GeneralInformation

Hostnames	ec2-13-237-111-116.ap-southeast-2.compute.amazonaws.com inclusive.tki.org.nz www.inclusive.tki.org.nz
Domains	amazonaws.com tki.org.nz
Cloud Provider	Amazon
Cloud Region	ap-southeast-2
Cloud Service	EC2
Country	Australia
City	Sydney
Organization	Amazon Corporate Services Pty Ltd
ISP	Amazon.com, Inc.
ASN	AS16509

WebTechnologies

Advertising

Linkedin Ads

CDN

Amazon S3

CMS

Silverstripe

Font scripts

MyFonts

PaaS

Amazon Web Services

Programming languages

PHP

Search engines

Algolia

Security

HSTS

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443

80 / tcp

-155589607 | 2025-02-25T11:08:03.157529

Hashes

hash

34026680

http.dom_hash

147145299

http.favicon.hash

1352422690

http.html_hash

-155589607

http.robots_hash

384677463

http.server_hash

-318251389

http.sitemap_hash

-1055882445

http.title_hash

1131638632

Inclusive Education | Inclusive Education

HTTP/1.1 200 OK
Date: Tue, 25 Feb 2025 11:08:02 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.20.0
content-security-policy: default-src https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com www.google.com www.gstatic.com 'unsafe-inline' 'unsafe-eval' data:; base-uri https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com; frame-ancestors https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com; style-src http://hello.myfonts.net https://hello.myfonts.net 'unsafe-inline' https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com https://*.typography.com https://maxcdn.bootstrapcdn.com https://*.fontawesome.com https://fonts.googleapis.com https://*.gstatic.com https://tagmanager.google.com https://optimize.google.com; script-src 'unsafe-inline' https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com https://app-script.monsido.com https://player.vimeo.com https://code.jquery.com https://staticcdn.co.nz https://snap.licdn.com https://www.google.com https://*.doubleclick.net https://www.googleadservices.com https://*.fontawesome.com https://connect.facebook.net https://*.gstatic.com https://www.googletagmanager.com https://fonts.googleapis.com https://*.google-analytics.com http://*.google-analytics.com http://tagmanager.google.com https://optimize.google.com https://code.jquery.com 'unsafe-eval'; img-src https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com http://inclusive.tki.org.nz 'self' data: https://staticcdn.co.nz https://i.vimeocdn.com https://img.youtube.com https://i.ytimg.com http://tracking.monsido.com https://tracking.monsido.com https://shielded.co.nz https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.co.nz https://p.adsymptotic.com https://www.google.com https://px.ads.linkedin.com https://*.facebook.com https://*.google-analytics.com http://*.google-analytics.com https://*.swagger.io https://optimize.google.com; font-src https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com data: https://*.fontawesome.com https://*.typography.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com; object-src https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com 'self'; frame-src https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com http://inclusive.tki.org.nz 'self' https://www.facebook.com https://staticcdn.co.nz https://bid.g.doubleclick.net https://www.google.com data: https://*.youtube-nocookie.com https://player.vimeo.com https://*.youtube.com https://optimize.google.com https://www.googletagmanager.com/ns.html https://*.hotjar.com; child-src https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com https://*.youtube-nocookie.com https://player.vimeo.com http://player.vimeo.com https://*.youtube.com  https://optimize.google.com https://www.googletagmanager.com/ns.html https://*.hotjar.com; connect-src https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com https://stats.g.doubleclick.net https://*.algolia.net https://*.algolianet.com https://www.google-analytics.com; form-action https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com http://inclusive.tki.org.nz https://www.facebook.com 'self';
expect-ct: max-age=86400
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-ua-compatible: IE=edge
x-content-type-options: nosniff
strict-transport-security: max-age=15768000; includeSubDomains
vary: X-Forwarded-Protocol
cache-control: no-cache, must-revalidate
etag: "0b5c8cbd3cde1a376ff2476114b2c014"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000;
Expect-CT: max-age=2592000

Vulnerabilities

443 / tcp

-1695458463 | 2025-02-24T06:20:02.534570

Hashes

hash

1666959758

http.dom_hash

147145299

http.favicon.hash

1352422690

http.html_hash

-1695458463

http.robots_hash

384677463

http.server_hash

-318251389

http.sitemap_hash

-1879961642

http.title_hash

1131638632

Inclusive Education | Inclusive Education

HTTP/1.1 200 OK
Date: Mon, 24 Feb 2025 06:20:01 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.20.0
content-security-policy: default-src https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com www.google.com www.gstatic.com 'unsafe-inline' 'unsafe-eval' data:; base-uri https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com; frame-ancestors https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com; style-src http://hello.myfonts.net https://hello.myfonts.net 'unsafe-inline' https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com https://*.typography.com https://maxcdn.bootstrapcdn.com https://*.fontawesome.com https://fonts.googleapis.com https://*.gstatic.com https://tagmanager.google.com https://optimize.google.com; script-src 'unsafe-inline' https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com https://app-script.monsido.com https://player.vimeo.com https://code.jquery.com https://staticcdn.co.nz https://snap.licdn.com https://www.google.com https://*.doubleclick.net https://www.googleadservices.com https://*.fontawesome.com https://connect.facebook.net https://*.gstatic.com https://www.googletagmanager.com https://fonts.googleapis.com https://*.google-analytics.com http://*.google-analytics.com http://tagmanager.google.com https://optimize.google.com https://code.jquery.com 'unsafe-eval'; img-src https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com http://inclusive.tki.org.nz 'self' data: https://staticcdn.co.nz https://i.vimeocdn.com https://img.youtube.com https://i.ytimg.com http://tracking.monsido.com https://tracking.monsido.com https://shielded.co.nz https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.co.nz https://p.adsymptotic.com https://www.google.com https://px.ads.linkedin.com https://*.facebook.com https://*.google-analytics.com http://*.google-analytics.com https://*.swagger.io https://optimize.google.com; font-src https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com data: https://*.fontawesome.com https://*.typography.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com; object-src https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com 'self'; frame-src https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com http://inclusive.tki.org.nz 'self' https://www.facebook.com https://staticcdn.co.nz https://bid.g.doubleclick.net https://www.google.com data: https://*.youtube-nocookie.com https://player.vimeo.com https://*.youtube.com https://optimize.google.com https://www.googletagmanager.com/ns.html https://*.hotjar.com; child-src https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com https://*.youtube-nocookie.com https://player.vimeo.com http://player.vimeo.com https://*.youtube.com  https://optimize.google.com https://www.googletagmanager.com/ns.html https://*.hotjar.com; connect-src https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com https://stats.g.doubleclick.net https://*.algolia.net https://*.algolianet.com https://www.google-analytics.com; form-action https://*.education.govt.nz https://inclusive.tki.org.nz https://inclusive.tki.org.nz/ https://inclusive-live-storagestack-assetstorages3bucket-3uty0hejzw6u.s3.ap-southeast-2.amazonaws.com http://inclusive.tki.org.nz https://www.facebook.com 'self';
expect-ct: max-age=86400
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-ua-compatible: IE=edge
x-content-type-options: nosniff
strict-transport-security: max-age=15768000; includeSubDomains
vary: X-Forwarded-Protocol
cache-control: no-cache, must-revalidate
etag: "a60f31fa4df9a6225b0032595542fc92"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000;
Expect-CT: max-age=2592000

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:db:8c:1f:c0:64:26:e6:3d:93:71:b8:72:be:e2:4d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: Jun 15 00:00:00 2024 GMT
            Not After : Jul 14 23:59:59 2025 GMT
        Subject: CN=inclusive.tki.org.nz
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d7:bb:c9:73:5d:00:b5:6f:2a:82:ea:bb:d4:e8:
                    26:3d:0d:07:a2:00:5b:14:20:67:54:ae:1e:b5:c5:
                    06:9a:62:4b:57:f6:98:d2:38:5e:04:c0:cb:40:f1:
                    f2:ae:40:90:fe:b5:fc:f9:75:56:c0:1d:8f:a7:bf:
                    fc:40:35:f4:df:1c:36:47:8a:b3:05:51:b9:54:04:
                    e2:11:e1:8a:14:fb:f6:6f:87:ec:30:9f:65:ff:6a:
                    3a:b9:86:8a:e7:41:48:40:fe:70:51:70:98:ce:09:
                    fa:d1:3d:1e:ae:d7:48:61:e7:69:b2:80:3b:0e:d9:
                    92:57:c3:22:d6:ad:f3:1c:6b:ab:76:de:92:8e:90:
                    b6:c3:05:2c:15:c0:5b:a7:ed:c5:3b:f2:18:a1:32:
                    0d:df:9f:b4:87:bb:52:e8:7b:b5:2a:69:85:55:09:
                    cb:92:c6:5c:46:92:1d:d2:96:39:99:39:10:1d:80:
                    fc:e9:51:6e:73:38:a9:52:56:ee:31:6d:b0:3b:68:
                    03:15:1e:09:e0:95:21:d8:c5:0d:09:5d:ff:6c:82:
                    b7:49:23:73:36:a7:f5:cc:08:96:55:4c:61:1b:38:
                    76:ba:d7:b5:1c:5d:f4:58:9f:8e:4a:62:36:82:30:
                    56:fd:90:a2:4f:97:23:8a:6e:e3:1a:c1:62:b9:27:
                    d7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                94:7C:83:E9:75:41:94:AC:03:7D:84:DD:8F:C6:FE:9C:A8:00:D4:7E
            X509v3 Subject Alternative Name: 
                DNS:inclusive.tki.org.nz, DNS:www.inclusive.tki.org.nz
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Jun 15 00:07:10.618 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:80:DD:2F:96:FE:3E:B1:47:CC:A9:F8:
                                5E:12:96:B4:68:9F:65:FE:2A:80:22:61:86:F9:22:A3:
                                2C:CE:AA:A1:0A:02:20:1E:DB:52:0E:03:62:3C:22:7A:
                                2A:70:19:7B:9A:CD:E6:A3:88:A9:DD:5E:55:DF:29:15:
                                9D:D1:17:2B:04:C1:3B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Jun 15 00:07:10.570 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F5:CE:D0:F8:F7:61:AE:FB:41:DC:A3:
                                2E:F6:3C:8C:A9:25:B2:D2:48:2E:B6:CE:4C:CE:14:AB:
                                EB:FF:3C:51:CD:02:20:58:1A:AA:84:9B:4A:31:77:78:
                                D6:16:E8:32:83:77:FA:4A:9A:A9:C5:E7:71:BF:7B:35:
                                CE:DA:82:35:39:B9:AF
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
                    Timestamp : Jun 15 00:07:11.578 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:BD:1B:B6:23:60:F2:69:0B:CE:3E:FA:
                                EB:73:73:EC:08:93:F6:BE:D3:08:E0:20:1B:D7:2D:BD:
                                C6:DD:F8:2F:DE:02:21:00:EA:50:ED:6D:69:DB:93:7A:
                                23:33:97:80:8B:08:EB:6F:0E:2C:17:BD:73:18:B5:F5:
                                93:EA:2D:8F:A4:BF:72:0E
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        39:01:d8:a6:7e:71:b0:5c:28:99:4c:73:93:b4:a2:e4:8f:6a:
        66:e1:07:b7:c1:17:38:d6:ef:17:dc:84:50:ad:13:d0:97:61:
        cc:dd:46:ef:00:5c:97:cd:06:c1:a8:1d:c8:c1:35:cd:18:fd:
        1a:af:dd:61:83:c7:a3:fc:36:86:8c:00:f3:51:8e:fc:c3:9f:
        22:da:56:61:b9:c4:37:4d:8d:72:86:6b:47:4b:19:fc:3e:74:
        08:22:ed:13:ac:e2:c0:a1:fa:43:76:8b:d7:a5:ec:6e:7e:d5:
        87:53:aa:2b:35:87:d3:35:c8:4d:32:f6:f8:25:47:30:3d:0d:
        47:e8:7d:56:61:c5:b2:56:78:8f:09:4e:cf:03:d0:db:72:08:
        6e:2d:1a:a9:47:1d:6d:2e:8c:81:9c:93:59:af:8f:b3:fd:99:
        90:06:56:6c:56:87:30:75:40:0a:da:69:00:c4:36:c1:e8:e3:
        3a:52:6a:03:b4:8f:9b:7c:f0:ce:66:27:b4:ac:a1:81:66:5d:
        fe:83:33:c5:76:09:f1:c9:a2:89:ae:49:e7:e2:d2:fb:3e:f3:
        68:34:d4:86:75:39:c0:a0:45:e0:f3:f1:3f:a1:1d:2e:f2:3f:
        88:c4:bd:b6:e3:d4:ae:6a:54:c4:05:d7:2a:e7:c8:63:7b:85:
        66:67:cd:12

Vulnerabilities

13.237.111.116

Last Seen: 2025-02-25

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

80 / tcp

-155589607 | 2025-02-25T11:08:03.157529

Hashes

nginx1.20.0

443 / tcp

-1695458463 | 2025-02-24T06:20:02.534570

Hashes

nginx1.20.0

Products

Pricing

Contact Us

13.237.111.116

Last Seen: 2025-02-25

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

80 / tcp -155589607 | 2025-02-25T11:08:03.157529

Hashes

nginx1.20.0

443 / tcp -1695458463 | 2025-02-24T06:20:02.534570

Hashes

nginx1.20.0

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

-155589607 | 2025-02-25T11:08:03.157529

443 / tcp

-1695458463 | 2025-02-24T06:20:02.534570