- Nikto v2.6.0
---------------------------------------------------------------------------
+ Target IP:          54.237.226.164
+ Target Hostname:    netflix.com
+ Target Port:        80
+ Platform:           Unknown
+ Start Time:         2026-09-25 04:13:43 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ Multiple IPs found: 54.237.226.164, 3.230.129.93, 52.3.144.142, 2600:1f18:631e:2f83:49ee:beaa:2dfd:ae8f, 2600:1f18:631e:2f85:93a9:f7b0:d18:89a7, 2600:1f18:631e:2f84:4f7a:4092:e2e9:c617
+ [999986] /: Retrieved via header: 1.1 i-0c62d84479ffb794a (us-east-1).
+ [999100] /: Uncommon header(s) 'x-netflix.nfstatus' found, with contents: 1_43.
+ [999100] /: Uncommon header(s) 'x-netflix-headerandcookie.profileguid.match' found, with contents: NA.
+ [999100] /: Uncommon header(s) 'x-originating-url' found, with contents: http://netflix.com/.
+ [999100] /: Uncommon header(s) 'x-netflix-cookieandmsl.profileguid.match' found, with contents: NA.
+ [999100] /: Uncommon header(s) 'x-netflix-headerandmsl.profileguid.match' found, with contents: NA.
+ [999100] /: Uncommon header(s) 'x-netflix.proxy.execution-time' found, with contents: 2.
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [999979] /: IP address found in the 'x-originating-url' header. The IP is "100.82.94.22". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [999100] /index.jsp: Uncommon header(s) 'x-netflix.retry.server.policy' found, with contents: {"maxRetries":0,"retryAfterSeconds":15}.
+ [999990] OPTIONS: Allowed HTTP Methods: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, SCRIPT .
+ [400001] HTTP method ('Allow' Header): 'PUT' method could allow clients to save files on the web server.
+ [400000] HTTP method ('Allow' Header): 'DELETE' may allow clients to remove files on the web server.
- STATUS: Completed 610 requests (~8% complete, ~8.1 minutes left): currently in plugin 'Nikto Tests'
- STATUS: Running average: Not enough data.
+ Scan terminated: 18 errors and 15 items reported on the remote host
+ End Time:           2026-09-25 04:14:27 (GMT0) (44 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested