GeneralInformation

Hostnames	smadav.win mail.smadav.win www.smadav.win
Domains	smadav.win
Country	Singapore
City	Singapore
Organization	OVH Singapore PTE. LTD
ISP	OVH SAS
ASN	AS16276

WebTechnologies

JavaScript libraries

jQuery

jQuery UI

Programming languages

PHP

UI frameworks

Bootstrap

Webmail

RoundCube

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2013(4)

CVE-2013-4365

7.5Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors.

CVE-2013-2765

5.0The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header.

CVE-2013-0942

4.3Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2013-0941

2.1EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.

2012(3)

CVE-2012-4360

4.3Cross-site scripting (XSS) vulnerability in the mod_pagespeed module 0.10.19.1 through 0.10.22.4 for the Apache HTTP Server allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2012-4001

5.0The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to arbitrary hosts via unspecified vectors, as demonstrated by requests to intranet servers.

CVE-2012-3526

5.0The reverse proxy add forward module (mod_rpaf) 0.5 and 0.6 for the Apache HTTP Server allows remote attackers to cause a denial of service (server or application crash) via multiple X-Forwarded-For headers in a request.

2011(2)

CVE-2011-2688

7.5SQL injection vulnerability in mysql/mysql-auth.pl in the mod_authnz_external module 3.2.5 and earlier for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the user field.

CVE-2011-1176

4.3The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileges by leveraging the root uid and root gid of an mpm-itk process.

2009(2)

CVE-2009-2299

5.0The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via an HTTP request with a large Content-Length value but no POST data.

CVE-2009-0796

2.6Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI.

2007(1)

CVE-2007-4723

7.5Directory traversal vulnerability in Ragnarok Online Control Panel 4.3.4a, when the Apache HTTP Server is used, allows remote attackers to bypass authentication via directory traversal sequences in a URI that ends with the name of a publicly available page, as demonstrated by a "/...../" sequence and an account_manage.php/login.php final component for reaching the protected account_manage.php page.

OpenPorts

21 25 443 587 993 3306 10000 33060

21 / tcp

2142287764 | 2025-04-04T01:54:09.164715

220 FTP_Upload_Smadav_2019127032019
530 Login incorrect.
530 Please login with USER and PASS.
211-Features:
 EPRT
 EPSV
 MDTM
 PASV
 REST STREAM
 SIZE
 TVFS
211 End

25 / tcp

712869755 | 2025-03-21T14:42:25.730471

220 smadav.win ESMTP
250-smadav.win
250-PIPELINING
250-8BITMIME
250-STARTTLS
250-AUTH CRAM-MD5
250 SIZE 0

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e4:29:a6:5f:61:57:58:34:f4:8f:ac:e7:02:02:6d:cf:56:a2:6a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, ST=New York, L=Brooklyn, O=ucspi-ssl research laboratory, CN=ucspi-ssl research ca
        Validity
            Not Before: Aug  6 13:12:04 2024 GMT
            Not After : Oct 19 13:12:04 2029 GMT
        Subject: C=US, ST=New York, L=Brooklyn, O=ucspi-ssl research laboratory, CN=localhost
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:89:df:10:d7:9e:04:26:e6:fc:fc:19:cc:07:c1:
                    e1:38:49:03:74:90:7e:2c:4a:11:92:45:a5:b0:79:
                    5f:b6:01:1f:68:3b:1f:76:53:1a:f0:df:53:ed:3d:
                    f2:6b:57:7e:c4:5f:9b:ee:32:3f:7d:ed:66:a9:01:
                    46:bc:50:51:ca
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: 
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:localhost, IP Address:0.0.0.0, IP Address:0:0:0:0:0:0:0:0
            X509v3 Authority Key Identifier: 
                DirName:/C=US/ST=New York/L=Brooklyn/O=ucspi-ssl research laboratory/CN=ucspi-ssl research ca
                serial:50:A2:A4:9D:6A:94:1A:2A:1F:B4:72:C5:43:A1:F7:AF:60:39:00:12
            X509v3 Subject Key Identifier: 
                B7:EA:5B:5A:EF:18:E8:80:43:FC:3B:F5:A2:12:B6:B2:14:94:9F:5B
    Signature Algorithm: ecdsa-with-SHA256
    Signature Value:
        30:45:02:21:00:b5:60:54:9b:59:c1:0b:0b:4d:91:0c:9c:64:
        a2:41:1f:71:49:8d:c4:75:38:ab:ad:0b:95:ae:2a:86:ea:50:
        89:02:20:05:0d:54:c4:98:99:76:7a:e4:73:74:73:58:87:de:
        a8:28:25:4f:f7:a1:c8:0a:9a:c5:48:e9:0a:48:80:14:07

443 / tcp

932759495 | 2025-04-14T18:43:28.374474

Hashes

hash

-458677064

http.dom_hash

320789302

http.favicon.hash

-1754690812

http.html_hash

932759495

http.server_hash

-760551630

http.title_hash

400465097

Roundcube Webmail Smadav Win :: Welcome to Roundcube Webmail Smadav Win

HTTP/1.1 200 OK
Date: Mon, 14 Apr 2025 18:43:28 GMT
Server: Apache/2.4.62 (Ubuntu)
Set-Cookie: roundcube_sessid=todljgdjjfvhq685u76ngjbkl9; path=/; secure; HttpOnly
Expires: Mon, 14 Apr 2025 18:43:28 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Mon, 14 Apr 2025 18:43:28 GMT
X-Frame-Options: sameorigin
Content-Language: en
Vary: Accept-Encoding
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7a:e4:bd:b0:4c:dc:0c:ae:1f:5c:9f:1b:10:3b:f8:96:b4
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E5
        Validity
            Not Before: Apr  3 04:16:56 2025 GMT
            Not After : Jul  2 04:16:55 2025 GMT
        Subject: CN=mail.smadav.win
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:63:4f:2f:9c:b4:3b:ac:8b:a3:61:3c:ce:ae:bd:
                    b0:b8:53:0e:8d:55:9f:ae:97:0d:71:99:a3:01:9b:
                    07:6f:0b:13:e6:b4:79:28:d6:a5:9d:d8:46:2f:ad:
                    08:c0:55:7f:76:90:88:1f:d8:38:ef:47:ad:3d:1e:
                    50:6c:9b:12:0b
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                37:E9:43:08:F9:67:53:07:A0:26:B5:CB:43:DF:FF:BC:C3:F7:E2:FF
            X509v3 Authority Key Identifier: 
                9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D
            Authority Information Access: 
                OCSP - URI:http://e5.o.lencr.org
                CA Issuers - URI:http://e5.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:mail.smadav.win
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://e5.c.lencr.org/53.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Apr  3 05:15:26.876 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:D8:32:23:14:EC:CE:87:A6:EC:9A:44:
                                DF:B1:C9:51:3D:E3:4D:BA:D6:BD:27:C7:19:FF:D9:A4:
                                A2:98:6B:4A:C4:02:21:00:D5:F4:01:27:7A:00:18:7D:
                                D0:D6:ED:1D:AE:DE:6F:FA:A3:60:DF:58:01:EE:FB:39:
                                E4:38:7F:03:2F:52:CF:0D
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : AF:18:1A:28:D6:8C:A3:E0:A9:8A:4C:9C:67:AB:09:F8:
                                BB:BC:22:BA:AE:BC:B1:38:A3:A1:9D:D3:F9:B6:03:0D
                    Timestamp : Apr  3 05:15:27.593 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:D2:A8:71:F4:81:0E:B6:ED:CE:7F:BB:
                                35:25:4A:EB:FD:21:7F:CD:2F:5B:D9:A3:AF:B8:55:17:
                                F8:0E:36:92:7D:02:21:00:C6:BA:9B:D9:E4:8E:2B:F3:
                                5C:D1:3B:97:48:F0:82:9B:45:CF:18:0C:38:FC:56:72:
                                04:19:61:DF:17:D8:90:D4
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:64:02:30:52:cd:d0:96:fd:35:93:01:75:0b:5c:0a:21:98:
        d7:b5:e3:b9:90:43:ad:a1:0f:73:34:e6:33:33:11:76:bf:87:
        80:80:49:ae:8d:08:d4:95:39:08:3c:cd:52:47:9c:2e:02:30:
        6d:2e:af:7a:36:8a:87:cf:fa:fc:40:ff:b7:0c:d8:b1:f6:30:
        51:53:86:ed:43:22:17:ec:42:78:8e:b0:88:0c:f6:b3:54:e1:
        59:44:0b:a5:98:6c:92:9d:c2:10:ec:6f

