fresh autorecon run

This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899

No files matched your search

@@ -1,70 +1,157 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:39:34 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com" start="1775378374" startstr="Sun Apr 5 08:39:34 2026" version="7.98" xmloutputversion="1.05">
<!-- Nmap 7.99 scan initiated Tue Apr 14 04:00:39 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com" start="1776139239" startstr="Tue Apr 14 04:00:39 2026" version="7.99" xmloutputversion="1.05">
<scaninfo type="syn" protocol="tcp" numservices="1" services="443"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1775378384"/>
<taskend task="NSE" time="1775378384"/>
<taskbegin task="NSE" time="1775378384"/>
<taskend task="NSE" time="1775378384"/>
<taskbegin task="NSE" time="1775378384"/>
<taskend task="NSE" time="1775378384"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775378384"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775378384"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775378384"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775378384"/>
<taskbegin task="SYN Stealth Scan" time="1775378384"/>
<taskend task="SYN Stealth Scan" time="1775378384" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1775378387"/>
<taskend task="Service scan" time="1775378463" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1775378463"/>
<taskprogress task="NSE" time="1775378611" percent="47.24" remaining="166" etc="1775378776"/>
<taskprogress task="NSE" time="1775378647" percent="83.16" remaining="38" etc="1775378684"/>
<taskprogress task="NSE" time="1775378705" percent="82.89" remaining="50" etc="1775378755"/>
<taskprogress task="NSE" time="1775378735" percent="82.89" remaining="57" etc="1775378791"/>
<taskprogress task="NSE" time="1775378774" percent="83.22" remaining="63" etc="1775378837"/>
<taskprogress task="NSE" time="1775378804" percent="83.61" remaining="67" etc="1775378871"/>
<taskprogress task="NSE" time="1775378870" percent="86.64" remaining="63" etc="1775378933"/>
<taskprogress task="NSE" time="1775378999" percent="86.97" remaining="81" etc="1775379079"/>
<taskprogress task="NSE" time="1775379186" percent="86.97" remaining="109" etc="1775379294"/>
<taskprogress task="NSE" time="1775379309" percent="86.97" remaining="127" etc="1775379436"/>
<taskprogress task="NSE" time="1775379373" percent="86.97" remaining="137" etc="1775379509"/>
<taskprogress task="NSE" time="1775379429" percent="86.97" remaining="145" etc="1775379574"/>
<taskprogress task="NSE" time="1775379478" percent="87.30" remaining="148" etc="1775379626"/>
<taskprogress task="NSE" time="1775379520" percent="87.62" remaining="150" etc="1775379669"/>
<taskprogress task="NSE" time="1775379566" percent="87.62" remaining="156" etc="1775379722"/>
<taskprogress task="NSE" time="1775379614" percent="87.66" remaining="162" etc="1775379776"/>
<taskprogress task="NSE" time="1775379654" percent="87.66" remaining="168" etc="1775379822"/>
<taskprogress task="NSE" time="1775379694" percent="87.66" remaining="174" etc="1775379867"/>
<taskprogress task="NSE" time="1775379730" percent="87.99" remaining="173" etc="1775379903"/>
<taskprogress task="NSE" time="1775379765" percent="88.96" remaining="162" etc="1775379927"/>
<taskprogress task="NSE" time="1775379801" percent="90.26" remaining="145" etc="1775379945"/>
<taskprogress task="NSE" time="1775379832" percent="92.21" remaining="116" etc="1775379948"/>
<taskprogress task="NSE" time="1775379879" percent="96.44" remaining="53" etc="1775379931"/>
<taskprogress task="NSE" time="1775379927" percent="98.39" remaining="24" etc="1775379951"/>
<taskend task="NSE" time="1775379951"/>
<taskbegin task="NSE" time="1775379951"/>
<taskend task="NSE" time="1775379958"/>
<taskbegin task="NSE" time="1775379958"/>
<taskend task="NSE" time="1775379958"/>
<host starttime="1775378384" endtime="1775379958"><status state="up" reason="user-set" reason_ttl="0"/>
<taskbegin task="NSE" time="1776139246"/>
<taskend task="NSE" time="1776139246"/>
<taskbegin task="NSE" time="1776139246"/>
<taskend task="NSE" time="1776139246"/>
<taskbegin task="NSE" time="1776139246"/>
<taskend task="NSE" time="1776139247"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776139247"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776139247"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776139247"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776139247"/>
<taskbegin task="SYN Stealth Scan" time="1776139247"/>
<taskend task="SYN Stealth Scan" time="1776139248" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1776139251"/>
<taskend task="Service scan" time="1776139264" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1776139264"/>
<taskprogress task="NSE" time="1776139295" percent="84.36" remaining="6" etc="1776139301"/>
<taskprogress task="NSE" time="1776139347" percent="87.66" remaining="12" etc="1776139359"/>
<taskprogress task="NSE" time="1776139378" percent="87.66" remaining="17" etc="1776139394"/>
<taskprogress task="NSE" time="1776139414" percent="88.31" remaining="20" etc="1776139434"/>
<taskprogress task="NSE" time="1776139454" percent="88.96" remaining="24" etc="1776139478"/>
<taskprogress task="NSE" time="1776139488" percent="88.96" remaining="28" etc="1776139516"/>
<taskprogress task="NSE" time="1776139530" percent="88.96" remaining="34" etc="1776139563"/>
<taskprogress task="NSE" time="1776139560" percent="98.39" remaining="5" etc="1776139565"/>
<taskprogress task="NSE" time="1776139590" percent="99.68" remaining="2" etc="1776139591"/>
<taskend task="NSE" time="1776139595"/>
<taskbegin task="NSE" time="1776139595"/>
<taskend task="NSE" time="1776139599"/>
<taskbegin task="NSE" time="1776139599"/>
<taskend task="NSE" time="1776139600"/>
<host starttime="1776139247" endtime="1776139600"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="167.179.167.166" addrtype="ipv4"/>
<hostnames>
<hostname name="passbolt.lan.ddnsgeek.com" type="user"/>
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
</hostnames>
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-feed" output="Couldn&apos;t find any feeds."/><script id="http-comments-displayer" output="&#xa;Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=passbolt.lan.ddnsgeek.com&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/&#xa; Line number: 49&#xa; Comment: &#xa; &lt;!-&#45; main -&#45;&gt;&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-vendors.js?v=5.10.0&#xa; Line number: 1&#xa; Comment: &#xa; /*! For license information please see api-vendors.js.LICENSE.txt */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/&#xa; Line number: 6&#xa; Comment: &#xa; &lt;!-&#45;&#xa; &#xa; ____ __ ____&#xa; / __ \____ _____ ____/ /_ ____ / / /_&#xa; / /_/ / __ `/ ___/ ___/ __ \/ __ \/ / __/&#xa; / ____/ /_/ (__ )__ ) /_/ / /_/ / / /_&#xa; /_/ \__,_/____/____/_.___/\____/_/\__/&#xa; &#xa; Open source password manager for teams&#xa; Copyright (c) Passbolt SA (https://www.passbolt.com)&#xa; &#xa; &#xa; This program is free software: you can redistribute it and/or modify&#xa; it under the terms of the GNU Affero General Public License as&#xa; published by the Free Software Foundation, either version 3 of the&#xa; License, or (at your option) any later version.&#xa; &#xa; This program is distributed in the hope that it will be useful,&#xa; but WITHOUT ANY WARRANTY; without even the implied warranty of&#xa; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the&#xa; GNU Affero General Public License for more details.&#xa; &#xa; You should have received a copy of the GNU Affero General Public License&#xa; along with this program. If not, see http://www.gnu.org/licenses/.&#xa; &#xa; &#xa; -&#45;&gt;&#xa;"/><script id="http-headers" output="&#xa; Access-Control-Expose-Headers: X-GPGAuth-Verify-Response&#xa; Access-Control-Expose-Headers: X-GPGAuth-Progress&#xa; Access-Control-Expose-Headers: X-GPGAuth-User-Auth-Token&#xa; Access-Control-Expose-Headers: X-GPGAuth-Authenticated&#xa; Access-Control-Expose-Headers: X-GPGAuth-Refer&#xa; Access-Control-Expose-Headers: X-GPGAuth-Debug&#xa; Access-Control-Expose-Headers: X-GPGAuth-Error&#xa; Access-Control-Expose-Headers: X-GPGAuth-Pubkey&#xa; Access-Control-Expose-Headers: X-GPGAuth-Logout-Url&#xa; Access-Control-Expose-Headers: X-GPGAuth-Version&#xa; Cache-Control: no-store, no-cache, must-revalidate&#xa; Content-Security-Policy: default-src &apos;none&apos;; script-src &apos;self&apos;; style-src &apos;self&apos;; img-src &apos;self&apos;; font-src &apos;self&apos;; connect-src &apos;self&apos;; base-uri &apos;self&apos;; frame-src &apos;self&apos;; frame-ancestors &apos;none&apos;; form-action &apos;self&apos; https://*.duosecurity.com&#xa; Content-Type: text/html; charset=UTF-8&#xa; Date: Sun, 05 Apr 2026 08:43:47 GMT&#xa; Expires: Thu, 19 Nov 1981 08:52:00 GMT&#xa; Pragma: no-cache&#xa; Referrer-Policy: same-origin&#xa; Server: nginx&#xa; Set-Cookie: passbolt_session=0ef149b13c99d135c6c2a67b1a000b76; path=/; HttpOnly; SameSite=Lax&#xa; Set-Cookie: csrfToken=16d25e047084290e11d152a80a4d75f310aab333c9ce6f08261c78346adff7db300d53d7b6cd56f23b17dff875111a4d0f30c368a11fb6aed06ede845284953e; path=/&#xa; Strict-Transport-Security: max-age=15552000; includeSubDomains; preload&#xa; X-Content-Type-Options: nosniff&#xa; X-Download-Options: noopen&#xa; X-Frame-Options: SAMEORIGIN&#xa; X-Gpgauth-Authenticated: false&#xa; X-Gpgauth-Debug: There is no user associated with this key. No key id set.&#xa; X-Gpgauth-Error: true&#xa; X-Gpgauth-Login-Url: /auth/login&#xa; X-Gpgauth-Logout-Url: /auth/logout&#xa; X-Gpgauth-Progress: stage0&#xa; X-Gpgauth-Pubkey-Url: /auth/verify.json&#xa; X-Gpgauth-Verify-Url: /auth/verify&#xa; X-Gpgauth-Version: 1.3.0&#xa; X-Permitted-Cross-Domain-Policies: all&#xa; X-Xss-Protection: 1; mode=block&#xa; Connection: close&#xa; Transfer-Encoding: chunked&#xa; &#xa; (Request type: GET)&#xa;"/><script id="http-date" output="Sun, 05 Apr 2026 08:43:47 GMT; -2m53s from local time."><elem key="date">2026-04-05T08:43:47+00:00</elem>
<elem key="delta">-173.0</elem>
</script><script id="http-vhosts" output="&#xa;auth.lan.ddnsgeek.com : 200&#xa;127 names had status 404"/><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="http-title" output="Passbolt | Open source password manager for teams&#xa;Requested resource was /auth/login?redirect=%2F"><elem key="title">Passbolt | Open source password manager for teams</elem>
