- Nikto v2.6.0
---------------------------------------------------------------------------
+ Target IP:          44.234.232.238
+ Target Hostname:    netflix.com
+ Target Port:        80
+ Platform:           Unknown
+ Start Time:         2026-09-24 05:11:58 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ Multiple IPs found: 44.234.232.238, 44.237.234.25, 44.242.60.85, 2600:1f14:62a:de82:822d:a423:9e4c:da8d, 2600:1f14:62a:de81:b848:82ee:2416:447e, 2600:1f14:62a:de80:69a8:7b12:8e5f:855d
+ [999986] /: Retrieved via header: 1.1 i-02ebfd2d62311b995 (us-west-2).
+ [999100] /: Uncommon header(s) 'x-netflix.nfstatus' found, with contents: 1_43.
+ [999100] /: Uncommon header(s) 'x-netflix-headerandmsl.profileguid.match' found, with contents: NA.
+ [999100] /: Uncommon header(s) 'x-netflix.proxy.execution-time' found, with contents: .
+ [999100] /: Uncommon header(s) 'x-originating-url' found, with contents: http://netflix.com/.
+ [999100] /: Uncommon header(s) 'x-netflix-headerandcookie.profileguid.match' found, with contents: NA.
+ [999100] /: Uncommon header(s) 'x-netflix-cookieandmsl.profileguid.match' found, with contents: NA.
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [999979] /: IP address found in the 'x-originating-url' header. The IP is "100.87.157.242". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [999100] /index.jsp: Uncommon header(s) 'x-netflix.retry.server.policy' found, with contents: {"maxRetries":0,"retryAfterSeconds":15}.
+ [999990] OPTIONS: Allowed HTTP Methods: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, SCRIPT .
+ [400001] HTTP method ('Allow' Header): 'PUT' method could allow clients to save files on the web server.
+ [400000] HTTP method ('Allow' Header): 'DELETE' may allow clients to remove files on the web server.
- STATUS: Completed 797 requests (~11% complete, ~3.8 minutes left): currently in plugin 'Nikto Tests'
- STATUS: Running average: Not enough data.
+ Scan terminated: 19 errors and 15 items reported on the remote host
+ End Time:           2026-09-24 05:12:25 (GMT0) (27 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested