Editing 430.ch Reconnaissance Report (section)

=== <code>wiki.430.ch</code> ===

Resolution:

<pre>
wiki.430.ch -> 430.ch -> 83.228.241.21 / 2001:1600:18:102::167
</pre>

HTTP:

<pre>
HTTP/1.1 308 Permanent Redirect
Location: https://wiki.430.ch/
Server: Caddy
</pre>

HTTPS headers:

<pre>
HTTP/2 200
server: Caddy
server: Apache/2.4.67 (Debian)
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-content-type-options: nosniff
x-frame-options: DENY
x-powered-by: PHP/8.3.32
</pre>

Page:

* Title: <code>Login required - Aivaropedia</code>
* Generator meta tag: <code>MediaWiki 1.46.0</code>
* Site name: <code>Aivaropedia</code>
* Anonymous page body: <code>Please log in to view other pages.</code>
* Search UI is visible.
* Login link is visible.
* Atom feed link for <code>Special:RecentChanges</code> is advertised in HTML.

API read attempt:

<pre>
{
  "error": {
    "code": "readapidenied",
    "info": "You need read permission to use this module.",
    "*": "See https://wiki.430.ch/api.php for API usage. Subscribe to the mediawiki-api-announce mailing list at <https://lists.wikimedia.org/postorius/lists/mediawiki-api-announce.lists.wikimedia.org/> for notice of API deprecations and breaking changes."
  }
}
</pre>

Interpretation:

* Read access is denied via the API, which is consistent with a private wiki.
* Some platform information is still exposed in HTML and headers:
** MediaWiki 1.46.0
** PHP 8.3.32
** Apache 2.4.67 (Debian)
* <code>X-Frame-Options: DENY</code> and <code>X-Content-Type-Options: nosniff</code> are present.
* HSTS is not configured.