fresh autorecon run

This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899

No files matched your search

@@ -1,52 +1 @@
HTTP/2 200
content-type: text/html
date: Sun, 05 Apr 2026 07:45:39 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
<meta name="theme-color" content="#3f51b5">
<link rel="manifest" href="manifest.json">
<title>Gotify</title>
<link rel="apple-touch-icon-precomposed" sizes="57x57" href="static/apple-touch-icon-57x57.png" />
<link rel="apple-touch-icon-precomposed" sizes="114x114" href="static/apple-touch-icon-114x114.png" />
<link rel="apple-touch-icon-precomposed" sizes="72x72" href="static/apple-touch-icon-72x72.png" />
<link rel="apple-touch-icon-precomposed" sizes="144x144" href="static/apple-touch-icon-144x144.png" />
<link rel="apple-touch-icon-precomposed" sizes="60x60" href="static/apple-touch-icon-60x60.png" />
<link rel="apple-touch-icon-precomposed" sizes="120x120" href="static/apple-touch-icon-120x120.png" />
<link rel="apple-touch-icon-precomposed" sizes="76x76" href="static/apple-touch-icon-76x76.png" />
<link rel="apple-touch-icon-precomposed" sizes="152x152" href="static/apple-touch-icon-152x152.png" />
<link rel="icon" type="image/png" href="static/favicon-196x196.png" sizes="196x196" />
<link rel="icon" type="image/png" href="static/favicon-96x96.png" sizes="96x96" />
<link rel="icon" type="image/png" href="static/favicon-32x32.png" sizes="32x32" />
<link rel="icon" type="image/png" href="static/favicon-16x16.png" sizes="16x16" />
<link rel="icon" type="image/png" href="static/favicon-128.png" sizes="128x128" />
<link rel="icon" href="static/favicon.ico">
<meta name="application-name" content="Gotify"/>
<meta name="msapplication-TileColor" content="#FFFFFF" />
<meta name="msapplication-TileImage" content="static/mstile-144x144.png" />
<meta name="msapplication-square70x70logo" content="static/mstile-70x70.png" />
<meta name="msapplication-square150x150logo" content="static/mstile-150x150.png" />
<meta name="msapplication-wide310x150logo" content="static/mstile-310x150.png" />
<meta name="msapplication-square310x310logo" content="static/mstile-310x310.png" />
<script type="module" crossorigin src="./static/index-eGvATxVq.js"></script>
<link rel="stylesheet" crossorigin href="./static/index-DaSZqSeC.css">
</head>
<body>
<noscript>
Gotify requires JavaScript.
</noscript>
<div id="root"></div>
<script>window.config = {"register":false,"version":{"version":"2.9.1","commit":"4fa74cea55137dc56bacda3fa7ff694f24b5efc0","buildDate":"2026-02-28-19:13:51"}};</script>
</body>
</html>
@@ -283,64 +283,3 @@ Configuration {
unique: false,
response_size_limit: 4194304,
}
200 GET 8l 15w 175c https://gotify.lan.ddnsgeek.com/manifest.json
200 GET 9l 57w 3422c https://gotify.lan.ddnsgeek.com/static/favicon-32x32.png
200 GET 79l 364w 28039c https://gotify.lan.ddnsgeek.com/static/favicon-196x196.png
200 GET 33l 231w 19847c https://gotify.lan.ddnsgeek.com/static/mstile-144x144.png
200 GET 14l 87w 7288c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-60x60.png
200 GET 186l 1219w 91115c https://gotify.lan.ddnsgeek.com/static/mstile-310x310.png
200 GET 1l 49w 3017c https://gotify.lan.ddnsgeek.com/static/index-DaSZqSeC.css
200 GET 13l 88w 6813c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-57x57.png
200 GET 34l 169w 12700c https://gotify.lan.ddnsgeek.com/static/favicon-96x96.png
200 GET 45l 249w 17807c https://gotify.lan.ddnsgeek.com/static/favicon-128.png
200 GET 46l 255w 21107c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-152x152.png
200 GET 94l 602w 45005c https://gotify.lan.ddnsgeek.com/static/mstile-310x150.png
200 GET 13l 77w 78752c https://gotify.lan.ddnsgeek.com/static/favicon.ico
200 GET 33l 231w 19847c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-144x144.png
200 GET 21l 116w 9575c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-76x76.png
200 GET 28l 195w 15310c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-114x114.png
200 GET 26l 127w 9189c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-72x72.png
200 GET 97l 533w 39874c https://gotify.lan.ddnsgeek.com/static/mstile-150x150.png
200 GET 198l 19103w 997931c https://gotify.lan.ddnsgeek.com/static/index-eGvATxVq.js
200 GET 45l 249w 17807c https://gotify.lan.ddnsgeek.com/static/mstile-70x70.png
200 GET 49l 229w 16404c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-120x120.png
200 GET 5l 22w 1378c https://gotify.lan.ddnsgeek.com/static/favicon-16x16.png
200 GET 42l 141w 2578c https://gotify.lan.ddnsgeek.com/
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/application
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/client
200 GET 63l 130w 1761c https://gotify.lan.ddnsgeek.com/docs
200 GET 1l 1w 37c https://gotify.lan.ddnsgeek.com/health
200 GET 42l 141w 2578c https://gotify.lan.ddnsgeek.com/index.html
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/message
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/plugin
200 GET 79l 364w 28039c https://gotify.lan.ddnsgeek.com/static/defaultapp.png
200 GET 62l 363w 28652c https://gotify.lan.ddnsgeek.com/static/roboto-latin-500-DRg8azjQ.woff2
200 GET 69l 363w 28347c https://gotify.lan.ddnsgeek.com/static/roboto-latin-100-BJNx9A77.woff2
200 GET 68l 495w 39648c https://gotify.lan.ddnsgeek.com/static/roboto-latin-500italic-DC3lxgcN.woff
200 GET 75l 421w 31430c https://gotify.lan.ddnsgeek.com/static/roboto-latin-400italic-DRWWNyaf.woff2
200 GET 81l 483w 40120c https://gotify.lan.ddnsgeek.com/static/roboto-latin-900italic-uSnr6All.woff
200 GET 56l 365w 31608c https://gotify.lan.ddnsgeek.com/static/roboto-latin-300italic-CYatNKLh.woff2
200 GET 62l 365w 28340c https://gotify.lan.ddnsgeek.com/static/roboto-latin-700-CqGedB_1.woff2
200 GET 93l 428w 36389c https://gotify.lan.ddnsgeek.com/static/roboto-latin-300-Cx9SeV6m.woff
200 GET 12l 7227w 393380c https://gotify.lan.ddnsgeek.com/static/PluginDetailView-DQ2pm7df.js
200 GET 84l 518w 46218c https://gotify.lan.ddnsgeek.com/static/notification.ogg
200 GET 55l 386w 30850c https://gotify.lan.ddnsgeek.com/static/roboto-latin-700italic-C5p_YAqY.woff2
200 GET 57l 342w 28673c https://gotify.lan.ddnsgeek.com/static/roboto-latin-900-BEowQPyJ.woff2
200 GET 68l 410w 31276c https://gotify.lan.ddnsgeek.com/static/roboto-latin-500italic-CAWXcheQ.woff2
200 GET 78l 452w 36359c https://gotify.lan.ddnsgeek.com/static/roboto-latin-700-CCwTn0--.woff
200 GET 70l 374w 28741c https://gotify.lan.ddnsgeek.com/static/roboto-latin-300-EvKWBL9d.woff2
200 GET 59l 433w 36325c https://gotify.lan.ddnsgeek.com/static/roboto-latin-100-B3mHgoOJ.woff
200 GET 68l 455w 36519c https://gotify.lan.ddnsgeek.com/static/roboto-latin-900-Blac3EU0.woff
200 GET 95l 458w 36604c https://gotify.lan.ddnsgeek.com/static/roboto-latin-500-BU-otfqs.woff
200 GET 73l 470w 38816c https://gotify.lan.ddnsgeek.com/static/roboto-latin-100italic-Bjs4D596.woff
200 GET 75l 383w 28313c https://gotify.lan.ddnsgeek.com/static/roboto-latin-400-CEEi-WbQ.woff2
200 GET 81l 422w 36239c https://gotify.lan.ddnsgeek.com/static/roboto-latin-400-CKhRtUFO.woff
200 GET 89l 433w 30558c https://gotify.lan.ddnsgeek.com/static/roboto-latin-100italic-DkGpOhj0.woff2
200 GET 67l 434w 38817c https://gotify.lan.ddnsgeek.com/static/roboto-latin-700italic-DXbHVVaQ.woff
200 GET 65l 445w 39524c https://gotify.lan.ddnsgeek.com/static/roboto-latin-400italic-B7WW6HdJ.woff
200 GET 78l 384w 31534c https://gotify.lan.ddnsgeek.com/static/roboto-latin-900italic-DBp_g5Ww.woff2
200 GET 53l 455w 39980c https://gotify.lan.ddnsgeek.com/static/roboto-latin-300italic-Uxw9HR3T.woff
200 GET 52l 103w 3443c https://gotify.lan.ddnsgeek.com/static/
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/stream
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/user
200 GET 1l 1w 105c https://gotify.lan.ddnsgeek.com/version
@@ -1,21 +1,23 @@
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
+ Target IP: 167.179.167.166
+ Target Hostname: gotify.lan.ddnsgeek.com
+ Target Port: 443
---------------------------------------------------------------------------
+ SSL Info: Subject: /CN=gotify.lan.ddnsgeek.com
CN: gotify.lan.ddnsgeek.com
SAN: gotify.lan.ddnsgeek.com
Ciphers: TLS_AES_128_GCM_SHA256
Issuer: /C=US/O=Let's Encrypt/CN=R13
+ Platform: Unknown
+ Start Time: 2026-04-05 07:51:15 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [999966] /: The Content-Encoding header is set to "deflate" which may mean that the server is vulnerable to the BREACH attack. See: http://breachattack.com/
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [FAIL] Unable to connect to gotify.lan.ddnsgeek.com:443.
@@ -1,11 +1,23 @@
# Nmap 7.98 scan initiated Sun Apr 5 07:50:48 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:27:37 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com
Nmap scan report for gotify.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.015s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 07:51:01 UTC for 582s
Scanned at 2026-04-14 03:27:43 UTC for 200s
PORT STATE SERVICE REASON VERSION
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
PORT STATE SERVICE REASON VERSION
443/tcp open ssl/https syn-ack ttl 55
|_http-malware-host: Host appears to be clean
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
| http-security-headers:
| Strict_Transport_Security:
| HSTS not configured in HTTPS Server
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
| ssl-cert: Subject: commonName=gotify.lan.ddnsgeek.com
| Subject Alternative Name: DNS:gotify.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
@@ -52,63 +64,7 @@ PORT STATE SERVICE REASON VERSION
| Lc3uWbMBAgMe6LIg0A45uMNzHVq6Jz6Cqxbq4zWCpTJG86mS74VI+Z4Vr9d+BzQr
| u7L76W6EfP8Aau/l
|_-----END CERTIFICATE-----
|_http-traceroute: ERROR: Script execution failed (use -d to debug)
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-feed: Couldn't find any feeds.
|_http-date: Sun, 05 Apr 2026 07:51:56 GMT; -4s from local time.
| http-methods:
|_ Supported Methods: GET OPTIONS
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X_Frame_Options:
| Header: X-Frame-Options: SAMEORIGIN
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
| X_XSS_Protection:
| Header: X-XSS-Protection: 1; mode=block
| Description: The browser will prevent the rendering of the page when XSS is detected.
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-title: Gotify
| http-sitemap-generator:
| Directory structure:
| /
| Other: 1; json: 1
| /static/
| css: 1; js: 1
| Longest directory structure:
| Depth: 1
| Dir: /static/
| Total files found (by extension):
|_ Other: 1; css: 1; js: 1; json: 1
|_http-malware-host: Host appears to be clean
|_http-errors: Couldn't find any error pages.
| http-headers:
| Content-Type: text/html
| Date: Sun, 05 Apr 2026 07:52:19 GMT
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| Vary: Accept-Encoding
| X-Content-Type-Options: nosniff
| X-Frame-Options: SAMEORIGIN
| X-Xss-Protection: 1; mode=block
| Connection: close
| Transfer-Encoding: chunked
|
|_ (Request type: GET)
| http-vhosts:
| auth.lan.ddnsgeek.com : 200
|_127 names had status 404
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_ssl-date: TLS randomness does not represent time
| http-php-version: Logo query returned unknown hash 622a589591324462d669df924802d29b
|_Credits query returned unknown hash 622a589591324462d669df924802d29b
|_http-chrono: Request times for /; avg: 7828.27ms; min: 3421.52ms; max: 23506.11ms
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
@@ -129,15 +85,21 @@ PORT STATE SERVICE REASON VERSION
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
| cipher preference: server
|_ least strength: A
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-enum:
|_ /manifest.json: Manifest JSON File
|_http-mobileversion-checker: No mobile version detected.
|_http-comments-displayer: Couldn't find any comments.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_ssl-date: TLS randomness does not represent time
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-csrf: Couldn't find any CSRF vulnerabilities.
| http-vhosts:
|_128 names had status 404
|_http-date: Tue, 14 Apr 2026 03:28:15 GMT; 0s from local time.
| http-errors:
| Spidering limited to: maxpagecount=40; withinhost=gotify.lan.ddnsgeek.com
| Found the following error pages:
|
| Error Code: 404
|_ http://gotify.lan.ddnsgeek.com:443/
| http-useragent-tester:
| Status for browser useragent: 200
| Status for browser useragent: 404
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| libwww
@@ -156,8 +118,29 @@ PORT STATE SERVICE REASON VERSION
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-feed: Couldn't find any feeds.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-comments-displayer: Couldn't find any comments.
|_http-mobileversion-checker: No mobile version detected.
| http-headers:
| Content-Type: text/plain; charset=utf-8
| X-Content-Type-Options: nosniff
| Date: Tue, 14 Apr 2026 03:28:30 GMT
| Content-Length: 19
| Connection: close
|
|_ (Request type: GET)
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-chrono: Request times for /; avg: 793.49ms; min: 415.71ms; max: 1062.27ms
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:00:43 2026 -- 1 IP address (1 host up) scanned in 597.62 seconds
# Nmap done at Tue Apr 14 03:31:03 2026 -- 1 IP address (1 host up) scanned in 207.02 seconds
@@ -1,65 +1 @@
WhatWeb report for https://gotify.lan.ddnsgeek.com:443
Status : 200 OK
Title : Gotify
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ HTML5 ]
HTML version 5, detected by the doctype declaration
[ Script ]
This plugin detects instances of script HTML elements and
returns the script language/type.
String : module
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : x-content-type-options (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Length: 769
Content-Type: text/html
Date: Sun, 05 Apr 2026 07:51:46 GMT
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
@@ -1,5 +1,5 @@
Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025
OpenSSL 3.5.5 27 Jan 2026
Connected to 167.179.167.166
@@ -1,56 +1,51 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.98 scan initiated Sun Apr 5 07:50:48 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com" start="1775375448" startstr="Sun Apr 5 07:50:48 2026" version="7.98" xmloutputversion="1.05">
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:27:37 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com" start="1776137257" startstr="Tue Apr 14 03:27:37 2026" version="7.99" xmloutputversion="1.05">
<scaninfo type="syn" protocol="tcp" numservices="1" services="443"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1775375460"/>
<taskend task="NSE" time="1775375460"/>
<taskbegin task="NSE" time="1775375460"/>
<taskend task="NSE" time="1775375460"/>
<taskbegin task="NSE" time="1775375460"/>
<taskend task="NSE" time="1775375460"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775375460"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775375461"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775375461"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775375461"/>
<taskbegin task="SYN Stealth Scan" time="1775375461"/>
<taskend task="SYN Stealth Scan" time="1775375461" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1775375465"/>
<taskend task="Service scan" time="1775375478" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1775375478"/>
<taskprogress task="NSE" time="1775375509" percent="65.41" remaining="17" etc="1775375525"/>
<taskprogress task="NSE" time="1775375539" percent="84.04" remaining="12" etc="1775375551"/>
<taskprogress task="NSE" time="1775375577" percent="85.99" remaining="17" etc="1775375593"/>
<taskprogress task="NSE" time="1775375607" percent="96.44" remaining="5" etc="1775375612"/>
<taskprogress task="NSE" time="1775375637" percent="98.38" remaining="3" etc="1775375640"/>
<taskprogress task="NSE" time="1775375667" percent="99.35" remaining="2" etc="1775375668"/>
<taskprogress task="NSE" time="1775375697" percent="99.68" remaining="1" etc="1775375698"/>
<taskprogress task="NSE" time="1775375727" percent="99.68" remaining="1" etc="1775375728"/>
<taskprogress task="NSE" time="1775375757" percent="99.68" remaining="1" etc="1775375758"/>
<taskprogress task="NSE" time="1775375787" percent="99.68" remaining="2" etc="1775375788"/>
<taskprogress task="NSE" time="1775375817" percent="99.68" remaining="2" etc="1775375818"/>
<taskprogress task="NSE" time="1775375847" percent="99.68" remaining="2" etc="1775375848"/>
<taskprogress task="NSE" time="1775375877" percent="99.68" remaining="2" etc="1775375878"/>
<taskprogress task="NSE" time="1775375907" percent="99.68" remaining="2" etc="1775375908"/>
<taskprogress task="NSE" time="1775375937" percent="99.68" remaining="2" etc="1775375938"/>
<taskprogress task="NSE" time="1775375967" percent="99.68" remaining="2" etc="1775375969"/>
<taskprogress task="NSE" time="1775375997" percent="99.68" remaining="2" etc="1775375999"/>
<taskprogress task="NSE" time="1775376027" percent="99.68" remaining="2" etc="1775376029"/>
<taskend task="NSE" time="1775376038"/>
<taskbegin task="NSE" time="1775376038"/>
<taskend task="NSE" time="1775376043"/>
<taskbegin task="NSE" time="1775376043"/>
<taskend task="NSE" time="1775376043"/>
<host starttime="1775375461" endtime="1775376043"><status state="up" reason="user-set" reason_ttl="0"/>
<taskbegin task="NSE" time="1776137262"/>
<taskend task="NSE" time="1776137262"/>
<taskbegin task="NSE" time="1776137262"/>
<taskend task="NSE" time="1776137262"/>
<taskbegin task="NSE" time="1776137262"/>
<taskend task="NSE" time="1776137262"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776137263"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776137263"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776137263"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776137263"/>
<taskbegin task="SYN Stealth Scan" time="1776137263"/>
<taskend task="SYN Stealth Scan" time="1776137263" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1776137266"/>
<taskend task="Service scan" time="1776137275" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1776137275"/>
<taskprogress task="NSE" time="1776137306" percent="84.31" remaining="6" etc="1776137312"/>
<taskprogress task="NSE" time="1776137336" percent="99.35" remaining="1" etc="1776137336"/>
<taskprogress task="NSE" time="1776137366" percent="99.68" remaining="1" etc="1776137366"/>
<taskprogress task="NSE" time="1776137396" percent="99.68" remaining="1" etc="1776137396"/>
<taskprogress task="NSE" time="1776137426" percent="99.68" remaining="1" etc="1776137426"/>
<taskprogress task="NSE" time="1776137456" percent="99.68" remaining="1" etc="1776137457"/>
<taskend task="NSE" time="1776137461"/>
<taskbegin task="NSE" time="1776137461"/>
<taskend task="NSE" time="1776137463"/>
<taskbegin task="NSE" time="1776137463"/>
<taskend task="NSE" time="1776137463"/>
<host starttime="1776137263" endtime="1776137463"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="167.179.167.166" addrtype="ipv4"/>
<hostnames>
<hostname name="gotify.lan.ddnsgeek.com" type="user"/>
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
</hostnames>
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="ssl-cert" output="Subject: commonName=gotify.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:gotify.lan.ddnsgeek.com&#xa;Issuer: commonName=R13/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-02-14T19:02:31&#xa;Not valid after: 2026-05-15T19:02:30&#xa;MD5: 0663 3538 85f4 573b 487c 09cb e7dd f8fc&#xa;SHA-1: c524 c1ab 9e90 457e 0aa8 630f 6277 e73a eeb2 5078&#xa;SHA-256: b69e 7113 332a b817 efd6 6485 19a7 ca69 eccc 1918 b1f5 1193 7883 4e0b 69f2 a4f8&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGCDCCBPCgAwIBAgISBWjxVFy9rGrar3/Ia3tZt0wJMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwMjE0MTkwMjMxWhcNMjYwNTE1MTkwMjMwWjAiMSAwHgYDVQQD&#xa;Exdnb3RpZnkubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP&#xa;ADCCAgoCggIBAJKWJGSSAoVrS6NqFLLjikQard2jHkoMhwLwosukVIZ70U+dxLdM&#xa;k7PJb/DHLM1sj4Wf04jBBMF2tlD/A4/unLaX3No+bsznq6V6yYVA0QFWQZhKrhN3&#xa;hsHLRbyuibfan2XQNMCWPtmWEe76xTP+i2STKFoZmz4oSRilOExy5RzxwWDei4qn&#xa;4dtrLSp/vHvaDTERd8eY7ssmOM39HkzZbZpHP0kg0AaejBUTK7jcjTTVQat/09sR&#xa;TH41bajyXdqdQ5D8JWESKZTxtT579M8wGQOEfe68dnVRSH4XSw69MfuHpIXzhTl9&#xa;pZOx2091QqOwN80Aj4rfHz182qCdwXEmnTT8V+nnJ6Zl566Ch5Z/SJG6Kw1ozoPk&#xa;h68Nzmt1j60PxW4DYW1CH/Xg9TrV04gZreQ9/uMpPmwX4x9aqmKuiP4QttKwLN43&#xa;4F1p6D9/hBNHJvwnkTD7N+MxsnoRsOfGOLLIWaggEcwByEj2WctTbwWWBbnZNEgH&#xa;m2aI782aWDCIk3/eKy8Ikh/Lvy0YwdCSXj8x9XNrii7cl2uUTvbN7Vk8NiVapowx&#xa;PZ4O0mFPnOlZQ5NZTvRjSo19IQeNDYuzJIEgADHRTPqTvi+aLzs2oyeOuDWmfvyg&#xa;4GLXhxIzy6WQtVSFzAFp6g3ogJLIQ6poRiHTugWDDppj/sqMugBYwWMfAgMBAAGj&#xa;ggIlMIICITAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYD&#xa;VR0TAQH/BAIwADAdBgNVHQ4EFgQU6cGnXT7obSZnDAKEzKmtQ4U1CMgwHwYDVR0j&#xa;BBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMGCCsG&#xa;AQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAiBgNVHREEGzAZghdnb3Rp&#xa;ZnkubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAuBgNVHR8E&#xa;JzAlMCOgIaAfhh1odHRwOi8vcjEzLmMubGVuY3Iub3JnLzEwLmNybDCCAQwGCisG&#xa;AQQB1nkCBAIEgf0EgfoA+AB2AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5GpD8P&#xa;yqnGAAABnF2+CggAAAQDAEcwRQIgXZAcyFu2NrRhVSoEKvpPZdQVjeXWsj+RkmPL&#xa;v75RmQoCIQCHRZek8tNK2DlyM85HTCLV3UOI/N3PBC+FZKwNc8a9cgB+ABqLnWlK&#xa;V5jImaDKiL30j8C0VmDMw2ANH3H0af/H0ayjAAABnF2+CywACAAABQBH+lCyBAMA&#xa;RzBFAiAQHPX3dCEgtXOtKnunRRmiTCXrEXzZL+KHpU/4bnCEcQIhALLzF1xFYvJR&#xa;y8MDKPHd6SXSi01LFkil8UNBu1x++cLCMA0GCSqGSIb3DQEBCwUAA4IBAQBzxqbU&#xa;ANmKar7Hl1sDtpXXmYA7fqtT8QToH8hne93Edrhe4wa9aJzb/SJS5Jp9Dkuqb/WG&#xa;ES0HMFD1MSvO37cpCsuKebYrsz8RT86iYFTrlUqvHsgUA7YukdZy7zi6LEXIi7xN&#xa;7ywov+BUO30KakhcG95fLYTqudoWlEEpOtiiSzvyGaNcNIX8FKh+SUgxGFlPO3Ep&#xa;UQWefkONj9BkFwKu63UdmP3TXP4X8sDZXY7vA6qsoA1k2WOzDVGY3TFC3kArlkjD&#xa;Lc3uWbMBAgMe6LIg0A45uMNzHVq6Jz6Cqxbq4zWCpTJG86mS74VI+Z4Vr9d+BzQr&#xa;u7L76W6EfP8Aau/l&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="https" tunnel="ssl" method="probed" conf="10"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="http-security-headers" output="&#xa; Strict_Transport_Security: &#xa; HSTS not configured in HTTPS Server&#xa; X_Content_Type_Options: &#xa; Header: X-Content-Type-Options: nosniff&#xa; Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
<elem>HSTS not configured in HTTPS Server</elem>
</table>
<table key="X_Content_Type_Options">
<elem>Header: X-Content-Type-Options: nosniff</elem>
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
</table>
</script><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args search-limit=&lt;number|all&gt; for deeper analysis)"/><script id="ssl-cert" output="Subject: commonName=gotify.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:gotify.lan.ddnsgeek.com&#xa;Issuer: commonName=R13/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-02-14T19:02:31&#xa;Not valid after: 2026-05-15T19:02:30&#xa;MD5: 0663 3538 85f4 573b 487c 09cb e7dd f8fc&#xa;SHA-1: c524 c1ab 9e90 457e 0aa8 630f 6277 e73a eeb2 5078&#xa;SHA-256: b69e 7113 332a b817 efd6 6485 19a7 ca69 eccc 1918 b1f5 1193 7883 4e0b 69f2 