- Nikto 
---------------------------------------------------------------------------
+ Multiple IPs found: 104.26.11.249, 104.26.10.249, 172.67.71.48, 2606:4700:20::681a:bf9, 2606:4700:20::681a:af9, 2606:4700:20::ac43:4730
+ Target IP:          104.26.11.249
+ Target Hostname:    draytek.com
+ Target Port:        80
+ Start Time:         2025-12-05 11:50:08 (GMT-8)
---------------------------------------------------------------------------
+ Server: cloudflare
+ /: Uncommon header 'server-timing' found, with multiple values: (cfCacheStatus;desc="DYNAMIC",cfEdge;dur=3,cfOrigin;dur=156,).
+ /: An alt-svc header was found which is advertising HTTP/3. The endpoint is: ':443'. Nikto cannot test HTTP/3 over QUIC. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/alt-svc
+ Root page / redirects to: http://www.draytek.com/
+ /qkrxafxE.com: Uncommon header 'origin-agent-cluster' found, with contents: ?1.
+ /qkrxafxE.com: Uncommon header 'accept-ch' found, with contents: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA.
+ /qkrxafxE.com: Uncommon header 'critical-ch' found, with contents: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA.
+ /qkrxafxE.com: Uncommon header 'cf-mitigated' found, with contents: challenge.
+ /qkrxafxE.bin: IP address found in the 'content-security-policy-report-only' header. The IP is "1.0.1.1". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ Scan terminated: 0 error(s) and 7 item(s) reported on remote host
+ End Time:           2025-12-05 11:51:09 (GMT-8) (61 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested