GeneralInformation

Hostnames	ec2-3-135-124-196.us-east-2.compute.amazonaws.com mkt2.sttclub.online
Domains	amazonaws.com sttclub.online
Cloud Provider	Amazon
Cloud Region	us-east-2
Cloud Service	EC2
Country	United States
City	Columbus
Organization	Amazon Technologies Inc.
ISP	Amazon.com, Inc.
ASN	AS16509
Operating System	Ubuntu

WebTechnologies

JavaScript libraries

jQuery

UI frameworks

Bootstrap

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

2019(4)

CVE-2019-20372

5.3NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

CVE-2019-9516

7.5Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory.

CVE-2019-9513

7.5Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.

CVE-2019-9511

7.5Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.

2018(3)

CVE-2018-16845

8.2nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file. The issue only affects nginx if it is built with the ngx_http_mp4_module (the module is not built by default) and the .mp4. directive is used in the configuration file. Further, the attack is only possible if an attacker is able to trigger processing of a specially crafted mp4 file with the ngx_http_mp4_module.

CVE-2018-16844

5.3nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.

CVE-2018-16843

5.3nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.

OpenPorts

80 443

80 / tcp

494484564 | 2025-03-17T10:32:28.164634

Hashes

hash

-1170777766

http.dom_hash

-2080772153

http.html_hash

494484564

http.robots_hash

-1022729730

http.server_hash

-1332498764

HaloLiveAndroid通用后台-Login

HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Mon, 17 Mar 2025 10:32:28 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, Content-Type, Cookie, Accept, x-csrf-token,token,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, OPTIONS
Set-Cookie: XSRF-TOKEN=eyJpdiI6IklEQUp6SWNGSlhMcUNNK1lZaVNKVWc9PSIsInZhbHVlIjoiS2VjWkx3c21rT0g4emVTbG9oSkJsZ3crdkdDSjFxd2dFa2dzQUpqTjY1UlJPZ0VrUkdwNCt4UktzRjdTSHVwciIsIm1hYyI6IjY1ZjI5NzEyMWM3YzU3YTg1ZmRkZDM4YWRjNThiZWY4M2I0OGZhMThkYzM2ZjA5NjRjYWRjZTBlNWM2ZWZiZGEifQ%3D%3D; expires=Mon, 17-Mar-2025 12:32:28 GMT; Max-Age=7200; path=/
Set-Cookie: haloliveandroid_session=eyJpdiI6ImdiQUhSUmZXbXVOMjAwQzVhTCtUMVE9PSIsInZhbHVlIjoidXJKNVRraVRuZkMrOVhzVGpJVis3UVRHRXNjMmVYU3dQaStUSDhoMlZhWHRpRCtaRTdTbTk3ejNcL3lPV3BnbkIiLCJtYWMiOiI2ZDFmYmQzOTNmMmYxODEyMzM4NjA4Y2E0YzZhZmI1N2U5MTVmZTI5MWZhNzAxMmIyNTdmNzhmYWEyMmFiZWI1In0%3D; expires=Mon, 17-Mar-2025 12:32:28 GMT; Max-Age=7200; path=/; httponly
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: token,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

