fresh autorecon run

This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899

No files matched your search

@@ -1,7 +1,7 @@
HTTP/2 200
accept-ranges: bytes
content-type: text/html
date: Sun, 05 Apr 2026 10:15:44 GMT
date: Tue, 14 Apr 2026 04:28:29 GMT
etag: "69c9ef96-20b"
last-modified: Mon, 30 Mar 2026 03:35:50 GMT
server: nginx/1.27.5
@@ -1,7 +1,7 @@
HTTP/2 200
accept-ranges: bytes
content-type: text/html
date: Sun, 05 Apr 2026 09:56:07 GMT
date: Tue, 14 Apr 2026 04:29:31 GMT
etag: "69c9ef96-20b"
last-modified: Mon, 30 Mar 2026 03:35:50 GMT
server: nginx/1.27.5
@@ -286,26 +286,31 @@ Configuration {
200 GET 14l 19w 350c https://stockfill.lan.ddnsgeek.com/.well-known/assetlinks.json
403 GET 2l 10w 63c https://stockfill.lan.ddnsgeek.com/assets/
403 GET 2l 10w 63c https://stockfill.lan.ddnsgeek.com/icons/
200 GET 3l 1527w 96806c https://stockfill.lan.ddnsgeek.com/assets/jszip-DyQewxn5.js
200 GET 4l 2350w 95909c https://stockfill.lan.ddnsgeek.com/assets/dexie-DvMqvjyc.js
403 GET 2l 10w 63c https://stockfill.lan.ddnsgeek.com/templates/
200 GET 2l 41w 1226c https://stockfill.lan.ddnsgeek.com/assets/dataHooks-Bvi9rXFx.js
200 GET 2l 8w 94c https://stockfill.lan.ddnsgeek.com/assets/Product-DDMI3nUP.js
200 GET 2l 87w 2311c https://stockfill.lan.ddnsgeek.com/assets/ManageCategoriesScreen-DIKPVCrl.js
200 GET 2l 43w 1458c https://stockfill.lan.ddnsgeek.com/assets/BarcodeScannerView-gw-FkEXE.js
200 GET 2l 81w 2399c https://stockfill.lan.ddnsgeek.com/assets/StartPickListScreen-DC4W1hvB.js
200 GET 3l 258w 8867c https://stockfill.lan.ddnsgeek.com/assets/ImportExportScreen-8mKTDaOI.js
200 GET 2l 192w 7623c https://stockfill.lan.ddnsgeek.com/assets/ManageProductsScreen-lC7YubhZ.js
200 GET 2l 81w 2610c https://stockfill.lan.ddnsgeek.com/assets/PickListsScreen-DB9p0ztW.js
200 GET 2l 108w 3637c https://stockfill.lan.ddnsgeek.com/assets/BarcodeScannerScreen-CCfqxMjB.js
200 GET 2l 166w 5899c https://stockfill.lan.ddnsgeek.com/assets/AddProductDialog-zoIJhILV.js
200 GET 149l 10154w 574421c https://stockfill.lan.ddnsgeek.com/assets/vendor-2fCQKpJa.js
200 GET 2l 33w 943c https://stockfill.lan.ddnsgeek.com/assets/HomeScreen-Cadr3bNt.js
200 GET 3l 356w 11631c https://stockfill.lan.ddnsgeek.com/assets/index-DZWxa9kt.js
200 GET 2l 48w 1109c https://stockfill.lan.ddnsgeek.com/assets/ManageAreasScreen-C_dyC1ZR.js
200 GET 21l 8853w 411195c https://stockfill.lan.ddnsgeek.com/assets/zxing-ChT2UnX7.js
200 GET 2l 300w 14995c https://stockfill.lan.ddnsgeek.com/assets/ActivePickListScreen-DvSlACXD.js
200 GET 11l 353w 19437c https://stockfill.lan.ddnsgeek.com/assets/papaparse--HYnOrQZ.js
200 GET 2l 192w 7623c https://stockfill.lan.ddnsgeek.com/assets/ManageProductsScreen-lC7YubhZ.js
200 GET 2l 41w 1226c https://stockfill.lan.ddnsgeek.com/assets/dataHooks-Bvi9rXFx.js
200 GET 149l 10154w 574421c https://stockfill.lan.ddnsgeek.com/assets/vendor-2fCQKpJa.js
200 GET 21l 8853w 411195c https://stockfill.lan.ddnsgeek.com/assets/zxing-ChT2UnX7.js
200 GET 2l 108w 3637c https://stockfill.lan.ddnsgeek.com/assets/BarcodeScannerScreen-CCfqxMjB.js
200 GET 3l 356w 11631c https://stockfill.lan.ddnsgeek.com/assets/index-DZWxa9kt.js
200 GET 2l 81w 2610c https://stockfill.lan.ddnsgeek.com/assets/PickListsScreen-DB9p0ztW.js
200 GET 2l 8w 94c https://stockfill.lan.ddnsgeek.com/assets/Product-DDMI3nUP.js
200 GET 2l 300w 14995c https://stockfill.lan.ddnsgeek.com/assets/ActivePickListScreen-DvSlACXD.js
200 GET 4l 2350w 95909c https://stockfill.lan.ddnsgeek.com/assets/dexie-DvMqvjyc.js
200 GET 2l 166w 5899c https://stockfill.lan.ddnsgeek.com/assets/AddProductDialog-zoIJhILV.js
200 GET 3l 258w 8867c https://stockfill.lan.ddnsgeek.com/assets/ImportExportScreen-8mKTDaOI.js
200 GET 0l 0w 523c https://stockfill.lan.ddnsgeek.com/BatterySaverSharp.js
200 GET 0l 0w 523c https://stockfill.lan.ddnsgeek.com/HotelClassRounded.js
200 GET 0l 0w 523c https://stockfill.lan.ddnsgeek.com/LightbulbRounded.js
200 GET 0l 0w 523c https://stockfill.lan.ddnsgeek.com/node_modules/@mui/icons-material/esm/Battery6BarTwoTone.js
200 GET 0l 0w 523c https://stockfill.lan.ddnsgeek.com/RequestQuoteRounded.js
200 GET 2l 43w 1458c https://stockfill.lan.ddnsgeek.com/assets/BarcodeScannerView-gw-FkEXE.js
200 GET 3l 1527w 96806c https://stockfill.lan.ddnsgeek.com/assets/jszip-DyQewxn5.js
200 GET 2l 81w 2399c https://stockfill.lan.ddnsgeek.com/assets/StartPickListScreen-DC4W1hvB.js
200 GET 2l 33w 943c https://stockfill.lan.ddnsgeek.com/assets/HomeScreen-Cadr3bNt.js
200 GET 2l 78w 2578c https://stockfill.lan.ddnsgeek.com/assets/EditableEntityList-D-b3NbYE.js
200 GET 2l 87w 2311c https://stockfill.lan.ddnsgeek.com/assets/ManageCategoriesScreen-DIKPVCrl.js
200 GET 2l 48w 1109c https://stockfill.lan.ddnsgeek.com/assets/ManageAreasScreen-C_dyC1ZR.js
200 GET 4932l 17889w 4194304c https://stockfill.lan.ddnsgeek.com/stats.html (truncated to size limit)
200 GET 19l 68w 497c https://stockfill.lan.ddnsgeek.com/50x.html
@@ -1,7 +1,7 @@
HTTP/2 200
accept-ranges: bytes
content-type: text/html
date: Sun, 05 Apr 2026 10:15:42 GMT
date: Tue, 14 Apr 2026 04:28:26 GMT
etag: "69c9ef96-20b"
last-modified: Mon, 30 Mar 2026 03:35:50 GMT
server: nginx/1.27.5
@@ -1,3 +1,22 @@
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -11,10 +30,13 @@
Ciphers: TLS_AES_128_GCM_SHA256
Issuer: /C=US/O=Let's Encrypt/CN=R13
+ Platform: Unknown
+ Start Time: 2026-04-05 09:58:50 (GMT0)
+ Start Time: 2026-04-14 04:30:11 (GMT0)
---------------------------------------------------------------------------
+ Server: nginx/1.27.5
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [001869] /stats.html: This might be interesting.
+ [002743] /.bash_history: A user's home directory may be set to the web root, the shell history was retrieved. This should not be accessible via the web.
+ [002756] /.sh_history: A user's home directory may be set to the web root, the shell history was retrieved. This should not be accessible via the web.
@@ -1,23 +1,19 @@
# Nmap 7.98 scan initiated Sun Apr 5 09:59:47 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml stockfill.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:22:52 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml stockfill.lan.ddnsgeek.com
Nmap scan report for stockfill.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 09:59:51 UTC for 140s
Scanned at 2026-04-14 04:23:03 UTC for 523s
PORT STATE SERVICE REASON VERSION
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_ssl-date: TLS randomness does not represent time
|_http-malware-host: Host appears to be clean
|_http-mobileversion-checker: No mobile version detected.
|_http-chrono: Request times for /; avg: 6591.86ms; min: 2398.18ms; max: 10878.80ms
|_http-feed: Couldn't find any feeds.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-errors: Couldn't find any error pages.
|_http-favicon: Unknown favicon MD5: 28F40B1513BB073E82914945B1920905
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-headers:
| Accept-Ranges: bytes
| Content-Length: 523
| Content-Type: text/html
| Date: Sun, 05 Apr 2026 10:00:06 GMT
| Date: Tue, 14 Apr 2026 04:24:29 GMT
| Etag: "69c9ef96-20b"
| Last-Modified: Mon, 30 Mar 2026 03:35:50 GMT
| Server: nginx/1.27.5
@@ -28,11 +24,19 @@ PORT STATE SERVICE REASON VERSION
| Connection: close
|
|_ (Request type: HEAD)
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-server-header: nginx/1.27.5
| http-methods:
|_ Supported Methods: GET HEAD
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-sql-injection: ERROR: Script execution failed (use -d to debug)
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X_Frame_Options:
| Header: X-Frame-Options: SAMEORIGIN
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
| X_XSS_Protection:
| Header: X-XSS-Protection: 1; mode=block
| Description: The browser will prevent the rendering of the page when XSS is detected.
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
| http-vuln-cve2011-3192:
| VULNERABLE:
| Apache byterange filter DoS
@@ -46,10 +50,18 @@ PORT STATE SERVICE REASON VERSION
| https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192
| https://seclists.org/fulldisclosure/2011/Aug/175
|_ https://www.securityfocus.com/bid/49303
|_http-date: Sun, 05 Apr 2026 10:00:08 GMT; -3s from local time.
| http-methods:
|_ Supported Methods: GET HEAD
|_http-errors: Couldn't find any error pages.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-unsafe-output-escaping: ERROR: Script execution failed (use -d to debug)
|_http-rfi-spider: ERROR: Script execution failed (use -d to debug)
|_http-feed: Couldn't find any feeds.
|_http-traceroute: ERROR: Script execution failed (use -d to debug)
| http-useragent-tester:
| Status for browser useragent: 200
| Allowed User Agents:
| libwww
| lwp-trivial
| libcurl-agent/1.0
| PHP/
@@ -66,109 +78,85 @@ PORT STATE SERVICE REASON VERSION
| Wget/1.13.4 (linux-gnu)
| WWW-Mechanize/1.34
| Change in Status Code:
| libwww: 404
|_ Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html): 404
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X_Frame_Options:
| Header: X-Frame-Options: SAMEORIGIN
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
| X_XSS_Protection:
| Header: X-XSS-Protection: 1; mode=block
| Description: The browser will prevent the rendering of the page when XSS is detected.
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|_ssl-date: TLS randomness does not represent time
|_http-server-header: nginx/1.27.5
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-default-accounts:
| [Arris 2307] at /logo_t.gif
|_ <blank>:<blank>
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-trane-info: Problem with XML parsing of /evox/about
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-date: Tue, 14 Apr 2026 04:24:43 GMT; 0s from local time.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-php-version: Logo query returned unknown hash 28f40b1513bb073e82914945b1920905
|_Credits query returned unknown hash 28f40b1513bb073e82914945b1920905
|_http-chrono: Request times for /; avg: 32912.25ms; min: 2204.00ms; max: 56226.97ms
|_http-favicon: Unknown favicon MD5: 28F40B1513BB073E82914945B1920905
| http-vhosts:
| auth.lan.ddnsgeek.com : 200
|_127 names had status 404
| ssl-cert: Subject: commonName=stockfill.lan.ddnsgeek.com
| Subject Alternative Name: DNS:stockfill.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-03-22T09:47:15
| Not valid after: 2026-06-20T09:47:14
| MD5: 9d58 137a 2924 26ef f9ca b56e d3f1 510b
| SHA-1: 3ea5 c9a0 5fdd 6b57 78ec 626f 0ba7 3928 aecc 1948
| SHA-256: 4825 5fb5 3b5f ed46 46ca 1163 227d c1d1 cd58 8935 8d3e 9ed1 f0c8 467d e434 ec66
| -----BEGIN CERTIFICATE-----
| MIIGDzCCBPegAwIBAgISBSCym2uC+hYb1Zc3qCjloXn/MA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwMzIyMDk0NzE1WhcNMjYwNjIwMDk0NzE0WjAlMSMwIQYDVQQD
| ExpzdG9ja2ZpbGwubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
| ggIPADCCAgoCggIBAMkuGHd6QoSNHjkX2/DxCURKhM2DBoA4pytDrL4q3UzA1sVh
| pxGljFi5MNjqLbW5P7aHDXHo08Ecb8XczJFcURIGHObNKYMBqIZAV9MvMCEZ1SvQ
| AlkBIDtoxwjd/BnOxfrkn9JNKCdQrvzvbLEUPw/dH9n9lbVY3aNtoBs+Epk4nwxc
| MOxgkAtUAgkywhSDk4FyNxq2MA73DA0kVXwydY1yfhI7Y8y5+7HiDxYr7J/Tsl7F
| QQazayYkTMeae6OiARc9XYQYBsn2GJMzZCWHErXSIO7SEUq4ih3AvlBQASRqMFH5
| bgBkqKWQ8ilwUIXXY0K7mZaLLIx/s4ScV2q4AHqxvivWnLu+Fv3lcRDTWq52T9qo
| ZOcwnBBAgj3A1inOXw2yGZN/KZrxoHQsgkY6MUXcMVEdHKsCJJX2iqm4q+BFFHiV
| fBpqJUpspv8GGuFHCDjSdvsMZhMm/7i3AjXBZUieNqnFvPEewntw6NqfjAF5L/V5
| XrJXChOc80RGEN6rE2Y14Yxi0StwgRQwVNFYw4XBwhUJPsBbs9Sjvrg38hdzTbXh
| qvkEKB7ickYcauEMa4gjc1xM2LObg8tkWdOyEMRGANwHMIgIB9Yj9H7hgHW/U2ts
| gnrjhNJVPlWPyluyOmpvsL/2NF3yEEdmaYJy98WEUa/NNeH91tNjVc5todYxAgMB
| AAGjggIpMIICJTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEw
| DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU+yISCK1nywudpGX6q9z3xXkf2CUwHwYD
| VR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMG
| CCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAlBgNVHREEHjAcghpz
| dG9ja2ZpbGwubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAv
| BgNVHR8EKDAmMCSgIqAghh5odHRwOi8vcjEzLmMubGVuY3Iub3JnLzEyOC5jcmww
| ggEMBgorBgEEAdZ5AgQCBIH9BIH6APgAdgAWgy2r8KklDw/wOqVF/8i/yCPQh0v2
| BCkn+OcfMxP1+gAAAZ0VJp8HAAAEAwBHMEUCIQCK0OoRf+dUKEXKGEd+eW+m2V41
| qkDgZjaqzZjtrYvMgAIgJ1rcjrLxvuAlBzF0FfEjVVpudI9RoYXDlb9pQMafIzkA
| fgBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDRc4CeGBjrOgAAAZ0VJqAnAAgAAAUA
| A/bFjQQDAEcwRQIhAImeNgcMfLu9dxqVvvKk7MTJ/ZTswiLxMZeh5A9185s2AiBD
| msLUiD7sIyCrYnSKMGUjQQfcvSOd9Rjkdu5nlwGlLDANBgkqhkiG9w0BAQsFAAOC
| AQEACDWH5UifJkKtK+4iaunh6JhtkMzBhj2k7d3SCgbjDhpXo43pz2X+uCs/RNcL
| I98aVmxGwBU3qXK0WVxfGFSof/xlEYaklbGFO7zsI4KW1R/drb0M4PJoxVf999us
| 98/q3Sn6jHCzLSlsBGxSHcFIfBw5Et+DLSYrAzIrlzEMfgzPDyy+aqyrAcASqFRG
| keqdDnpieOgxMTvV1SKRBayAW272i1bTiVgCr0eknXh9OGaJ3ZWsuPjekLR176Vs
| 5Rd8w3xMbQD2g/2jPocCj/XkEQljNwVBNDxtekl4vkRlvgs+FDqZE3ppHuuJ2wmd
| OAAxNsovC6BHaQgaRRfMSGuOyw==
|_-----END CERTIFICATE-----
|_http-title: StockFill
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
| compressors:
| NULL
| cipher preference: client
| warnings:
| Key exchange (secp256r1) of lower strength than certificate key
| TLSv1.3:
| ciphers:
| TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
| cipher preference: server
|_ least strength: A
| http-cakephp-version: Version of codebase: 1.1.x, 1.2.x
| Version of icons: 1.3.x
|_Default stylesheet has an unknown hash: 28f40b1513bb073e82914945b1920905
|_http-majordomo2-dir-traversal: ERROR: Script execution failed (use -d to debug)
| http-waf-detect: IDS/IPS/WAF detected:
|_stockfill.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
| http-sitemap-generator:
| Directory structure:
| /
| Other: 1; json: 1
| /assets/
| Other: 2; js: 3
| Longest directory structure:
| Depth: 1
| Dir: /assets/
| Total files found (by extension):
|_ Other: 3; js: 3; json: 1
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-referer-checker: Couldn't find any cross-domain scripts.
| http-comments-displayer:
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=stockfill.lan.ddnsgeek.com
|
| Path: https://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 146
| Comment:
| /*"?"(.*)$":"(?:\\/(.+)|\\/*)$"):o?s+="\\/*$":t!==""&&t!=="/"&&(s+="(?:(?=\\/|$))"),[new RegExp(s,a?void 0:"i"),i]}function _3(t){try{return t.split("/").map(a=>decodeURIComponent(a).replace(/\//g,"%2F")).join("/")}catch(a){return Ta(!1,`The URL path "${t}" could not be decoded because it is a malformed URL segment. This is probably due to a bad percent encoding (${a}).`),t}}function xr(t,a){if(a==="/")return t;if(!t.toLowerCase().startsWith(a.toLowerCase()))return null;let o=a.endsWith("/")?a.length-1:a.length,i=t.charAt(o);return i&&i!=="/"?null:t.slice(o)||"/"}var j3=/^(?:[a-z][a-z0-9+.-]*:|\/\/)/i,U3=t=>j3.test(t);function H3(t,a="/"){let{pathname:o,search:i="",hash:s=""}=typeof t=="string"?Ii(t):t,u;if(o)if(U3(o))u=o;else{if(o.includes("//")){let f=o;o=o.replace(/\/\/+/g,"/"),Ta(!1,`Pathnames cannot have embedded double slashes - normalizing ${f} -> ${o}`)}o.startsWith("/")?u=fb(o.substring(1),"/"):u=fb(o,a)}else u=a;return{pathname:u,search:q3(i),hash:G3(s)}}function fb(t,a){let o=a.replace(/\/+$/,"").split("/");return t.split("/").forEach(s=>{s===".."?o.length>1&&o.pop():s!=="."&&o.push(s)}),o.length>1?o.join("/"):"/"}function gp(t,a,o,i){return`Cannot include a '${t}' character in a manually specified \`to.${a}\` field [${JSON.stringify(i)}]. Please separate it out to the \`to.${o}\` field. Alternatively you may provide the full path as a string in <Link to="..."> and the router will parse it for you.`}function I3(t){return t.filter((a,o)=>o===0||a.route.path&&a.route.path.length>0)}function aS(t){let a=I3(t);return a.map((o,i)=>i===a.length-1?o.pathname:o.pathnameBase)}function rS(t,a,o,i=!1){let s;typeof t=="string"?s=Ii(t):(s={...t},Ie(!s.pathname||!s.pathname.includes("?"),gp("?","pathname","search",s)),Ie(!s.pathname||!s.pathname.includes("#"),gp("#","pathname","hash",s)),Ie(!s.search||!s.search.includes("#"),gp("#","search","hash",s)));let u=t===""||s.pathname==="",f=u?"/":s.pathname,p;if(f==null)p=o;else{let v=a.length-1;if(!i&&f.startsWith("..")){let w=f.split("/");for(;w[0]==="..";)w.shift(),v-=1;s.pathname=w.join("/")}p=v>=0?a[v]:"/"}let m=H3(s,p),h=f&&f!=="/"&&f.endsWith("/"),g=(u||f===".")&&o.endsWith("/");return!m.pathname.endsWith("/")&&(h||g)&&(m.pathname+="/"),m}var yr=t=>t.join("/").replace(/\/\/+/g,"/"),V3=t=>t.replace(/\/+$/,"").replace(/^\/*/
|
| Path: https://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 20
| Comment:
| // handle system mode
|
| Path: https://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 148
| Comment:
| /*`}">.`)}let w=jo(),E;if(a){let z=typeof a=="string"?Ii(a):a;Ie(g==="/"||z.pathname?.startsWith(g),`When overriding the location using \`<Routes location>\` or \`useRoutes(routes, location)\`, the location pathname must begin with the portion of the URL pathname that was matched by all parent routes. The current pathname base is "${g}" but pathname "${z.pathname}" was given in the \`location\` prop.`),E=z}else E=w;let x=E.pathname||"/",C=x;if(g!=="/"){let z=g.replace(/^\//,"").split("/");C="/"+x.replace(/^\//,"").split("/").slice(z.length).join("/")}let R=tS(t,{pathname:C});Ta(v||R!=null,`No routes matched location "${E.pathname}${E.search}${E.hash}" `),Ta(R==null||R[R.length-1].route.element!==void 0||R[R.length-1].route.Component!==void 0||R[R.length-1].route.lazy!==void 0,`Matched leaf route at location "${E.pathname}${E.search}${E.hash}" does not have an element or Component. This means it will render an <Outlet /> with a null value by default resulting in an "empty" page.`);let M=iz(R&&R.map(z=>Object.assign({},z,{params:Object.assign({},m,z.params),pathname:yr([g,u.encodeLocation?u.encodeLocation(z.pathname.replace(/\?/g,"%3F").replace(/#/g,"%23")).pathname:z.pathname]),pathnameBase:z.pathnameBase==="/"?g:yr([g,u.encodeLocation?u.encodeLocation(z.pathnameBase.replace(/\?/g,"%3F").replace(/#/g,"%23")).pathname:z.pathnameBase])})),f,o,i,s);return a&&M?b.createElement(bs.Provider,{value:{location:{pathname:"/",search:"",hash:"",state:null,key:"default",...E},navigationType:"POP"}},M):M}function nz(){let t=fz(),a=F3(t)?`${t.status} ${t.statusText}`:t instanceof Error?t.message:JSON.stringify(t),o=t instanceof Error?t.stack:null,i="rgba(200,200,200, 0.5)",s={padding:"0.5rem",backgroundColor:i},u={padding:"2px 4px",backgroundColor:i},f=null;return console.error("Error handled by React Router default ErrorBoundary:",t),f=b.createElement(b.Fragment,null,b.createElement("p",null,"\xF0\x9F\x92\xBF Hey developer \xF0\x9F\x91\x8B"),b.createElement("p",null,"You can provide a way better UX than this when your app throws errors by providing your own ",b.createElement("code",{style:u},"ErrorBoundary")," or"," ",b.createElement("code",{style:u},"errorElement")," prop on your route.")),b.createElement(b.Fragment,null,b.createElement("h2",null,"Unexpected Application Error!"),b.createElement("h3",{style:{fontStyle:"italic"}},a),o?b.createElement("pre",{style:s},o):null,f)}var az=b.createElement(nz,null),rz=class extends b.Component{constructor(t){super(t),this.state={location:t.location,revalidation:t.revalidation,error:t.error}}static getDerivedStateFromError(t){return{error:t}}static getDerivedStateFromProps(t,a){return a.location!