```bash whatweb --color=never --no-errors -a 3 -v https://familytree.lan.ddnsgeek.com:443 2>&1 ``` [/root/results/familytree.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt](file:///root/results/familytree.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt): ``` WhatWeb report for https://familytree.lan.ddnsgeek.com:443 Status : 200 OK Title : Gramps Web IP : 167.179.167.166 Country : NEW ZEALAND, NZ Summary : HTML5, HTTPServer[gunicorn], Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block] Detected Plugins: [ HTML5 ] HTML version 5, detected by the doctype declaration [ HTTPServer ] HTTP server header string. This plugin also attempts to identify the operating system from the server header. String : gunicorn (from server string) [ Script ] This plugin detects instances of script HTML elements and returns the script language/type. String : module [ Strict-Transport-Security ] Strict-Transport-Security is an HTTP header that restricts a web browser from accessing a website without the security of the HTTPS protocol. String : max-age=15552000; includeSubDomains; preload [ UncommonHeaders ] Uncommon HTTP server headers. The blacklist includes all the standard headers and many non standard but common ones. Interesting but fairly common headers should have their own plugins, eg. x-powered-by, server and x-aspnet-version. Info about headers can be found at www.http-stats.com String : x-content-type-options (from headers) [ X-Frame-Options ] This plugin retrieves the X-Frame-Options value from the HTTP header. - More Info: http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29. aspx String : SAMEORIGIN [ X-XSS-Protection ] This plugin retrieves the X-XSS-Protection value from the HTTP header. - More Info: http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29. aspx String : 1; mode=block HTTP Headers: HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: no-cache Content-Disposition: inline; filename=index.html Content-Encoding: deflate Content-Type: text/html; charset=utf-8 Date: Tue, 14 Apr 2026 03:26:54 GMT Etag: "1775817020.0-1497-1563297874:deflate" Last-Modified: Fri, 10 Apr 2026 10:30:20 GMT Server: gunicorn Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block Connection: close Transfer-Encoding: chunked ```