55
High Risk
2026-05-21 02:49:53
Security Issues Found
- ⚠️[LOW] 服务器信息泄露
- ⚠️[HIGH] 敏感路径暴露
- ⚠️[MEDIUM] 缺少 HTTP 安全头
Recommendations
- 💡限制对这些路径的访问或添加认证
- 💡移除或修改 Server/X-Powered-By 响应头
- 💡添加 SPF 记录防止邮件伪造
- 💡添加 DMARC 记录增强邮件安全
- 💡配置 Web 服务器添加这些安全头
🌐Domain Info
Targetsubstackcdn.com
Registeredsubstackcdn.com
TLD.com
🛡️Threat Intelligence (7 platforms)
BlacklistNot Blacklisted
Malware0
Phishing0
Abuse Score0/100
🐛Vulnerabilities Found (3)
MEDIUM缺少 HTTP 安全头
缺少以下安全头: X-Frame-Options, X-XSS-Protection, X-Content-Type-Options, Strict-Transport-Security, Content-Security-Policy, Referrer-Policy, Permissions-Policy
Fix: 配置 Web 服务器添加这些安全头
LOW服务器信息泄露
响应头泄露服务器信息: Server: AmazonS3
Fix: 移除或修改 Server/X-Powered-By 响应头
HIGH敏感路径暴露
发现可访问的敏感路径: /.env, /.git/config, /admin, /phpmyadmin, /wp-admin, /api
Fix: 限制对这些路径的访问或添加认证
🔌Open Ports (2)
80
http
443
https
🌐DNS Records
A: 13.226.69.15
A: 13.226.69.102
A: 13.226.69.10
A: 13.226.69.42
AAAA: 2600:9000:21d1:ec00:4:b4b9:d3c0:93a1
AAAA: 2600:9000:21d1:ca00:4:b4b9:d3c0:93a1
AAAA: 2600:9000:21d1:6a00:4:b4b9:d3c0:93a1
AAAA: 2600:9000:21d1:6200:4:b4b9:d3c0:93a1
AAAA: 2600:9000:21d1:da00:4:b4b9:d3c0:93a1
AAAA: 2600:9000:21d1:4600:4:b4b9:d3c0:93a1
AAAA: 2600:9000:21d1:bc00:4:b4b9:d3c0:93a1
AAAA: 2600:9000:21d1:1c00:4:b4b9:d3c0:93a1
NS: ns-1445.awsdns-52.org.
NS: ns-1936.awsdns-50.co.uk.
NS: ns-946.awsdns-54.net.
NS: ns-98.awsdns-12.com.
TXT: "google-site-verification=tz2v--AUiNuSpVyU440dvghhnTS9kVnvhIWn69muzgs"
SOA: ns-98.awsdns-12.com. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400
📋HTTP Headers
Server: AmazonS3