GeneralInformation

Hostnames	yonetim.cinfikir.com
Domains	cinfikir.com
Country	Turkey
City	Istanbul
Organization	Teletek Bulut Bilisim ve Iletisim Hizmetleri A.S.
ISP	Teletek Bulut Bilisim ve Iletisim Hizmetleri A.S.
ASN	AS43352

WebTechnologies

Hosting panels

Plesk

JavaScript frameworks

Prototype

RequireJS

JavaScript libraries

OWL Carousel

jQuery2.1.3

UI frameworks

Bootstrap

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2020(2)

CVE-2020-11023

6.9In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-11022

6.9In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

2019(1)

CVE-2019-11358

6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

2015(1)

CVE-2015-9251

6.1jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

53 80 110 143 993 995 8443 8880

80 / tcp

1518951176 | 2025-04-18T16:32:30.272437

Hashes

hash

963409420

http.dom_hash

-2088271908

http.favicon.hash

-1300414312

http.html_hash

1518951176

http.robots_hash

1755101240

http.server_hash

608434861

Yapım Aşamasında

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Thu, 14 Jan 2021 11:36:44 GMT
Accept-Ranges: bytes
ETag: "ca758969ead61:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Fri, 18 Apr 2025 16:32:29 GMT
Content-Length: 3987

Vulnerabilities

110 / tcp

-471102630 | 2025-04-18T15:45:29.463927

+OK Welcome to MailEnable POP3 Server
+OK Capability list follows
TOP
USER
UIDL
.

143 / tcp

1133627311 | 2025-04-18T16:56:02.601384

* OK IMAP4rev1 server ready at 04/18/25 19:56:02\r\n

993 / tcp

-1218275713 | 2025-04-18T00:58:48.788157

* OK IMAP4rev1 server ready at 04/18/25 03:58:30
* CAPABILITY IMAP4rev1 IMAP4 AUTH=LOGIN AUTH=CRAM-MD5 IDLE CHILDREN UIDPLUS CLIENTID
A001 OK CAPABILITY completed
A002 BAD UNKNOWN Command
A003 BAD UNKNOWN Command
* BYE IMAP4rev1 server terminating connection
A004 OK LOGOUT Initiated

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18958109 (0x121471d)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=CH, L=Schaffhausen, O=Plesk, CN=Plesk/emailAddress=info@plesk.com
        Validity
            Not Before: Jan  8 19:04:51 2021 GMT
            Not After : Jan  8 19:04:51 2022 GMT
        Subject: C=CH, L=Schaffhausen, O=Plesk, CN=Plesk/emailAddress=info@plesk.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:9a:3b:d3:45:08:f6:74:af:49:93:be:df:
                    86:a1:bf:e9:7a:31:06:c0:3a:e4:1d:14:25:09:4c:
                    67:f2:5e:6a:36:7f:fe:21:2a:ca:24:b4:06:36:4f:
                    a5:95:ab:65:0d:0a:c4:ea:55:7f:c4:1c:6a:6c:7d:
                    97:14:fc:87:c2:75:8b:0d:d9:a6:ed:bc:74:f0:c1:
                    29:21:4b:f1:b9:40:fd:58:66:f7:42:ec:05:49:75:
                    12:cb:bb:25:26:ad:ae:2e:00:37:03:8a:84:dc:05:
                    2a:48:15:b0:c5:3a:88:5a:a1:e9:6f:af:34:7c:2b:
                    ee:4b:c4:bd:60:7a:3d:e6:89:af:c6:df:78:a1:7e:
                    07:a9:5f:30:78:23:f9:72:f8:d9:8b:2a:64:11:ad:
                    88:92:2b:d1:98:40:17:86:c6:a6:aa:8d:86:63:29:
                    7e:17:d3:3a:ee:72:80:38:a4:1d:c7:1b:3c:b6:de:
                    47:21:9a:ef:aa:59:58:a0:ab:b7:f8:c2:3b:82:ff:
                    1f:cb:6e:07:3c:cf:41:3a:00:98:09:cb:0e:af:83:
                    15:75:43:92:f6:26:12:fd:0c:8a:79:68:32:87:42:
                    44:1f:15:6f:70:88:54:54:36:8c:43:28:ef:8e:16:
                    c3:cf:1c:00:f7:74:03:8f:91:78:1e:f5:73:12:42:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                80:6D:BC:7D:D1:CA:E3:75:96:07:9E:9B:0F:F4:ED:F7:CB:89:5E:63
            X509v3 Authority Key Identifier: 
                keyid:80:6D:BC:7D:D1:CA:E3:75:96:07:9E:9B:0F:F4:ED:F7:CB:89:5E:63
                DirName:/C=CH/L=Schaffhausen/O=Plesk/CN=Plesk/emailAddress=info@plesk.com
                serial:01:21:47:1D
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        7e:fa:76:8c:90:7e:b1:d5:16:ac:18:d2:20:2a:60:4c:a0:0f:
        de:03:1f:29:d2:c1:3d:9d:7c:af:8e:e6:ff:4a:46:66:d2:17:
        af:46:57:bf:bc:79:aa:7c:02:d0:5b:96:ae:9f:47:76:b0:5f:
        86:52:80:37:ee:b2:31:36:6b:64:67:30:0c:aa:f1:4f:ac:e2:
        ff:92:4f:07:3d:44:81:df:6f:f9:ed:91:08:46:87:71:ea:d4:
        39:5e:66:87:19:af:f7:a6:12:5f:85:b9:4f:19:dc:2e:54:07:
        56:cb:82:70:0d:76:c0:93:0d:bd:98:16:95:f1:a3:a4:81:be:
        19:47:5e:e5:6c:d5:12:b9:16:98:fe:47:1d:b2:c2:af:dd:ed:
        3d:9f:92:30:38:9f:b6:91:e9:e3:03:d0:dc:e1:ff:ce:b9:c0:
        fa:b0:a7:60:0a:d6:27:77:61:7a:b9:76:e7:7b:a8:b6:c6:f0:
        c6:09:b6:0b:c6:19:4b:0b:4a:1c:4b:6c:32:80:09:32:a2:77:
        0c:2a:3b:76:2b:94:6e:c9:9c:17:e1:cc:c8:fe:60:59:83:56:
        c7:cb:35:c4:06:39:a2:9d:de:00:e2:00:e9:95:c6:cc:de:21:
        47:34:26:71:93:ad:7e:67:cd:6e:b0:e7:67:e8:e4:82:5b:b6:
        24:bf:e7:5d

