WhatWeb report for https://gitea.lan.ddnsgeek.com:443
Status    : 200 OK
Title     : Gitea: Git with a cup of tea
IP        : 167.179.167.166
Country   : NEW ZEALAND, NZ

Summary   : Cookies[_csrf,i_like_gitea], HTML5, HttpOnly[_csrf,i_like_gitea], Meta-Author[Gitea - Git with a cup of tea], Open-Graph-Protocol[website], PoweredBy[Gitea], Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]

Detected Plugins:
[ Cookies ]
	Display the names of cookies in the HTTP headers. The
	values are not returned to save on space.

	String       : i_like_gitea
	String       : _csrf

[ HTML5 ]
	HTML version 5, detected by the doctype declaration


[ HttpOnly ]
	If the HttpOnly flag is included in the HTTP set-cookie
	response header and the browser supports it then the cookie
	cannot be accessed through client side script - More Info:
	http://en.wikipedia.org/wiki/HTTP_cookie

	String       : _csrf,i_like_gitea

[ Meta-Author ]
	This plugin retrieves the author name from the meta name
	tag - info:
	http://www.webmarketingnow.com/tips/meta-tags-uncovered.html
	#author

	String       : Gitea - Git with a cup of tea

[ Open-Graph-Protocol ]
	The Open Graph protocol enables you to integrate your Web
	pages into the social graph. It is currently designed for
	Web pages representing profiles of real-world things .
	things like movies, sports teams, celebrities, and
	restaurants. Including Open Graph tags on your Web page,
	makes your page equivalent to a Facebook Page.

	Version      : website

[ PoweredBy ]
	This plugin identifies instances of 'Powered by x' text and
	attempts to extract the value for x.

	String       : Gitea

[ Script ]
	This plugin detects instances of script HTML elements and
	returns the script language/type.


[ Strict-Transport-Security ]
	Strict-Transport-Security is an HTTP header that restricts
	a web browser from accessing a website without the security
	of the HTTPS protocol.

	String       : max-age=15552000; includeSubDomains; preload

[ UncommonHeaders ]
	Uncommon HTTP server headers. The blacklist includes all
	the standard headers and many non standard but common ones.
	Interesting but fairly common headers should have their own
	plugins, eg. x-powered-by, server and x-aspnet-version.
	Info about headers can be found at www.http-stats.com

	String       : x-content-type-options (from headers)

[ X-Frame-Options ]
	This plugin retrieves the X-Frame-Options value from the
	HTTP header. - More Info:
	http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
	aspx

	String       : SAMEORIGIN

[ X-XSS-Protection ]
	This plugin retrieves the X-XSS-Protection value from the
	HTTP header. - More Info:
	http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
	aspx

	String       : 1; mode=block

HTTP Headers:
	HTTP/1.1 200 OK
	Cache-Control: max-age=0, private, must-revalidate, no-transform
	Content-Type: text/html; charset=utf-8
	Date: Sun, 05 Apr 2026 07:39:56 GMT
	Set-Cookie: i_like_gitea=347e80ebda732f96; Path=/; HttpOnly; Secure; SameSite=Lax
	Set-Cookie: _csrf=RylW81_R_SZKNuv5atxTiB8KIhQ6MTc3NTM3NDc5NjQ1ODA2Nzk1Ng; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=Lax
	Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
	X-Content-Type-Options: nosniff
	X-Frame-Options: SAMEORIGIN
	X-Xss-Protection: 1; mode=block
	Connection: close
	Transfer-Encoding: chunked