45
中风险
2026-05-21 05:08:53
发现的安全问题
- ⚠️[LOW] 服务器信息泄露
- ⚠️[HIGH] 敏感路径暴露
- ⚠️[MEDIUM] 缺少 HTTP 安全头
修复建议
- 💡配置 Web 服务器添加这些安全头
- 💡移除或修改 Server/X-Powered-By 响应头
- 💡限制对这些路径的访问或添加认证
🌐域名信息
目标域名creative-tim.com
注册域名creative-tim.com
顶级域名.com
🛡️威胁情报 (7 platforms)
Blacklist未列入黑名单
Malware0
Phishing0
Abuse Score0/100
🐛发现的漏洞 (3)
MEDIUM缺少 HTTP 安全头
缺少以下安全头: Content-Security-Policy, Permissions-Policy
修复建议: 配置 Web 服务器添加这些安全头
LOW服务器信息泄露
响应头泄露服务器信息: Server: cloudflare
修复建议: 移除或修改 Server/X-Powered-By 响应头
HIGH敏感路径暴露
发现可访问的敏感路径: /.env, /.git/config
修复建议: 限制对这些路径的访问或添加认证
🔌开放端口 (4)
80
http
443
https
8080
unknown
8443
unknown
🌐DNS 记录
A: 172.67.69.164
A: 104.26.12.28
A: 104.26.13.28
AAAA: 2606:4700:20::681a:c1c
AAAA: 2606:4700:20::681a:d1c
AAAA: 2606:4700:20::ac43:45a4
MX: 1 aspmx.l.google.com.
MX: 10 aspmx2.googlemail.com.
MX: 10 aspmx3.googlemail.com.
MX: 10 inbound-smtp.us-east-1.amazonaws.com.
MX: 5 alt1.aspmx.l.google.com.
MX: 5 alt2.aspmx.l.google.com.
NS: gabe.ns.cloudflare.com.
NS: pam.ns.cloudflare.com.
TXT: "NETORGFT982129.onmicrosoft.com"
TXT: "ahrefs-site-verification_5984af477671a61790769fe7324f44ee4894e1c5b8d19e1fd7467d2afa97a339"
TXT: "amazonses:9UGkLO+JIWtwDbqq03ampThGd3u3iAKWW7oWX+Fns2s="
TXT: "brevo-code:77cad8f0a141cd67d215177e88327101"
TXT: "facebook-domain-verification=68w9z42os16jqboxfnwami28hd1vm4"
TXT: "google-site-verification=2z1IRldteeJBw1wkCm6aA_zpijF4xdOBDbZrh3AIMYI"
TXT: "google-site-verification=5xOLjutsN9ZCIZpbw22acbI241CuyFVmJMsUrw5lqIA"
TXT: "google-site-verification=dge1u9dDapxAeBBxj3kkSlEflXX6VGS0WzWjZn-8oAg"
TXT: "google-site-verification=mS96gc0dzUoC9DIL3MUk92PW5STwOQjJpMXUlPYyQNU"
TXT: "google-site-verification=wBOZJTTLTGR1QF2lyryaUIy9evHD5LJeAVH1Ik5POn4"
TXT: "openai-domain-verification=dv-QmwB7X4SfyGlfcZAo7A2ynjZ"
TXT: "openai-domain-verification=dv-jp8lsMnRIJGAtrp1sj13XuLf"
TXT: "v=DMARC1;p=none;rua=mailto:dmarc@sendgrid.com;ruf=mailto:dmarc@sendgrid.com;rf=afrf;pct=100"
TXT: "v=spf1 include:_spf.google.com include:mail.zendesk.com include:amazonses.com ~all"
SOA: gabe.ns.cloudflare.com. dns.cloudflare.com. 2404322128 10000 2400 604800 1800
📋HTTP 响应头
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains
Referrer-Policy: strict-origin-when-cross-origin
Server: cloudflare