25
低风险
2026-05-21 02:53:44
发现的安全问题
- ⚠️[LOW] 服务器信息泄露
- ⚠️[MEDIUM] 缺少 HTTP 安全头
修复建议
- 💡添加 DMARC 记录增强邮件安全
- 💡配置 Web 服务器添加这些安全头
- 💡移除或修改 Server/X-Powered-By 响应头
🌐域名信息
目标域名usbank.com
注册域名usbank.com
顶级域名.com
🛡️威胁情报 (7 platforms)
Blacklist未列入黑名单
Malware0
Phishing0
Abuse Score0/100
🐛发现的漏洞 (2)
MEDIUM缺少 HTTP 安全头
缺少以下安全头: X-Frame-Options, Strict-Transport-Security, Permissions-Policy
修复建议: 配置 Web 服务器添加这些安全头
LOW服务器信息泄露
响应头泄露服务器信息: Server: Apache
修复建议: 移除或修改 Server/X-Powered-By 响应头
🔌开放端口 (2)
80
http
443
https
🌐DNS 记录
A: 170.135.104.254
A: 170.135.184.254
MX: 10 mxb-00256501.gslb.pphosted.com.
MX: 10 mxa-00256501.gslb.pphosted.com.
NS: ns2.usbank.com.
NS: ns4.usbank.com.
TXT: "facebook-domain-verification=9wkbm6bart6a3ojbf93vmerbd7xzhi"
TXT: "821145468-58263427"
TXT: "cisco-ci-domain-verification=6f848ef50af3d2788d274c787ca091efd2c268e57b667c10dbe228fd1b0bb331"
TXT: "neat-pulse-domain-verification-9N4n4xX=46145a35-fd4d-451d-ad62-0ecc0f2f9be6"
TXT: "mixpanel-domain-verify=7927b4b7-62eb-4635-aafa-1fad7be0d982"
TXT: "v=spf1 ip4:170.135.101.26 ip4:170.135.101.27 ip4:170.135.101.30 ip4:170.135.101.31 ip4:170.135.101.34 ip4:170.135.101.35 ip4:170.135.101.36 ip4:170.135.101.37 ip4:170.135.101.38 ip4:170.135.185.118 ip4:170.135.185.38 ip4:170.135.186.26 " "ip4:170.135.148.24 ip4:170.135.185.42 ip4:170.135.185.27 ip4:170.135.185.31 ip4:170.135.179.24 ip4:170.135.179.28 ip4:170.135.179.33 ip4:170.135.179.35 ip4:170.135.179.36 ip4:62.17.112.74 ip4:62.17.112.78 " "ip4:62.17.112.115 ip4:62.134.193.197 ip4:62.134.193.198 ip4:62.134.193.206 ip4:204.137.43.7 ip4:204.137.43.8 ip4:204.137.43.9 ip4:204.137.47.8 ip4:204.137.47.9 ip4:204.137.47.15 include:vspf.usbank.com -all"
TXT: "webexdomainverification.ISL5=90c5bd95-bcad-4006-bfeb-ca2c327c0579"
TXT: "atlassian-domain-verification=6RAmUpqzBIbpyOnFrnp73qg8ez2sbpwFUB9owK2YbBGr8C6k96OeJI//P69559yA"
TXT: "twilio-domain-verification=0fa9a02ac315b9343656dfb23392dda1"
TXT: "atlassian-domain-verification=We1a45VsY1pqpcxCs1oPkjL4B6InxCKQANbjUOZRg2lyerQnCOvaszuS6oWJhfjN"
TXT: "56e1c764-c471-4959-ae97-0ffffda33432"
TXT: "jamf-site-verification=xRCb27ReoQ8hx6pd1sbl5g"
TXT: "liveramp-site-verification=vkp6vjre63dwW_pz78oXOyaFuEBlrJgXEZgPeQwZExY"
TXT: "segment-site-verification=ghO0JIP2xE1HWuCKbDqcweoKKOkltKF9"
TXT: "webexdomainverification.ISLA=dd569738-f2e3-428a-a420-6c5b22a34b44"
TXT: "docusign=64ec46d0-6d3e-491f-aaf1-1d4ba642d64f"
TXT: "webexdomainverification.ISLP=a7b654b7-bbbd-47cb-a2b8-e98d3e30467d"
TXT: "google-site-verification=gsaaJdGmqag78mP9g70fMI1q8_NVijAAbfDdtL2I7zY"
TXT: "asv_domain=b9150fbca9afab7d4c95af747e69aca4"
TXT: "adobe-idp-site-verification=75c6a92e5bd1da6d1b2b75aeca310dc5baed720243e72cef82c91337e8c7e879"
TXT: "mongodb-site-verification=nG9ZCzruXUJCmnKDBlgAzRGTvEeTW26G"
TXT: "flexera-domain-verification-brhzitbkyejrcyxs"
TXT: "segment-site-verification=DhY8ZaM7DwUhmyPnEeyPSViL3phQRJ9Y"
TXT: "webexdomainverification.JNRN=56adf08c-ea3a-4b66-b3f0-1e6277ee63bf"
TXT: "google-site-verification=gROrSplrXq6REiqu_HtVIpbGW7axqlSB_P1WEChYlyg"
TXT: "mongodb-site-verification=F4hW5ZY8vKG3IEEXbhFVI1AEsv1dE1Yy"
TXT: "docusign=f4c51eee-f32f-4883-b331-14a17a6aa79d"
TXT: "webexdomainverification.=187e2ef7-61ca-4585-8aa5-7d526210e140"
TXT: "atlassian-domain-verification=i5/JbyXiBIjtGSlxku3TOEsi/OjmS6cHi321L0Tm3sGSpm1LAfUUsB03v2YS65S+"
TXT: "onetrust-domain-verification=5f8f60973f0f4df79ddc58636c81ef7a"
TXT: "webexdomainverification.I4EL=bf8b02ee-57e5-42db-81e3-3b49e37980c4"
TXT: "apple-domain-verification=hXefxiVp2E8pUCrD"
TXT: "flexera-domain-verification-hdnmtyjswowryslt"
TXT: "webexdomainverification.J40J=969c1aea-40c9-4e05-b192-4669d4d712f0"
TXT: "MS=99F0C2D3C2A9644A766D082B3E0289D9647EA2C4"
TXT: "1VlKqI3cHFTucoIODqdMUdmghbtUYTe5uZ0kPs2DCiH7kxlX4rMsPZjt5Hr/2ES2H6NbCZnONf8H1sL3oR9YTw=="
TXT: "ZOOM_verify_bHnyeAyU7cJcsaJfDToEbY"
TXT: "webexdomainverification.JNKZ=ce7fcdd7-badb-42d0-979f-50d6c9d9c5fa"
TXT: "flexera-domain-verification-edhchstllbngpgpq"
TXT: "webexdomainverification.ICIJ=cd828173-7fce-4dac-b0b9-bab417ed44ce"
TXT: "webexdomainverification.KMZ0=ae50f84a-c3ec-4cd7-af6c-82e1edf0561e"
TXT: "infoblox-domain-mastery=6dee16f99346137ce14a613c60da390c8f2e2cd9976cea5362193ae6ed20d91a70"
TXT: "webexdomainverification.ISLU=ebe9033e-b824-47f7-a4ff-b1244b65e681"
SOA: ns2.usbank.com. domainadmin.usbank.com. 2026051903 28800 3600 604800 180
📋HTTP 响应头
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' *.usbank.com 'unsafe-inline' 'unsafe-eval' blob: data: cdn.appsflyer.com cdn.pdst.fm connect.faceboo
Referrer-Policy: no-referrer-when-downgrade
Server: Apache