GeneralInformation

Hostnames	bookmark-os-20.04-nyc bookmarkos.com www.bookmarkos.com colorpalettes.earth www.colorpalettes.earth dragdis.com www.dragdis.com
Domains	04-nyc. bookmarkos.com colorpalettes.earth dragdis.com
Cloud Provider	DigitalOcean
Cloud Region	us-nj
Country	United States
City	Clifton
Organization	DigitalOcean, LLC
ISP	DigitalOcean, LLC
ASN	AS14061
Operating System	Linux

WebTechnologies

Analytics

Google Analytics

CDN

Google Hosted Libraries

JavaScript libraries

jQuery2.1.4

Programming languages

Ruby

Tag managers

Google Tag Manager

Web frameworks

Ruby on Rails

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

2020(2)

CVE-2020-11023

6.9In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-11022

6.9In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

2019(1)

CVE-2019-11358

6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

2015(1)

CVE-2015-9251

6.1jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

80 443 9000

80 / tcp

589765266 | 2025-02-21T16:30:41.946926

Hashes

hash

-476910809

http.dom_hash

1239617585

http.html_hash

589765266

http.server_hash

967792298

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 21 Feb 2025 16:30:41 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://bookmarkos.com/

Vulnerabilities

443 / tcp

363903487 | 2025-02-22T11:46:46.726649

Hashes

hash

-249812864

http.dom_hash

-1429481440

http.favicon.hash

1612094538

http.html_hash

363903487

http.robots_hash

674385864

http.server_hash

967792298

http.title_hash

1438187580

Bookmark OS | bookmark manager, tab manager, task manager, note

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 22 Feb 2025 11:46:46 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Link: </assets/application-5ef21f907480756e77c9e6264181f6974b0d8829ac6fa85bd3f2e684c7bc6f43.css>; rel=preload; as=style; nopush,</assets/responsive-0ec09875f6f2753661438605baf594f38fcfc3c63c2c7d99be845a4e06d7fd82.css>; rel=preload; as=style; nopush,</assets/application-8c90232b3f0dab67c5ab6c33574fe5f9f92f97b773b58fdf95d20caab710e07e.js>; rel=preload; as=script; nopush
ETag: W/"b3fe353a4cb05f9a0fc9ab9bdd9f693a"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: bookmark_os_referer=none; path=/; expires=Sun, 22 Feb 2026 11:46:46 GMT; SameSite=Lax
Set-Cookie: _bookmark-os_session=hl9HVzUVhz%2FdZIots%2FiP1L2rUA01Nl3g0ahhtoYQs3zZH%2FxOCSZWtCR%2F9j6JumC3RtZYUjaMJpafFOwK26bIaa4HXsmfAgAsWjFvC4sUHwqR8aBtfDxJ6RY5TyuZoT1GLJOeXtBpFqwWR7TC99XNJNu3VPOYbOKgjCKKnzxXFg44le6f6nqXn%2B0XJrKAwCefLURSs8y5erar573Umv7Qkf8cpOIW%2F3tNzaYxYG4sY6%2FW4h%2BJmlm9Jsr90nBo%2FVjev3nXbDJOh%2FTrBxdpfRW19v%2F7QHieCwdheSbyIw%3D%3D--KnJBnndQ8q2%2F19%2BO--QFB0eB9BNyV69gCqHzfyQg%3D%3D; path=/; HttpOnly; SameSite=Lax
X-Request-Id: e2b0e4ad-7576-415d-af8e-0250dc309f8a
X-Runtime: 0.019759

