Website security scan results for www.camnarayan.com
Scanned dusing the Idyllum Labs website security scanner at www.idyllum.com
At a glance
SSL Status: [OK] SSL Encryption enforced
Location: United States (['142.251.39.115'])
Total OWASP ZAP alerts: 36
Nmap open ports found: 2
Network
Owner email: dns-admin@google.comNameservers:
ns-cloud-c1.googledomains.com(216.239.32.108) - Primary NS: ns5.googledomains.com
ns-cloud-c2.googledomains.com(216.239.34.108) - Primary NS: ns5.googledomains.com
ns-cloud-c3.googledomains.com(216.239.36.108) - Primary NS: ns5.googledomains.com
ns-cloud-c4.googledomains.com(216.239.38.108) - Primary NS: ns5.googledomains.com
Redirected from: camnarayan.com
WhatWeb scan for www.camnarayan.com
Results from Sept. 15, 2023, 7:24 p.m.
["http://www.camnarayan.com",301,[["RedirectLocation",[{"name":"location","string":"https://www.camnarayan.com/","certainty":100}]],["Country",[{"string":"UNITED STATES","module":"US","certainty":100}]],["X-Frame-Options",[{"string":"SAMEORIGIN","certainty":100}]],["HTTPServer",[{"name":"server string","string":"ESF","certainty":100}]],["X-XSS-Protection",[{"string":"0","certainty":100}]],["IP",[{"string":"142.251.39.115","certainty":100}]],["UncommonHeaders",[{"name":"headers","string":"x-content-type-options","certainty":100}]]]]
["https://www.camnarayan.com/",200,[["Country",[{"string":"UNITED STATES","module":"US","certainty":100}]],["Title",[{"name":"page title","string":"Anecdotal Designs","certainty":100}]],["X-Frame-Options",[{"string":"DENY","certainty":100}]],["HTTPServer",[{"name":"server string","string":"ESF","certainty":100}]],["X-XSS-Protection",[{"string":"0","certainty":100}]],["X-UA-Compatible",[{"string":["IE=edge"],"regexp_compiled":"(?i-mx:<meta http-equiv[\\s]*=[^>]*X-UA-Compatible[^>]*[\\s]+content[\\s]*=[\\s]*['|\"]?([a-z0-9=]+)[^>]*>)","certainty":100}]],["HTML5",[{"regexp":["<!DOCTYPE html>"],"regexp_compiled":"(?i-mx:<!DOCTYPE html>)","certainty":100}]],["IP",[{"string":"142.251.39.115","certainty":100}]],["UncommonHeaders",[{"name":"headers","string":"content-security-policy,cross-origin-opener-policy,referrer-policy,x-content-type-options","certainty":100}]],["Script",[{"regexp":[" "],"regexp_compiled":"(?i-mx:<script(\\s|>))","certainty":100}]],["Open-Graph-Protocol",[{"regexp":["<meta property=\"og:title\" content=\"Anecdotal Designs\">"],"regexp_compiled":"(?i-mx:<meta[^>]+property=\"og:title\"[^>]*>)","certainty":100},{"version":["website"],"regexp_compiled":"(?-mix:<meta[^>]+property=\"og:type\"[^>]+content=\"([^\"^>]+)\")","certainty":100}]]]]
Title
Anecdotal DesignsEnvironment info
IP addresses: 142.251.39.115Location: United States
Web server: ESF
All keywords
Script
UncommonHeaders (content-security-policy,cross-origin-opener-policy,referrer-policy,x-content-type-options)
HTML5
X-UA-Compatible (['IE=edge'])
X-Frame-Options (DENY)
X-XSS-Protection (0)
RedirectLocation (https://www.camnarayan.com/)
RedirectLocation (https://www.camnarayan.com/)
X-Frame-Options (SAMEORIGIN)
X-XSS-Protection (0)
UncommonHeaders (x-content-type-options)
X-UA-Compatible (['IE=edge'])
HTML5
Script
Open-Graph-Protocol (website)
OWASP ZAP Vulnerability Scan for www.camnarayan.com
Results from Sept. 17, 2023, 2:27 a.m.High risk vulnerabilities
Medium risk vulnerabilities
Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks. Including (but not limited to) Cross Site Scripting (XSS), and data injection attacks. These attacks are used for everything from data theft to site defacement or distribution of malware. CSP provides a set of standard HTTP headers that allow website owners to declare approved sources of content that browsers should be allowed to load on that page — covered types are JavaScript, CSS, HTML frames, fonts, images and embeddable objects such as Java applets, ActiveX, audio and video files.
- https://www.camnarayan.com/
- https://www.camnarayan.com/home
- https://www.camnarayan.com/old-camblog-albums
- https://www.camnarayan.com/robots.txt
- https://www.camnarayan.com/sitemap.xml
Ensure that your web server, application server, load balancer, etc. is properly configured to set the Content-Security-Policy header.
Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks. Including (but not limited to) Cross Site Scripting (XSS), and data injection attacks. These attacks are used for everything from data theft to site defacement or distribution of malware. CSP provides a set of standard HTTP headers that allow website owners to declare approved sources of content that browsers should be allowed to load on that page — covered types are JavaScript, CSS, HTML frames, fonts, images and embeddable objects such as Java applets, ActiveX, audio and video files.
- https://www.camnarayan.com/
- https://www.camnarayan.com/home
- https://www.camnarayan.com/old-camblog-albums
- https://www.camnarayan.com/robots.txt
- https://www.camnarayan.com/sitemap.xml
Ensure that your web server, application server, load balancer, etc. is properly configured to set the Content-Security-Policy header.
Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks. Including (but not limited to) Cross Site Scripting (XSS), and data injection attacks. These attacks are used for everything from data theft to site defacement or distribution of malware. CSP provides a set of standard HTTP headers that allow website owners to declare approved sources of content that browsers should be allowed to load on that page — covered types are JavaScript, CSS, HTML frames, fonts, images and embeddable objects such as Java applets, ActiveX, audio and video files.
- https://www.camnarayan.com/
- https://www.camnarayan.com/home
- https://www.camnarayan.com/old-camblog-albums
- https://www.camnarayan.com/robots.txt
- https://www.camnarayan.com/sitemap.xml
Ensure that your web server, application server, load balancer, etc. is properly configured to set the Content-Security-Policy header.
Low risk vulnerabilities
The page includes one or more script files from a third-party domain.
- https://www.camnarayan.com/
- https://www.camnarayan.com/home
- https://www.camnarayan.com/old-camblog-albums
- https://www.camnarayan.com/robots.txt
- https://www.camnarayan.com/sitemap.xml
Ensure JavaScript source files are loaded from only trusted sources, and the sources can't be controlled by end users of the application.
Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks. Including (but not limited to) Cross Site Scripting (XSS), and data injection attacks. These attacks are used for everything from data theft to site defacement or distribution of malware. CSP provides a set of standard HTTP headers that allow website owners to declare approved sources of content that browsers should be allowed to load on that page — covered types are JavaScript, CSS, HTML frames, fonts, images and embeddable objects such as Java applets, ActiveX, audio and video files.
- https://www.camnarayan.com/
- https://www.camnarayan.com/home
- https://www.camnarayan.com/old-camblog-albums
- https://www.camnarayan.com/robots.txt
- https://www.camnarayan.com/sitemap.xml
Ensure that your web server, application server, load balancer, etc. is properly configured to set the Content-Security-Policy header.
A HTTP Strict Transport Security (HSTS) META tag was found, defining HTTP Strict Transport Security (HSTS) via a META tag is explicitly not supported by the spec (RFC 6797).
- https://www.camnarayan.com/
- https://www.camnarayan.com/home
- https://www.camnarayan.com/old-camblog-albums
- https://www.camnarayan.com/robots.txt
- https://www.camnarayan.com/sitemap.xml
Do not attempt to set HTTP Strict Transport Security (HSTS) via a META tag.
A timestamp was disclosed by the application/web server - Unix
Manually confirm that the timestamp data is not sensitive, and that the data cannot be aggregated to disclose exploitable patterns.
Informative alerts
The application appears to be a modern web application. If you need to explore it automatically then the Ajax Spider may well be more effective than the standard one.
- https://www.camnarayan.com/
- https://www.camnarayan.com/home
- https://www.camnarayan.com/old-camblog-albums
- https://www.camnarayan.com/robots.txt
- https://www.camnarayan.com/sitemap.xml
This is an informational alert and so no changes are required.
Open ports for www.camnarayan.com (Nmap scan)
Results from Jan. 21, 2022, 1:16 p.m.Port 443 (tcp)(open) - https
A | ||||
| A | www.elixir.ee | 3600 | 217.146.69.20 | |
AAAA | ||||
| Sorry, no records found | ||||
CNAME | ||||
| CNAME | www.elixir.ee | 3600 | elixir.ee | |
MX | ||||
| MX | www.elixir.ee | 3600 | 5 | ALT2.ASPMX.L.GOOGLE.COM. |
| MX | www.elixir.ee | 3600 | 10 | ALT3.ASPMX.L.GOOGLE.COM. |
| MX | www.elixir.ee | 3600 | 10 | ALT4.ASPMX.L.GOOGLE.COM. |
| MX | www.elixir.ee | 3600 | 1 | ALTMX.ASPMX.L.GOOGLE.COM. |
NS Records | ||||
| NS | elixir.ee | 3600 | ns2.zone.ee. (85.234.242.32) | |
| NS | elixir.ee | 3600 | ns.zone.eu. (217.146.66.65) | |
| NS | elixir.ee | 3600 | ns3.zonedata.net. (90.191.225.242) | |
TXT | ||||
| TXT | elixir.ee | 3600 | v=spf1 a mx include:_spf.zone.eu include:_spf.google.com ~all | |
This report was generated with the Idyllum Labs Website security tool.
Get your report www.idyllum.com
What next?
------------------Dig deeper
- Log in or create a free account to gain access to this report in its entirety.
- Use our dashboard to automate security testing and set up automatic monitoring for your website portfolio.
- Scan a new domain or initiate a rescan for this domain.
Join our ranks
- Use these insights to build your systems bullet-proof.
- Explore our datasets and compare your results.
- Drop us a line! Help us expand our code or cloud or just say hi!
- Support the cause - your donation helps to keep this service free and unbiased.
Idyllum Labs is on a mission
------------------Is the code hosted at www.camnarayan.com vulnerable to cybersecurity attacks? Are the used systems up to date and respecting the security standards of 2023?
We at Idyllum Labs wanted to find out! That is why we built this automated website security scanner and generated this report.
Please note
This is an automated and unbiased website vulnerability scan for the domain www.camnarayan.com and has nothing to do with human subjectivity, thoughts, opinions, or relationships.
Our cloud-based infrastructure crawls the internet using a mixture of OWASP ZAP, Nmap, Whatweb, and other great software to detect website security issues. We display this data for educational purposes - to give security guidelines for anyone interested in building a safer web environment.
If you have comments, don't agree with the results, or want to submit a site for manual examination, don't hesitate to contact us.
Run a free OWASP ZAP scan for any website at Idyllum.com!
