GeneralInformation

Hostnames	ec2-100-24-109-168.compute-1.amazonaws.com bsale.com.mx bsale.mx
Domains	amazonaws.com bsale.com.mx bsale.mx
Cloud Provider	Amazon
Cloud Region	us-east-1
Cloud Service	EC2
Country	United States
City	Ashburn
Organization	Amazon Data Services NoVa
ISP	Amazon.com, Inc.
ASN	AS14618

WebTechnologies

JavaScript libraries

jQuery1.12.3

Select2

Tag managers

Google Tag Manager

UI frameworks

Bootstrap

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2020(2)

CVE-2020-11023

6.9In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-11022

6.9In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

2019(1)

CVE-2019-11358

6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

2015(1)

CVE-2015-9251

6.1jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

80 443

80 / tcp

-677755818 | 2025-03-22T15:22:50.193158

Hashes

hash

-690665798

http.dom_hash

-1399918778

http.favicon.hash

616687550

http.html_hash

-677755818

http.robots_hash

356022574

http.server_hash

-1340961475

HTTP/1.1 302 Found
Date: Sat, 22 Mar 2025 15:22:47 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 89
Connection: keep-alive
Server: nginx
Status: 302 Found
X-Runtime: 1
Cache-Control: no-cache
Location: https://login.bsale.cl/
Set-Cookie: cpn=; path=/
Set-Cookie: _bway_token=; path=/
Set-Cookie: cart_id=; path=/
Set-Cookie: sucursal=; path=/
Set-Cookie: salesman=; path=/
Set-Cookie: atk=; path=/
Set-Cookie: itk=; path=/
Set-Cookie: imx_2015_11=BAh7EToWc2l0ZV9waXZvdF9yZXBvcnQiADoZcmVmX2RldGFpbF90b19pbXBvcnRpADoRb3ZlcmR1ZV9kYXlzaQA6FHNpdGVfdXJsX2JhY2t1cCIAOg1zaXRlX3VybCIAOhBpZF9hcGVydHVyYWkAOhBhZ2VudF90b2tlbiItNTdhMTg1ODAxNTZlOTUzMjgyNTUzMDUzZGEyMmVhNGU2Nzc1MTE2MjoMbXlfYXBwc0Y6DWNhbl9zYWxlRjoPc2Vzc2lvbl9pZCIlN2Q1ZTI3OGM1ODNhYWM3ZGNmZTNmODk3Yzc2OGRiNGM6DWFnZW50X2lwIhEyMDcuOTAuMjQ0LjM6EWNhcnRfdG9fbG9hZGkA--4d5f1d466164d75a5c09238ca6942b8e1fc5f1ca; path=/; HttpOnly

443 / tcp

-1578129081 | 2025-03-23T23:53:19.057133

Hashes

hash

-1618601483

http.dom_hash

-2135311541

http.favicon.hash

-500886247

http.html_hash

-1578129081

http.server_hash

-1340961475

http.title_hash

-313954155

Bsale Login

HTTP/1.1 200 OK
Date: Sun, 23 Mar 2025 23:53:18 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 6093
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
Cache-Control: public, must-revalidate, max-age=0
Expires: Sun, 23 Mar 2025 23:53:18 GMT
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b0:41:8e:c0:14:47:d9:65:c9:63:a0:e9:e2:3f:67
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: Oct 23 00:00:00 2024 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: CN=bsale.mx
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:f4:89:d4:76:98:50:87:dc:7b:10:68:6c:
                    89:19:d1:f8:b8:9d:1f:37:65:5f:1c:69:ae:48:32:
                    ac:33:31:b1:20:3b:25:74:c0:6b:41:37:c6:9b:c9:
                    65:3b:c2:cc:91:62:02:ea:bb:ca:e5:2f:33:dc:86:
                    6b:1c:a0:2a:81:02:df:9a:2b:5d:cb:23:4e:7b:d2:
                    d2:30:99:99:09:ea:0e:41:15:38:6a:ce:f0:36:c3:
                    d6:45:f8:71:6b:20:3c:ff:7f:e4:af:11:3b:c2:ba:
                    f3:ec:c5:fa:03:49:23:e6:3a:b0:ae:49:52:97:9b:
                    17:35:55:76:ff:ad:ef:62:1e:2c:9d:75:68:c0:39:
                    fd:44:36:f5:da:17:76:47:47:67:88:11:88:86:13:
                    e4:14:db:6d:5d:91:93:3c:e5:ce:53:e4:d1:ad:bf:
                    34:f7:d2:07:d4:4a:5c:02:54:e9:c7:44:49:94:98:
                    9a:ec:ed:bd:c6:06:d0:ea:72:18:20:f4:42:f7:d3:
                    bc:4b:30:51:29:d9:67:5e:8a:94:06:9b:3d:d5:e8:
                    01:1e:2b:70:4d:b7:80:2a:a2:b9:b5:81:6d:5e:2c:
                    da:b0:22:f2:6f:6c:11:0f:f3:eb:de:58:98:f9:37:
                    af:4a:20:2a:03:8d:09:05:a2:d6:4d:5c:66:d7:28:
                    21:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                D9:B7:16:F3:D7:3C:09:8D:19:A4:AB:31:81:0D:35:3A:E8:47:C1:80
            X509v3 Subject Alternative Name: 
                DNS:bsale.mx, DNS:*.bsale.com.mx, DNS:*.bsale.mx, DNS:bsale.com.mx
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Oct 23 02:42:41.678 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A7:77:D7:0E:B4:59:EA:AE:D4:7D:CE:
                                B6:14:95:5E:4C:7D:90:C6:46:DC:BB:06:9C:04:13:26:
                                37:D8:EB:80:0C:02:20:0C:EF:05:2D:B4:23:AA:30:C4:
                                3F:67:3E:5C:A1:D1:CA:24:33:28:A0:01:75:B0:27:6C:
                                8A:3F:B6:72:48:AF:0B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Oct 23 02:42:41.732 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:5C:E9:AE:16:7B:68:40:9F:74:F8:C9:5D:
                                8D:08:17:4A:F4:A6:7D:97:3E:F3:D9:4A:D8:35:C4:EF:
                                8C:3F:19:43:02:21:00:9C:A3:F1:1D:C1:EC:87:F6:8C:
                                D4:35:E1:E1:2C:C2:28:38:09:1D:F3:35:A6:D5:84:BE:
                                39:C3:D2:B6:70:B6:B7
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Oct 23 02:42:41.749 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:88:D8:5E:E0:58:F0:48:72:1C:52:AC:
                                21:3D:50:75:FA:75:06:E0:4D:FE:87:D5:AD:54:DA:94:
                                FD:D2:69:D3:E4:02:21:00:CC:C6:85:61:BF:80:4C:E2:
                                BD:CF:8A:FD:AA:EB:88:5A:50:8A:D3:4A:21:1D:4B:40:
                                DF:B2:1B:A9:FE:75:AF:51
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        16:ce:e1:24:3e:4c:bd:3a:95:13:e2:63:d8:0c:51:7e:20:df:
        4a:e1:55:43:a7:dc:5e:5c:39:43:7b:a2:94:87:70:b6:d9:ed:
        02:df:85:2e:40:04:0b:65:55:a6:b9:08:94:b3:58:a5:9b:2c:
        64:a5:56:87:97:f5:21:9c:c4:a9:d0:cc:4c:56:ee:ca:d7:db:
        d5:ff:e0:7a:e2:77:ae:b5:4e:00:35:ab:93:9c:a7:3b:1a:f0:
        5f:44:ee:62:ac:4d:0a:05:77:65:1e:53:81:3c:69:66:29:f5:
        a2:0b:64:1b:eb:8e:77:59:92:b4:ed:a4:d2:6b:07:07:5d:a8:
        04:02:11:a5:b3:a9:03:87:d9:c8:7c:fa:fe:50:28:25:c6:ac:
        d5:e2:59:f1:ed:c1:48:2b:f5:af:a8:e5:37:20:e4:c9:da:57:
        ca:9f:e7:13:0b:87:c3:20:21:b5:e6:2f:91:5f:3a:54:42:80:
        e9:6e:63:8e:bc:c4:9a:cf:47:9e:e7:78:88:2b:05:11:2d:53:
        e8:7d:c9:75:4f:5d:a0:97:ea:d7:ae:e5:3d:8c:20:46:32:b7:
        02:08:e2:fb:a4:84:5f:59:8f:ae:4d:9f:ec:4a:03:e1:b2:a5:
        6f:d1:73:8f:19:e9:66:09:b1:4f:e6:1d:35:57:04:33:c3:2d:
        39:70:bd:8c

Vulnerabilities

100.24.109.168

Last Seen: 2025-03-23

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

80 / tcp

-677755818 | 2025-03-22T15:22:50.193158

Hashes

nginx

443 / tcp

-1578129081 | 2025-03-23T23:53:19.057133

Hashes

nginx

Products

Pricing

Contact Us

100.24.109.168

Last Seen: 2025-03-23

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

80 / tcp -677755818 | 2025-03-22T15:22:50.193158

Hashes

nginx

443 / tcp -1578129081 | 2025-03-23T23:53:19.057133

Hashes

nginx

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

-677755818 | 2025-03-22T15:22:50.193158

443 / tcp

-1578129081 | 2025-03-23T23:53:19.057133