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-comments-displayer" output="&#xa;Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=passbolt.lan.ddnsgeek.com&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/&#xa; Line number: 49&#xa; Comment: &#xa; &lt;!-&#45; main -&#45;&gt;&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0&#xa; Line number: 29&#xa; Comment: &#xa; /**&#xa; * Initialise to get the theme from stylesheet or OS preference&#xa; */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0&#xa; Line number: 22&#xa; Comment: &#xa; /**&#xa; * Bind callbacks&#xa; */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0&#xa; Line number: 79&#xa; Comment: &#xa; /**&#xa; * Is theme defined&#xa; * @returns {boolean}&#xa; */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/&#xa; Line number: 6&#xa; Comment: &#xa; &lt;!-&#45;&#xa; &#xa; ____ __ ____&#xa; / __ \____ _____ ____/ /_ ____ / / /_&#xa; / /_/ / __ `/ ___/ ___/ __ \/ __ \/ / __/&#xa; / ____/ /_/ (__ )__ ) /_/ / /_/ / / /_&#xa; /_/ \__,_/____/____/_.___/\____/_/\__/&#xa; &#xa; Open source password manager for teams&#xa; Copyright (c) Passbolt SA (https://www.passbolt.com)&#xa; &#xa; &#xa; This program is free software: you can redistribute it and/or modify&#xa; it under the terms of the GNU Affero General Public License as&#xa; published by the Free Software Foundation, either version 3 of the&#xa; License, or (at your option) any later version.&#xa; &#xa; This program is distributed in the hope that it will be useful,&#xa; but WITHOUT ANY WARRANTY; without even the implied warranty of&#xa; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the&#xa; GNU Affero General Public License for more details.&#xa; &#xa; You should have received a copy of the GNU Affero General Public License&#xa; along with this program. If not, see http://www.gnu.org/licenses/.&#xa; &#xa; &#xa; -&#45;&gt;&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0&#xa; Line number: 1&#xa; Comment: &#xa; /**&#xa; * Passbolt ~ Open source password manager for teams&#xa; * Copyright (c) Passbolt SARL (https://www.passbolt.com)&#xa; *&#xa; * Licensed under GNU Affero General Public License version 3 of the or any later version.&#xa; * For full copyright and license information, please see the LICENSE.txt&#xa; * Redistributions of files must retain the above copyright notice.&#xa; *&#xa; * @copyright Copyright (c) Passbolt SA (https://www.passbolt.com)&#xa; * @license https://opensource.org/licenses/AGPL-3.0 AGPL License&#xa; * @link https://www.passbolt.com Passbolt(tm)&#xa; * @since 3.3.2&#xa; */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0&#xa; Line number: 59&#xa; Comment: &#xa; /**&#xa; * Get link tag&#xa; * @returns {Element}&#xa; */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-vendors.js?v=5.11.0&#xa; Line number: 1&#xa; Comment: &#xa; /*! For license information please see api-vendors.js.LICENSE.txt */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0&#xa; Line number: 87&#xa; Comment: &#xa; /**&#xa; * Set theme according to the OS preference&#xa; * @param mediaQueryPreferColor&#xa; */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0&#xa; Line number: 1&#xa; Comment: &#xa; /*! For license information please see api-triage.js.LICENSE.txt */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0&#xa; Line number: 44&#xa; Comment: &#xa; /**&#xa; * Update link reference with the theme&#xa; */&#xa;"/><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="http-title" output="Passbolt | Open source password manager for teams&#xa;Requested resource was /auth/login?redirect=%2F"><elem key="tiLine truncated
<elem key="redirect_url">/auth/login?redirect=%2F</elem>
</script><script id="http-chrono" output="Request times for /; avg: 37139.25ms; min: 2126.65ms; max: 69794.57ms"/><script id="ssl-cert" output="Subject: commonName=passbolt.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com&#xa;Issuer: commonName=R13/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-02-05T19:02:28&#xa;Not valid after: 2026-05-06T19:02:27&#xa;MD5: 0e7e 0f70 3cfe 4113 d4cb a00c 81d7 90e2&#xa;SHA-1: abe4 cbbc cca9 683b 7709 ed8f 3017 51ea 87bb 4e71&#xa;SHA-256: 6ad2 06b2 08de d20b 2ad4 d8d0 017e ce21 e103 c2b5 79ad 2c94 5515 ee6c be27 b06c&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD&#xa;ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC&#xa;Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3&#xa;WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ&#xa;+nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs&#xa;BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P&#xa;YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE&#xa;eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE&#xa;d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R&#xa;ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS&#xa;6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw&#xa;TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6&#xa;6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA&#xa;AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI&#xa;KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby&#xa;BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH&#xa;AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV&#xa;HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG&#xa;Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv&#xa;MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr&#xa;TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ&#xa;cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk&#xa;bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA&#xa;AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN&#xa;8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB&#xa;AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR&#xa;lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3&#xa;6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL&#xa;4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP&#xa;vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq&#xa;Kpvre+eLUhbfX0oMhv69Ijo=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
</script><script id="ssl-enum-ciphers" output="&#xa; TLSv1.2: &#xa; ciphers: &#xa; TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A&#xa; compressors: &#xa; NULL&#xa; cipher preference: client&#xa; warnings: &#xa; Key exchange (secp256r1) of lower strength than certificate key&#xa; TLSv1.3: &#xa; ciphers: &#xa; TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A&#xa; cipher preference: server&#xa; least strength: A"><table key="TLSv1.2">
<table key="ciphers">
<table>
<elem key="strength">A</elem>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
</table>
<table>
<elem key="strength">A</elem>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</elem>
</table>
<table>
<elem key="strength">A</elem>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</elem>
</table>
<table>
<elem key="strength">A</elem>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</elem>
</table>
<table>
<elem key="strength">A</elem>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256</elem>
</table>
</table>
<table key="compressors">
<elem>NULL</elem>
</table>
<elem key="cipher preference">client</elem>
<table key="warnings">
<elem>Key exchange (secp256r1) of lower strength than certificate key</elem>
</table>
</table>
<table key="TLSv1.3">
<table key="ciphers">
<table>
<elem key="strength">A</elem>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="name">TLS_AKE_WITH_AES_128_GCM_SHA256</elem>
</table>
<table>
<elem key="strength">A</elem>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="name">TLS_AKE_WITH_AES_256_GCM_SHA384</elem>
</table>
<table>
<elem key="strength">A</elem>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="name">TLS_AKE_WITH_CHACHA20_POLY1305_SHA256</elem>
</table>
</table>
<elem key="cipher preference">server</elem>
</table>
<elem key="least strength">A</elem>
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-waf-detect" output="IDS/IPS/WAF detected:&#xa;passbolt.lan.ddnsgeek.com:443/?p4yl04d3=&lt;script&gt;alert(document.cookie)&lt;/script&gt;"/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/><script id="http-errors" output="&#xa;Spidering limited to: maxpagecount=40; withinhost=passbolt.lan.ddnsgeek.com&#xa; Found the following error pages: &#xa; &#xa; Error Code: 404&#xa; &#x9;https://passbolt.lan.ddnsgeek.com:443/js/app/s.src1%7D%7Dbreak;case&#xa; &#xa; Error Code: 404&#xa; &#x9;https://passbolt.lan.ddnsgeek.com:443/js/app/e1110;var&#xa; &#xa; Error Code: 404&#xa; &#x9;https://passbolt.lan.ddnsgeek.com:443/js/app/e1setTimeout1function11%7Bdocument.body.removeChild1u1%7D13331%7Dif1r1s&#xa;"/><script id="http-security-headers" output="&#xa; Strict_Transport_Security: &#xa; Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload&#xa; X_Frame_Options: &#xa; Header: X-Frame-Options: SAMEORIGIN&#xa; Description: The browser must not display this content in any frame from a page of different origin than the content itself.&#xa; X_XSS_Protection: &#xa; Header: X-XSS-Protection: 1; mode=block&#xa; Description: The browser will prevent the rendering of the page when XSS is detected.&#xa; X_Content_Type_Options: &#xa; Header: X-Content-Type-Options: nosniff&#xa; Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
</table>
<table key="X_Frame_Options">
<elem>Header: X-Frame-Options: SAMEORIGIN</elem>
<elem>Description: The browser must not display this content in any frame from a page of different origin than the content itself.</elem>
</table>
<table key="X_XSS_Protection">
<elem>Header: X-XSS-Protection: 1; mode=block</elem>
<elem>Description: The browser will prevent the rendering of the page when XSS is detected.</elem>
</table>
<table key="X_Content_Type_Options">
<elem>Header: X-Content-Type-Options: nosniff</elem>
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
</table>
</script><script id="http-unsafe-output-escaping" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-chrono" output="Request times for /; avg: 29564.94ms; min: 2054.83ms; max: 131706.91ms"/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/><script id="http-date" output="Tue, 14 Apr 2026 04:01:12 GMT; -19s from local time."><elem key="date">2026-04-14T04:01:12+00:00</elem>
<elem key="delta">-19.0</elem>
</script><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-useragent-tester" output="&#xa; Status for browser useragent: 200&#xa; Redirected To: /auth/login?redirect=%2F&#xa; Allowed User Agents: &#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)&#xa; libwww&#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; PHP/&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
<elem key="Redirected To">/auth/login?redirect=%2F</elem>
<table key="Allowed User Agents">
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
<elem>libwww</elem>
<elem>lwp-trivial</elem>
<elem>libcurl-agent/1.0</elem>
<elem>PHP/</elem>
<elem>Python-urllib/2.5</elem>
<elem>GT::WWW</elem>
<elem>Snoopy</elem>
<elem>MFC_Tear_Sample</elem>
<elem>HTTP::Lite</elem>
<elem>PHPCrawl</elem>
<elem>URI::Fetch</elem>
<elem>Zend_Http_Client</elem>
<elem>http client</elem>
<elem>PECL::HTTP</elem>
<elem>Wget/1.13.4 (linux-gnu)</elem>
<elem>WWW-Mechanize/1.34</elem>
</table>
</script><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args search-limit=&lt;number|all&gt; for deeper analysis)"/><script id="http-vhosts" output="&#xa;auth.lan.ddnsgeek.com : 200&#xa;127 names had status 404"/><script id="http-php-version" output="Logo query returned unknown hash 3282c083dbb29b35410366062b9400a1&#xa;Credits query returned unknown hash 3282c083dbb29b35410366062b9400a1"/><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-grep" output="&#xa; (2) https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0: &#xa; (1) ip: &#xa; + 1.122.28.223&#xa; (1) email: &#xa; + you@organization.com"><table key="(2) https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0">
<table key="(1) ip">
<elem>+ 1.122.28.223</elem>
</table>
<table key="(1) email">
<elem>+ you@organization.com</elem>
</table>
</table>
</script><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; /&#xa; Other: 1; ico: 1; png: 6; svg: 1&#xa; /js/app/&#xa; js: 3&#xa; Longest directory structure:&#xa; Depth: 2&#xa; Dir: /js/app/&#xa; Total files found (by extension):&#xa; Other: 1; ico: 1; js: 3; png: 6; svg: 1&#xa;"/><script id="http-rfi-spider" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-traceroute" output="&#xa; Status Code&#xa; Hop #1: 404&#xa; Hop #2: 302&#xa; Hop #3: 302&#xa; server&#xa; Hop #1&#xa; Hop #2: nginx&#xa; Hop #3: nginx&#xa; content-type&#xa; Hop #1: text/plain; charset=utf-8&#xa; Hop #2: text/html; charset=UTF-8&#xa; Hop #3: text/html; charset=UTF-8&#xa; content-length&#xa; Hop #1: 19&#xa; Hop #2&#xa; Hop #3&#xa; location&#xa; Hop #1&#xa; Hop #2: /auth/login?redirect=%2F&#xa; Hop #3: /auth/login?redirect=%2F&#xa;"/><script id="http-favicon" output="Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4"/><script id="ssl-cert" output="Subject: commonName=passbolt.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com&#xa;Issuer: commonName=R12/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-04-07T00:44:25&#xa;Not valid after: 2026-07-06T00:44:24&#xa;MD5: 4671 74a5 8d20 2b20 8b59 f04d c923 3712&#xa;SHA-1: 8af1 359b 3029 2145 4094 9080 6492 2508 7a44 5dd7&#xa;SHA-256: f980 4a63 1ada cd62 ceaf 5760 f7e0 826e e9e1 74db 65cd c69c 2b5c 474b 36ac 19e3&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD&#xa;ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC&#xa;Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3&#xa;WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ&#xa;+nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs&#xa;BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P&#xa;YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE&#xa;eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE&#xa;d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R&#xa;ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS&#xa;6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw&#xa;TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6&#xa;6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA&#xa;AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM&#xa;BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV&#xa;HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI&#xa;KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh&#xa;c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD&#xa;VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN&#xa;BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR&#xa;c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE&#xa;Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a&#xa;9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9&#xa;AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj&#xa;IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB&#xa;ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v&#xa;+3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF&#xa;MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc&#xa;k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj&#xa;MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw&#xa;YrarkoA+irmSeogYZBI+qKg=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
<elem key="commonName">passbolt.lan.ddnsgeek.com</elem>
</table>
<table key="issuer">
<elem key="commonName">R13</elem>
<elem key="commonName">R12</elem>
<elem key="countryName">US</elem>
<elem key="organizationName">Let&apos;s Encrypt</elem>
</table>
@@ -82,7 +169,7 @@
</table>
<table>
<elem key="name">X509v3 Extended Key Usage</elem>
<elem key="value">TLS Web Server Authentication, TLS Web Client Authentication</elem>
<elem key="value">TLS Web Server Authentication</elem>
</table>
<table>
<elem key="name">X509v3 Basic Constraints</elem>
@@ -95,11 +182,11 @@
</table>
<table>
<elem key="name">X509v3 Authority Key Identifier</elem>
<elem key="value">E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33</elem>
<elem key="value">00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2</elem>
</table>
<table>
<elem key="name">Authority Information Access</elem>
<elem key="value">CA Issuers - URI:http://r13.i.lencr.org/</elem>
<elem key="value">CA Issuers - URI:http://r12.i.lencr.org/</elem>
</table>
<table>
<elem key="name">X509v3 Subject Alternative Name</elem>
@@ -111,134 +198,38 @@
</table>
<table>
<elem key="name">X509v3 CRL Distribution Points</elem>
<elem key="value">Full Name:&#xa; URI:http://r13.c.lencr.org/1.crl&#xa;</elem>
<elem key="value">Full Name:&#xa; URI:http://r12.c.lencr.org/23.crl&#xa;</elem>
</table>
<table>
<elem key="name">CT Precertificate SCTs</elem>
<elem key="value">Signed Certificate Timestamp:&#xa; Version : v1 (0x0)&#xa; Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:&#xa; 4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0&#xa; Timestamp : Feb 5 20:00:59.205 2026 GMT&#xa; Extensions: none&#xa; Signature : ecdsa-with-SHA256&#xa; 30:44:02:20:7D:4A:2A:04:73:A4:57:CC:14:E3:F6:12:&#xa; 9B:09:70:35:4E:A4:47:19:B4:30:45:05:E3:2C:D0:D4:&#xa; 96:3C:97:74:02:20:54:86:03:4E:88:A3:E5:89:85:05:&#xa; 49:EC:49:96:06:A4:DB:34:9F:A2:56:20:EA:60:89:76:&#xa; 30:A4:6C:CB:EF:9E&#xa;Signed Certificate Timestamp:&#xa; Version : v1 (0x0)&#xa; Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:&#xa; DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21&#xa; Timestamp : Feb 5 20:00:59.234 2026 GMT&#xa; Extensions: none&#xa; Signature : ecdsa-with-SHA256&#xa; 30:46:02:21:00:BD:05:6D:6E:6E:1C:49:29:7E:FC:6E:&#xa; 0A:94:8C:0F:C8:07:65:9C:78:D0:76:54:FB:4A:33:36:&#xa; 04:5B:CE:70:A9:02:21:00:BB:FC:8D:F0:DC:44:58:04:&#xa; DC:27:34:65:6B:EB:19:58:A4:86:49:92:C4:18:10:3F:&#xa; 17:F5:11:6E:F6:48:D5:30</elem>
<elem key="value">Signed Certificate Timestamp:&#xa; Version : v1 (0x0)&#xa; Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9:&#xa; 1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A&#xa; Timestamp : Apr 7 01:42:56.151 2026 GMT&#xa; Extensions: 00:00:05:00:06:1E:AA:29&#xa; Signature : ecdsa-with-SHA256&#xa; 30:46:02:21:00:A3:FA:62:22:80:72:B4:59:3F:0E:FD:&#xa; 72:3A:C4:4D:BD:75:5E:88:B2:9F:4F:A5:5D:4D:65:72:&#xa; C4:36:EF:BF:7A:02:21:00:AF:F6:6A:B2:B4:F6:32:17:&#xa; B2:9D:79:C3:81:8C:EC:F3:CC:3D:19:02:26:6E:D0:24:&#xa; D5:DF:5A:F4:2E:62:45:E7&#xa;Signed Certificate Timestamp:&#xa; Version : v1 (0x0)&#xa; Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:&#xa; 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77&#xa; Timestamp : Apr 7 01:42:56.125 2026 GMT&#xa; Extensions: none&#xa; Signature : ecdsa-with-SHA256&#xa; 30:45:02:21:00:89:0A:F2:8D:79:32:DF:9D:99:69:5B:&#xa; 62:C9:1F:D8:E8:57:FF:F7:65:59:A1:DB:4E:2A:F3:7D:&#xa; C1:4F:A8:77:04:02:20:15:13:23:21:54:DC:8B:31:27:&#xa; 9D:E2:42:B9:5D:76:0F:A9:4C:57:2B:68:CC:6D:F4:32:&#xa; AF:67:40:BF:8B:68:99</elem>
</table>
</table>
<elem key="sig_algo">sha256WithRSAEncryption</elem>
<table key="validity">
<elem key="notBefore">2026-02-05T19:02:28</elem>
<elem key="notAfter">2026-05-06T19:02:27</elem>
<elem key="notBefore">2026-04-07T00:44:25</elem>
<elem key="notAfter">2026-07-06T00:44:24</elem>
</table>
<elem key="md5">0e7e0f703cfe4113d4cba00c81d790e2</elem>
<elem key="sha1">abe4cbbccca9683b7709ed8f301751ea87bb4e71</elem>
<elem key="sha256">6ad206b208ded20b2ad4d8d0017ece21e103c2b579ad2c945515ee6cbe27b06c</elem>
<elem key="pem">-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD&#xa;ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC&#xa;Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3&#xa;WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ&#xa;+nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs&#xa;BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P&#xa;YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE&#xa;eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE&#xa;d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R&#xa;ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS&#xa;6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw&#xa;TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6&#xa;6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA&#xa;AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI&#xa;KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby&#xa;BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH&#xa;AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV&#xa;HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG&#xa;Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv&#xa;MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr&#xa;TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ&#xa;cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk&#xa;bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA&#xa;AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN&#xa;8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB&#xa;AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR&#xa;lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3&#xa;6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL&#xa;4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP&#xa;vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq&#xa;Kpvre+eLUhbfX0oMhv69Ijo=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;</elem>
</script><script id="http-security-headers" output="&#xa; Strict_Transport_Security: &#xa; Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload&#xa; X_Frame_Options: &#xa; Header: X-Frame-Options: SAMEORIGIN&#xa; Description: The browser must not display this content in any frame from a page of different origin than the content itself.&#xa; X_XSS_Protection: &#xa; Header: X-XSS-Protection: 1; mode=block&#xa; Description: The browser will prevent the rendering of the page when XSS is detected.&#xa; X_Content_Type_Options: &#xa; Header: X-Content-Type-Options: nosniff&#xa; Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
</table>
<table key="X_Frame_Options">
<elem>Header: X-Frame-Options: SAMEORIGIN</elem>
<elem>Description: The browser must not display this content in any frame from a page of different origin than the content itself.</elem>
</table>
<table key="X_XSS_Protection">
<elem>Header: X-XSS-Protection: 1; mode=block</elem>
<elem>Description: The browser will prevent the rendering of the page when XSS is detected.</elem>
</table>
<table key="X_Content_Type_Options">
<elem>Header: X-Content-Type-Options: nosniff</elem>
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
</table>
</script><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/><script id="http-php-version" output="Credits query returned unknown hash 949c98d8d14d6d4da5caaf045903a8a1"/><script id="http-server-header" output="nginx"><elem>nginx</elem>
</script><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-backup-finder" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-waf-detect" output="IDS/IPS/WAF detected:&#xa;passbolt.lan.ddnsgeek.com:443/?p4yl04d3=&lt;script&gt;alert(document.cookie)&lt;/script&gt;"/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/><script id="http-useragent-tester" output="&#xa; Status for browser useragent: 200&#xa; Redirected To: /auth/login?redirect=%2F&#xa; Allowed User Agents: &#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)&#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; PHP/&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34&#xa; Change in Status Code: &#xa; libwww: 404"><elem key="Status for browser useragent">200</elem>
<elem key="Redirected To">/auth/login?redirect=%2F</elem>
<table key="Allowed User Agents">
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
<elem>lwp-trivial</elem>
<elem>libcurl-agent/1.0</elem>
<elem>PHP/</elem>
<elem>Python-urllib/2.5</elem>
<elem>GT::WWW</elem>
<elem>Snoopy</elem>
<elem>MFC_Tear_Sample</elem>
<elem>HTTP::Lite</elem>
<elem>PHPCrawl</elem>
<elem>URI::Fetch</elem>
<elem>Zend_Http_Client</elem>
<elem>http client</elem>
<elem>PECL::HTTP</elem>
<elem>Wget/1.13.4 (linux-gnu)</elem>
<elem>WWW-Mechanize/1.34</elem>
</table>
<table key="Change in Status Code">
<elem key="libwww">404</elem>
</table>
</script><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="ssl-enum-ciphers" output="&#xa; TLSv1.2: &#xa; ciphers: &#xa; TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A&#xa; compressors: &#xa; NULL&#xa; cipher preference: client&#xa; warnings: &#xa; Key exchange (secp256r1) of lower strength than certificate key&#xa; TLSv1.3: &#xa; ciphers: &#xa; TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A&#xa; cipher preference: server&#xa; least strength: A"><table key="TLSv1.2">
<table key="ciphers">
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256</elem>
<elem key="strength">A</elem>
</table>
</table>
<table key="compressors">
<elem>NULL</elem>
</table>
<elem key="cipher preference">client</elem>
<table key="warnings">
<elem>Key exchange (secp256r1) of lower strength than certificate key</elem>
</table>
</table>
<table key="TLSv1.3">
<table key="ciphers">
<table>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="name">TLS_AKE_WITH_AES_128_GCM_SHA256</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="name">TLS_AKE_WITH_AES_256_GCM_SHA384</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="name">TLS_AKE_WITH_CHACHA20_POLY1305_SHA256</elem>
<elem key="strength">A</elem>
</table>
</table>
<elem key="cipher preference">server</elem>
</table>
<elem key="least strength">A</elem>
</script><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST"><table key="Supported Methods">
<elem key="md5">467174a58d202b208b59f04dc9233712</elem>
<elem key="sha1">8af1359b3029214540949080649225087a445dd7</elem>
<elem key="sha256">f9804a631adacd62ceaf5760f7e0826ee9e174db65cdc69c2b5c474b36ac19e3</elem>
<elem key="pem">-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD&#xa;ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC&#xa;Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3&#xa;WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ&#xa;+nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs&#xa;BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P&#xa;YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE&#xa;eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE&#xa;d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R&#xa;ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS&#xa;6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw&#xa;TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6&#xa;6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA&#xa;AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM&#xa;BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV&#xa;HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI&#xa;KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh&#xa;c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD&#xa;VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN&#xa;BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR&#xa;c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE&#xa;Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a&#xa;9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9&#xa;AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj&#xa;IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB&#xa;ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v&#xa;+3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF&#xa;MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc&#xa;k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj&#xa;MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw&#xa;YrarkoA+irmSeogYZBI+qKg=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;</elem>
</script><script id="http-sql-injection" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<elem>POST</elem>
</table>
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-errors" output="&#xa;Spidering limited to: maxpagecount=40; withinhost=passbolt.lan.ddnsgeek.com&#xa; Found the following error pages: &#xa; &#xa; Error Code: 404&#xa; &#x9;https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.10.0&#xa; &#xa; Error Code: 404&#xa; &#x9;https://passbolt.lan.ddnsgeek.com:443/js/app/s.src1%7D%7Dbreak;case&#xa; &#xa; Error Code: 404&#xa; &#x9;https://passbolt.lan.ddnsgeek.com:443/js/app/e1setTimeout1function11%7Bdocument.body.removeChild1u1%7D13331%7Dif1r1s&#xa; &#xa; Error Code: 404&#xa; &#x9;https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.10.0&#xa; &#xa; Error Code: 404&#xa; &#x9;https://passbolt.lan.ddnsgeek.com:443/js/app/e1110;var&#xa;"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-favicon" output="Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; /&#xa; Other: 1; ico: 1; png: 5; svg: 1&#xa; /js/app/&#xa; js: 1&#xa; Longest directory structure:&#xa; Depth: 2&#xa; Dir: /js/app/&#xa; Total files found (by extension):&#xa; Other: 1; ico: 1; js: 1; png: 5; svg: 1&#xa;"/></port>
</script><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-server-header" output="nginx"><elem>nginx</elem>
</script><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/><script id="http-headers" output="&#xa; Access-Control-Expose-Headers: X-GPGAuth-Verify-Response&#xa; Access-Control-Expose-Headers: X-GPGAuth-Progress&#xa; Access-Control-Expose-Headers: X-GPGAuth-User-Auth-Token&#xa; Access-Control-Expose-Headers: X-GPGAuth-Authenticated&#xa; Access-Control-Expose-Headers: X-GPGAuth-Refer&#xa; Access-Control-Expose-Headers: X-GPGAuth-Debug&#xa; Access-Control-Expose-Headers: X-GPGAuth-Error&#xa; Access-Control-Expose-Headers: X-GPGAuth-Pubkey&#xa; Access-Control-Expose-Headers: X-GPGAuth-Logout-Url&#xa; Access-Control-Expose-Headers: X-GPGAuth-Version&#xa; Cache-Control: no-store, no-cache, must-revalidate&#xa; Content-Security-Policy: default-src &apos;none&apos;; script-src &apos;self&apos;; style-src &apos;self&apos;; img-src &apos;self&apos;; font-src &apos;self&apos;; connect-src &apos;self&apos;; base-uri &apos;self&apos;; frame-src &apos;self&apos;; frame-ancestors &apos;none&apos;; form-action &apos;self&apos; https://*.duosecurity.com&#xa; Content-Type: text/html; charset=UTF-8&#xa; Date: Tue, 14 Apr 2026 04:01:12 GMT&#xa; Expires: Thu, 19 Nov 1981 08:52:00 GMT&#xa; Permissions-Policy: unload=(*)&#xa; Pragma: no-cache&#xa; Referrer-Policy: same-origin&#xa; Server: nginx&#xa; Set-Cookie: passbolt_session=868f8b90de9733e71911be79a6ae943e; path=/; HttpOnly; SameSite=Lax&#xa; Set-Cookie: csrfToken=77f99ef8df307c0707c09f924bcade32f7909e5c61ff6c5d6eb225253b6553b25a55e5962129c071808a94301932f194403a7667eabb8ee2723fc58c636798ac; path=/&#xa; Strict-Transport-Security: max-age=15552000; includeSubDomains; preload&#xa; X-Content-Type-Options: nosniff&#xa; X-Download-Options: noopen&#xa; X-Frame-Options: SAMEORIGIN&#xa; X-Gpgauth-Authenticated: false&#xa; X-Gpgauth-Debug: There is no user associated with this key. No key id set.&#xa; X-Gpgauth-Error: true&#xa; X-Gpgauth-Login-Url: /auth/login&#xa; X-Gpgauth-Logout-Url: /auth/logout&#xa; X-Gpgauth-Progress: stage0&#xa; X-Gpgauth-Pubkey-Url: /auth/verify.json&#xa; X-Gpgauth-Verify-Url: /auth/verify&#xa; X-Gpgauth-Version: 1.3.0&#xa; X-Permitted-Cross-Domain-Policies: all&#xa; X-Xss-Protection: 1; mode=block&#xa; Connection: close&#xa; Transfer-Encoding: chunked&#xa; &#xa; (Request type: GET)&#xa;"/><script id="http-feed" output="Couldn&apos;t find any feeds."/></port>
</ports>
<times srtt="14248" rttvar="14248" to="100000"/>
<times srtt="13941" rttvar="13941" to="100000"/>
</host>
<taskbegin task="NSE" time="1775379959"/>
<taskend task="NSE" time="1775379959"/>
<taskbegin task="NSE" time="1775379959"/>
<taskend task="NSE" time="1775379959"/>
<taskbegin task="NSE" time="1775379959"/>
<taskend task="NSE" time="1775379959"/>
<runstats><finished time="1775379959" timestr="Sun Apr 5 09:05:59 2026" summary="Nmap done at Sun Apr 5 09:05:59 2026; 1 IP address (1 host up) scanned in 1586.00 seconds" elapsed="1586.00" exit="success"/><hosts up="1" down="0" total="1"/>
<taskbegin task="NSE" time="1776139600"/>
<taskend task="NSE" time="1776139600"/>
<taskbegin task="NSE" time="1776139600"/>
<taskend task="NSE" time="1776139600"/>
<taskbegin task="NSE" time="1776139600"/>
<taskend task="NSE" time="1776139600"/>
<runstats><finished time="1776139600" timestr="Tue Apr 14 04:06:40 2026" summary="Nmap done at Tue Apr 14 04:06:40 2026; 1 IP address (1 host up) scanned in 361.20 seconds" elapsed="361.20" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>