GeneralInformation

Hostnames

ec2-3-125-20-142.eu-central-1.compute.amazonaws.com
ona.io

Domains

amazonaws.com ona.io

Cloud Provider

Amazon

Cloud Region

eu-central-1

Cloud Service

EC2

Country

Germany

City

Frankfurt am Main

Organization

A100 ROW GmbH

ISP

Amazon.com, Inc.

ASN

AS16509

WebTechnologies

CDN

BootstrapCDN3.0.2

jQuery CDN

JavaScript libraries

jQuery

Programming languages

Python

UI frameworks

Bootstrap3.0.2

Web frameworks

Django

OpenPorts

80 443

80 / tcp

293410365 | 2025-04-24T07:37:10.125434

Hashes

hash

498943901

http.dom_hash

-2060582466

http.html_hash

293410365

http.server_hash

-982608622

http.title_hash

1180404099

503 Service Temporarily Unavailable

HTTP/1.1 503 Service Temporarily Unavailable
Server: awselb/2.0
Date: Thu, 24 Apr 2025 07:36:58 GMT
Content-Type: text/html
Content-Length: 564
Connection: keep-alive

443 / tcp

664538766 | 2025-04-22T00:08:01.086667

Hashes

hash

1619539612

http.dom_hash

1907171673

http.html_hash

664538766

http.robots_hash

-1022729730

http.title_hash

794961004

classic.ona.io

HTTP/1.1 200 OK
Date: Tue, 22 Apr 2025 00:08:00 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 6444
Connection: keep-alive
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
Vary: Accept-Language, Cookie, origin
Content-Language: en
ETag: "ab35f01519f824a048271b6049d70648"
Set-Cookie: sessionid=z0o060zz00k71j4d4ru2rscq0kpe3gmw; expires=Tue, 06 May 2025 00:08:00 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Strict; Secure
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Robots-Tag: noindex, nofollow

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c3:b8:ab:01:e4:4c:56:3e:25:b1:dc:72:86:bc:c2:8f
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=FR, O=Gandi, CN=Gandi RSA Domain Validation Secure Server CA 3
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: CN=*.ona.io
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub:
                    04:f7:08:21:68:72:93:a3:c6:bd:0b:c7:44:2e:b7:
                    86:26:d7:c5:f5:e5:39:ee:e2:69:d9:cf:5f:da:45:
                    dd:b5:b4:3e:2f:2d:f4:17:e4:20:c8:c3:40:90:ee:
                    d0:c6:81:ef:aa:9f:80:2d:a3:24:90:f3:5a:dc:3a:
                    13:96:6f:c3:ec:3e:32:b6:4c:af:89:42:6a:27:36:
                    83:57:5c:7f:19:9c:e9:80:94:4d:54:fd:81:85:59:
                    1a:e5:01:e5:a2:0d:e8
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                81:11:92:DE:66:32:A5:B0:5B:33:3D:65:43:85:FC:D4:04:2D:F1:AE
            X509v3 Subject Key Identifier: 
                33:FD:FB:02:BD:B2:92:35:35:98:5A:F1:38:76:C7:B1:87:A2:18:F5
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.26
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/GandiRSADomainValidationSecureServerCA3.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.ona.io, DNS:ona.io
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
                    Timestamp : Nov 15 08:51:24.088 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:31:2F:87:15:E3:D8:17:99:96:D7:D8:FD:
                                89:D8:13:32:C0:13:35:EB:02:A3:17:47:4F:35:D9:46:
                                83:E8:12:0F:02:21:00:BD:31:E2:67:8E:1A:69:5E:8A:
                                34:20:FF:05:59:A1:78:B5:64:85:D5:8C:49:D9:AC:78:
                                37:E7:5F:4B:AC:07:F5
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Nov 15 08:51:24.049 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:4D:F2:35:4B:62:05:96:BC:5F:B9:ED:F9:
                                3C:2D:13:0C:82:C8:21:09:7E:2C:8D:29:2A:43:28:62:
                                70:D1:28:BC:02:21:00:AB:63:B0:E7:BC:16:6A:37:27:
                                55:3B:25:08:6D:67:59:E9:94:60:44:B3:58:27:0B:30:
                                6C:B5:F6:34:E6:CA:BA
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Nov 15 08:51:24.007 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:AF:68:FC:BF:C7:68:10:14:82:CF:18:
                                7E:EB:35:23:17:49:73:F2:10:5F:00:6E:DB:60:BB:00:
                                1E:C4:53:29:05:02:20:1E:EA:8A:62:7B:5F:6F:DD:D1:
                                0C:AE:A3:69:06:F4:C4:93:D1:FF:8D:00:9D:DC:C3:A0:
                                60:3D:C4:52:76:31:0C
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        5a:09:d0:f2:7c:fd:92:a3:c9:b4:91:3d:3b:d4:6f:39:45:18:
        46:b4:b1:04:74:3d:d3:f8:e3:4d:df:e3:60:ff:ba:c5:db:3b:
        bf:65:08:be:a6:7e:ba:f8:63:cd:04:de:6a:db:5e:d8:4f:81:
        93:11:7a:f7:53:7a:82:ab:25:fc:c3:d7:a3:73:31:e7:e9:a8:
        47:fe:24:c9:54:a8:49:d6:ac:cb:26:ba:16:ab:11:f4:2d:eb:
        65:f3:82:03:a2:ef:17:be:0e:32:27:dc:2d:29:ab:41:3a:12:
        c3:1a:23:23:38:9e:c1:ce:06:4e:23:90:a0:b5:14:a6:7e:06:
        1d:de:f9:d8:54:43:2f:41:7d:2c:7c:08:24:10:f9:4a:c6:13:
        fc:cc:bb:6d:87:46:9e:fa:4d:17:39:e1:1a:c4:8b:23:94:68:
        cb:36:2a:42:f9:6c:e8:be:6d:d0:fe:6e:e9:ec:b3:d0:08:a8:
        77:c0:12:f1:39:42:d3:e9:ef:09:a7:5c:4b:37:3c:4c:be:8a:
        39:c5:43:61:44:65:c9:79:ea:aa:9e:1f:cc:41:31:5b:cf:68:
        38:b5:51:e5:11:39:aa:53:05:5c:b3:73:63:6e:c6:58:ee:09:
        f4:d3:86:8b:4d:79:5a:db:ca:11:a2:7b:5c:3a:21:86:1a:55:
        4d:ae:17:31:9e:b3:97:d8:9e:c0:43:95:eb:7e:a2:8f:2f:36:
        a5:14:dc:01:d0:65:29:6e:b3:cb:f7:80:a5:9c:7a:1a:ec:e2:
        da:2b:f7:05:67:ab:dc:85:be:14:c9:30:35:41:ad:d9:f9:df:
        8b:77:26:77:4d:88:af:ca:cb:6d:d1:b1:5b:de:85:7a:90:4f:
        96:60:30:62:ad:42:9a:90:c4:8c:d3:0c:c0:a7:17:48:48:24:
        74:0c:c3:bb:d2:e7:a2:77:89:8e:76:78:0d:c7:9f:af:38:44:
        08:fb:ad:d4:52:82:37:d0:ef:07:e5:48:1b:f6:e4:a4:b7:f9:
        c1:f4:d2:26:22:35

Vulnerabilities

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2019(1)

CVE-2019-8331

6.1In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

2018(4)

CVE-2018-20677

6.1In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

CVE-2018-20676

6.1In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.

CVE-2018-14042

6.1In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

CVE-2018-14040

6.1In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

2016(1)

CVE-2016-10735

6.1In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

3.125.20.142

Last Seen: 2025-04-24

Tags:

GeneralInformation

WebTechnologies

OpenPorts

80 / tcp

293410365 | 2025-04-24T07:37:10.125434

Hashes

AWS ELB2.0

443 / tcp

664538766 | 2025-04-22T00:08:01.086667

Hashes

Vulnerabilities

Products

Pricing

Contact Us

3.125.20.142

Last Seen: 2025-04-24

Tags:

GeneralInformation

WebTechnologies

OpenPorts

80 / tcp 293410365 | 2025-04-24T07:37:10.125434

Hashes

AWS ELB2.0

443 / tcp 664538766 | 2025-04-22T00:08:01.086667

Hashes

Vulnerabilities All ports Port 443 Latest CVSS

Products

Pricing

Contact Us

80 / tcp

293410365 | 2025-04-24T07:37:10.125434

443 / tcp

664538766 | 2025-04-22T00:08:01.086667

Vulnerabilities