Nikto scan (max 60 sec) (nikto -host photos.smugmug.com -maxtime 60)
- Nikto v2.5.0
---------------------------------------------------------------------------
+ Target IP: 54.230.242.104
+ Target Hostname: photos.smugmug.com
+ Target Port: 80
+ Start Time: 2024-09-16 16:45:01 (GMT-4)
---------------------------------------------------------------------------
+ Server: nginx
+ /: Retrieved via header: 1.1 c45a9630d6506aeeffefe81fbc0ed0ae.cloudfront.net (CloudFront).
+ /: Uncommon header 'x-ttfb' found, with contents: 0.0095.
+ /: Uncommon header 'x-request-id' found, with contents: b7e8bb3e.
+ /: Uncommon header 'x-ttfb-l' found, with contents: 0.
+ /: Uncommon header 'smug-cdn' found, with contents: cloudfront (via photos.smugmug.com).
+ /: Uncommon header 'x-s' found, with contents: 100.15.176:3516891.
+ /: Uncommon header 'x-env' found, with contents: a=live, b=www, c=e8889be1, d=i-05296a236c467db48.
+ Root page / redirects to: https://photos.smugmug.com/
+ /PFm5vHZi.gif: Uncommon header 'mib' found, with contents: 2.
+ No CGI Directories found (use '-C all' to force check all possible dirs)
+ /favicon.ico: Retrieved x-powered-by header: SmugMug/1.0.
+ /favicon.ico:X-Frame-Options header is deprecated and has been replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive instead. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
+ /favicon.ico: Uncommon header 'x-smugmug-values' found, with contents: 5/5 - Empower Passion.
+ /favicon.ico: Uncommon header 'x-smugmug-hiring' found, with contents: How to love what you do: https://jobs.smugmug.com/.
+ /favicon.ico: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ : Server banner changed from 'nginx' to 'CloudFront'.
+ Scan terminated: 0 error(s) and 14 item(s) reported on remote host
+ End Time: 2024-09-16 16:46:02 (GMT-4) (61 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested