GeneralInformation

Hostnames	210-239-64-251.ampere.jp-east-3.compute.idcfcloud.net movabletype.biz movabletype.com www.movabletype.com
Domains	idcfcloud.net movabletype.biz movabletype.com
Country	Japan
City	Shirakawa
Organization	IDC Frontier Inc.
ISP	IDC Frontier Inc.
ASN	AS4694

WebTechnologies

Analytics

Google Analytics

CDN

Google Hosted Libraries

JavaScript libraries

jQuery1.8.1

bxSlider

Photo galleries

bxSlider

Tag managers

Google Tag Manager

SecurityContact

Contact	mt-security@sixapart.jp
Expires	2025-11-26T15:00:00.000Z
Preferred-Languages	ja, en

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2020

CVE-2020-11023

6.9In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-11022

6.9In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-7656

6.1jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

2019

CVE-2019-11358

6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

2015

CVE-2015-9251

6.1jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

2012

CVE-2012-6708

6.1jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.

OpenPorts

21 80 443

21 / tcp

1327143285 | 2025-02-25T18:13:24.480600

220 Welcome
530 Permission denied.
530 Please login with USER and PASS.
211-Features:
 AUTH TLS
 EPRT
 EPSV
 MDTM
 PASV
 PBSZ
 PROT
 REST STREAM
 SIZE
 TVFS
 UTF8
211 End

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e6:20:54:5a:9c:88:9b:fb:2f:25:0c
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
        Validity
            Not Before: Jul 23 06:07:33 2024 GMT
            Not After : Aug 24 06:07:32 2025 GMT
        Subject: CN=*.movabletype.biz
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ab:f9:64:53:04:b5:3a:2f:b6:2a:62:32:c9:ed:
                    60:c4:0f:e6:b9:92:2b:bc:4f:6a:c0:ab:22:e3:37:
                    b7:87:33:2d:66:e8:d8:2f:d7:88:d3:02:48:89:f7:
                    32:7b:15:ff:14:2c:19:99:97:63:7d:5c:b3:7d:53:
                    be:dd:17:e6:30:ff:78:08:e4:bc:23:a9:67:16:16:
                    46:1f:a2:f2:c8:c7:ca:41:db:af:a5:d1:f1:e6:a0:
                    a8:e7:d5:7e:d9:f2:b2:02:59:8f:80:a2:c8:3e:9c:
                    c8:ed:88:89:96:8a:26:f1:10:51:00:8e:45:6f:67:
                    2b:9d:12:6c:86:00:2c:ad:6d:88:ae:c1:51:2a:e3:
                    ef:fc:36:4f:fa:21:7d:63:1f:23:27:8f:ce:2b:a5:
                    5f:f5:b1:c4:d6:52:fa:19:08:16:92:90:49:1e:4b:
                    80:33:2d:16:f4:03:df:38:6c:3c:75:00:80:49:76:
                    d4:bb:82:bb:65:0f:f0:1a:76:7b:62:5b:f5:fd:e0:
                    0b:85:c8:a7:58:be:4a:2b:55:c2:9a:eb:d3:9c:7b:
                    e0:97:f2:aa:76:99:ec:05:4e:57:b5:29:02:46:81:
                    5d:4d:69:6c:b9:6a:fd:d5:cc:66:41:39:ee:63:c5:
                    6f:0f:5b:0f:01:05:1c:44:69:da:60:33:a1:dc:a7:
                    6c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt
                OCSP - URI:http://ocsp.globalsign.com/gsgccr6alphasslca2023
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.4146.10.1.3
                  CPS: https://www.globalsign.com/repository/
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsgccr6alphasslca2023.crl
            X509v3 Subject Alternative Name: 
                DNS:*.movabletype.biz, DNS:movabletype.biz
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                BD:05:B7:F3:8A:93:3C:73:CB:79:FA:0F:85:12:A1:77:96:18:91:74
            X509v3 Subject Key Identifier: 
                43:5C:46:42:51:37:55:CC:C8:4A:D7:4F:68:4D:50:B1:93:EF:6B:87
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : AF:18:1A:28:D6:8C:A3:E0:A9:8A:4C:9C:67:AB:09:F8:
                                BB:BC:22:BA:AE:BC:B1:38:A3:A1:9D:D3:F9:B6:03:0D
                    Timestamp : Jul 23 06:07:37.801 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:D6:10:EA:31:72:22:95:41:57:24:CF:
                                03:98:AB:88:CB:57:F2:A7:CF:05:5E:BE:76:48:D3:3E:
                                D1:A1:B1:14:98:02:20:6E:B0:32:F3:97:86:54:8D:27:
                                31:50:49:BE:24:3E:FD:C6:C7:D6:DB:96:B4:97:E9:F8:
                                31:0A:B1:B5:CF:4D:84
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 1A:04:FF:49:D0:54:1D:40:AF:F6:A0:C3:BF:F1:D8:C4:
                                67:2F:4E:EC:EE:23:40:68:98:6B:17:40:2E:DC:89:7D
                    Timestamp : Jul 23 06:07:37.997 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B7:25:19:28:1B:AA:B3:52:3F:4C:DE:
                                25:06:43:B0:1E:17:54:81:E5:71:E1:39:B1:2C:C9:CF:
                                B5:6B:34:EC:7E:02:21:00:DA:C2:5D:3D:78:1F:F6:69:
                                01:66:96:28:E6:86:02:7A:FF:15:B0:ED:1E:4D:48:22:
                                28:FA:45:5D:82:13:AA:7F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Jul 23 06:07:38.027 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:96:73:9F:BD:9D:B3:E8:59:A2:EE:98:
                                2E:05:9D:98:1F:17:D9:90:BD:B3:F0:3F:FD:D5:2B:16:
                                78:B6:27:00:E9:02:20:5D:51:F6:EB:98:35:85:97:A2:
                                B7:38:D9:16:6E:60:C8:26:85:E7:38:FB:B0:30:BA:55:
                                77:4F:37:32:93:11:84
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        55:7c:b7:57:84:39:9a:55:e4:04:65:ba:d8:e6:35:7e:16:3b:
        2f:ec:7b:8b:e3:02:9d:14:6c:5b:16:ea:98:ee:1d:88:d6:0e:
        ae:06:b6:ea:87:39:c0:5f:60:f2:af:94:5b:0e:38:da:f6:e9:
        07:b5:fc:e7:03:bc:ba:79:b8:e1:8f:27:63:11:79:2b:6e:a3:
        e2:42:a1:48:91:b0:f6:9f:6c:26:4e:2d:88:0b:fb:dc:d9:04:
        74:c0:7a:58:eb:61:98:2a:4d:e2:10:8d:ee:eb:b2:46:a2:9e:
        8a:1f:8b:53:de:a3:ff:07:ba:24:05:28:fa:67:02:e1:a9:22:
        10:6a:75:9c:0c:37:ba:07:74:b5:52:71:41:61:1d:43:14:9e:
        56:d2:39:e6:2d:3c:19:4f:76:c4:48:2e:b4:1c:34:cb:fd:84:
        89:64:90:53:60:fb:3d:2b:d6:9d:5b:c8:8a:c8:6b:2c:e4:ec:
        06:af:7b:38:4f:03:46:93:75:fe:59:32:96:bb:77:39:7b:2f:
        1a:01:54:68:a9:d8:a2:7f:47:79:5d:c3:ee:03:7f:42:76:b6:
        e3:a0:c3:2b:a2:db:df:b8:03:b8:5d:a2:6b:c6:21:b5:cf:ed:
        bd:29:8c:dd:96:26:e0:36:36:7c:4e:b1:71:62:c8:77:f0:b8:
        1b:72:78:c4

