Found
Duration
Date
IP
- Nikto --------------------------------------------------------------------------- + Multiple IPs found: 104.21.13.189, 172.67.133.16, 2606:4700:3033::ac43:8510, 2606:4700:3033::6815:dbd + Target IP: 104.21.13.189 + Target Hostname: av4us.online + Target Port: 80 + Start Time: 2025-11-14 16:51:32 (GMT-8) --------------------------------------------------------------------------- + Server: cloudflare + /: Retrieved access-control-allow-origin header: *. + /: IP address found in the 'pdojs-line8' header. The IP is "4.194.8.20". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed + /: Uncommon header 'pdojs-line967' found, with contents: notjp--myhost-av4us.online-filteron-/. + /: Uncommon header 'line1463' found, with contents: -. + /: Uncommon header 'pdojs-line1518' found, with contents: host-124064. + /: Uncommon header 'pdojs-line359' found, with contents: notjp--myhost-av4us.online-filteron-. + /: Uncommon header 'x-proxy-cache-la2' found, with contents: EXPIRED. + /: Uncommon header 'xkey-la2' found, with contents: av4us.online/--av4us.online--my_zone. + /: Uncommon header 'server-timing' found, with multiple values: (cfCacheStatus;desc="HIT",cfEdge;dur=5,cfOrigin;dur=0,). + /: Uncommon header 'pdojs-line1532' found, with contents: ibig--chname--filteron--txtlang--shows-517. + /: Uncommon header 'x-proxy-cache-192g-la' found, with contents: EXPIRED. + /: Uncommon header 'pdojs-line1519' found, with contents: host-0. + /: Uncommon header 'pdojs-line8' found, with contents: host-av4us.online4.194.8.20-myhost-av4us.online38.220.248/. + /: Uncommon header 'line1428' found, with contents: . + /: Uncommon header 'line1291' found, with contents: URI-/-myhost-av4us.online-filteron-. + /: Uncommon header 'xkey-192la' found, with contents: av4us.online/--av4us.online-av4us.online-myzone---yes. + /: Uncommon header 'phost' found, with contents: av4us.online. + /: An alt-svc header was found which is advertising HTTP/3. The endpoint is: ':443'. Nikto cannot test HTTP/3 over QUIC. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/alt-svc + /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/ + /cgi-914/: Uncommon header 'pdojs-line1475' found, with contents: host-0. + /cgi-914/: Uncommon header 'pdojs-line1474' found, with contents: 2413uuuuuuuuu: counted/dev/shm/hotthuma. + /ows-bin/: Uncommon header 'pdojs-line1523' found, with contents: host-148568. + /ows-bin/: Uncommon header 'pdojs-line1524' found, with contents: host-/dev/shm/hotthum-2-0. + /robots.txt: Entry '/tag*/' is returned a non-forbidden or redirect HTTP code (200). See: https://portswigger.net/kb/issues/00600600_robots-txt-file + /robots.txt: Entry '/reembed/' is returned a non-forbidden or redirect HTTP code (200). See: https://portswigger.net/kb/issues/00600600_robots-txt-file + /robots.txt: Entry '/index.php*' is returned a non-forbidden or redirect HTTP code (200). See: https://portswigger.net/kb/issues/00600600_robots-txt-file + /robots.txt: contains 18 entries which should be manually viewed. See: https://developer.mozilla.org/en-US/docs/Glossary/Robots.txt + /crossdomain.xml contains a full wildcard entry. See: http://jeremiahgrossman.blogspot.com/2008/05/crossdomainxml-invites-cross-site.html + /: Uncommon header 'proxy-status' found, with contents: Cloudflare-Proxy;error=http_request_error. + Multiple index files found (note: these may not all be unique): /index.pl, /default.htm, /index.do, /index.php, /index.php4, /index.aspx, /index.shtml, /index.php7, /index.cgi, /index.php3, /default.asp, /index.html, /index.php5, /default.aspx, /index.jhtml, /index.htm, /index.asp, /index.cfm, /index.jsp. + Scan terminated: 2 error(s) and 30 item(s) reported on remote host + End Time: 2025-11-14 16:52:53 (GMT-8) (81 seconds) --------------------------------------------------------------------------- + 1 host(s) tested