- Nikto v2.6.0
---------------------------------------------------------------------------
+ Target IP:          52.38.146.58
+ Target Hostname:    goog.com
+ Target Port:        80
+ Platform:           Windows
+ Start Time:         2026-10-30 20:40:53 (GMT0)
---------------------------------------------------------------------------
+ Server: Microsoft-IIS/10.0
+ Multiple IPs found: 52.38.146.58, 35.155.187.55
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [999962] /: Server banner changed from 'Microsoft-IIS/10.0' to 'awselb/2.0'.
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [999967] /: Web Server returns a valid response with junk HTTP methods which may cause false positives.
+ [000016] /kboard/: KBoard Forum 0.3.0 and prior have a security problem in forum_edit_post.php, forum_post.php and forum_reply.php.
+ [000017] /lists/admin/: PHPList pre 2.6.4 contains a number of vulnerabilities including remote administrative access, harvesting user info and more. Default login to admin interface is admin/phplist.
+ [000296] /site/typo3conf/: This may contain sensitive TYPO3 files.
+ [000296] /typo/typo3conf/: This may contain sensitive TYPO3 files.
+ [000305] /webcart/carts/: This may allow attackers to read credit card data. Reconfigure to make this dir not accessible via the web. See: https://packetstormsecurity.com/files/32406/xmas.txt.html
+ [000308] /webcart/orders/: This may allow attackers to read credit card data. Reconfigure to make this dir not accessible via the web. See: https://packetstormsecurity.com/files/32406/xmas.txt.html
+ Scan terminated: 0 errors and 13 items reported on the remote host
+ End Time:           2026-10-30 20:41:54 (GMT0) (61 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested