beatzaplenty/autorecon
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fresh autorecon run

Browse Source
This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

results/report.md/searxng.lan.ddnsgeek.com/Patterns.md
+1 -3
View File
@@ -1,4 +1,2 @@
Matched Pattern: Powered by <a href="/info/en/about">SearXNG</a> - 2026.4.5+474b0a55b — a privacy-respecting, open metasearch engine<br>
Identified HTTP Server: granian
Matched Pattern: Powered by <a href="/info/en/about">SearXNG</a> - 2026.4.11+9e08a6771 — a privacy-respecting, open metasearch engine<br>
results/report.md/searxng.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md
+35 -132
View File
@@ -5,142 +5,42 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root
[/root/results/searxng.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt](file:///root/results/searxng.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 09:04:17 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/searxng.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/searxng.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml searxng.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:10:32 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/searxng.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/searxng.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml searxng.lan.ddnsgeek.com
Nmap scan report for searxng.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.025s latency).
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 09:04:23 UTC for 2637s
Scanned at 2026-04-14 04:10:37 UTC for 1374s
Not shown: 65531 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-title: Did not follow redirect to https://searxng.lan.ddnsgeek.com/
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_ssl-date: TLS randomness does not represent time
|_http-favicon: Unknown favicon MD5: 39D42DD43FA010D699534A85CCA0881B
|_http-title: SearXNG
|_http-generator: searxng/2026.4.5+474b0a55b
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
| ssl-cert: Subject: commonName=searxng.lan.ddnsgeek.com
| Subject Alternative Name: DNS:searxng.lan.ddnsgeek.com
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-05T19:02:34
| Not valid after: 2026-05-06T19:02:33
| MD5: d452 b841 8ae5 9c53 aae2 46be 8019 715e
| SHA-1: 121d b257 a1bb cab9 334f 2b22 a6a4 56ee c043 067d
| SHA-256: 932a 826c f2c5 58ed 9bb5 1c11 7af8 4f92 fcfe c32c 7cea d546 1b54 2e04 350f 40b7
| -----BEGIN CERTIFICATE-----
| MIIGFDCCBPygAwIBAgISBlZiftnDPAhsaH/H+7tDcyKkMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTIwHhcNMjYwMjA1MTkwMjM0WhcNMjYwNTA2MTkwMjMzWjAjMSEwHwYDVQQD
| ExhzZWFyeG5nLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4IC
| DwAwggIKAoICAQC2Nco6YK5yss+y5+fA0w93a1CMjv2yqZKNZsWXnl9ac2FNpmf2
| kU9yWr9o+vjxhlFiyAsDIZlI+1pnObefQs41bvxCmVzzvFE9pYnBsMoZkaUKDXLn
| /shOh1XA/9yU8U/kDlGF8l9a4a64Dt/vnIJeudu7/zCtaTV0cITF9Oe5iBoYNbtr
| 2V81YeUc/egUrkpLJv+BOLXCSFbAMbbx6RuIZEjj/4oB0kZa0+D7hARsYN2wpsEt
| lggem4xr3RoeHodr0rM5hQNg7OvazMUB1d+R6kgBndVrhv+TzGW4GAvxF/bcKZyV
| 832TsDOoWIisgqKaDiArbv4NBwyhaY6kf577rxkz7spq4ogQBnvq7YL0CDnNWQL4
| CczJIzYjoHy66hDnpq2j/5Ng7vWcjvL6tlC8LRsU5C2xtCJJj7wecrzGHc10UzRs
| 849h9q7NDxkdUaoHS24vmuXbEuhExrDF0XYiIDjNDaf4OUtYGHYjDkmgxqqT8qzu
| 8J26oGDRf66gQ2zMBCQCSbGjuA+dVdFkeFY9ofwXPhf773iDq/kMEbScdkxUK704
| ZWO/NwJ4nb73//igiQb5Lg8OCt1Lfov30T3uRPJuWCrXy0JESEIvDl7fRv4ayFZc
| M8RW30mJyvJP2pvT4eZvt1EFLKa9cMCWwqidccWNnd3sRt4ME4fzzWj8YwIDAQAB
| o4ICMDCCAiwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
| BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQFXVj+MJo4fhyXCZcGODA6
| 73UeSTAfBgNVHSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcB
| AQQnMCUwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCMGA1Ud
| EQQcMBqCGHNlYXJ4bmcubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeB
| DAECATAuBgNVHR8EJzAlMCOgIaAfhh1odHRwOi8vcjEyLmMubGVuY3Iub3JnLzM3
| LmNybDCCAQwGCisGAQQB1nkCBAIEgf0EgfoA+AB2AGQRxGykEuyniRyiAi4AvKtP
| KAfUHjUnq+r+1QPJfc3wAAABnC9k2UcAAAQDAEcwRQIhAKVGx7XzgAVqrDTK3qsG
| JX/jiybYX2Hvxgm0W++qoIbmAiB7Pmuf0z35gA3Lla7iyepOsiR8UQrbD3OaaY6C
| eAtMnAB+AKXJeJJdV0YXgocN2IlmC1xVZIt9AEDy7AdoUdGIaRn3AAABnC9k2z4A
| CAAABQAxQN/aBAMARzBFAiEA6Xphv+k9t0JiJ1svG9bhk1mDzXppmeDElTKCY49B
| nO4CIA3WnzRPiAXKQCsGoq+uSn/Anm1S9/7QoPxWPeyOaZmLMA0GCSqGSIb3DQEB
| CwUAA4IBAQAHYFjcVlOzGUj3F0qROoW96jCVbJd5NIYi99RERwM5OwKEdN4TpZ+v
| oF2K4ukI+J1RrW1JLKNymUkLbY/jCZh2bPrIijWQO7BT5GICFEcJWgRu6+Z6TopT
| QMcIqZZegLvQOTAdlK2LonBT4/IY5ND8Nw/WoPAF3kkC/wN2dz6W9wA/K85fj0zC
| 4+31dDr7ir7bjbLpjVV60FgeNSooGmiMpffKSUCztteydblWqCZzgBQowu/+A2IA
| 3CTF5DTIlu1sqUnCnOsgAgycj15zOocoOsAFqpGJ/tUuKOJe1MpgjIR6a1uOmW1+
| klw9aGAiKU/uWVAmYe1YUJ5eMXv52tNo
|_-----END CERTIFICATE-----
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_ssl-date: TLS randomness does not represent time
| http-methods:
|_ Supported Methods: POST HEAD OPTIONS GET
|_http-generator: searxng/2026.4.11+9e08a6771
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|_http-server-header: granian
| http-robots.txt: 4 disallowed entries
|_/stats /image_proxy /preferences /*?*q=*
20001/tcp closed microsan reset ttl 57
51413/tcp open unknown syn-ack ttl 56
| fingerprint-strings:
| SSLv23SessionReq:
| eX%7
| ?1fI
| IL~b^g
| 88(l
| (T~n(I
| a=w:
| TLSSessionReq:
| eX'U_
| \xf7DT
| J+q'
|_ E.&j
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port51413-TCP:V=7.98%I=9%D=4/5%Time=69D22D44%P=x86_64-pc-linux-gnu%r(TL
SF:SSessionReq,19E,"\xb3\r\xd5\x1c\xab\|\xe5T\xfd\x9akK\xa89\xc4i\xe0u\xc3
SF:\x1c\x13\xebG\xc5R\xd0\xde\xe7\x92\x18I-r\x7f\xfcuaA\xad\xfe}F\x92\x8b:
SF:f7\x87\]\+'\x04\xdfR\r0N\x20\xfc\x0f\xe2\x8f\xb4\xf0J\x05ct\xf0\xc4\xfe
SF:\xb8\x19:\x80\)\xf6w\x7f\x9c\xfa\xb0\xf9\xc68\xe7e\xe0\xf1eX'U_\xdc\x1a
SF:\xdf\x1a\\\xf7DT\x9e\x9fS,w\xf9d\x86\x99K\x12\xa3\xd46P\x03\x8e1q\xb07t
SF:r\x83\xebw\|\x13\*\x83\xfb\xb8\xacw\xcdWy\]\x1aG6\x14l\x82U\xad\x9f\xe0
SF:\x9c\x81\xd7X\$\x9c\xfa\x8b\x92\xc7J\+q'\xaaQ\x8cv9\x80\.\x12fW\x9a\x95
SF:\x9d\x97\xe7\xa3BD#\xa4\xdc\x84cL\xe6\xd6\xe9\ng\xe8\x05\xc2X\x1e\rS\x9
SF:5N\|\xf1\x82\xa3D>h\xacy\xf3\x10\xc6\xf7\xf6%\x20:#\xd0\xdc\xc8\x15n\t\
SF:xee\x81\x82\xca\xcf\xffh\x93\x95Wv\xf3\xd2K\x20\)\x18n\xf1\x9f\x95M\xdc
SF:v\xbe\x94\x93\xb3\x90\$\x9b\x10I\x0f!\xe3\x9e9\xdd\xa0\xe25:\xcb\x8cFHF
SF:\x15E\.&j\xc0c\xe7\x9exg\x1f7m\xee\x8c\xa4j\xd61`\xf7\xb1\xeb\xab\(\x01
SF:v\x08-\"\xb9\x9a\x85\xd0\x03\x8fL\x0b\xdaB\x18<\xfan\xce\x14\xe0eA\xc0\
SF:x89\x10\x88\x07\x02\xcf\x86\xd4d\x15C\?\xa2\x87\xc2\xdf\xdf\x96TJ\xea\x
SF:c2\xc5\xccK\xfe\x1e\(k\xaa\x81\x81\xfc\x10\xcf\xe8\xc7\xbf;\xc60\x18\x7
SF:f\xe3z\x94T\xc5\x178\xd0\.\xd2\+\]\x11;\xf6\x95\xd7\x10\x874\x93\rR9-\x
SF:e3\x02\xee\x97\xd3N\xc2\+n\xf5G\x8f\x9c@e:\xa443\xa8g")%r(SSLv23Session
SF:Req,219,"\x1fn\xeb\xc7\xe6\"\xfcQj\xd3\x0c\x1c\xfe\xcf\xf3\x16\xce\xed}
SF:<\x9eJ\.\x13\xf3\xd9\xfbS\xbey\xc1\xe7n\x01\xf5\x7f\x87\xd6x\xe40\x9c\]
SF:\xad\xb3J\xda\xb1\x9fT\xc2\xb0X\x7f\x1c\x03\xe2\xc4\]\xf8\xcc3<\x1beX%7
SF:\xc3\xa8\xe9\xbf`K\xb8nt\x95\x7f\xe22Z\x85\n\xa8h\x01\xce\x8dN\xbf\x9a\
SF:xfeU\xa8\x8c-\xd3\x1b\x15~\.N\xd3\]\xfd\0\xdd}S\xbd\xf3\xdf\xa6c\x86\x1
SF:ae\x18\xff\x9b\xb0\xf6\xbf\x9d\x82'\xfb\xe3w\^\x07\?1fI\x7f\x90\x92\x82
SF:Z-\x07{\]\xe6r\r\xa5%\xd2\xf6\x8d\xf9\$\*\xfa\x18\x96\xd7X\x11\xb5IL~b\
SF:^g\xc2\|\x90\x10M\xdb\x92oB\xa6C\xb2w9;\x02\xae\r\xf388\(l\xc1\xa2\xa5\
SF:xacr\xe0\xe9_<\xf8\x19\xb1J\xf4f\x83\|j\t\x9c\(T~n\(I\xd5\xd3c\x1e\.\xe
SF:8\x08%\t\xa6d\x9d\x92k\xbfRQc\xb9=\x0b\xf5\"\xa0\x149\xbd\xfbc\x90B\$\x
SF:eb\x96J\xfb\]\xcb\xde\x870\xf0nO\x1eI\x87n\x85f\xc17\x19\|\xeb\xbb\x02\
SF:x90k\xc1\x86\x8b\x1a%\xf8\xb0\xec\xbb\xf5\x99\xef\x10V\x02;x\xe6<\x06zw
SF:\x04\.\x1cx\x85\x07\xf2\xbbAS\xcdPQ\x1a\xa9\x96\.a`\xec\xd1a=w:\xc7\xca
SF:\x03\xa2\x91\x10a\?}\x0e\x13!\|\xae\xab\xfc\$\x97O\xcc/\xc3\xb6\x87\xe5
SF:2\x9d\xa6\rb\xa3\xd2q\xf9\^\x12xv\.\x87\xaa\x05\xd26-\+\x8c\xc7\xf1{\xd
SF:3\x1e\xe8tsk\xbbxq\xf6B\xb2\x87#\x89Z\x02\^F\xfbr\x9bBl\x1e\|\x1d\xa7A\
SF:tk=\x12!\xbc\x12N'\xfa\xeb\x99\x08\x18>c\xc3\x9e\xe9G\xe7\.\0\xbe!T~\xe
SF:1yf\xdf\x1d\xa0k\x15\xda\)\xbe%\xa3Z\xf8\xf5\tx\x98ba\x8b\x04\xdf\xcbV\
SF:xf4\xa2\x93\x1e<\xa6\x8a;-\xfc\xb9\xc2\x07\x19\x06f=&\xe3\x95Xy\xb6\xb7
SF:\xae\xa9\xcc\xdd\xe3\.\x85d\xc4\n\xd5j\xaf%\x91\x91\xac\t\x81\xca\xbdp\
SF:xa4\xae=A\rM\xfbO\xeb>n\x9f\*\x8d\x8d\xf50\xf1\x14\x1b\xd1\x08u\xcc\x91
SF:\x8bARc\x8f\x20\t\x19\xec\x06");
|_http-favicon: Unknown favicon MD5: 39D42DD43FA010D699534A85CCA0881B
20001/tcp closed microsan reset ttl 57
51413/tcp open tcpwrapped syn-ack ttl 56
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2016 (85%)
OS CPE: cpe:/o:microsoft:windows_server_2016
OS fingerprint not ideal because: maxTimingRatio (2.320000e+00) is greater than 1.4
Aggressive OS guesses: Microsoft Windows Server 2016 (85%)
Running (JUST GUESSING): Linux 5.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:5.4
OS fingerprint not ideal because: maxTimingRatio (2.172000e+00) is greater than 1.4
Aggressive OS guesses: Linux 5.4 (86%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69D22FE4%P=x86_64-pc-linux-gnu)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDC39C%P=x86_64-pc-linux-gnu)
SEQ()
SEQ(TS=A)
SEQ(SP=100%GCD=1%ISR=10B%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=N)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
T1(R=N)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
@@ -150,21 +50,24 @@ T7(R=N)
U1(R=N)
IE(R=N)
Uptime guess: 49.706 days (since Mon Feb 23 11:37:20 2026)
Network Distance: 8 hops
TCP Sequence Prediction: Difficulty=256 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 20001/tcp)
HOP RTT ADDRESS
1 0.06 ms 10.216.0.161
2 0.23 ms 10.216.35.12
3 0.88 ms 10.216.32.1
4 0.39 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 3.38 ms 4764.syd.equinix.com (45.127.173.7)
6 11.68 ms 10.241.1.187
7 12.65 ms 10.241.2.71
8 14.55 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
1 0.08 ms 10.216.0.161
2 0.25 ms 10.216.35.11
3 0.78 ms 10.216.32.2
4 0.37 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 2.61 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.59 ms 10.241.1.187
7 12.28 ms 10.241.2.26
8 13.59 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:48:20 2026 -- 1 IP address (1 host up) scanned in 2648.45 seconds
# Nmap done at Tue Apr 14 04:33:32 2026 -- 1 IP address (1 host up) scanned in 1384.22 seconds
```
results/report.md/searxng.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md
+16 -15
View File
@@ -5,36 +5,37 @@ nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/searxng.lan.
[/root/results/searxng.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt](file:///root/results/searxng.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 09:22:09 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/searxng.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/searxng.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml searxng.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:10:54 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/searxng.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/searxng.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml searxng.lan.ddnsgeek.com
Nmap scan report for searxng.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.010s latency).
Host is up, received user-set.
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 09:22:21 UTC for 1685s
Scanned at 2026-04-14 04:11:05 UTC for 1359s
All 100 scanned ports on searxng.lan.ddnsgeek.com (167.179.167.166) are in ignored states.
Not shown: 100 open|filtered udp ports (no-response)
Too many fingerprints match this host to give specific OS details
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing an open TCP port so results incomplete
No OS matches for host
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=N%DS=13%DC=T%G=N%TM=69D23062%P=x86_64-pc-linux-gnu)
SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=N%G=N%TM=69DDC3A8%P=x86_64-pc-linux-gnu)
SEQ()
T4(R=Y%DF=Y%TG=40%W=195%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
U1(R=N)
IE(R=N)
Network Distance: 13 hops
TRACEROUTE (using proto 1/icmp)
HOP RTT ADDRESS
1 0.09 ms 10.216.0.161
2 0.23 ms 10.216.35.11
3 5.11 ms 10.216.32.2
4 0.58 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 3.44 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.87 ms 10.241.1.187
7 14.19 ms 10.241.2.71
8 ... 12
13 -- 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
2 0.25 ms 10.216.35.12
3 0.83 ms 10.216.32.2
4 0.61 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 4.38 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.62 ms 10.241.1.185
7 12.49 ms 10.241.2.26
8 ... 30
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:50:26 2026 -- 1 IP address (1 host up) scanned in 1701.12 seconds
# Nmap done at Tue Apr 14 04:33:45 2026 -- 1 IP address (1 host up) scanned in 1376.72 seconds
```
results/report.md/searxng.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md
+55 -55
View File
@@ -5,11 +5,11 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
[/root/results/searxng.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt](file:///root/results/searxng.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 09:03:18 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/searxng.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/searxng.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml searxng.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:09:44 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/searxng.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/searxng.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml searxng.lan.ddnsgeek.com
Nmap scan report for searxng.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.020s latency).
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 09:03:23 UTC for 46s
Scanned at 2026-04-14 04:09:46 UTC for 40s
Not shown: 998 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
@@ -23,15 +23,15 @@ PORT STATE SERVICE REASON VERSION
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-05T19:02:34
| Not valid after: 2026-05-06T19:02:33
| MD5: d452 b841 8ae5 9c53 aae2 46be 8019 715e
| SHA-1: 121d b257 a1bb cab9 334f 2b22 a6a4 56ee c043 067d
| SHA-256: 932a 826c f2c5 58ed 9bb5 1c11 7af8 4f92 fcfe c32c 7cea d546 1b54 2e04 350f 40b7
| Not valid before: 2026-04-07T00:44:34
| Not valid after: 2026-07-06T00:44:33
| MD5: c9df e929 787d 602e a590 2871 f91a 19ff
| SHA-1: f5d1 2f16 f10a 0119 65ff 742d e8c1 e5c8 a758 b439
| SHA-256: 2d21 6332 280a 7442 da75 a244 868d 83f3 22f2 fa2c 52e3 7f10 d02a 96c7 209a eb46
| -----BEGIN CERTIFICATE-----
| MIIGFDCCBPygAwIBAgISBlZiftnDPAhsaH/H+7tDcyKkMA0GCSqGSIb3DQEBCwUA
| MIIGCjCCBPKgAwIBAgISBoeBYTRyaoIWfoh54gT8+h9wMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTIwHhcNMjYwMjA1MTkwMjM0WhcNMjYwNTA2MTkwMjMzWjAjMSEwHwYDVQQD
| EwNSMTIwHhcNMjYwNDA3MDA0NDM0WhcNMjYwNzA2MDA0NDMzWjAjMSEwHwYDVQQD
| ExhzZWFyeG5nLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4IC
| DwAwggIKAoICAQC2Nco6YK5yss+y5+fA0w93a1CMjv2yqZKNZsWXnl9ac2FNpmf2
| kU9yWr9o+vjxhlFiyAsDIZlI+1pnObefQs41bvxCmVzzvFE9pYnBsMoZkaUKDXLn
@@ -44,49 +44,49 @@ PORT STATE SERVICE REASON VERSION
| 8J26oGDRf66gQ2zMBCQCSbGjuA+dVdFkeFY9ofwXPhf773iDq/kMEbScdkxUK704
| ZWO/NwJ4nb73//igiQb5Lg8OCt1Lfov30T3uRPJuWCrXy0JESEIvDl7fRv4ayFZc
| M8RW30mJyvJP2pvT4eZvt1EFLKa9cMCWwqidccWNnd3sRt4ME4fzzWj8YwIDAQAB
| o4ICMDCCAiwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
| BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQFXVj+MJo4fhyXCZcGODA6
| 73UeSTAfBgNVHSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcB
| AQQnMCUwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCMGA1Ud
| EQQcMBqCGHNlYXJ4bmcubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeB
| DAECATAuBgNVHR8EJzAlMCOgIaAfhh1odHRwOi8vcjEyLmMubGVuY3Iub3JnLzM3
| LmNybDCCAQwGCisGAQQB1nkCBAIEgf0EgfoA+AB2AGQRxGykEuyniRyiAi4AvKtP
| KAfUHjUnq+r+1QPJfc3wAAABnC9k2UcAAAQDAEcwRQIhAKVGx7XzgAVqrDTK3qsG
| JX/jiybYX2Hvxgm0W++qoIbmAiB7Pmuf0z35gA3Lla7iyepOsiR8UQrbD3OaaY6C
| eAtMnAB+AKXJeJJdV0YXgocN2IlmC1xVZIt9AEDy7AdoUdGIaRn3AAABnC9k2z4A
| CAAABQAxQN/aBAMARzBFAiEA6Xphv+k9t0JiJ1svG9bhk1mDzXppmeDElTKCY49B
| nO4CIA3WnzRPiAXKQCsGoq+uSn/Anm1S9/7QoPxWPeyOaZmLMA0GCSqGSIb3DQEB
| CwUAA4IBAQAHYFjcVlOzGUj3F0qROoW96jCVbJd5NIYi99RERwM5OwKEdN4TpZ+v
| oF2K4ukI+J1RrW1JLKNymUkLbY/jCZh2bPrIijWQO7BT5GICFEcJWgRu6+Z6TopT
| QMcIqZZegLvQOTAdlK2LonBT4/IY5ND8Nw/WoPAF3kkC/wN2dz6W9wA/K85fj0zC
| 4+31dDr7ir7bjbLpjVV60FgeNSooGmiMpffKSUCztteydblWqCZzgBQowu/+A2IA
| 3CTF5DTIlu1sqUnCnOsgAgycj15zOocoOsAFqpGJ/tUuKOJe1MpgjIR6a1uOmW1+
| klw9aGAiKU/uWVAmYe1YUJ5eMXv52tNo
| o4ICJjCCAiIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwG
| A1UdEwEB/wQCMAAwHQYDVR0OBBYEFAVdWP4wmjh+HJcJlwY4MDrvdR5JMB8GA1Ud
| IwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUFBwEBBCcwJTAjBggr
| BgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wIwYDVR0RBBwwGoIYc2Vh
| cnhuZy5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC8GA1Ud
| HwQoMCYwJKAioCCGHmh0dHA6Ly9yMTIuYy5sZW5jci5vcmcvMTEzLmNybDCCAQsG
| CisGAQQB1nkCBAIEgfwEgfkA9wB1AMs49xWJfIShRF9bwd37yW7ymlnNRwppBYWw
| yxTDFFjnAAABnWWbhvsAAAQDAEYwRAIgYeLYQse3OQmeZ4bnf4nfZVwiJuPIgQk0
| uai2b3xSo18CIC2iZXBWePi++6+LwtNcJYKlX8uRh6pkjJCamQ/xMP7rAH4AqCbL
| 4wrGNRJGUz/gZfFPGdluGQgTxB3ZbXkAsxI8VScAAAGdZZuKGQAIAAAFAAXkmSwE
| AwBHMEUCIQC1+nMHUb8YR5UL4hHDuQ0dlU6kJ5beCFGDSTTrvYYiPgIgPfCn8ndZ
| nYx1kGwz7kW7MdGVjZiCcmHNTSrguRtVnfgwDQYJKoZIhvcNAQELBQADggEBAFQh
| FXnwXbkDc3H2yXkDnzxZ7KDE/DG5OP4XK4qYUZ7O+KfVEAMw8KH6IimaryftC0q2
| 2ru+glbhAro9g4knBNbS52BwXWnJrWXMeeO3pg+MHyh15eawrSMWW211Tds7nMYd
| Fx5uxpJglhIob8inqNf0T3xmAAYxinmOkD7OH8oBKo61+Pe+yGw4X5kBL7Owpl3k
| hVpJm2pRcC8bopwWD00d/lP2IqSbMAniBSsWDrIAE+Pzkz+R7pmTkNjJfVSrLVQb
