25
低风险
2026-05-21 03:18:54
发现的安全问题
- ⚠️[LOW] 服务器信息泄露
- ⚠️[MEDIUM] 缺少 HTTP 安全头
修复建议
- 💡添加 DMARC 记录增强邮件安全
- 💡配置 Web 服务器添加这些安全头
- 💡移除或修改 Server/X-Powered-By 响应头
🌐域名信息
目标域名core.ac.uk
注册域名core.ac.uk
顶级域名.ac.uk
🛡️威胁情报 (7 platforms)
Blacklist未列入黑名单
Malware0
Phishing0
Abuse Score0/100
🐛发现的漏洞 (2)
MEDIUM缺少 HTTP 安全头
缺少以下安全头: X-Frame-Options, X-XSS-Protection, X-Content-Type-Options, Strict-Transport-Security, Content-Security-Policy, Referrer-Policy, Permissions-Policy
修复建议: 配置 Web 服务器添加这些安全头
LOW服务器信息泄露
响应头泄露服务器信息: Server: cloudflare, X-Powered-By: Next.js
修复建议: 移除或修改 Server/X-Powered-By 响应头
🔌开放端口 (4)
80
http
443
https
8080
unknown
8443
unknown
🌐DNS 记录
A: 104.21.20.56
A: 172.67.191.205
AAAA: 2606:4700:3037::ac43:bfcd
AAAA: 2606:4700:3030::6815:1438
MX: 0 core-ac-uk.mail.protection.outlook.com.
NS: john.ns.cloudflare.com.
NS: romina.ns.cloudflare.com.
TXT: "google-site-verification=N1l1LngrCrqAZIsIhHlh1UtPsMmM-Bt3PtfK4yM_l58"
TXT: "ms-domain-verification=3529416e-6049-41a0-8889-84c4c8e49c25"
TXT: "atlassian-domain-verification=ME7l7TGCJ9xfQDWdKMs9sm68zGdtOmB6VYBw/R969AtLbajdxCR8ut8NTe3GEMFR"
TXT: "CC013172-C797-4C59-8252-135EE277A6C7"
TXT: "v=spf1 include:spf.protection.outlook.com include:spf.core.ac.uk include:_spf.mlsend.com ip4:137.108.232.47 ip4:137.108.232.48 ip4:137.108.170.8 ip4:137.108.170.38 ip4:137.108.170.40 -all"
SOA: john.ns.cloudflare.com. dns.cloudflare.com. 2404763555 10000 2400 604800 1800
📋HTTP 响应头
Server: cloudflare
X-Powered-By: Next.js