# Nmap 7.98 scan initiated Sun Apr  5 08:16:04 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com
Nmap scan report for nextcloud.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.026s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:16:23 UTC for 705s

PORT    STATE SERVICE  REASON         VERSION
443/tcp open  ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-server-header: Apache/2.4.66 (Debian)
| http-headers: 
|   Cache-Control: no-cache, no-store, must-revalidate
|   Content-Length: 16047
|   Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|   Content-Type: text/html; charset=UTF-8
|   Date: Sun, 05 Apr 2026 08:19:52 GMT
|   Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
|   Referrer-Policy: same-origin
|   Server: Apache/2.4.66 (Debian)
|   Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
|   Set-Cookie: oc_sessionPassphrase=vaA75gLRczK4PR19LRVIdeCUbAH2eyCr84lwC0J%2FRs%2FAJzlQYpiLdt%2BxMWrssNRkSjTrifW2r%2Fg0sWzn7Cact8Zw3rXzotR6z4WBk4sSNdwp4UgXFlUAwNHKCMEVwmfq; path=/; secure; HttpOnly; SameSite=Lax
|   Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
|   Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|   Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|   Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
|   Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
|   Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|   X-Content-Type-Options: nosniff
|   X-Frame-Options: SAMEORIGIN
|   X-Permitted-Cross-Domain-Policies: none
|   X-Powered-By: PHP/8.3.30
|   X-Request-Id: 8l0zCl9BZ2uwysWABFY8
|   X-Robots-Tag: noindex, nofollow
|   X-Xss-Protection: 1; mode=block
|   Connection: close
|   
|_  (Request type: HEAD)
| http-title: Login \xE2\x80\x93 Nextcloud
|_Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login
| http-vhosts: 
| 127 names had status 404
|_auth.lan.ddnsgeek.com : 200
|_http-feed: Couldn't find any feeds.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| ssl-enum-ciphers: 
|   TLSv1.2: 
|     ciphers: 
|       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
|     compressors: 
|       NULL
|     cipher preference: client
|     warnings: 
|       Key exchange (secp256r1) of lower strength than certificate key
|   TLSv1.3: 
|     ciphers: 
|       TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
|       TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
|       TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|     cipher preference: server
|_  least strength: A
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
| http-errors: 
| Spidering limited to: maxpagecount=40; withinhost=nextcloud.lan.ddnsgeek.com
|   Found the following error pages: 
|   
|   Error Code: 404
|_  	http://nextcloud.lan.ddnsgeek.com:443/
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-sitemap-generator: 
|   Directory structure:
|     /index.php/
|       Other: 1
|   Longest directory structure:
|     Depth: 1
|     Dir: /index.php/
|   Total files found (by extension):
|_    Other: 1
|_http-date: Sun, 05 Apr 2026 08:20:00 GMT; -6s from local time.
| http-waf-detect: IDS/IPS/WAF detected:
|_nextcloud.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
| http-security-headers: 
|   Strict_Transport_Security: 
|     Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|   X_Frame_Options: 
|     Header: X-Frame-Options: SAMEORIGIN
|     Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|   X_XSS_Protection: 
|     Header: X-XSS-Protection: 1; mode=block
|     Description: The browser will prevent the rendering of the page when XSS is detected.
|   X_Content_Type_Options: 
|     Header: X-Content-Type-Options: nosniff
|     Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. 
|   Content_Security_Policy: 
|     Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|     Description: Define the base uri for relative uri.
|     Description: Define loading policy for all resources type in case of a resource type dedicated directive is not defined (fallback).
|     Description: Define which scripts the protected resource can execute.
|     Description: Define which styles (CSS) the user applies to the protected resource.
|     Description: Define from where the protected resource can load images.
|     Description: Define from where the protected resource can load video and audio.
|     Description: Deprecated and replaced by child-src. Define from where the protected resource can embed frames.
|     Description: Define from where the protected resource can be embedded in frames.
|     Description: Define from where the protected resource can load fonts.
|     Description: Define which URIs the protected resource can load using script interfaces.
|     Description: Define which URIs can be used as the action of HTML form elements.
|   X_Permitted_Cross_Domain_Policies: 
|     Header: X-Permitted-Cross-Domain-Policies: none
|     Description: No policy files are allowed anywhere on the target server, including this master policy file. 
|   Cookie: 
|     Cookies are secured with Secure Flag in HTTPS Connection
|   Cache_Control: 
|_    Header: Cache-Control: no-cache, no-store, must-revalidate
| http-useragent-tester: 
|   Status for browser useragent: 200
|   Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
|   Allowed User Agents: 
|     Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|     libwww
|     lwp-trivial
|     libcurl-agent/1.0
|     PHP/
|     Python-urllib/2.5
|     GT::WWW
|     Snoopy
|     MFC_Tear_Sample
|     HTTP::Lite
|     PHPCrawl
|     URI::Fetch
|     Zend_Http_Client
|     http client
|     PECL::HTTP
|     Wget/1.13.4 (linux-gnu)
|_    WWW-Mechanize/1.34
|_http-chrono: Request times for /index.php/login; avg: 3919.89ms; min: 1656.25ms; max: 10499.33ms
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-mobileversion-checker: No mobile version detected.
|_http-php-version: Logo query returned unknown hash e473773cc5b8b9dc08c846c0dc434c15
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-methods: 
|_  Supported Methods: GET HEAD POST OPTIONS
|_ssl-date: TLS randomness does not represent time
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-comments-displayer: Couldn't find any comments.
| http-traceroute: 
|   Status Code
|     Hop #1: 404
|     Hop #2: 302
|     Hop #3: 302
|   server
|     Hop #1
|     Hop #2: Apache/2.4.66 (Debian)
|     Hop #3: Apache/2.4.66 (Debian)
|   content-type
|     Hop #1: text/plain; charset=utf-8
|     Hop #2: text/html; charset=UTF-8
|     Hop #3: text/html; charset=UTF-8
|   content-length
|     Hop #1: 19
|     Hop #2: 0
|     Hop #3: 0
|   location
|     Hop #1
|     Hop #2: https://nextcloud.lan.ddnsgeek.com/index.php/login
|_    Hop #3: https://nextcloud.lan.ddnsgeek.com/index.php/login
|_http-malware-host: Host appears to be clean
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php

Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr  5 08:28:09 2026 -- 1 IP address (1 host up) scanned in 727.15 seconds