40
中风险
2026-05-21 06:55:24
发现的安全问题
- ⚠️[HIGH] 敏感路径暴露
- ⚠️[MEDIUM] 缺少 HTTP 安全头
修复建议
- 💡配置 Web 服务器添加这些安全头
- 💡限制对这些路径的访问或添加认证
🌐域名信息
目标域名petmd.com
注册域名petmd.com
顶级域名.com
🛡️威胁情报 (7 platforms)
Blacklist未列入黑名单
Malware0
Phishing0
Abuse Score0/100
🐛发现的漏洞 (2)
MEDIUM缺少 HTTP 安全头
缺少以下安全头: X-Frame-Options, X-XSS-Protection, X-Content-Type-Options, Content-Security-Policy, Referrer-Policy, Permissions-Policy
修复建议: 配置 Web 服务器添加这些安全头
HIGH敏感路径暴露
发现可访问的敏感路径: /.env
修复建议: 限制对这些路径的访问或添加认证
🔌开放端口 (2)
80
http
443
https
🌐DNS 记录
A: 23.32.20.48
A: 104.84.150.27
AAAA: 2600:140e:6::b833:6681
AAAA: 2600:140e:6::b833:6641
MX: 10 us-smtp-inbound-2.mimecast.com.
MX: 10 us-smtp-inbound-1.mimecast.com.
NS: dns4.p01.nsone.net.
NS: dns1.p01.nsone.net.
NS: a16-65.akam.net.
NS: a13-65.akam.net.
NS: dns3.p01.nsone.net.
NS: a3-67.akam.net.
NS: a20-65.akam.net.
NS: a28-65.akam.net.
NS: a1-91.akam.net.
NS: dns2.p01.nsone.net.
TXT: "hCzWbs/zwbsUMOSzLna0YGqvi1bcNNXjlJmcaVQQlrcFNBqcSmGjFPj2n/bytQ918qChvKF+9Jv+sDSOBQmPHg=="
TXT: "google-site-verification=fcViUQDFhzLWvY8a_Hk31FOBvQSEmuIa5vu0-H4hD-I"
TXT: "petmd.com=m4g402gx2yg1c6rghcxjjz50rfbtl7n6"
TXT: "XCXWlPE4Zz7Mr6WBL+YIG51KeVmjrzOufGH7c905ofrxGG4FNIHgwOUeBfym3GZU4ppTGVbOROyWeLNFL4KJ/w=="
TXT: "v=spf1 include:spf.bluehornet.com include:spf.protection.outlook.com include:us._netblocks.mimecast.com -all"
TXT: "v=DMARC1; p=quarantine; rua=mailto:21fb0c838604714@rep.dmarcanalyzer.com; ruf=mailto:21fb0c838604714@for.dmarcanalyzer.com; fo=1;"
TXT: "_e7qci933hqsj93vku6g93okhklql2o9"
TXT: "\"facebook-domain-verification=60sn20mq9fakjyayzp7956d45eciwx\""
TXT: "_k9j68twn6iw9nw16snzawl74mqvkeab"
TXT: "google-site-verification=pc02KrJI8RNCL5vpbWTOVYMeKkg-SWLD9qKBfYaO4ZQ"
TXT: "MS=ms91208596"
TXT: "_bri1e91djketndh3sxrpkrg6jlqc1yg"
SOA: dns1.p01.nsone.net. hostmaster.nsone.net. 2036388057 3600 600 604800 1800
📋HTTP 响应头
Strict-Transport-Security: max-age=86400 ; preload