Vulnerabilities

7 3

443 / tcp

1452477825 | 2025-04-08T06:27:56.729584

Hashes

hash

-1172192144

http.dom_hash

-2080772153

http.html_hash

1452477825

http.robots_hash

-1022729730

http.server_hash

-1332498764

HaloLiveAndroid通用后台-Login

HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Tue, 08 Apr 2025 06:27:56 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, Content-Type, Cookie, Accept, x-csrf-token,token,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, OPTIONS
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjZzRnFndlVcL1k1cExqWjRhZlNIYWtBPT0iLCJ2YWx1ZSI6IjFQcVY5TWJOZzE4RWZLdmx5M01kdElNYVFGVGJhMFhzYUhocXQ1VENxTWg4WDhBdEN4TzNOTVpsd0hWQlBZN2oiLCJtYWMiOiIzNTVhYWUwMjkxMmY3ZDZhZmY1ODBlZjgzNWIwYmVhZDQ5ZWU1MmVhMjIwNDI1YWI0ZTYyMGJlMjllMDJlYjRkIn0%3D; expires=Tue, 08-Apr-2025 08:27:56 GMT; Max-Age=7200; path=/
Set-Cookie: haloliveandroid_session=eyJpdiI6Img1VWJad2t5akZSVmc5ZUlPbmllMHc9PSIsInZhbHVlIjoiQjV5b0R5UE92XC84VDBPaTl6TzZjWkxaT0lkaXpTY0J2UXdcL2VnNGdOUXhvU2JhRXVIU2JESk5mSlpRV2t0eFJNIiwibWFjIjoiNzg0YzQyODIzMzg1MGZlOTYyMGVhNzYwODQyZDlkZGIxMzU4MzUxZWYzMTgzMDhiNTg3OTE2ZTJmNjIyYWZhOCJ9; expires=Tue, 08-Apr-2025 08:27:56 GMT; Max-Age=7200; path=/; httponly
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: token,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:75:3a:78:c8:9d:6d:a1:57:d6:31:34:3d:54:b2:22:4f:04
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E6
        Validity
            Not Before: Oct 26 08:22:57 2024 GMT
            Not After : Jan 24 08:22:56 2025 GMT
        Subject: CN=mkt2.sttclub.online
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:67:69:a2:2f:e7:7e:b9:8b:51:70:e7:52:46:d3:
                    46:40:cf:8f:1b:88:4b:5f:fc:98:3f:74:97:74:69:
                    9e:f4:9c:ec:55:8d:8e:df:ed:45:31:d0:de:61:65:
                    11:42:6b:b8:57:3f:57:5f:ec:79:16:71:d5:06:22:
                    bb:ee:59:f0:a4
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                ED:7B:67:16:D3:D0:57:B6:0C:1C:5F:D8:EE:97:BE:70:9E:72:1C:61
            X509v3 Authority Key Identifier: 
                93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
            Authority Information Access: 
                OCSP - URI:http://e6.o.lencr.org
                CA Issuers - URI:http://e6.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:mkt2.sttclub.online
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Oct 26 09:21:27.462 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:54:E1:35:4E:A7:71:18:EF:5B:79:B5:4F:
                                21:36:D2:B8:1C:E4:C6:FA:E4:F9:39:3A:0D:D9:B3:48:
                                B3:78:39:59:02:20:0D:25:56:73:A7:03:65:44:0C:FD:
                                C6:B6:59:4B:D2:28:B8:AA:69:B4:EF:20:B9:F2:87:DC:
                                E4:0F:99:8A:DA:BC
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Oct 26 09:21:27.537 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:66:B6:5A:76:44:C2:46:40:C0:9B:55:8D:
                                F3:E0:15:3F:16:77:08:ED:82:5F:15:E3:49:7A:1A:94:
                                1B:81:E3:3E:02:21:00:EB:6E:30:26:6B:84:D4:BB:63:
                                9D:17:BB:7B:7D:3B:C8:CE:9B:73:5B:2E:B6:E3:B8:BA:
                                78:3C:24:06:FD:B9:1F
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:30:6c:a8:6e:a0:28:ab:c0:2f:c2:f1:69:7f:02:9b:
        6e:f4:55:a2:64:48:05:a2:92:f8:9e:1e:55:ef:99:db:1f:63:
        dd:9e:b2:35:1e:1b:45:bb:b6:fe:a4:e1:25:e6:e9:5f:02:31:
        00:d5:7a:3b:d2:7b:15:f1:95:e5:93:92:ea:63:92:b8:89:9d:
        e1:4d:91:c0:cd:1e:84:15:48:a4:fa:10:5c:c4:66:c9:06:90:
        7d:f2:19:d6:8a:01:6a:83:e8:ec:a3:48:fd

Vulnerabilities

7 3

3.135.124.196

Last Seen: 2025-04-08

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

80 / tcp

494484564 | 2025-03-17T10:32:28.164634

Hashes

nginx1.14.0

443 / tcp

1452477825 | 2025-04-08T06:27:56.729584

Hashes

nginx1.14.0

Products

Pricing

Contact Us

3.135.124.196

Last Seen: 2025-04-08

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

80 / tcp 494484564 | 2025-03-17T10:32:28.164634

Hashes

nginx1.14.0

443 / tcp 1452477825 | 2025-04-08T06:27:56.729584

Hashes

nginx1.14.0

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

494484564 | 2025-03-17T10:32:28.164634

443 / tcp

1452477825 | 2025-04-08T06:27:56.729584