GeneralInformation

Hostnames	green.hostingcolor.com autoconfig.green.hostingcolor.com autodiscover.green.hostingcolor.com cpanel.green.hostingcolor.com cpcalendars.green.hostingcolor.com cpcontacts.green.hostingcolor.com ipv6.green.hostingcolor.com mail.green.hostingcolor.com webdisk.green.hostingcolor.com webmail.green.hostingcolor.com whm.green.hostingcolor.com www.green.hostingcolor.com serefrind.com
Domains	hostingcolor.com serefrind.com
Country	Germany
City	Falkenstein
Organization	Hetzner Online GmbH
ISP	Hetzner Online GmbH
ASN	AS24940

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2024(1)

CVE-2024-25117

6.8php-svg-lib is a scalable vector graphics (SVG) file parsing/rendering library. Prior to version 0.5.2, php-svg-lib fails to validate that font-family doesn't contain a PHAR url, which might leads to RCE on PHP < 8.0, and doesn't validate if external references are allowed. This might leads to bypass of restrictions or RCE on projects that are using it, if they do not strictly revalidate the fontName that is passed by php-svg-lib. The `Style::fromAttributes(`), or the `Style::parseCssStyle()` should check the content of the `font-family` and prevents it to use a PHAR url, to avoid passing an invalid and dangerous `fontName` value to other libraries. The same check as done in the `Style::fromStyleSheets` might be reused. Libraries using this library as a dependency might be vulnerable to some bypass of restrictions, or even remote code execution, if they do not double check the value of the `fontName` that is passed by php-svg-lib. Version 0.5.2 contains a fix for this issue.

2022(3)

CVE-2022-31629

6.5In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.

CVE-2022-31628

2.3In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.

CVE-2022-4900

6.2A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

2020(1)

CVE-2020-11579

7.5An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.

2017(1)

CVE-2017-8923

9.8The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string.

2013(1)

CVE-2013-2220

7.5Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.

2007(1)

