Editing 430.ch Reconnaissance Report (section)

== HTTP and HTTPS Findings ==

=== Apex HTTP ===

<code>http://430.ch/</code>:

<pre>
HTTP/1.1 308 Permanent Redirect
Location: https://430.ch/
Server: Caddy
Content-Length: 0
</pre>

=== Apex HTTPS ===

<code>https://430.ch/</code>:

<pre>
HTTP/2 200
accept-ranges: bytes
access-control-allow-credentials: true
access-control-allow-origin:
access-control-expose-headers: *
alt-svc: h3=":443"; ma=2592000
content-type: text/html; charset=utf-8
etag: "thv7n5xd"
last-modified: Wed, 08 Jul 2026 16:40:17 GMT
server: Caddy
vary: Origin
content-length: 1201
</pre>

With an explicit origin header:

<pre>
curl -H 'Origin: https://example.com' https://430.ch/

access-control-allow-credentials: true
access-control-allow-origin: https://example.com
access-control-expose-headers: *
vary: Origin
</pre>

Interpretation:

* The server reflects arbitrary origins and allows credentials.
* Current content is static, so the practical risk is limited today.
* This is still broader than necessary unless cross-origin credentialed reads are deliberately needed.

=== Root Page Content ===

The root HTML:

* Has title <code>430.ch</code>.
* Uses inline CSS.
* Displays an image with id <code>bopis</code>.
* The image source is selected by JavaScript from <code>/m/1.webp</code> through <code>/m/6.webp</code>.
* Changes the image every 10 seconds.
* Links:
** <code>/m/</code>
** <code>/contact-us/</code>
** <code>https://noctron.ch/</code>
** <code>https://aivaras.xyz/</code>

Relevant source excerpt:

<pre>
<a href="/m/"> <img id="bopis"> </a>

<p>
    <s>&#169;</s> 430.ch | <a href="/contact-us/">Contact Us</a> | See also: <a href="https://noctron.ch/">noctron.ch</a>, <a href="https://aivaras.xyz/">aivaras.xyz</a>
</p>

<script type="text/javascript">
    var photos = ["1.webp", "2.webp", "3.webp", "4.webp", "5.webp", "6.webp"];
    ...
    document.getElementById("bopis").src = "/m/" + photos[i];
</script>
</pre>

=== Robots, Sitemap, and Well-Known Files ===

<code>https://430.ch/robots.txt</code>:

<pre>
User-agent: *
Allow: /
</pre>

Not present:

* <code>https://430.ch/sitemap.xml</code> returned <code>404</code>.
* <code>https://430.ch/.well-known/security.txt</code> returned <code>404</code>.
* Historical Web Archive entries existed for various <code>.well-known</code> paths, but current live checks returned <code>404</code>.

Current live checks returning <code>404</code>:

* <code>/.well-known/ai-plugin.json</code>
* <code>/.well-known/dnt-policy.txt</code>
* <code>/.well-known/gpc.json</code>
* <code>/.well-known/nodeinfo</code>
* <code>/.well-known/openid-configuration</code>
* <code>/ads.txt</code>
* <code>/app-ads.txt</code>
* <code>/info/</code>
* <code>/search/</code>

=== Missing Stylesheet ===

Several pages reference:

<pre>
https://430.ch/style.css
</pre>

Current result:

<pre>
HTTP/2 404
server: Caddy
content-length: 0
</pre>

Impact:

* Cosmetic / hygiene issue.
* It may produce avoidable browser console noise.

=== <code>/m/</code> Directory ===

<code>https://430.ch/m/</code> is a public Caddy directory listing.

Files discovered:

<pre>
1.webp  218 KiB
2.webp  119 KiB
3.webp  112 KiB
4.webp  349 KiB
5.webp  173 KiB
6.webp  290 KiB
</pre>

The directory index includes sortable Caddy listing links:

<pre>
?sort=namedirfirst&order=desc
?sort=name&order=asc
?sort=size&order=asc
?sort=time&order=asc
?sort=namedirfirst&order=asc
?sort=name&order=desc
?sort=size&order=desc
?sort=time&order=desc
</pre>

The mirrored copies are stored in:

<pre>
/root/recon-430ch/wget/430.ch/m/
</pre>

=== <code>/contact-us/</code> ===

<code>https://430.ch/contact-us/</code> is a small static page.

HTML:

<pre>
<!DOCTYPE html>
<html> <head>
    <title>Contact Us</title>
    <link rel="stylesheet" href="https://430.ch/style.css">
</head> <body>
    <center>
        <img src="1.png" alt="meighl at four hundred and thirty dot ch">
    </center>
</body> </html>
</pre>

The image alt text exposes a likely contact address:

<pre>
meighl@430.ch
</pre>

This is already public in machine-readable HTML despite being visually represented by an image.

=== Linked External Domains ===

The root page links <code>noctron.ch</code> and <code>aivaras.xyz</code>.

Both resolved to the same host as the apex:

<pre>
noctron.ch
  A:    83.228.241.21
  AAAA: 2001:1600:18:102::167

aivaras.xyz
  A:    83.228.241.21
  AAAA: 2001:1600:18:102::167
</pre>

<code>https://noctron.ch/</code>:

<pre>
<title>noctron.ch</title>
<link rel="stylesheet" href="https://430.ch/style.css">
...
<a href="https://noctron.ch/">noctron.ch</a> &rarr; <a href="https://430.ch/">430.ch</a>
</pre>

<code>https://aivaras.xyz/</code>:

<pre>
<title>aivaras.xyz</title>
<link rel="stylesheet" href="https://430.ch/style.css">
...
<a href="https://aivaras.xyz/">aivaras.xyz</a> &rarr; <a href="https://430.ch/">430.ch</a>
</pre>

Both also reference the missing <code>https://430.ch/style.css</code>.