Nmap scan report for www.broadmoor.com (172.66.1.141) Host is up (0.0010s latency). Other addresses for www.broadmoor.com (not scanned): 2606:4700:7::189 2a06:98c1:58::189 162.159.141.145 Not shown: 996 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 80/tcp open http Cloudflare http proxy |_http-server-header: cloudflare |_http-title: Did not follow redirect to https://www.broadmoor.com/ 443/tcp open ssl/http Cloudflare http proxy |_http-server-header: cloudflare | ssl-cert: Subject: commonName=broadmoor.com | Subject Alternative Name: DNS:broadmoor.com, DNS:*.broadmoor.com | Not valid before: 2025-08-10T16:00:10 |_Not valid after: 2025-11-08T17:00:08 |_http-title: Destination Resort in Colorado Springs | The Broadmoor | http-robots.txt: 4 disallowed entries |_/wp-admin/ /wp-includes/ /reservations/* /admin/* 8080/tcp open http Cloudflare http proxy |_http-server-header: cloudflare |_http-title: Did not follow redirect to https://www.broadmoor.com/ 8443/tcp open ssl/http Cloudflare http proxy |_http-title: Destination Resort in Colorado Springs | The Broadmoor |_http-server-header: cloudflare | ssl-cert: Subject: commonName=broadmoor.com | Subject Alternative Name: DNS:broadmoor.com, DNS:*.broadmoor.com | Not valid before: 2025-08-10T16:00:10 |_Not valid after: 2025-11-08T17:00:08 | http-robots.txt: 4 disallowed entries |_/wp-admin/ /wp-includes/ /reservations/* /admin/* Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Aggressive OS guesses: FreeBSD 11.1-STABLE (92%), FreeBSD 11.0-STABLE (91%), FreeBSD 11.0-RELEASE - 12.0-CURRENT (89%), FreeBSD 11.1-RELEASE or 11.2-STABLE (89%), FreeBSD 11.2-RELEASE - 11.3 RELEASE or 11.2-STABLE (89%), FreeBSD 11.3-RELEASE (89%), FreeBSD 12.0-RELEASE - 13.0-CURRENT (89%), FreeBSD 11.1-RELEASE (88%), FreeBSD 12.0-RELEASE - 12.1-RELEASE or 12.0-STABLE (88%), FreeBSD 11.0-RELEASE (88%) No exact OS matches for host (test conditions non-ideal). Network Distance: 7 hops TRACEROUTE (using port 443/tcp) HOP RTT ADDRESS 1 0.25 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 1.50 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 0.69 ms r1b4.n1p1400.lax.multacom.net (64.69.46.9) 4 0.61 ms ce-1-4-2.a04.lsanca07.us.bb.gin.ntt.net (128.241.15.73) 5 0.64 ms be3243.ccr41.lax05.atlas.cogentco.com (154.54.27.118) 6 1.08 ms 38.104.83.170 7 1.13 ms 172.66.1.141 OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 25.55 seconds