```bash
whatweb --color=never --no-errors -a 3 -v https://grafana.lan.ddnsgeek.com:443 2>&1
```

[/root/results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt](file:///root/results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt):

```
WhatWeb report for https://grafana.lan.ddnsgeek.com:443
Status    : 302 Found
Title     : <None>
IP        : 167.179.167.166
Country   : NEW ZEALAND, NZ

Summary   : RedirectLocation[/login], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]

Detected Plugins:
[ RedirectLocation ]
	HTTP Server string location. used with http-status 301 and
	302

	String       : /login (from location)

[ Strict-Transport-Security ]
	Strict-Transport-Security is an HTTP header that restricts
	a web browser from accessing a website without the security
	of the HTTPS protocol.

	String       : max-age=15552000; includeSubDomains; preload

[ UncommonHeaders ]
	Uncommon HTTP server headers. The blacklist includes all
	the standard headers and many non standard but common ones.
	Interesting but fairly common headers should have their own
	plugins, eg. x-powered-by, server and x-aspnet-version.
	Info about headers can be found at www.http-stats.com

	String       : x-content-type-options (from headers)

[ X-Frame-Options ]
	This plugin retrieves the X-Frame-Options value from the
	HTTP header. - More Info:
	http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
	aspx

	String       : SAMEORIGIN

[ X-XSS-Protection ]
	This plugin retrieves the X-XSS-Protection value from the
	HTTP header. - More Info:
	http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
	aspx

	String       : 1; mode=block

HTTP Headers:
	HTTP/1.1 302 Found
	Cache-Control: no-store
	Content-Length: 29
	Content-Type: text/html; charset=utf-8
	Date: Sun, 05 Apr 2026 11:50:25 GMT
	Location: /login
	Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
	X-Content-Type-Options: nosniff
	X-Frame-Options: SAMEORIGIN
	X-Xss-Protection: 1; mode=block
	Connection: close

WhatWeb report for https://grafana.lan.ddnsgeek.com/login
Status    : 200 OK
Title     : Grafana
IP        : 167.179.167.166
Country   : NEW ZEALAND, NZ

Summary   : Grafana[12.4.2], HTML5, Script[text/javascript], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-UA-Compatible[IE=edge], X-XSS-Protection[1; mode=block]

Detected Plugins:
[ Grafana ]
	Grafana is a multi-platform open source analytics and
	interactive visualization web application. It provides
	charts, graphs, and alerts for the web when connected to
	supported data sources. It is expandable through a plug-in
	system. End users can create complex monitoring dashboards
	using interactive query builders. It is written in Go.

	Version      : 12.4.2 (from window.grafanaBootData version)
	Google Dorks: (1)
	Website     : https://github.com/grafana/grafana

[ HTML5 ]
	HTML version 5, detected by the doctype declaration


[ Script ]
	This plugin detects instances of script HTML elements and
	returns the script language/type.

	String       : text/javascript

[ Strict-Transport-Security ]
	Strict-Transport-Security is an HTTP header that restricts
	a web browser from accessing a website without the security
	of the HTTPS protocol.

	String       : max-age=15552000; includeSubDomains; preload

[ UncommonHeaders ]
	Uncommon HTTP server headers. The blacklist includes all
	the standard headers and many non standard but common ones.
	Interesting but fairly common headers should have their own
	plugins, eg. x-powered-by, server and x-aspnet-version.
	Info about headers can be found at www.http-stats.com

	String       : x-content-type-options (from headers)

[ X-Frame-Options ]
	This plugin retrieves the X-Frame-Options value from the
	HTTP header. - More Info:
	http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
	aspx

	String       : SAMEORIGIN

[ X-UA-Compatible ]
	This plugin retrieves the X-UA-Compatible value from the
	HTTP header and meta http-equiv tag. - More Info:
	http://msdn.microsoft.com/en-us/library/cc817574.aspx

	String       : IE=edge

[ X-XSS-Protection ]
	This plugin retrieves the X-XSS-Protection value from the
	HTTP header. - More Info:
	http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
	aspx

	String       : 1; mode=block

HTTP Headers:
	HTTP/1.1 200 OK
	Cache-Control: no-store
	Content-Type: text/html; charset=UTF-8
	Date: Sun, 05 Apr 2026 11:50:31 GMT
	Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
	X-Content-Type-Options: nosniff
	X-Frame-Options: SAMEORIGIN
	X-Xss-Protection: 1; mode=block
	Connection: close
	Transfer-Encoding: chunked



```