a4f8&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGCDCCBPCgAwIBAgISBWjxVFy9rGrar3/Ia3tZt0wJMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwMjE0MTkwMjMxWhcNMjYwNTE1MTkwMjMwWjAiMSAwHgYDVQQD&#xa;Exdnb3RpZnkubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP&#xa;ADCCAgoCggIBAJKWJGSSAoVrS6NqFLLjikQard2jHkoMhwLwosukVIZ70U+dxLdM&#xa;k7PJb/DHLM1sj4Wf04jBBMF2tlD/A4/unLaX3No+bsznq6V6yYVA0QFWQZhKrhN3&#xa;hsHLRbyuibfan2XQNMCWPtmWEe76xTP+i2STKFoZmz4oSRilOExy5RzxwWDei4qn&#xa;4dtrLSp/vHvaDTERd8eY7ssmOM39HkzZbZpHP0kg0AaejBUTK7jcjTTVQat/09sR&#xa;TH41bajyXdqdQ5D8JWESKZTxtT579M8wGQOEfe68dnVRSH4XSw69MfuHpIXzhTl9&#xa;pZOx2091QqOwN80Aj4rfHz182qCdwXEmnTT8V+nnJ6Zl566Ch5Z/SJG6Kw1ozoPk&#xa;h68Nzmt1j60PxW4DYW1CH/Xg9TrV04gZreQ9/uMpPmwX4x9aqmKuiP4QttKwLN43&#xa;4F1p6D9/hBNHJvwnkTD7N+MxsnoRsOfGOLLIWaggEcwByEj2WctTbwWWBbnZNEgH&#xa;m2aI782aWDCIk3/eKy8Ikh/Lvy0YwdCSXj8x9XNrii7cl2uUTvbN7Vk8NiVapowx&#xa;PZ4O0mFPnOlZQ5NZTvRjSo19IQeNDYuzJIEgADHRTPqTvi+aLzs2oyeOuDWmfvyg&#xa;4GLXhxIzy6WQtVSFzAFp6g3ogJLIQ6poRiHTugWDDppj/sqMugBYwWMfAgMBAAGj&#xa;ggIlMIICITAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYD&#xa;VR0TAQH/BAIwADAdBgNVHQ4EFgQU6cGnXT7obSZnDAKEzKmtQ4U1CMgwHwYDVR0j&#xa;BBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMGCCsG&#xa;AQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAiBgNVHREEGzAZghdnb3Rp&#xa;ZnkubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAuBgNVHR8E&#xa;JzAlMCOgIaAfhh1odHRwOi8vcjEzLmMubGVuY3Iub3JnLzEwLmNybDCCAQwGCisG&#xa;AQQB1nkCBAIEgf0EgfoA+AB2AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5GpD8P&#xa;yqnGAAABnF2+CggAAAQDAEcwRQIgXZAcyFu2NrRhVSoEKvpPZdQVjeXWsj+RkmPL&#xa;v75RmQoCIQCHRZek8tNK2DlyM85HTCLV3UOI/N3PBC+FZKwNc8a9cgB+ABqLnWlK&#xa;V5jImaDKiL30j8C0VmDMw2ANH3H0af/H0ayjAAABnF2+CywACAAABQBH+lCyBAMA&#xa;RzBFAiAQHPX3dCEgtXOtKnunRRmiTCXrEXzZL+KHpU/4bnCEcQIhALLzF1xFYvJR&#xa;y8MDKPHd6SXSi01LFkil8UNBu1x++cLCMA0GCSqGSIb3DQEBCwUAA4IBAQBzxqbU&#xa;ANmKar7Hl1sDtpXXmYA7fqtT8QToH8hne93Edrhe4wa9aJzb/SJS5Jp9Dkuqb/WG&#xa;ES0HMFD1MSvO37cpCsuKebYrsz8RT86iYFTrlUqvHsgUA7YukdZy7zi6LEXIi7xN&#xa;7ywov+BUO30KakhcG95fLYTqudoWlEEpOtiiSzvyGaNcNIX8FKh+SUgxGFlPO3Ep&#xa;UQWefkONj9BkFwKu63UdmP3TXP4X8sDZXY7vA6qsoA1k2WOzDVGY3TFC3kArlkjD&#xa;Lc3uWbMBAgMe6LIg0A45uMNzHVq6Jz6Cqxbq4zWCpTJG86mS74VI+Z4Vr9d+BzQr&#xa;u7L76W6EfP8Aau/l&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
<elem key="commonName">gotify.lan.ddnsgeek.com</elem>
</table>
<table key="issuer">
@@ -117,55 +112,32 @@
<elem key="sha1">c524c1ab9e90457e0aa8630f6277e73aeeb25078</elem>
<elem key="sha256">b69e7113332ab817efd6648519a7ca69eccc1918b1f5119378834e0b69f2a4f8</elem>
<elem key="pem">-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGCDCCBPCgAwIBAgISBWjxVFy9rGrar3/Ia3tZt0wJMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwMjE0MTkwMjMxWhcNMjYwNTE1MTkwMjMwWjAiMSAwHgYDVQQD&#xa;Exdnb3RpZnkubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP&#xa;ADCCAgoCggIBAJKWJGSSAoVrS6NqFLLjikQard2jHkoMhwLwosukVIZ70U+dxLdM&#xa;k7PJb/DHLM1sj4Wf04jBBMF2tlD/A4/unLaX3No+bsznq6V6yYVA0QFWQZhKrhN3&#xa;hsHLRbyuibfan2XQNMCWPtmWEe76xTP+i2STKFoZmz4oSRilOExy5RzxwWDei4qn&#xa;4dtrLSp/vHvaDTERd8eY7ssmOM39HkzZbZpHP0kg0AaejBUTK7jcjTTVQat/09sR&#xa;TH41bajyXdqdQ5D8JWESKZTxtT579M8wGQOEfe68dnVRSH4XSw69MfuHpIXzhTl9&#xa;pZOx2091QqOwN80Aj4rfHz182qCdwXEmnTT8V+nnJ6Zl566Ch5Z/SJG6Kw1ozoPk&#xa;h68Nzmt1j60PxW4DYW1CH/Xg9TrV04gZreQ9/uMpPmwX4x9aqmKuiP4QttKwLN43&#xa;4F1p6D9/hBNHJvwnkTD7N+MxsnoRsOfGOLLIWaggEcwByEj2WctTbwWWBbnZNEgH&#xa;m2aI782aWDCIk3/eKy8Ikh/Lvy0YwdCSXj8x9XNrii7cl2uUTvbN7Vk8NiVapowx&#xa;PZ4O0mFPnOlZQ5NZTvRjSo19IQeNDYuzJIEgADHRTPqTvi+aLzs2oyeOuDWmfvyg&#xa;4GLXhxIzy6WQtVSFzAFp6g3ogJLIQ6poRiHTugWDDppj/sqMugBYwWMfAgMBAAGj&#xa;ggIlMIICITAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYD&#xa;VR0TAQH/BAIwADAdBgNVHQ4EFgQU6cGnXT7obSZnDAKEzKmtQ4U1CMgwHwYDVR0j&#xa;BBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMGCCsG&#xa;AQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAiBgNVHREEGzAZghdnb3Rp&#xa;ZnkubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAuBgNVHR8E&#xa;JzAlMCOgIaAfhh1odHRwOi8vcjEzLmMubGVuY3Iub3JnLzEwLmNybDCCAQwGCisG&#xa;AQQB1nkCBAIEgf0EgfoA+AB2AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5GpD8P&#xa;yqnGAAABnF2+CggAAAQDAEcwRQIgXZAcyFu2NrRhVSoEKvpPZdQVjeXWsj+RkmPL&#xa;v75RmQoCIQCHRZek8tNK2DlyM85HTCLV3UOI/N3PBC+FZKwNc8a9cgB+ABqLnWlK&#xa;V5jImaDKiL30j8C0VmDMw2ANH3H0af/H0ayjAAABnF2+CywACAAABQBH+lCyBAMA&#xa;RzBFAiAQHPX3dCEgtXOtKnunRRmiTCXrEXzZL+KHpU/4bnCEcQIhALLzF1xFYvJR&#xa;y8MDKPHd6SXSi01LFkil8UNBu1x++cLCMA0GCSqGSIb3DQEBCwUAA4IBAQBzxqbU&#xa;ANmKar7Hl1sDtpXXmYA7fqtT8QToH8hne93Edrhe4wa9aJzb/SJS5Jp9Dkuqb/WG&#xa;ES0HMFD1MSvO37cpCsuKebYrsz8RT86iYFTrlUqvHsgUA7YukdZy7zi6LEXIi7xN&#xa;7ywov+BUO30KakhcG95fLYTqudoWlEEpOtiiSzvyGaNcNIX8FKh+SUgxGFlPO3Ep&#xa;UQWefkONj9BkFwKu63UdmP3TXP4X8sDZXY7vA6qsoA1k2WOzDVGY3TFC3kArlkjD&#xa;Lc3uWbMBAgMe6LIg0A45uMNzHVq6Jz6Cqxbq4zWCpTJG86mS74VI+Z4Vr9d+BzQr&#xa;u7L76W6EfP8Aau/l&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;</elem>
</script><script id="http-traceroute" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/><script id="http-feed" output="Couldn&apos;t find any feeds."/><script id="http-date" output="Sun, 05 Apr 2026 07:51:56 GMT; -4s from local time."><elem key="date">2026-04-05T07:51:56+00:00</elem>
