GeneralInformation

Hostnames	ec2-13-52-106-22.us-west-1.compute.amazonaws.com easternpeak.com
Domains	amazonaws.com easternpeak.com
Cloud Provider	Amazon
Cloud Region	us-west-1
Cloud Service	EC2
Country	United States
City	San Jose
Organization	Amazon.com, Inc.
ISP	Amazon.com, Inc.
ASN	AS16509

WebTechnologies

Blogs

WordPress

CMS

WordPress

Databases

MySQL

Miscellaneous

HTTP/3

Programming languages

PHP

Tag managers

Google Tag Manager

WordPress plugins

WPMU DEV Smush3.16.6

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2024(3)

CVE-2024-11236

9.8In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.

CVE-2024-11234

4.8In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and "request_fulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user.

CVE-2024-11233

4.8In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas.

2013(1)

CVE-2013-2220

7.5Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.

2007(1)

CVE-2007-3205

5.0The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

OpenPorts

80 443

80 / tcp

-2100514759 | 2025-03-22T05:03:10.500015

Hashes

hash

144449863

http.dom_hash

1239617585

http.html_hash

-2100514759

http.server_hash

-1340961475

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 22 Mar 2025 05:03:09 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://easternpeak.com/
alt-svc: h3=":443"; ma=86400

443 / tcp

-685389413 | 2025-03-22T05:11:39.424781

Hashes

hash

937917763

http.dom_hash

1699338356

http.favicon.hash

707600847

http.html_hash

-685389413

http.robots_hash

2027964483

http.server_hash

-1340961475

http.title_hash

-1847590915

Eastern Peak - Agile Digital Transformation & Innovation Company

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 22 Mar 2025 05:11:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/8.3.12
Set-Cookie: location=%7B%22countryCode%22%3A%22US%22%2C%22countryName%22%3A%22United%20States%22%2C%22city%22%3Anull%7D; expires=Sat, 22 Mar 2025 06:11:38 GMT; Max-Age=3600; path=/
Set-Cookie: referer=false; expires=Sat, 22 Mar 2025 06:11:38 GMT; Max-Age=3600; path=/
Link: <https://easternpeak.com/wp-json/>; rel="https://api.w.org/"
Link: <https://easternpeak.com/wp-json/wp/v2/pages/6>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://easternpeak.com/>; rel=shortlink
Cache-Control: private, proxy-revalidate, s-maxage=0
cf-edge-cache: no-cache
alt-svc: h3=":443"; ma=86400
Access-Control-Allow-Origin: *
Cache-Control: store, must-revalidate, post-check=0, pre-check=0
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Referrer-Policy: no-referrer-when-downgrade

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f2:fb:ff:0f:14:00:5b:72:f5:79:43:67:f4:ac:39:3d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
        Validity
            Not Before: Aug  5 00:00:00 2024 GMT
            Not After : Aug 26 23:59:59 2025 GMT
        Subject: CN=*.easternpeak.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:f9:d2:e5:df:3e:08:88:89:42:f8:52:00:
                    17:76:75:2e:f9:4d:bd:66:47:5c:51:f1:d2:92:e7:
                    87:2c:3b:de:23:6a:b8:64:e1:b1:21:19:a8:52:70:
                    a5:c3:db:a7:86:2f:a9:4c:1e:4d:03:6c:67:8d:55:
                    36:11:14:6e:af:e6:83:0c:58:29:49:27:09:75:48:
                    9d:6e:6f:51:51:f4:a0:fe:d4:ba:08:40:89:40:bd:
                    41:5c:07:75:7e:62:95:3d:89:d0:b6:8e:59:ce:cc:
                    20:01:61:22:21:87:37:43:ba:3b:8f:b1:5f:bb:94:
                    6c:ff:07:bb:a8:ce:15:c5:05:be:b3:4a:83:44:99:
                    88:1b:d3:55:dd:c8:73:50:92:0d:0c:de:df:7c:de:
                    69:6a:ba:9b:ec:80:c9:fe:81:2b:6d:d8:f5:98:11:
                    86:04:07:9a:65:a6:0f:0b:51:f5:3c:c2:0e:3d:17:
                    34:e4:14:2b:7c:38:2f:2a:0a:c8:f7:3a:bd:05:74:
                    d4:a5:b2:ee:2a:90:d5:25:3f:20:7f:6d:4b:01:12:
                    55:4a:2c:4c:94:da:e8:23:b3:3f:db:7e:50:7d:43:
                    80:9b:35:c1:00:dc:71:1b:d6:6c:81:31:4e:35:c3:
                    ee:1b:e0:b1:26:13:65:f8:6b:c2:ee:91:69:b8:ec:
                    3d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
            X509v3 Subject Key Identifier: 
                63:5B:81:57:88:18:B2:84:5B:10:36:3E:A5:49:6C:28:6B:82:6C:23
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.7
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.easternpeak.com, DNS:easternpeak.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
                    Timestamp : Aug  5 11:02:35.866 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:BE:DA:93:6D:4B:C0:26:66:57:06:08:
                                43:D2:A7:54:89:A8:D0:0F:6D:9E:70:F5:34:A4:81:87:
                                3C:F9:69:D2:A0:02:20:07:13:1E:AD:20:40:E8:8F:DD:
                                01:8C:5F:A0:2B:5C:36:90:BE:8D:82:69:02:81:86:15:
                                60:4F:A8:9C:86:14:74
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:
                                47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34
                    Timestamp : Aug  5 11:02:35.832 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:43:19:DA:3E:21:70:79:59:52:43:6B:7F:
                                42:F2:94:10:8C:E5:59:0D:C1:49:B8:9F:EE:CB:EC:47:
                                5E:54:1D:D9:02:21:00:8F:49:05:84:AF:D1:BE:C3:F3:
                                DD:31:B3:D9:6B:85:4A:7E:31:72:2C:AA:D6:86:6C:6F:
                                E7:0E:3C:1A:BC:8B:B7
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Aug  5 11:02:35.830 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:17:BA:85:8A:34:26:2A:A3:AF:18:71:69:
                                36:72:81:6D:18:93:07:B5:25:BB:AC:CD:CC:0D:E5:43:
                                CA:4F:46:0C:02:21:00:B0:A6:A8:29:D3:4B:79:D7:34:
                                22:66:FC:DD:DD:41:E0:BA:F0:58:44:28:47:07:5C:50:
                                01:FA:CE:76:7A:B8:6D
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        49:a1:d8:0a:6d:f5:36:41:d9:54:97:d7:8f:d2:f7:d1:29:26:
        f4:09:50:64:e7:2c:10:d5:b6:73:3a:27:4d:f9:92:84:31:ac:
        50:e9:6b:68:5d:76:f5:75:fd:c4:4f:f1:c2:aa:56:a3:fe:ba:
        ad:aa:62:1f:96:ad:db:f9:82:de:93:a4:e6:5c:b5:c4:32:47:
        47:23:ab:fd:a4:81:59:c6:49:80:ea:38:c6:cc:75:10:2d:b8:
        08:7a:c1:1a:e9:0b:8d:0f:54:7e:0c:d0:24:59:1f:72:dd:83:
        09:1b:af:9a:8c:19:9d:42:2b:66:70:00:c3:48:08:e7:57:48:
        34:77:9b:28:8e:13:a7:fd:55:ba:fb:ff:c7:82:ca:96:2f:3e:
        1c:52:e6:fd:40:2e:34:f3:e0:8b:dc:de:38:e2:11:a3:00:ec:
        1a:ff:03:76:8d:f5:a8:f4:46:3e:b7:42:ae:28:52:d3:da:a5:
        af:c8:6c:49:22:d1:fd:08:f0:f4:f7:32:7a:fb:11:47:f9:49:
        ae:2b:b6:0d:4f:8d:7b:6f:70:ef:78:ea:68:e3:16:5c:00:10:
        17:24:e8:87:9e:ea:2c:0c:35:bc:4c:7b:6c:b0:4b:69:3a:40:
        78:3f:d7:8e:e1:d9:44:8d:b5:e0:8c:8b:21:1b:c4:89:0e:ff:
        55:e3:9c:e3

Vulnerabilities

1 1 3

13.52.106.22

Last Seen: 2025-03-22

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

80 / tcp

-2100514759 | 2025-03-22T05:03:10.500015

Hashes

nginx

443 / tcp

-685389413 | 2025-03-22T05:11:39.424781

Hashes

nginx

Products

Pricing

Contact Us

13.52.106.22

Last Seen: 2025-03-22

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

80 / tcp -2100514759 | 2025-03-22T05:03:10.500015

Hashes

nginx

443 / tcp -685389413 | 2025-03-22T05:11:39.424781

Hashes

nginx

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

-2100514759 | 2025-03-22T05:03:10.500015

443 / tcp

-685389413 | 2025-03-22T05:11:39.424781