GeneralInformation

Hostnames	dev.brandfi.co.ke
Domains	brandfi.co.ke
Cloud Provider	DigitalOcean
Cloud Region	gb-slg
Country	United Kingdom
City	London
Organization	DigitalOcean, LLC
ISP	DigitalOcean, LLC
ASN	AS14061

WebTechnologies

JavaScript libraries

jQuery3.1.1

UI frameworks

Bootstrap

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 80 443 33060

22 / tcp

931042581 | 2025-02-12T10:59:16.458722

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.5
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQC11OAa+8+lbmxuzN9437jHsSQ4i9Ekq7YU748svCOaaaNX
PqbTLj2Hn008QzwqZNCbXN7PseUaGnv31wVD04bJqmF5HOah0oiCyBQrCsMheUDqdFvhGWU3q+nB
gNMIKIOVfP3lHSAvd0NHcYNdh29HQLbqP0VoaJDockm6BtMlznde2QuNHXMbf1SqsZ1jsiMvQxfk
v0dx+DrwJlShHpuagnMtqncbxaJnG5TX8O4QBFOi+KoebBZkhFYEbRvtMVP9GeMtO8lB7gztk3bN
WxxV6JNEoKqrS5gvYkGkSNKbvbBgC0xLHaL9AMiOyPgMyyr8+2f9AtLylLMWSdGvKq+h
Fingerprint: 7a:96:63:1c:d7:90:29:5b:07:f9:62:ba:46:49:3f:bd

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

80 / tcp

65644365 | 2025-01-31T21:57:10.946479

Hashes

hash

421907640

http.dom_hash

415658483

http.favicon.hash

-886089347

http.html_hash

65644365

http.robots_hash

1714206274

http.server_hash

-1332498764

http.title_hash

1971658459

Brandfi Portal

HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Fri, 31 Jan 2025 21:57:10 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImZIak9LWHFoUVY1UGNHVUlpNXM2UHc9PSIsInZhbHVlIjoiQnphSzdPMUFFSXlkaVVid0dxejBSVDgrVTl1T3Q4S24xU2lnanNpZ1ByUHNHTVJsMkxETzBPdnNcL004eWFrZTYiLCJtYWMiOiJlNWUwODYyOGRiNzE2MjhkZTU5Y2YwZWYwMDljN2MzMDQ2MmM5ZmMxZmYxMmEyZTczNDQzZmRjYmIwMDk3YzY0In0%3D; expires=Fri, 31-Jan-2025 23:57:10 GMT; Max-Age=7200; path=/
Set-Cookie: brandfi_portal_session=eyJpdiI6ImxJYUhSVlwvVXQzbUs5bEhjeUNMR3F3PT0iLCJ2YWx1ZSI6IkVOZFpsUFVoWGppTnZyOUUxRWp3YXZ4cHB5TVpxcWxvbmdtbW1uVXBZdnh5VDEzZnVxRVF0VWhaMHU3eUVTd08iLCJtYWMiOiI4OTQxZDAwOTk1MWRlN2I5OTE0MmRhMTFlY2Y3ZmM4ZjgwMzI3NzA4OGE4ZWEyMTZhMGRlOTBmYzgwYmZlZmYyIn0%3D; expires=Fri, 31-Jan-2025 23:57:10 GMT; Max-Age=7200; path=/; httponly

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618 CVE-2019-9516 CVE-2019-9513 8 moreCVE-2019-9511 CVE-2018-16845 CVE-2020-11023 CVE-2020-11022 CVE-2019-20372 CVE-2019-11358 CVE-2018-16844 CVE-2018-16843