| 13u5NDtG2PTyweFtNuCtUwN+mtDv2ZDKIjQx+ksn4Inqp10HqZtaSVPTJGHZtAqK
| exPZpzI9ocSVGMygmJg=
|_-----END CERTIFICATE-----
|_http-title: SearXNG
|_http-favicon: Unknown favicon MD5: 39D42DD43FA010D699534A85CCA0881B
|_ssl-date: TLS randomness does not represent time
|_http-server-header: granian
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_ssl-date: TLS randomness does not represent time
| http-robots.txt: 4 disallowed entries
|_/stats /image_proxy /preferences /*?*q=*
|_http-title: SearXNG
|_http-generator: searxng/2026.4.5+474b0a55b
| http-methods:
|_ Supported Methods: POST HEAD OPTIONS GET
|_http-generator: searxng/2026.4.11+9e08a6771
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|router
Running (JUST GUESSING): Linux 4.X|5.X|2.6.X (92%), MikroTik RouterOS 7.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:2.6.32
Device type: general purpose
Running (JUST GUESSING): Linux 5.X (89%)
OS CPE: cpe:/o:linux:linux_kernel:5.4
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
Aggressive OS guesses: Linux 4.19 - 5.15 (92%), Linux 4.15 - 5.19 (85%), Linux 4.19 (85%), Linux 5.0 - 5.14 (85%), OpenWrt 21.02 (Linux 5.4) (85%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (85%), Linux 2.6.32 (85%), Linux 4.0 - 4.4 (85%), Linux 4.15 (85%)
Aggressive OS guesses: Linux 5.4 (89%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69D22589%P=x86_64-pc-linux-gnu)
SEQ(SP=100%GCD=1%ISR=10B%TI=Z%TS=A)
SEQ(SP=106%GCD=1%ISR=10A%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDBE32%P=x86_64-pc-linux-gnu)
SEQ(SP=105%GCD=1%ISR=106%TI=Z%TS=A)
SEQ(SP=107%GCD=1%ISR=109%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=NNT11%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=1F9%W6=FE88)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=1FC%W6=FE88)
ECN(R=N)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
@@ -94,24 +94,24 @@ T4(R=N)
U1(R=N)
IE(R=N)
Uptime guess: 16.977 days (since Thu Mar 19 09:37:52 2026)
Uptime guess: 49.690 days (since Mon Feb 23 11:37:19 2026)
Network Distance: 8 hops
TCP Sequence Prediction: Difficulty=262 (Good luck!)
TCP Sequence Prediction: Difficulty=263 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 80/tcp)
TRACEROUTE (using port 443/tcp)
HOP RTT ADDRESS
1 0.08 ms 10.216.0.161
2 0.23 ms 10.216.35.11
3 4.69 ms 10.216.32.2
4 0.61 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
5 2.93 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.70 ms 10.241.1.187
7 12.45 ms 10.241.2.71
8 14.82 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
1 0.12 ms 10.216.0.161
2 0.26 ms 10.216.35.12
3 2.10 ms 10.216.32.2
4 0.55 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 3.16 ms 4764.syd.equinix.com (45.127.173.7)
6 11.75 ms 10.241.1.187
7 12.59 ms 10.241.2.26
8 14.63 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:04:10 2026 -- 1 IP address (1 host up) scanned in 55.70 seconds
# Nmap done at Tue Apr 14 04:10:26 2026 -- 1 IP address (1 host up) scanned in 44.61 seconds
```
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md
+2 -2
View File
@@ -7,10 +7,10 @@ curl -sSikf https://searxng.lan.ddnsgeek.com:443/robots.txt
```
HTTP/2 200
content-type: text/plain; charset=utf-8
date: Sun, 05 Apr 2026 09:09:11 GMT
date: Tue, 14 Apr 2026 04:10:38 GMT
referrer-policy: no-referrer
server: granian
server-timing: total;dur=0.906, render;dur=0
server-timing: total;dur=4.658, render;dur=0
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-download-options: noopen
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md
+6 -6
View File
@@ -7,17 +7,17 @@ curl -sSik https://searxng.lan.ddnsgeek.com:443/
```
HTTP/2 200
content-type: text/html; charset=utf-8
date: Sun, 05 Apr 2026 09:09:12 GMT
date: Tue, 14 Apr 2026 04:10:41 GMT
referrer-policy: no-referrer
server: granian
server-timing: total;dur=9.667, render;dur=1.174
server-timing: total;dur=4.329, render;dur=2.512
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
content-length: 6340
content-length: 6342
<!DOCTYPE html>
<html class="no-js theme-auto center-alignment-no" lang="en-EN" >
@@ -26,12 +26,12 @@ content-length: 6340
<meta name="endpoint" content="index">
<meta name="description" content="SearXNG — a privacy-respecting, open metasearch engine">
<meta name="keywords" content="SearXNG, search, search engine, metasearch, meta search">
<meta name="generator" content="searxng/2026.4.5+474b0a55b">
<meta name="generator" content="searxng/2026.4.11+9e08a6771">
<meta name="referrer" content="no-referrer">
<meta name="robots" content="noarchive">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>SearXNG</title>
<script type="module" src="/static/themes/simple/sxng-core.min.js" client_settings="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"></script>
<script type="module" src="/static/themes/simple/sxng-core.min.js" client_settings="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"></script>
<link rel="stylesheet" href="/static/themes/simple/sxng-ltr.min.css" type="text/css" media="screen">
<link title="SearXNG" type="application/opensearchdescription+xml" rel="search" href="/opensearch.xml?method=POST&amp;autocomplete=">
<link rel="icon" href="/static/themes/simple/img/favicon.png" sizes="any">
@@ -65,7 +65,7 @@ content-length: 6340
</main>
<footer>
<p>
Powered by <a href="/info/en/about">SearXNG</a> - 2026.4.5+474b0a55b — a privacy-respecting, open metasearch engine<br>
Powered by <a href="/info/en/about">SearXNG</a> - 2026.4.11+9e08a6771 — a privacy-respecting, open metasearch engine<br>
<a href="https://github.com/searxng/searxng">Source code</a>
| <a href="https://github.com/searxng/searxng/issues">Issue tracker</a>
| <a href="/stats">Engine stats</a> | <a href="https://searx.space">Public instances</a>
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md
+12 -10
View File
@@ -290,22 +290,24 @@ Configuration {
unique: false,
response_size_limit: 4194304,
}
404 GET 2l 12w 64c https://searxng.lan.ddnsgeek.com/info/
200 GET 100l 757w 7942c https://searxng.lan.ddnsgeek.com/info/en/about
200 GET 303l 863w 16197c https://searxng.lan.ddnsgeek.com/stats
404 GET 2l 12w 64c https://searxng.lan.ddnsgeek.com/info/en/
400 GET 2l 11w 65c https://searxng.lan.ddnsgeek.com/image_proxy
200 GET 100l 757w 7940c https://searxng.lan.ddnsgeek.com/info/en/about
404 GET 2l 12w 64c https://searxng.lan.ddnsgeek.com/info/
200 GET 277l 800w 14797c https://searxng.lan.ddnsgeek.com/stats
200 GET 257l 14416w 323603c https://searxng.lan.ddnsgeek.com/preferences
200 GET 25l 42w 522c https://searxng.lan.ddnsgeek.com/manifest.json
200 GET 15l 121w 8956c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/favicon.png
200 GET 14l 43w 884c https://searxng.lan.ddnsgeek.com/opensearch.xml
200 GET 3l 93w 4936c https://searxng.lan.ddnsgeek.com/static/themes/simple/sxng-core.min.js
200 GET 15l 121w 8956c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/favicon.png
200 GET 1l 37w 726c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/favicon.svg
200 GET 3l 93w 4936c https://searxng.lan.ddnsgeek.com/static/themes/simple/sxng-core.min.js
200 GET 2l 1863w 85693c https://searxng.lan.ddnsgeek.com/static/themes/simple/sxng-ltr.min.css
200 GET 54l 484w 6342c https://searxng.lan.ddnsgeek.com/search
200 GET 54l 484w 6340c https://searxng.lan.ddnsgeek.com/
200 GET 1l 196w 100341c https://searxng.lan.ddnsgeek.com/config
200 GET 54l 484w 6344c https://searxng.lan.ddnsgeek.com/search
200 GET 25l 42w 522c https://searxng.lan.ddnsgeek.com/manifest.json
200 GET 257l 14536w 325173c https://searxng.lan.ddnsgeek.com/preferences
200 GET 54l 484w 6342c https://searxng.lan.ddnsgeek.com/
200 GET 1l 196w 100342c https://searxng.lan.ddnsgeek.com/config
200 GET 15l 121w 8956c https://searxng.lan.ddnsgeek.com/favicon.ico
200 GET 47l 193w 15716c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/searxng.png
200 GET 142l 726w 8253c https://searxng.lan.ddnsgeek.com/info/en/search-syntax
200 GET 6l 12w 117c https://searxng.lan.ddnsgeek.com/robots.txt
200 GET 1l 2w 8c https://searxng.lan.ddnsgeek.com/autocompleter
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md
+6 -200
View File
@@ -5,211 +5,17 @@ nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (b
[/root/results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt](file:///root/results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 09:22:26 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/searxng.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml searxng.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:12:03 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/searxng.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml searxng.lan.ddnsgeek.com
Nmap scan report for searxng.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.014s latency).
Host is up, received user-set.
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 09:22:31 UTC for 1160s
Scanned at 2026-04-14 04:12:09 UTC for 1s
PORT STATE SERVICE REASON VERSION
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-headers:
| Content-Length: 6340
| Content-Type: text/html; charset=utf-8
| Date: Sun, 05 Apr 2026 09:27:01 GMT
| Referrer-Policy: no-referrer
| Server: granian
| Server-Timing: total;dur=27.312, render;dur=20.734
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X-Content-Type-Options: nosniff
| X-Download-Options: noopen
| X-Frame-Options: SAMEORIGIN
| X-Robots-Tag: noindex, nofollow
| X-Xss-Protection: 1; mode=block
| Connection: close
|
|_ (Request type: HEAD)
| http-useragent-tester:
| Status for browser useragent: 200
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| libwww
| lwp-trivial
| libcurl-agent/1.0
| PHP/
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| PHPCrawl
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-feed: Couldn't find any feeds.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-server-header: granian
| http-waf-detect: IDS/IPS/WAF detected:
|_searxng.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
| http-vhosts:
| auth.lan.ddnsgeek.com : 200
|_127 names had status 404
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X_Frame_Options:
| Header: X-Frame-Options: SAMEORIGIN
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
| X_XSS_Protection:
| Header: X-XSS-Protection: 1; mode=block
| Description: The browser will prevent the rendering of the page when XSS is detected.
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
| http-sitemap-generator:
| Directory structure:
| /
| Other: 4; json: 1; xml: 1
| /info/en/
| Other: 1
| /static/themes/simple/
| css: 1; js: 1
| Longest directory structure:
| Depth: 3
| Dir: /static/themes/simple/
| Total files found (by extension):
|_ Other: 5; css: 1; js: 1; json: 1; xml: 1
|_http-referer-checker: Couldn't find any cross-domain scripts.
| http-sql-injection:
| Possible sqli for forms:
| Form at path: /search, form's action: /search. Fields that might be vulnerable:
| q
| Form at path: /, form's action: /search. Fields that might be vulnerable:
|_ q
|_ssl-date: TLS randomness does not represent time
|_http-malware-host: Host appears to be clean
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-php-version: Logo query returned unknown hash 4a17502ae0c6bf21a2cfc344d4356de9
|_Credits query returned unknown hash 4a17502ae0c6bf21a2cfc344d4356de9
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| ssl-cert: Subject: commonName=searxng.lan.ddnsgeek.com
| Subject Alternative Name: DNS:searxng.lan.ddnsgeek.com
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-05T19:02:34
| Not valid after: 2026-05-06T19:02:33
| MD5: d452 b841 8ae5 9c53 aae2 46be 8019 715e
| SHA-1: 121d b257 a1bb cab9 334f 2b22 a6a4 56ee c043 067d
| SHA-256: 932a 826c f2c5 58ed 9bb5 1c11 7af8 4f92 fcfe c32c 7cea d546 1b54 2e04 350f 40b7
| -----BEGIN CERTIFICATE-----
| MIIGFDCCBPygAwIBAgISBlZiftnDPAhsaH/H+7tDcyKkMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTIwHhcNMjYwMjA1MTkwMjM0WhcNMjYwNTA2MTkwMjMzWjAjMSEwHwYDVQQD
| ExhzZWFyeG5nLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4IC
| DwAwggIKAoICAQC2Nco6YK5yss+y5+fA0w93a1CMjv2yqZKNZsWXnl9ac2FNpmf2
| kU9yWr9o+vjxhlFiyAsDIZlI+1pnObefQs41bvxCmVzzvFE9pYnBsMoZkaUKDXLn
| /shOh1XA/9yU8U/kDlGF8l9a4a64Dt/vnIJeudu7/zCtaTV0cITF9Oe5iBoYNbtr
| 2V81YeUc/egUrkpLJv+BOLXCSFbAMbbx6RuIZEjj/4oB0kZa0+D7hARsYN2wpsEt
| lggem4xr3RoeHodr0rM5hQNg7OvazMUB1d+R6kgBndVrhv+TzGW4GAvxF/bcKZyV
| 832TsDOoWIisgqKaDiArbv4NBwyhaY6kf577rxkz7spq4ogQBnvq7YL0CDnNWQL4
| CczJIzYjoHy66hDnpq2j/5Ng7vWcjvL6tlC8LRsU5C2xtCJJj7wecrzGHc10UzRs
| 849h9q7NDxkdUaoHS24vmuXbEuhExrDF0XYiIDjNDaf4OUtYGHYjDkmgxqqT8qzu
| 8J26oGDRf66gQ2zMBCQCSbGjuA+dVdFkeFY9ofwXPhf773iDq/kMEbScdkxUK704
| ZWO/NwJ4nb73//igiQb5Lg8OCt1Lfov30T3uRPJuWCrXy0JESEIvDl7fRv4ayFZc
| M8RW30mJyvJP2pvT4eZvt1EFLKa9cMCWwqidccWNnd3sRt4ME4fzzWj8YwIDAQAB
| o4ICMDCCAiwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
| BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQFXVj+MJo4fhyXCZcGODA6
| 73UeSTAfBgNVHSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcB
| AQQnMCUwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCMGA1Ud
| EQQcMBqCGHNlYXJ4bmcubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeB
| DAECATAuBgNVHR8EJzAlMCOgIaAfhh1odHRwOi8vcjEyLmMubGVuY3Iub3JnLzM3
| LmNybDCCAQwGCisGAQQB1nkCBAIEgf0EgfoA+AB2AGQRxGykEuyniRyiAi4AvKtP
| KAfUHjUnq+r+1QPJfc3wAAABnC9k2UcAAAQDAEcwRQIhAKVGx7XzgAVqrDTK3qsG
| JX/jiybYX2Hvxgm0W++qoIbmAiB7Pmuf0z35gA3Lla7iyepOsiR8UQrbD3OaaY6C
| eAtMnAB+AKXJeJJdV0YXgocN2IlmC1xVZIt9AEDy7AdoUdGIaRn3AAABnC9k2z4A
| CAAABQAxQN/aBAMARzBFAiEA6Xphv+k9t0JiJ1svG9bhk1mDzXppmeDElTKCY49B
| nO4CIA3WnzRPiAXKQCsGoq+uSn/Anm1S9/7QoPxWPeyOaZmLMA0GCSqGSIb3DQEB
| CwUAA4IBAQAHYFjcVlOzGUj3F0qROoW96jCVbJd5NIYi99RERwM5OwKEdN4TpZ+v
| oF2K4ukI+J1RrW1JLKNymUkLbY/jCZh2bPrIijWQO7BT5GICFEcJWgRu6+Z6TopT
| QMcIqZZegLvQOTAdlK2LonBT4/IY5ND8Nw/WoPAF3kkC/wN2dz6W9wA/K85fj0zC
| 4+31dDr7ir7bjbLpjVV60FgeNSooGmiMpffKSUCztteydblWqCZzgBQowu/+A2IA
| 3CTF5DTIlu1sqUnCnOsgAgycj15zOocoOsAFqpGJ/tUuKOJe1MpgjIR6a1uOmW1+
| klw9aGAiKU/uWVAmYe1YUJ5eMXv52tNo
|_-----END CERTIFICATE-----
|_http-mobileversion-checker: No mobile version detected.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
| http-robots.txt: 4 disallowed entries
|_/stats /image_proxy /preferences /*?*q=*
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-date: Sun, 05 Apr 2026 09:27:02 GMT; -2s from local time.
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
| compressors:
| NULL
| cipher preference: client
| warnings:
| Key exchange (secp256r1) of lower strength than certificate key
| TLSv1.3:
| ciphers:
| TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
| cipher preference: server
|_ least strength: A
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-chrono: Request times for /; avg: 7141.21ms; min: 820.07ms; max: 15815.55ms
| http-csrf:
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=searxng.lan.ddnsgeek.com
| Found the following possible CSRF vulnerabilities:
|
| Path: http://searxng.lan.ddnsgeek.com:443/
| Form id: search
| Form action: /search
|
| Path: http://searxng.lan.ddnsgeek.com:443/search
| Form id: search
| Form action: /search
|
| Path: https://searxng.lan.ddnsgeek.com:443/
| Form id: search
|_ Form action: /search
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-comments-displayer:
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=searxng.lan.ddnsgeek.com
|
| Path: https://searxng.lan.ddnsgeek.com:443/static/themes/simple/sxng-ltr.min.css
| Line number: 1
| Comment:
|_ /*! normalize.css v8.0.1 | MIT License | github.com/necolas/normalize.css */
|_http-favicon: Unknown favicon MD5: 39D42DD43FA010D699534A85CCA0881B
|_http-title: SearXNG
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
| http-errors:
| Spidering limited to: maxpagecount=40; withinhost=searxng.lan.ddnsgeek.com
| Found the following error pages:
|
| Error Code: 404
| http://searxng.lan.ddnsgeek.com:443/info/en/search-syntax
|
| Error Code: 404
|_ http://searxng.lan.ddnsgeek.com:443/None
PORT STATE SERVICE REASON VERSION
443/tcp filtered https no-response
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:41:52 2026 -- 1 IP address (1 host up) scanned in 1166.52 seconds
# Nmap done at Tue Apr 14 04:12:11 2026 -- 1 IP address (1 host up) scanned in 8.49 seconds
```
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md
+45 -45
View File
@@ -6,7 +6,7 @@ sslscan --show-certificate --no-colour searxng.lan.ddnsgeek.com:443 2>&1
```
Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025
OpenSSL 3.5.5 27 Jan 2026
Connected to 167.179.167.166
@@ -56,9 +56,9 @@ TLSv1.2 128 bits x25519
SSL Certificate:
Certificate blob:
-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgISBlZiftnDPAhsaH/H+7tDcyKkMA0GCSqGSIb3DQEBCwUA
MIIGCjCCBPKgAwIBAgISBoeBYTRyaoIWfoh54gT8+h9wMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTIwHhcNMjYwMjA1MTkwMjM0WhcNMjYwNTA2MTkwMjMzWjAjMSEwHwYDVQQD
EwNSMTIwHhcNMjYwNDA3MDA0NDM0WhcNMjYwNzA2MDA0NDMzWjAjMSEwHwYDVQQD
ExhzZWFyeG5nLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4IC
DwAwggIKAoICAQC2Nco6YK5yss+y5+fA0w93a1CMjv2yqZKNZsWXnl9ac2FNpmf2
kU9yWr9o+vjxhlFiyAsDIZlI+1pnObefQs41bvxCmVzzvFE9pYnBsMoZkaUKDXLn
@@ -71,31 +71,31 @@ CczJIzYjoHy66hDnpq2j/5Ng7vWcjvL6tlC8LRsU5C2xtCJJj7wecrzGHc10UzRs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o4ICJjCCAiIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFAVdWP4wmjh+HJcJlwY4MDrvdR5JMB8GA1Ud
IwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUFBwEBBCcwJTAjBggr
BgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wIwYDVR0RBBwwGoIYc2Vh
cnhuZy5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC8GA1Ud
HwQoMCYwJKAioCCGHmh0dHA6Ly9yMTIuYy5sZW5jci5vcmcvMTEzLmNybDCCAQsG
CisGAQQB1nkCBAIEgfwEgfkA9wB1AMs49xWJfIShRF9bwd37yW7ymlnNRwppBYWw
yxTDFFjnAAABnWWbhvsAAAQDAEYwRAIgYeLYQse3OQmeZ4bnf4nfZVwiJuPIgQk0
uai2b3xSo18CIC2iZXBWePi++6+LwtNcJYKlX8uRh6pkjJCamQ/xMP7rAH4AqCbL
4wrGNRJGUz/gZfFPGdluGQgTxB3ZbXkAsxI8VScAAAGdZZuKGQAIAAAFAAXkmSwE
AwBHMEUCIQC1+nMHUb8YR5UL4hHDuQ0dlU6kJ5beCFGDSTTrvYYiPgIgPfCn8ndZ
nYx1kGwz7kW7MdGVjZiCcmHNTSrguRtVnfgwDQYJKoZIhvcNAQELBQADggEBAFQh
FXnwXbkDc3H2yXkDnzxZ7KDE/DG5OP4XK4qYUZ7O+KfVEAMw8KH6IimaryftC0q2
2ru+glbhAro9g4knBNbS52BwXWnJrWXMeeO3pg+MHyh15eawrSMWW211Tds7nMYd
Fx5uxpJglhIob8inqNf0T3xmAAYxinmOkD7OH8oBKo61+Pe+yGw4X5kBL7Owpl3k
hVpJm2pRcC8bopwWD00d/lP2IqSbMAniBSsWDrIAE+Pzkz+R7pmTkNjJfVSrLVQb
13u5NDtG2PTyweFtNuCtUwN+mtDv2ZDKIjQx+ksn4Inqp10HqZtaSVPTJGHZtAqK
exPZpzI9ocSVGMygmJg=
-----END CERTIFICATE-----
Version: 2
Serial Number: 06:56:62:7e:d9:c3:3c:08:6c:68:7f:c7:fb:bb:43:73:22:a4
Serial Number: 06:87:81:61:34:72:6a:82:16:7e:88:79:e2:04:fc:fa:1f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: /C=US/O=Let's Encrypt/CN=R12
Not valid before: Feb 5 19:02:34 2026 GMT
Not valid after: May 6 19:02:33 2026 GMT
Not valid before: Apr 7 00:44:34 2026 GMT
Not valid after: Jul 6 00:44:33 2026 GMT
Subject: /CN=searxng.lan.ddnsgeek.com
Public Key Algorithm: NULL
RSA Public Key: (4096 bit)
@@ -141,7 +141,7 @@ klw9aGAiKU/uWVAmYe1YUJ5eMXv52tNo
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
@@ -156,33 +156,33 @@ klw9aGAiKU/uWVAmYe1YUJ5eMXv52tNo
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r12.c.lencr.org/37.crl
URI:http://r12.c.lencr.org/113.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
Timestamp : Feb 5 20:01:04.327 2026 GMT
Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E:
F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7
Timestamp : Apr 7 01:43:04.699 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:A5:46:C7:B5:F3:80:05:6A:AC:34:CA:
DE:AB:06:25:7F:E3:8B:26:D8:5F:61:EF:C6:09:B4:5B:
EF:AA:A0:86:E6:02:20:7B:3E:6B:9F:D3:3D:F9:80:0D:
CB:95:AE:E2:C9:EA:4E:B2:24:7C:51:0A:DB:0F:73:9A:
69:8E:82:78:0B:4C:9C
30:44:02:20:61:E2:D8:42:C7:B7:39:09:9E:67:86:E7:
7F:89:DF:65:5C:22:26:E3:C8:81:09:34:B9:A8:B6:6F:
7C:52:A3:5F:02:20:2D:A2:65:70:56:78:F8:BE:FB:AF:
8B:C2:D3:5C:25:82:A5:5F:CB:91:87:AA:64:8C:90:9A:
99:0F:F1:30:FE:EB
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A5:C9:78:92:5D:57:46:17:82:87:0D:D8:89:66:0B:5C:
55:64:8B:7D:00:40:F2:EC:07:68:51:D1:88:69:19:F7
Timestamp : Feb 5 20:01:04.830 2026 GMT
Extensions: 00:00:05:00:31:40:DF:DA
Log ID : A8:26:CB:E3:0A:C6:35:12:46:53:3F:E0:65:F1:4F:19:
D9:6E:19:08:13:C4:1D:D9:6D:79:00:B3:12:3C:55:27
Timestamp : Apr 7 01:43:05.497 2026 GMT
Extensions: 00:00:05:00:05:E4:99:2C
Signature : ecdsa-with-SHA256
30:45:02:21:00:E9:7A:61:BF:E9:3D:B7:42:62:27:5B:
2F:1B:D6:E1:93:59:83:CD:7A:69:99:E0:C4:95:32:82:
63:8F:41:9C:EE:02:20:0D:D6:9F:34:4F:88:05:CA:40:
2B:06:A2:AF:AE:4A:7F:C0:9E:6D:52:F7:FE:D0:A0:FC:
56:3D:EC:8E:69:99:8B
30:45:02:21:00:B5:FA:73:07:51:BF:18:47:95:0B:E2:
11:C3:B9:0D:1D:95:4E:A4:27:96:DE:08:51:83:49:34:
EB:BD:86:22:3E:02:20:3D:F0:A7:F2:77:59:9D:8C:75:
90:6C:33:EE:45:BB:31:D1:95:8D:98:82:72:61:CD:4D:
2A:E0:B9:1B:55:9D:F8
Verify m:
unable to get local issuer certificate
@@ -194,8 +194,8 @@ Subject: searxng.lan.ddnsgeek.com
Altnames: DNS:searxng.lan.ddnsgeek.com
Issuer: R12
Not valid before: Feb 5 19:02:34 2026 GMT
Not valid after: May 6 19:02:33 2026 GMT
Not valid before: Apr 7 00:44:34 2026 GMT
Not valid after: Jul 6 00:44:33 2026 GMT
```
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md
+21 -2
View File
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://searxng.lan.ddnsge
[/root/results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt):
```
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -18,12 +37,12 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://searxng.lan.ddnsge
Ciphers: TLS_AES_128_GCM_SHA256
Issuer: /C=US/O=Let's Encrypt/CN=R12
+ Platform: Windows
+ Start Time: 2026-04-05 09:21:58 (GMT0)
+ Start Time: 2026-04-14 04:11:06 (GMT0)
---------------------------------------------------------------------------
+ Server: granian
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [999996] /robots.txt: contains 5 entries which should be manually viewed. See: https://developer.mozilla.org/en-US/docs/Glossary/Robots.txt
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
```
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md
+5 -5
View File
@@ -11,7 +11,7 @@ Title : SearXNG
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : HTML5, HTTPServer[granian], MetaGenerator[searxng/2026.4.5+474b0a55b], OpenSearch[/opensearch.xml?method=POST&amp;autocomplete=], Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[referrer-policy,server-timing,x-content-type-options,x-download-options,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Summary : HTML5, HTTPServer[granian], MetaGenerator[searxng/2026.4.11+9e08a6771], OpenSearch[/opensearch.xml?method=POST&amp;autocomplete=], Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[referrer-policy,server-timing,x-content-type-options,x-download-options,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ HTML5 ]
@@ -28,7 +28,7 @@ Detected Plugins:
This plugin identifies meta generator tags and extracts its
value.
String : searxng/2026.4.5+474b0a55b
String : searxng/2026.4.11+9e08a6771
[ OpenSearch ]
This plugin identifies open search and extracts the URL.
@@ -77,12 +77,12 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 200 OK
Content-Length: 6340
Content-Length: 6342
Content-Type: text/html; charset=utf-8
Date: Sun, 05 Apr 2026 09:27:23 GMT
Date: Tue, 14 Apr 2026 04:12:58 GMT
Referrer-Policy: no-referrer
Server: granian
Server-Timing: total;dur=2.321, render;dur=0.755
Server-Timing: total;dur=2.507, render;dur=0.955
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Download-Options: noopen
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSikf http://searxng.lan.ddnsgeek.com:80/robots.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://searxng.lan.ddnsgeek.com/robots.txt
Date: Sun, 05 Apr 2026 09:07:05 GMT
Date: Tue, 14 Apr 2026 04:10:28 GMT
Content-Length: 17
Moved Permanently
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSik http://searxng.lan.ddnsgeek.com:80/
```
HTTP/1.1 301 Moved Permanently
Location: https://searxng.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 09:07:06 GMT
Date: Tue, 14 Apr 2026 04:10:28 GMT
Content-Length: 17
Moved Permanently
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md
+24 -14
View File
@@ -290,28 +290,39 @@ Configuration {
unique: false,
response_size_limit: 4194304,
}
400 GET 2l 11w 65c https://searxng.lan.ddnsgeek.com/image_proxy
200 GET 277l 800w 14797c https://searxng.lan.ddnsgeek.com/stats
404 GET 2l 12w 64c https://searxng.lan.ddnsgeek.com/info/
404 GET 2l 12w 64c https://searxng.lan.ddnsgeek.com/info/en/
200 GET 100l 757w 7940c https://searxng.lan.ddnsgeek.com/info/en/about
200 GET 257l 14416w 323603c https://searxng.lan.ddnsgeek.com/preferences
200 GET 15l 121w 8956c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/favicon.png
200 GET 1l 37w 726c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/favicon.svg
200 GET 54l 484w 6342c https://searxng.lan.ddnsgeek.com/search
400 GET 2l 11w 65c https://searxng.lan.ddnsgeek.com/image_proxy
200 GET 303l 863w 16197c https://searxng.lan.ddnsgeek.com/stats
200 GET 100l 757w 7942c https://searxng.lan.ddnsgeek.com/info/en/about
200 GET 25l 42w 522c https://searxng.lan.ddnsgeek.com/manifest.json
200 GET 3l 93w 4936c https://searxng.lan.ddnsgeek.com/static/themes/simple/sxng-core.min.js
200 GET 2l 1863w 85693c https://searxng.lan.ddnsgeek.com/static/themes/simple/sxng-ltr.min.css
200 GET 14l 43w 884c https://searxng.lan.ddnsgeek.com/opensearch.xml
200 GET 3l 93w 4936c https://searxng.lan.ddnsgeek.com/static/themes/simple/sxng-core.min.js
200 GET 25l 42w 522c https://searxng.lan.ddnsgeek.com/manifest.json
200 GET 54l 484w 6340c https://searxng.lan.ddnsgeek.com/
200 GET 1l 196w 100341c https://searxng.lan.ddnsgeek.com/config
200 GET 257l 14536w 325173c https://searxng.lan.ddnsgeek.com/preferences
200 GET 54l 484w 6344c https://searxng.lan.ddnsgeek.com/search
200 GET 1l 37w 726c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/favicon.svg
200 GET 15l 121w 8956c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/favicon.png
200 GET 54l 484w 6342c https://searxng.lan.ddnsgeek.com/
200 GET 1l 196w 100342c https://searxng.lan.ddnsgeek.com/config
200 GET 15l 121w 8956c https://searxng.lan.ddnsgeek.com/favicon.ico
200 GET 142l 726w 8253c https://searxng.lan.ddnsgeek.com/info/en/search-syntax
200 GET 47l 193w 15716c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/searxng.png
200 GET 6l 12w 117c https://searxng.lan.ddnsgeek.com/robots.txt
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/[ => https://searxng.lan.ddnsgeek.com/[
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/] => https://searxng.lan.ddnsgeek.com/]
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/[.txt => https://searxng.lan.ddnsgeek.com/[.txt
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/[.html => https://searxng.lan.ddnsgeek.com/[.html
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/[.php => https://searxng.lan.ddnsgeek.com/[.php
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/] => https://searxng.lan.ddnsgeek.com/]
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/[.asp => https://searxng.lan.ddnsgeek.com/[.asp
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/].txt => https://searxng.lan.ddnsgeek.com/].txt
404 GET 0l 0w 64c https://searxng.lan.ddnsgeek.com/PrivacyPolicy.jsp
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/].html => https://searxng.lan.ddnsgeek.com/].html
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/[.aspx => https://searxng.lan.ddnsgeek.com/[.aspx
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/[.jsp => https://searxng.lan.ddnsgeek.com/[.jsp
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/].php => https://searxng.lan.ddnsgeek.com/].php
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/].asp => https://searxng.lan.ddnsgeek.com/].asp
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/].aspx => https://searxng.lan.ddnsgeek.com/].aspx
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/].jsp => https://searxng.lan.ddnsgeek.com/].jsp
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/plain] => https://searxng.lan.ddnsgeek.com/plain]
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/plain].txt => https://searxng.lan.ddnsgeek.com/plain].txt
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/plain].html => https://searxng.lan.ddnsgeek.com/plain].html
@@ -326,7 +337,6 @@ Configuration {
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/quote].asp => https://searxng.lan.ddnsgeek.com/quote].asp
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/quote].aspx => https://searxng.lan.ddnsgeek.com/quote].aspx
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/quote].jsp => https://searxng.lan.ddnsgeek.com/quote].jsp
404 GET 0l 0w 64c https://searxng.lan.ddnsgeek.com/Livezilla
200 GET 1l 2w 8c https://searxng.lan.ddnsgeek.com/autocompleter
```
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSikf http://searxng.lan.ddnsgeek.com:80/.well-known/security.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://searxng.lan.ddnsgeek.com/.well-known/security.txt
Date: Sun, 05 Apr 2026 09:07:03 GMT
Date: Tue, 14 Apr 2026 04:10:28 GMT
Content-Length: 17
Moved Permanently
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md
+30 -30
View File
@@ -5,41 +5,43 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
[/root/results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 09:07:49 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/searxng.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml searxng.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:10:29 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/searxng.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml searxng.lan.ddnsgeek.com
Nmap scan report for searxng.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 09:07:57 UTC for 1556s
Scanned at 2026-04-14 04:10:35 UTC for 328s
Bug in http-security-headers: no string output.
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-malware-host: Host appears to be clean
|_http-comments-displayer: Couldn't find any comments.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-errors: Couldn't find any error pages.
|_http-chrono: Request times for /; avg: 912.39ms; min: 432.23ms; max: 1691.72ms
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-title: Did not follow redirect to https://searxng.lan.ddnsgeek.com/
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-feed: Couldn't find any feeds.
|_http-date: Tue, 14 Apr 2026 04:11:02 GMT; -3s from local time.
|_http-errors: Couldn't find any error pages.
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-headers:
| Location: https://searxng.lan.ddnsgeek.com/
| Date: Sun, 05 Apr 2026 09:08:39 GMT
| Date: Tue, 14 Apr 2026 04:11:10 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
| http-vhosts:
|_128 names had status 308
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-malware-host: Host appears to be clean
|_http-title: Did not follow redirect to https://searxng.lan.ddnsgeek.com/
|_http-date: Sun, 05 Apr 2026 09:08:14 GMT; -1s from local time.
|_http-feed: Couldn't find any feeds.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-mobileversion-checker: No mobile version detected.
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
| http-useragent-tester:
| Status for browser useragent: 200
| Redirected To: https://searxng.lan.ddnsgeek.com/
@@ -61,20 +63,18 @@ PORT STATE SERVICE REASON VERSION
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-chrono: Request times for /; avg: 4102.72ms; min: 2048.02ms; max: 7134.03ms
|_http-mobileversion-checker: No mobile version detected.
|_http-comments-displayer: Couldn't find any comments.
| http-vhosts:
|_128 names had status 308
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:34:16 2026 -- 1 IP address (1 host up) scanned in 1586.71 seconds
# Nmap done at Tue Apr 14 04:16:04 2026 -- 1 IP address (1 host up) scanned in 336.10 seconds
```
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md
+59159 -58917
View File
File diff suppressed because it is too large. Load diff
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md
+24 -5
View File
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://searxng.lan.ddnsgee
[/root/results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt](file:///root/results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt):
```
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -12,20 +31,20 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://searxng.lan.ddnsgee
+ Target Hostname: searxng.lan.ddnsgeek.com
+ Target Port: 80
+ Platform: Unknown
+ Start Time: 2026-04-05 09:07:30 (GMT0)
+ Start Time: 2026-04-14 04:10:51 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ 7901 requests: 16 errors and 8 items reported on the remote host
+ End Time: 2026-04-05 09:58:36 (GMT0) (3066 seconds)
+ 7902 requests: 17 errors and 8 items reported on the remote host
+ End Time: 2026-04-14 04:29:33 (GMT0) (1122 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md
+6 -6
View File
@@ -23,7 +23,7 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 301 Moved Permanently
Location: https://searxng.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 09:09:11 GMT
Date: Tue, 14 Apr 2026 04:11:09 GMT
Content-Length: 17
Connection: close
@@ -33,7 +33,7 @@ Title : SearXNG
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : HTML5, HTTPServer[granian], MetaGenerator[searxng/2026.4.5+474b0a55b], OpenSearch[/opensearch.xml?method=POST&amp;autocomplete=], Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[referrer-policy,server-timing,x-content-type-options,x-download-options,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Summary : HTML5, HTTPServer[granian], MetaGenerator[searxng/2026.4.11+9e08a6771], OpenSearch[/opensearch.xml?method=POST&amp;autocomplete=], Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[referrer-policy,server-timing,x-content-type-options,x-download-options,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ HTML5 ]
@@ -50,7 +50,7 @@ Detected Plugins:
This plugin identifies meta generator tags and extracts its
value.
String : searxng/2026.4.5+474b0a55b
String : searxng/2026.4.11+9e08a6771
[ OpenSearch ]
This plugin identifies open search and extracts the URL.
@@ -99,12 +99,12 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 200 OK
Content-Length: 6340
Content-Length: 6342
Content-Type: text/html; charset=utf-8
Date: Sun, 05 Apr 2026 09:09:21 GMT
Date: Tue, 14 Apr 2026 04:11:20 GMT
Referrer-Policy: no-referrer
Server: granian
Server-Timing: total;dur=2.974, render;dur=1.538
Server-Timing: total;dur=3.457, render;dur=1.749
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Download-Options: noopen