Web
Nmap has enumerated that a web server is running on port 80
It also discovered that the index page is re-directing users to HTTPs
This can be confirmed.
┌──(kali㉿kali)-[~/archive/htb/labs/beep]
└─$ curl http://beep.localdomain/
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>the document has moved <a href="https://beep.localdomain/">here</a>.</p>
<hr>
<address>Apache/2.2.3 (CentOS) Server at beep.localdomain Port 80</address>
</body></html>I used the domain information enumerated from the Nmap scan and SMTP enumeration