- Nikto v2.6.0 --------------------------------------------------------------------------- + Your Nikto installation is out of date. + Target IP: 185.199.110.153 + Target Hostname: secretcorp.org + Target Port: 80 + Platform: Unknown + Start Time: 2026-02-20 12:29:09 (GMT-5) --------------------------------------------------------------------------- + Server: GitHub.com + Multiple IPs found: 185.199.110.153, 185.199.111.153, 185.199.108.153, 185.199.109.153 + [999986] /: Retrieved via header: 1.1 varnish. + [999986] /: Retrieved x-served-by header: cache-lga21975-LGA. + [999100] /: Uncommon header(s) 'x-served-by' found, with contents: cache-lga21975-LGA. + [999100] /: Uncommon header(s) 'x-fastly-request-id' found, with contents: 48b9fabe4aa0ac3d9572ecce7c28bc4965de70d0. + [999100] /: Uncommon header(s) 'x-github-request-id' found, with contents: 09CA:3F277B:DF09C5:F60322:699899E4. + No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped. + [999100] /Microsoft-Server-ActiveSync/default.css: Uncommon header(s) 'x-origin-cache' found, with contents: HIT. + [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security + [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy + [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy + [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP + [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options + [999962] /: Server banner changed from 'GitHub.com' to 'Varnish'. + Scan terminated: 0 errors and 12 items reported on the remote host + End Time: 2026-02-20 12:30:10 (GMT-5) (61 seconds) --------------------------------------------------------------------------- + 1 host(s) tested ********************************************************************* Portions of the server's headers (48b9fabe4aa0ac3d9572ecce7c28bc4965de70d0 cache-lga21975-LGA 09CA:3F277B:DF09C5:F60322:699899E4) are not in the Nikto 2.6.0 database or are newer than the known string. Would you like to submit this information (*no server specific data*) to CIRT.net for a Nikto update (or you may email to sullo@cirt.net) (y/n)?