<elem key="delta">-4.0</elem>
</script><script id="http-methods" output="&#xa; Supported Methods: GET OPTIONS"><table key="Supported Methods">
<elem>GET</elem>
<elem>OPTIONS</elem>
</table>
</script><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-security-headers" output="&#xa; Strict_Transport_Security: &#xa; Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload&#xa; X_Frame_Options: &#xa; Header: X-Frame-Options: SAMEORIGIN&#xa; Description: The browser must not display this content in any frame from a page of different origin than the content itself.&#xa; X_XSS_Protection: &#xa; Header: X-XSS-Protection: 1; mode=block&#xa; Description: The browser will prevent the rendering of the page when XSS is detected.&#xa; X_Content_Type_Options: &#xa; Header: X-Content-Type-Options: nosniff&#xa; Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
</table>
<table key="X_Frame_Options">
<elem>Header: X-Frame-Options: SAMEORIGIN</elem>
<elem>Description: The browser must not display this content in any frame from a page of different origin than the content itself.</elem>
</table>
<table key="X_XSS_Protection">
<elem>Header: X-XSS-Protection: 1; mode=block</elem>
<elem>Description: The browser will prevent the rendering of the page when XSS is detected.</elem>
</table>
<table key="X_Content_Type_Options">
<elem>Header: X-Content-Type-Options: nosniff</elem>
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
</table>
</script><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-title" output="Gotify"><elem key="title">Gotify</elem>
</script><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; /&#xa; Other: 1; json: 1&#xa; /static/&#xa; css: 1; js: 1&#xa; Longest directory structure:&#xa; Depth: 1&#xa; Dir: /static/&#xa; Total files found (by extension):&#xa; Other: 1; css: 1; js: 1; json: 1&#xa;"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-errors" output="Couldn&apos;t find any error pages."/><script id="http-headers" output="&#xa; Content-Type: text/html&#xa; Date: Sun, 05 Apr 2026 07:52:19 GMT&#xa; Strict-Transport-Security: max-age=15552000; includeSubDomains; preload&#xa; Vary: Accept-Encoding&#xa; X-Content-Type-Options: nosniff&#xa; X-Frame-Options: SAMEORIGIN&#xa; X-Xss-Protection: 1; mode=block&#xa; Connection: close&#xa; Transfer-Encoding: chunked&#xa; &#xa; (Request type: GET)&#xa;"/><script id="http-vhosts" output="&#xa;auth.lan.ddnsgeek.com : 200&#xa;127 names had status 404"/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-php-version" output="Logo query returned unknown hash 622a589591324462d669df924802d29b&#xa;Credits query returned unknown hash 622a589591324462d669df924802d29b"/><script id="http-chrono" output="Request times for /; avg: 7828.27ms; min: 3421.52ms; max: 23506.11ms"/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args search-limit=&lt;number|all&gt; for deeper analysis)"/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="ssl-enum-ciphers" output="&#xa; TLSv1.2: &#xa; ciphers: &#xa; TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A&#xa; compressors: &#xa; NULL&#xa; cipher preference: client&#xa; warnings: &#xa; Key exchange (secp256r1) of lower strength than certificate key&#xa; TLSv1.3: &#xa; ciphers: &#xa; TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A&#xa; cipher preference: server&#xa; least strength: A"><table key="TLSv1.2">
</script><script id="http-title" output="Site doesn&apos;t have a title (text/plain; charset=utf-8)."></script><script id="ssl-enum-ciphers" output="&#xa; TLSv1.2: &#xa; ciphers: &#xa; TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A&#xa; compressors: &#xa; NULL&#xa; cipher preference: client&#xa; warnings: &#xa; Key exchange (secp256r1) of lower strength than certificate key&#xa; TLSv1.3: &#xa; ciphers: &#xa; TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A&#xa; cipher preference: server&#xa; least strength: A"><table key="TLSv1.2">
<table key="ciphers">
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
<elem key="strength">A</elem>
<elem key="kex_info">secp256r1</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</elem>
<elem key="strength">A</elem>
<elem key="kex_info">secp256r1</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</elem>
<elem key="strength">A</elem>
<elem key="kex_info">secp256r1</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</elem>
<elem key="strength">A</elem>
<elem key="kex_info">secp256r1</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256</elem>
<elem key="strength">A</elem>
<elem key="kex_info">secp256r1</elem>
</table>
</table>
<table key="compressors">
@@ -179,25 +151,28 @@
<table key="TLSv1.3">
<table key="ciphers">
<table>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_AKE_WITH_AES_128_GCM_SHA256</elem>
<elem key="strength">A</elem>
<elem key="kex_info">X25519MLKEM768</elem>
</table>
<table>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_AKE_WITH_AES_256_GCM_SHA384</elem>
<elem key="strength">A</elem>
<elem key="kex_info">X25519MLKEM768</elem>
</table>
<table>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_AKE_WITH_CHACHA20_POLY1305_SHA256</elem>
<elem key="strength">A</elem>
<elem key="kex_info">X25519MLKEM768</elem>
</table>
</table>
<elem key="cipher preference">server</elem>
</table>
<elem key="least strength">A</elem>
</script><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="http-enum" output="&#xa; /manifest.json: Manifest JSON File&#xa;"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-comments-displayer" output="Couldn&apos;t find any comments."/><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-useragent-tester" output="&#xa; Status for browser useragent: 200&#xa; Allowed User Agents: &#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)&#xa; libwww&#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; PHP/&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-vhosts" output="&#xa;128 names had status 404"/><script id="http-date" output="Tue, 14 Apr 2026 03:28:15 GMT; 0s from local time."><elem key="date">2026-04-14T03:28:15+00:00</elem>
<elem key="delta">0.0</elem>
</script><script id="http-errors" output="&#xa;Spidering limited to: maxpagecount=40; withinhost=gotify.lan.ddnsgeek.com&#xa; Found the following error pages: &#xa; &#xa; Error Code: 404&#xa; &#x9;http://gotify.lan.ddnsgeek.com:443/&#xa;"/><script id="http-useragent-tester" output="&#xa; Status for browser useragent: 404&#xa; Allowed User Agents: &#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)&#xa; libwww&#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; PHP/&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34"><elem key="Status for browser useragent">404</elem>
<table key="Allowed User Agents">
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
<elem>libwww</elem>
@@ -217,16 +192,16 @@
<elem>Wget/1.13.4 (linux-gnu)</elem>
<elem>WWW-Mechanize/1.34</elem>
</table>
</script><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/></port>
</script><script id="http-feed" output="Couldn&apos;t find any feeds."/><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="http-comments-displayer" output="Couldn&apos;t find any comments."/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-headers" output="&#xa; Content-Type: text/plain; charset=utf-8&#xa; X-Content-Type-Options: nosniff&#xa; Date: Tue, 14 Apr 2026 03:28:30 GMT&#xa; Content-Length: 19&#xa; Connection: close&#xa; &#xa; (Request type: GET)&#xa;"/><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; Longest directory structure:&#xa; Depth: 0&#xa; Dir: /&#xa; Total files found (by extension):&#xa; &#xa;"/><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-chrono" output="Request times for /; avg: 793.49ms; min: 415.71ms; max: 1062.27ms"/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/></port>
</ports>
<times srtt="14826" rttvar="14826" to="100000"/>
<times srtt="15099" rttvar="15099" to="100000"/>
</host>
<taskbegin task="NSE" time="1775376043"/>
<taskend task="NSE" time="1775376043"/>
<taskbegin task="NSE" time="1775376043"/>
<taskend task="NSE" time="1775376043"/>
<taskbegin task="NSE" time="1775376043"/>
<taskend task="NSE" time="1775376043"/>
<runstats><finished time="1775376043" timestr="Sun Apr 5 08:00:43 2026" summary="Nmap done at Sun Apr 5 08:00:43 2026; 1 IP address (1 host up) scanned in 597.62 seconds" elapsed="597.62" exit="success"/><hosts up="1" down="0" total="1"/>
<taskbegin task="NSE" time="1776137463"/>
<taskend task="NSE" time="1776137463"/>
<taskbegin task="NSE" time="1776137463"/>
<taskend task="NSE" time="1776137463"/>
<taskbegin task="NSE" time="1776137463"/>
<taskend task="NSE" time="1776137463"/>
<runstats><finished time="1776137463" timestr="Tue Apr 14 03:31:03 2026" summary="Nmap done at Tue Apr 14 03:31:03 2026; 1 IP address (1 host up) scanned in 207.02 seconds" elapsed="207.02" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>