25
低风险
2026-05-21 02:47:03
发现的安全问题
- ⚠️[LOW] 服务器信息泄露
- ⚠️[MEDIUM] 缺少 HTTP 安全头
修复建议
- 💡添加 DMARC 记录增强邮件安全
- 💡配置 Web 服务器添加这些安全头
- 💡移除或修改 Server/X-Powered-By 响应头
🌐域名信息
目标域名ecocert.com
注册域名ecocert.com
顶级域名.com
🛡️威胁情报 (7 platforms)
Blacklist未列入黑名单
Malware0
Phishing0
Abuse Score0/100
🐛发现的漏洞 (2)
MEDIUM缺少 HTTP 安全头
缺少以下安全头: X-Frame-Options, X-XSS-Protection, X-Content-Type-Options, Referrer-Policy, Permissions-Policy
修复建议: 配置 Web 服务器添加这些安全头
LOW服务器信息泄露
响应头泄露服务器信息: Server: Apache
修复建议: 移除或修改 Server/X-Powered-By 响应头
🔌开放端口 (2)
80
http
443
https
🌐DNS 记录
A: 13.69.85.61
MX: 10 vade-mx-fr01.hornetsecurity.com.
MX: 20 vade-mx-eu-fallback02.hornetsecurity.com.
MX: 10 vade-mx-fr02.hornetsecurity.com.
MX: 20 vade-mx-eu-fallback01.hornetsecurity.com.
NS: ns1.caplaser.fr.
NS: ns2.caplaser.fr.
TXT: "google-site-verification=hNhxEk4-78uM6fjbyuenxU2epfIQ1QcNkwKPeVAhDDg"
TXT: "v=spf1 mx ip4:90.83.118.241 ip4:90.83.119.1 ip4:80.13.143.147 ip4:168.245.119.27 ip4:194.1.205.0/24 include:spf.protection.outlook.com include:sender.zohoinvoice.com include:mail.zendesk.com include:_spf.salesforce.com include:mailgun.org include:sent-vi" "a.netsuite.com -all"
TXT: "46D1B13FF18390DB4F6FCD54F3ADA9CBF0B9B0E292D78183289F01B2FF24A9F4"
TXT: "apple-domain-verification=oSiUOAV7P4zpLrRD"
TXT: "google-site-verification=82TrJ5xrVIvTQYf6tYdBp_DVaSXUjeoj-1bFuDtqYX4"
TXT: "MS=F0965A1AD0305139EF8697ADAEDA005D5E2A9B6F"
TXT: "dS41i82DNaNIS4VEn7OU9FVWJa8="
TXT: "_l759shrivarurojekgdvygjiwu4xo64"
SOA: ns1.caplaser.fr. technique.caplaser.fr. 2026051101 10800 3600 1209600 10800
📋HTTP 响应头
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: default-src 'none'; font-src 'self' *.googleapis.com *.ecocert.com fonts.gstatic.com; script-src 'self' 'unsafe-eval' 'u
Server: Apache