Scan report for "www.google.com"

Membership level: Free member
Nikto scan (max 60 sec) (nikto -host www.google.com -maxtime 60)
- Nikto v2.5.0
---------------------------------------------------------------------------
+ Multiple IPs found: 142.251.40.196, 2607:f8b0:4006:822::2004
+ Target IP:          142.251.40.196
+ Target Hostname:    www.google.com
+ Target Port:        80
+ Start Time:         2024-09-20 06:59:29 (GMT-4)
---------------------------------------------------------------------------
+ Server: gws
+ Root page / redirects to: https://www.google.com/?gws_rd=ssl
+ No CGI Directories found (use '-C all' to force check all possible dirs)
+ : Server banner changed from 'gws' to 'sffe'.
+ /crossdomain.xml: Uncommon header 'cross-origin-opener-policy-report-only' found, with contents: same-origin; report-to="static-on-bigtable".
+ /staticmap?/: Uncommon header 'server-timing' found, with contents: gfet4t7; dur=13.
+ /support/forum/search?/: Uncommon header 'accept-ch' found, with contents: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version.
+ /compressiontest/:X-Frame-Options header is deprecated and has been replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive instead. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
+ /compressiontest/: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ /robots.txt: Entry '/compressiontest/' is returned a non-forbidden or redirect HTTP code (200). See: https://portswigger.net/kb/issues/00600600_robots-txt-file
+ /robots.txt: Entry '/landing/cmsnext-root/' is returned a non-forbidden or redirect HTTP code (200). See: https://portswigger.net/kb/issues/00600600_robots-txt-file
+ /robots.txt: Entry '/landing/signout.html' is returned a non-forbidden or redirect HTTP code (200). See: https://portswigger.net/kb/issues/00600600_robots-txt-file
+ /robots.txt: contains 324 entries which should be manually viewed. See: https://developer.mozilla.org/en-US/docs/Glossary/Robots.txt
+ Scan terminated: 0 error(s) and 10 item(s) reported on remote host
+ End Time:           2024-09-20 07:00:30 (GMT-4) (61 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
Color Scheme
Target
www.google.com
Scan method
Nikto scan (max 60 sec)
Run command
nikto -host www.google.com -maxtime 60
Scan time
61s
Quick report
Order full scan ($79/one time)
Scan date
20 Sep 2024 07:00
Copy scan report
Download report
Remove scan result
$
Total scans
About 10+ times
Some firewalls blocks Nikto. For get true positive results add nikto.online IP addresses (172.96.166.66-172.96.166.70 or CIDR 172.96.166.64/29) to the whitelist
[scan_method]
Visibility:
Scan method: