GeneralInformation

Hostnames	i-doit.com login.i-doit.com
Domains	i-doit.com
Country	Germany
City	Nürnberg
Organization	netcup GmbH
ISP	netcup GmbH
ASN	AS197540

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443

80 / tcp

589765266 | 2025-03-28T13:24:26.496461

Hashes

hash

-600535303

http.dom_hash

1239617585

http.html_hash

589765266

http.server_hash

967792298

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 28 Mar 2025 13:24:26 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://46.38.253.94/

Vulnerabilities

443 / tcp

-1874579317 | 2025-04-01T19:55:14.946382

Hashes

hash

486945456

http.dom_hash

1239617585

http.html_hash

-1874579317

http.server_hash

2022599536

http.title_hash

1964169606

401 Authorization Required

HTTP/1.1 401 Unauthorized
Date: Tue, 01 Apr 2025 19:55:14 GMT
Content-Type: text/html
Content-Length: 574
Connection: keep-alive
WWW-Authenticate: Basic realm="Nothing here"
Server: eval-downloads
Strict-Transport-Security: max-age=63072000

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fa:ae:b0:14:33:c0:d1:0b:99:f5:f7:2e:65:5d:d2
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
        Validity
            Not Before: Apr 29 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2025 GMT
        Subject: C=DE, ST=Nordrhein-Westfalen, O=synetics Gesellschaft f\xC3\xBCr Systemintegration mbH, CN=*.i-doit.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:19:75:f9:54:3a:6f:97:19:6f:79:97:28:
                    03:c4:b2:b9:f6:af:96:52:3d:a6:cf:86:31:94:c5:
                    46:dc:d7:96:bf:97:0d:b8:19:c2:74:c9:6a:67:e3:
                    3f:73:9f:4a:06:c1:da:82:79:c4:ec:71:4c:6a:ca:
                    81:7a:cb:be:27:0b:af:42:71:61:3d:75:5c:86:e4:
                    a3:a6:dc:e6:3f:25:19:f5:bb:43:6c:61:87:62:32:
                    17:8a:6a:9d:58:e6:91:48:6f:c9:f0:cb:1a:34:4d:
                    ab:4d:45:cf:43:85:41:8a:37:1f:f7:cb:49:b1:57:
                    95:55:18:ff:2b:13:4a:2a:3c:13:56:a7:4a:63:c9:
                    ef:a8:7d:2f:6f:20:a5:d0:4c:82:79:7a:e8:ea:49:
                    8e:5e:75:ab:29:9c:93:7a:13:0f:98:db:1d:30:ff:
                    be:b5:d9:fc:3e:95:bc:dc:1d:11:4f:55:c6:0e:de:
                    89:d7:4f:7d:19:98:4e:25:3f:ab:bb:72:92:e1:30:
                    2a:c9:48:27:fb:6a:a1:f3:33:e9:6a:68:ad:93:e0:
                    68:a3:47:8e:7f:b5:78:09:30:84:6f:e4:17:41:b9:
                    77:95:f3:63:8e:4c:2d:2d:7e:9b:d4:9f:1a:a7:d2:
                    3f:da:b3:95:fa:9b:25:b8:bf:c0:47:1d:d9:de:6d:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                17:D9:D6:25:27:67:F9:31:C2:49:43:D9:30:36:44:8C:6C:A9:4F:EB
            X509v3 Subject Key Identifier: 
                03:04:2D:B2:D0:E0:C0:BA:30:3B:23:6A:0D:2F:40:0F:CC:10:68:16
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.4
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.i-doit.com, DNS:i-doit.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Apr 29 13:58:46.940 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:DE:51:2D:9F:8C:2A:45:EC:7B:50:9E:
                                51:48:06:97:0C:E8:95:96:15:1B:5F:15:38:24:48:BD:
                                1D:B4:B4:DA:CF:02:20:2D:57:FF:4B:16:F2:C8:B8:8D:
                                7F:57:78:44:35:11:27:5D:A1:61:D9:21:9B:DE:30:52:
                                4F:48:E8:AC:31:37:AB
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Apr 29 13:58:46.849 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:88:EE:47:F3:F3:B8:8E:5A:52:3F:ED:
                                A9:80:4A:5C:F4:54:F6:22:06:A4:09:5B:9D:39:5A:E3:
                                44:53:84:29:DF:02:20:23:F8:BF:FC:4E:94:C3:1E:6A:
                                70:30:AD:CA:BB:87:CF:35:BF:BF:1A:E4:D0:99:FA:05:
                                12:3B:7B:09:28:36:9C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Apr 29 13:58:46.900 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:60:07:BD:58:9A:3C:BD:4A:AB:7E:3D:4D:
                                DF:6E:6D:2B:D1:B6:10:1C:15:CB:84:5F:18:53:9A:20:
                                2A:3D:A9:56:02:20:71:44:3D:F5:12:D6:F7:6F:11:F5:
                                B9:F0:4A:20:14:AB:1B:62:4B:49:2F:F4:75:24:34:19:
                                F5:B5:BB:DF:C8:D5
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        6b:64:7f:ac:e1:03:fd:27:bf:15:8c:30:e0:3d:b1:50:83:a0:
        9d:7e:ed:ad:e6:e7:de:f3:7e:2e:3e:00:80:f1:cb:2c:33:5a:
        16:1d:2f:ae:08:fc:e0:dd:34:6c:52:18:e2:4e:82:7c:f6:40:
        a5:68:02:f7:05:15:30:4c:7e:85:7a:9e:89:39:77:c6:27:50:
        c2:74:d6:ff:ba:a6:a7:67:d4:2b:50:e7:e9:cc:2a:d6:df:8f:
        c7:43:8d:9a:87:2f:c1:65:61:0c:fb:d3:41:2c:a9:66:a7:f9:
        93:b1:df:8f:03:66:b0:39:c0:34:07:0b:0e:fb:1c:97:f9:15:
        06:39:e8:2f:62:1d:fd:f7:99:b1:44:bd:d6:70:38:fd:c5:54:
        a7:a0:eb:a8:6b:c4:ab:27:fa:27:33:e0:bf:57:1d:d8:ff:03:
        d1:4b:29:b7:a0:ad:ee:f8:51:4b:d7:fd:37:d4:a3:56:c1:ca:
        84:f8:a0:4b:0e:44:46:ed:1d:ef:07:9d:9d:c0:12:86:8d:57:
        9a:d7:55:7d:61:25:2b:a6:ad:08:2a:fa:c7:77:8c:f5:b3:9d:
        12:5f:ea:23:7e:fb:02:fb:39:9c:6b:31:18:0c:15:cf:55:21:
        c2:4e:a2:54:e7:2a:fc:ce:52:b6:72:13:68:77:c7:41:02:12:
        53:38:5b:12

46.38.253.94

Last Seen: 2025-04-01

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

589765266 | 2025-03-28T13:24:26.496461

Hashes

nginx1.18.0

443 / tcp

-1874579317 | 2025-04-01T19:55:14.946382

Hashes

Products

Pricing

Contact Us

46.38.253.94

Last Seen: 2025-04-01

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Latest CVSS

OpenPorts

80 / tcp 589765266 | 2025-03-28T13:24:26.496461

Hashes

nginx1.18.0

443 / tcp -1874579317 | 2025-04-01T19:55:14.946382

Hashes

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

589765266 | 2025-03-28T13:24:26.496461

443 / tcp

-1874579317 | 2025-04-01T19:55:14.946382