GeneralInformation

Hostnames	ec2-18-159-4-107.eu-central-1.compute.amazonaws.com aromaspur.de
Domains	amazonaws.com aromaspur.de
Cloud Provider	Amazon
Cloud Region	eu-central-1
Cloud Service	EC2
Country	Germany
City	Frankfurt am Main
Organization	A100 ROW GmbH
ISP	Amazon.com, Inc.
ASN	AS16509
Operating System	Ubuntu

WebTechnologies

Blogs

WordPress

CDN

cdnjs

Cloudflare

CMS

WordPress

Cookie compliance

CookieYes

Databases

MySQL

JavaScript libraries

jQuery3.5.1

jQuery UI

Magnific Popup

Live chat

ArrowChat

Miscellaneous

Popper1.11.0

Programming languages

PHP

SEO

Yoast SEO Premium16.4

Yoast SEO17.3

UI frameworks

Bootstrap4.0.0

WordPress plugins

Yoast SEO17.3

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

2018(3)

CVE-2018-14042

6.1In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

CVE-2018-14041

6.1In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.

CVE-2018-14040

6.1In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

2016(1)

CVE-2016-10735

6.1In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

OpenPorts

443

443 / tcp

1182162572 | 2025-03-15T21:03:30.440825

Hashes

hash

-833979641

http.dom_hash

593385686

http.favicon.hash

-738154601

http.html_hash

1182162572

http.robots_hash

961191570

http.server_hash

967792298

Marktplatz für den Kauf und Verkauf gebrauchter Unterwäsche

HTTP/1.1 200 OK
Date: Sat, 15 Mar 2025 21:03:29 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 38594
Connection: keep-alive
Set-Cookie: AWSALB=30IlnkGF1lCJPTLR7D9lC90o3CkYgdapo/18gczus2+LqFbCjiB7eyptj/U+nkp0kH4y884667CMhq0yaN35JKJ+GulD2PSbcz2UxJY//SV+XemjoCaaYpK00ulI; Expires=Sat, 22 Mar 2025 21:03:29 GMT; Path=/
Set-Cookie: AWSALBCORS=30IlnkGF1lCJPTLR7D9lC90o3CkYgdapo/18gczus2+LqFbCjiB7eyptj/U+nkp0kH4y884667CMhq0yaN35JKJ+GulD2PSbcz2UxJY//SV+XemjoCaaYpK00ulI; Expires=Sat, 22 Mar 2025 21:03:29 GMT; Path=/; SameSite=None; Secure
Server: nginx/1.18.0 (Ubuntu)
Content-Encoding: gzip
Expires: Sun, 16 Mar 2025 21:03:29 GMT
Cache-Control: max-age=86400
ca-cache-status: HIT
ca-cache-debug: rm-GET|ru-/-DESKTOP_USER-logout

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1d:50:02:67:3a:f7:89:3f:f1:99:25:be:2d:b9:e6
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: Jan 20 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2026 GMT
        Subject: CN=aromaspur.de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:1a:72:d0:d7:f7:8f:5f:ca:45:84:f1:81:02:
                    f6:66:14:40:ff:1d:8e:48:45:8d:9b:2c:3e:ea:3e:
                    4e:79:45:49:31:a8:dc:13:43:af:94:c6:bb:9a:13:
                    c1:07:8d:4b:80:a8:7b:21:98:d3:76:e3:31:30:a1:
                    4b:f4:01:76:fd:de:06:1d:f7:80:ed:d1:23:8c:34:
                    55:f9:05:c9:60:a2:5e:6c:14:e9:76:f1:d7:0a:b5:
                    2d:f8:01:26:50:dd:72:2e:85:e4:23:c0:85:19:87:
                    e8:de:d2:0c:31:00:aa:50:f7:1b:b8:8a:d9:3c:14:
                    5a:c8:5c:c2:8f:e6:11:e6:8c:8c:99:bf:3f:aa:9a:
                    02:c1:58:95:e1:24:ea:b0:99:ef:dd:dd:d9:48:42:
                    0f:99:60:24:d7:72:2e:2f:ee:5a:e8:05:10:6a:8e:
                    dd:cd:7d:9c:91:8b:c0:20:f9:4e:39:8a:6d:59:20:
                    79:8c:70:bc:4d:32:45:e9:b3:6d:9f:a1:65:e8:29:
                    39:53:f4:b8:9b:52:03:6b:6a:da:81:c7:b2:f3:98:
                    56:b3:1d:77:b8:9f:0f:c8:1b:9c:72:88:bb:2f:01:
                    5e:4b:23:e5:b1:93:9f:b9:bf:95:9e:52:f5:aa:e0:
                    ed:44:d9:f0:1d:6c:d8:5b:b5:a0:19:fb:40:f0:6d:
                    41:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                67:99:F9:92:E5:90:B7:35:45:11:BD:B3:B9:95:43:D8:7A:40:6F:8E
            X509v3 Subject Alternative Name: 
                DNS:aromaspur.de
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
                                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
                    Timestamp : Jan 20 09:54:57.836 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:BB:C5:63:E2:8B:F9:43:F6:93:1B:11:
                                B7:B7:08:A7:F1:2D:33:F4:C5:3B:DF:FB:63:66:C7:3E:
                                08:B4:C1:58:0A:02:21:00:9F:E5:A9:F2:AC:3D:80:A7:
                                D1:00:FD:17:0E:02:9C:4F:10:28:81:24:E4:AB:AE:45:
                                71:AE:21:7A:D9:8E:8A:4A
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
                    Timestamp : Jan 20 09:54:57.897 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:52:DA:82:8E:04:E7:2C:43:12:61:4B:B9:
                                08:ED:A4:57:54:D6:22:E0:3F:A3:A9:2F:B2:8B:87:0D:
                                7E:D4:D5:A2:02:21:00:9D:EC:D4:2A:3E:3F:B1:9E:55:
                                57:91:4E:18:42:70:2A:89:CD:90:00:77:E5:3B:91:16:
                                A9:79:D8:9D:FB:4E:D7
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
                                5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
                    Timestamp : Jan 20 09:54:57.917 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:71:57:7C:CC:EE:5C:8D:A4:90:43:02:80:
                                0D:2E:9D:BD:52:C8:43:5E:EE:52:AD:CF:61:96:F4:C5:
                                95:1B:FD:91:02:21:00:A6:45:6D:CE:EC:E4:84:97:3F:
                                A9:15:C0:EA:E5:42:FA:C1:2B:E3:E6:08:9B:45:B1:F0:
                                85:E8:B4:D9:5F:D8:FB
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        49:79:0e:98:af:6f:4d:21:bd:06:73:a4:19:ba:26:a3:46:f6:
        32:15:54:6a:90:f9:8d:1a:40:33:e6:a5:d6:c4:87:c6:69:27:
        b6:b2:d8:34:90:5c:f7:67:89:4d:c9:a6:08:71:65:e0:ed:ee:
        2b:be:c0:71:b5:42:65:f9:3a:75:17:81:9e:3f:8e:bd:bc:c5:
        f8:89:10:10:22:ce:72:dc:3a:7b:56:1b:49:ee:5e:2e:a0:81:
        bb:da:d2:ec:a5:d3:e4:f2:73:d6:ef:eb:8d:69:b1:ac:86:c4:
        1a:3b:65:6b:01:47:8a:33:04:f9:f2:15:be:45:47:69:13:0f:
        0d:63:57:f5:c5:6e:07:7c:ad:cd:ec:33:b6:8d:4d:f6:59:68:
        c4:01:03:a8:4b:82:50:c2:99:22:0d:35:8f:0b:ed:f8:4d:c4:
        90:a7:a8:40:2a:2f:79:61:9f:77:31:18:1b:86:b9:b1:51:2a:
        44:c3:81:9d:52:45:49:5b:a1:b1:8c:74:a9:dd:16:e8:6b:57:
        2e:dd:a8:ac:1c:54:91:93:b0:54:99:3c:2b:3b:10:55:c4:85:
        3c:9b:3a:30:3b:68:53:cf:6b:a0:b0:6b:d7:0e:ef:22:15:a9:
        d4:ba:10:bd:3e:78:a4:85:01:55:30:8c:f8:75:e2:ac:54:42:
        80:07:e9:9b

Vulnerabilities

3 4

18.159.4.107

Last Seen: 2025-03-15

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

443 / tcp

1182162572 | 2025-03-15T21:03:30.440825

Hashes

nginx1.18.0

Products

Pricing

Contact Us

18.159.4.107

Last Seen: 2025-03-15

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

443 / tcp 1182162572 | 2025-03-15T21:03:30.440825

Hashes

nginx1.18.0

Products

Pricing

Contact Us

Vulnerabilities

443 / tcp

1182162572 | 2025-03-15T21:03:30.440825