GeneralInformation

Hostnames	coscapes.com www.coscapes.com 178.234.12.198.host.secureserver.net prod.phx3.secureserver.net
Domains	coscapes.com secureserver.net
Country	United States
City	Tempe
Organization	GoDaddy.com, LLC
ISP	GoDaddy.com, LLC
ASN	AS26496

WebTechnologies

Advertising

Google AdSense

Analytics

Google Analytics

Blogs

WordPress

Caching

WP Rocket

CMS

WordPress

Databases

MySQL

Ecommerce

Abicart

JavaScript libraries

jQuery

Modernizr

OWL Carousel

Slick

Marketing automation

HubSpot

Photo galleries

Slider Revolution6.6.15

Programming languages

PHP

SEO

Yoast SEO22.7

Tag managers

Google Tag Manager

UI frameworks

Bootstrap

Widgets

Slider Revolution6.6.15

WordPress plugins

WP Rocket

Yoast SEO22.7

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2024(1)

CVE-2024-25117

6.8php-svg-lib is a scalable vector graphics (SVG) file parsing/rendering library. Prior to version 0.5.2, php-svg-lib fails to validate that font-family doesn't contain a PHAR url, which might leads to RCE on PHP < 8.0, and doesn't validate if external references are allowed. This might leads to bypass of restrictions or RCE on projects that are using it, if they do not strictly revalidate the fontName that is passed by php-svg-lib. The `Style::fromAttributes(`), or the `Style::parseCssStyle()` should check the content of the `font-family` and prevents it to use a PHAR url, to avoid passing an invalid and dangerous `fontName` value to other libraries. The same check as done in the `Style::fromStyleSheets` might be reused. Libraries using this library as a dependency might be vulnerable to some bypass of restrictions, or even remote code execution, if they do not double check the value of the `fontName` that is passed by php-svg-lib. Version 0.5.2 contains a fix for this issue.

2022(4)

CVE-2022-37454

9.8The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.

CVE-2022-31629

6.5In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.

CVE-2022-31628

2.3In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.

CVE-2022-4900

6.2A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

2017(1)

CVE-2017-8923

9.8The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string.

2013(1)

CVE-2013-2220

7.5Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.

2007(1)

CVE-2007-3205

5.0The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

OpenPorts

80 443 995 2096

80 / tcp

-695031814 | 2025-03-13T19:03:29.326928

Hashes

hash

1141592500

http.dom_hash

396934843

http.html_hash

-695031814

http.server_hash

869690771

http.sitemap_hash

-795206285

http.title_hash

-566781546

home - Decision Tree

HTTP/1.1 200 OK
Date: Thu, 13 Mar 2025 19:03:27 GMT
Server: Apache
X-Powered-By: PHP/7.2.34
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=edd1dd75080e6a46a43aa8418265846a1267c228; expires=Thu, 13-Mar-2025 21:03:27 GMT; Max-Age=7200; path=/; HttpOnly
Upgrade: h2,h2c
Connection: Upgrade
Vary: Accept-Encoding
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Vulnerabilities

2 1 4 1

443 / tcp

-2056391160 | 2025-03-20T20:17:35.179471

Hashes

hash

1861097477

http.dom_hash

1644215003

http.favicon.hash

-469861405

http.html_hash

-2056391160

http.robots_hash

1784978616

http.server_hash

869690771

http.title_hash

784610430

Home - Colorado Scapes

HTTP/1.1 200 OK
Date: Thu, 20 Mar 2025 20:17:34 GMT
Server: Apache
X-Powered-By: PHP/8.1.31
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Thu, 20 Mar 2025 20:10:08 GMT
Cache-Control: max-age=0
Expires: Thu, 20 Mar 2025 20:17:34 GMT
Vary: Accept-Encoding
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            99:55:cb:bb:1b:8f:84:d1
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2
        Validity
            Not Before: Mar 15 12:15:41 2025 GMT
            Not After : Apr 16 12:15:41 2026 GMT
        Subject: CN=coscapes.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a6:bd:0d:0d:81:4a:dc:0e:91:fc:80:b1:04:d8:
                    b6:04:91:df:38:7a:e0:0d:f6:66:a1:c2:dd:d5:5b:
                    c2:07:fc:1b:19:bc:b8:1b:96:29:b3:b5:2e:ac:f6:
                    33:87:7f:03:d0:06:57:5f:4c:4f:86:e1:97:1e:65:
                    f0:c6:27:62:db:70:14:e6:59:d4:96:bc:f3:a3:f4:
                    d2:0d:aa:01:79:6b:0a:6b:87:0c:d8:e6:7e:c8:12:
                    05:9f:bc:ff:03:74:6f:51:df:6e:5b:e7:a8:be:fa:
                    51:ed:84:8d:48:67:52:24:10:db:f6:bc:38:45:7d:
                    45:b3:7a:c0:9a:c6:69:db:e3:8d:da:88:53:a2:d6:
                    9d:7b:0b:8f:67:33:9f:52:82:4f:ac:04:44:e8:a2:
                    8f:b4:2f:a3:cb:86:f1:99:57:a2:b6:87:fd:64:2f:
                    cd:0a:42:97:7e:08:39:f3:01:72:5d:3e:9a:0d:9d:
                    59:78:97:70:27:50:8b:3a:c9:c4:47:d5:06:11:c2:
                    dc:e3:cf:32:a7:00:08:04:f0:af:56:16:00:f3:d9:
                    02:0b:03:94:6e:9a:35:19:46:4b:bd:18:16:9f:00:
                    dc:44:79:8b:fd:ba:1c:30:e4:c7:62:a0:36:1d:70:
                    f6:8c:a6:21:72:64:d2:79:ac:32:77:07:df:10:9f:
                    f9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.godaddy.com/gdig2s1-41688.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114413.1.7.23.1
                  CPS: http://certificates.godaddy.com/repository/
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com/
                CA Issuers - URI:http://certificates.godaddy.com/repository/gdig2.crt
            X509v3 Authority Key Identifier: 
                40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE
            X509v3 Subject Alternative Name: 
                DNS:coscapes.com, DNS:www.coscapes.com
            X509v3 Subject Key Identifier: 
                76:64:C8:E3:4E:BC:7E:90:8A:51:2C:5C:C9:D7:4B:19:22:D3:89:B0
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
                                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
                    Timestamp : Mar 15 12:15:41.948 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:7C:9E:1F:18:1B:E1:4E:D0:F1:23:43:0D:
                                B6:7C:3A:4A:BF:43:18:E0:D8:E1:63:5A:CF:BA:48:2B:
                                26:76:EB:95:02:20:62:90:7E:05:6E:FC:DE:3B:22:18:
                                64:2F:D5:F7:63:1C:06:4B:86:F0:03:FB:FE:C1:59:21:
                                CE:DE:51:AC:21:EF
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
                    Timestamp : Mar 15 12:15:42.234 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:91:06:DE:C3:72:FA:EF:10:DF:C4:2D:
                                FD:B1:84:B9:12:EB:73:5D:17:05:14:41:61:D7:1C:A4:
                                07:A4:47:43:83:02:20:17:CD:AF:3E:CD:A8:29:7C:FE:
                                84:E5:94:EB:30:EE:18:2F:54:8A:0C:9B:BA:4F:63:31:
                                0E:31:FE:EB:60:DD:7C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E:
                                F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7
                    Timestamp : Mar 15 12:15:42.523 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:8B:18:36:B2:41:C3:B1:E6:4A:93:DD:
                                7E:6C:93:4D:21:35:03:FD:55:D4:6E:1B:15:6F:01:D9:
                                8E:BE:93:FA:65:02:20:72:19:2F:0B:A8:7F:F8:AB:41:
                                79:A2:16:41:24:AE:A5:DC:B6:94:70:96:8D:8F:E2:D2:
                                20:25:F3:E7:95:0B:A5
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        11:80:2f:3e:75:4c:21:f1:65:2e:6b:8a:20:bd:04:26:81:37:
        01:03:07:50:58:0f:49:36:f0:46:68:0f:64:e6:3c:da:df:52:
        21:c9:18:96:25:b2:15:14:41:70:5e:63:21:61:3d:87:4d:29:
        93:53:c2:b0:2f:9c:6f:a4:4c:c4:9f:0f:8a:57:33:8d:4d:28:
        1e:b8:ae:14:f1:4c:fb:32:13:88:25:0c:cf:3a:d4:f5:e2:fc:
        2a:e7:90:4c:10:c5:9f:3d:13:a1:d3:c6:5a:01:48:6f:74:a3:
        ad:0e:a8:18:85:e5:92:a1:43:d9:e0:a6:f6:f4:ee:2e:43:7a:
        d2:bf:55:dd:63:d6:bb:62:d6:4c:2c:21:af:a3:c7:01:31:ac:
        fa:65:01:77:49:7e:cd:65:5c:f9:9f:d7:f3:4f:c4:df:f2:93:
        43:a2:d8:f7:e9:a9:7d:ef:7f:ca:c8:80:99:2e:ec:55:ac:09:
        6c:63:ca:7f:be:e3:e8:df:3d:6f:66:83:4f:ba:e3:d8:13:87:
        14:4e:fe:b9:db:b9:a7:46:85:89:44:25:de:3b:e6:ad:b3:3d:
        8d:53:71:99:c0:fe:b0:e0:dc:5f:4d:07:65:a2:7c:ec:ee:ed:
        e4:10:a6:6b:d0:fc:79:db:84:41:1a:ea:dc:24:a7:9c:2a:da:
        34:46:96:c8

Vulnerabilities

1 1

995 / tcp

-1001764030 | 2025-03-13T04:51:34.974771

+OK Dovecot ready.
+OK
CAPA
TOP
UIDL
RESP-CODES
PIPELINING
AUTH-RESP-CODE
USER
SASL PLAIN LOGIN
.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676578380601145839 (0x963b073d670b9ef)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., OU=http:\/\/certs.starfieldtech.com\/repository\/, CN=Starfield Secure Certificate Authority - G2
        Validity
            Not Before: Feb 15 21:45:33 2024 GMT
            Not After : Mar 18 21:45:33 2025 GMT
        Subject: CN=*.prod.phx3.secureserver.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:b0:76:4c:86:3b:11:d8:89:2c:dd:3a:a8:
                    62:fc:51:2d:c5:b5:59:41:52:2f:51:5b:cf:3f:d9:
                    28:80:a4:c3:6b:18:df:bc:3a:9b:29:1f:5a:9d:26:
                    70:35:63:65:75:77:a3:05:43:56:92:5e:8c:be:ef:
                    cd:55:5d:c6:6a:15:27:14:56:ec:5b:27:e1:13:81:
                    7a:bb:77:d5:99:0c:b4:9e:f9:31:ee:36:7b:98:ce:
                    5d:f3:57:50:55:8f:eb:b3:bf:fd:0b:6f:a1:03:6b:
                    d6:a8:17:bc:d4:a9:6f:7c:36:5b:9b:a5:18:3c:ba:
                    2a:d1:b9:06:19:46:38:ae:ac:b6:9d:57:fb:0c:af:
                    59:fd:c8:34:a7:a6:13:9d:2c:18:8b:93:7c:f4:3b:
                    52:ad:11:12:08:d1:2b:65:02:31:41:9e:ee:06:8e:
                    36:bd:dc:6c:83:c0:74:8a:b8:0f:be:82:d1:93:da:
                    5e:bd:01:ae:ca:a8:61:ea:45:cd:ad:05:76:3e:5a:
                    c7:93:d7:b7:c7:f7:38:e7:88:ac:1a:9a:cd:e4:0a:
                    db:6a:07:14:d5:a8:c9:c9:19:6b:83:4c:a2:fd:51:
                    5c:80:94:ea:6b:92:e8:1e:e7:8f:79:96:18:56:ea:
                    58:b2:98:36:9b:99:2d:ee:c6:62:40:c4:5f:0d:61:
                    08:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.starfieldtech.com/sfig2s1-676.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114414.1.7.23.1
                  CPS: http://certificates.starfieldtech.com/repository/
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.starfieldtech.com/
                CA Issuers - URI:http://certificates.starfieldtech.com/repository/sfig2.crt
            X509v3 Authority Key Identifier: 
                25:45:81:68:50:26:38:3D:3B:2D:2C:BE:CD:6A:D9:B6:3D:B3:66:63
            X509v3 Subject Alternative Name: 
                DNS:*.prod.phx3.secureserver.net, DNS:prod.phx3.secureserver.net
            X509v3 Subject Key Identifier: 
                E3:6A:A4:88:DA:00:95:F4:40:9F:1E:14:BA:5D:3C:48:C5:E9:01:E0
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Feb 15 21:45:34.154 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:72:96:96:7F:6B:97:2A:E9:77:86:F6:5C:
                                30:77:E3:43:FD:22:AB:E5:A3:53:8D:48:1A:F1:67:A9:
                                85:D9:D7:AA:02:21:00:9E:17:CB:61:0E:CB:9F:E5:D0:
                                00:8F:B7:CF:19:FD:0B:EE:B5:42:1B:12:80:E9:CB:66:
                                9E:16:9C:E8:22:C7:F3
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Feb 15 21:45:34.425 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:18:A3:61:2F:FE:EB:65:A5:DB:E3:B1:E8:
                                63:D6:8B:07:1C:68:E0:AE:AD:19:35:44:32:CA:4C:42:
                                F3:B8:6E:B3:02:21:00:CC:1A:7E:D3:2F:01:66:14:7F:
                                14:AB:4D:3B:BF:37:DA:25:3D:E6:BA:7E:97:81:16:8D:
                                14:59:DB:4C:D0:17:E5
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb 15 21:45:34.638 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:D3:BA:C7:A2:8D:69:45:CC:66:1A:E2:
                                CF:5B:E3:77:B0:35:69:CE:CF:DC:74:CA:34:FA:20:C7:
                                F7:32:B3:1F:B9:02:21:00:93:05:A3:42:2C:9A:4A:B5:
                                FE:4E:F2:33:7C:60:1C:EF:94:3E:24:51:5B:68:9F:66:
                                EB:45:26:23:58:16:FE:E1
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        22:ac:6e:66:5e:b5:6c:b2:66:e6:4e:4e:a7:5c:d8:62:6d:18:
        df:11:21:33:38:10:9c:58:1b:23:c3:0e:4d:a5:8e:3a:45:38:
        81:67:d7:61:44:1c:ab:b6:2f:ee:44:0c:ee:21:81:99:6e:e0:
        0e:b3:ca:4a:0a:b4:3c:66:36:5b:29:c9:ab:dc:a1:7c:71:e3:
        3b:a5:56:ae:a2:61:89:a0:0f:e4:62:6c:94:f2:3a:a7:f4:90:
        28:1c:52:b7:09:03:c0:f7:27:8b:fc:79:cf:a0:3c:8d:d3:84:
        5b:79:56:cb:fc:60:97:24:e5:95:ff:4d:79:27:7d:36:cc:ff:
        32:85:ec:eb:1f:eb:3a:45:4a:66:19:01:f9:fa:21:32:b4:74:
        0c:12:bf:d3:05:de:71:0e:2e:05:6a:04:a9:af:82:a4:0b:73:
        bf:ed:3e:67:af:5f:ac:39:23:dc:79:fb:bf:6b:d3:29:50:00:
        ca:69:25:5b:8a:6d:0e:b2:07:40:16:3d:88:14:fb:f5:0d:e6:
        33:44:9d:a8:68:5c:27:fe:40:85:70:54:bb:46:95:08:4d:79:
        07:11:c8:82:9a:12:9c:63:5c:67:8f:40:3f:ba:e1:b4:7e:a6:
        f7:f9:a8:c3:cc:d4:0c:62:3c:18:4a:83:bd:ef:32:ef:4e:61:
        71:f9:c1:e9

2096 / tcp

-124557612 | 2025-02-27T22:58:02.138388

Hashes

hash

390312742

http.dom_hash

-1992579052

http.html_hash

-124557612

HTTP/1.1 301 Moved
Content-length: 139
Location: https://p3plzcpnl504635.prod.phx3.secureserver.net:2096
Content-type: text/html; charset="utf-8"
Cache-Control: no-cache, no-store, must-revalidate, private
Pragma: no-cache

198.12.234.178

Last Seen: 2025-03-20

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

80 / tcp

-695031814 | 2025-03-13T19:03:29.326928

Hashes

Apache httpd

443 / tcp

-2056391160 | 2025-03-20T20:17:35.179471

Hashes

Apache httpd

995 / tcp

-1001764030 | 2025-03-13T04:51:34.974771

2096 / tcp

-124557612 | 2025-02-27T22:58:02.138388

Hashes

Products

Pricing

Contact Us

198.12.234.178

Last Seen: 2025-03-20

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

80 / tcp -695031814 | 2025-03-13T19:03:29.326928

Hashes

Apache httpd

443 / tcp -2056391160 | 2025-03-20T20:17:35.179471

Hashes

Apache httpd

995 / tcp -1001764030 | 2025-03-13T04:51:34.974771

2096 / tcp -124557612 | 2025-02-27T22:58:02.138388

Hashes

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

-695031814 | 2025-03-13T19:03:29.326928

443 / tcp

-2056391160 | 2025-03-20T20:17:35.179471

995 / tcp

-1001764030 | 2025-03-13T04:51:34.974771

2096 / tcp

-124557612 | 2025-02-27T22:58:02.138388