==t.location||a.revalidation!=="idle"&&t.revalidation==="idle"?{error:t.error,location:t.location,revalidation:t.revalidation}:{error:t.error!==void 0?t.error:a.error,location:a.location,revalidation:t.revalidation||a.revalidation}}componentDidCatch(t,a){this.props.onError?this.props.onError(t,a):console.error("React Router caught the following error during render",t)}render(){return this.state.error!==void 0?b.createElement(Ma.Provider,{value:this.props.routeContext},b.createElement(Dm.Provider,{value:this.state.error,children:this.props.component})):this.props.children}};function oz({routeContext:t,match:a,children:o}){let i=b.useContext(Vi);return i&&i.static&&i.staticContext&&(a.route.errorElement||a.route.ErrorBoundary)&&(i.staticContext._deepestRenderedBoundaryId=a.route.id),b.createElement(Ma.Provider,{value:t},o)}function iz(t,a=[],o=null,i=null,s=null){if(t==null){if(!o)return null;if(o.errors)t=o.matches;else if(a.length===0&&!o.initialized&&o.matches.length>0)t=o.matches;else return null}let u=t,f=o?.errors;if(f!=null){let g=u.findIndex(v=>v.route.id&&f?.[v.route.id]!==void 0);Ie(g>=0,`Could not find a matching route for errors on route IDs: ${Object.keys(f).join(",")}`),u=u.slice(0,Math.min(u.length,g+1))}let p=!1,m=-1;if(o)for(let g=0;g<u.length;g++){let v=u[g];if((v.route.HydrateFallback||v.route.hydrateFallbackElement)&&(m=g),v.route.id){let{loaderData:w,errors:E}=o,x=v.route.loader&&!w.hasOwnProperty(v.route.id)&&(!E||E[v.route.id]===void 0);if(v.route.lazy||x){p=!0,m>=0?u=u.slice(0,m+1):u=[u[0]];break}}}let h=o&&i?(g,v)=>{i(g,{location:o.location,params:o.matches?.[0]?.params??{},errorInfo:v})}:void 0;return u.reduceRight((g,v,w)=>{let E,x=!1,C=null,R=null;o&&(E=f&&v.route.id?f[v.route.id]:void 0,C=v.route.errorElement||az,p&&(m<0&&w===0?(cS("route-fallback",!1,"No `HydrateFallback` element provided to render during initial hydration"),x=!0,R=null):m===w&&(x=!0,R=v.route.hydrateFallbackElement||null)));let M=a.concat(u.slice(0,w+1)),z=()=>{let O;return E?O=C:x?O=R:v.route.Component?O=b.createElement(v.route.Component,null):v.route.element?O=v.route.element:O=g,b.createElement(oz,{match:v,routeContext:{outlet:g,matches:M,isDataRoute:o!=null},children:O})};return o&&(v.route.ErrorBoundary||v.route.errorElement||w===0)?b.createElement(rz,{location:o.location,revaliLine truncated
|
| Path: https://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Path: http://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 146
| Comment:
| /*"),`Route path "${t}" will be treated as if it were "${t.replace(/\*$/,"/*")}" because the \`*\` character must always follow a \`/\` in the pattern. To get rid of this warning, please change the route path to "${t.replace(/\*$/,"/*")}".`);let i=[],s="^"+t.replace(/\/*\*?$/,"").replace(/^\/*/
|
| Path: https://stockfill.lan.ddnsgeek.com:443/assets/index-DZWxa9kt.js
| Path: http://stockfill.lan.ddnsgeek.com:443/assets/index-DZWxa9kt.js
| Line number: 3
| Comment:
|
| //# sourceMappingURL=index-DZWxa9kt.js.map
|
| Path: https://stockfill.lan.ddnsgeek.com:443/assets/dexie-DvMqvjyc.js
| Path: http://stockfill.lan.ddnsgeek.com:443/assets/dexie-DvMqvjyc.js
| Line number: 4
| Comment:
|
| //# sourceMappingURL=dexie-DvMqvjyc.js.map
|
| Path: https://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Path: http://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 9
| Comment:
| /*"+cs(a,_n-1)+"*"+mc(t===47?t:Kn())}function t2(t){for(;!ns(Ha());)Kn();return cs(t,_n)}function e2(t){return Ob(Yu("",null,null,null,[""],t=Mb(t),0,[0],t))}function Yu(t,a,o,i,s,u,f,p,m){for(var h=0,g=0,v=f,w=0,E=0,x=0,C=1,R=1,M=1,z=0,O="",A=s,k=u,$=i,P=O;R;)switch(x=z,z=Kn()){case 40:if(x!=108&&bn(P,v-1)==58){Sp(P+=ve(Fu(z),"&","&\f"),"&\f")!=-1&&(M=-1);break}case 34:case 39:case 91:P+=Fu(z);break;case 9:case 10:case 13:case 32:P+=QC(x);break;case 92:P+=ZC(Gu()-1,7);continue;case 47:switch(Ha()){case 42:case 47:Nu(n2(JC(Kn(),Gu()),a,o),m);break;default:P+="/"}break;case 123*C:p[h++]=Pa(P)*M;case 125*C:case 59:case 0:switch(z){case 0:case 125:R=0;case 59+g:M==-1&&(P=ve(P,/\f/g,"")),E>0&&Pa(P)-v&&Nu(E>32?$v(P+";",i,o,v-1):$v(ve(P," ","")+";",i,o,v-2),m);break;case 59:P+=";";default:if(Nu($=Dv(P,a,o,h,g,s,p,O,A=[],k=[],v),u),z===123)if(g===0)Yu(P,a,$,$,A,u,v,p,k);else switch(w===99&&bn(P,3)===110?100:w){case 100:case 108:case 109:case 115:Yu(t,$,$,i&&Nu(Dv(t,$,$,0,0,s,p,O,s,A=[],v),k),s,k,v,p,i?A:k);break;default:Yu(P,$,$,$,[""],k,0,p,k)}}h=g=E=0,C=M=1,O=P="",v=f;break;case 58:v=1+Pa(P),E=x;default:if(C<1){if(z==123)--C;else if(z==125&&C++==0&&KC()==125)continue}switch(P+=mc(z),z*C){case 38:M=g>0?1:(P+="\f",-1);break;case 44:p[h++]=(Pa(P)-1)*M,M=1;break;case 64:Ha()===45&&(P+=Fu(Kn())),w=Ha(),g=v=Pa(O=P+=t2(Gu())),z++;break;case 45:x===45&&Pa(P)==2&&(C=0)}}return u}function Dv(t,a,o,i,s,u,f,p,m,h,g){for(var v=s-1,w=s===0?u:[""],E=Qp(w),x=0,C=0,R=0;x<i;++x)for(var M=0,z=es(t,v+1,v=qC(C=f[x])),O=t;M<E;++M)(O=Tb(C>0?w[M]+" "+z:ve(z,/&\f/g,w[M])))&&(m[R++]=O);return gc(t,a,o,s===0?Xp:p,m,h,g)}function n2(t,a,o){return gc(t,a,o,Eb,mc(XC()),es(t,2,-2),0)}function $v(t,a,o,i){return gc(t,a,o,Kp,es(t,0,i),es(t,i+1,-1),i)}function Di(t,a){for(var o="",i=Qp(t),s=0;s<i;s++)o+=a(t[s],s,t,a)||"";return o}function a2(t,a,o,i){switch(t.type){case VC:if(t.children.length)break;case IC:case Kp:return t.return=t.return||t.value;case Eb:return"";case wb:return t.return=t.value+"{"+Di(t.children,i)+"}";case Xp:t.value=t.props.join(",")}return Pa(o=Di(t.children,i))?t.return=t.value+"{"+o+"}":""}function r2(t){var a=Qp(t);return function(o,i,s,u){for(var f="",p=0;p<a;p++)f+=t[p](o,i,s,u)||"";return f}}function o2(t){return function(a){a.root||(a=a.return)&&t(a)}}function Ab(t){var a=Object.create(null);return function(o){return a[o]===void 0&&(a[o]=t(o)),a[o]}}var i2=function(a,o,i){for(var s=0,u=0;s=u,u=Ha(),s===38&&u===12&&(o[i]=1),!ns(u);)Kn();return cs(a,_n)},l2=function(a,o){var i=-1,s=44;do switch(ns(s)){case 0:s===38&&Ha()===12&&(o[i]=1),a[i]+=i2(_n-1,o,i);break;case 2:a[i]+=Fu(s);break;case 4:if(s===44){a[++i]=Ha()===58?"&\f":"",o[i]=a[i].length;break}default:a[i]+=mc(s)}while(s=Kn());return a},s2=function(a,o){return Ob(l2(Mb(a),o))},Nv=new WeakMap,u2=function(a){if(!(a.type!=="rule"||!a.parent||a.length<1)){for(var o=a.value,i=a.parent,s=a.column===i.column&&a.line===i.line;i.type!=="rule";)if(i=i.parent,!i)return;if(!(a.props.length===1&&o.charCodeAt(0)!==58&&!Nv.get(i))&&!s){Nv.set(a,!0);for(var u=[],f=s2(o,u),p=i.props,m=0,h=0;m<f.length;m++)for(var g=0;g<p.length;g++,h++)a.props[h]=u[m]?f[m].replace(/&\f/g,p[g]):p[g]+" "+f[m]}}},c2=function(a){if(a.type==="decl"){var o=a.value;o.charCodeAt(0)===108&&o.charCodeAt(2)===98&&(a.return="",a.value="")}};function zb(t,a){switch(FC(t,a)){case 5103:return ye+"print-"+t+t;case 5737:case 4201:case 3177:case 3433:case 1641:case 4457:case 2921:case 5572:case 6356:case 5844:case 3191:case 6645:case 3005:case 6391:case 5879:case 5623:case 6135:case 4599:case 4855:case 4215:case 6389:case 5109:case 5365:case 5621:case 3829:return ye+t+t;case 5349:case 4246:case 4810:case 6968:case 2756:return ye+t+nc+t+En+t+t;case 6828:case 4268:return ye+t+En+t+t;case 6165:return ye+t+En+"flex-"+t+t;case 5187:return ye+t+ve(t,/(\w+).+(:[^]+)/,ye+"box-$1$2"+En+"flex-$1$2")+t;case 5443:return ye+t+En+"flex-item-"+ve(t,/flex-|-self/,"")+t;case 4675:return ye+t+En+"flex-line-pack"+ve(t,/align-content|flex-|-self/,"")+t;case 5548:return ye+t+En+ve(t,"shrink","negative")+t;case 5292:return ye+t+En+ve(t,"basis","preferred-size")+t;case 6060:return ye+"box-"+ve(t,"-grow","")+ye+t+En+ve(t,"grow","positive")+t;case 4554:return ye+ve(t,/([^-])(transform)/g,"$1"+ye+"$2")+t;case 6187:return ve(ve(ve(t,/(zoom-|grab)/,ye+"$1"),/(image-set)/,ye+"$1"),t,"")+t;case 5495:case 3959:return ve(t,/(image-set\([^]*)/,ye+"$1$`$1");case 4968:return ve(ve(t,/(.+:)(flex-)?(.*)/,ye+"box-pack:$3"+En+"flex-pack:$3"),/s.+-b[^;]+/,"justify")+ye+t+t;case 4095:case 3583:case 4068:case 2532:return ve(t,/(.+)-inline(.+)/,ye+"$1$2")+t;case 8116:case 7059:case 5753:case 5535:case 5445:case 5701:case 4933:case 4677:case 5533:case 5789:case 5021:case 4765:if(Pa(t)-1-a>6)switch(bn(t,a+1)){case 109:if(bn(t,a+4)!==45)break;case 102:return ve(t,/(.+:)(.+)-([^]+)/,"$1"+ye+"$2-$3$1"+nc+(bn(t,a+3)==108?"$3":"$2-$3"))+t;case 115:return~Sp(t,"stretch")?zb(ve(t,"stretch","fill-available"),a)+t:t}break;case 4949:if(bn(t,a+1)!==115)breaLine truncated
@@ -272,51 +260,78 @@ PORT STATE SERVICE REASON VERSION
| position: absolute;
| /* @noflip */
|
| Path: https://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Path: http://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 149
| Comment:
|
|_ //# sourceMappingURL=vendor-2fCQKpJa.js.map
| http-sitemap-generator:
| Directory structure:
| /
| Other: 1; json: 1
| /assets/
| Other: 2; js: 3
| Longest directory structure:
| Depth: 1
| Dir: /assets/
| Total files found (by extension):
|_ Other: 3; js: 3; json: 1
| http-php-version: Logo query returned unknown hash 28f40b1513bb073e82914945b1920905
|_Credits query returned unknown hash 28f40b1513bb073e82914945b1920905
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
| compressors:
| NULL
| cipher preference: client
| warnings:
| Key exchange (secp256r1) of lower strength than certificate key
| TLSv1.3:
| ciphers:
| TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
| cipher preference: server
|_ least strength: A
|_http-majordomo2-dir-traversal: ERROR: Script execution failed (use -d to debug)
|_http-referer-checker: Couldn't find any cross-domain scripts.
| //# sourceMappingURL=vendor-2fCQKpJa.js.map
|
| Path: http://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 146
| Comment:
| /*"?"(.*)$":"(?:\\/(.+)|\\/*)$"):o?s+="\\/*$":t!==""&&t!=="/"&&(s+="(?:(?=\\/|$))"),[new RegExp(s,a?void 0:"i"),i]}function _3(t){try{return t.split("/").map(a=>decodeURIComponent(a).replace(/\//g,"%2F")).join("/")}catch(a){return Ta(!1,`The URL path "${t}" could not be decoded because it is a malformed URL segment. This is probably due to a bad percent encoding (${a}).`),t}}function xr(t,a){if(a==="/")return t;if(!t.toLowerCase().startsWith(a.toLowerCase()))return null;let o=a.endsWith("/")?a.length-1:a.length,i=t.charAt(o);return i&&i!=="/"?null:t.slice(o)||"/"}var j3=/^(?:[a-z][a-z0-9+.-]*:|\/\/)/i,U3=t=>j3.test(t);function H3(t,a="/"){let{pathname:o,search:i="",hash:s=""}=typeof t=="string"?Ii(t):t,u;if(o)if(U3(o))u=o;else{if(o.includes("//")){let f=o;o=o.replace(/\/\/+/g,"/"),Ta(!1,`Pathnames cannot have embedded double slashes - normalizing ${f} -> ${o}`)}o.startsWith("/")?u=fb(o.substring(1),"/"):u=fb(o,a)}else u=a;return{pathname:u,search:q3(i),hash:G3(s)}}function fb(t,a){let o=a.replace(/\/+$/,"").split("/");return t.split("/").forEach(s=>{s===".."?o.length>1&&o.pop():s!=="."&&o.push(s)}),o.length>1?o.join("/"):"/"}function gp(t,a,o,i){return`Cannot include a '${t}' character in a manually specified \`to.${a}\` field [${JSON.stringify(i)}]. Please separate it out to the \`to.${o}\` field. Alternatively you may provide the full path as a string in <Link to="..."> and the router will parse it for you.`}function I3(t){return t.filter((a,o)=>o===0||a.route.path&&a.route.path.length>0)}function aS(t){let a=I3(t);return a.map((o,i)=>i===a.length-1?o.pathname:o.pathnameBase)}function rS(t,a,o,i=!1){let s;typeof t=="string"?s=Ii(t):(s={...t},Ie(!s.pathname||!s.pathname.includes("?"),gp("?","pathname","search",s)),Ie(!s.pathname||!s.pathname.includes("#"),gp("#","pathname","hash",s)),Ie(!s.search||!s.search.includes("#"),gp("#","search","hash",s)));let u=t===""||s.pathname==="",f=u?"/":s.pathname,p;if(f==null)p=o;else{let v=a.length-1;if(!i&&f.startsWith("..")){let w=f.split("/");for(;w[0]==="..";)w.shift(),v-=1;s.pathname=w.join("/")}p=v>=0?a[v]:"/"}let m=H3(s,p),h=f&&f!=="/"&&f.endsWith("/"),g=(u||f===".")&&o.endsWith("/");return!m.pathname.endsWith("/")&&(h||g)&&(m.pathname+="/"),m}var yr=t=>t.join("/").replace(/\/\/+/g,"/"),V3=t=>t.replace(/\/+$/,"").replace(/^\/*/
|
| Path: http://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 148
| Comment:
| /*`}">.`)}let w=jo(),E;if(a){let z=typeof a=="string"?Ii(a):a;Ie(g==="/"||z.pathname?.startsWith(g),`When overriding the location using \`<Routes location>\` or \`useRoutes(routes, location)\`, the location pathname must begin with the portion of the URL pathname that was matched by all parent routes. The current pathname base is "${g}" but pathname "${z.pathname}" was given in the \`location\` prop.`),E=z}else E=w;let x=E.pathname||"/",C=x;if(g!=="/"){let z=g.replace(/^\//,"").split("/");C="/"+x.replace(/^\//,"").split("/").slice(z.length).join("/")}let R=tS(t,{pathname:C});Ta(v||R!=null,`No routes matched location "${E.pathname}${E.search}${E.hash}" `),Ta(R==null||R[R.length-1].route.element!==void 0||R[R.length-1].route.Component!==void 0||R[R.length-1].route.lazy!==void 0,`Matched leaf route at location "${E.pathname}${E.search}${E.hash}" does not have an element or Component. This means it will render an <Outlet /> with a null value by default resulting in an "empty" page.`);let M=iz(R&&R.map(z=>Object.assign({},z,{params:Object.assign({},m,z.params),pathname:yr([g,u.encodeLocation?u.encodeLocation(z.pathname.replace(/\?/g,"%3F").replace(/#/g,"%23")).pathname:z.pathname]),pathnameBase:z.pathnameBase==="/"?g:yr([g,u.encodeLocation?u.encodeLocation(z.pathnameBase.replace(/\?/g,"%3F").replace(/#/g,"%23")).pathname:z.pathnameBase])})),f,o,i,s);return a&&M?b.createElement(bs.Provider,{value:{location:{pathname:"/",search:"",hash:"",state:null,key:"default",...E},navigationType:"POP"}},M):M}function nz(){let t=fz(),a=F3(t)?`${t.status} ${t.statusText}`:t instanceof Error?t.message:JSON.stringify(t),o=t instanceof Error?t.stack:null,i="rgba(200,200,200, 0.5)",s={padding:"0.5rem",backgroundColor:i},u={padding:"2px 4px",backgroundColor:i},f=null;return console.error("Error handled by React Router default ErrorBoundary:",t),f=b.createElement(b.Fragment,null,b.createElement("p",null,"\xF0\x9F\x92\xBF Hey developer \xF0\x9F\x91\x8B"),b.createElement("p",null,"You can provide a way better UX than this when your app throws errors by providing your own ",b.createElement("code",{style:u},"ErrorBoundary")," or"," ",b.createElement("code",{style:u},"errorElement")," prop on your route.")),b.createElement(b.Fragment,null,b.createElement("h2",null,"Unexpected Application Error!"),b.createElement("h3",{style:{fontStyle:"italic"}},a),o?b.createElement("pre",{style:s},o):null,f)}var az=b.createElement(nz,null),rz=class extends b.Component{constructor(t){super(t),this.state={location:t.location,revalidation:t.revalidation,error:t.error}}static getDerivedStateFromError(t){return{error:t}}static getDerivedStateFromProps(t,a){return a.location!==t.location||a.revalidation!=="idle"&&t.revalidation==="idle"?{error:t.error,location:t.location,revalidation:t.revalidation}:{error:t.error!==void 0?t.error:a.error,location:a.location,revalidation:t.revalidation||a.revalidation}}componentDidCatch(t,a){this.props.onError?this.props.onError(t,a):console.error("React Router caught the following error during render",t)}render(){return this.state.error!==void 0?b.createElement(Ma.Provider,{value:this.props.routeContext},b.createElement(Dm.Provider,{value:this.state.error,children:this.props.component})):this.props.children}};function oz({routeContext:t,match:a,children:o}){let i=b.useContext(Vi);return i&&i.static&&i.staticContext&&(a.route.errorElement||a.route.ErrorBoundary)&&(i.staticContext._deepestRenderedBoundaryId=a.route.id),b.createElement(Ma.Provider,{value:t},o)}function iz(t,a=[],o=null,i=null,s=null){if(t==null){if(!o)return null;if(o.errors)t=o.matches;else if(a.length===0&&!o.initialized&&o.matches.length>0)t=o.matches;else return null}let u=t,f=o?.errors;if(f!=null){let g=u.findIndex(v=>v.route.id&&f?.[v.route.id]!==void 0);Ie(g>=0,`Could not find a matching route for errors on route IDs: ${Object.keys(f).join(",")}`),u=u.slice(0,Math.min(u.length,g+1))}let p=!1,m=-1;if(o)for(let g=0;g<u.length;g++){let v=u[g];if((v.route.HydrateFallback||v.route.hydrateFallbackElement)&&(m=g),v.route.id){let{loaderData:w,errors:E}=o,x=v.route.loader&&!w.hasOwnProperty(v.route.id)&&(!E||E[v.route.id]===void 0);if(v.route.lazy||x){p=!0,m>=0?u=u.slice(0,m+1):u=[u[0]];break}}}let h=o&&i?(g,v)=>{i(g,{location:o.location,params:o.matches?.[0]?.params??{},errorInfo:v})}:void 0;return u.reduceRight((g,v,w)=>{let E,x=!1,C=null,R=null;o&&(E=f&&v.route.id?f[v.route.id]:void 0,C=v.route.errorElement||az,p&&(m<0&&w===0?(cS("route-fallback",!1,"No `HydrateFallback` element provided to render during initial hydration"),x=!0,R=null):m===w&&(x=!0,R=v.route.hydrateFallbackElement||null)));let M=a.concat(u.slice(0,w+1)),z=()=>{let O;return E?O=C:x?O=R:v.route.Component?O=b.createElement(v.route.Component,null):v.route.element?O=v.route.element:O=g,b.createElement(oz,{match:v,routeContext:{outlet:g,matches:M,isDataRoute:o!=null},children:O})};return o&&(v.route.ErrorBoundary||v.route.errorElement||w===0)?b.createElement(rz,{location:o.location,revaliLine truncated
|
| Path: http://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 20
| Comment:
|_ // handle system mode
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-malware-host: false
|_http-vuln-cve2017-1001000: ERROR: Script execution failed (use -d to debug)
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
| ssl-cert: Subject: commonName=stockfill.lan.ddnsgeek.com
| Subject Alternative Name: DNS:stockfill.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-03-22T09:47:15
| Not valid after: 2026-06-20T09:47:14
| MD5: 9d58 137a 2924 26ef f9ca b56e d3f1 510b
| SHA-1: 3ea5 c9a0 5fdd 6b57 78ec 626f 0ba7 3928 aecc 1948
| SHA-256: 4825 5fb5 3b5f ed46 46ca 1163 227d c1d1 cd58 8935 8d3e 9ed1 f0c8 467d e434 ec66
| -----BEGIN CERTIFICATE-----
| MIIGDzCCBPegAwIBAgISBSCym2uC+hYb1Zc3qCjloXn/MA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwMzIyMDk0NzE1WhcNMjYwNjIwMDk0NzE0WjAlMSMwIQYDVQQD
| ExpzdG9ja2ZpbGwubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
| ggIPADCCAgoCggIBAMkuGHd6QoSNHjkX2/DxCURKhM2DBoA4pytDrL4q3UzA1sVh
| pxGljFi5MNjqLbW5P7aHDXHo08Ecb8XczJFcURIGHObNKYMBqIZAV9MvMCEZ1SvQ
| AlkBIDtoxwjd/BnOxfrkn9JNKCdQrvzvbLEUPw/dH9n9lbVY3aNtoBs+Epk4nwxc
| MOxgkAtUAgkywhSDk4FyNxq2MA73DA0kVXwydY1yfhI7Y8y5+7HiDxYr7J/Tsl7F
| QQazayYkTMeae6OiARc9XYQYBsn2GJMzZCWHErXSIO7SEUq4ih3AvlBQASRqMFH5
| bgBkqKWQ8ilwUIXXY0K7mZaLLIx/s4ScV2q4AHqxvivWnLu+Fv3lcRDTWq52T9qo
| ZOcwnBBAgj3A1inOXw2yGZN/KZrxoHQsgkY6MUXcMVEdHKsCJJX2iqm4q+BFFHiV
