Found
Duration
Date
IP
- Nikto v2.6.0 --------------------------------------------------------------------------- + Target IP: 104.20.40.183 + Target Hostname: aspm.ae + Target Port: 80 + Platform: Linux/Unix + Start Time: 2026-08-19 05:59:31 (GMT-4) --------------------------------------------------------------------------- + Server: cloudflare + Multiple IPs found: 104.20.40.183, 172.66.172.65, 2606:4700:10::6814:28b7, 2606:4700:10::ac42:ac41 + [999100] /: Uncommon header(s) 'cf-mitigated' found, with contents: challenge. + [999100] /: Uncommon header(s) 'origin-agent-cluster' found, with contents: ?1. + [999106] /: Cloudflare detected via cf-ray header. Recommend proxying via Burp or mitmproxy to avoid TLS fingerprint blocks. See: https://github.com/sullo/nikto/wiki/Using-a-Proxy + No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped. + [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security + [999100] /actuator/jolokia: Uncommon header(s) 'reporting-endpoints' found, with contents: cf-csp-endpoint="https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=5jW6F9sYCr3pNIT3F0m0lCE1C8HkHG4yneRR.fOHvpE-1787133577.168181-1.0.1.1-ntCNyJnlw2xqNhfAMoAmeNzHOgBujOYhRMccV2f_3ECncbPByIt8eKKOlIx0rBY6.INN.PKtDKUEMYiOpatp4ZH9MJ2.B14a60oAsOnjlRTz5mGjwrlDGKwaz1cDtpWbjo5YKsNCpx2Kj7A9pCwcF6XW6N6EBAkt65avJGtuH_o". + [800264] /: cloudflare - Cloudflare detected via banner. Recommend proxying via Burp or mitmproxy to avoid TLS fingerprint blocks if not already proxying. + [999986] /vchat/msg.txt: Retrieved x-powered-by header: PHP/8.4.16. + [000427] /vchat/msg.txt: Link header(s) found with value(s): <https://aspm.ae/wp-json/>; rel="https://api.w.org/". See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Link + [999100] /vchat/msg.txt: Uncommon header(s) 'cross-origin-opener-policy-report-only' found, with contents: unsafe-none; report-to='default'. + [999100] /vchat/msg.txt: Uncommon header(s) 'cross-origin-embedder-policy-report-only' found, with contents: unsafe-none; report-to='default'. + Scan terminated: 0 errors and 10 items reported on the remote host + End Time: 2026-08-19 06:00:32 (GMT-4) (61 seconds) --------------------------------------------------------------------------- + 1 host(s) tested