GeneralInformation

Hostnames	opentalentsociety.org
Domains	opentalentsociety.org
Cloud Provider	DigitalOcean
Cloud Region	us-nj
Country	United States
City	Clifton
Organization	DigitalOcean, LLC
ISP	DigitalOcean, LLC
ASN	AS14061
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443

80 / tcp

743901176 | 2025-02-28T08:00:40.152072

Hashes

hash

-1528234897

http.dom_hash

-1030007381

http.html_hash

743901176

http.server_hash

967792298

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 28 Feb 2025 08:00:39 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 100
Connection: keep-alive
X-Powered-By: Express
Cache-Control: public, max-age=31536000
Location: https://138.197.56.65/
Vary: Accept, Accept-Encoding

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

443 / tcp

-496086610 | 2025-02-28T08:00:41.851864

Hashes

hash

-101153869

http.dom_hash

-92346485

http.favicon.hash

-1510474069

http.html_hash

-496086610

http.robots_hash

-871861326

http.server_hash

967792298

http.title_hash

-226765781

OPEN Talent Society

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 28 Feb 2025 08:00:41 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 3595
Connection: keep-alive
X-Powered-By: Express
Cache-Control: no-cache, private, no-store, must-revalidate, max-stale=0, post-check=0, pre-check=0
ETag: W/"e0b-WlGrVg5mVUHPUhOC3qEP0QZsZnw"
Vary: Accept-Encoding
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:70:08:06:c9:17:f1:ad:b6:bc:75:cc:6b:11:53:68:c4:ed
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Jan  8 23:44:37 2025 GMT
            Not After : Apr  8 23:44:36 2025 GMT
        Subject: CN=opentalentsociety.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:97:08:bc:68:c7:20:42:9d:f4:3b:71:7e:dd:34:
                    2a:e7:cf:99:68:97:2e:50:dd:fe:f0:b4:11:eb:bb:
                    9f:9f:cc:61:30:67:42:ba:c3:44:ad:4b:17:b4:e8:
                    0d:0a:93:c4:a3:e2:66:79:de:a9:ca:36:44:d4:ba:
                    e6:14:f0:23:1e:1d:ed:a3:81:0e:72:55:cc:c2:5d:
                    37:c9:53:20:a7:ef:7f:60:4f:2e:b9:8c:47:b7:8f:
                    0c:61:75:ce:a6:09:46:69:7d:1d:7f:db:87:c8:67:
                    b1:b8:02:89:cb:02:d8:84:99:22:32:12:48:10:b2:
                    60:1e:7e:54:f3:8e:70:44:3e:7f:0c:a1:2a:03:91:
                    c2:aa:7a:c1:94:cf:54:95:29:79:14:b3:66:6c:5f:
                    8f:ed:8f:78:81:fd:38:3a:94:5d:55:67:db:2a:a7:
                    b2:9f:23:90:31:c1:c0:bf:c4:44:45:42:54:ed:ba:
                    24:f6:7c:f2:0e:85:15:c6:01:db:a7:b6:85:3c:ff:
                    9e:1c:0a:39:67:3b:7b:0a:f3:bf:0c:8b:cd:61:71:
                    cf:6b:ab:3b:0a:40:bf:ac:8c:87:a1:a1:65:70:77:
                    b8:5c:c1:40:b1:6a:85:f4:76:f1:0c:4a:32:0d:d7:
                    79:57:7c:d1:ae:c0:73:06:db:90:64:3d:5a:d6:ce:
                    b8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                13:6B:F0:63:02:D8:72:B6:13:E7:96:76:10:13:69:9C:64:DE:08:0D
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:opentalentsociety.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Jan  9 00:43:07.735 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:6F:E5:3D:C6:7D:21:3F:09:F9:F6:C3:B9:
                                A6:5E:33:B6:5E:73:21:32:27:BA:03:36:AE:47:0C:B3:
                                24:70:FE:9B:02:20:26:B3:8A:40:86:E7:83:E2:EA:1D:
                                DD:FF:E7:77:D1:76:08:5A:5E:A7:10:07:54:8A:93:84:
                                F3:46:08:F6:96:14
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Jan  9 00:43:07.715 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:5B:3B:D4:6F:FD:A0:A1:C8:71:ED:2E:42:
                                24:51:A4:3B:70:57:77:E4:40:FE:B1:F2:8A:24:E3:DF:
                                66:A6:21:CF:02:20:47:D9:48:D4:1C:F2:E1:5E:4B:AD:
                                6B:3E:6D:DF:0C:92:6C:C7:3E:FC:40:B0:9E:DB:E7:69:
                                67:C5:9E:E6:30:D9
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        17:fa:e8:af:e6:7f:9e:ce:1b:44:c2:d5:bc:95:a6:60:90:3a:
        3e:5c:65:96:59:e6:b9:9d:2c:a3:5e:55:c2:f6:76:3f:74:4c:
        19:2e:7f:0e:6b:29:5d:bb:92:45:6a:21:c0:f7:1d:7e:43:01:
        2b:7c:de:93:fd:8f:69:64:51:ad:43:0d:0c:97:9e:bd:6d:d8:
        bf:c6:fc:db:30:46:ea:f6:6e:c9:c0:42:68:a1:9b:fd:62:3a:
        e1:02:41:26:65:16:28:7b:fd:c5:1e:9d:b9:af:02:8a:dd:5f:
        3f:8b:c9:7c:d2:c3:63:f8:28:fe:9e:b3:d5:e3:e3:31:db:67:
        ac:96:fa:97:f3:f5:bb:a0:4a:2d:f7:ea:2f:78:50:34:0d:e8:
        34:ad:15:20:64:87:d4:5a:29:0b:75:9e:3d:07:d9:f4:f0:4d:
        f8:30:4e:8a:21:ce:68:e9:b2:bb:b7:bb:34:bc:a5:5e:28:0b:
        da:52:57:ee:49:a2:ba:c4:f0:37:0d:4a:ac:20:a5:2b:7c:75:
        cd:a6:50:54:a3:b8:d3:6e:74:db:0d:f1:40:56:a1:d4:cb:85:
        4f:73:36:af:6d:65:e4:cc:b3:6b:fe:12:16:04:99:3f:b0:cb:
        37:a6:ab:47:4a:88:2c:7a:4c:d9:a5:79:59:78:3e:b1:9a:65:
        5b:fa:35:e3

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

138.197.56.65

Last Seen: 2025-02-28

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

743901176 | 2025-02-28T08:00:40.152072

Hashes

nginx1.18.0

443 / tcp

-496086610 | 2025-02-28T08:00:41.851864

Hashes

nginx1.18.0

Products

Pricing

Contact Us

138.197.56.65

Last Seen: 2025-02-28

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

80 / tcp 743901176 | 2025-02-28T08:00:40.152072

Hashes

nginx1.18.0

443 / tcp -496086610 | 2025-02-28T08:00:41.851864

Hashes

nginx1.18.0

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

743901176 | 2025-02-28T08:00:40.152072

443 / tcp

-496086610 | 2025-02-28T08:00:41.851864