| fBpqJUpspv8GGuFHCDjSdvsMZhMm/7i3AjXBZUieNqnFvPEewntw6NqfjAF5L/V5
| XrJXChOc80RGEN6rE2Y14Yxi0StwgRQwVNFYw4XBwhUJPsBbs9Sjvrg38hdzTbXh
| qvkEKB7ickYcauEMa4gjc1xM2LObg8tkWdOyEMRGANwHMIgIB9Yj9H7hgHW/U2ts
| gnrjhNJVPlWPyluyOmpvsL/2NF3yEEdmaYJy98WEUa/NNeH91tNjVc5todYxAgMB
| AAGjggIpMIICJTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEw
| DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU+yISCK1nywudpGX6q9z3xXkf2CUwHwYD
| VR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMG
| CCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAlBgNVHREEHjAcghpz
| dG9ja2ZpbGwubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAv
| BgNVHR8EKDAmMCSgIqAghh5odHRwOi8vcjEzLmMubGVuY3Iub3JnLzEyOC5jcmww
| ggEMBgorBgEEAdZ5AgQCBIH9BIH6APgAdgAWgy2r8KklDw/wOqVF/8i/yCPQh0v2
| BCkn+OcfMxP1+gAAAZ0VJp8HAAAEAwBHMEUCIQCK0OoRf+dUKEXKGEd+eW+m2V41
| qkDgZjaqzZjtrYvMgAIgJ1rcjrLxvuAlBzF0FfEjVVpudI9RoYXDlb9pQMafIzkA
| fgBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDRc4CeGBjrOgAAAZ0VJqAnAAgAAAUA
| A/bFjQQDAEcwRQIhAImeNgcMfLu9dxqVvvKk7MTJ/ZTswiLxMZeh5A9185s2AiBD
| msLUiD7sIyCrYnSKMGUjQQfcvSOd9Rjkdu5nlwGlLDANBgkqhkiG9w0BAQsFAAOC
| AQEACDWH5UifJkKtK+4iaunh6JhtkMzBhj2k7d3SCgbjDhpXo43pz2X+uCs/RNcL
| I98aVmxGwBU3qXK0WVxfGFSof/xlEYaklbGFO7zsI4KW1R/drb0M4PJoxVf999us
| 98/q3Sn6jHCzLSlsBGxSHcFIfBw5Et+DLSYrAzIrlzEMfgzPDyy+aqyrAcASqFRG
| keqdDnpieOgxMTvV1SKRBayAW272i1bTiVgCr0eknXh9OGaJ3ZWsuPjekLR176Vs
| 5Rd8w3xMbQD2g/2jPocCj/XkEQljNwVBNDxtekl4vkRlvgs+FDqZE3ppHuuJ2wmd
| OAAxNsovC6BHaQgaRRfMSGuOyw==
|_-----END CERTIFICATE-----
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
| http-vuln-cve2010-0738:
|_ /jmx-console/: Authentication was not required
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 10:02:11 2026 -- 1 IP address (1 host up) scanned in 144.55 seconds
# Nmap done at Tue Apr 14 04:31:47 2026 -- 1 IP address (1 host up) scanned in 536.44 seconds
@@ -68,7 +68,7 @@ HTTP Headers:
Accept-Ranges: bytes
Content-Length: 523
Content-Type: text/html
Date: Sun, 05 Apr 2026 10:07:30 GMT
Date: Tue, 14 Apr 2026 04:29:53 GMT
Etag: "69c9ef96-20b"
Last-Modified: Mon, 30 Mar 2026 03:35:50 GMT
Server: nginx/1.27.5
@@ -1,5 +1,5 @@
Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025
OpenSSL 3.5.5 27 Jan 2026
Connected to 167.179.167.166
@@ -1,46 +1,64 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.98 scan initiated Sun Apr 5 09:59:47 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml stockfill.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml stockfill.lan.ddnsgeek.com" start="1775383187" startstr="Sun Apr 5 09:59:47 2026" version="7.98" xmloutputversion="1.05">
<!-- Nmap 7.99 scan initiated Tue Apr 14 04:22:52 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml stockfill.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml stockfill.lan.ddnsgeek.com" start="1776140572" startstr="Tue Apr 14 04:22:52 2026" version="7.99" xmloutputversion="1.05">
<scaninfo type="syn" protocol="tcp" numservices="1" services="443"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1775383190"/>
<taskend task="NSE" time="1775383190"/>
<taskbegin task="NSE" time="1775383190"/>
<taskend task="NSE" time="1775383190"/>
<taskbegin task="NSE" time="1775383190"/>
<taskend task="NSE" time="1775383190"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775383190"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775383191"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775383191"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775383191"/>
<taskbegin task="SYN Stealth Scan" time="1775383191"/>
<taskend task="SYN Stealth Scan" time="1775383191" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1775383193"/>
<taskend task="Service scan" time="1775383206" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1775383206"/>
<taskprogress task="NSE" time="1775383237" percent="86.32" remaining="5" etc="1775383242"/>
<taskprogress task="NSE" time="1775383269" percent="87.95" remaining="9" etc="1775383278"/>
<taskprogress task="NSE" time="1775383299" percent="99.03" remaining="1" etc="1775383300"/>
<taskend task="NSE" time="1775383326"/>
<taskbegin task="NSE" time="1775383326"/>
<taskend task="NSE" time="1775383331"/>
<taskbegin task="NSE" time="1775383331"/>
<taskend task="NSE" time="1775383331"/>
<host starttime="1775383191" endtime="1775383331"><status state="up" reason="user-set" reason_ttl="0"/>
<taskbegin task="NSE" time="1776140582"/>
<taskend task="NSE" time="1776140582"/>
<taskbegin task="NSE" time="1776140582"/>
<taskend task="NSE" time="1776140582"/>
<taskbegin task="NSE" time="1776140582"/>
<taskend task="NSE" time="1776140582"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776140582"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776140582"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776140582"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776140582"/>
<taskbegin task="SYN Stealth Scan" time="1776140582"/>
<taskend task="SYN Stealth Scan" time="1776140583" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1776140586"/>
<taskend task="Service scan" time="1776140600" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1776140600"/>
<taskprogress task="NSE" time="1776140631" percent="41.24" remaining="45" etc="1776140675"/>
<taskprogress task="NSE" time="1776140661" percent="75.00" remaining="21" etc="1776140681"/>
<taskprogress task="NSE" time="1776140695" percent="85.34" remaining="17" etc="1776140711"/>
<taskprogress task="NSE" time="1776140725" percent="85.34" remaining="22" etc="1776140746"/>
<taskprogress task="NSE" time="1776140903" percent="86.64" remaining="47" etc="1776140950"/>
<taskprogress task="NSE" time="1776140939" percent="88.60" remaining="44" etc="1776140983"/>
<taskprogress task="NSE" time="1776140972" percent="88.60" remaining="48" etc="1776141020"/>
<taskprogress task="NSE" time="1776141005" percent="88.93" remaining="51" etc="1776141055"/>
<taskprogress task="NSE" time="1776141036" percent="97.73" remaining="11" etc="1776141046"/>
<taskprogress task="NSE" time="1776141066" percent="99.35" remaining="4" etc="1776141069"/>
<taskprogress task="NSE" time="1776141096" percent="99.68" remaining="2" etc="1776141098"/>
<taskend task="NSE" time="1776141096"/>
<taskbegin task="NSE" time="1776141096"/>
<taskend task="NSE" time="1776141106"/>
<taskbegin task="NSE" time="1776141106"/>
<taskend task="NSE" time="1776141106"/>
<host starttime="1776140583" endtime="1776141106"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="167.179.167.166" addrtype="ipv4"/>
<hostnames>
<hostname name="stockfill.lan.ddnsgeek.com" type="user"/>
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
</hostnames>
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-chrono" output="Request times for /; avg: 6591.86ms; min: 2398.18ms; max: 10878.80ms"/><script id="http-feed" output="Couldn&apos;t find any feeds."/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/><script id="http-errors" output="Couldn&apos;t find any error pages."/><script id="http-favicon" output="Unknown favicon MD5: 28F40B1513BB073E82914945B1920905"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-headers" output="&#xa; Accept-Ranges: bytes&#xa; Content-Length: 523&#xa; Content-Type: text/html&#xa; Date: Sun, 05 Apr 2026 10:00:06 GMT&#xa; Etag: &quot;69c9ef96-20b&quot;&#xa; Last-Modified: Mon, 30 Mar 2026 03:35:50 GMT&#xa; Server: nginx/1.27.5&#xa; Strict-Transport-Security: max-age=15552000; includeSubDomains; preload&#xa; X-Content-Type-Options: nosniff&#xa; X-Frame-Options: SAMEORIGIN&#xa; X-Xss-Protection: 1; mode=block&#xa; Connection: close&#xa; &#xa; (Request type: HEAD)&#xa;"/><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="http-server-header" output="nginx/1.27.5"><elem>nginx/1.27.5</elem>
</script><script id="http-methods" output="&#xa; Supported Methods: GET HEAD"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-malware-host" output="Host appears to be clean"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-headers" output="&#xa; Accept-Ranges: bytes&#xa; Content-Length: 523&#xa; Content-Type: text/html&#xa; Date: Tue, 14 Apr 2026 04:24:29 GMT&#xa; Etag: &quot;69c9ef96-20b&quot;&#xa; Last-Modified: Mon, 30 Mar 2026 03:35:50 GMT&#xa; Server: nginx/1.27.5&#xa; Strict-Transport-Security: max-age=15552000; includeSubDomains; preload&#xa; X-Content-Type-Options: nosniff&#xa; X-Frame-Options: SAMEORIGIN&#xa; X-Xss-Protection: 1; mode=block&#xa; Connection: close&#xa; &#xa; (Request type: HEAD)&#xa;"/><script id="http-sql-injection" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-security-headers" output="&#xa; Strict_Transport_Security: &#xa; Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload&#xa; X_Frame_Options: &#xa; Header: X-Frame-Options: SAMEORIGIN&#xa; Description: The browser must not display this content in any frame from a page of different origin than the content itself.&#xa; X_XSS_Protection: &#xa; Header: X-XSS-Protection: 1; mode=block&#xa; Description: The browser will prevent the rendering of the page when XSS is detected.&#xa; X_Content_Type_Options: &#xa; Header: X-Content-Type-Options: nosniff&#xa; Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
