# Nmap 7.98 scan initiated Sun Apr 5 07:50:48 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com Nmap scan report for gotify.lan.ddnsgeek.com (167.179.167.166) Host is up, received user-set (0.015s latency). rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net Scanned at 2026-04-05 07:51:01 UTC for 582s PORT STATE SERVICE REASON VERSION 443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API) | ssl-cert: Subject: commonName=gotify.lan.ddnsgeek.com | Subject Alternative Name: DNS:gotify.lan.ddnsgeek.com | Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US | Public Key type: rsa | Public Key bits: 4096 | Signature Algorithm: sha256WithRSAEncryption | Not valid before: 2026-02-14T19:02:31 | Not valid after: 2026-05-15T19:02:30 | MD5: 0663 3538 85f4 573b 487c 09cb e7dd f8fc | SHA-1: c524 c1ab 9e90 457e 0aa8 630f 6277 e73a eeb2 5078 | SHA-256: b69e 7113 332a b817 efd6 6485 19a7 ca69 eccc 1918 b1f5 1193 7883 4e0b 69f2 a4f8 | -----BEGIN CERTIFICATE----- | MIIGCDCCBPCgAwIBAgISBWjxVFy9rGrar3/Ia3tZt0wJMA0GCSqGSIb3DQEBCwUA | MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD | EwNSMTMwHhcNMjYwMjE0MTkwMjMxWhcNMjYwNTE1MTkwMjMwWjAiMSAwHgYDVQQD | Exdnb3RpZnkubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP | ADCCAgoCggIBAJKWJGSSAoVrS6NqFLLjikQard2jHkoMhwLwosukVIZ70U+dxLdM | k7PJb/DHLM1sj4Wf04jBBMF2tlD/A4/unLaX3No+bsznq6V6yYVA0QFWQZhKrhN3 | hsHLRbyuibfan2XQNMCWPtmWEe76xTP+i2STKFoZmz4oSRilOExy5RzxwWDei4qn | 4dtrLSp/vHvaDTERd8eY7ssmOM39HkzZbZpHP0kg0AaejBUTK7jcjTTVQat/09sR | TH41bajyXdqdQ5D8JWESKZTxtT579M8wGQOEfe68dnVRSH4XSw69MfuHpIXzhTl9 | pZOx2091QqOwN80Aj4rfHz182qCdwXEmnTT8V+nnJ6Zl566Ch5Z/SJG6Kw1ozoPk | h68Nzmt1j60PxW4DYW1CH/Xg9TrV04gZreQ9/uMpPmwX4x9aqmKuiP4QttKwLN43 | 4F1p6D9/hBNHJvwnkTD7N+MxsnoRsOfGOLLIWaggEcwByEj2WctTbwWWBbnZNEgH | m2aI782aWDCIk3/eKy8Ikh/Lvy0YwdCSXj8x9XNrii7cl2uUTvbN7Vk8NiVapowx | PZ4O0mFPnOlZQ5NZTvRjSo19IQeNDYuzJIEgADHRTPqTvi+aLzs2oyeOuDWmfvyg | 4GLXhxIzy6WQtVSFzAFp6g3ogJLIQ6poRiHTugWDDppj/sqMugBYwWMfAgMBAAGj | ggIlMIICITAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYD | VR0TAQH/BAIwADAdBgNVHQ4EFgQU6cGnXT7obSZnDAKEzKmtQ4U1CMgwHwYDVR0j | BBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMGCCsG | AQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAiBgNVHREEGzAZghdnb3Rp | ZnkubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAuBgNVHR8E | JzAlMCOgIaAfhh1odHRwOi8vcjEzLmMubGVuY3Iub3JnLzEwLmNybDCCAQwGCisG | AQQB1nkCBAIEgf0EgfoA+AB2AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5GpD8P | yqnGAAABnF2+CggAAAQDAEcwRQIgXZAcyFu2NrRhVSoEKvpPZdQVjeXWsj+RkmPL | v75RmQoCIQCHRZek8tNK2DlyM85HTCLV3UOI/N3PBC+FZKwNc8a9cgB+ABqLnWlK | V5jImaDKiL30j8C0VmDMw2ANH3H0af/H0ayjAAABnF2+CywACAAABQBH+lCyBAMA | RzBFAiAQHPX3dCEgtXOtKnunRRmiTCXrEXzZL+KHpU/4bnCEcQIhALLzF1xFYvJR | y8MDKPHd6SXSi01LFkil8UNBu1x++cLCMA0GCSqGSIb3DQEBCwUAA4IBAQBzxqbU | ANmKar7Hl1sDtpXXmYA7fqtT8QToH8hne93Edrhe4wa9aJzb/SJS5Jp9Dkuqb/WG | ES0HMFD1MSvO37cpCsuKebYrsz8RT86iYFTrlUqvHsgUA7YukdZy7zi6LEXIi7xN | 7ywov+BUO30KakhcG95fLYTqudoWlEEpOtiiSzvyGaNcNIX8FKh+SUgxGFlPO3Ep | UQWefkONj9BkFwKu63UdmP3TXP4X8sDZXY7vA6qsoA1k2WOzDVGY3TFC3kArlkjD | Lc3uWbMBAgMe6LIg0A45uMNzHVq6Jz6Cqxbq4zWCpTJG86mS74VI+Z4Vr9d+BzQr | u7L76W6EfP8Aau/l |_-----END CERTIFICATE----- |_http-traceroute: ERROR: Script execution failed (use -d to debug) |_http-referer-checker: Couldn't find any cross-domain scripts. |_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number= for deeper analysis) |_http-feed: Couldn't find any feeds. |_http-date: Sun, 05 Apr 2026 07:51:56 GMT; -4s from local time. | http-methods: |_ Supported Methods: GET OPTIONS |_http-fetch: Please enter the complete path of the directory to save data in. | http-security-headers: | Strict_Transport_Security: | Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload | X_Frame_Options: | Header: X-Frame-Options: SAMEORIGIN | Description: The browser must not display this content in any frame from a page of different origin than the content itself. | X_XSS_Protection: | Header: X-XSS-Protection: 1; mode=block | Description: The browser will prevent the rendering of the page when XSS is detected. | X_Content_Type_Options: | Header: X-Content-Type-Options: nosniff |_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. |_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable |_http-title: Gotify | http-sitemap-generator: | Directory structure: | / | Other: 1; json: 1 | /static/ | css: 1; js: 1 | Longest directory structure: | Depth: 1 | Dir: /static/ | Total files found (by extension): |_ Other: 1; css: 1; js: 1; json: 1 |_http-malware-host: Host appears to be clean |_http-errors: Couldn't find any error pages. | http-headers: | Content-Type: text/html | Date: Sun, 05 Apr 2026 07:52:19 GMT | Strict-Transport-Security: max-age=15552000; includeSubDomains; preload | Vary: Accept-Encoding | X-Content-Type-Options: nosniff | X-Frame-Options: SAMEORIGIN | X-Xss-Protection: 1; mode=block | Connection: close | Transfer-Encoding: chunked | |_ (Request type: GET) | http-vhosts: | auth.lan.ddnsgeek.com : 200 |_127 names had status 404 |_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages. |_ssl-date: TLS randomness does not represent time | http-php-version: Logo query returned unknown hash 622a589591324462d669df924802d29b |_Credits query returned unknown hash 622a589591324462d669df924802d29b |_http-chrono: Request times for /; avg: 7828.27ms; min: 3421.52ms; max: 23506.11ms |_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit= for deeper analysis) |_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php | ssl-enum-ciphers: | TLSv1.2: | ciphers: | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A | compressors: | NULL | cipher preference: client | warnings: | Key exchange (secp256r1) of lower strength than certificate key | TLSv1.3: | ciphers: | TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A | TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A | TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A | cipher preference: server |_ least strength: A |_http-jsonp-detection: Couldn't find any JSONP endpoints. | http-enum: |_ /manifest.json: Manifest JSON File |_http-mobileversion-checker: No mobile version detected. |_http-comments-displayer: Couldn't find any comments. |_http-dombased-xss: Couldn't find any DOM based XSS. |_http-csrf: Couldn't find any CSRF vulnerabilities. | http-useragent-tester: | Status for browser useragent: 200 | Allowed User Agents: | Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html) | libwww | lwp-trivial | libcurl-agent/1.0 | PHP/ | Python-urllib/2.5 | GT::WWW | Snoopy | MFC_Tear_Sample | HTTP::Lite | PHPCrawl | URI::Fetch | Zend_Http_Client | http client | PECL::HTTP | Wget/1.13.4 (linux-gnu) |_ WWW-Mechanize/1.34 |_http-stored-xss: Couldn't find any stored XSS vulnerabilities. Read data files from: /usr/share/nmap Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . # Nmap done at Sun Apr 5 08:00:43 2026 -- 1 IP address (1 host up) scanned in 597.62 seconds