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:83:a8:18:18:7a:45:38:b0:44:ef:bf:fc:79:de:6a:ec:13
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E5
        Validity
            Not Before: Feb 21 21:15:59 2025 GMT
            Not After : May 22 21:15:58 2025 GMT
        Subject: CN=bookmarkos.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:e7:a9:26:b9:f4:4b:b3:fb:3f:e5:b2:10:11:0b:
                    84:fb:95:68:a8:16:1c:b6:93:8e:22:16:c3:3a:b8:
                    44:51:69:99:a3:c7:e7:46:4c:45:63:89:58:3c:43:
                    dc:e8:16:73:41:fe:df:3c:29:94:22:71:a8:ca:65:
                    74:dc:8c:6c:45
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                CE:DB:82:53:DF:A8:98:B6:88:72:D3:9E:A1:AC:C3:FB:91:92:BC:6E
            X509v3 Authority Key Identifier: 
                9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D
            Authority Information Access: 
                OCSP - URI:http://e5.o.lencr.org
                CA Issuers - URI:http://e5.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:bookmarkos.com, DNS:colorpalettes.earth, DNS:dragdis.com, DNS:www.bookmarkos.com, DNS:www.colorpalettes.earth, DNS:www.dragdis.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Feb 21 22:14:29.671 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:63:39:D3:31:FD:FF:A4:EE:E6:B4:D8:23:
                                5A:0C:46:D3:E0:A5:9C:CF:9F:A7:40:72:46:26:F4:7D:
                                95:C7:2F:2D:02:20:6B:36:C4:44:D0:A4:F6:55:0D:6A:
                                8A:85:E8:F7:1A:7F:B3:10:F9:E3:64:31:29:07:B3:71:
                                1E:DA:28:89:4E:D6
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Feb 21 22:14:29.729 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:90:7B:C6:58:60:64:6B:9D:3E:91:94:
                                C2:08:E4:CF:8B:B0:F1:63:EC:92:DF:34:61:55:1F:D8:
                                43:95:65:39:7E:02:21:00:98:2F:58:3E:F4:CF:93:5E:
                                87:0F:40:D0:1D:A7:94:0E:55:FE:36:B7:76:B0:A8:6B:
                                6C:DB:8B:9D:F8:CF:0A:6A
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:31:00:ca:4b:9c:e3:d4:7a:e8:cc:fe:47:16:46:21:
        b2:61:e6:c1:6f:75:48:e3:cd:da:ed:b6:66:45:a9:34:43:42:
        de:01:0c:ec:92:40:6f:1c:e0:68:9d:c2:dc:b7:a3:c0:27:02:
        30:64:9f:01:3a:46:76:e5:c1:20:e8:f4:89:9b:3d:6e:27:69:
        33:b7:67:e1:54:2b:db:5b:ec:32:9d:4f:49:a0:a8:84:af:94:
        b2:67:98:0f:19:1b:09:35:e2:b5:f4:70:c8

Vulnerabilities

3 4

9000 / tcp

-1891085163 | 2025-03-04T19:31:45.540259

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.12
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQCiZNRYOrkeVTc1VhhlI1tXjre+i8xlfuPX+PcYDLZNNpGk
qzRJfvZV381efRNvvP9cHyaAFC0ndd4l7zzTY2h5baepkJ3xmZhE9D+Gp2IVA3yk2PAdzXJ/+UAk
YdOZYu8VwFRZBmzNbuNnx4J/gL99AMsRd80bpmG1LUvp6Euon5Z+Eom1uxe5psjKe6ujuABbQja3
C1eabVTdGOYdGc+2bSM+0GZGfc9IWBovmAOP6PT1jjnqfMs42WKe/tulxZQvnT4e30Dj1wQLCNE4
cOgvMPQYBlQX4XosmBbjchn9wawnwHPjbkAfbbQb39xcMomD3iYMybrQjuLtWsjqt69H7EThDi9J
hcpgRcSm1avAqU/6tDlNpXp2eUCyNrIKpJjfljY0Irn7dt9CTLjnDy1L3Hu4gopyyNpvPGSDUvc3
9aA5OJNOEqQq9Dysi/h9oWyQYaC2WbVCUwBl3GXQK2TSqtPmyk89wP36vkJLKDogAa/t/YhOiirZ
mUB9iGVqooc=
Fingerprint: 7a:3e:00:2d:1e:76:e7:2f:35:8a:28:89:8c:0d:4c:92

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

138.197.64.79

Last Seen: 2025-03-04

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

80 / tcp

589765266 | 2025-02-21T16:30:41.946926

Hashes

nginx1.18.0

443 / tcp

363903487 | 2025-02-22T11:46:46.726649

Hashes

nginx1.18.0

9000 / tcp

-1891085163 | 2025-03-04T19:31:45.540259

OpenSSH8.2p1 Ubuntu 4ubuntu0.12

Products

Pricing

Contact Us

138.197.64.79

Last Seen: 2025-03-04

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

80 / tcp 589765266 | 2025-02-21T16:30:41.946926

Hashes

nginx1.18.0

443 / tcp 363903487 | 2025-02-22T11:46:46.726649

Hashes

nginx1.18.0

9000 / tcp -1891085163 | 2025-03-04T19:31:45.540259

OpenSSH8.2p1 Ubuntu 4ubuntu0.12

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

589765266 | 2025-02-21T16:30:41.946926

443 / tcp

363903487 | 2025-02-22T11:46:46.726649

9000 / tcp

-1891085163 | 2025-03-04T19:31:45.540259