GeneralInformation

Hostnames	ec2-3-10-105-209.eu-west-2.compute.amazonaws.com migrate.scholarpack.co.uk
Domains	amazonaws.com scholarpack.co.uk
Cloud Provider	Amazon
Cloud Region	eu-west-2
Cloud Service	EC2
Country	United Kingdom
City	London
Organization	Amazon Data Services UK
ISP	Amazon.com, Inc.
ASN	AS16509

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

80 443

-928392298 | 2024-09-21T16:41:29.630840

80 / tcp

HTTP/1.1 302 Found
Date: Sat, 21 Sep 2024 16:41:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.23.1
X-Powered-By: PHP/8.2.21
Set-Cookie: oc_sessionPassphrase=YuyWFQ44YTVVZhGogfenf8hd%2BBbm5wMByEumzTt8WTfaFg2DemGhnq%2BrI4yTYkdrx0lKlhoUDY5jbWGkQE%2Fdv8rcc0olxguAdBSw2BM2s0Mn77pJ1S9Gn%2BO00q%2Biv1T2; path=/; secure; HttpOnly; SameSite=Lax
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-ZVhIaWlnN3BFSXQ1NTJLTS9ZekpaOFlCQUlWZTJNWTNSL09Eb1l2cVpNQT06TWgyMDdIbmRZYndUanpMNnRlTzZGckl6Wi93ZmovOVROWjdGK2RLQVVxWT0='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
Set-Cookie: oc47f4admtxy=10qkoofiddhum0uc6smlho3pf5; path=/; secure; HttpOnly; SameSite=Lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: https://migrate.scholarpack.co.uk/login
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Robots-Tag: none
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
Referrer-Policy: no-referrer

CVE-2023-44487 CVE-2022-41742 CVE-2022-41741

-1927383352 | 2024-09-23T15:10:38.156766

443 / tcp

HTTP/1.1 200 OK
Date: Mon, 23 Sep 2024 15:10:37 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 15968
Connection: keep-alive
Server: nginx/1.23.1
X-Powered-By: PHP/8.2.21
Set-Cookie: oc_sessionPassphrase=Z8zsyjtgesD9%2BgVxwoneQK4wPPThdQjwpqJkf%2FkdxhbHKSHj%2FiYCjek4lpBVjHTqwXZs5blkkwZ7bdjoF%2BUzjw%2BCZpQnQzPaUryJ%2BN0n%2B89kI3f2uz%2BnnnnZ2zZPH4nq; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
Set-Cookie: oc47f4admtxy=iojn3kvg0gdl3dqo6mkqmemdgt; path=/; secure; HttpOnly; SameSite=Lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
X-Request-Id: vzRGgWKW8CafabghYzFW
Cache-Control: no-cache, no-store, must-revalidate
Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-aFM0eFJaQkcxQ09DT0M0dFlZRjR6NGY1Ty9QY3BrV3VGTnZsOEVFdDlGaz06ekdabGR2VWlvVUxoRXdGOVRzSUordXVMYUorbDZXNzRKNHVPeVRWcG94ST0=';script-src-elem 'strict-dynamic' 'nonce-aFM0eFJaQkcxQ09DT0M0dFlZRjR6NGY1Ty9QY3BrV3VGTnZsOEVFdDlGaz06ekdabGR2VWlvVUxoRXdGOVRzSUordXVMYUorbDZXNzRKNHVPeVRWcG94ST0=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
X-Robots-Tag: noindex, nofollow
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Robots-Tag: none
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
Referrer-Policy: no-referrer