CVE-2007-3205

5.0The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

OpenPorts

21 53 80 143 443 995 2087 10050

21 / tcp

-1707213640 | 2025-03-09T14:16:37.149156

220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
220-You are user number 3 of 50 allowed.
220-Local time is now 09:16. Server port: 21.
220-This is a private system - No anonymous login
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
530 Login authentication failed
214-The following SITE commands are recognized
 ALIAS
 CHMOD
 IDLE
 UTIME
214 Pure-FTPd - http://pureftpd.org/
211-Extensions supported:
 UTF8
 EPRT
 IDLE
 MDTM
 SIZE
 MFMT
 REST STREAM
 MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
 MLSD
 PRET
 AUTH TLS
 PBSZ
 PROT
 TVFS
 ESTA
 PASV
 EPSV
 ESTP
211 End.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e5:80:2a:46:aa:fe:fe:b8:ca:a4:b9:d8:1d:0d:fa:c9:7d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Feb  7 23:13:18 2025 GMT
            Not After : May  8 23:13:17 2025 GMT
        Subject: CN=green.hostingcolor.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:af:30:ff:9a:93:40:ec:01:d9:ae:1a:9f:35:20:
                    e4:0b:b6:cf:dc:9e:64:13:89:b8:f7:b8:9b:f0:b1:
                    6f:76:1c:41:92:94:5e:47:47:01:85:e0:e2:bb:04:
                    1b:88:79:22:0e:3f:3e:45:2f:f5:3e:78:36:8d:59:
                    7e:a3:2c:94:da:14:40:c3:c0:d4:5d:db:18:00:68:
                    12:c4:e5:76:8b:94:c4:25:2c:b6:b5:9e:09:3b:ed:
                    4a:83:a4:59:bd:dc:1c:77:4b:cc:c0:71:01:fd:01:
                    72:29:5c:d9:02:f9:e3:90:47:08:09:b4:10:b8:6d:
                    d4:82:4b:d9:72:a1:2a:25:19:24:e7:3c:d0:80:02:
                    ed:91:00:1f:6c:cd:cd:7d:99:5b:9a:0c:4f:11:e7:
                    d6:6b:41:db:5d:1c:35:20:24:61:cf:59:aa:db:0b:
                    bf:95:6d:b4:26:e9:ce:fa:ee:dc:d2:77:43:e1:0a:
                    b0:ce:49:35:85:92:61:e9:0d:b7:b5:17:e4:9a:d6:
                    77:ab:40:83:62:0a:65:7f:87:cd:09:9d:d4:95:4d:
                    44:86:63:32:20:17:17:28:43:e5:cf:f6:19:3d:e0:
                    41:97:61:8e:70:46:4f:ee:5d:16:8f:ac:1f:ac:a9:
                    29:0d:a8:85:6a:3f:2d:37:44:71:ca:ed:01:41:07:
                    ed:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                4F:5A:71:0D:52:D4:91:F7:4C:E0:8B:2A:61:56:A1:EC:D1:23:F9:E6
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:autoconfig.green.hostingcolor.com, DNS:autodiscover.green.hostingcolor.com, DNS:cpanel.green.hostingcolor.com, DNS:cpcalendars.green.hostingcolor.com, DNS:cpcontacts.green.hostingcolor.com, DNS:green.hostingcolor.com, DNS:ipv6.green.hostingcolor.com, DNS:mail.green.hostingcolor.com, DNS:webdisk.green.hostingcolor.com, DNS:webmail.green.hostingcolor.com, DNS:whm.green.hostingcolor.com, DNS:www.green.hostingcolor.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb  8 00:11:49.003 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:E1:58:1B:07:DE:C5:C6:D9:0F:20:F1:
                                CB:FF:40:0F:F1:E1:7D:1E:D2:07:7D:0B:FD:BD:B5:F5:
                                9B:5C:E1:87:09:02:20:40:CF:C1:EA:36:C7:D8:07:EC:
                                8E:20:D2:A4:A8:1D:E0:4D:4A:36:71:A1:44:90:6D:23:
                                42:FB:E9:DB:26:5A:9F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Feb  8 00:11:49.208 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C3:23:6A:40:63:34:AC:FB:E5:A0:20:
                                76:76:A2:41:E0:FD:D1:0C:7F:25:C6:1D:63:4A:02:C8:
                                56:B1:0F:9E:F8:02:21:00:DF:D1:78:5F:D8:AD:DD:C7:
                                F1:7B:D9:34:9B:78:48:21:E2:69:7E:43:93:0B:C5:DD:
                                A4:CE:AD:79:0A:D5:24:DE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        1a:b8:3b:21:65:36:59:5a:64:f4:b0:9e:0b:95:4f:05:f1:36:
        f1:2a:ec:bd:0d:7f:83:b2:2f:6f:c2:fe:a1:1c:07:e0:27:af:
        2b:18:66:18:6d:1b:e5:1a:76:0c:09:5b:08:c7:75:f4:ba:16:
        82:8d:4e:ab:1a:66:dd:32:35:8a:a7:fa:36:ff:28:0c:be:d7:
        53:8e:99:97:81:7b:b8:73:e3:2f:98:cb:09:64:35:c8:d6:ab:
        07:fd:c6:fc:ba:fc:b5:65:84:7b:40:50:98:65:56:6d:80:ab:
        d9:67:70:24:ae:28:61:35:4e:10:c4:39:09:f6:82:4e:a9:0b:
        cf:4a:4b:cf:37:4e:3b:d1:a6:31:40:02:a2:8c:54:04:19:4a:
        23:b4:b6:06:4b:3b:a6:87:57:8e:01:85:da:8f:92:fb:d6:85:
        69:3d:30:c8:03:36:ff:c3:17:ce:35:e0:19:2a:fe:a4:00:f5:
        9b:55:2d:59:31:e2:70:66:82:06:03:66:6b:0f:ce:cd:53:74:
        99:14:ce:6c:8f:ee:30:dc:5d:3f:a3:3b:68:77:3e:92:86:79:
        23:29:e9:2d:ec:1c:70:8d:d3:42:74:05:7c:34:a6:fc:7d:57:
        9d:e3:51:62:4d:48:40:97:b7:88:81:8c:d3:90:54:44:07:33:
        2d:46:8a:52

53 / udp

1418108189 | 2025-03-19T16:09:53.380688

PowerDNS Authoritative Server 4.9.2 (built Dec 19 2024 15:24:48 by root@bh-centos-7.dev.cpanel.net)
Resolver ID: green.hostingcolor.com

80 / tcp

79540932 | 2025-03-26T16:06:32.993555

Hashes

hash

-1490170718

http.dom_hash

83783078

http.html_hash

79540932

http.server_hash

869690771

HTTP/1.1 200 OK
Date: Wed, 26 Mar 2025 16:06:30 GMT
Server: Apache
X-Powered-By: PHP/7.1.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=c1e8470681b342dfdc5c6bd5c8d62d84; path=/
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Vulnerabilities

1 2 4 1

143 / tcp

1559185454 | 2025-03-08T12:55:37.531284

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
* CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e5:80:2a:46:aa:fe:fe:b8:ca:a4:b9:d8:1d:0d:fa:c9:7d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Feb  7 23:13:18 2025 GMT
            Not After : May  8 23:13:17 2025 GMT
        Subject: CN=green.hostingcolor.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:af:30:ff:9a:93:40:ec:01:d9:ae:1a:9f:35:20:
                    e4:0b:b6:cf:dc:9e:64:13:89:b8:f7:b8:9b:f0:b1:
                    6f:76:1c:41:92:94:5e:47:47:01:85:e0:e2:bb:04:
                    1b:88:79:22:0e:3f:3e:45:2f:f5:3e:78:36:8d:59:
                    7e:a3:2c:94:da:14:40:c3:c0:d4:5d:db:18:00:68:
                    12:c4:e5:76:8b:94:c4:25:2c:b6:b5:9e:09:3b:ed:
                    4a:83:a4:59:bd:dc:1c:77:4b:cc:c0:71:01:fd:01:
                    72:29:5c:d9:02:f9:e3:90:47:08:09:b4:10:b8:6d:
                    d4:82:4b:d9:72:a1:2a:25:19:24:e7:3c:d0:80:02:
                    ed:91:00:1f:6c:cd:cd:7d:99:5b:9a:0c:4f:11:e7:
                    d6:6b:41:db:5d:1c:35:20:24:61:cf:59:aa:db:0b:
                    bf:95:6d:b4:26:e9:ce:fa:ee:dc:d2:77:43:e1:0a:
                    b0:ce:49:35:85:92:61:e9:0d:b7:b5:17:e4:9a:d6:
                    77:ab:40:83:62:0a:65:7f:87:cd:09:9d:d4:95:4d:
                    44:86:63:32:20:17:17:28:43:e5:cf:f6:19:3d:e0:
                    41:97:61:8e:70:46:4f:ee:5d:16:8f:ac:1f:ac:a9:
                    29:0d:a8:85:6a:3f:2d:37:44:71:ca:ed:01:41:07:
                    ed:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                4F:5A:71:0D:52:D4:91:F7:4C:E0:8B:2A:61:56:A1:EC:D1:23:F9:E6
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:autoconfig.green.hostingcolor.com, DNS:autodiscover.green.hostingcolor.com, DNS:cpanel.green.hostingcolor.com, DNS:cpcalendars.green.hostingcolor.com, DNS:cpcontacts.green.hostingcolor.com, DNS:green.hostingcolor.com, DNS:ipv6.green.hostingcolor.com, DNS:mail.green.hostingcolor.com, DNS:webdisk.green.hostingcolor.com, DNS:webmail.green.hostingcolor.com, DNS:whm.green.hostingcolor.com, DNS:www.green.hostingcolor.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb  8 00:11:49.003 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:E1:58:1B:07:DE:C5:C6:D9:0F:20:F1:
                                CB:FF:40:0F:F1:E1:7D:1E:D2:07:7D:0B:FD:BD:B5:F5:
                                9B:5C:E1:87:09:02:20:40:CF:C1:EA:36:C7:D8:07:EC:
                                8E:20:D2:A4:A8:1D:E0:4D:4A:36:71:A1:44:90:6D:23:
                                42:FB:E9:DB:26:5A:9F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Feb  8 00:11:49.208 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C3:23:6A:40:63:34:AC:FB:E5:A0:20:
                                76:76:A2:41:E0:FD:D1:0C:7F:25:C6:1D:63:4A:02:C8:
                                56:B1:0F:9E:F8:02:21:00:DF:D1:78:5F:D8:AD:DD:C7:
                                F1:7B:D9:34:9B:78:48:21:E2:69:7E:43:93:0B:C5:DD:
                                A4:CE:AD:79:0A:D5:24:DE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        1a:b8:3b:21:65:36:59:5a:64:f4:b0:9e:0b:95:4f:05:f1:36:
        f1:2a:ec:bd:0d:7f:83:b2:2f:6f:c2:fe:a1:1c:07:e0:27:af:
        2b:18:66:18:6d:1b:e5:1a:76:0c:09:5b:08:c7:75:f4:ba:16:
        82:8d:4e:ab:1a:66:dd:32:35:8a:a7:fa:36:ff:28:0c:be:d7:
        53:8e:99:97:81:7b:b8:73:e3:2f:98:cb:09:64:35:c8:d6:ab:
        07:fd:c6:fc:ba:fc:b5:65:84:7b:40:50:98:65:56:6d:80:ab:
        d9:67:70:24:ae:28:61:35:4e:10:c4:39:09:f6:82:4e:a9:0b:
        cf:4a:4b:cf:37:4e:3b:d1:a6:31:40:02:a2:8c:54:04:19:4a:
        23:b4:b6:06:4b:3b:a6:87:57:8e:01:85:da:8f:92:fb:d6:85:
        69:3d:30:c8:03:36:ff:c3:17:ce:35:e0:19:2a:fe:a4:00:f5:
        9b:55:2d:59:31:e2:70:66:82:06:03:66:6b:0f:ce:cd:53:74:
        99:14:ce:6c:8f:ee:30:dc:5d:3f:a3:3b:68:77:3e:92:86:79:
        23:29:e9:2d:ec:1c:70:8d:d3:42:74:05:7c:34:a6:fc:7d:57:
        9d:e3:51:62:4d:48:40:97:b7:88:81:8c:d3:90:54:44:07:33:
        2d:46:8a:52

443 / tcp

-1961647034 | 2025-03-27T08:04:32.118501

Hashes

hash

-834423741

http.dom_hash

1745298284

http.favicon.hash

-696182543

http.html_hash

-1961647034

http.robots_hash

-1022729730

http.server_hash

869690771

http.title_hash

-2008267673

cPanel Login

HTTP/1.1 200 OK
Date: Thu, 27 Mar 2025 08:04:31 GMT
Server: Apache
Content-Type: text/html; charset="utf-8"
Cache-Control: no-cache, no-store, must-revalidate, private
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate, private
Content-Length: 37059
Set-Cookie: cprelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure
Set-Cookie: cpsession=%3a9tsoYFjeGg8hIucp%2cc5ad27c83e98a0a23dc5b7b070254527; HttpOnly; path=/; port=443; secure
Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure
Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=cpanel.serefrind.com; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure
Set-Cookie: PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure
Vary: Accept-Encoding
Connection: close

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:36:e1:18:27:87:e2:99:ed:66:26:66:7d:8f:1d:0f:45:4a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Mar 11 17:53:34 2025 GMT
            Not After : Jun  9 17:53:33 2025 GMT
        Subject: CN=serefrind.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:6f:0f:a0:9b:10:ae:c7:75:89:9f:95:aa:
                    ff:41:59:f2:a6:a4:ad:22:6a:a3:6a:59:1d:b8:1c:
                    65:40:65:5b:0a:9e:64:d7:f0:8a:bb:54:e7:46:3e:
                    9f:89:58:e6:a4:cb:12:2c:fd:78:38:ce:90:39:c0:
                    5d:82:10:3e:46:11:54:d3:41:fd:4a:9f:ff:7d:cb:
                    61:b9:ba:12:3d:41:1d:60:e3:29:62:a9:e8:e0:bd:
                    1d:8a:65:82:35:fb:f9:86:be:9a:8a:45:16:a8:fc:
                    cf:82:9f:7d:ff:38:3b:64:34:06:91:a3:e0:c7:a5:
                    91:da:da:32:89:16:b0:4a:4a:fd:0a:4f:2d:4c:90:
                    b7:79:35:e1:87:a0:96:dd:04:15:5d:82:a1:ee:8a:
                    a0:12:a0:f2:1f:8d:78:b4:e8:b8:c2:dd:5e:5d:66:
                    16:ad:a9:c9:7b:74:c2:6c:88:e9:2d:19:3c:a9:46:
                    f6:da:bb:27:1c:b8:f9:2a:fa:79:48:a1:11:dc:53:
                    07:5a:de:fa:79:a7:dd:47:62:08:d7:25:3a:06:77:
                    8f:68:00:4d:57:67:d2:78:97:e8:de:1c:bf:1f:72:
                    17:6c:8f:3f:8d:fe:09:8f:31:b8:92:cc:35:7e:89:
                    69:d2:6b:af:f7:b8:06:8c:a9:6d:74:a6:22:a7:a6:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                BA:E2:30:15:C0:BF:BF:C7:DC:6B:F2:ED:5C:D8:79:1D:31:5E:4B:8F
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.serefrind.com, DNS:serefrind.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Mar 11 18:52:04.631 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:AB:6F:3A:07:E6:AA:8F:33:60:52:9A:
                                0C:AE:85:97:38:F4:D1:F6:27:D2:3D:A5:DD:80:A7:0B:
                                06:B2:67:73:85:02:20:48:12:29:2B:9B:0D:53:4F:F1:
                                28:E1:08:26:63:85:B3:F8:D6:0B:BC:B0:FA:52:FD:AA:
                                BA:B9:63:EA:B8:E1:3F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Mar 11 18:52:04.598 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E3:47:6C:F5:D4:08:6A:E4:B1:8E:33:
                                57:CD:AF:85:E8:BD:C2:14:A2:0E:FE:C5:F7:07:A9:2F:
                                67:94:44:64:61:02:21:00:BD:73:2D:5D:41:D4:3E:05:
                                B8:DF:35:6D:B2:E6:23:63:04:AE:6A:4A:E2:ED:FB:D9:
                                0D:8E:17:20:33:26:49:4B
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        43:c5:a6:e8:22:d8:ef:84:f1:15:ea:67:a0:d6:ab:a4:ab:a3:
        ed:c0:43:64:6a:0e:68:09:2c:40:5d:46:0c:aa:df:d7:3a:5c:
        24:b4:66:75:38:9b:5a:95:b8:e4:e0:00:de:01:ef:06:ca:16:
        82:5c:de:4e:ea:ab:05:2a:aa:5d:1e:dc:1f:6e:64:5b:75:52:
        5d:b2:fa:d9:87:be:f9:96:4f:6c:ef:dd:c3:5b:37:18:b9:d5:
        85:bb:66:e2:d5:59:9c:aa:c9:f7:d9:8f:b6:49:d7:77:71:95:
        62:9e:b5:70:7b:dd:d2:22:7d:8e:d8:52:a6:a0:be:16:fc:9e:
        93:8d:9e:da:96:3a:e9:7a:58:f7:ee:ee:9b:c7:ab:6d:ca:20:
        0d:a9:84:a9:49:09:b4:58:bb:99:42:7f:e8:a9:9c:26:47:a7:
        2d:96:49:82:51:da:79:00:7c:51:aa:1e:03:72:84:9c:40:29:
        7a:3f:15:c2:e2:a7:ef:79:c0:1c:0e:b6:d4:bf:3a:a2:2e:a9:
        bd:87:c5:07:0b:e9:5f:46:b0:64:a4:2b:07:6b:e2:72:b4:df:
        0e:82:f7:8a:5f:18:aa:62:bb:36:58:f7:be:d4:e6:fb:7b:17:
        fc:f8:6c:70:ac:23:8d:51:13:9d:60:d1:0c:17:15:d4:8d:b4:
        04:c9:12:40

995 / tcp

-1001764030 | 2025-03-10T01:48:48.311903

+OK Dovecot ready.
+OK
CAPA
TOP
UIDL
RESP-CODES
PIPELINING
AUTH-RESP-CODE
USER
SASL PLAIN LOGIN
.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e5:80:2a:46:aa:fe:fe:b8:ca:a4:b9:d8:1d:0d:fa:c9:7d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Feb  7 23:13:18 2025 GMT
            Not After : May  8 23:13:17 2025 GMT
        Subject: CN=green.hostingcolor.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:af:30:ff:9a:93:40:ec:01:d9:ae:1a:9f:35:20:
                    e4:0b:b6:cf:dc:9e:64:13:89:b8:f7:b8:9b:f0:b1:
                    6f:76:1c:41:92:94:5e:47:47:01:85:e0:e2:bb:04:
                    1b:88:79:22:0e:3f:3e:45:2f:f5:3e:78:36:8d:59:
                    7e:a3:2c:94:da:14:40:c3:c0:d4:5d:db:18:00:68:
                    12:c4:e5:76:8b:94:c4:25:2c:b6:b5:9e:09:3b:ed:
                    4a:83:a4:59:bd:dc:1c:77:4b:cc:c0:71:01:fd:01:
                    72:29:5c:d9:02:f9:e3:90:47:08:09:b4:10:b8:6d:
                    d4:82:4b:d9:72:a1:2a:25:19:24:e7:3c:d0:80:02:
                    ed:91:00:1f:6c:cd:cd:7d:99:5b:9a:0c:4f:11:e7:
                    d6:6b:41:db:5d:1c:35:20:24:61:cf:59:aa:db:0b:
                    bf:95:6d:b4:26:e9:ce:fa:ee:dc:d2:77:43:e1:0a:
                    b0:ce:49:35:85:92:61:e9:0d:b7:b5:17:e4:9a:d6:
                    77:ab:40:83:62:0a:65:7f:87:cd:09:9d:d4:95:4d:
                    44:86:63:32:20:17:17:28:43:e5:cf:f6:19:3d:e0:
                    41:97:61:8e:70:46:4f:ee:5d:16:8f:ac:1f:ac:a9:
                    29:0d:a8:85:6a:3f:2d:37:44:71:ca:ed:01:41:07:
                    ed:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                4F:5A:71:0D:52:D4:91:F7:4C:E0:8B:2A:61:56:A1:EC:D1:23:F9:E6
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:autoconfig.green.hostingcolor.com, DNS:autodiscover.green.hostingcolor.com, DNS:cpanel.green.hostingcolor.com, DNS:cpcalendars.green.hostingcolor.com, DNS:cpcontacts.green.hostingcolor.com, DNS:green.hostingcolor.com, DNS:ipv6.green.hostingcolor.com, DNS:mail.green.hostingcolor.com, DNS:webdisk.green.hostingcolor.com, DNS:webmail.green.hostingcolor.com, DNS:whm.green.hostingcolor.com, DNS:www.green.hostingcolor.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb  8 00:11:49.003 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:E1:58:1B:07:DE:C5:C6:D9:0F:20:F1:
                                CB:FF:40:0F:F1:E1:7D:1E:D2:07:7D:0B:FD:BD:B5:F5:
                                9B:5C:E1:87:09:02:20:40:CF:C1:EA:36:C7:D8:07:EC:
                                8E:20:D2:A4:A8:1D:E0:4D:4A:36:71:A1:44:90:6D:23:
                                42:FB:E9:DB:26:5A:9F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Feb  8 00:11:49.208 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C3:23:6A:40:63:34:AC:FB:E5:A0:20:
                                76:76:A2:41:E0:FD:D1:0C:7F:25:C6:1D:63:4A:02:C8:
                                56:B1:0F:9E:F8:02:21:00:DF:D1:78:5F:D8:AD:DD:C7:
                                F1:7B:D9:34:9B:78:48:21:E2:69:7E:43:93:0B:C5:DD:
                                A4:CE:AD:79:0A:D5:24:DE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        1a:b8:3b:21:65:36:59:5a:64:f4:b0:9e:0b:95:4f:05:f1:36:
        f1:2a:ec:bd:0d:7f:83:b2:2f:6f:c2:fe:a1:1c:07:e0:27:af:
        2b:18:66:18:6d:1b:e5:1a:76:0c:09:5b:08:c7:75:f4:ba:16:
        82:8d:4e:ab:1a:66:dd:32:35:8a:a7:fa:36:ff:28:0c:be:d7:
        53:8e:99:97:81:7b:b8:73:e3:2f:98:cb:09:64:35:c8:d6:ab:
        07:fd:c6:fc:ba:fc:b5:65:84:7b:40:50:98:65:56:6d:80:ab:
        d9:67:70:24:ae:28:61:35:4e:10:c4:39:09:f6:82:4e:a9:0b:
        cf:4a:4b:cf:37:4e:3b:d1:a6:31:40:02:a2:8c:54:04:19:4a:
        23:b4:b6:06:4b:3b:a6:87:57:8e:01:85:da:8f:92:fb:d6:85:
        69:3d:30:c8:03:36:ff:c3:17:ce:35:e0:19:2a:fe:a4:00:f5:
        9b:55:2d:59:31:e2:70:66:82:06:03:66:6b:0f:ce:cd:53:74:
        99:14:ce:6c:8f:ee:30:dc:5d:3f:a3:3b:68:77:3e:92:86:79:
        23:29:e9:2d:ec:1c:70:8d:d3:42:74:05:7c:34:a6:fc:7d:57:
        9d:e3:51:62:4d:48:40:97:b7:88:81:8c:d3:90:54:44:07:33:
        2d:46:8a:52