443 / tcp

1764544117 | 2025-02-11T08:22:29.387520

Hashes

hash

-2043033676

http.dom_hash

981849318

http.favicon.hash

-886089347

http.html_hash

1764544117

http.robots_hash

1714206274

http.server_hash

-1332498764

http.title_hash

1971658459

Brandfi Portal

HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Tue, 11 Feb 2025 08:22:29 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IndTd2puSlVURWszZlJUSFR4UjczeUE9PSIsInZhbHVlIjoidW0yajR5MGxhSms0dFNKKzlha1lIWm1UeDVuN1hKM3hcL0hsVDB5NnE2VGhka0dcL09SYk5mT1JDTTkxemJUWVJWIiwibWFjIjoiZDdkMGZiOGM0NDYyYWVkZjgzYmE5MzJjMjEyMTRjMDU2N2JjZjhlMjQzNGFkMTg4NDQ2Y2M4ODkxYjBkOGZhYSJ9; expires=Tue, 11-Feb-2025 10:22:29 GMT; Max-Age=7200; path=/
Set-Cookie: brandfi_portal_session=eyJpdiI6IitGM3YrVlBNRldzNGtLa0VWdWdNWEE9PSIsInZhbHVlIjoibVBxXC9ubEh4V2tMZFBMWXhBN0xmdmNqbzZ3R2VheEtjbFdVOXp5WWIyeGJyWlZDbDVibHRaZTY1YWROcCtqdkIiLCJtYWMiOiIzOTIwMGUwNjFiNDYwZDNlYzMzMTdjNWQ1OTVmNWZjYmE2ZDIyNzJhNzQ5NmMwMmU0MDBlMTQ1NGFkMjNlYjJiIn0%3D; expires=Tue, 11-Feb-2025 10:22:29 GMT; Max-Age=7200; path=/; httponly

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:cb:9a:8f:ee:6f:d0:ae:69:a6:0a:dc:a4:56:50:5e:5a:d4
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Feb  9 20:47:17 2025 GMT
            Not After : May 10 20:47:16 2025 GMT
        Subject: CN=dev.brandfi.co.ke
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:e2:18:82:dd:bb:74:de:c4:02:5f:35:6e:
                    be:c3:7b:e8:3c:10:dc:b5:eb:4e:03:09:36:a2:89:
                    2e:8f:fe:7d:57:2a:f4:2b:f1:71:68:77:28:73:7e:
                    54:b5:a3:a6:28:18:16:32:d7:7d:4e:c1:5f:4b:e3:
                    fe:d8:ab:e0:3e:62:d9:b1:b6:6e:16:ad:d5:c5:24:
                    03:66:b9:b0:1b:d0:bf:cf:41:0c:8c:76:b5:68:cc:
                    d7:33:e9:27:5a:e4:ea:c8:38:88:5a:ba:4f:78:8a:
                    b2:56:5d:48:c3:63:79:d2:41:6d:75:dc:5c:d4:b1:
                    d4:df:0c:ee:c3:0c:4f:38:53:1d:0f:63:86:1d:d8:
                    72:9f:a6:64:72:30:2f:75:a7:e7:d7:8f:4e:14:9c:
                    d0:9a:eb:6e:d2:e1:56:a9:c0:8d:21:7c:d6:ef:8a:
                    db:9c:94:d0:3a:0f:39:16:13:a6:33:1a:88:06:b6:
                    12:57:1e:93:b4:15:b8:ac:2b:54:1a:cf:5e:66:3e:
                    37:1d:15:80:aa:f1:50:bc:2c:e6:af:1d:d3:ec:a7:
                    36:2a:04:1e:7d:a1:61:dc:07:c2:98:4d:db:13:31:
                    84:a5:62:00:b9:b9:58:51:df:84:ab:16:ba:5b:55:
                    be:96:a6:56:68:cd:a1:d6:09:6a:45:97:71:a7:9d:
                    02:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                3F:41:33:C9:38:63:78:7D:61:94:93:D4:09:6C:ED:C2:CC:B7:9B:3C
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:dev.brandfi.co.ke
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Feb  9 21:45:48.067 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:D1:85:1C:94:BB:F7:FD:D8:36:4B:3E:
                                E4:94:B6:4F:22:C7:C6:9F:1C:6D:06:08:58:71:2C:EA:
                                11:C2:67:A0:A9:02:20:6A:39:F7:25:D7:C7:DC:E6:CD:
                                8D:FC:C3:60:9A:C4:BD:F2:43:DC:52:95:D7:E1:DC:D4:
                                E5:85:C9:0A:CD:F8:14
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DE:85:81:D7:50:24:7C:6B:CD:CB:AF:56:37:C5:E7:81:
                                C6:4C:E4:6E:D6:17:63:9F:8F:34:A7:26:C9:E2:BD:37
                    Timestamp : Feb  9 21:45:48.002 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:5D:17:C8:34:CB:43:53:F0:61:BC:F5:BD:
                                65:58:E5:E5:EF:6B:FF:D9:77:2D:B8:04:CD:4A:2E:50:
                                EB:25:B1:0A:02:20:48:E0:24:37:15:7D:7A:EC:16:41:
                                D4:04:E2:B5:29:34:57:3B:68:9D:DE:5E:C2:83:89:8A:
                                E0:54:7F:9D:FA:67
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        72:21:91:cb:58:3e:f3:d4:54:f1:a5:4c:5c:43:fa:91:70:d6:
        8a:c9:9a:b3:3e:25:74:ae:46:16:ac:d6:25:20:c9:d0:a0:1f:
        2e:29:97:41:dd:67:aa:cb:f0:70:6d:20:ee:28:85:d9:9d:0b:
        a9:7f:a1:3e:fc:ae:80:60:11:40:d1:cd:ed:4d:ff:27:64:f0:
        5e:26:ba:fd:1f:25:79:6b:c2:ab:3b:98:ac:17:66:8b:c9:af:
        07:de:95:b0:12:77:25:a3:fa:30:c3:44:c5:99:48:9a:f0:24:
        b0:69:e0:83:37:36:e7:0f:09:7e:5b:e1:cf:9d:f6:ed:44:24:
        86:d6:e5:a7:ae:98:7b:f1:94:d5:c2:76:03:52:31:64:31:51:
        74:bd:cb:b0:94:df:f6:d6:ab:47:98:2e:db:56:ef:ec:cd:16:
        3f:8f:7e:75:d6:8f:36:58:0a:2e:cf:28:ef:13:e8:f3:2c:ba:
        4b:8e:93:41:e5:ab:f1:33:99:34:a1:13:c0:39:d1:ef:e1:e7:
        13:b8:f6:51:47:b1:38:75:6c:43:df:10:c7:7e:d1:e9:b2:2a:
        a4:5e:3e:12:f1:81:0a:a9:ed:07:2c:52:7e:4d:bc:f1:63:a1:
        89:fe:88:eb:86:f2:3d:41:ff:78:5d:29:b0:16:9d:a7:7d:89:
        83:5b:c4:d3

