GeneralInformation

Hostnames	cfc-dev.loafingshed.ca
Domains	loafingshed.ca
Cloud Provider	DigitalOcean
Cloud Region	ca-on
Country	Canada
City	Toronto
Organization	DigitalOcean, LLC
ISP	DigitalOcean, LLC
ASN	AS14061

WebTechnologies

CDN

Unpkg

jsDelivr

CMS

Craft CMS

Ecommerce

Abicart

JavaScript frameworks

Alpine.js

Programming languages

PHP

SEO

SEOmatic

Web frameworks

Yii

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

22 80 443

22 / tcp

-623304037 | 2025-03-11T22:38:46.666791

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.12
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQDCJnkBGmIQ4TVcLQhwE5xnlWiC9LDGf1+qdNGZ31k+9HyQ
ZVFsrAuNefAOv02ipFobBB7oSGyv2tm4YnAmXYq2/prHum8tIvjcKVVpYVMM+BQ4wCRhyRDXkZUM
QliIfvCLJjwg+NyAsSfSE1GLm/FUADKdYWPyLT/lnbdTnHdmC9AjIASpeQIFuhOveBtEunl+kU+e
+zV3uLI8OK1wtCizofTFbxQhhNRnLJGxAtGLVtNTD7mIsgmi94kuOQz07WA+jbd0LTgRbPaxS1yI
OTqtvXBeFdbg/651WLuRTtYxSwgqwi8RVvnEfwEiq/UFwq4iRiePzto4JP+xOoQqksKnX7sEgSPF
o8bi+gZU7QOrhFJJF5D8uYYzANbX5PKpR81rdtWudOOkJnWSgdijo+gmiDF2RmEIpkNUtPvbPO42
mfVQCrgHcNLZoTay8VEEmI5u+V8GWvhxuX0QciuUCmKAnp4C4DlZlUe3LEkpLFs65s1IghNlb85Y
HEHkpAz+U38=
Fingerprint: 21:4a:c2:e2:67:96:c6:c8:62:f5:8a:1b:6d:6e:35:85

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

80 / tcp

-158149353 | 2025-03-21T02:45:53.092758

Hashes

hash

1840161254

http.dom_hash

1239617585

http.html_hash

-158149353

http.server_hash

-1786963686

http.title_hash

-1207101977

404 Not Found

HTTP/1.1 404 Not Found
Server: nginx/1.18.0
Date: Fri, 21 Mar 2025 02:45:52 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive
Vary: Accept-Encoding

Vulnerabilities

443 / tcp

-1422233739 | 2025-03-21T03:41:05.609343

Hashes

hash

-190138472

http.dom_hash

1077317353

http.html_hash

-1422233739

http.server_hash

-1340961475

🚧 Technology and Design for Good | Code for Canada

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 21 Mar 2025 03:41:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store
X-Powered-By: Craft CMS
X-Powered-By: SEOmatic
X-Robots-Tag: none
Referrer-Policy: no-referrer-when-downgrade
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7e:c9:bf:e3:b0:76:5a:28:34:fc:46:63:3a:f0:d5:0e:1f
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E6
        Validity
            Not Before: Feb 15 06:24:40 2025 GMT
            Not After : May 16 06:24:39 2025 GMT
        Subject: CN=cfc-dev.loafingshed.ca
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub:
                    04:1f:19:0f:db:ce:2e:e8:0b:40:63:73:e0:47:61:
                    44:29:4b:dd:c6:ae:71:b5:16:96:17:84:35:3b:0c:
                    ee:7b:ab:f5:32:a2:43:70:e0:0b:f7:35:07:34:5b:
                    83:39:6c:7b:91:6e:5e:94:74:4e:63:e9:33:11:b0:
                    03:2f:17:3e:f3:6d:f9:fc:c2:ce:63:10:14:ed:0e:
                    b3:86:18:54:dd:1a:d5:5b:9b:50:55:ea:0c:10:42:
                    0a:87:1f:2d:ca:88:63
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                A0:FD:03:5E:89:C4:FF:88:C4:EC:D7:58:48:66:7E:7A:0F:5C:88:CE
            X509v3 Authority Key Identifier: 
                93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
            Authority Information Access: 
                OCSP - URI:http://e6.o.lencr.org
                CA Issuers - URI:http://e6.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:cfc-dev.loafingshed.ca
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Feb 15 07:23:10.403 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:BE:DF:DD:22:A9:35:58:D2:65:8D:94:
                                76:05:10:D5:D7:06:23:92:F5:99:29:9F:E3:64:EC:5A:
                                1D:6C:46:14:5F:02:20:2B:59:F8:F4:74:E6:63:EC:38:
                                F5:A5:DB:37:A0:DB:51:61:35:95:C0:E1:F1:29:2F:E8:
                                EF:95:A1:81:B1:75:7E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Feb 15 07:23:10.449 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E3:D4:59:DA:42:12:07:51:6D:89:6A:
                                2A:73:29:9D:A2:98:D4:56:4D:E5:2E:EB:5D:9C:C2:4F:
                                49:FE:87:C0:86:02:21:00:A5:9F:C1:15:05:7B:5C:E7:
                                BF:5A:8F:37:C8:6B:11:05:7C:F5:E1:6D:E5:F2:C4:C8:
                                1D:57:43:C0:74:64:1F:BF
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:64:02:30:35:d2:ad:d8:7f:d9:3d:6b:20:50:91:7e:bf:ad:
        d3:59:ae:7a:52:32:1d:87:7d:e5:58:66:32:a9:d0:38:44:8d:
        95:83:49:4c:bf:12:75:0f:dc:f3:04:1c:3d:42:fd:d2:02:30:
        1c:2b:d4:03:8b:f3:72:92:10:cf:e7:67:ac:b5:75:80:b3:15:
        53:d4:d7:f1:f7:2a:0e:a2:12:63:b3:6e:3f:dd:3b:fe:ac:6f:
        68:37:75:46:da:d8:09:ab:6c:b6:ef:b0

159.203.16.116

Last Seen: 2025-03-21

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

22 / tcp

-623304037 | 2025-03-11T22:38:46.666791

OpenSSH8.2p1 Ubuntu 4ubuntu0.12

80 / tcp

-158149353 | 2025-03-21T02:45:53.092758

Hashes

nginx1.18.0

443 / tcp

-1422233739 | 2025-03-21T03:41:05.609343

Hashes

nginx

Products

Pricing

Contact Us

159.203.16.116

Last Seen: 2025-03-21

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Latest CVSS

OpenPorts

22 / tcp -623304037 | 2025-03-11T22:38:46.666791

OpenSSH8.2p1 Ubuntu 4ubuntu0.12

80 / tcp -158149353 | 2025-03-21T02:45:53.092758

Hashes

nginx1.18.0

443 / tcp -1422233739 | 2025-03-21T03:41:05.609343

Hashes

nginx

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

-623304037 | 2025-03-11T22:38:46.666791

80 / tcp

-158149353 | 2025-03-21T02:45:53.092758

443 / tcp

-1422233739 | 2025-03-21T03:41:05.609343