# Nmap 7.99 scan initiated Tue Apr 14 04:00:39 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com
Nmap scan report for passbolt.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-14 04:00:47 UTC for 353s

PORT    STATE SERVICE  REASON         VERSION
443/tcp open  ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-comments-displayer: 
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=passbolt.lan.ddnsgeek.com
|     
|     Path: https://passbolt.lan.ddnsgeek.com:443/
|     Line number: 49
|     Comment: 
|         <!-- main -->
|     
|     Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|     Line number: 29
|     Comment: 
|         /**
|              * Initialise to get the theme from stylesheet or OS preference
|              */
|     
|     Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|     Line number: 22
|     Comment: 
|         /**
|              * Bind callbacks
|              */
|     
|     Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|     Line number: 79
|     Comment: 
|         /**
|              * Is theme defined
|              * @returns {boolean}
|              */
|     
|     Path: https://passbolt.lan.ddnsgeek.com:443/
|     Line number: 6
|     Comment: 
|         <!--
|         
|                 ____                  __          ____
|                / __ \____  _____ ____/ /_  ____  / / /_
|               / /_/ / __ `/ ___/ ___/ __ \/ __ \/ / __/
|              / ____/ /_/ (__  )__  ) /_/ / /_/ / / /_
|             /_/    \__,_/____/____/_.___/\____/_/\__/
|         
|             Open source password manager for teams
|             Copyright (c) Passbolt SA (https://www.passbolt.com)
|         
|         
|             This program is free software: you can redistribute it and/or modify
|             it under the terms of the GNU Affero General Public License as
|             published by the Free Software Foundation, either version 3 of the
|             License, or (at your option) any later version.
|         
|             This program is distributed in the hope that it will be useful,
|             but WITHOUT ANY WARRANTY; without even the implied warranty of
|             MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
|             GNU Affero General Public License for more details.
|         
|             You should have received a copy of the GNU Affero General Public License
|             along with this program. If not, see http://www.gnu.org/licenses/.
|         
|         
|             -->
|     
|     Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|     Line number: 1
|     Comment: 
|         /**
|          * Passbolt ~ Open source password manager for teams
|          * Copyright (c) Passbolt SARL (https://www.passbolt.com)
|          *
|          * Licensed under GNU Affero General Public License version 3 of the or any later version.
|          * For full copyright and license information, please see the LICENSE.txt
|          * Redistributions of files must retain the above copyright notice.
|          *
|          * @copyright     Copyright (c) Passbolt SA (https://www.passbolt.com)
|          * @license       https://opensource.org/licenses/AGPL-3.0 AGPL License
|          * @link          https://www.passbolt.com Passbolt(tm)
|          * @since         3.3.2
|          */
|     
|     Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|     Line number: 59
|     Comment: 
|         /**
|              * Get link tag
|              * @returns {Element}
|              */
|     
|     Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-vendors.js?v=5.11.0
|     Line number: 1
|     Comment: 
|         /*! For license information please see api-vendors.js.LICENSE.txt */
|     
|     Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|     Line number: 87
|     Comment: 
|         /**
|              * Set theme according to the OS preference
|              * @param mediaQueryPreferColor
|              */
|     
|     Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0
|     Line number: 1
|     Comment: 
|         /*! For license information please see api-triage.js.LICENSE.txt */
|     
|     Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|     Line number: 44
|     Comment: 
|         /**
|              * Update link reference with the theme
|_             */
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-title: Passbolt | Open source password manager for teams
|_Requested resource was /auth/login?redirect=%2F
| ssl-enum-ciphers: 
|   TLSv1.2: 
|     ciphers: 
|       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
|     compressors: 
|       NULL
|     cipher preference: client
|     warnings: 
|       Key exchange (secp256r1) of lower strength than certificate key
|   TLSv1.3: 
|     ciphers: 
|       TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
|       TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
|       TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|     cipher preference: server
|_  least strength: A
|_ssl-date: TLS randomness does not represent time
| http-waf-detect: IDS/IPS/WAF detected:
|_passbolt.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
| http-errors: 
| Spidering limited to: maxpagecount=40; withinhost=passbolt.lan.ddnsgeek.com
|   Found the following error pages: 
|   
|   Error Code: 404
|   	https://passbolt.lan.ddnsgeek.com:443/js/app/s.src1%7D%7Dbreak;case
|   
|   Error Code: 404
|   	https://passbolt.lan.ddnsgeek.com:443/js/app/e1110;var
|   
|   Error Code: 404
|_  	https://passbolt.lan.ddnsgeek.com:443/js/app/e1setTimeout1function11%7Bdocument.body.removeChild1u1%7D13331%7Dif1r1s
| http-security-headers: 
|   Strict_Transport_Security: 
|     Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|   X_Frame_Options: 
|     Header: X-Frame-Options: SAMEORIGIN
|     Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|   X_XSS_Protection: 
|     Header: X-XSS-Protection: 1; mode=block
|     Description: The browser will prevent the rendering of the page when XSS is detected.
|   X_Content_Type_Options: 
|     Header: X-Content-Type-Options: nosniff
|_    Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. 
|_http-unsafe-output-escaping: ERROR: Script execution failed (use -d to debug)
|_http-malware-host: Host appears to be clean
|_http-chrono: Request times for /; avg: 29564.94ms; min: 2054.83ms; max: 131706.91ms
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-date: Tue, 14 Apr 2026 04:01:12 GMT; -19s from local time.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-useragent-tester: 
|   Status for browser useragent: 200
|   Redirected To: /auth/login?redirect=%2F
|   Allowed User Agents: 
|     Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|     libwww
|     lwp-trivial
|     libcurl-agent/1.0
|     PHP/
|     Python-urllib/2.5
|     GT::WWW
|     Snoopy
|     MFC_Tear_Sample
|     HTTP::Lite
|     PHPCrawl
|     URI::Fetch
|     Zend_Http_Client
|     http client
|     PECL::HTTP
|     Wget/1.13.4 (linux-gnu)
|_    WWW-Mechanize/1.34
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
| http-vhosts: 
| auth.lan.ddnsgeek.com : 200
|_127 names had status 404
| http-php-version: Logo query returned unknown hash 3282c083dbb29b35410366062b9400a1
|_Credits query returned unknown hash 3282c083dbb29b35410366062b9400a1
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-grep: 
|   (2) https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0: 
|     (1) ip: 
|       + 1.122.28.223
|     (1) email: 
|_      + you@organization.com
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-sitemap-generator: 
|   Directory structure:
|     /
|       Other: 1; ico: 1; png: 6; svg: 1
|     /js/app/
|       js: 3
|   Longest directory structure:
|     Depth: 2
|     Dir: /js/app/
|   Total files found (by extension):
|_    Other: 1; ico: 1; js: 3; png: 6; svg: 1
|_http-rfi-spider: ERROR: Script execution failed (use -d to debug)
| http-traceroute: 
|   Status Code
|     Hop #1: 404
|     Hop #2: 302
|     Hop #3: 302
|   server
|     Hop #1
|     Hop #2: nginx
|     Hop #3: nginx
|   content-type
|     Hop #1: text/plain; charset=utf-8
|     Hop #2: text/html; charset=UTF-8
|     Hop #3: text/html; charset=UTF-8
|   content-length
|     Hop #1: 19
|     Hop #2
|     Hop #3
|   location
|     Hop #1
|     Hop #2: /auth/login?redirect=%2F
|_    Hop #3: /auth/login?redirect=%2F
|_http-favicon: Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4
| ssl-cert: Subject: commonName=passbolt.lan.ddnsgeek.com
| Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-04-07T00:44:25
| Not valid after:  2026-07-06T00:44:24
| MD5:     4671 74a5 8d20 2b20 8b59 f04d c923 3712
| SHA-1:   8af1 359b 3029 2145 4094 9080 6492 2508 7a44 5dd7
| SHA-256: f980 4a63 1ada cd62 ceaf 5760 f7e0 826e e9e1 74db 65cd c69c 2b5c 474b 36ac 19e3
| -----BEGIN CERTIFICATE-----
| MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD
| ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC
| Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3
| WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ
| +nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs
| BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P
| YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE
| eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE
| d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R
| ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS
| 6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw
| TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6
| 6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM
| BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV
| HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI
| KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh
| c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD
| VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN
| BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR
| c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE
| Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a
| 9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9
| AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj
| IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB
| ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v
| +3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF
| MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc
| k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj
| MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw
| YrarkoA+irmSeogYZBI+qKg=
|_-----END CERTIFICATE-----
|_http-sql-injection: ERROR: Script execution failed (use -d to debug)
| http-methods: 
|_  Supported Methods: GET HEAD POST
|_http-mobileversion-checker: No mobile version detected.
|_http-server-header: nginx
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
| http-headers: 
|   Access-Control-Expose-Headers: X-GPGAuth-Verify-Response
|   Access-Control-Expose-Headers: X-GPGAuth-Progress
|   Access-Control-Expose-Headers: X-GPGAuth-User-Auth-Token
|   Access-Control-Expose-Headers: X-GPGAuth-Authenticated
|   Access-Control-Expose-Headers: X-GPGAuth-Refer
|   Access-Control-Expose-Headers: X-GPGAuth-Debug
|   Access-Control-Expose-Headers: X-GPGAuth-Error
|   Access-Control-Expose-Headers: X-GPGAuth-Pubkey
|   Access-Control-Expose-Headers: X-GPGAuth-Logout-Url
|   Access-Control-Expose-Headers: X-GPGAuth-Version
|   Cache-Control: no-store, no-cache, must-revalidate
|   Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
|   Content-Type: text/html; charset=UTF-8
|   Date: Tue, 14 Apr 2026 04:01:12 GMT
|   Expires: Thu, 19 Nov 1981 08:52:00 GMT
|   Permissions-Policy: unload=(*)
|   Pragma: no-cache
|   Referrer-Policy: same-origin
|   Server: nginx
|   Set-Cookie: passbolt_session=868f8b90de9733e71911be79a6ae943e; path=/; HttpOnly; SameSite=Lax
|   Set-Cookie: csrfToken=77f99ef8df307c0707c09f924bcade32f7909e5c61ff6c5d6eb225253b6553b25a55e5962129c071808a94301932f194403a7667eabb8ee2723fc58c636798ac; path=/
|   Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|   X-Content-Type-Options: nosniff
|   X-Download-Options: noopen
|   X-Frame-Options: SAMEORIGIN
|   X-Gpgauth-Authenticated: false
|   X-Gpgauth-Debug: There is no user associated with this key. No key id set.
|   X-Gpgauth-Error: true
|   X-Gpgauth-Login-Url: /auth/login
|   X-Gpgauth-Logout-Url: /auth/logout
|   X-Gpgauth-Progress: stage0
|   X-Gpgauth-Pubkey-Url: /auth/verify.json
|   X-Gpgauth-Verify-Url: /auth/verify
|   X-Gpgauth-Version: 1.3.0
|   X-Permitted-Cross-Domain-Policies: all
|   X-Xss-Protection: 1; mode=block
|   Connection: close
|   Transfer-Encoding: chunked
|   
|_  (Request type: GET)
|_http-feed: Couldn't find any feeds.

Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Tue Apr 14 04:06:40 2026 -- 1 IP address (1 host up) scanned in 361.20 seconds