2087 / tcp

-1579104521 | 2025-03-09T09:07:26.795992

HTTP/1.1 301 Moved
Content-length: 119
Location: https://green.hostingcolor.com:2087
Content-type: text/html; charset="utf-8"
Cache-Control: no-cache, no-store, must-revalidate, private
Pragma: no-cache

<html><head><META HTTP-EQUIV="refresh" CONTENT="2;URL=https://green.hostingcolor.com:2087"></head><body></body></html>

23.88.7.222

Last Seen: 2025-03-27

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

21 / tcp

-1707213640 | 2025-03-09T14:16:37.149156

Pure-FTPd

53 / udp

1418108189 | 2025-03-19T16:09:53.380688

80 / tcp

79540932 | 2025-03-26T16:06:32.993555

Hashes

Apache httpd

143 / tcp

1559185454 | 2025-03-08T12:55:37.531284

443 / tcp

-1961647034 | 2025-03-27T08:04:32.118501

Hashes

cPanel

995 / tcp

-1001764030 | 2025-03-10T01:48:48.311903

2087 / tcp

-1579104521 | 2025-03-09T09:07:26.795992

Products

Pricing

Contact Us

23.88.7.222

Last Seen: 2025-03-27

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Latest CVSS

OpenPorts

21 / tcp -1707213640 | 2025-03-09T14:16:37.149156

Pure-FTPd

53 / udp 1418108189 | 2025-03-19T16:09:53.380688

80 / tcp 79540932 | 2025-03-26T16:06:32.993555

Hashes

Apache httpd

143 / tcp 1559185454 | 2025-03-08T12:55:37.531284

443 / tcp -1961647034 | 2025-03-27T08:04:32.118501

Hashes

cPanel

995 / tcp -1001764030 | 2025-03-10T01:48:48.311903

2087 / tcp -1579104521 | 2025-03-09T09:07:26.795992

Products

Pricing

Contact Us

Vulnerabilities

21 / tcp

-1707213640 | 2025-03-09T14:16:37.149156

53 / udp

1418108189 | 2025-03-19T16:09:53.380688

80 / tcp

79540932 | 2025-03-26T16:06:32.993555

143 / tcp

1559185454 | 2025-03-08T12:55:37.531284

443 / tcp

-1961647034 | 2025-03-27T08:04:32.118501

995 / tcp

-1001764030 | 2025-03-10T01:48:48.311903

2087 / tcp

-1579104521 | 2025-03-09T09:07:26.795992