- Nikto v2.5.0 --------------------------------------------------------------------------- + Multiple IPs found: 104.18.8.238, 104.18.9.238, 2606:4700::6812:8ee, 2606:4700::6812:9ee + Target IP: 104.18.8.238 + Target Hostname: venturebeat.com + Target Port: 443 --------------------------------------------------------------------------- + SSL Info: Subject: /CN=venturebeat.com Altnames: *.venturebeat.com, venturebeat.com Ciphers: TLS_AES_256_GCM_SHA384 Issuer: /C=US/O=Let's Encrypt/CN=E1 + Start Time: 2024-04-13 01:11:16 (GMT-4) --------------------------------------------------------------------------- + Server: cloudflare + /: IP address found in the '__cf_bm' cookie. The IP is "1.0.1.1". + /: IP address found in the 'set-cookie' header. The IP is "1.0.1.1". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed + /: Uncommon header 'cf-mitigated' found, with contents: challenge. + /: Uncommon header 'origin-agent-cluster' found, with contents: ?1. + /: Uncommon header 'cf-chl-out' found, with contents: vWgSU1TOKjT36ToWaMTw1oO2oOZ/4elt0HoZqKSWDQm1QWNeZTrAswO3kVya+hdD7LE+FqRFsvQD5CtSIZYxGO8IVQYpS1MDKPybS4GxgRmtsu0+9LgjFLjzlSOPO9eq8al1lfyJpxkbh2KhLa2cIA==$vO4V6QH1OeCfmTBL4U5shA==. + /: Uncommon header 'accept-ch' found, with contents: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA. + /: The site uses TLS and the Strict-Transport-Security HTTP header is not defined. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security + All CGI directories 'found', use '-C none' to test none + /: The Content-Encoding header is set to "deflate" which may mean that the server is vulnerable to the BREACH attack. See: http://breachattack.com/ + Scan terminated: 20 error(s) and 8 item(s) reported on remote host + End Time: 2024-04-13 01:11:38 (GMT-4) (22 seconds) --------------------------------------------------------------------------- + 1 host(s) tested