</table>
</script><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/><script id="http-vuln-cve2011-3192" output="&#xa; VULNERABLE:&#xa; Apache byterange filter DoS&#xa; State: VULNERABLE&#xa; IDs: BID:49303 CVE:CVE-2011-3192&#xa; The Apache web server is vulnerable to a denial of service attack when numerous&#xa; overlapping byte ranges are requested.&#xa; Disclosure date: 2011-08-19&#xa; References:&#xa; https://www.tenable.com/plugins/nessus/55976&#xa; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192&#xa; https://seclists.org/fulldisclosure/2011/Aug/175&#xa; https://www.securityfocus.com/bid/49303&#xa;"><table key="CVE-2011-3192">
<table key="X_Frame_Options">
<elem>Header: X-Frame-Options: SAMEORIGIN</elem>
<elem>Description: The browser must not display this content in any frame from a page of different origin than the content itself.</elem>
</table>
<table key="X_XSS_Protection">
<elem>Header: X-XSS-Protection: 1; mode=block</elem>
<elem>Description: The browser will prevent the rendering of the page when XSS is detected.</elem>
</table>
<table key="X_Content_Type_Options">
<elem>Header: X-Content-Type-Options: nosniff</elem>
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
</table>
</script><script id="http-vuln-cve2011-3192" output="&#xa; VULNERABLE:&#xa; Apache byterange filter DoS&#xa; State: VULNERABLE&#xa; IDs: BID:49303 CVE:CVE-2011-3192&#xa; The Apache web server is vulnerable to a denial of service attack when numerous&#xa; overlapping byte ranges are requested.&#xa; Disclosure date: 2011-08-19&#xa; References:&#xa; https://www.tenable.com/plugins/nessus/55976&#xa; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192&#xa; https://seclists.org/fulldisclosure/2011/Aug/175&#xa; https://www.securityfocus.com/bid/49303&#xa;"><table key="CVE-2011-3192">
<elem key="title">Apache byterange filter DoS</elem>
<elem key="state">VULNERABLE</elem>
<table key="ids">
@@ -52,9 +70,9 @@
</table>
<table key="dates">
<table key="disclosure">
<elem key="month">08</elem>
<elem key="day">19</elem>
<elem key="year">2011</elem>
<elem key="day">19</elem>
<elem key="month">08</elem>
</table>
</table>
<elem key="disclosure">2011-08-19</elem>
@@ -65,10 +83,13 @@
<elem>https://www.securityfocus.com/bid/49303</elem>
</table>
</table>
</script><script id="http-date" output="Sun, 05 Apr 2026 10:00:08 GMT; -3s from local time."><elem key="date">2026-04-05T10:00:08+00:00</elem>
<elem key="delta">-3.0</elem>
</script><script id="http-useragent-tester" output="&#xa; Status for browser useragent: 200&#xa; Allowed User Agents: &#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; PHP/&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34&#xa; Change in Status Code: &#xa; libwww: 404&#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html): 404"><elem key="Status for browser useragent">200</elem>
</script><script id="http-methods" output="&#xa; Supported Methods: GET HEAD"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
</table>
</script><script id="http-errors" output="Couldn&apos;t find any error pages."/><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-unsafe-output-escaping" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-rfi-spider" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-feed" output="Couldn&apos;t find any feeds."/><script id="http-traceroute" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-useragent-tester" output="&#xa; Status for browser useragent: 200&#xa; Allowed User Agents: &#xa; libwww&#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; PHP/&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34&#xa; Change in Status Code: &#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html): 404"><elem key="Status for browser useragent">200</elem>
<table key="Allowed User Agents">
<elem>libwww</elem>
<elem>lwp-trivial</elem>
<elem>libcurl-agent/1.0</elem>
<elem>PHP/</elem>
@@ -86,25 +107,79 @@
<elem>WWW-Mechanize/1.34</elem>
</table>
<table key="Change in Status Code">
<elem key="libwww">404</elem>
<elem key="Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)">404</elem>
</table>
</script><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-security-headers" output="&#xa; Strict_Transport_Security: &#xa; Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload&#xa; X_Frame_Options: &#xa; Header: X-Frame-Options: SAMEORIGIN&#xa; Description: The browser must not display this content in any frame from a page of different origin than the content itself.&#xa; X_XSS_Protection: &#xa; Header: X-XSS-Protection: 1; mode=block&#xa; Description: The browser will prevent the rendering of the page when XSS is detected.&#xa; X_Content_Type_Options: &#xa; Header: X-Content-Type-Options: nosniff&#xa; Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
</script><script id="http-server-header" output="nginx/1.27.5"><elem>nginx/1.27.5</elem>
</script><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="http-default-accounts" output="&#xa; [Arris 2307] at /logo_t.gif&#xa; &lt;blank&gt;:&lt;blank&gt;&#xa;"><table key="Arris 2307">
<elem key="path">/logo_t.gif</elem>
<table key="credentials">
<table>
<elem key="username"></elem>
<elem key="password"></elem>
</table>
<table key="X_Frame_Options">
<elem>Header: X-Frame-Options: SAMEORIGIN</elem>
<elem>Description: The browser must not display this content in any frame from a page of different origin than the content itself.</elem>
</table>
<table key="X_XSS_Protection">
<elem>Header: X-XSS-Protection: 1; mode=block</elem>
<elem>Description: The browser will prevent the rendering of the page when XSS is detected.</elem>
</table>
<table key="X_Content_Type_Options">
<elem>Header: X-Content-Type-Options: nosniff</elem>
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
</script><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-trane-info" output="Problem with XML parsing of /evox/about"/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/><script id="http-date" output="Tue, 14 Apr 2026 04:24:43 GMT; 0s from local time."><elem key="date">2026-04-14T04:24:43+00:00</elem>
<elem key="delta">0.0</elem>
</script><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-php-version" output="Logo query returned unknown hash 28f40b1513bb073e82914945b1920905&#xa;Credits query returned unknown hash 28f40b1513bb073e82914945b1920905"/><script id="http-chrono" output="Request times for /; avg: 32912.25ms; min: 2204.00ms; max: 56226.97ms"/><script id="http-favicon" output="Unknown favicon MD5: 28F40B1513BB073E82914945B1920905"/><script id="http-vhosts" output="&#xa;auth.lan.ddnsgeek.com : 200&#xa;127 names had status 404"/><script id="ssl-enum-ciphers" output="&#xa; TLSv1.2: &#xa; ciphers: &#xa; TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A&#xa; compressors: &#xa; NULL&#xa; cipher preference: client&#xa; warnings: &#xa; Key exchange (secp256r1) of lower strength than certificate key&#xa; TLSv1.3: &#xa; ciphers: &#xa; TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A&#xa; cipher preference: server&#xa; least strength: A"><table key="TLSv1.2">
<table key="ciphers">
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
</table>
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-vhosts" output="&#xa;auth.lan.ddnsgeek.com : 200&#xa;127 names had status 404"/><script id="ssl-cert" output="Subject: commonName=stockfill.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:stockfill.lan.ddnsgeek.com&#xa;Issuer: commonName=R13/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-03-22T09:47:15&#xa;Not valid after: 2026-06-20T09:47:14&#xa;MD5: 9d58 137a 2924 26ef f9ca b56e d3f1 510b&#xa;SHA-1: 3ea5 c9a0 5fdd 6b57 78ec 626f 0ba7 3928 aecc 1948&#xa;SHA-256: 4825 5fb5 3b5f ed46 46ca 1163 227d c1d1 cd58 8935 8d3e 9ed1 f0c8 467d e434 ec66&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDzCCBPegAwIBAgISBSCym2uC+hYb1Zc3qCjloXn/MA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwMzIyMDk0NzE1WhcNMjYwNjIwMDk0NzE0WjAlMSMwIQYDVQQD&#xa;ExpzdG9ja2ZpbGwubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD&#xa;ggIPADCCAgoCggIBAMkuGHd6QoSNHjkX2/DxCURKhM2DBoA4pytDrL4q3UzA1sVh&#xa;pxGljFi5MNjqLbW5P7aHDXHo08Ecb8XczJFcURIGHObNKYMBqIZAV9MvMCEZ1SvQ&#xa;AlkBIDtoxwjd/BnOxfrkn9JNKCdQrvzvbLEUPw/dH9n9lbVY3aNtoBs+Epk4nwxc&#xa;MOxgkAtUAgkywhSDk4FyNxq2MA73DA0kVXwydY1yfhI7Y8y5+7HiDxYr7J/Tsl7F&#xa;QQazayYkTMeae6OiARc9XYQYBsn2GJMzZCWHErXSIO7SEUq4ih3AvlBQASRqMFH5&#xa;bgBkqKWQ8ilwUIXXY0K7mZaLLIx/s4ScV2q4AHqxvivWnLu+Fv3lcRDTWq52T9qo&#xa;ZOcwnBBAgj3A1inOXw2yGZN/KZrxoHQsgkY6MUXcMVEdHKsCJJX2iqm4q+BFFHiV&#xa;fBpqJUpspv8GGuFHCDjSdvsMZhMm/7i3AjXBZUieNqnFvPEewntw6NqfjAF5L/V5&#xa;XrJXChOc80RGEN6rE2Y14Yxi0StwgRQwVNFYw4XBwhUJPsBbs9Sjvrg38hdzTbXh&#xa;qvkEKB7ickYcauEMa4gjc1xM2LObg8tkWdOyEMRGANwHMIgIB9Yj9H7hgHW/U2ts&#xa;gnrjhNJVPlWPyluyOmpvsL/2NF3yEEdmaYJy98WEUa/NNeH91tNjVc5todYxAgMB&#xa;AAGjggIpMIICJTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEw&#xa;DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU+yISCK1nywudpGX6q9z3xXkf2CUwHwYD&#xa;VR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMG&#xa;CCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAlBgNVHREEHjAcghpz&#xa;dG9ja2ZpbGwubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAv&#xa;BgNVHR8EKDAmMCSgIqAghh5odHRwOi8vcjEzLmMubGVuY3Iub3JnLzEyOC5jcmww&#xa;ggEMBgorBgEEAdZ5AgQCBIH9BIH6APgAdgAWgy2r8KklDw/wOqVF/8i/yCPQh0v2&#xa;BCkn+OcfMxP1+gAAAZ0VJp8HAAAEAwBHMEUCIQCK0OoRf+dUKEXKGEd+eW+m2V41&#xa;qkDgZjaqzZjtrYvMgAIgJ1rcjrLxvuAlBzF0FfEjVVpudI9RoYXDlb9pQMafIzkA&#xa;fgBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDRc4CeGBjrOgAAAZ0VJqAnAAgAAAUA&#xa;A/bFjQQDAEcwRQIhAImeNgcMfLu9dxqVvvKk7MTJ/ZTswiLxMZeh5A9185s2AiBD&#xa;msLUiD7sIyCrYnSKMGUjQQfcvSOd9Rjkdu5nlwGlLDANBgkqhkiG9w0BAQsFAAOC&#xa;AQEACDWH5UifJkKtK+4iaunh6JhtkMzBhj2k7d3SCgbjDhpXo43pz2X+uCs/RNcL&#xa;I98aVmxGwBU3qXK0WVxfGFSof/xlEYaklbGFO7zsI4KW1R/drb0M4PJoxVf999us&#xa;98/q3Sn6jHCzLSlsBGxSHcFIfBw5Et+DLSYrAzIrlzEMfgzPDyy+aqyrAcASqFRG&#xa;keqdDnpieOgxMTvV1SKRBayAW272i1bTiVgCr0eknXh9OGaJ3ZWsuPjekLR176Vs&#xa;5Rd8w3xMbQD2g/2jPocCj/XkEQljNwVBNDxtekl4vkRlvgs+FDqZE3ppHuuJ2wmd&#xa;OAAxNsovC6BHaQgaRRfMSGuOyw==&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256</elem>