995 / tcp

-471102630 | 2025-04-17T23:44:30.979016

+OK Welcome to MailEnable POP3 Server
+OK Capability list follows
TOP
USER
UIDL
.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18958109 (0x121471d)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=CH, L=Schaffhausen, O=Plesk, CN=Plesk/emailAddress=info@plesk.com
        Validity
            Not Before: Jan  8 19:04:51 2021 GMT
            Not After : Jan  8 19:04:51 2022 GMT
        Subject: C=CH, L=Schaffhausen, O=Plesk, CN=Plesk/emailAddress=info@plesk.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:9a:3b:d3:45:08:f6:74:af:49:93:be:df:
                    86:a1:bf:e9:7a:31:06:c0:3a:e4:1d:14:25:09:4c:
                    67:f2:5e:6a:36:7f:fe:21:2a:ca:24:b4:06:36:4f:
                    a5:95:ab:65:0d:0a:c4:ea:55:7f:c4:1c:6a:6c:7d:
                    97:14:fc:87:c2:75:8b:0d:d9:a6:ed:bc:74:f0:c1:
                    29:21:4b:f1:b9:40:fd:58:66:f7:42:ec:05:49:75:
                    12:cb:bb:25:26:ad:ae:2e:00:37:03:8a:84:dc:05:
                    2a:48:15:b0:c5:3a:88:5a:a1:e9:6f:af:34:7c:2b:
                    ee:4b:c4:bd:60:7a:3d:e6:89:af:c6:df:78:a1:7e:
                    07:a9:5f:30:78:23:f9:72:f8:d9:8b:2a:64:11:ad:
                    88:92:2b:d1:98:40:17:86:c6:a6:aa:8d:86:63:29:
                    7e:17:d3:3a:ee:72:80:38:a4:1d:c7:1b:3c:b6:de:
                    47:21:9a:ef:aa:59:58:a0:ab:b7:f8:c2:3b:82:ff:
                    1f:cb:6e:07:3c:cf:41:3a:00:98:09:cb:0e:af:83:
                    15:75:43:92:f6:26:12:fd:0c:8a:79:68:32:87:42:
                    44:1f:15:6f:70:88:54:54:36:8c:43:28:ef:8e:16:
                    c3:cf:1c:00:f7:74:03:8f:91:78:1e:f5:73:12:42:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                80:6D:BC:7D:D1:CA:E3:75:96:07:9E:9B:0F:F4:ED:F7:CB:89:5E:63
            X509v3 Authority Key Identifier: 
                keyid:80:6D:BC:7D:D1:CA:E3:75:96:07:9E:9B:0F:F4:ED:F7:CB:89:5E:63
                DirName:/C=CH/L=Schaffhausen/O=Plesk/CN=Plesk/emailAddress=info@plesk.com
                serial:01:21:47:1D
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        7e:fa:76:8c:90:7e:b1:d5:16:ac:18:d2:20:2a:60:4c:a0:0f:
        de:03:1f:29:d2:c1:3d:9d:7c:af:8e:e6:ff:4a:46:66:d2:17:
        af:46:57:bf:bc:79:aa:7c:02:d0:5b:96:ae:9f:47:76:b0:5f:
        86:52:80:37:ee:b2:31:36:6b:64:67:30:0c:aa:f1:4f:ac:e2:
        ff:92:4f:07:3d:44:81:df:6f:f9:ed:91:08:46:87:71:ea:d4:
        39:5e:66:87:19:af:f7:a6:12:5f:85:b9:4f:19:dc:2e:54:07:
        56:cb:82:70:0d:76:c0:93:0d:bd:98:16:95:f1:a3:a4:81:be:
        19:47:5e:e5:6c:d5:12:b9:16:98:fe:47:1d:b2:c2:af:dd:ed:
        3d:9f:92:30:38:9f:b6:91:e9:e3:03:d0:dc:e1:ff:ce:b9:c0:
        fa:b0:a7:60:0a:d6:27:77:61:7a:b9:76:e7:7b:a8:b6:c6:f0:
        c6:09:b6:0b:c6:19:4b:0b:4a:1c:4b:6c:32:80:09:32:a2:77:
        0c:2a:3b:76:2b:94:6e:c9:9c:17:e1:cc:c8:fe:60:59:83:56:
        c7:cb:35:c4:06:39:a2:9d:de:00:e2:00:e9:95:c6:cc:de:21:
        47:34:26:71:93:ad:7e:67:cd:6e:b0:e7:67:e8:e4:82:5b:b6:
        24:bf:e7:5d

8443 / tcp

-180997969 | 2025-04-18T04:41:51.437463

Hashes

hash

-888357938

http.dom_hash

-874979305

http.html_hash

-180997969

http.robots_hash

-367011193

http.server_hash

608434861

http.title_hash

1741631290

CinFikir Panel

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate,post-check=0, pre-check=0
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Fri, 18 Apr 2025 04:41:50 GMT
Server: Microsoft-IIS/10.0
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Powered-By: ASP.NET
X-Content-Type-Options: nosniff
Date: Fri, 18 Apr 2025 04:41:50 GMT

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:11:8d:9e:eb:3f:a7:c5:cb:ed:0b:7c:12:58:ad:20:84:0c
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Feb 25 17:31:50 2025 GMT
            Not After : May 26 17:31:49 2025 GMT
        Subject: CN=yonetim.cinfikir.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:92:a6:30:93:d8:55:04:4f:a1:d7:fe:6f:b9:9b:
                    da:b1:70:79:b8:18:ad:c6:76:e7:11:0c:48:bc:aa:
                    40:80:63:d0:4d:89:77:0d:e2:ee:b7:0e:b3:a8:1b:
                    e3:83:56:cd:c3:0d:a9:4b:25:61:67:47:b8:6f:73:
                    7e:bd:f4:f4:15:f8:cb:bf:85:25:cf:fd:21:66:93:
                    27:51:50:b5:55:98:c6:b8:f6:fc:85:06:64:c6:d7:
                    c8:47:1c:f1:0e:c8:cd:b8:85:50:11:c2:12:87:a7:
                    f1:4b:18:6b:37:91:d9:fe:08:55:fc:c0:c5:8b:2b:
                    52:9e:84:e5:bd:69:93:f6:35:d8:f1:cd:29:6c:2f:
                    e8:c4:38:b5:03:90:14:7e:cb:e6:39:42:ea:d0:a2:
                    32:29:97:2d:b3:9b:af:4d:6f:00:ba:39:49:c5:3a:
                    b4:1d:9a:2f:2d:1d:84:fb:a4:31:06:4a:4a:21:cd:
                    f2:71:19:1e:49:2b:31:1d:16:92:dc:9f:a6:aa:e6:
                    57:0f:e2:3c:3d:08:b2:62:c4:1a:77:71:1b:0b:09:
                    9d:d6:b4:8f:13:23:6a:e2:de:66:4d:5a:3b:e7:69:
                    06:13:78:99:da:18:3e:88:ce:26:12:d4:02:d3:83:
                    2b:01:8e:0c:79:cb:09:9f:21:e3:57:7b:1e:c9:f1:
                    f6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                E6:CB:AD:F8:F7:E9:C7:E5:B4:D8:59:20:57:72:93:CD:EC:BE:5A:EF
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:yonetim.cinfikir.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Feb 25 18:30:20.679 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:01:54:0D:1A:96:35:2E:4A:F3:0D:94:A6:
                                99:FE:17:88:F8:1E:40:83:23:92:67:3A:F5:DF:C8:5D:
                                A3:F6:62:F0:02:21:00:F8:53:E3:1B:E3:2F:A7:53:B5:
                                FD:D4:7C:11:5F:33:8B:22:BA:FC:B4:AA:66:8C:38:E2:
                                9D:4E:24:DB:F7:49:60
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Feb 25 18:30:20.921 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:1E:14:BF:F2:BA:2A:BF:3F:AB:60:B5:D7:
                                07:C1:53:63:2E:EB:C3:A9:A2:C1:18:FE:8B:66:91:4C:
                                4B:58:D8:BF:02:20:77:BF:E5:B0:4F:0A:09:3F:E8:39:
                                E6:FD:6F:31:79:5C:A0:72:DF:48:9B:C2:6B:F7:7C:D1:
                                2F:D7:7D:44:72:2E
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        97:42:30:2b:d7:58:55:8b:b3:4b:e3:9d:c9:08:57:3f:2b:68:
        bc:38:21:ca:84:57:7c:64:85:8b:d4:e8:4f:a6:5c:da:ed:8a:
        fe:dc:a9:7b:7e:2e:16:cc:e7:54:b7:69:88:13:ec:a0:f0:a2:
        60:5a:ee:0a:b6:1b:ec:02:2b:a6:55:2c:da:cc:ef:fe:f6:46:
        2e:79:c5:99:60:c4:69:22:d4:0b:02:84:02:76:30:52:36:a1:
        c1:48:52:ff:6a:e4:1a:65:f0:8e:e3:59:55:d5:d0:a2:31:be:
        2b:dc:b3:f7:e7:c4:d8:de:48:84:b4:ca:fb:03:78:63:d7:a7:
        4c:24:e1:5d:34:c0:2d:28:99:d9:d4:93:c5:89:d6:cd:7f:af:
        48:ee:b3:07:4a:83:72:6b:6b:c4:25:a7:6c:bb:23:bc:0a:52:
        9f:8b:b3:47:c8:cc:4e:18:0f:9a:e7:15:a7:81:82:b5:7e:77:
        28:a8:fc:16:2d:68:65:93:01:9b:ce:c4:13:ba:b7:1a:80:d3:
        3c:d8:d1:92:8b:2b:56:81:64:21:2c:69:85:d8:6e:48:b4:88:
        a9:5a:26:66:6f:f1:56:35:6a:0a:a0:06:5e:5e:46:b0:9e:9a:
        07:89:55:08:dc:7e:a8:0e:b1:4b:20:56:b9:92:56:49:0b:e3:
        81:82:72:b4

