autorecon/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt

WhatWeb report for http://shifts.lan.ddnsgeek.com:80
Status    : 301 Moved Permanently
Title     : <None>
IP        : 167.179.167.166
Country   : NEW ZEALAND, NZ

Summary   : RedirectLocation[https://shifts.lan.ddnsgeek.com/]

Detected Plugins:
[ RedirectLocation ]
	HTTP Server string location. used with http-status 301 and
	302

	String       : https://shifts.lan.ddnsgeek.com/ (from location)

HTTP Headers:
	HTTP/1.1 301 Moved Permanently
	Location: https://shifts.lan.ddnsgeek.com/
	Date: Sun, 05 Apr 2026 09:48:49 GMT
	Content-Length: 17
	Connection: close

WhatWeb report for https://shifts.lan.ddnsgeek.com/
Status    : 200 OK
Title     : Chrona · Intelligent shift tracking
IP        : 167.179.167.166
Country   : NEW ZEALAND, NZ

Summary   : HTML5, HTTPServer[nginx/1.29.7], nginx[1.29.7], Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,permissions-policy,referrer-policy,x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]

Detected Plugins:
[ HTML5 ]
	HTML version 5, detected by the doctype declaration


[ HTTPServer ]
	HTTP server header string. This plugin also attempts to
	identify the operating system from the server header.

	String       : nginx/1.29.7 (from server string)

[ Script ]
	This plugin detects instances of script HTML elements and
	returns the script language/type.

	String       : module

[ Strict-Transport-Security ]
	Strict-Transport-Security is an HTTP header that restricts
	a web browser from accessing a website without the security
	of the HTTPS protocol.

	String       : max-age=15552000; includeSubDomains; preload

[ UncommonHeaders ]
	Uncommon HTTP server headers. The blacklist includes all
	the standard headers and many non standard but common ones.
	Interesting but fairly common headers should have their own
	plugins, eg. x-powered-by, server and x-aspnet-version.
	Info about headers can be found at www.http-stats.com

	String       : content-security-policy,permissions-policy,referrer-policy,x-content-type-options (from headers)

[ X-Frame-Options ]
	This plugin retrieves the X-Frame-Options value from the
	HTTP header. - More Info:
	http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
	aspx

	String       : SAMEORIGIN

[ X-XSS-Protection ]
	This plugin retrieves the X-XSS-Protection value from the
	HTTP header. - More Info:
	http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
	aspx

	String       : 1; mode=block

[ nginx ]
	Nginx (Engine-X) is a free, open-source, high-performance
	HTTP server and reverse proxy, as well as an IMAP/POP3
	proxy server.

	Version      : 1.29.7
	Website     : http://nginx.net/

HTTP Headers:
	HTTP/1.1 200 OK
	Accept-Ranges: bytes
	Cache-Control: no-store
	Content-Length: 564
	Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; connect-src 'self' https://date.nager.at; img-src 'self' data:; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self'; manifest-src 'self'
	Content-Type: text/html
	Date: Sun, 05 Apr 2026 09:48:56 GMT
	Etag: "69c9ee89-234"
	Last-Modified: Mon, 30 Mar 2026 03:31:21 GMT
	Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), usb=()
	Referrer-Policy: no-referrer
	Server: nginx/1.29.7
	Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
	X-Content-Type-Options: nosniff
	X-Frame-Options: SAMEORIGIN
	X-Xss-Protection: 1; mode=block
	Connection: close