</table>
</table>
<table key="compressors">
<elem>NULL</elem>
</table>
<elem key="cipher preference">client</elem>
<table key="warnings">
<elem>Key exchange (secp256r1) of lower strength than certificate key</elem>
</table>
</table>
<table key="TLSv1.3">
<table key="ciphers">
<table>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_AKE_WITH_AES_128_GCM_SHA256</elem>
</table>
<table>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_AKE_WITH_AES_256_GCM_SHA384</elem>
</table>
<table>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="strength">A</elem>
<elem key="name">TLS_AKE_WITH_CHACHA20_POLY1305_SHA256</elem>
</table>
</table>
<elem key="cipher preference">server</elem>
</table>
<elem key="least strength">A</elem>
</script><script id="http-cakephp-version" output="Version of codebase: 1.1.x, 1.2.x&#xa;Version of icons: 1.3.x&#xa;Default stylesheet has an unknown hash: 28f40b1513bb073e82914945b1920905"/><script id="http-majordomo2-dir-traversal" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-waf-detect" output="IDS/IPS/WAF detected:&#xa;stockfill.lan.ddnsgeek.com:443/?p4yl04d3=&lt;script&gt;alert(document.cookie)&lt;/script&gt;"/><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; /&#xa; Other: 1; json: 1&#xa; /assets/&#xa; Other: 2; js: 3&#xa; Longest directory structure:&#xa; Depth: 1&#xa; Dir: /assets/&#xa; Total files found (by extension):&#xa; Other: 3; js: 3; json: 1&#xa;"/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/><script id="http-comments-displayer" output="&#xa;Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=stockfill.lan.ddnsgeek.com&#xa; &#xa; Path: http://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js&#xa; Line number: 146&#xa; Comment: &#xa; /*&quot;),`Route path &quot;${t}&quot; will be treated as if it were &quot;${t.replace(/\*$/,&quot;/*&quot;)}&quot; because the \`*\` character must always follow a \`/\` in the pattern. To get rid of this warning, please change the route path to &quot;${t.replace(/\*$/,&quot;/*&quot;)}&quot;.`);let i=[],s=&quot;^&quot;+t.replace(/\/*\*?$/,&quot;&quot;).replace(/^\/*/&#xa; &#xa; Path: http://stockfill.lan.ddnsgeek.com:443/assets/index-DZWxa9kt.js&#xa; Line number: 3&#xa; Comment: &#xa; &#xa; //# sourceMappingURL=index-DZWxa9kt.js.map&#xa; &#xa; Path: http://stockfill.lan.ddnsgeek.com:443/assets/dexie-DvMqvjyc.js&#xa; Line number: 4&#xa; Comment: &#xa; &#xa; //# sourceMappingURL=dexie-DvMqvjyc.js.map&#xa; &#xa; Path: http://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js&#xa; Line number: 9&#xa; Comment: &#xa; /*&quot;+cs(a,_n-1)+&quot;*&quot;+mc(t===47?t:Kn())}function t2(t){for(;!ns(Ha());)Kn();return cs(t,_n)}function e2(t){return Ob(Yu(&quot;&quot;,null,null,null,[&quot;&quot;],t=Mb(t),0,[0],t))}function Yu(t,a,o,i,s,u,f,p,m){for(var h=0,g=0,v=f,w=0,E=0,x=0,C=1,R=1,M=1,z=0,O=&quot;&quot;,A=s,k=u,$=i,P=O;R;)switch(x=z,z=Kn()){case 40:if(x!=108&amp;&amp;bn(P,v-1)==58){Sp(P+=ve(Fu(z),&quot;&amp;&quot;,&quot;&amp;\f&quot;),&quot;&amp;\f&quot;)!=-1&amp;&amp;(M=-1);break}case 34:case 39:case 91:P+=Fu(z);break;case 9:case 10:case 13:case 32:P+=QC(x);break;case 92:P+=ZC(Gu()-1,7);continue;case 47:switch(Ha()){case 42:case 47:Nu(n2(JC(Kn(),Gu()),a,o),m);break;default:P+=&quot;/&quot;}break;case 123*C:p[h++]=Pa(P)*M;case 125*C:case 59:case 0:switch(z){case 0:case 125:R=0;case 59+g:M==-1&amp;&amp;(P=ve(P,/\f/g,&quot;&quot;)),E&gt;0&amp;&amp;Pa(P)-v&amp;&amp;Nu(E&gt;32?$v(P+&quot;;&quot;,i,o,v-1):$v(ve(P,&quot; &quot;,&quot;&quot;)+&quot;;&quot;,i,o,v-2),m);break;case 59:P+=&quot;;&quot;;default:if(Nu($=Dv(P,a,o,h,g,s,p,O,A=[],k=[],v),u),z===123)if(g===0)Yu(P,a,$,$,A,u,v,p,k);else switch(w===99&amp;&amp;bn(P,3)===110?100:w){case 100:case 108:case 109:case 115:Yu(t,$,$,i&amp;&amp;Nu(Dv(t,$,$,0,0,s,p,O,s,A=[],v),k),s,k,v,p,i?A:k);break;default:Yu(P,$,$,$,[&quot;&quot;],k,0,p,k)}}h=g=E=0,C=M=1,O=P=&quot;&quot;,v=f;break;case 58:v=1+Pa(P),E=x;default:if(C&lt;1){if(z==123)-&#45;C;else if(z==125&amp;&amp;C++==0&amp;&amp;KC()==125)continue}switch(P+=mc(z),z*C){case 38:M=g&gt;0?1:(P+=&quot;\f&quot;,-1);break;case 44:p[h++]=(Pa(P)-1)*M,M=1;break;case 64:Ha()===45&amp;&amp;(P+=Fu(Kn())),w=Ha(),g=v=Pa(O=P+=t2(Gu())),z++;break;case 45:x===45&amp;&amp;Pa(P)==2&amp;&amp;(C=0)}}return u}function Dv(t,a,o,i,s,u,f,p,m,h,g){for(var v=s-1,w=s===0?u:[&quot;&quot;],E=Qp(w),x=0,C=0,R=0;x&lt;i;++x)for(var M=0,z=es(t,v+1,v=qC(C=f[x])),O=t;M&lt;E;++M)(O=Tb(C&gt;0?w[M]+&quot; &quot;+z:ve(z,/&amp;\f/g,w[M])))&amp;&amp;(m[R++]=O);return gc(t,a,o,s===0?Xp:p,m,h,g)}function n2(t,a,o){return gc(t,a,o,Eb,mc(XC()),es(t,2,-2),0)}function $v(t,a,o,i){return gc(t,a,o,Kp,es(t,0,i),es(t,i+1,-1),i)}function Di(t,a){for(var o=&quot;&quot;,i=Qp(t),s=0;s&lt;i;s++)o+=a(t[s],s,t,a)||&quot;&quot;;return o}function a2(t,a,o,i){switch(t.type){case VC:if(t.children.length)break;case IC:case Kp:return t.return=t.return||t.value;case Eb:return&quot;&quot;;case wb:return t.return=t.value+&quot;{&quot;+Di(t.children,i)+&quot;}&quot;;case Xp:t.value=t.props.join(&quot;,&quot;)}return Pa(o=Di(t.children,i))?t.return=t.value+&quot;{&quot;+o+&quot;}&quot;:&quot;&quot;}function r2(t){var a=Qp(t);return function(o,i,s,u){for(var f=&quot;&quot;,p=0;p&lt;a;p++)f+=t[p](o,i,s,u)||&quot;&quot;;return f}}function o2(t){return function(a){a.root||(a=a.return)&amp;&amp;t(a)}}function Ab(t){var a=Object.create(null);return function(o){return a[o]===void 0&amp;&amp;(a[o]=t(o)),a[o]}}var i2=function(a,o,i){for(var s=0,u=0;s=u,u=Ha(),s===38&amp;&amp;u===12&amp;&amp;(o[i]=1),!ns(u);)Kn();return cs(a,_n)},l2=function(a,o){var i=-1,s=44;do switch(ns(s)){case 0:s===38&amp;&amp;Ha()===12&amp;&amp;(o[i]=1),a[i]+=i2(_n-1,o,i);break;case 2:a[i]+=Fu(s);break;case 4:if(s===44){a[++i]=Ha()===58?&quot;&amp;\f&quot;:&quot;&quot;,o[i]=a[i].length;break}default:a[i]+=mc(s)}while(s=Kn());return a},s2=function(a,o){return Ob(l2(Mb(a),o))},Nv=new WeakMap,u2=function(a){if(!(a.type!==&quot;rule&quot;||!a.parent||a.length&lt;1)){for(var o=a.value,i=a.parent,s=a.column===i.column&amp;&amp;a.line===i.line;i.type!==&quot;rule&quot;;)if(i=i.parent,!i)return;if(!(a.props.length===1&amp;&amp;o.charCodeAt(0)!==58&amp;&amp;!Nv.get(i))&amp;&amp;!s){Nv.set(a,!0);for(var u=[],f=s2(o,u),p=i.props,m=0,h=0;m&lt;f.length;m++)for(var g=0;g&lt;p.length;g++,h++)a.props[hLine truncated
<elem key="commonName">stockfill.lan.ddnsgeek.com</elem>
</table>
<table key="issuer">
@@ -171,75 +246,16 @@
<elem key="sha1">3ea5c9a05fdd6b5778ec626f0ba73928aecc1948</elem>
<elem key="sha256">48255fb53b5fed4646ca1163227dc1d1cd5889358d3e9ed1f0c8467de434ec66</elem>