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618 CVE-2019-9516 CVE-2019-9513 8 moreCVE-2019-9511 CVE-2018-16845 CVE-2020-11023 CVE-2020-11022 CVE-2019-20372 CVE-2019-11358 CVE-2018-16844 CVE-2018-16843

33060 / tcp

203872904 | 2025-02-13T09:48:38.642383

MySQL X Protocol:
  tls: False
  authentication.mechanisms:
    MYSQL41
    SHA256_MEMORY
  doc.formats: text
  client.interactive: False
  node_type: mysql
  client.pwd_expire_ok: False

178.128.41.174

Last Seen: 2025-02-13

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

22 / tcp

931042581 | 2025-02-12T10:59:16.458722

OpenSSH7.6p1 Ubuntu 4ubuntu0.5

80 / tcp

65644365 | 2025-01-31T21:57:10.946479

Hashes

nginx1.14.0

443 / tcp

1764544117 | 2025-02-11T08:22:29.387520

Hashes

nginx1.14.0

33060 / tcp

203872904 | 2025-02-13T09:48:38.642383

MySQL X Protocol

Products

Pricing

Contact Us

178.128.41.174

Last Seen: 2025-02-13

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

22 / tcp 931042581 | 2025-02-12T10:59:16.458722

OpenSSH7.6p1 Ubuntu 4ubuntu0.5

80 / tcp 65644365 | 2025-01-31T21:57:10.946479

Hashes

nginx1.14.0

443 / tcp 1764544117 | 2025-02-11T08:22:29.387520

Hashes

nginx1.14.0

33060 / tcp 203872904 | 2025-02-13T09:48:38.642383

MySQL X Protocol

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

931042581 | 2025-02-12T10:59:16.458722

80 / tcp

65644365 | 2025-01-31T21:57:10.946479

443 / tcp

1764544117 | 2025-02-11T08:22:29.387520

33060 / tcp

203872904 | 2025-02-13T09:48:38.642383