HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 27 Apr 2025 01:58:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Link: <https://www.xiaoguangwang.com/wp-json/>; rel="https://api.w.org/"
Link: <https://www.xiaoguangwang.com/wp-json/wp/v2/pages/310>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://www.xiaoguangwang.com/>; rel=shortlink

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e2:68:66:20:fa:7d:c0:f7:49:f7:61:cb:2e:5e:29:6a:ae
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Mar 16 09:14:45 2025 GMT
            Not After : Jun 14 09:14:44 2025 GMT
        Subject: CN=xiaoguangwang.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:99:e4:9a:76:77:bf:a5:72:db:d2:f1:96:fb:5f:
                    07:28:8e:fd:9a:6b:c2:e6:2d:d6:49:60:d3:b3:b3:
                    68:ab:aa:af:2f:04:ad:6c:2c:62:86:9f:c9:68:4e:
                    73:36:02:a2:1f:f7:69:77:17:9e:56:1e:2b:d4:3e:
                    b5:8c:45:97:ce:a7:af:ea:d7:8d:18:ed:00:ed:b9:
                    1c:f7:dc:9f:ab:99:40:3b:2c:ef:9f:b2:d2:47:1f:
                    39:03:55:fc:af:f0:07:64:14:7a:de:d8:b7:37:92:
                    08:b7:66:18:57:7a:09:dd:5d:0a:96:ec:29:3c:04:
                    8a:78:8e:54:3b:fd:9e:fe:0c:4d:72:c7:88:f6:82:
                    63:51:14:e2:a9:f2:fe:5b:0e:c6:a4:87:3f:2b:12:
                    fa:ca:9a:56:1a:c3:85:c2:7e:0b:f4:83:bb:ff:19:
                    ab:4b:f7:69:31:b7:85:a6:1c:f1:93:10:e0:6b:59:
                    52:2e:7d:8a:68:68:13:12:74:94:86:1f:17:45:b5:
                    c6:41:da:95:6d:52:c7:66:6f:38:f4:7a:7e:58:8e:
                    b2:8b:7b:4b:ed:dd:8b:4f:82:34:67:09:2a:93:5b:
                    31:4b:6f:d3:a7:48:3b:43:ab:06:d7:55:0b:0e:2a:
                    a6:9b:4b:55:26:d1:47:5a:5d:af:6b:f4:5e:c5:15:
                    84:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                AB:1A:33:7D:7E:CA:A7:F9:3D:F1:73:1D:8A:79:84:14:23:A1:E1:A8
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:app.bytebook.ai, DNS:bytebook.ai, DNS:wiki.bytebook.ai, DNS:www.bytebook.ai, DNS:www.xiaoguangwang.com, DNS:xiaoguangwang.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://r10.c.lencr.org/47.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Mar 16 10:13:15.274 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:65:CD:4A:78:73:17:B3:C9:23:1E:F7:78:
                                03:C2:39:02:A4:B5:88:B6:DE:E8:2E:AE:26:E2:48:78:
                                9D:5D:B6:66:02:20:0D:0B:04:7C:EE:51:7E:BC:DF:F2:
                                19:8E:B9:9A:A6:16:36:0B:67:86:EF:F8:9B:AD:19:AB:
                                24:28:64:C8:55:2C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Mar 16 10:13:15.473 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:9A:6C:E5:C1:20:2D:2D:18:F9:15:FB:
                                46:EB:E4:75:33:FE:6D:C0:C3:FE:35:2D:10:A5:C0:D5:
                                39:1F:AB:C5:DF:02:21:00:E3:F3:24:16:0E:A0:34:8F:
                                05:DB:A2:3D:38:75:28:36:12:B5:8F:87:1C:C3:13:58:
                                B7:33:8A:B3:1C:13:EB:49
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        83:e9:69:fd:5b:27:e6:72:90:36:58:85:01:c0:9f:a7:44:97:
        80:a6:69:57:8f:62:a4:61:c8:34:aa:c0:80:f2:b2:48:fd:c9:
        ff:50:b8:e9:e9:af:89:99:8a:52:52:24:5f:78:21:b8:be:d7:
        32:25:9d:ac:69:e2:56:19:c5:e2:1b:92:0c:62:2e:27:84:ce:
        53:dc:c7:03:0a:19:4a:3c:88:5e:0e:6b:42:91:04:6a:7a:4a:
        16:b6:80:17:e0:0d:81:63:39:e9:c4:7f:12:7e:32:55:b0:13:
        46:9c:05:4d:1a:62:db:97:d1:f6:8e:50:56:a4:87:57:fc:97:
        0a:04:cd:a6:c0:11:35:2e:63:10:94:02:a1:16:14:d2:8b:84:
        08:09:03:4a:42:9b:dc:2e:94:83:51:09:df:1d:9e:50:12:b7:
        0c:44:b9:83:9a:83:ed:ef:17:cf:3e:42:46:22:04:30:39:66:
        2f:63:2c:52:49:1a:61:4c:a4:8f:0b:48:a1:5c:38:74:8e:05:
        37:1e:77:31:70:9d:e0:6e:36:8c:f8:15:ff:6f:b0:87:71:0f:
        db:47:b6:c2:ad:e7:38:bb:87:4a:db:8c:42:d9:cb:3b:b3:49:
        65:a9:05:40:6b:99:2c:eb:8f:3f:9d:c8:47:e7:e3:84:04:9f:
        21:25:4c:6e

Vulnerabilities

3000 / tcp

1927948974 | 2025-04-26T19:35:44.709826

Hashes

hash

-1961671562

http.dom_hash

-1030007381

http.html_hash

1927948974

HTTP/1.1 301 Moved Permanently
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
X-DNS-Prefetch-Control: off
Expect-CT: max-age=0
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer
X-XSS-Protection: 0
Location: https://159.203.10.100/
Content-Type: text/html; charset=utf-8
Content-Length: 77
Date: Sat, 26 Apr 2025 19:35:44 GMT
Connection: keep-alive
Keep-Alive: timeout=5

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

159.203.10.100

Last Seen: 2025-04-27

Tags:

GeneralInformation

WebTechnologies

OpenPorts

443 / tcp

-1277791289 | 2025-04-27T01:58:23.096886

Hashes

nginx1.18.0

3000 / tcp

1927948974 | 2025-04-26T19:35:44.709826

Hashes

Vulnerabilities

Products

Pricing

Contact Us

159.203.10.100

Last Seen: 2025-04-27

Tags:

GeneralInformation

WebTechnologies

OpenPorts

443 / tcp -1277791289 | 2025-04-27T01:58:23.096886

Hashes

nginx1.18.0

3000 / tcp 1927948974 | 2025-04-26T19:35:44.709826

Hashes

Vulnerabilities All ports Port 443 Latest CVSS

Products

Pricing

Contact Us

443 / tcp

-1277791289 | 2025-04-27T01:58:23.096886

3000 / tcp

1927948974 | 2025-04-26T19:35:44.709826

Vulnerabilities