<elem key="pem">-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDzCCBPegAwIBAgISBSCym2uC+hYb1Zc3qCjloXn/MA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwMzIyMDk0NzE1WhcNMjYwNjIwMDk0NzE0WjAlMSMwIQYDVQQD&#xa;ExpzdG9ja2ZpbGwubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD&#xa;ggIPADCCAgoCggIBAMkuGHd6QoSNHjkX2/DxCURKhM2DBoA4pytDrL4q3UzA1sVh&#xa;pxGljFi5MNjqLbW5P7aHDXHo08Ecb8XczJFcURIGHObNKYMBqIZAV9MvMCEZ1SvQ&#xa;AlkBIDtoxwjd/BnOxfrkn9JNKCdQrvzvbLEUPw/dH9n9lbVY3aNtoBs+Epk4nwxc&#xa;MOxgkAtUAgkywhSDk4FyNxq2MA73DA0kVXwydY1yfhI7Y8y5+7HiDxYr7J/Tsl7F&#xa;QQazayYkTMeae6OiARc9XYQYBsn2GJMzZCWHErXSIO7SEUq4ih3AvlBQASRqMFH5&#xa;bgBkqKWQ8ilwUIXXY0K7mZaLLIx/s4ScV2q4AHqxvivWnLu+Fv3lcRDTWq52T9qo&#xa;ZOcwnBBAgj3A1inOXw2yGZN/KZrxoHQsgkY6MUXcMVEdHKsCJJX2iqm4q+BFFHiV&#xa;fBpqJUpspv8GGuFHCDjSdvsMZhMm/7i3AjXBZUieNqnFvPEewntw6NqfjAF5L/V5&#xa;XrJXChOc80RGEN6rE2Y14Yxi0StwgRQwVNFYw4XBwhUJPsBbs9Sjvrg38hdzTbXh&#xa;qvkEKB7ickYcauEMa4gjc1xM2LObg8tkWdOyEMRGANwHMIgIB9Yj9H7hgHW/U2ts&#xa;gnrjhNJVPlWPyluyOmpvsL/2NF3yEEdmaYJy98WEUa/NNeH91tNjVc5todYxAgMB&#xa;AAGjggIpMIICJTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEw&#xa;DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU+yISCK1nywudpGX6q9z3xXkf2CUwHwYD&#xa;VR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMG&#xa;CCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAlBgNVHREEHjAcghpz&#xa;dG9ja2ZpbGwubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAv&#xa;BgNVHR8EKDAmMCSgIqAghh5odHRwOi8vcjEzLmMubGVuY3Iub3JnLzEyOC5jcmww&#xa;ggEMBgorBgEEAdZ5AgQCBIH9BIH6APgAdgAWgy2r8KklDw/wOqVF/8i/yCPQh0v2&#xa;BCkn+OcfMxP1+gAAAZ0VJp8HAAAEAwBHMEUCIQCK0OoRf+dUKEXKGEd+eW+m2V41&#xa;qkDgZjaqzZjtrYvMgAIgJ1rcjrLxvuAlBzF0FfEjVVpudI9RoYXDlb9pQMafIzkA&#xa;fgBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDRc4CeGBjrOgAAAZ0VJqAnAAgAAAUA&#xa;A/bFjQQDAEcwRQIhAImeNgcMfLu9dxqVvvKk7MTJ/ZTswiLxMZeh5A9185s2AiBD&#xa;msLUiD7sIyCrYnSKMGUjQQfcvSOd9Rjkdu5nlwGlLDANBgkqhkiG9w0BAQsFAAOC&#xa;AQEACDWH5UifJkKtK+4iaunh6JhtkMzBhj2k7d3SCgbjDhpXo43pz2X+uCs/RNcL&#xa;I98aVmxGwBU3qXK0WVxfGFSof/xlEYaklbGFO7zsI4KW1R/drb0M4PJoxVf999us&#xa;98/q3Sn6jHCzLSlsBGxSHcFIfBw5Et+DLSYrAzIrlzEMfgzPDyy+aqyrAcASqFRG&#xa;keqdDnpieOgxMTvV1SKRBayAW272i1bTiVgCr0eknXh9OGaJ3ZWsuPjekLR176Vs&#xa;5Rd8w3xMbQD2g/2jPocCj/XkEQljNwVBNDxtekl4vkRlvgs+FDqZE3ppHuuJ2wmd&#xa;OAAxNsovC6BHaQgaRRfMSGuOyw==&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;</elem>
</script><script id="http-title" output="StockFill"><elem key="title">StockFill</elem>
</script><script id="http-comments-displayer" output="&#xa;Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=stockfill.lan.ddnsgeek.com&#xa; &#xa; Path: https://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js&#xa; Line number: 146&#xa; Comment: &#xa; /*&quot;?&quot;(.*)$&quot;:&quot;(?:\\/(.+)|\\/*)$&quot;):o?s+=&quot;\\/*$&quot;:t!==&quot;&quot;&amp;&amp;t!==&quot;/&quot;&amp;&amp;(s+=&quot;(?:(?=\\/|$))&quot;),[new RegExp(s,a?void 0:&quot;i&quot;),i]}function _3(t){try{return t.split(&quot;/&quot;).map(a=&gt;decodeURIComponent(a).replace(/\//g,&quot;%2F&quot;)).join(&quot;/&quot;)}catch(a){return Ta(!1,`The URL path &quot;${t}&quot; could not be decoded because it is a malformed URL segment. This is probably due to a bad percent encoding (${a}).`),t}}function xr(t,a){if(a===&quot;/&quot;)return t;if(!t.toLowerCase().startsWith(a.toLowerCase()))return null;let o=a.endsWith(&quot;/&quot;)?a.length-1:a.length,i=t.charAt(o);return i&amp;&amp;i!==&quot;/&quot;?null:t.slice(o)||&quot;/&quot;}var j3=/^(?:[a-z][a-z0-9+.-]*:|\/\/)/i,U3=t=&gt;j3.test(t);function H3(t,a=&quot;/&quot;){let{pathname:o,search:i=&quot;&quot;,hash:s=&quot;&quot;}=typeof t==&quot;string&quot;?Ii(t):t,u;if(o)if(U3(o))u=o;else{if(o.includes(&quot;//&quot;)){let f=o;o=o.replace(/\/\/+/g,&quot;/&quot;),Ta(!1,`Pathnames cannot have embedded double slashes - normalizing ${f} -&gt; ${o}`)}o.startsWith(&quot;/&quot;)?u=fb(o.substring(1),&quot;/&quot;):u=fb(o,a)}else u=a;return{pathname:u,search:q3(i),hash:G3(s)}}function fb(t,a){let o=a.replace(/\/+$/,&quot;&quot;).split(&quot;/&quot;);return t.split(&quot;/&quot;).forEach(s=&gt;{s===&quot;..&quot;?o.length&gt;1&amp;&amp;o.pop():s!==&quot;.&quot;&amp;&amp;o.push(s)}),o.length&gt;1?o.join(&quot;/&quot;):&quot;/&quot;}function gp(t,a,o,i){return`Cannot include a &apos;${t}&apos; character in a manually specified \`to.${a}\` field [${JSON.stringify(i)}]. Please separate it out to the \`to.${o}\` field. Alternatively you may provide the full path as a string in &lt;Link to=&quot;...&quot;&gt; and the router will parse it for you.`}function I3(t){return t.filter((a,o)=&gt;o===0||a.route.path&amp;&amp;a.route.path.length&gt;0)}function aS(t){let a=I3(t);return a.map((o,i)=&gt;i===a.length-1?o.pathname:o.pathnameBase)}function rS(t,a,o,i=!1){let s;typeof t==&quot;string&quot;?s=Ii(t):(s={...t},Ie(!s.pathname||!s.pathname.includes(&quot;?&quot;),gp(&quot;?&quot;,&quot;pathname&quot;,&quot;search&quot;,s)),Ie(!s.pathname||!s.pathname.includes(&quot;#&quot;),gp(&quot;#&quot;,&quot;pathname&quot;,&quot;hash&quot;,s)),Ie(!s.search||!s.search.includes(&quot;#&quot;),gp(&quot;#&quot;,&quot;search&quot;,&quot;hash&quot;,s)));let u=t===&quot;&quot;||s.pathname===&quot;&quot;,f=u?&quot;/&quot;:s.pathname,p;if(f==null)p=o;else{let v=a.length-1;if(!i&amp;&amp;f.startsWith(&quot;..&quot;)){let w=f.split(&quot;/&quot;);for(;w[0]===&quot;..&quot;;)w.shift(),v-=1;s.pathname=w.join(&quot;/&quot;)}p=v&gt;=0?a[v]:&quot;/&quot;}let m=H3(s,p),h=f&amp;&amp;f!==&quot;/&quot;&amp;&amp;f.endsWith(&quot;/&quot;),g=(u||f===&quot;.&quot;)&amp;&amp;o.endsWith(&quot;/&quot;);return!m.pathname.endsWith(&quot;/&quot;)&amp;&amp;(h||g)&amp;&amp;(m.pathname+=&quot;/&quot;),m}var yr=t=&gt;t.join(&quot;/&quot;).replace(/\/\/+/g,&quot;/&quot;),V3=t=&gt;t.replace(/\/+$/,&quot;&quot;).replace(/^\/*/&#xa; &#xa; Path: https://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js&#xa; Line number: 20&#xa; Comment: &#xa; // handle system mode&#xa; &#xa; Path: https://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js&#xa; Line number: 148&#xa; Comment: &#xa; /*`}&quot;&gt;.`)}let w=jo(),E;if(a){let z=typeof a==&quot;string&quot;?Ii(a):a;Ie(g===&quot;/&quot;||z.pathname?.startsWith(g),`When overriding the location using \`&lt;Routes location&gt;\` or \`useRoutes(routes, location)\`, the location pathname must begin with the portion of the URL pathname that was matched by all parent routes. The current pathname base is &quot;${g}&quot; but pathname &quot;${z.pathname}&quot; was given in the \`location\` prop.`),E=z}else E=w;let x=E.pathname||&quot;/&quot;,C=x;if(g!==&quot;/&quot;){let z=g.replace(/^\//,&quot;&quot;).split(&quot;/&quot;);C=&quot;/&quot;+x.replace(/^\//,&quot;&quot;).split(&quot;/&quot;).slice(z.length).join(&quot;/&quot;)}let R=tS(t,{pathname:C});Ta(v||R!=null,`No routes matched location &quot;${E.pathname}${E.search}${E.hash}&quot; `),Ta(R==null||R[R.length-1].route.element!==void 0||R[R.length-1].route.Component!==void 0||R[R.length-1].route.lazy!==void 0,`Matched leaf route at location &quot;${E.pathname}${E.search}${E.hash}&quot; does not have an element or Component. This means it will render an &lt;Outlet /&gt; with a null value by default resulting in an &quot;empty&quot; page.`);let M=iz(R&amp;&amp;R.map(z=&gt;Object.assign({},z,{params:Object.assign({},m,z.params),pathname:yr([g,u.encodeLocation?u.encodeLocation(z.pathname.replace(/\?/Line truncated
<table key="ciphers">
<table>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</elem>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</elem>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</elem>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="name">TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256</elem>
<elem key="kex_info">secp256r1</elem>
<elem key="strength">A</elem>
</table>
</table>
<table key="compressors">
<elem>NULL</elem>
</table>
<elem key="cipher preference">client</elem>
<table key="warnings">
<elem>Key exchange (secp256r1) of lower strength than certificate key</elem>
</table>
</table>
<table key="TLSv1.3">
<table key="ciphers">
<table>
<elem key="name">TLS_AKE_WITH_AES_128_GCM_SHA256</elem>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="name">TLS_AKE_WITH_AES_256_GCM_SHA384</elem>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="name">TLS_AKE_WITH_CHACHA20_POLY1305_SHA256</elem>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="strength">A</elem>
</table>
</table>
<elem key="cipher preference">server</elem>
</table>
<elem key="least strength">A</elem>
</script><script id="http-majordomo2-dir-traversal" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/><script id="http-malware-host" output="false">false</script><script id="http-vuln-cve2017-1001000" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script></port>
</script><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="http-vuln-cve2010-0738" output="&#xa; /jmx-console/: Authentication was not required&#xa;"/></port>
</ports>
<times srtt="14185" rttvar="14185" to="100000"/>
<times srtt="14252" rttvar="14252" to="100000"/>
</host>
<taskbegin task="NSE" time="1775383331"/>
<taskend task="NSE" time="1775383331"/>
<taskbegin task="NSE" time="1775383331"/>
<taskend task="NSE" time="1775383331"/>
<taskbegin task="NSE" time="1775383331"/>
<taskend task="NSE" time="1775383331"/>
<runstats><finished time="1775383331" timestr="Sun Apr 5 10:02:11 2026" summary="Nmap done at Sun Apr 5 10:02:11 2026; 1 IP address (1 host up) scanned in 144.55 seconds" elapsed="144.55" exit="success"/><hosts up="1" down="0" total="1"/>
<taskbegin task="NSE" time="1776141107"/>
<taskend task="NSE" time="1776141107"/>
<taskbegin task="NSE" time="1776141107"/>
<taskend task="NSE" time="1776141107"/>
<taskbegin task="NSE" time="1776141107"/>
<taskend task="NSE" time="1776141107"/>
<runstats><finished time="1776141107" timestr="Tue Apr 14 04:31:47 2026" summary="Nmap done at Tue Apr 14 04:31:47 2026; 1 IP address (1 host up) scanned in 536.44 seconds" elapsed="536.44" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>