GeneralInformation

Hostnames	vps.medhealth.com.au otmedicolegal.com.au cpanel.otmedicolegal.com.au cpcalendars.otmedicolegal.com.au cpcontacts.otmedicolegal.com.au mail.otmedicolegal.com.au webdisk.otmedicolegal.com.au webmail.otmedicolegal.com.au www.otmedicolegal.com.au unassigned
Domains	medhealth.com.au otmedicolegal.com.au unassigned.
Country	Australia
City	Sydney
Organization	SYNERGY WHOLESALE PTY LTD
ISP	SYNERGY WHOLESALE PTY LTD
ASN	AS45638

WebTechnologies

Blogs

WordPress

Caching

Litespeed Cache

LiteSpeed Cache

CMS

WordPress

Databases

MySQL

Ecommerce

Abicart

JavaScript graphics

Chart.js

JavaScript libraries

prettyPhoto

Miscellaneous

HTTP/3

Photo galleries

Slider Revolution6.6.13

Programming languages

PHP

UI frameworks

Bootstrap

Video players

FitVids.JS6.7.2

Web servers

LiteSpeed

Widgets

FitVids.JS6.7.2

Slider Revolution6.6.13

WordPress plugins

Litespeed Cache

LiteSpeed Cache

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2024(2)

CVE-2024-25117

6.8php-svg-lib is a scalable vector graphics (SVG) file parsing/rendering library. Prior to version 0.5.2, php-svg-lib fails to validate that font-family doesn't contain a PHAR url, which might leads to RCE on PHP < 8.0, and doesn't validate if external references are allowed. This might leads to bypass of restrictions or RCE on projects that are using it, if they do not strictly revalidate the fontName that is passed by php-svg-lib. The `Style::fromAttributes(`), or the `Style::parseCssStyle()` should check the content of the `font-family` and prevents it to use a PHAR url, to avoid passing an invalid and dangerous `fontName` value to other libraries. The same check as done in the `Style::fromStyleSheets` might be reused. Libraries using this library as a dependency might be vulnerable to some bypass of restrictions, or even remote code execution, if they do not double check the value of the `fontName` that is passed by php-svg-lib. Version 0.5.2 contains a fix for this issue.

CVE-2024-5458

5.3In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly.

2022(1)

CVE-2022-4900

6.2A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

2013(1)

CVE-2013-2220

7.5Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.

2007(1)

CVE-2007-3205

5.0The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

OpenPorts

53 80 443 465 587 995 2082 2083 2095

53 / tcp

-555053271 | 2025-03-18T20:39:49.566132

PowerDNS Authoritative Server 4.9.2 (built Dec 19 2024 15:24:48 by root@bh-centos-7.dev.cpanel.net)
Resolver ID: vps.medhealth.com.au

80 / tcp

-4595381 | 2025-02-26T22:15:52.059021

Hashes

hash

1225758455

http.dom_hash

1138593847

http.html_hash

-4595381

http.server_hash

-133603840

http.title_hash

1271976826

Default Web Site Page

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
etag: "21177-1740608151;;;"
x-litespeed-cache: miss
transfer-encoding: chunked
date: Wed, 26 Feb 2025 22:15:51 GMT
server: LiteSpeed

443 / tcp

1931678831 | 2025-03-19T06:35:26.407134

Hashes

hash

-2003365732

http.dom_hash

673305694

http.favicon.hash

-1321624478

http.html_hash

1931678831

http.robots_hash

1432831176

http.server_hash

-133603840

http.title_hash

1786728648

OT MedicoLegal | Medicolegal Experts

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-powered-by: PHP/7.4.33
content-type: text/html; charset=UTF-8
link: <https://www.otmedicolegal.com.au/wp-json/>; rel="https://api.w.org/"
link: <https://www.otmedicolegal.com.au/wp-json/wp/v2/pages/10>; rel="alternate"; title="JSON"; type="application/json"
link: <https://www.otmedicolegal.com.au/>; rel=shortlink
etag: "81707-1742365788;;;"
x-litespeed-cache: miss
transfer-encoding: chunked
date: Wed, 19 Mar 2025 06:29:48 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ff:af:28:4c:58:34:72:f7:ed:4b:55:78:ad:2f:0b:32:55
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Jan 24 02:33:37 2025 GMT
            Not After : Apr 24 02:33:36 2025 GMT
        Subject: CN=cpcontacts.otmedicolegal.com.au
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:cb:f7:4c:b9:6e:c3:d4:75:c9:56:57:51:
                    26:b9:ee:db:dd:90:57:b8:8f:3f:b5:7c:71:1b:50:
                    b2:a1:ac:89:8d:6a:23:3a:98:fa:e9:1d:04:2d:0a:
                    71:9a:c5:4e:f2:6f:c1:44:20:ee:46:c2:25:bb:1e:
                    95:45:d3:bb:3d:65:96:54:0c:0a:ea:31:1a:8a:cb:
                    c8:ad:e0:e9:42:c8:b1:54:83:5a:f4:60:85:49:94:
                    6c:46:20:1a:c3:4b:0d:a9:56:aa:11:83:10:56:ee:
                    1e:bb:d7:59:f6:62:23:6b:13:0a:f3:8e:1d:42:31:
                    7b:d1:68:4d:96:ce:3b:33:de:0a:07:35:18:1c:1c:
                    02:74:cc:30:ba:d6:3a:ef:f7:f4:4f:10:53:4e:10:
                    c5:36:99:5c:76:9d:df:04:fe:e4:dc:70:48:d7:18:
                    3f:c5:b6:b9:09:e0:56:b4:b0:f0:26:68:44:88:9d:
                    9e:c9:7c:09:c5:aa:bb:7e:46:b9:53:57:14:46:8f:
                    60:95:51:a4:a1:42:c3:c9:34:3f:f4:26:b1:26:db:
                    73:57:eb:5c:34:81:5e:ab:88:db:73:03:f0:bf:9e:
                    52:ee:e6:55:1f:dc:09:ce:c0:64:e9:9e:a1:78:ab:
                    9d:26:05:8c:f0:2e:8b:62:2e:67:49:aa:22:16:fa:
                    75:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                6E:5F:E8:79:E9:F6:CD:BB:6B:76:02:EC:C9:9B:CE:B7:D1:27:04:F3
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:cpanel.otmedicolegal.com.au, DNS:cpcalendars.otmedicolegal.com.au, DNS:cpcontacts.otmedicolegal.com.au, DNS:mail.otmedicolegal.com.au, DNS:otmedicolegal.com.au, DNS:webdisk.otmedicolegal.com.au, DNS:webmail.otmedicolegal.com.au, DNS:www.otmedicolegal.com.au
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Jan 24 03:32:07.237 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:30:57:FF:45:4D:41:14:5D:3D:75:8C:1C:
                                33:29:A5:C5:BB:D7:5B:75:66:13:A9:0B:07:F3:5F:23:
                                7D:7F:C9:59:02:21:00:C9:1D:2F:B3:CC:66:ED:49:6C:
                                DE:52:45:D4:3E:ED:52:F7:95:8B:F6:BC:82:2E:FA:D3:
                                FD:16:A1:B8:06:38:51
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D:
                                0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04
                    Timestamp : Jan 24 03:32:07.289 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B2:83:15:B7:C9:39:35:00:E1:08:6D:
                                F6:28:1A:8F:82:A3:44:CE:CF:28:6E:0A:7B:91:83:BA:
                                9E:D4:4D:F2:4C:02:21:00:ED:76:FC:9A:71:3D:02:F2:
                                24:C5:09:B5:03:40:3D:AE:8A:07:63:4E:E9:4D:2D:A4:
                                37:EE:B7:0D:0F:A1:49:D4
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        61:68:62:1a:27:a2:1c:4e:cf:29:cd:ae:6b:52:a5:5c:1d:99:
        62:64:64:5a:55:32:5f:0f:82:fc:a5:b9:df:14:cc:61:1a:74:
        8a:a7:14:00:88:5e:b5:6d:28:75:f2:5d:56:e8:56:33:05:c1:
        2e:4f:95:5d:7d:23:0c:46:4e:0c:9e:7a:c4:7e:2d:f6:a5:6a:
        1b:17:62:75:46:62:4f:de:26:d3:0e:5e:63:36:bb:64:e9:18:
        fc:c6:cc:cc:44:bb:9d:2c:39:fb:4d:b1:05:85:cb:e5:72:0a:
        75:1d:ea:75:02:ef:48:e7:ea:5c:b5:b7:24:5c:a1:fb:e7:8e:
        90:d2:17:c7:49:d0:4c:6e:e5:49:d2:7e:c2:14:a6:e0:9e:97:
        6d:f1:7f:ab:71:a0:62:f1:18:db:38:ad:0c:10:83:dd:0c:73:
        87:21:12:e5:0d:10:a2:e7:26:97:2a:11:0e:71:c9:11:a2:68:
        da:77:b3:e0:27:0a:4a:f4:87:f4:87:49:83:3f:ed:35:14:cc:
        7d:37:af:71:38:84:b1:59:74:c3:b9:0e:d8:26:40:5f:ab:b1:
        2e:8b:6c:62:e1:88:64:6a:34:c9:d2:bc:5f:17:fc:50:5c:e6:
        27:0d:4a:91:36:bb:f5:6c:e7:1b:09:60:25:92:de:15:8b:30:
        d0:e3:13:05

