- Nikto v2.6.0
---------------------------------------------------------------------------
+ Target IP:          64.29.17.65
+ Target Hostname:    finansalye.com
+ Target Port:        443
---------------------------------------------------------------------------
+ SSL Info:           Subject:  /CN=finansalye.com
                      CN:       finansalye.com
                      SAN:      finansalye.com
                      Ciphers:  TLS_AES_128_GCM_SHA256
                      Issuer:   /C=US/O=Let's Encrypt/CN=YR2
+ Platform:           Unknown
+ Start Time:         2026-06-26 20:44:03 (GMT-4)
---------------------------------------------------------------------------
+ Server: Vercel
+ Multiple IPs found: 64.29.17.65, 216.198.79.65
+ [999979] /: IP address found in the 'x-vercel-id' header. The IP is "ad1::". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [999100] /: Uncommon header(s) 'x-vercel-id' found, with contents: iad1::1782521043-FmTCcjOtiHpcf5SmSb1EOTkEGemCrCTG.
+ [999100] /: Uncommon header(s) 'x-vercel-challenge-token' found, with contents: 2.1782521043.60.ZTc5M2RlNDNmNjEwZmEwNzE0MTIxNjZhNGVmNWM1OTk7Yzc2OWEwYWE7OWQ1OWE4OThjZjI2ZTdkNzI2ZTg3Mjk3ZGU1M2Y0M2QzZmZkYmE0NjszOwDagqBUEYyOIQ1kbD9FWTA7CF12Br/GEmN2Je35UHC4BbBLREMCUCYiDoWaUBwYnylYnVvN3agsNqoTD5zvGRkSAYWYFTnmbl2jizraUQ==.a30faba0dd05acf9b0f06f24c4f7513c.
+ [999100] /: Uncommon header(s) 'x-vercel-mitigated' found, with contents: challenge.
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
- STATUS: Completed 119 requests (~2% complete, ~16.9 minutes left): currently in plugin 'Site Files'
- STATUS: Running average: Not enough data.
+ Scan terminated: 20 errors and 9 items reported on the remote host
+ End Time:           2026-06-26 20:44:19 (GMT-4) (16 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested