GeneralInformation

Hostnames	14.98.208.173.in-addr.arpa freevpn.org
Domains	173.in-addr.arpa freevpn.org
Country	United States
City	New York City
Organization	LeaseWeb USA, Inc. New York
ISP	Leaseweb USA, Inc.
ASN	AS396362
Operating System	Ubuntu

WebTechnologies

CDN

BootstrapCDN4.4.1

jsDelivr

jQuery CDN

JavaScript libraries

jQuery3.4.1

Miscellaneous

Popper

UI frameworks

Bootstrap4.4.1

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

2020(2)

CVE-2020-11023

6.9In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-11022

6.9In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

OpenPorts

443 8080 40422

443 / tcp

848305178 | 2025-02-10T04:50:58.650892

Hashes

hash

1944863485

http.dom_hash

1002256956

http.html_hash

848305178

http.server_hash

967792298

http.title_hash

-241048955

Download Free VPN

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 10 Feb 2025 04:50:57 GMT
Content-Type: text/html
Content-Length: 2377144
Last-Modified: Thu, 15 Feb 2024 08:23:48 GMT
Connection: close
ETag: "65cdca14-2445b8"
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            81:11:d4:8d:01:57:f4:1a:ad:63:ce:dc:ee:19:7f:d2
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
        Validity
            Not Before: Sep 18 00:00:00 2024 GMT
            Not After : Oct 19 23:59:59 2025 GMT
        Subject: CN=*.freevpn.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ba:13:6d:74:c0:f2:a7:b0:19:e3:fc:49:43:
                    01:72:c2:fe:69:bb:57:59:4f:07:dd:46:0a:ac:d9:
                    81:08:61:b0:3c:3f:58:e4:aa:4f:9e:92:1e:3e:6c:
                    fa:53:c0:5f:1d:1d:cf:a3:16:eb:16:35:07:fa:a3:
                    7e:48:be:c2:66:14:0a:0c:24:68:56:96:e5:a8:e9:
                    ab:1d:13:e8:dd:d8:42:f8:b0:60:74:5a:db:ea:1e:
                    9f:5b:61:ec:55:4f:44:2d:15:90:2d:5c:a4:fe:32:
                    8d:e4:33:ca:0f:a3:35:42:9c:1c:38:d2:15:9e:84:
                    d1:1b:4e:72:37:a1:48:48:50:8f:1f:2e:44:a3:02:
                    91:35:64:f2:6b:ab:ae:a1:38:b3:54:ea:6a:05:a0:
                    31:20:da:cb:43:f4:ea:0d:34:97:20:30:a3:ab:e2:
                    1e:cd:67:7b:05:70:ba:de:7e:a0:d4:1e:82:b7:b8:
                    d3:2f:b4:44:cd:67:26:c7:ee:58:ed:7f:d3:26:3d:
                    36:2c:c5:e6:9b:cc:42:f7:35:7d:ab:ca:5b:ab:20:
                    be:15:44:66:b5:95:cb:af:8a:40:9a:e7:60:3b:5f:
                    68:cb:e6:98:39:d9:15:f2:d8:b5:4e:24:57:06:c4:
                    7e:48:ed:7e:1c:14:1d:a4:66:f5:6e:4b:f2:a8:1c:
                    e0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
            X509v3 Subject Key Identifier: 
                4A:35:13:60:6F:2A:0D:90:80:E5:F8:E4:08:FD:35:9B:23:B3:F0:0E
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.7
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.freevpn.org, DNS:freevpn.org
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
                    Timestamp : Sep 18 12:36:25.441 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:85:33:DA:93:FA:36:A3:C6:6A:80:A2:
                                77:F2:BF:9C:D3:52:25:04:43:94:B9:88:C9:49:7C:F5:
                                52:2C:FB:AA:7B:02:21:00:F1:05:E4:FD:12:C4:BB:03:
                                9E:3E:6E:70:E9:84:A1:EA:96:BE:8D:73:83:65:68:00:
                                3D:8A:71:CB:20:C7:81:9E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Sep 18 12:36:25.375 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:32:C5:50:0D:29:39:EE:BF:F3:22:26:73:
                                12:4D:33:0E:DA:CA:A5:63:26:ED:74:52:F1:1C:AF:9F:
                                FF:AD:BE:33:02:20:03:5C:50:8B:BA:7E:BF:AD:50:93:
                                60:F1:B0:94:0B:DC:8A:7B:CD:10:59:B6:F8:A6:B1:72:
                                3B:4F:90:0E:94:C7
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Sep 18 12:36:25.331 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:39:02:EC:F6:D6:8A:B1:E8:C2:EC:49:BD:
                                5C:48:C1:2D:CB:92:35:A4:14:68:5D:0C:EB:73:AE:D9:
                                F5:E1:D8:09:02:20:08:F9:7C:AB:68:3C:32:B9:73:CD:
                                C1:64:D7:59:1B:08:E4:C8:14:C9:F1:CD:4D:F7:B5:3A:
                                FF:AE:C1:05:73:76
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        11:76:fe:ae:0f:17:76:82:f9:b3:88:e4:19:ce:27:51:ef:c0:
        0c:a4:68:29:9c:2e:2b:b3:7b:4f:a6:55:87:71:b4:01:56:52:
        c6:39:80:47:84:28:61:ff:49:ca:fe:8f:b0:bb:7f:79:52:1e:
        c8:d0:66:84:86:e2:ba:18:74:bb:bd:fb:40:74:02:b1:a8:19:
        bd:70:cc:44:7c:70:07:5a:69:55:45:dc:44:0d:95:63:f9:a4:
        84:53:bb:15:b0:d3:21:76:25:3b:cb:d4:e3:b3:8d:78:c5:65:
        0f:95:ab:c0:3c:14:15:02:df:77:49:d2:76:4f:10:8d:7f:01:
        9e:07:bc:bd:0d:cf:a3:1c:64:d7:d8:c9:f4:7c:cf:74:a0:45:
        c6:1b:b6:8a:9d:7a:60:8a:d6:c6:f9:79:fa:5a:18:3a:f1:3f:
        50:b6:20:91:bf:23:79:44:2c:d5:e8:40:14:30:b3:1e:a1:50:
        f0:82:1d:04:b3:e8:f8:39:41:57:99:38:39:fe:8f:e3:48:07:
        88:78:23:81:84:46:cb:b6:2d:71:c4:73:bc:87:b8:ca:6c:16:
        36:35:02:9c:e2:0a:14:73:dd:e2:74:b6:63:95:0e:34:a1:de:
        53:29:31:c3:0f:84:f3:bf:56:05:0d:7b:99:86:fe:8b:20:e5:
        04:84:3e:11

Vulnerabilities

3 2

8080 / tcp

1612140409 | 2025-02-26T23:54:27.755119

Hashes

hash

-2110152091

http.dom_hash

-2006505642

http.html_hash

1612140409

http.server_hash

967792298

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 26 Feb 2025 23:54:27 GMT
Content-Type: text/html
Content-Length: 28
Last-Modified: Thu, 15 Feb 2024 08:23:49 GMT
Connection: keep-alive
ETag: "65cdca15-1c"
Accept-Ranges: bytes

Vulnerabilities

40422 / tcp

-711096320 | 2025-02-16T17:08:15.683045

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.10
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBCchDKhZledDZNFGmdcf3Z/y
BmxRPYeq606auWw3Fo8jg2BXsqH99Cg2pBb6jpShv0mQcQ/IbSxD0nfJ6GxvOlE=
Fingerprint: 2a:11:c4:92:5b:9d:d2:91:af:68:c4:12:c4:87:f0:e3

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	sntrup761x25519-sha512@openssh.com
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

173.208.98.14

Last Seen: 2025-02-26

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

443 / tcp

848305178 | 2025-02-10T04:50:58.650892

Hashes

nginx1.18.0

8080 / tcp

1612140409 | 2025-02-26T23:54:27.755119

Hashes

nginx1.18.0

40422 / tcp

-711096320 | 2025-02-16T17:08:15.683045

OpenSSH8.9p1 Ubuntu 3ubuntu0.10

Products

Pricing

Contact Us

173.208.98.14

Last Seen: 2025-02-26

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Port 8080 Latest CVSS

OpenPorts

443 / tcp 848305178 | 2025-02-10T04:50:58.650892

Hashes

nginx1.18.0

8080 / tcp 1612140409 | 2025-02-26T23:54:27.755119

Hashes

nginx1.18.0

40422 / tcp -711096320 | 2025-02-16T17:08:15.683045

OpenSSH8.9p1 Ubuntu 3ubuntu0.10

Products

Pricing

Contact Us

Vulnerabilities

443 / tcp

848305178 | 2025-02-10T04:50:58.650892

8080 / tcp

1612140409 | 2025-02-26T23:54:27.755119

40422 / tcp

-711096320 | 2025-02-16T17:08:15.683045