------------------------------------------------
+ Multiple IPs found: 104.18.2.84, 104.18.3.84, 2606:4700::6812:254, 2606:4700::6812:354
+ Target IP:          104.18.2.84
+ Target Hostname:    www.coinhako.com
+ Target Port:        443
---------------------------------------------------------------------------
+ SSL Info:        Subject:  /CN=www.coinhako.com
                   Altnames: www.coinhako.com
                   Ciphers:  TLS_AES_256_GCM_SHA384
                   Issuer:   /C=US/O=Let's Encrypt/CN=E7
+ Start Time:         2025-11-21 18:19:34 (GMT-8)
---------------------------------------------------------------------------
+ Server: cloudflare
+ /: Retrieved via header: 1.1 1cd5c12ec5c5433e14b730e0a6a2276c.cloudfront.net (CloudFront).
+ /: IP address found in the 'set-cookie' header. The IP is "1.0.1.1". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ /:X-Frame-Options header is deprecated and has been replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive instead. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
+ /: Uncommon header 'server-timing' found, with multiple values: (cfCacheStatus;desc="DYNAMIC",cfEdge;dur=211,cfOrigin;dur=53,).
+ /: IP address found in the '__cf_bm' cookie. The IP is "1.0.1.1".
+ /SrYW1EO4.bak: Uncommon header 'accept-ch' found, with contents: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA.
+ /SrYW1EO4.bak: Uncommon header 'critical-ch' found, with contents: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA.
+ /SrYW1EO4.bak: Uncommon header 'cf-mitigated' found, with contents: challenge.
+ /SrYW1EO4.bak: Uncommon header 'origin-agent-cluster' found, with contents: ?1.
+ Scan terminated: 0 error(s) and 9 item(s) reported on remote host
+ End Time:           2025-11-21 18:20:35 (GMT-8) (61 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested