```bash whatweb --color=never --no-errors -a 3 -v https://searxng.lan.ddnsgeek.com:443 2>&1 ``` [/root/results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt](file:///root/results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt): ``` WhatWeb report for https://searxng.lan.ddnsgeek.com:443 Status : 200 OK Title : SearXNG IP : 167.179.167.166 Country : NEW ZEALAND, NZ Summary : HTML5, HTTPServer[granian], MetaGenerator[searxng/2026.4.5+474b0a55b], OpenSearch[/opensearch.xml?method=POST&autocomplete=], Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[referrer-policy,server-timing,x-content-type-options,x-download-options,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block] Detected Plugins: [ HTML5 ] HTML version 5, detected by the doctype declaration [ HTTPServer ] HTTP server header string. This plugin also attempts to identify the operating system from the server header. String : granian (from server string) [ MetaGenerator ] This plugin identifies meta generator tags and extracts its value. String : searxng/2026.4.5+474b0a55b [ OpenSearch ] This plugin identifies open search and extracts the URL. OpenSearch is a collection of simple formats for the sharing of search results. String : /opensearch.xml?method=POST&autocomplete= [ Script ] This plugin detects instances of script HTML elements and returns the script language/type. String : module [ Strict-Transport-Security ] Strict-Transport-Security is an HTTP header that restricts a web browser from accessing a website without the security of the HTTPS protocol. String : max-age=15552000; includeSubDomains; preload [ UncommonHeaders ] Uncommon HTTP server headers. The blacklist includes all the standard headers and many non standard but common ones. Interesting but fairly common headers should have their own plugins, eg. x-powered-by, server and x-aspnet-version. Info about headers can be found at www.http-stats.com String : referrer-policy,server-timing,x-content-type-options,x-download-options,x-robots-tag (from headers) [ X-Frame-Options ] This plugin retrieves the X-Frame-Options value from the HTTP header. - More Info: http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29. aspx String : SAMEORIGIN [ X-XSS-Protection ] This plugin retrieves the X-XSS-Protection value from the HTTP header. - More Info: http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29. aspx String : 1; mode=block HTTP Headers: HTTP/1.1 200 OK Content-Length: 6340 Content-Type: text/html; charset=utf-8 Date: Sun, 05 Apr 2026 09:27:23 GMT Referrer-Policy: no-referrer Server: granian Server-Timing: total;dur=2.321, render;dur=0.755 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block Connection: close ```