Scan report for "finansalye.com"

- Nikto v2.6.0
---------------------------------------------------------------------------
+ Target IP:          104.21.41.22
+ Target Hostname:    finansalye.com
+ Target Port:        443
---------------------------------------------------------------------------
+ SSL Info:           Subject:  /CN=finansalye.com
                      CN:       finansalye.com
                      SAN:      finansalye.com, *.finansalye.com
                      Ciphers:  TLS_AES_256_GCM_SHA384
                      Issuer:   /C=US/O=Google Trust Services/CN=WE1
+ Platform:           Windows
+ Start Time:         2026-06-27 02:57:15 (GMT-4)
---------------------------------------------------------------------------
+ Server: cloudflare
+ Multiple IPs found: 104.21.41.22, 172.67.159.14, 2606:4700:3030::6815:2916, 2606:4700:3031::ac43:9f0e
+ [999986] /: Retrieved access-control-allow-origin header: *.
+ [999979] /: IP address found in the 'x-vercel-id' header. The IP is "ad1::". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [999100] /: Uncommon header(s) 'x-vercel-id' found, with contents: iad1::m6t2h-1782543436099-c21c4fe448ac.
+ [999100] /: Uncommon header(s) 'x-vercel-cache' found, with contents: HIT.
+ [999100] /: Uncommon header(s) 'content-disposition' found, with contents: inline.
+ [011799] /: An alt-svc header was found which is advertising HTTP/3. The endpoint is: ':443'. Nikto cannot test HTTP/3 over QUIC. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/alt-svc
+ [999106] /: Cloudflare detected via cf-ray header. Recommend proxying via Burp or mitmproxy to avoid TLS fingerprint blocks. See: https://github.com/sullo/nikto/wiki/Using-a-Proxy
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [999100] /api/: Uncommon header(s) 'x-vercel-error' found, with contents: NOT_FOUND.
+ [999996] /robots.txt: contains 3 entries which should be manually viewed. See: https://developer.mozilla.org/en-US/docs/Glossary/Robots.txt
+ [999966] /: The Content-Encoding header is set to "deflate" which may mean that the server is vulnerable to the BREACH attack. See: http://breachattack.com/
- STATUS: Completed 128 requests (~2% complete, ~19.4 minutes left): currently in plugin 'Site Files'
- STATUS: Running average: Not enough data.
+ Scan terminated: 20 errors and 10 items reported on the remote host
+ End Time:           2026-06-27 02:57:35 (GMT-4) (20 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested

Trustpilot

Target

finansalye.com

Target IP

104.21.41.22

Scan method

Nikto SSL scan (max 60 sec)

Run command

nikto -host finansalye.com -ssl -maxtime 60

Duration

20s

Quick report

Order full scan ($7.99/one time)

Scan date

27 Jun 2026 02:57

Copy scan report

Download report

Remove scan result

$

Total scans

About 7 times

Check ports

Use Portscanner Tool

API - Scan ID

9023f963361012a3bcf27473bc1900e18ef04222