EDLN – Page d'accueil

HTTPS

目标分析

edln.org

IP： 0.0.0.0

ASN： AS0

针对edln.org的全面安全与网络分析报告。服务器：OVHcloud。

主要端口: 443
扫描时间: 4/12/2026, 7:28:01 PM
可分享的报告链接: https://sechttp.com/scan/edln.org

详细安全分析

攻击路径与DDoS防御分析

攻击者

L4流量

L7流量

AS0 (OVHcloud POP节点)

L4已防御

L7已绕过

L4已阻止

L7流量

您的服务器

防御摘要

虽然OVHcloud对第4层（网络层）攻击提供了强大的保护，但您的服务器仍可能容易受到绕过标准CDN防御的复杂第7层（应用层）攻击。建议添加额外的WAF规则和应用端安全措施。

第4层防御

OVHcloud 在网络边缘提供强大的SYN洪泛、UDP放大和容量攻击保护。

第7层漏洞

针对0暴露的API端点的应用层攻击需要额外的WAF规则和速率限制。

服务器信息泄露

LOW

INFO-001

描述

服务器正在泄露其软件类型：OVHcloud。这可能帮助攻击者识别潜在漏洞。

建议

配置您的Web服务器以隐藏或修改Server头，以防止信息泄露。

缺少或无效的HSTS头

MEDIUM

SEC-001

描述

Strict-Transport-Security头未正确配置，使网站容易受到中间人攻击。

建议

通过添加具有适当max-age值的Strict-Transport-Security头来实现HSTS，强制使用HTTPS连接。

缺少X-Frame-Options头

MEDIUM

SEC-002

描述

网站未受到点击劫持攻击的保护。

建议

添加值为'DENY'或'SAMEORIGIN'的X-Frame-Options头，以防止点击劫持。

JavaScript中的敏感信息暴露

HIGH

JS-001

描述

在客户端JavaScript代码中发现16个潜在敏感变量暴露。

建议

审查并移除客户端代码中的敏感信息。使用环境变量和服务器端处理敏感数据。

正在测试

本次扫描无模糊测试数据。

端口扫描结果

   端口 服务 状态 版本 
HTTP  关闭   -  
HTTPS  开放   TLS 1.3  
SSH  过滤   -  
MySQL  关闭   -  
  

端口	服务	状态	版本
80	HTTP	关闭	-
443	HTTPS	开放	TLS 1.3
22	SSH	过滤	-
3306	MySQL	关闭	-

HTTP头分析

date: Sun, 12 Apr 2026 19:27:57 GMT 
vary: Accept-Encoding,Cookie 
server: OVHcloud 
connection: keep-alive 
content-type: text/html; charset=UTF-8 
x-powered-by: PHP/8.4 
cache-control: max-age=3, must-revalidate 
last-modified: Sun, 12 Apr 2026 09:52:21 GMT 
content-length: 109770 

正在测试

对等连接信息正在分析。

正在测试

互联网交换点数据正在收集。

JavaScript分析

Security Analysis Alert

Client-side code analysis has identified potential security vulnerabilities and information disclosure risks.

暴露的JavaScript变量

16 Found

Variables exposed in client-side code that may contain sensitive information

# Security Assessment: Variable Exposure Analysis
 
LEAK
 
key
 )+4).split( 

Risk: Information disclosure via client-side exposure
 
LEAK
 
url
 c 

Risk: Information disclosure via client-side exposure
 
LEAK
 
code
 invalid_json 

Risk: Information disclosure via client-side exposure
 
LEAK
 
f.code
 fetch_error 

Risk: Information disclosure via client-side exposure
 
LEAK
 
u.code
 invalid_json 

Risk: Information disclosure via client-side exposure
 
LEAK
 
lastUrl
 window 

Risk: Information disclosure via client-side exposure
 
LEAK
 
linkURL
 t 

Risk: Information disclosure via client-side exposure
 
LEAK
 
endpoint
 refill 

Risk: Information disclosure via client-side exposure
 
LEAK
 
imageURL
 t 

Risk: Information disclosure via client-side exposure
 
LEAK
 
base64Encode
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
onMissingKey
 null 

Risk: Information disclosure via client-side exposure
 
LEAK
 
sendEventData
 async 

Risk: Information disclosure via client-side exposure
 
LEAK
 
trackUrlChange
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
handleUrlChange
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
handleWpConsentApiIntegration
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
handleRealCookieBannerIntegration
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
Total: 16 exposed variables found

JavaScript资源

12 Files

JavaScript files loaded by the application

https://edln.org/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1

https://edln.org/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375

https://edln.org/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5

https://edln.org/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5

https://edln.org/wp-content/themes/edln/dist/main.js?ver=1775640150

https://edln.org/wp-content/plugins/wp-statistics/assets/js/tracker.js?ver=14.16.5

"https://edln.org/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1"

"https://edln.org/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375"

"https://edln.org/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5"

"https://edln.org/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5"

"https://edln.org/wp-content/themes/edln/dist/main.js?ver=1775640150"

"https://edln.org/wp-content/plugins/wp-statistics/assets/js/tracker.js?ver=14.16.5"

安全建议

• Avoid exposing sensitive variables in client-side code
• Implement proper API authentication and rate limiting
• Use environment variables for sensitive configuration
• Regularly audit client-side code for information leaks
• Minimize the amount of sensitive data processed on the client side

历史扫描记录 (1)