GeneralInformation

Hostnames	ec2-44-239-126-133.us-west-2.compute.amazonaws.com certain.com
Domains	amazonaws.com certain.com
Cloud Provider	Amazon
Cloud Region	us-west-2
Cloud Service	EC2
Country	United States
City	Boardman
Organization	Amazon.com, Inc.
ISP	Amazon.com, Inc.
ASN	AS16509

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

2019(1)

CVE-2019-20372

5.3NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

OpenPorts

80 443

80 / tcp

372937653 | 2025-03-04T13:06:52.747993

Hashes

hash

-805414473

http.dom_hash

680947640

http.html_hash

372937653

http.server_hash

-452448439

http.title_hash

-813017994

No such app

HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store
Content-Type: text/html; charset=utf-8
Server: Heroku
Via: 1.1 spaces-router (bc46c658aac4)
Date: Tue, 04 Mar 2025 13:06:52 GMT
Content-Length: 555

443 / tcp

916028254 | 2025-03-18T02:31:42.992027

Hashes

hash

843863155

http.dom_hash

1239617585

http.html_hash

916028254

http.server_hash

532903735

http.title_hash

1964169606

401 Authorization Required

HTTP/1.1 401 Unauthorized
Content-Type: text/html
Date: Tue, 18 Mar 2025 02:31:05 GMT
Server: nginx/1.16.1
WWW-Authenticate: Basic realm="Restricted"
Content-Length: 581
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3a:6d:1b:5e:4a:ee:6b:f8:c3:7b:33:8c:ab:d9:a4
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K
        Validity
            Not Before: Sep 23 19:53:55 2024 GMT
            Not After : Oct 23 19:53:54 2025 GMT
        Subject: C=US, ST=California, L=San Francisco, O=Certain Inc, CN=*.certain.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:cf:e6:d8:40:38:70:c7:96:01:2d:fb:7d:8a:6a:
                    e5:6d:f4:22:1f:58:aa:0d:23:2a:4e:a1:20:69:c9:
                    65:d6:5e:f3:3a:03:ed:de:17:c4:67:12:77:87:3a:
                    06:ea:76:7d:f5:26:6a:51:ab:bc:18:3f:f7:43:49:
                    b8:cb:db:79:6a:36:d8:c1:c9:13:c3:68:8f:aa:59:
                    0f:d0:65:8b:f5:2f:4e:99:07:9b:57:d9:6e:1d:ab:
                    4d:87:a1:37:8d:51:03:d8:df:07:14:f0:80:ca:0e:
                    ac:1b:75:d4:d0:fb:a9:22:c6:cc:ae:06:28:f6:53:
                    1e:0a:a9:94:7e:66:d4:de:3a:99:a0:6c:fb:31:76:
                    e0:c5:a8:77:9e:3c:83:a3:a9:c8:91:aa:91:74:96:
                    03:c2:9a:44:85:74:3b:48:ed:59:28:95:cf:a5:5c:
                    12:cb:04:42:3d:7b:5e:56:09:f7:c9:88:a8:0b:cd:
                    8b:ec:c3:dc:5d:43:15:5b:cc:c9:86:09:84:57:33:
                    42:e6:47:b3:13:80:b2:92:9d:e6:88:87:de:cf:94:
                    ef:3f:28:93:5a:3d:0c:23:6b:e2:cf:9d:8b:87:c7:
                    6f:8f:39:b8:5d:86:d8:4b:1c:77:fa:ce:9f:3a:6c:
                    4c:59:2e:c9:b6:b1:a0:ac:73:fc:aa:df:e6:76:d1:
                    d6:ee:1c:22:51:06:36:59:6e:11:d3:f3:a0:75:66:
                    41:cf:1d:0f:b1:32:be:3b:dd:e5:da:27:e8:f0:08:
                    34:33:76:31:5b:46:dd:b4:1f:c3:a9:0a:6d:fd:dd:
                    98:98:fe:7b:97:8e:d6:8c:9c:2b:93:f8:3d:81:a6:
                    39:56:92:a1:fe:b2:78:46:50:c1:99:cd:a0:56:71:
                    5a:03:cd:01:7a:d7:84:2f:df:56:68:c6:ec:c3:5f:
                    77:e4:18:8b:9a:9d:8a:c0:0b:46:25:a1:9c:a4:8e:
                    31:92:4a:8f:95:56:94:5e:c4:3c:2e:1c:c0:c0:7e:
                    04:43:0a:db:54:0a:41:61:2a:de:6f:3b:d4:93:61:
                    8f:19:ca:a1:b4:99:fb:67:57:d3:fe:c6:85:4f:97:
                    72:cb:fc:d2:13:ed:b0:02:94:00:9c:34:d1:08:45:
                    58:c6:51:e2:7d:92:52:0a:31:3c:5f:e3:71:43:b8:
                    5b:27:dd:ee:e3:5d:3e:42:ba:ad:15:fb:fe:31:b2:
                    4e:26:b6:45:e5:e7:bc:88:3a:2c:84:8b:f3:83:1b:
                    fb:12:8f:2b:e8:a0:db:53:0e:31:2d:43:61:9a:4a:
                    0d:40:61:69:f6:2d:ba:41:f7:a6:2b:fc:9a:08:0a:
                    52:f9:0a:d5:36:1b:fa:3c:9d:9e:21:17:8f:1d:57:
                    47:e1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                E4:E3:0C:2E:A2:F9:BD:84:24:2A:51:44:92:90:00:0E:D5:1F:89:31
            X509v3 Authority Key Identifier: 
                82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Subject Alternative Name: 
                DNS:*.certain.com, DNS:certain.com
            Authority Information Access: 
                OCSP - URI:http://ocsp.entrust.net
                CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.entrust.net/level1k.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:
                                47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34
                    Timestamp : Sep 23 19:53:55.985 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:06:60:F4:45:23:9F:54:37:27:F9:EB:0D:
                                A1:9C:A1:2A:3E:3F:71:42:7E:49:1E:F6:6A:9D:D2:4E:
                                16:62:47:13:02:21:00:F4:76:6E:4A:86:B9:21:52:77:
                                1D:F4:8D:70:1E:41:91:35:57:3E:88:9E:25:74:F3:5E:
                                55:18:E5:09:44:1C:B6
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
                    Timestamp : Sep 23 19:53:56.005 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:6C:D9:F4:31:2B:54:C6:CE:6F:DE:E8:FB:
                                77:ED:77:10:B7:22:CB:B4:83:BE:3D:68:C8:4E:6F:BD:
                                3C:4D:1B:54:02:20:62:11:84:47:69:0B:6D:B3:4B:E5:
                                2F:53:0C:95:EA:36:31:E8:F0:58:23:54:0A:A3:B7:A2:
                                5E:A5:FF:A1:C6:E3
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 1A:04:FF:49:D0:54:1D:40:AF:F6:A0:C3:BF:F1:D8:C4:
                                67:2F:4E:EC:EE:23:40:68:98:6B:17:40:2E:DC:89:7D
                    Timestamp : Sep 23 19:53:55.751 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:18:30:9C:49:92:DD:68:7C:04:8F:02:3C:
                                DA:5B:33:BC:0D:AA:12:D1:00:05:0F:44:E3:7C:9F:99:
                                E7:F5:59:32:02:20:14:E1:69:01:9F:FA:03:DF:66:1E:
                                29:2D:F0:65:9E:03:91:25:68:A8:F9:31:B0:C5:24:79:
                                92:E1:A1:86:1E:2A
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        9a:7b:c9:80:66:cf:0a:dd:d4:00:62:4a:99:04:d8:28:d2:b2:
        c0:0d:f4:a4:02:bb:fe:16:12:12:5f:45:cf:a2:47:2f:bc:97:
        c1:aa:54:a8:6d:76:96:1c:a8:ac:5c:21:eb:36:0f:f6:7d:fb:
        87:27:06:0c:d9:0e:ae:fb:c7:66:f1:de:59:81:0e:58:4e:54:
        31:6a:bd:e8:ac:3f:d2:c4:3e:1b:42:6d:9e:95:da:9a:13:ca:
        4c:42:06:33:62:f4:81:4f:69:f1:65:11:ab:60:03:f7:dc:2e:
        e6:9d:03:2f:67:c4:40:2d:30:3e:60:89:a6:ed:21:94:69:09:
        b8:24:5a:92:e1:75:26:87:ff:57:fc:03:a3:35:95:c1:69:46:
        ee:0c:3c:7f:29:fb:29:5a:a6:b1:56:7f:1c:7c:b8:9a:66:9e:
        7e:11:e9:c0:d9:c1:3f:37:9e:84:5f:8b:67:14:77:3a:f0:ef:
        a2:fb:66:dc:f7:8f:3a:10:53:b7:09:35:bc:25:8f:24:b7:7c:
        7d:4c:73:d0:e8:5c:56:57:d4:07:23:74:37:db:28:84:f7:e1:
        e6:97:c8:b5:04:89:8c:c9:ce:6c:4e:6f:58:dd:a0:4b:81:57:
        12:26:f7:75:6f:65:c8:f4:77:be:97:d3:f3:6d:3f:65:81:cf:
        98:6a:d1:81

Vulnerabilities

3 1

44.239.126.133

Last Seen: 2025-03-18

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

372937653 | 2025-03-04T13:06:52.747993

Hashes

443 / tcp

916028254 | 2025-03-18T02:31:42.992027

Hashes

nginx1.16.1

Products

Pricing

Contact Us

44.239.126.133

Last Seen: 2025-03-18

Tags:

GeneralInformation

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

80 / tcp 372937653 | 2025-03-04T13:06:52.747993

Hashes

443 / tcp 916028254 | 2025-03-18T02:31:42.992027

Hashes

nginx1.16.1

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

372937653 | 2025-03-04T13:06:52.747993

443 / tcp

916028254 | 2025-03-18T02:31:42.992027