8880 / tcp

1880807662 | 2025-04-18T13:38:34.000358

HTTP/1.1 303 See Other
Cache-Control: no-store, no-cache, must-revalidate,post-check=0, pre-check=0
Pragma: no-cache
Content-Type: text/html; charset=UTF-8
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Fri, 18 Apr 2025 13:38:33 GMT
Location: http://195.155.132.167/login.php
Server: Microsoft-IIS/10.0
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Powered-By: ASP.NET
X-Content-Type-Options: nosniff
Date: Fri, 18 Apr 2025 13:38:33 GMT
Content-Length: 0

195.155.132.167

Last Seen: 2025-04-18

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

80 / tcp

1518951176 | 2025-04-18T16:32:30.272437

Hashes

Microsoft IIS httpd10.0

110 / tcp

-471102630 | 2025-04-18T15:45:29.463927

MailEnable POP3 Server

143 / tcp

1133627311 | 2025-04-18T16:56:02.601384

993 / tcp

-1218275713 | 2025-04-18T00:58:48.788157

995 / tcp

-471102630 | 2025-04-17T23:44:30.979016

MailEnable POP3 Server

8443 / tcp

-180997969 | 2025-04-18T04:41:51.437463

Hashes

Microsoft IIS httpd10.0

8880 / tcp

1880807662 | 2025-04-18T13:38:34.000358

Microsoft IIS httpd10.0

Products

Pricing

Contact Us

195.155.132.167

Last Seen: 2025-04-18

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Latest CVSS

OpenPorts

80 / tcp 1518951176 | 2025-04-18T16:32:30.272437

Hashes

Microsoft IIS httpd10.0

110 / tcp -471102630 | 2025-04-18T15:45:29.463927

MailEnable POP3 Server

143 / tcp 1133627311 | 2025-04-18T16:56:02.601384

993 / tcp -1218275713 | 2025-04-18T00:58:48.788157

995 / tcp -471102630 | 2025-04-17T23:44:30.979016

MailEnable POP3 Server

8443 / tcp -180997969 | 2025-04-18T04:41:51.437463

Hashes

Microsoft IIS httpd10.0

8880 / tcp 1880807662 | 2025-04-18T13:38:34.000358

Microsoft IIS httpd10.0

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

1518951176 | 2025-04-18T16:32:30.272437

110 / tcp

-471102630 | 2025-04-18T15:45:29.463927

143 / tcp

1133627311 | 2025-04-18T16:56:02.601384

993 / tcp

-1218275713 | 2025-04-18T00:58:48.788157

995 / tcp

-471102630 | 2025-04-17T23:44:30.979016

8443 / tcp

-180997969 | 2025-04-18T04:41:51.437463

8880 / tcp

1880807662 | 2025-04-18T13:38:34.000358