GeneralInformation

Hostnames	ec2-35-171-134-43.compute-1.amazonaws.com mscaronline.com
Domains	amazonaws.com mscaronline.com
Cloud Provider	Amazon
Cloud Region	us-east-1
Cloud Service	EC2
Country	United States
City	Ashburn
Organization	Amazon Technologies Inc.
ISP	Amazon.com, Inc.
ASN	AS14618
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

443

443 / tcp

0 | 2025-03-09T13:36:30.058748

Hashes

hash

-513221802

http.dom_hash

http.html_hash

http.server_hash

967792298

HTTP/1.1 307 Temporary Redirect
Date: Sun, 09 Mar 2025 13:36:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.18.0 (Ubuntu)
Set-Cookie: ci_session=ruq6oeim2c2khl12cdcgv8rlv8jq0psk; expires=Sun, 09 Mar 2025 15:36:30 GMT; Max-Age=7200; path=/; domain=mscaronline.com; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-CSRF-Token: 
Location: https://sandboxlogin.mscaronline.com/auth/index?ride

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2600222666794146181 (0x2415d8bd272f1985)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2
        Validity
            Not Before: Oct 19 20:27:27 2024 GMT
            Not After : Nov 20 20:27:27 2025 GMT
        Subject: CN=*.mscaronline.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:17:ee:41:cf:86:13:5b:02:c4:a4:55:b1:
                    6e:61:28:b7:36:5c:5e:0a:73:48:ca:0c:4b:8a:71:
                    26:8b:73:0e:3a:4c:71:9a:ac:4c:b6:ba:66:96:60:
                    e8:75:dc:65:76:11:c1:7f:27:58:ae:ec:2c:a5:3f:
                    fd:61:42:4d:b1:d5:47:95:f2:ac:67:44:0d:05:e1:
                    9c:c4:f9:1c:db:19:37:69:7a:bb:81:be:4e:24:8a:
                    a9:78:23:c4:81:17:95:df:fb:aa:c9:10:73:70:12:
                    74:cc:58:a8:cd:be:34:7a:78:f1:55:fe:3b:90:ed:
                    41:ce:e6:bd:4d:e5:52:0b:bd:61:71:fc:b1:2d:64:
                    70:fc:6c:b4:bd:0b:07:f9:89:a1:ac:e7:3c:01:8b:
                    b1:b6:10:4a:84:db:ce:67:92:9f:01:f9:35:9a:f8:
                    7e:b1:ea:bf:e0:08:98:e4:cb:60:59:6c:06:97:97:
                    81:b7:9c:81:b9:2c:af:cc:2c:4b:03:c4:ce:77:16:
                    0b:bf:f1:98:05:ee:08:42:28:a0:14:bd:22:72:b8:
                    1f:02:c6:df:84:d4:07:62:51:17:d8:17:eb:32:54:
                    c8:ba:48:2b:3d:4c:e3:eb:37:67:02:1e:42:d2:7f:
                    af:66:f9:44:43:0b:bc:0b:6d:09:75:7b:c7:60:c6:
                    7d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.godaddy.com/gdig2s1-31569.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114413.1.7.23.1
                  CPS: http://certificates.godaddy.com/repository/
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com/
                CA Issuers - URI:http://certificates.godaddy.com/repository/gdig2.crt
            X509v3 Authority Key Identifier: 
                40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE
            X509v3 Subject Alternative Name: 
                DNS:*.mscaronline.com, DNS:mscaronline.com
            X509v3 Subject Key Identifier: 
                44:F9:DD:98:0F:55:FD:AF:CC:A2:C4:A0:0A:1D:8B:63:50:54:04:5B
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Oct 19 20:27:27.970 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:47:A4:08:32:4B:62:CC:71:B8:5B:1C:E2:
                                BF:C0:E3:24:B9:54:7E:8B:28:B6:E8:6D:B7:7B:D0:04:
                                45:52:1F:91:02:20:33:81:B0:D4:55:54:8A:57:44:95:
                                FB:7F:BF:77:79:87:9F:99:AF:5C:B5:17:84:3A:49:18:
                                F5:59:DF:D6:9E:4E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Oct 19 20:27:28.132 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:6E:41:75:6C:35:10:56:C5:3A:89:AB:98:
                                41:F9:87:67:E2:95:CB:03:95:F8:96:B8:35:7E:0D:C1:
                                F3:2D:39:87:02:21:00:9E:60:93:96:34:7A:5A:48:21:
                                BD:A5:2E:8E:A6:CD:3D:EC:93:28:E6:98:CE:2F:65:AA:
                                15:21:19:86:D6:99:D8
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Oct 19 20:27:30.756 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:AF:B8:52:EB:3A:47:19:72:EF:DA:89:
                                08:80:DD:0B:46:8F:78:3E:92:FC:6B:F5:32:04:50:EE:
                                8F:92:74:32:50:02:21:00:DD:C0:8D:77:59:69:AA:EE:
                                EA:0B:67:4A:6F:E9:70:48:C7:8D:6F:93:D2:F6:CE:01:
                                40:A7:57:CB:2E:EA:15:45
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        28:78:b8:f6:57:22:e2:24:6b:23:4f:46:f6:2d:08:9d:f0:1f:
        ab:37:5c:d8:92:59:a0:0e:2b:21:98:5b:36:cf:6a:55:f6:b5:
        28:ca:b6:f5:44:a8:78:78:67:b2:b8:0b:9a:06:71:d0:4a:25:
        03:0c:69:9f:55:b4:47:7b:13:91:ec:3d:0d:95:04:72:0f:b5:
        48:a6:f9:d5:53:c1:2e:77:d4:25:4c:fa:70:5e:49:e4:66:5d:
        5e:97:3c:46:40:47:d3:c0:02:78:a9:f8:c0:63:0c:d9:b2:c6:
        28:f3:dc:15:b3:6f:95:93:57:b9:7d:5e:21:15:a9:fe:4b:a9:
        89:92:8e:e9:c1:0b:61:bc:50:52:f0:92:ec:70:02:4b:63:2c:
        d8:1f:8f:67:b3:1e:f2:f2:e0:88:99:4e:3b:5f:45:79:6c:00:
        0a:ec:f3:82:3f:f5:3e:5c:cc:9e:6a:ce:bb:a4:ad:38:2c:1c:
        dd:43:da:c2:da:f2:28:66:f4:09:2f:e3:4c:ae:e5:24:64:59:
        eb:10:2b:db:57:f4:90:80:82:2f:10:a2:1b:c0:a1:c2:20:93:
        3e:dd:88:8d:7a:1e:de:b2:fa:91:94:80:69:ae:59:00:e2:f4:
        05:e6:01:cc:49:bf:eb:af:8c:77:66:d9:e4:64:58:0f:7d:29:
        dd:54:10:f6

Vulnerabilities

35.171.134.43

Last Seen: 2025-03-09

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

443 / tcp

0 | 2025-03-09T13:36:30.058748

Hashes

nginx1.18.0

Products

Pricing

Contact Us

35.171.134.43

Last Seen: 2025-03-09

Tags:

GeneralInformation

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

443 / tcp 0 | 2025-03-09T13:36:30.058748

Hashes

nginx1.18.0

Products

Pricing

Contact Us

Vulnerabilities

443 / tcp

0 | 2025-03-09T13:36:30.058748