25
Low Risk
2026-05-21 07:17:07
Security Issues Found
- ⚠️[LOW] 服务器信息泄露
- ⚠️[MEDIUM] 缺少 HTTP 安全头
Recommendations
- 💡添加 DMARC 记录增强邮件安全
- 💡配置 Web 服务器添加这些安全头
- 💡移除或修改 Server/X-Powered-By 响应头
🌐Domain Info
Targetdiscovermagazine.com
Registereddiscovermagazine.com
TLD.com
🛡️Threat Intelligence (7 platforms)
BlacklistNot Blacklisted
Malware0
Phishing0
Abuse Score0/100
🐛Vulnerabilities Found (2)
MEDIUM缺少 HTTP 安全头
缺少以下安全头: X-Frame-Options, X-XSS-Protection, X-Content-Type-Options, Content-Security-Policy, Referrer-Policy, Permissions-Policy
Fix: 配置 Web 服务器添加这些安全头
LOW服务器信息泄露
响应头泄露服务器信息: X-Powered-By: Next.js
Fix: 移除或修改 Server/X-Powered-By 响应头
🔌Open Ports (2)
80
http
443
https
🌐DNS Records
A: 216.223.155.118
MX: 0 discovermagazine-com.mail.protection.outlook.com.
NS: ns41.constellix.net.
NS: ns51.constellix.net.
NS: ns61.constellix.net.
NS: ns11.constellix.com.
NS: ns21.constellix.com.
NS: ns31.constellix.com.
TXT: "v=spf1 ip4:216.223.155.112/28 ip4:66.159.123.64/28 include:547446.spf07.hubspotemail.net include:amazonses.com include:us._netblocks.mimecast.com include:spf.protection.outlook.com ~all"
TXT: "MS=ms96016385"
TXT: "8d8h3r3vtuh0tvl2el70s57ir9"
TXT: "google-site-verification=Jf06miLgX6RmKYEgMvK75qqbVo-pgEm-ZD7rDpPgm1Q"
TXT: "facebook-domain-verification=xvikrfa0dip6aib1q6wf0jaunrzdmt"
TXT: "0ed1fe018a9de38b907c7c458caf9510"
TXT: "drCaEWZsVU2Y92cVfS6ytey+VNLipgM73ynERpHMzd59iR/GpPBntmatrIUH0wxpIMDtFh0Slawkg8ub6xWePg=="
TXT: "25ah0p0sqhsnt9bkc74n32j2gk"
TXT: "fgX5CMN022xaslJvtWjpjHIEuv5RQTkGspo/sIzLHmIlavbirmyXmS9X2MmH6jv1tWFwLaq5/DpimeRirQ+q/g=="
TXT: "google-site-verification=1ncVlrXFjxDSbGyTw8GVN3YgGUt4u6LReqTpGAg-HVY"
TXT: "imhijed09rohc2no5j84cattk0"
TXT: "atlassian-domain-verification=Rsm7NYeI6lDurJ2WeshJx2VmByR5noPtq4qbF9zvgKcAsNifeApFGC5VJdVkMeBj"
TXT: "MS=ms75768942"
TXT: "google-site-verification=duCnDq0p1NMt0NuNuUVsogkw2u2y7fK2fsMi97f9cCU"
TXT: "google-site-verification=XXmF2DqerfviUCXOYWJyDsQoCWUYrghaN1t_vPm4bdY"
SOA: ns11.constellix.com. dns.constellix.com. 2015010126 43200 3600 1209600 180
📋HTTP Headers
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Powered-By: Next.js