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0c:94:fd:1c:04:a0:77:38:b0:9b:5a:3b:9a:0d:a3
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: Jun 19 00:00:00 2024 GMT
            Not After : Jul 17 23:59:59 2025 GMT
        Subject: CN=migrate.scholarpack.co.uk
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:98:62:e1:99:1e:ee:e0:f2:7e:89:1e:2b:f0:78:
                    2f:4a:b1:10:fa:ea:4f:c5:0a:d8:d1:bd:32:48:6b:
                    57:90:ae:ea:d4:94:78:04:1c:64:22:ad:ec:a6:ac:
                    8d:ea:59:38:bc:f8:98:cd:d9:b9:f4:90:ea:63:a4:
                    c1:d8:b2:19:8a:e9:10:c2:96:df:56:1b:0e:8c:25:
                    3d:8d:39:2f:89:9c:a8:de:f9:d2:3f:fa:88:a2:37:
                    6d:72:01:aa:e2:72:f6:70:a3:b7:50:01:d5:c8:23:
                    b4:94:d0:e7:31:58:57:6f:fa:4b:1f:71:1e:d3:d6:
                    c6:fc:f6:b7:3b:03:9b:19:71:38:5e:55:5d:41:ea:
                    9f:01:be:8e:93:c7:fa:95:35:26:63:f7:16:6a:be:
                    b1:49:29:fc:8a:03:9c:9f:ba:ef:77:a2:97:8b:3f:
                    cb:b6:17:44:f1:bd:f3:1e:7e:7e:8f:f3:a4:52:27:
                    aa:e2:c4:70:11:dc:7f:6e:d7:2c:41:e1:f1:92:27:
                    53:6a:d1:d5:f6:7c:f1:e3:21:dc:a2:45:72:f6:4a:
                    73:6a:8d:a9:bf:c2:26:12:05:fb:62:c2:34:d6:a9:
                    6c:42:b5:eb:1b:23:75:47:b5:ce:00:a4:7f:0a:40:
                    6f:78:a4:d2:95:b1:e4:4c:08:63:4b:18:99:da:81:
                    0b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                C8:4C:BB:24:51:95:1E:02:91:BC:E0:88:C2:2D:3C:82:E4:0B:45:AA
            X509v3 Subject Alternative Name: 
                DNS:migrate.scholarpack.co.uk
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Jun 19 00:20:25.404 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:84:84:CE:E4:BC:68:7C:08:C5:64:FB:
                                F5:CD:D8:E0:0C:16:33:22:F6:4D:BC:8B:EF:68:8F:29:
                                34:37:F1:21:7C:02:20:05:C2:B7:F0:68:C0:C8:9D:E8:
                                73:E3:A9:4B:58:65:A3:1E:5A:BC:95:63:F7:9D:61:BB:
                                06:85:02:B3:96:56:3E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Jun 19 00:20:25.404 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:CC:21:FB:CC:BE:7A:5A:6F:FB:D2:AD:
                                7B:02:53:C7:9E:2A:80:A6:52:31:19:DE:52:99:E7:A7:
                                AB:E3:E7:80:A6:02:21:00:9B:04:3D:22:1E:38:A1:71:
                                AE:0F:6F:44:52:C3:CB:0B:96:3C:C9:42:93:50:70:98:
                                3D:F2:ED:56:B8:E0:2A:F4
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Jun 19 00:20:25.417 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:50:8A:A8:34:21:DB:1B:64:57:CD:CB:A3:
                                0C:72:D7:7E:B9:21:75:29:C4:C4:53:F9:E8:63:94:27:
                                37:AD:A4:59:02:21:00:8D:9B:A0:2B:6C:D3:01:A7:E3:
                                37:8B:7C:E2:67:98:DE:F6:BC:A8:7F:36:28:03:B7:3E:
                                A5:C4:78:2D:91:7A:73
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        3c:af:29:42:24:0e:72:83:d4:a4:db:b5:16:7b:e5:3e:e2:74:
        d2:14:6b:b7:99:ef:55:8a:dd:a2:30:06:cb:9f:5f:04:90:c0:
        cc:33:c2:c7:6d:95:bb:db:49:5e:1c:06:7a:bf:64:8d:26:88:
        97:0e:a2:aa:88:90:d6:99:92:7d:2c:5f:41:93:4e:57:3c:31:
        30:74:3e:c8:64:c5:90:b3:48:75:05:73:f6:23:5d:47:f3:e2:
        50:57:af:45:8f:d4:ca:74:36:44:94:9a:34:f0:78:de:88:fe:
        84:1e:87:e2:b5:c3:86:96:53:cc:c6:84:a9:0a:9f:cf:15:ab:
        c3:2f:82:96:ce:0c:7e:cb:7a:9b:35:78:37:11:f5:40:a2:98:
        8b:8e:24:78:56:a9:30:88:ff:c7:75:b8:9f:10:02:d3:39:35:
        25:0e:8e:fb:69:3e:6d:1f:aa:ce:e4:0e:89:58:f9:f9:b1:52:
        75:31:ec:94:84:f9:82:67:67:9c:5f:38:d7:a1:02:2e:e0:18:
        44:8a:61:91:3f:9a:9c:c0:3d:32:8a:75:e6:03:af:38:cd:99:
        e7:8a:a1:e5:6a:72:92:6a:75:08:98:13:0a:76:56:93:44:47:
        50:c3:53:12:18:db:d4:c9:e9:05:b8:51:d7:89:02:72:68:cc:
        89:73:2e:6b

CVE-2023-44487 CVE-2022-41742 CVE-2022-41741

3.10.105.209

Last Seen: 2024-09-23

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-928392298 | 2024-09-21T16:41:29.630840
80 / tcp

nginx1.23.1

-1927383352 | 2024-09-23T15:10:38.156766
443 / tcp

nginx1.23.1

Products

Pricing

Contact Us

3.10.105.209

Last Seen: 2024-09-23

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

-928392298 | 2024-09-21T16:41:29.630840 80 / tcp

nginx1.23.1

-1927383352 | 2024-09-23T15:10:38.156766 443 / tcp

nginx1.23.1

Products

Pricing

Contact Us

Vulnerabilities

-928392298 | 2024-09-21T16:41:29.630840
80 / tcp

-1927383352 | 2024-09-23T15:10:38.156766
443 / tcp