GeneralInformation

Hostnames

afh.nat.tn

Domains

afh.nat.tn

Country

Tunisia

City

Tunis

Organization

ATI - Agence Tunisienne Internet

ISP

TOPNET

ASN

AS37705

WebTechnologies

CDN

jQuery CDN

CMS

TYPO3 CMS

JavaScript libraries

jQuery2.2.0

Slick

Programming languages

PHP

UI frameworks

Bootstrapf2c3439711ded205fd37d157313b4eed0a7e10cb

OpenPorts

80 443

80 / tcp

2066407974 | 2025-04-23T03:41:36.874482

Hashes

hash

-22757386

http.dom_hash

1412617095

http.html_hash

2066407974

http.title_hash

337186111

Object moved

HTTP/1.1 302 Object moved
Location: https://41.226.27.153:443/
Content-Length: 74
Content-Type: text/html

443 / tcp

-1297435095 | 2025-04-28T17:10:48.863439

Hashes

hash

210932317

http.dom_hash

2111310674

http.favicon.hash

-373753107

http.html_hash

-1297435095

http.server_hash

-1094425956

http.title_hash

878654747

AFH - AFH

HTTP/1.1 200 OK
Date: Mon, 28 Apr 2025 17:10:48 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 63985
Connection: keep-alive
Content-Language: fr
Cache-Control: private, no-store
Server: AFH
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self' 'unsafe-inline' *.google.com *.jquery.com *.googleapis.com *.gstatic.com *.youtube.com *.youtube-nocookie.com; style-src 'self' 'unsafe-inline'
X-XSS-Protection: 1;  mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Cache-Control: max-age=120
Expect-CT: enforce, max-age=300, report-uri='https://afh.nat.tn/'
Set-Cookie: cookiesession1=678A3E0DFDD322091F2CC9E76AD133E4;Expires=Tue, 28 Apr 2026 17:10:48 GMT;Path=/;HttpOnly

