GeneralInformation

Hostnames	neuronplus.ir www.neuronplus.ir
Domains	neuronplus.ir
Country	Iran, Islamic Republic of
City	Shiraz
Organization	Sefroyek Pardaz Engineering PJSC
ISP	Sefroyek Pardaz Engineering PJSC
ASN	AS48715

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(1)

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443 3000 3306 8000 33060

80 / tcp

-7427993 | 2025-03-11T20:06:17.156725

Hashes

hash

-523539477

http.dom_hash

-2111657908

http.html_hash

-7427993

http.server_hash

1830366617

http.title_hash

1304729225

Neuron+

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 11 Mar 2025 20:06:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 58066
Connection: keep-alive
Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding
x-nextjs-cache: HIT
X-Powered-By: Next.js
Cache-Control: s-maxage=31536000, stale-while-revalidate
ETag: "3e9tsigflz177s"

Vulnerabilities

443 / tcp

1047346219 | 2025-03-31T14:58:31.349459

Hashes

hash

-822314113

http.dom_hash

559895063

http.favicon.hash

-1745112386

http.html_hash

1047346219

http.robots_hash

-2105566425

http.server_hash

1830366617

http.sitemap_hash

1559426998

نورون پلاس - آموزش ریاضی ابتدایی و مشاوره تحصیلی

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 31 Mar 2025 14:58:30 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 64786
Connection: keep-alive
Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding
x-nextjs-cache: HIT
X-Powered-By: Next.js
Cache-Control: s-maxage=31536000, stale-while-revalidate
ETag: "cjn83q8v2k1bbn"

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b1:65:d8:7b:5e:ca:16:c6:50:f6:2a:eb:43:ab:ed:1f:2d
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E6
        Validity
            Not Before: Mar 14 11:33:46 2025 GMT
            Not After : Jun 12 11:33:45 2025 GMT
        Subject: CN=neuronplus.ir
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:e5:3c:f8:71:2f:10:89:92:f0:4e:f0:f8:98:40:
                    a1:b8:d9:df:72:0a:60:8c:a2:3f:32:68:5c:ea:84:
                    86:98:e2:14:0a:86:54:8e:be:8f:c2:8f:19:3d:f3:
                    00:37:50:a8:e8:d3:3d:e3:ba:97:11:bf:c8:5a:d0:
                    28:ce:11:a5:09
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                AE:AA:1F:5F:C4:B2:0C:0E:D8:8D:1D:44:D4:DE:2B:87:AE:F2:6E:B7
            X509v3 Authority Key Identifier: 
                93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
            Authority Information Access: 
                OCSP - URI:http://e6.o.lencr.org
                CA Issuers - URI:http://e6.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:neuronplus.ir, DNS:www.neuronplus.ir
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://e6.c.lencr.org/46.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Mar 14 12:32:16.462 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:3D:07:E2:70:F1:E7:BC:42:31:50:3E:C4:
                                DF:0B:AE:4E:BF:E1:EE:50:0F:4E:FC:2A:04:4E:E3:2E:
                                E3:DD:24:D0:02:21:00:CF:21:46:3E:AE:0D:6F:B2:BE:
                                C7:45:D9:2A:5F:3E:A3:AF:EE:F2:BF:00:BA:6E:DB:06:
                                03:DF:AB:87:79:B6:89
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Mar 14 12:32:16.526 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:EA:7F:8C:4D:47:51:63:CC:07:3C:EC:
                                84:33:7B:F1:51:37:21:F9:21:E9:69:16:E6:E5:BD:A0:
                                1B:85:02:89:74:02:20:77:8F:C0:01:75:4E:F5:1F:55:
                                15:93:40:56:96:8D:6F:8D:03:06:C5:0A:BE:67:50:B1:
                                FF:21:58:83:04:3D:45
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:66:02:31:00:af:ec:ae:00:e8:a8:a7:1d:e1:d0:39:4d:42:
        0e:49:a0:24:0f:cc:5b:78:47:fe:61:08:72:e7:46:7a:57:e7:
        bd:75:b9:47:38:c1:78:9f:75:89:62:94:c1:57:3a:01:fc:02:
        31:00:e6:e6:b2:30:66:60:47:8e:d2:e5:c6:db:4c:ff:b1:b4:
        c8:f2:af:36:b8:3b:77:e1:30:a3:7a:64:f7:30:c2:e0:9d:48:
        fa:39:1d:af:31:28:75:d9:f5:da:28:0f:d7:08

Vulnerabilities

3000 / tcp

1047346219 | 2025-03-28T01:28:19.652504

Hashes

hash

-1293710967

http.dom_hash

559895063

http.favicon.hash

-1745112386

http.html_hash

1047346219

نورون پلاس - آموزش ریاضی ابتدایی و مشاوره تحصیلی

HTTP/1.1 200 OK
Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding
x-nextjs-cache: HIT
X-Powered-By: Next.js
Cache-Control: s-maxage=31536000, stale-while-revalidate
ETag: "cjn83q8v2k1bbn"
Content-Type: text/html; charset=utf-8
Content-Length: 64786
Date: Fri, 28 Mar 2025 01:28:18 GMT
Connection: keep-alive
Keep-Alive: timeout=5

3306 / tcp

635125649 | 2025-03-27T12:44:13.704858

MySQL:
  Protocol Version: 10
  Version: 8.0.41
  Capabilities: 65535
  Server Language: 255
  Server Status: 2
  Extended Server Capabilities: 57343
  Authentication Plugin: caching_sha2_password

8000 / tcp

-1060095501 | 2025-03-25T15:43:31.164006

Hashes

hash

856315698

http.dom_hash

1231516973

http.html_hash

-1060095501

http.title_hash

-1449824703

Error

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Security-Policy: default-src 'none'
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
Content-Type: text/html; charset=utf-8
Content-Length: 139
Date: Tue, 25 Mar 2025 15:43:31 GMT
Connection: keep-alive
Keep-Alive: timeout=5

33060 / tcp

-795948505 | 2025-03-27T16:51:18.613517

MySQL X Protocol:
  tls: False
  authentication.mechanisms:
    MYSQL41
    SHA256_MEMORY
  doc.formats: text
  client.interactive: False
  compression:
    algorithm:
      deflate_stream
      lz4_message
      zstd_stream
  node_type: mysql
  client.pwd_expire_ok: False

195.211.44.121

Last Seen: 2025-03-31

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

-7427993 | 2025-03-11T20:06:17.156725

Hashes

nginx1.20.1

443 / tcp

1047346219 | 2025-03-31T14:58:31.349459

Hashes

nginx1.20.1

3000 / tcp

1047346219 | 2025-03-28T01:28:19.652504

Hashes

3306 / tcp

635125649 | 2025-03-27T12:44:13.704858

MySQL8.0.41

8000 / tcp

-1060095501 | 2025-03-25T15:43:31.164006

Hashes

33060 / tcp

-795948505 | 2025-03-27T16:51:18.613517

MySQL X Protocol

Products

Pricing

Contact Us

195.211.44.121

Last Seen: 2025-03-31

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

80 / tcp -7427993 | 2025-03-11T20:06:17.156725

Hashes

nginx1.20.1

443 / tcp 1047346219 | 2025-03-31T14:58:31.349459

Hashes

nginx1.20.1

3000 / tcp 1047346219 | 2025-03-28T01:28:19.652504

Hashes

3306 / tcp 635125649 | 2025-03-27T12:44:13.704858

MySQL8.0.41

8000 / tcp -1060095501 | 2025-03-25T15:43:31.164006

Hashes

33060 / tcp -795948505 | 2025-03-27T16:51:18.613517

MySQL X Protocol

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

-7427993 | 2025-03-11T20:06:17.156725

443 / tcp

1047346219 | 2025-03-31T14:58:31.349459

3000 / tcp

1047346219 | 2025-03-28T01:28:19.652504

3306 / tcp

635125649 | 2025-03-27T12:44:13.704858

8000 / tcp

-1060095501 | 2025-03-25T15:43:31.164006

33060 / tcp

-795948505 | 2025-03-27T16:51:18.613517