GeneralInformation

Hostnames

spreadprivacy.com
dew.spreadprivacy.com
eun.spreadprivacy.com
use.spreadprivacy.com
www.spreadprivacy.com

Domains

spreadprivacy.com

Cloud Provider

Azure

Cloud Region

northeurope

Cloud Service

AzureCloud

Country

Ireland

City

Dublin

Organization

Microsoft Corporation

ISP

Microsoft Corporation

ASN

AS8075

WebTechnologies

Blogs

Ghost5.91

CMS

Ghost5.91

JavaScript libraries

jQuery3.2.1

Programming languages

Node.js

OpenPorts

80 443

80 / tcp

897585984 | 2025-04-21T15:58:40.428950

Hashes

hash

1182460813

http.dom_hash

1239617585

http.html_hash

897585984

http.server_hash

-1022435198

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.2
Date: Mon, 21 Apr 2025 15:58:40 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://spreadprivacy.com/

Vulnerabilities

443 / tcp

-186393360 | 2025-04-26T07:43:56.905857

Hashes

hash

1064099559

http.dom_hash

-828900706

http.favicon.hash

-1757360080

http.html_hash

-186393360

http.robots_hash

-611551897

http.server_hash

-1022435198

http.sitemap_hash

-722442521

http.title_hash

-740008622

Spread Privacy

HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 26 Apr 2025 07:37:55 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 57554
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: Express
Cache-Control: max-age=600
ETag: W/"e0d2-5E3TaAvL8aRjzSoFdr4meNaZ/3o"
Vary: Accept-Encoding
Expires: Sat, 26 Apr 2025 07:47:55 GMT

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:20:d1:4b:d2:dd:0f:6c:77:0b:43:33:63:4d:66:8d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
        Validity
            Not Before: Mar  5 00:00:00 2025 GMT
            Not After : Apr  2 23:59:59 2026 GMT
        Subject: C=US, ST=Pennsylvania, L=Paoli, O=Duck Duck Go, Inc., CN=spreadprivacy.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:8f:ff:76:52:f4:96:23:27:0b:8c:88:b5:8d:a3:
                    a0:c3:a0:10:4a:30:93:e6:dd:ad:b5:6b:68:c1:18:
                    93:69:da:d5:a8:cc:65:19:5e:ab:a3:e8:c6:21:59:
                    07:de:9a:9c:25:5e:c0:d2:67:30:50:32:6d:03:b3:
                    67:f6:d8:51:1f:4b:0f:de:0b:de:db:76:83:ef:3c:
                    a4:f9:b4:46:c4:4c:40:68:bd:d2:3d:a0:13:b0:cf:
                    43:06:ec:98:3c:00:1b:d4:2b:c1:e5:24:eb:67:3e:
                    41:a6:21:9e:ce:66:71:74:c8:48:ca:a9:19:96:50:
                    57:cd:e9:97:c5:9a:31:cf:3c:1a:25:3f:fc:21:63:
                    66:cb:32:7b:27:37:8e:65:7d:f2:de:16:32:97:18:
                    e8:a1:bc:bb:ba:54:93:b8:42:4f:e2:3d:e6:dc:e8:
                    f2:f4:16:e1:f4:8b:21:7f:6b:7a:9b:17:f2:ce:3f:
                    80:f5:f1:60:b6:eb:f0:ac:1a:4a:e5:9b:b4:0c:a3:
                    01:26:8b:a7:f1:4e:1f:79:83:db:03:ee:b2:dc:42:
                    61:ca:b0:af:77:d9:a0:00:cc:0e:f5:48:04:16:11:
                    aa:7a:d3:d5:d9:5f:11:d3:cf:70:ba:80:db:b1:de:
                    b8:6b:9a:d6:ec:08:16:dc:c8:47:c1:c0:b4:29:2f:
                    f2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
            X509v3 Subject Key Identifier: 
                6E:F6:C0:54:72:0F:12:99:44:F3:34:2E:5B:5C:BF:08:DC:7D:05:CE
            X509v3 Subject Alternative Name: 
                DNS:spreadprivacy.com, DNS:www.spreadprivacy.com, DNS:use.spreadprivacy.com, DNS:eun.spreadprivacy.com, DNS:dew.spreadprivacy.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
                                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
                    Timestamp : Mar  5 08:43:40.311 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A5:FD:62:56:4D:ED:48:EB:4C:98:F0:
                                FB:98:16:2D:46:A6:1E:3E:33:CC:5E:C4:26:C4:81:FB:
                                65:D0:75:96:C7:02:20:2C:02:A5:40:ED:62:59:04:E0:
                                A6:96:17:E7:BF:2D:8D:57:47:A1:65:F2:1C:D6:B1:D0:
                                24:43:04:F2:86:D1:91
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
                    Timestamp : Mar  5 08:43:40.357 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F2:73:2C:FC:FC:68:5C:2E:E0:F7:3B:
                                13:90:31:DE:75:B3:55:63:76:3F:76:BB:2A:C7:5C:54:
                                42:AD:17:E4:79:02:20:7D:5E:55:C5:30:E7:11:DE:DD:
                                EC:9B:88:E4:B8:D8:F4:4E:16:75:94:9C:63:1D:66:75:
                                EC:09:74:71:A1:94:A3
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
                                5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
                    Timestamp : Mar  5 08:43:40.380 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:DF:86:93:F7:F4:80:5A:DF:E0:0D:EB:
                                37:72:C9:45:1C:24:AF:C5:D2:C9:62:A2:4F:1F:65:00:
                                FE:DB:7B:51:C8:02:21:00:B8:83:A5:E7:89:94:DC:34:
                                55:D2:57:7B:AC:C8:E2:47:01:32:61:D8:88:C8:A7:AF:
                                18:8E:18:FA:6D:7A:ED:1B
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        8c:82:41:73:6c:df:f1:1b:aa:d4:09:ab:b0:ac:e4:42:4c:59:
        dc:68:a8:6a:89:5e:64:3e:9b:fe:45:1d:f5:6f:50:ab:6f:9a:
        83:07:9e:9e:b0:e6:5c:ff:f8:22:2d:52:9f:fe:97:d6:9f:76:
        60:3c:09:a5:ec:33:16:9d:c3:a9:3f:13:b9:c9:0a:a2:d6:61:
        9b:a2:77:79:36:a7:36:44:2f:61:1f:68:fb:c4:d1:3d:c1:d9:
        d4:31:1a:44:ea:7b:4d:b3:61:d9:38:31:9a:08:5f:f6:ad:e6:
        c0:33:63:ed:ca:07:46:7f:54:ea:9a:b1:b1:6a:bf:6f:ef:68:
        e7:9c:ed:b6:54:75:54:bf:03:27:b3:71:3d:ef:4e:2a:ac:ad:
        fa:78:44:9a:84:d3:17:a1:8f:63:b2:ff:ca:b7:a8:c5:80:84:
        fa:3a:4a:d8:18:77:86:18:20:89:fc:36:eb:73:69:4d:c4:00:
        99:92:2f:fb:b9:2c:0b:15:47:b7:e2:49:5b:ab:43:ae:3e:0a:
        d0:aa:ee:a2:77:38:8f:3b:dc:c1:a1:c6:48:ab:23:55:17:5c:
        69:3b:ab:84:42:bf:80:60:6c:ee:5d:bf:36:f3:15:3a:9e:62:
        b8:03:eb:64:a4:c4:e5:73:2b:e1:04:20:03:6b:99:1e:9c:4b:
        64:0a:03:ca

Vulnerabilities

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(1)

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

2020(2)

CVE-2020-11023

6.9In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-11022

6.9In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

2019(1)

CVE-2019-11358

6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

20.107.130.241

Last Seen: 2025-04-26

Tags:

GeneralInformation

WebTechnologies

OpenPorts

80 / tcp

897585984 | 2025-04-21T15:58:40.428950

Hashes

nginx1.20.2

443 / tcp

-186393360 | 2025-04-26T07:43:56.905857

Hashes

nginx1.20.2

Vulnerabilities

Products

Pricing

Contact Us

20.107.130.241

Last Seen: 2025-04-26

Tags:

GeneralInformation

WebTechnologies

OpenPorts

80 / tcp 897585984 | 2025-04-21T15:58:40.428950

Hashes

nginx1.20.2

443 / tcp -186393360 | 2025-04-26T07:43:56.905857

Hashes

nginx1.20.2

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

Products

Pricing

Contact Us

80 / tcp

897585984 | 2025-04-21T15:58:40.428950

443 / tcp

-186393360 | 2025-04-26T07:43:56.905857

Vulnerabilities