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:27:37:88:c7:3b:87:57:87:70:e6:30:c3:69:b0:30
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
        Validity
            Not Before: Aug  8 00:00:00 2024 GMT
            Not After : Aug  8 23:59:59 2025 GMT
        Subject: CN=*.afh.nat.tn
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ea:f8:ba:9b:0c:2d:a4:85:63:5d:d5:a5:61:dd:
                    d7:ae:9c:d8:3c:00:13:c4:05:e8:56:0f:68:1c:22:
                    d6:0d:10:f9:fe:8b:47:1e:0c:4b:2e:5c:19:c8:66:
                    7f:cd:0d:72:a0:cf:13:f8:8f:0f:62:f1:a9:3b:ad:
                    a2:c8:fa:be:7e:fe:7d:22:72:58:c6:27:bf:63:be:
                    c3:0d:54:d7:4f:14:73:f7:50:99:43:9c:19:92:98:
                    60:e8:b0:75:a2:49:68:ec:c0:51:64:66:c2:41:45:
                    e9:94:61:30:bf:f6:86:8e:33:cb:06:a4:ca:d4:2a:
                    98:85:d1:e8:7a:ea:ae:56:2c:5d:17:6f:e2:97:1a:
                    91:a2:d0:13:ab:25:6f:92:9a:98:7e:cd:e2:98:cb:
                    45:1e:67:3c:7e:c8:fa:88:37:99:df:00:76:63:67:
                    b5:a7:32:e4:c1:64:73:b7:23:8e:8d:86:46:52:24:
                    9e:d7:96:20:a7:d6:2c:7c:cd:50:0b:d1:44:01:d2:
                    cc:3b:60:03:b7:7d:fe:29:c2:00:28:57:fa:a0:91:
                    8d:81:71:80:50:0c:d7:98:53:43:d4:8b:ad:b3:a1:
                    41:1c:58:0e:8a:01:ec:b4:2e:ce:4d:3a:4c:32:af:
                    11:c6:6c:97:e8:bd:f1:0a:45:3c:4f:1b:61:17:5f:
                    c9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
            X509v3 Subject Key Identifier: 
                98:62:B2:F8:2A:FB:B3:E3:52:73:60:5F:BF:C0:1D:2F:29:58:1B:97
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.7
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.afh.nat.tn, DNS:afh.nat.tn
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
                    Timestamp : Aug  8 08:57:59.444 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:1A:55:D9:21:26:4B:60:9C:66:7A:18:3B:
                                44:50:F9:90:1F:6C:3F:53:4E:F9:05:53:D9:45:17:0A:
                                A0:C1:E2:39:02:20:06:19:89:76:89:E0:1E:8B:E0:67:
                                D7:82:3C:23:FF:8B:83:B9:98:8D:87:A4:2F:5F:9B:46:
                                75:2E:16:91:5E:81
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:
                                47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34
                    Timestamp : Aug  8 08:57:59.339 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:0B:1E:0D:DC:DC:87:57:4E:CA:B7:35:B7:
                                C8:3B:E4:34:68:98:74:48:1F:7C:B2:A0:F8:99:F5:7F:
                                1D:58:A4:F6:02:21:00:F2:58:83:D5:10:0B:3E:32:7D:
                                D4:47:68:36:51:DD:A4:61:36:6E:DE:35:89:25:BA:24:
                                43:FE:D3:D1:96:68:06
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Aug  8 08:57:59.341 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:61:74:8A:AA:8F:51:B9:BD:40:9F:49:41:
                                34:2B:09:7D:27:93:F9:87:00:5F:C2:EE:3F:26:66:0C:
                                DA:04:19:B4:02:21:00:8D:B3:1F:73:30:96:36:3F:DE:
                                75:28:15:C6:FC:27:E3:8D:F8:61:D4:28:1F:22:EF:24:
                                02:73:76:64:0E:A9:8B
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        82:d0:12:f9:69:00:8b:cf:99:f9:fe:09:fc:09:56:5f:43:e2:
        42:45:65:5a:de:9c:5d:50:7c:d5:60:7c:1c:1d:6f:a1:51:8a:
        8b:b5:6a:3c:d5:bb:5f:ac:35:1f:24:8b:02:f9:fa:54:3b:e5:
        79:34:11:2d:8e:40:e5:22:d9:b4:21:c0:95:77:93:8b:2a:08:
        aa:a7:21:ee:cb:7d:83:b1:1a:6d:f1:19:f5:eb:1c:45:c1:66:
        3e:3d:36:71:94:d2:c1:c6:62:8c:5a:ef:77:32:9a:22:ce:a8:
        48:d6:51:88:95:91:db:14:62:2f:5e:ce:ff:4e:52:e8:99:a7:
        5c:e7:bc:1d:05:54:9d:f8:8f:98:7c:dc:94:15:bb:35:e9:ec:
        6c:b4:12:fe:c3:92:80:e6:23:a0:57:a7:cd:2a:6f:ce:f4:84:
        1c:b2:c1:9c:cf:f5:a2:1f:6f:b1:ac:86:d4:7a:3a:7d:7e:f6:
        f8:db:1d:5b:e4:0f:e3:00:86:19:d7:ef:2f:b8:e8:1a:25:b5:
        1b:81:0c:f4:41:7d:41:3e:54:02:cb:bc:fa:c5:43:92:b8:e9:
        cd:68:93:c7:0d:aa:94:f5:cb:3e:ae:a3:a6:7c:96:b0:90:7a:
        94:7b:6d:fc:7d:19:4e:6b:4e:64:e7:c1:2d:1a:d6:54:19:15:
        7c:50:c8:ed

Vulnerabilities

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2020(2)

CVE-2020-11023

6.9In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-11022

6.9In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

2019(1)

CVE-2019-11358

6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

2015(1)

CVE-2015-9251

6.1jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

41.226.27.153

Last Seen: 2025-04-28

GeneralInformation

WebTechnologies

OpenPorts

80 / tcp

2066407974 | 2025-04-23T03:41:36.874482

Hashes

443 / tcp

-1297435095 | 2025-04-28T17:10:48.863439

Hashes

Vulnerabilities

Products

Pricing

Contact Us

41.226.27.153

Last Seen: 2025-04-28

GeneralInformation

WebTechnologies

OpenPorts

80 / tcp 2066407974 | 2025-04-23T03:41:36.874482

Hashes

443 / tcp -1297435095 | 2025-04-28T17:10:48.863439

Hashes

Vulnerabilities All ports Port 443 Latest CVSS

Products

Pricing

Contact Us

80 / tcp

2066407974 | 2025-04-23T03:41:36.874482

443 / tcp

-1297435095 | 2025-04-28T17:10:48.863439

Vulnerabilities