30
Medium Risk
2026-05-21 07:41:05
Security Issues Found
- ⚠️[LOW] 服务器信息泄露
- ⚠️对外暴露了 1 个高风险服务端口
- ⚠️[MEDIUM] 缺少 HTTP 安全头
Recommendations
- 💡添加 DMARC 记录增强邮件安全
- 💡配置 Web 服务器添加这些安全头
- 💡移除或修改 Server/X-Powered-By 响应头
- 💡使用防火墙限制对这些端口的访问
🌐Domain Info
Targetnextcloud.com
Registerednextcloud.com
TLD.com
🛡️Threat Intelligence (7 platforms)
BlacklistNot Blacklisted
Malware0
Phishing0
Abuse Score0/100
🐛Vulnerabilities Found (2)
MEDIUM缺少 HTTP 安全头
缺少以下安全头: X-Frame-Options, X-XSS-Protection, Permissions-Policy
Fix: 配置 Web 服务器添加这些安全头
LOW服务器信息泄露
响应头泄露服务器信息: Server: Apache
Fix: 移除或修改 Server/X-Powered-By 响应头
🔌Open Ports (3)
22
ssh
80
http
443
https
🌐DNS Records
A: 85.10.195.17
AAAA: 2a01:4f8:a0:3068::2
MX: 10 mx.nextcloud.com.
NS: ns.inwx.de.
NS: ns2.inwx.de.
NS: ns3.inwx.eu.
TXT: "MS=2FF4FDA4B4C49AE44213D37A308105AA0D4EBF39"
TXT: "apple-domain-verification=dTWDbt2uCnxS9nIG"
TXT: "google-site-verification=BRRA-GQB6KD9WDj8KhccsNho8-E0Feba52m32uuDZ5w"
TXT: "v=spf1 mx include:sendgrid.net include:amazonses.com include:_spf.eu.sparkpostmail.com -all"
SOA: ns.inwx.de. hostmaster.inwx.de. 2026050700 10800 3600 604800 3600
📋HTTP Headers
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Security-Policy: default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://ams.wpml.org https://www.paypal.com/
Referrer-Policy: same-origin
Server: Apache