Vulnerabilities

1 4

465 / tcp

-280978569 | 2025-03-07T13:22:38.004773

220-vps.medhealth.com.au ESMTP Exim 4.98.1 #2 Sat, 08 Mar 2025 00:22:17 +1100 
220-We do not authorize the use of this system to transport unsolicited, 
220 and/or bulk e-mail.
250-vps.medhealth.com.au Hello 6wqr708k1hrvlz.net [224.118.18.223]
250-SIZE 52428800
250-LIMITS MAILMAX=1000 RCPTMAX=50000
250-8BITMIME
250-PIPELINING
250-PIPECONNECT
250-AUTH PLAIN LOGIN
250 HELP

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:51:8c:25:b4:5f:2c:3e:ed:a3:2c:d4:53:18:ca:4b:c5:8e
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Feb 23 02:56:35 2025 GMT
            Not After : May 24 02:56:34 2025 GMT
        Subject: CN=vps.medhealth.com.au
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:a9:4e:e0:80:3f:ec:49:e5:58:93:c1:c0:
                    1d:fc:eb:cc:f2:fb:18:ba:0c:8b:91:ee:d9:88:9f:
                    69:99:a4:77:70:25:27:2e:4c:5c:ed:c1:04:e1:05:
                    4e:d8:d4:fd:62:7c:f2:a6:37:6c:37:fb:3c:3b:7f:
                    57:f0:d9:4a:7d:6d:6e:a3:e8:06:fc:41:19:b8:f6:
                    a6:34:01:64:f8:f3:37:fe:f3:4e:66:9d:d4:3f:ce:
                    15:be:d2:05:a5:0c:5d:5a:85:ba:dc:dc:50:f6:e8:
                    fb:53:e5:a2:f5:6f:4d:cf:d3:1e:c2:78:7c:6a:92:
                    19:21:02:82:4a:ce:3f:94:a7:2a:22:c4:77:21:38:
                    70:d6:33:2f:9d:52:a3:07:7e:7b:99:ea:53:93:3d:
                    a4:c1:f1:e3:b4:d5:a9:4f:01:3a:d5:9f:0e:53:17:
                    e3:23:30:30:27:2b:fa:79:36:2c:73:82:6f:f5:c3:
                    13:b5:30:b0:82:95:92:5d:0a:57:31:33:f9:ce:7b:
                    35:39:6f:a3:5f:55:9c:e7:fa:e9:9e:a8:9f:d5:7f:
                    07:05:34:ff:9d:02:9b:d3:c7:50:c8:58:aa:fb:ac:
                    d6:31:f2:2c:51:4a:39:d8:0f:3e:7e:31:ea:98:d0:
                    ac:37:34:37:0f:44:d4:27:d9:0d:fd:ac:a8:f1:4c:
                    6a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                29:1B:30:02:DC:0A:91:6E:89:BB:4A:86:28:CB:00:59:CD:80:7E:E9
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:vps.medhealth.com.au
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb 23 03:55:05.355 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:12:34:37:DE:6C:FB:A2:99:37:F1:F2:6D:
                                DF:7D:C0:11:2C:06:E4:0A:76:CF:4A:64:C0:28:E6:3F:
                                9D:2F:50:76:02:21:00:E4:36:F0:DF:BE:CC:82:45:0A:
                                1D:91:F7:28:94:4A:D7:5D:AE:DE:D0:2E:A2:AA:BF:95:
                                EA:B2:AE:48:2D:D8:8F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Feb 23 03:55:05.811 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F2:24:7B:9A:B3:E5:60:AA:9E:4F:11:
                                D5:35:EA:97:D1:FD:C4:5D:4B:0B:24:80:E8:1F:86:8E:
                                DD:DE:4B:F7:4C:02:20:15:5F:42:E2:9D:F0:50:35:B6:
                                B2:A0:F2:B2:70:F7:5F:23:50:38:80:C6:3A:27:DF:F8:
                                94:7B:29:B6:46:28:E4
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        3f:96:a6:be:e9:3e:5e:ab:8c:73:0b:0d:f1:67:74:4c:3f:7c:
        b7:fa:62:72:a9:8b:c4:cf:83:9b:61:ba:a4:77:65:2b:4c:df:
        e3:bd:1c:67:9c:8c:ff:20:12:2a:b9:58:9b:f0:30:9d:a4:0c:
        03:e8:f9:71:69:74:d1:17:b4:46:80:66:8e:c7:be:e4:bf:31:
        2c:6f:00:32:d2:47:73:86:bb:ff:1e:ea:98:a6:2b:ed:31:9f:
        8a:ee:45:51:0d:17:44:f8:d0:2d:47:a8:61:d1:43:83:89:35:
        be:75:70:95:3f:4e:72:2f:a9:e5:cd:b5:40:c9:82:78:8e:f1:
        11:a9:4d:1b:8b:08:5f:0c:67:bd:ea:ee:b2:90:b9:ca:3d:28:
        c6:bf:5e:be:64:b6:d7:fc:95:57:36:64:74:d5:d9:4e:f8:35:
        85:d1:b2:25:0b:26:f6:72:c3:3e:cb:f5:02:cf:8e:d2:c0:ef:
        ad:52:47:a4:19:87:50:12:3f:b9:93:89:69:f8:b7:aa:6c:56:
        51:28:e7:28:82:2e:38:1a:7e:64:d4:e2:63:3a:a5:6f:33:eb:
        65:e6:be:2c:93:a2:25:a0:b6:1d:80:a3:13:5a:f8:1e:ed:1d:
        5e:7f:d4:0a:fb:1a:e5:9d:e7:df:0c:1a:65:0b:37:83:3d:99:
        68:88:d9:23

587 / tcp

-1896148543 | 2025-03-18T02:42:50.763359

220-vps.medhealth.com.au ESMTP Exim 4.98.1 #2 Tue, 18 Mar 2025 13:41:57 +1100 
220-We do not authorize the use of this system to transport unsolicited, 
220 and/or bulk e-mail.
250-vps.medhealth.com.au Hello 3b6ef078t1sq28q.org [224.241.245.117]
250-SIZE 52428800
250-LIMITS MAILMAX=1000 RCPTMAX=50000
250-8BITMIME
250-PIPELINING
250-PIPECONNECT
250-STARTTLS
250 HELP

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:51:8c:25:b4:5f:2c:3e:ed:a3:2c:d4:53:18:ca:4b:c5:8e
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Feb 23 02:56:35 2025 GMT
            Not After : May 24 02:56:34 2025 GMT
        Subject: CN=vps.medhealth.com.au
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:a9:4e:e0:80:3f:ec:49:e5:58:93:c1:c0:
                    1d:fc:eb:cc:f2:fb:18:ba:0c:8b:91:ee:d9:88:9f:
                    69:99:a4:77:70:25:27:2e:4c:5c:ed:c1:04:e1:05:
                    4e:d8:d4:fd:62:7c:f2:a6:37:6c:37:fb:3c:3b:7f:
                    57:f0:d9:4a:7d:6d:6e:a3:e8:06:fc:41:19:b8:f6:
                    a6:34:01:64:f8:f3:37:fe:f3:4e:66:9d:d4:3f:ce:
                    15:be:d2:05:a5:0c:5d:5a:85:ba:dc:dc:50:f6:e8:
                    fb:53:e5:a2:f5:6f:4d:cf:d3:1e:c2:78:7c:6a:92:
                    19:21:02:82:4a:ce:3f:94:a7:2a:22:c4:77:21:38:
                    70:d6:33:2f:9d:52:a3:07:7e:7b:99:ea:53:93:3d:
                    a4:c1:f1:e3:b4:d5:a9:4f:01:3a:d5:9f:0e:53:17:
                    e3:23:30:30:27:2b:fa:79:36:2c:73:82:6f:f5:c3:
                    13:b5:30:b0:82:95:92:5d:0a:57:31:33:f9:ce:7b:
                    35:39:6f:a3:5f:55:9c:e7:fa:e9:9e:a8:9f:d5:7f:
                    07:05:34:ff:9d:02:9b:d3:c7:50:c8:58:aa:fb:ac:
                    d6:31:f2:2c:51:4a:39:d8:0f:3e:7e:31:ea:98:d0:
                    ac:37:34:37:0f:44:d4:27:d9:0d:fd:ac:a8:f1:4c:
                    6a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                29:1B:30:02:DC:0A:91:6E:89:BB:4A:86:28:CB:00:59:CD:80:7E:E9
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:vps.medhealth.com.au
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb 23 03:55:05.355 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:12:34:37:DE:6C:FB:A2:99:37:F1:F2:6D:
                                DF:7D:C0:11:2C:06:E4:0A:76:CF:4A:64:C0:28:E6:3F:
                                9D:2F:50:76:02:21:00:E4:36:F0:DF:BE:CC:82:45:0A:
                                1D:91:F7:28:94:4A:D7:5D:AE:DE:D0:2E:A2:AA:BF:95:
                                EA:B2:AE:48:2D:D8:8F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Feb 23 03:55:05.811 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F2:24:7B:9A:B3:E5:60:AA:9E:4F:11:
                                D5:35:EA:97:D1:FD:C4:5D:4B:0B:24:80:E8:1F:86:8E:
                                DD:DE:4B:F7:4C:02:20:15:5F:42:E2:9D:F0:50:35:B6:
                                B2:A0:F2:B2:70:F7:5F:23:50:38:80:C6:3A:27:DF:F8:
                                94:7B:29:B6:46:28:E4
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        3f:96:a6:be:e9:3e:5e:ab:8c:73:0b:0d:f1:67:74:4c:3f:7c:
        b7:fa:62:72:a9:8b:c4:cf:83:9b:61:ba:a4:77:65:2b:4c:df:
        e3:bd:1c:67:9c:8c:ff:20:12:2a:b9:58:9b:f0:30:9d:a4:0c:
        03:e8:f9:71:69:74:d1:17:b4:46:80:66:8e:c7:be:e4:bf:31:
        2c:6f:00:32:d2:47:73:86:bb:ff:1e:ea:98:a6:2b:ed:31:9f:
        8a:ee:45:51:0d:17:44:f8:d0:2d:47:a8:61:d1:43:83:89:35:
        be:75:70:95:3f:4e:72:2f:a9:e5:cd:b5:40:c9:82:78:8e:f1:
        11:a9:4d:1b:8b:08:5f:0c:67:bd:ea:ee:b2:90:b9:ca:3d:28:
        c6:bf:5e:be:64:b6:d7:fc:95:57:36:64:74:d5:d9:4e:f8:35:
        85:d1:b2:25:0b:26:f6:72:c3:3e:cb:f5:02:cf:8e:d2:c0:ef:
        ad:52:47:a4:19:87:50:12:3f:b9:93:89:69:f8:b7:aa:6c:56:
        51:28:e7:28:82:2e:38:1a:7e:64:d4:e2:63:3a:a5:6f:33:eb:
        65:e6:be:2c:93:a2:25:a0:b6:1d:80:a3:13:5a:f8:1e:ed:1d:
        5e:7f:d4:0a:fb:1a:e5:9d:e7:df:0c:1a:65:0b:37:83:3d:99:
        68:88:d9:23

995 / tcp

-1001764030 | 2025-03-13T05:54:30.840734

+OK Dovecot ready.
+OK
CAPA
TOP
UIDL
RESP-CODES
PIPELINING
AUTH-RESP-CODE
USER
SASL PLAIN LOGIN
.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:51:8c:25:b4:5f:2c:3e:ed:a3:2c:d4:53:18:ca:4b:c5:8e
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Feb 23 02:56:35 2025 GMT
            Not After : May 24 02:56:34 2025 GMT
        Subject: CN=vps.medhealth.com.au
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:a9:4e:e0:80:3f:ec:49:e5:58:93:c1:c0:
                    1d:fc:eb:cc:f2:fb:18:ba:0c:8b:91:ee:d9:88:9f:
                    69:99:a4:77:70:25:27:2e:4c:5c:ed:c1:04:e1:05:
                    4e:d8:d4:fd:62:7c:f2:a6:37:6c:37:fb:3c:3b:7f:
                    57:f0:d9:4a:7d:6d:6e:a3:e8:06:fc:41:19:b8:f6:
                    a6:34:01:64:f8:f3:37:fe:f3:4e:66:9d:d4:3f:ce:
                    15:be:d2:05:a5:0c:5d:5a:85:ba:dc:dc:50:f6:e8:
                    fb:53:e5:a2:f5:6f:4d:cf:d3:1e:c2:78:7c:6a:92:
                    19:21:02:82:4a:ce:3f:94:a7:2a:22:c4:77:21:38:
                    70:d6:33:2f:9d:52:a3:07:7e:7b:99:ea:53:93:3d:
                    a4:c1:f1:e3:b4:d5:a9:4f:01:3a:d5:9f:0e:53:17:
                    e3:23:30:30:27:2b:fa:79:36:2c:73:82:6f:f5:c3:
                    13:b5:30:b0:82:95:92:5d:0a:57:31:33:f9:ce:7b:
                    35:39:6f:a3:5f:55:9c:e7:fa:e9:9e:a8:9f:d5:7f:
                    07:05:34:ff:9d:02:9b:d3:c7:50:c8:58:aa:fb:ac:
                    d6:31:f2:2c:51:4a:39:d8:0f:3e:7e:31:ea:98:d0:
                    ac:37:34:37:0f:44:d4:27:d9:0d:fd:ac:a8:f1:4c:
                    6a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                29:1B:30:02:DC:0A:91:6E:89:BB:4A:86:28:CB:00:59:CD:80:7E:E9
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:vps.medhealth.com.au
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb 23 03:55:05.355 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:12:34:37:DE:6C:FB:A2:99:37:F1:F2:6D:
                                DF:7D:C0:11:2C:06:E4:0A:76:CF:4A:64:C0:28:E6:3F:
                                9D:2F:50:76:02:21:00:E4:36:F0:DF:BE:CC:82:45:0A:
                                1D:91:F7:28:94:4A:D7:5D:AE:DE:D0:2E:A2:AA:BF:95:
                                EA:B2:AE:48:2D:D8:8F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Feb 23 03:55:05.811 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F2:24:7B:9A:B3:E5:60:AA:9E:4F:11:
                                D5:35:EA:97:D1:FD:C4:5D:4B:0B:24:80:E8:1F:86:8E:
                                DD:DE:4B:F7:4C:02:20:15:5F:42:E2:9D:F0:50:35:B6:
                                B2:A0:F2:B2:70:F7:5F:23:50:38:80:C6:3A:27:DF:F8:
                                94:7B:29:B6:46:28:E4
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        3f:96:a6:be:e9:3e:5e:ab:8c:73:0b:0d:f1:67:74:4c:3f:7c:
        b7:fa:62:72:a9:8b:c4:cf:83:9b:61:ba:a4:77:65:2b:4c:df:
        e3:bd:1c:67:9c:8c:ff:20:12:2a:b9:58:9b:f0:30:9d:a4:0c:
        03:e8:f9:71:69:74:d1:17:b4:46:80:66:8e:c7:be:e4:bf:31:
        2c:6f:00:32:d2:47:73:86:bb:ff:1e:ea:98:a6:2b:ed:31:9f:
        8a:ee:45:51:0d:17:44:f8:d0:2d:47:a8:61:d1:43:83:89:35:
        be:75:70:95:3f:4e:72:2f:a9:e5:cd:b5:40:c9:82:78:8e:f1:
        11:a9:4d:1b:8b:08:5f:0c:67:bd:ea:ee:b2:90:b9:ca:3d:28:
        c6:bf:5e:be:64:b6:d7:fc:95:57:36:64:74:d5:d9:4e:f8:35:
        85:d1:b2:25:0b:26:f6:72:c3:3e:cb:f5:02:cf:8e:d2:c0:ef:
        ad:52:47:a4:19:87:50:12:3f:b9:93:89:69:f8:b7:aa:6c:56:
        51:28:e7:28:82:2e:38:1a:7e:64:d4:e2:63:3a:a5:6f:33:eb:
        65:e6:be:2c:93:a2:25:a0:b6:1d:80:a3:13:5a:f8:1e:ed:1d:
        5e:7f:d4:0a:fb:1a:e5:9d:e7:df:0c:1a:65:0b:37:83:3d:99:
        68:88:d9:23

2082 / tcp

-1198417216 | 2025-03-16T00:25:41.957091

Hashes

hash

-361426451

http.dom_hash

-1992579052

http.html_hash

-1198417216

HTTP/1.1 301 Moved
Content-length: 118
Location: https://vps.medhealth.com.au:2083/
Content-type: text/html; charset="utf-8"
Cache-Control: no-cache, no-store, must-revalidate, private

2083 / tcp

-1783310717 | 2025-03-08T16:13:20.725219

Hashes

hash

-596522410

http.dom_hash

29261983

http.favicon.hash

-696182543

http.html_hash

-1783310717

http.title_hash

-2008267673

cPanel Login

HTTP/1.1 200 OK
Connection: close
Content-Type: text/html; charset="utf-8"
Date: Sat, 08 Mar 2025 16:13:20 GMT
Cache-Control: no-cache, no-store, must-revalidate, private
Pragma: no-cache
Set-Cookie: cprelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
Set-Cookie: cpsession=%3at9XJYCyAg0Bva0Wg%2c971c4bb667d87db6f7d52817069a8027; HttpOnly; path=/; port=2083; secure
Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=103.42.111.60; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
Set-Cookie: PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
Cache-Control: no-cache, no-store, must-revalidate, private
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Length: 37374

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:51:8c:25:b4:5f:2c:3e:ed:a3:2c:d4:53:18:ca:4b:c5:8e
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Feb 23 02:56:35 2025 GMT
            Not After : May 24 02:56:34 2025 GMT
        Subject: CN=vps.medhealth.com.au
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:a9:4e:e0:80:3f:ec:49:e5:58:93:c1:c0:
                    1d:fc:eb:cc:f2:fb:18:ba:0c:8b:91:ee:d9:88:9f:
                    69:99:a4:77:70:25:27:2e:4c:5c:ed:c1:04:e1:05:
                    4e:d8:d4:fd:62:7c:f2:a6:37:6c:37:fb:3c:3b:7f:
                    57:f0:d9:4a:7d:6d:6e:a3:e8:06:fc:41:19:b8:f6:
                    a6:34:01:64:f8:f3:37:fe:f3:4e:66:9d:d4:3f:ce:
                    15:be:d2:05:a5:0c:5d:5a:85:ba:dc:dc:50:f6:e8:
                    fb:53:e5:a2:f5:6f:4d:cf:d3:1e:c2:78:7c:6a:92:
                    19:21:02:82:4a:ce:3f:94:a7:2a:22:c4:77:21:38:
                    70:d6:33:2f:9d:52:a3:07:7e:7b:99:ea:53:93:3d:
                    a4:c1:f1:e3:b4:d5:a9:4f:01:3a:d5:9f:0e:53:17:
                    e3:23:30:30:27:2b:fa:79:36:2c:73:82:6f:f5:c3:
                    13:b5:30:b0:82:95:92:5d:0a:57:31:33:f9:ce:7b:
                    35:39:6f:a3:5f:55:9c:e7:fa:e9:9e:a8:9f:d5:7f:
                    07:05:34:ff:9d:02:9b:d3:c7:50:c8:58:aa:fb:ac:
                    d6:31:f2:2c:51:4a:39:d8:0f:3e:7e:31:ea:98:d0:
                    ac:37:34:37:0f:44:d4:27:d9:0d:fd:ac:a8:f1:4c:
                    6a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                29:1B:30:02:DC:0A:91:6E:89:BB:4A:86:28:CB:00:59:CD:80:7E:E9
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:vps.medhealth.com.au
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb 23 03:55:05.355 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:12:34:37:DE:6C:FB:A2:99:37:F1:F2:6D:
                                DF:7D:C0:11:2C:06:E4:0A:76:CF:4A:64:C0:28:E6:3F:
                                9D:2F:50:76:02:21:00:E4:36:F0:DF:BE:CC:82:45:0A:
                                1D:91:F7:28:94:4A:D7:5D:AE:DE:D0:2E:A2:AA:BF:95:
                                EA:B2:AE:48:2D:D8:8F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Feb 23 03:55:05.811 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F2:24:7B:9A:B3:E5:60:AA:9E:4F:11:
                                D5:35:EA:97:D1:FD:C4:5D:4B:0B:24:80:E8:1F:86:8E:
                                DD:DE:4B:F7:4C:02:20:15:5F:42:E2:9D:F0:50:35:B6:
                                B2:A0:F2:B2:70:F7:5F:23:50:38:80:C6:3A:27:DF:F8:
                                94:7B:29:B6:46:28:E4
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        3f:96:a6:be:e9:3e:5e:ab:8c:73:0b:0d:f1:67:74:4c:3f:7c:
        b7:fa:62:72:a9:8b:c4:cf:83:9b:61:ba:a4:77:65:2b:4c:df:
        e3:bd:1c:67:9c:8c:ff:20:12:2a:b9:58:9b:f0:30:9d:a4:0c:
        03:e8:f9:71:69:74:d1:17:b4:46:80:66:8e:c7:be:e4:bf:31:
        2c:6f:00:32:d2:47:73:86:bb:ff:1e:ea:98:a6:2b:ed:31:9f:
        8a:ee:45:51:0d:17:44:f8:d0:2d:47:a8:61:d1:43:83:89:35:
        be:75:70:95:3f:4e:72:2f:a9:e5:cd:b5:40:c9:82:78:8e:f1:
        11:a9:4d:1b:8b:08:5f:0c:67:bd:ea:ee:b2:90:b9:ca:3d:28:
        c6:bf:5e:be:64:b6:d7:fc:95:57:36:64:74:d5:d9:4e:f8:35:
        85:d1:b2:25:0b:26:f6:72:c3:3e:cb:f5:02:cf:8e:d2:c0:ef:
        ad:52:47:a4:19:87:50:12:3f:b9:93:89:69:f8:b7:aa:6c:56:
        51:28:e7:28:82:2e:38:1a:7e:64:d4:e2:63:3a:a5:6f:33:eb:
        65:e6:be:2c:93:a2:25:a0:b6:1d:80:a3:13:5a:f8:1e:ed:1d:
        5e:7f:d4:0a:fb:1a:e5:9d:e7:df:0c:1a:65:0b:37:83:3d:99:
        68:88:d9:23

2095 / tcp

228205983 | 2025-02-24T06:07:30.729179

Hashes

hash

798618189

http.dom_hash

-1992579052

http.html_hash

228205983

HTTP/1.1 301 Moved
Content-length: 118
Location: https://vps.medhealth.com.au:2096/
Content-type: text/html; charset="utf-8"
Cache-Control: no-cache, no-store, must-revalidate, private

103.42.111.60

Last Seen: 2025-03-19

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

53 / tcp

-555053271 | 2025-03-18T20:39:49.566132

80 / tcp

-4595381 | 2025-02-26T22:15:52.059021

Hashes

443 / tcp

1931678831 | 2025-03-19T06:35:26.407134

Hashes

465 / tcp

-280978569 | 2025-03-07T13:22:38.004773

Exim smtpd4.98.1

587 / tcp

-1896148543 | 2025-03-18T02:42:50.763359

Exim smtpd4.98.1

995 / tcp

-1001764030 | 2025-03-13T05:54:30.840734

2082 / tcp

-1198417216 | 2025-03-16T00:25:41.957091

Hashes

2083 / tcp

-1783310717 | 2025-03-08T16:13:20.725219

Hashes

cPanel

2095 / tcp

228205983 | 2025-02-24T06:07:30.729179

Hashes

Products

Pricing

Contact Us

103.42.111.60

Last Seen: 2025-03-19

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

53 / tcp -555053271 | 2025-03-18T20:39:49.566132

80 / tcp -4595381 | 2025-02-26T22:15:52.059021

Hashes

443 / tcp 1931678831 | 2025-03-19T06:35:26.407134

Hashes

465 / tcp -280978569 | 2025-03-07T13:22:38.004773

Exim smtpd4.98.1

587 / tcp -1896148543 | 2025-03-18T02:42:50.763359

Exim smtpd4.98.1

995 / tcp -1001764030 | 2025-03-13T05:54:30.840734

2082 / tcp -1198417216 | 2025-03-16T00:25:41.957091

Hashes

2083 / tcp -1783310717 | 2025-03-08T16:13:20.725219

Hashes

cPanel

2095 / tcp 228205983 | 2025-02-24T06:07:30.729179

Hashes

Products

Pricing

Contact Us

Vulnerabilities

53 / tcp

-555053271 | 2025-03-18T20:39:49.566132

80 / tcp

-4595381 | 2025-02-26T22:15:52.059021

443 / tcp

1931678831 | 2025-03-19T06:35:26.407134

465 / tcp

-280978569 | 2025-03-07T13:22:38.004773

587 / tcp

-1896148543 | 2025-03-18T02:42:50.763359

995 / tcp

-1001764030 | 2025-03-13T05:54:30.840734

2082 / tcp

-1198417216 | 2025-03-16T00:25:41.957091

2083 / tcp

-1783310717 | 2025-03-08T16:13:20.725219

2095 / tcp

228205983 | 2025-02-24T06:07:30.729179