80 / tcp

-1546175782 | 2025-02-28T13:53:07.891251

Hashes

hash

1111618252

http.dom_hash

-888002504

http.html_hash

-1546175782

http.server_hash

-1340961475

http.title_hash

-1030444411

403 Forbidden

HTTP/1.1 403 Forbidden
Server: nginx
Date: Fri, 28 Feb 2025 13:53:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding

443 / tcp

-1257541948 | 2025-02-28T20:10:02.427304

Hashes

hash

1258366694

http.dom_hash

-1641093813

http.favicon.hash

-1699001545

http.html_hash

-1257541948

http.robots_hash

1140291500

http.securitytxt_hash

41905228

http.server_hash

-1340961475

http.title_hash

559023333

Movable Type - Content Management System, Blog Software & Publishing Platform

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 28 Feb 2025 20:10:02 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d0:97:f5:98:f7:31:97:c8:6a:f5:8c:4a:8b:59:b5:4f:da
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Feb 14 00:18:01 2025 GMT
            Not After : May 15 00:18:00 2025 GMT
        Subject: CN=movabletype.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a6:17:b8:44:5b:ff:8e:d7:0d:4e:76:41:66:a8:
                    39:2f:97:10:23:72:9e:04:79:3d:12:2a:17:7b:97:
                    c8:64:82:3a:43:a6:7f:6f:29:58:9b:fb:d6:c9:10:
                    96:b6:3e:0f:aa:a9:60:58:2e:c7:78:14:12:e4:d6:
                    40:a3:93:52:d5:4a:89:3c:46:bb:0a:51:63:66:09:
                    ea:f8:e5:cd:09:41:50:88:d2:53:32:16:a4:d5:cd:
                    98:06:db:cb:2d:53:b5:da:3a:04:1e:e1:74:f0:7f:
                    d9:8d:23:3b:17:08:b3:d0:ab:23:5b:e1:d6:d3:ed:
                    27:28:39:d3:d1:0a:f4:1e:00:ba:db:62:ce:76:a1:
                    32:33:2f:07:5b:76:ff:b2:ca:9f:7e:65:86:3e:10:
                    81:94:d0:14:74:fc:0b:85:2d:bd:46:94:ac:73:d2:
                    31:27:96:a7:df:89:4a:3c:bb:3a:48:1d:49:8b:11:
                    c5:15:b4:7b:98:41:b3:41:f9:6d:ca:83:c4:b3:73:
                    ff:f6:fc:1e:c9:45:86:ab:69:da:73:63:b2:ca:76:
                    d3:94:71:09:09:89:0f:2f:a2:2a:be:3d:9b:45:61:
                    38:44:14:cc:30:8b:da:71:0d:75:39:d5:de:18:d4:
                    2b:6d:b8:4d:f0:4a:22:d8:e6:7b:29:30:44:05:a1:
                    c1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                CC:5F:01:AE:F5:C0:F2:20:09:AC:F6:54:85:6D:B7:5F:C9:45:D3:57
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:movabletype.com, DNS:www.movabletype.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Feb 14 01:16:31.669 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:E8:37:88:71:B8:3C:97:CE:E5:7B:F0:
                                9F:0A:89:BD:8A:5D:E7:E4:06:3E:F8:E9:21:38:EC:43:
                                04:82:A0:70:20:02:20:38:9F:6A:DE:E3:01:7A:B9:CE:
                                2B:ED:18:D2:FD:EA:44:8D:D9:1D:C3:41:1C:BA:18:2B:
                                98:58:6F:F4:DA:83:90
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb 14 01:16:31.692 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:AD:E4:1F:D4:5C:B0:01:20:48:18:39:
                                77:2A:E1:74:2C:22:6B:00:D3:5A:13:6D:56:6E:85:B4:
                                DB:44:60:C8:5F:02:21:00:87:1E:2F:3A:84:E0:C0:C8:
                                8E:4B:5F:38:B9:74:EA:F2:A5:8D:D4:C5:E1:0B:85:7C:
                                56:E2:A2:DB:1E:1B:69:52
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        7d:ed:27:81:3d:f6:23:56:e1:13:42:ff:fb:54:e2:b1:7d:05:
        df:2a:08:e7:8f:9f:68:01:58:8e:40:c6:ad:63:88:b0:49:2d:
        52:46:da:78:6b:d3:af:3f:f3:c8:47:01:61:4e:f0:70:51:36:
        98:73:4e:98:cf:b1:47:68:b9:d8:8e:7d:22:98:02:34:c3:55:
        22:4a:29:92:8c:0f:b4:e2:26:ff:74:e6:c0:e2:8b:f8:ed:31:
        e0:34:f5:9c:d5:3a:c1:af:d9:23:7e:de:58:04:47:be:91:5b:
        0d:ae:df:ef:4c:57:e6:1f:c8:5b:8e:6c:c4:77:a4:93:97:92:
        df:fd:2e:eb:07:3b:ab:62:42:df:9a:29:68:1e:ee:61:13:6d:
        ee:6d:33:04:0f:2c:ab:a4:11:7d:8e:f1:96:73:85:5a:6f:72:
        03:4d:ce:44:1b:56:07:9e:75:15:b0:fa:72:77:ab:99:c0:26:
        ce:57:16:c8:28:5c:ef:88:c2:20:af:8c:29:7b:b1:81:96:89:
        aa:ec:8c:d7:1e:00:f5:ec:17:e8:c0:be:44:30:bf:c6:4f:47:
        74:85:f2:60:00:79:92:36:cd:64:c0:b6:56:61:07:5f:1b:af:
        1b:a8:02:4f:89:87:e1:83:45:09:38:8c:b0:48:98:a4:5d:d9:
        aa:2d:1e:15

CVE-2020-11023 CVE-2020-11022 CVE-2020-7656 CVE-2019-11358 CVE-2015-9251 CVE-2012-6708

210.239.64.251

Last Seen: 2025-02-28

Tags:

GeneralInformation

WebTechnologies

SecurityContact

Vulnerabilities

OpenPorts

21 / tcp

1327143285 | 2025-02-25T18:13:24.480600

80 / tcp

-1546175782 | 2025-02-28T13:53:07.891251

Hashes

nginx

443 / tcp

-1257541948 | 2025-02-28T20:10:02.427304

Hashes

nginx

Products

Pricing

Contact Us

210.239.64.251

Last Seen: 2025-02-28

Tags:

GeneralInformation

WebTechnologies

SecurityContact

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

21 / tcp 1327143285 | 2025-02-25T18:13:24.480600

80 / tcp -1546175782 | 2025-02-28T13:53:07.891251

Hashes

nginx

443 / tcp -1257541948 | 2025-02-28T20:10:02.427304

Hashes

nginx

Products

Pricing

Contact Us

Vulnerabilities

21 / tcp

1327143285 | 2025-02-25T18:13:24.480600

80 / tcp

-1546175782 | 2025-02-28T13:53:07.891251

443 / tcp

-1257541948 | 2025-02-28T20:10:02.427304