25
低风险
2026-05-21 01:50:59
发现的安全问题
- ⚠️[LOW] 服务器信息泄露
- ⚠️[MEDIUM] 缺少 HTTP 安全头
修复建议
- 💡添加 DMARC 记录增强邮件安全
- 💡配置 Web 服务器添加这些安全头
- 💡移除或修改 Server/X-Powered-By 响应头
🌐域名信息
目标域名outofthesandbox.com
注册域名outofthesandbox.com
顶级域名.com
🛡️威胁情报 (7 platforms)
Blacklist未列入黑名单
Malware0
Phishing0
Abuse Score0/100
🐛发现的漏洞 (2)
MEDIUM缺少 HTTP 安全头
缺少以下安全头: Referrer-Policy, Permissions-Policy
修复建议: 配置 Web 服务器添加这些安全头
LOW服务器信息泄露
响应头泄露服务器信息: Server: cloudflare
修复建议: 移除或修改 Server/X-Powered-By 响应头
🔌开放端口 (4)
80
http
443
https
8080
unknown
8443
unknown
🌐DNS 记录
A: 23.227.38.65
MX: 1 aspmx.l.google.com.
MX: 10 alt3.aspmx.l.google.com.
MX: 10 alt4.aspmx.l.google.com.
MX: 5 alt1.aspmx.l.google.com.
MX: 5 alt2.aspmx.l.google.com.
NS: ns-1076.awsdns-06.org.
NS: ns-129.awsdns-16.com.
NS: ns-1809.awsdns-34.co.uk.
NS: ns-649.awsdns-17.net.
TXT: "facebook-domain-verification=ro2xplvzd1h1sg2npa7623r07nwiew"
TXT: "facebook-domain-verification=ydul65s0tjmz4i88bi6xeprkw03oqp"
TXT: "google-site-verification=9ZzQbZu3VYHiO5Mf9AFe_BjJXnBbkvYFJeyhOzdlQjQ"
TXT: "google-site-verification=UmWa8M5dvPka9XALEBVJ80iFXyEamrv_QDnQe2AlfPI"
TXT: "google-site-verification=W_AJKjyjobtbkSqKY_i6Jv-HtvjJukZz_hm8sUU9-_Q"
TXT: "google-site-verification=jj5fsADMrUaCjs_ypC_IgJTB2-IymBCKnjXjQ4fM-30"
TXT: "v=spf1 a include:_spf.google.com include:mail.zendesk.com include:spf.mandrillapp.com ?all"
SOA: ns-649.awsdns-17.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400
📋HTTP 响应头
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=7889238
Content-Security-Policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
Server: cloudflare