- Nikto --------------------------------------------------------------------------- + Multiple IPs found: 44.242.13.161, 44.240.158.19, 52.38.7.83, 2600:1f14:62a:de83:c61a:d6e:18b0:65f7, 2600:1f14:62a:de84:880a:88cc:a16:5423, 2600:1f14:62a:de85:d7:e7a1:8f7d:f6f5 + Target IP: 44.242.13.161 + Target Hostname: netflix.com + Target Port: 80 + Start Time: 2025-09-12 08:02:17 (GMT-7) --------------------------------------------------------------------------- + Server: No banner retrieved + /: Retrieved via header: 1.1 i-0c12c26be75d8c8d8 (us-west-2). + /: Uncommon header 'x-netflix-headerandcookie.profileguid.match' found, with contents: NA. + /: Uncommon header 'x-netflix.nfstatus' found, with contents: 1_21. + /: Uncommon header 'x-netflix.proxy.execution-time' found, with contents: 2. + /: Uncommon header 'x-netflix-headerandmsl.profileguid.match' found, with contents: NA. + /: Uncommon header 'x-netflix-cookieandmsl.profileguid.match' found, with contents: NA. + /: Uncommon header 'x-originating-url' found, with contents: http://netflix.com/. + /: Cookie nfvdid created without the httponly flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies + Root page / redirects to: https://netflix.com/ + No CGI Directories found (use '-C all' to force check all possible dirs) + /clientaccesspolicy.xml contains 16 lines which should be manually viewed for improper domains or wildcards. See: https://www.acunetix.com/vulnerabilities/web/insecure-clientaccesspolicy-xml-file/ + /crossdomain.xml contains 1 line which include the following domains: *.netflix.com . See: http://jeremiahgrossman.blogspot.com/2008/05/crossdomainxml-invites-cross-site.html + /archive.sql: Uncommon header 'x-b3-traceid' found, with contents: 68c43603c59171be085848b9318b4659. + /archive.sql: Uncommon header 'x-netflix.execution-time' found, with contents: 1. + /archive.sql: Uncommon header 'x-request-id' found, with contents: f10dfd80-b71f-4724-a874-6af687c7e5dc. + /archive.sql: Uncommon header 'x-netflix.request.toplevel.uuid' found, with contents: c54ccf5d-58a8-40e0-a587-341307441037-104957425. + /archive.sql: Uncommon header 'x-envoy-decorator-operation' found, with contents: lo_svc_http. + /archive.sql: Uncommon header 'x-envoy-upstream-service-time' found, with contents: 1. + Scan terminated: 1 error(s) and 16 item(s) reported on remote host + End Time: 2025-09-12 08:03:18 (GMT-7) (61 seconds) --------------------------------------------------------------------------- + 1 host(s) tested