GeneralInformation

Hostnames	aurizon.com.au admin.aurizon.com.au www.aurizon.com.au
Domains	aurizon.com.au
Cloud Provider	Azure
Cloud Region	australiaeast
Cloud Service	AzureCloud
Country	Australia
City	Sydney
Organization	Microsoft Corporation
ISP	Microsoft Corporation
ASN	AS8075

WebTechnologies

Advertising

theTradeDesk

Linkedin Ads

CDN

BootstrapCDN3.3.7

JavaScript libraries

jQuery3.4.1

Tag managers

Google Tag Manager

UI frameworks

Bootstrap3.3.7

Video players

YouTube

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2024(1)

CVE-2024-6484

6.4A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an <a> tag due to inadequate sanitization. This vulnerability could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.

2020(2)

CVE-2020-11023

6.9In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-11022

6.9In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

2019(1)

CVE-2019-8331

6.1In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

2018(4)

CVE-2018-20677

6.1In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

CVE-2018-20676

6.1In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.

CVE-2018-14042

6.1In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

CVE-2018-14040

6.1In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

2016(1)

CVE-2016-10735

6.1In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

OpenPorts

80 443

80 / tcp

-530584345 | 2025-03-12T17:20:42.090182

Hashes

hash

705821475

http.dom_hash

1239617585

http.html_hash

-530584345

http.server_hash

1232703614

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: Microsoft-Azure-Application-Gateway/v2
Date: Wed, 12 Mar 2025 17:20:41 GMT
Content-Type: text/html
Content-Length: 195
Connection: keep-alive
Location: https://20.227.16.133/

443 / tcp

-208389468 | 2025-03-18T17:58:41.684443

Hashes

hash

1362701084

http.dom_hash

-2042884361

http.favicon.hash

-967567624

http.html_hash

-208389468

http.robots_hash

244774143

http.sitemap_hash

1788199127

Aurizon - Australia’s largest rail freight operator

HTTP/1.1 200 OK
Date: Tue, 18 Mar 2025 17:58:41 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 72910
Connection: keep-alive
Cache-Control: public, max-age=900
Last-Modified: Mon, 14 Oct 2024 04:53:34 GMT
Set-Cookie: shell#lang=en; path=/; secure; SameSite=None
Set-Cookie: sxa_site=Aurizon; path=/; secure; SameSite=None
Set-Cookie: ARRAffinity=bb85c7d7e78e791ab27e8c68e2ce16fab85b8266fc7dd8dbca4c84086b457ea1;Path=/;HttpOnly;Secure;Domain=www.aurizon.com.au
Set-Cookie: ARRAffinitySameSite=bb85c7d7e78e791ab27e8c68e2ce16fab85b8266fc7dd8dbca4c84086b457ea1;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.aurizon.com.au
Request-Context: appId=cid-v1:e34e0d73-40da-44b2-8af6-e607c33fc86c

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b8:8e:5f:53:00:0b:f3:2c:a6:31:fd:26:02:f7:98
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Thawte TLS RSA CA G1
        Validity
            Not Before: Dec 11 00:00:00 2024 GMT
            Not After : Jan 10 23:59:59 2026 GMT
        Subject: C=AU, ST=Queensland, L=Fortitude Valley, O=AURIZON OPERATIONS LIMITED, CN=www.aurizon.com.au
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:85:48:32:f0:23:95:85:fc:1f:ec:11:fd:
                    6c:04:32:7a:fc:c6:a1:59:a3:a7:11:65:c3:04:31:
                    5a:ef:9f:fc:36:a1:bc:8b:2b:72:4c:ad:cd:fb:67:
                    53:65:c9:5e:3d:aa:d6:19:4f:03:7a:b5:85:90:ca:
                    4f:13:81:b5:6a:be:19:f5:a5:1c:b6:b1:f5:3b:75:
                    0f:0e:18:f3:2b:15:34:94:97:bc:89:75:b2:2a:f4:
                    0e:ae:7d:37:85:95:6c:79:74:a9:e2:21:ef:dd:b5:
                    7b:77:bc:a0:c5:30:c4:5d:99:71:2c:98:ba:e3:52:
                    0c:c7:27:a4:63:15:38:e5:fd:32:53:49:80:7c:71:
                    37:75:94:ec:17:75:2f:2a:90:1e:c9:95:7c:31:d4:
                    46:57:0b:39:cc:23:31:49:9d:1d:40:0d:07:d5:7a:
                    dc:d5:4b:e3:d1:96:10:2a:24:58:f3:c5:a6:90:06:
                    5e:d2:2e:6f:0f:cf:c8:f5:bc:d4:42:db:33:11:0f:
                    52:4c:a1:3d:60:66:80:5c:00:04:df:76:38:78:3c:
                    df:d6:0d:ff:5c:73:20:c9:b4:0d:05:85:87:d8:80:
                    38:d2:90:f9:10:76:38:d4:5d:7a:f2:c3:8c:ed:b4:
                    bb:b1:59:90:72:a1:82:a6:69:da:39:f8:55:ae:17:
                    07:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7
            X509v3 Subject Key Identifier: 
                F5:77:7F:75:10:C3:FA:D2:14:E1:73:D0:49:67:A2:81:E9:1B:42:DE
            X509v3 Subject Alternative Name: 
                DNS:www.aurizon.com.au, DNS:aurizon.com.au, DNS:admin.aurizon.com.au
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://cdp.thawte.com/ThawteTLSRSACAG1.crl
            Authority Information Access: 
                OCSP - URI:http://status.thawte.com
                CA Issuers - URI:http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
                                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
                    Timestamp : Dec 11 05:56:55.723 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:8E:6A:92:59:C6:E1:CA:4B:44:E1:56:
                                71:2F:FB:CD:F4:6A:0E:F8:32:5F:91:9E:60:DC:5E:AE:
                                6C:04:90:7A:E8:02:20:14:D9:A9:41:CC:51:34:54:57:
                                B2:E0:8A:8B:61:A1:42:82:3A:41:28:7B:27:AC:E3:94:
                                EB:D4:4C:8F:6A:30:05
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
                    Timestamp : Dec 11 05:56:55.748 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:A5:B0:0E:6B:52:E0:75:8C:0B:03:B9:
                                7B:53:80:EF:A0:18:64:90:7D:2F:C9:BB:75:E1:CD:BC:
                                3F:E6:29:8C:5B:02:21:00:E4:FF:6A:FE:83:B6:57:B1:
                                B5:50:6D:5A:56:6B:3F:51:6C:B7:D8:20:2B:35:51:BD:
                                19:D7:F1:76:F1:56:E8:63
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
                                5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
                    Timestamp : Dec 11 05:56:55.770 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:6D:08:C6:9F:3F:19:37:03:59:5E:E1:BB:
                                D6:91:E1:65:F9:13:60:04:DE:59:5F:D3:B6:68:CC:DB:
                                B9:BE:D7:37:02:21:00:C6:4E:C0:34:55:6F:45:22:06:
                                0F:72:F8:1E:51:B1:10:ED:E3:29:45:77:38:04:F5:C9:
                                6B:67:43:49:99:32:1A
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        b2:db:bd:ff:a3:4c:7e:4d:05:d5:93:19:07:02:7c:e1:87:0a:
        a9:55:0a:85:c3:ba:3e:5a:3e:93:36:a5:86:41:d6:49:d8:0e:
        70:68:24:4a:96:92:fb:83:7b:2f:03:78:5a:56:54:fb:96:48:
        48:28:84:2e:6f:fe:0b:4a:90:05:31:e9:88:e8:96:10:a9:11:
        90:ad:09:03:01:5c:c3:1d:e6:6f:43:9a:a1:33:bd:91:7b:8a:
        3e:c9:34:2a:f9:16:21:96:30:66:96:4f:1e:10:76:09:8b:cf:
        b9:96:85:ff:8e:aa:0f:3b:c6:c4:a9:f7:fd:03:1d:42:16:87:
        df:29:d8:72:a2:b3:f9:6d:04:75:ff:4e:c9:87:18:bd:69:aa:
        b0:6b:ed:13:1f:00:34:4d:44:8e:39:5d:53:21:cc:0a:8d:07:
        91:11:64:44:8f:f6:47:32:6b:52:d3:39:0a:8a:21:af:75:30:
        83:b3:14:52:c3:3d:d3:17:cb:54:12:4d:e5:03:14:0d:a5:99:
        cc:da:7b:e5:99:b2:c0:66:37:b4:4d:ec:f0:8b:56:a2:a2:b8:
        d9:e5:06:6e:60:11:ba:ea:b9:82:bd:11:80:08:5c:70:83:cf:
        2a:35:4f:e5:3e:01:26:ef:b8:f7:28:e2:d7:c1:80:37:21:fa:
        23:e5:9f:60

Vulnerabilities

20.227.16.133

Last Seen: 2025-03-18

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

80 / tcp

-530584345 | 2025-03-12T17:20:42.090182

Hashes

Microsoft Azure Application Gatewayv2

443 / tcp

-208389468 | 2025-03-18T17:58:41.684443

Hashes

Products

Pricing

Contact Us

20.227.16.133

Last Seen: 2025-03-18

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

80 / tcp -530584345 | 2025-03-12T17:20:42.090182

Hashes

Microsoft Azure Application Gatewayv2

443 / tcp -208389468 | 2025-03-18T17:58:41.684443

Hashes

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

-530584345 | 2025-03-12T17:20:42.090182

443 / tcp

-208389468 | 2025-03-18T17:58:41.684443