Vulnerabilities

3 7 2

587 / tcp

712869755 | 2025-03-28T17:12:31.932980

220 smadav.win ESMTP
250-smadav.win
250-PIPELINING
250-8BITMIME
250-STARTTLS
250-AUTH CRAM-MD5
250 SIZE 0

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e4:29:a6:5f:61:57:58:34:f4:8f:ac:e7:02:02:6d:cf:56:a2:6a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, ST=New York, L=Brooklyn, O=ucspi-ssl research laboratory, CN=ucspi-ssl research ca
        Validity
            Not Before: Aug  6 13:12:04 2024 GMT
            Not After : Oct 19 13:12:04 2029 GMT
        Subject: C=US, ST=New York, L=Brooklyn, O=ucspi-ssl research laboratory, CN=localhost
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:89:df:10:d7:9e:04:26:e6:fc:fc:19:cc:07:c1:
                    e1:38:49:03:74:90:7e:2c:4a:11:92:45:a5:b0:79:
                    5f:b6:01:1f:68:3b:1f:76:53:1a:f0:df:53:ed:3d:
                    f2:6b:57:7e:c4:5f:9b:ee:32:3f:7d:ed:66:a9:01:
                    46:bc:50:51:ca
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: 
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:localhost, IP Address:0.0.0.0, IP Address:0:0:0:0:0:0:0:0
            X509v3 Authority Key Identifier: 
                DirName:/C=US/ST=New York/L=Brooklyn/O=ucspi-ssl research laboratory/CN=ucspi-ssl research ca
                serial:50:A2:A4:9D:6A:94:1A:2A:1F:B4:72:C5:43:A1:F7:AF:60:39:00:12
            X509v3 Subject Key Identifier: 
                B7:EA:5B:5A:EF:18:E8:80:43:FC:3B:F5:A2:12:B6:B2:14:94:9F:5B
    Signature Algorithm: ecdsa-with-SHA256
    Signature Value:
        30:45:02:21:00:b5:60:54:9b:59:c1:0b:0b:4d:91:0c:9c:64:
        a2:41:1f:71:49:8d:c4:75:38:ab:ad:0b:95:ae:2a:86:ea:50:
        89:02:20:05:0d:54:c4:98:99:76:7a:e4:73:74:73:58:87:de:
        a8:28:25:4f:f7:a1:c8:0a:9a:c5:48:e9:0a:48:80:14:07

993 / tcp

362744253 | 2025-04-02T18:37:24.465538

* OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
* CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ AUTH=PLAIN AUTH=LOGIN
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:00:0a:a5:8b:7c:6c:ca:39:1d:6d:25:2a:5d:d3:3a:31:41:be:9a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=ID, ST=Indonesia, L=BeautyCountry, O=company, OU=IMAP server, CN=smadav.win/emailAddress=postmaster@smadav.win
        Validity
            Not Before: Mar 17 08:51:25 2025 GMT
            Not After : Mar 17 08:51:25 2026 GMT
        Subject: C=ID, ST=Indonesia, L=BeautyCountry, O=company, OU=IMAP server, CN=smadav.win/emailAddress=postmaster@smadav.win
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:c4:3d:83:c2:22:4b:73:f0:4b:58:d6:e8:09:bb:
                    d2:0c:43:63:f0:f0:3e:27:8d:cd:ea:f5:67:00:25:
                    d3:a1:b5:eb:6c:96:ba:c8:8f:6b:7d:02:a7:c9:fa:
                    18:f8:79:11:4c:64:f9:01:c8:b7:e0:3b:c5:98:db:
                    48:6a:4a:9f:f5:31:a0:65:04:fc:f3:41:5e:ae:8e:
                    97:42:ed:86:8f:7c:74:41:b9:48:b0:be:37:c0:ec:
                    87:9c:2a:02:e0:a9:77:a6:88:c2:13:65:a5:30:83:
                    2d:53:2e:48:ee:c9:70:5b:a1:30:5a:36:6c:8c:24:
                    20:7c:e3:be:05:8c:61:e3:05:70:b8:77:83:67:c3:
                    65:ca:88:c1:0b:01:b5:21:c4:64:f8:04:f5:da:69:
                    e7:25:16:71:d7:87:5d:95:79:bb:76:26:f4:6c:ba:
                    1f:18:18:4d:a3:ef:11:35:7a:e4:c2:7a:d5:bb:be:
                    cc:9d:06:2b:ea:7b:92:f2:6f:df:86:16:2f:5e:c9:
                    47:49:66:a1:f9:37:d1:3f:a5:56:d3:b5:19:24:83:
                    43:43:5a:5c:73:40:9a:68:72:37:09:0e:ee:58:3a:
                    49:c2:71:ab:69:20:89:be:48:8e:7e:99:95:7d:8a:
                    23:31:23:a4:fc:9c:57:4f:7c:f8:d1:fa:db:1f:bd:
                    46:4d:e7:a2:0b:76:05:fb:75:02:d8:6e:44:9e:0c:
                    43:57:5a:31:83:76:e9:9a:3a:07:67:27:58:ad:23:
                    7d:c8:1a:99:54:1e:71:05:4e:e1:73:7d:d7:eb:c9:
                    46:80:23:e3:44:c7:3d:66:1d:56:a7:bd:2c:12:be:
                    68:9f:a2:c0:7c:3c:88:dc:d6:e0:f8:e3:63:be:99:
                    f7:64:19:ac:a4:4c:a9:26:88:3d:f1:be:c8:c9:27:
                    53:1d:a1:e5:f2:5b:62:86:8d:86:1c:9a:a5:43:4d:
                    ab:7a:9b:66:87:6d:2c:cc:8d:e5:58:35:58:21:ef:
                    03:f7:e2:f8:ff:86:1d:86:a5:6e:ed:84:7b:68:35:
                    ca:30:40:ea:27:b8:89:77:53:d8:d4:dd:7c:93:47:
                    19:66:08:52:13:15:80:96:04:87:22:11:a4:ce:d1:
                    88:8f:69:10:71:c8:e6:b9:ec:81:9b:82:eb:2f:8d:
                    9d:2f:e0:72:b4:d1:36:b8:d4:1c:b0:a8:52:7a:04:
                    20:69:cb:a5:31:c5:02:64:b4:68:c5:87:8d:42:50:
                    46:29:63:88:b0:a4:29:50:ef:75:27:db:ac:60:26:
                    72:e2:76:ff:07:22:81:ef:40:d8:a0:01:d1:bd:18:
                    20:ba:b7:99:55:de:5d:7b:9b:78:c5:93:31:2b:4b:
                    a7:8b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Netscape Cert Type: 
                SSL Server
            X509v3 Subject Key Identifier: 
                E8:BD:00:D5:E2:37:48:00:2A:32:9C:9D:A6:E5:A6:5E:5C:34:0B:B3
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        4e:11:17:70:95:c2:62:7d:42:0a:15:79:25:d1:b0:57:e1:b3:
        5a:82:c6:7d:7c:95:0b:4d:30:77:a4:b1:9f:1f:48:7e:32:91:
        8d:3c:37:27:dd:b0:15:f9:e2:2e:37:77:34:81:ba:d1:45:dc:
        bd:81:84:a4:54:98:07:c1:2f:07:6d:91:94:ec:0e:68:19:59:
        c0:59:1c:28:4f:b4:d6:ac:37:c2:c5:95:9e:ea:12:1a:c2:0f:
        e9:6e:db:f3:d9:b6:41:fa:29:00:23:98:42:1c:d5:60:fe:bd:
        ba:2b:55:8b:9c:fa:f8:c7:3b:bf:6b:01:d0:7e:19:7b:56:e7:
        6e:21:f8:dd:06:63:b8:83:ec:af:02:0e:ec:f4:59:2b:a8:9c:
        cc:2b:38:f7:8f:58:b8:0f:d3:4c:21:48:1a:b3:80:97:3b:cd:
        d4:ad:30:de:2c:83:e0:f5:9a:3e:b4:fc:fc:20:c2:d0:d1:d6:
        5b:47:44:be:d8:bf:02:37:d9:a3:1a:9f:40:f9:d0:41:5a:b1:
        f1:e3:c9:52:fd:27:bd:57:83:99:98:83:ab:92:0d:e6:4f:26:
        7e:ae:ee:e7:5c:6a:61:bd:c6:d2:eb:e1:84:6b:37:ad:cb:ee:
        74:0e:df:17:9a:21:44:52:f0:fb:b8:49:0c:5f:29:29:50:bf:
        db:77:5f:bb:0c:3d:7d:3a:5c:f8:8f:51:f8:59:9f:8e:c8:e3:
        3d:8a:c7:89:64:97:ad:14:e9:37:96:ac:dd:b4:37:e9:ab:a8:
        b5:1c:d2:0c:f4:ce:7b:bf:2e:04:b1:9a:f9:08:00:8d:fb:1b:
        1a:ac:28:18:45:16:ec:6c:55:51:a6:de:f8:75:67:d5:83:da:
        bf:ac:9a:c4:1a:7d:1b:ba:bb:d5:6b:8c:c8:66:18:7b:ff:4c:
        ff:b2:d4:9c:0a:1d:c3:f4:2d:ae:cd:7e:58:ef:8e:94:21:8b:
        94:f4:85:35:91:2e:54:a5:ae:10:11:19:83:66:50:15:5b:5c:
        56:31:28:54:d8:55:7c:54:cd:bd:17:72:0e:76:f7:c2:35:ba:
        ff:bc:06:5e:d2:a0:f6:01:a4:4f:2e:d5:e2:c4:7b:88:c1:82:
        35:df:66:36:17:f0:69:7c:cb:ee:55:88:ff:da:57:fb:43:bf:
        a3:82:aa:f8:4a:1d:04:18:b0:ea:a3:a3:59:6a:b8:39:d3:54:
        c0:ac:6d:eb:c7:87:c1:21:94:c8:23:49:3e:1a:e6:20:04:e0:
        ab:8a:ec:fa:42:50:15:43:95:a4:8c:01:e6:50:46:90:eb:af:
        c1:68:ac:e4:45:d8:31:03:dd:38:4a:ee:7c:65:f2:70:1e:ac:
        25:70:7a:70:1f:90:b9:7e

3306 / tcp

923442282 | 2025-04-12T14:30:59.476372

MySQL:
  Error Message: Host '224.177.106.216' is not allowed to connect to this MySQL server
  Error Code: 1130

10000 / tcp

-1244309438 | 2025-04-04T09:40:17.441844

Hashes

hash

-685089065

http.dom_hash

907682094

http.favicon.hash

-95050582

http.html_hash

-1244309438

http.server_hash

511324727

http.title_hash

1072598638

HTTP/1.0 200 Document follows
Date: Fri, 4 Apr 2025 09:40:16 GMT
Server: MiniServ
Connection: close
Auth-type: auth-required=1
Set-Cookie: redirect=1; path=/; secure; httpOnly
Set-Cookie: testing=1; path=/; secure; httpOnly
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; frame-src 'self'; child-src 'self'
X-Content-Type-Options: nosniff
X-no-links: 1
Content-type: text/html; Charset=UTF-8

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3f:25:b7:c3:a8:a3:53:74:a2:78:35:2d:ce:40:83:a5:20
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Jan 15 22:48:18 2025 GMT
            Not After : Apr 15 22:48:17 2025 GMT
        Subject: CN=www.smadav.win
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9b:2c:2e:89:f9:7c:be:e6:ec:ff:bf:87:2d:3c:
                    23:fb:bf:8b:3f:03:65:db:f1:b8:5e:6c:ab:2c:f2:
                    39:ce:83:65:2a:60:af:ed:18:69:0a:47:cf:21:92:
                    5f:79:f5:83:1c:7d:79:33:13:e9:56:46:dd:05:3c:
                    d0:0b:b0:68:46:d2:33:a0:b9:f5:59:ef:87:d2:aa:
                    be:de:5d:ef:b9:91:2c:2c:3a:5b:56:ae:f3:94:80:
                    f1:af:e4:a1:c3:33:4c:cc:10:10:8a:dc:f6:f6:a7:
                    29:35:42:24:95:c0:94:b8:44:95:ef:22:ae:66:20:
                    a3:63:c7:0e:38:5c:8e:d9:e0:15:de:5e:e1:1a:29:
                    a9:bd:f9:58:16:e4:39:f5:4d:38:4d:f0:79:30:7d:
                    97:0c:5e:80:b5:b7:e9:69:51:b5:6c:86:b6:ac:00:
                    ed:98:01:2c:6b:92:e7:d0:83:2e:cc:4e:f7:fc:2c:
                    5b:a9:e8:2a:ed:11:5f:a4:f5:d0:e2:ac:4f:b1:5a:
                    fa:bd:55:a7:60:21:53:37:be:6d:63:46:81:df:3b:
                    72:c2:63:38:e3:1e:0f:62:c2:79:07:50:09:da:26:
                    94:0c:e2:49:bd:8b:cb:d3:79:ca:46:4b:60:20:f4:
                    73:b6:2f:40:4d:8d:9a:0e:6d:9e:88:68:8a:91:05:
                    a6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                D0:29:09:FE:F2:0A:8B:50:32:3B:BF:AF:5C:E1:CD:FB:3D:8D:D2:E5
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:smadav.win, DNS:www.smadav.win
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Jan 15 23:46:49.123 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C7:23:B7:F7:ED:34:52:FC:6C:6A:85:
                                CC:C1:D4:2F:56:8F:9C:91:62:D7:0B:5D:54:11:73:10:
                                58:29:A7:42:46:02:21:00:BE:14:A5:C8:F1:CD:67:02:
                                03:F7:F0:84:E7:B0:6B:B1:98:36:F5:15:4B:47:8F:9B:
                                5A:74:21:9D:EF:57:33:81
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D:
                                0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04
                    Timestamp : Jan 15 23:46:49.279 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:AC:B8:8D:A5:07:AD:39:6D:0C:16:AF:
                                92:17:51:E2:CE:70:43:90:F4:B4:1E:37:C7:64:82:72:
                                3C:6C:EA:52:20:02:21:00:B9:BB:0B:8F:40:14:9D:ED:
                                12:8E:E6:63:A6:D9:70:C6:69:9C:39:70:56:CF:98:81:
                                62:B3:D8:FD:1C:11:B2:77
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        c2:df:d2:64:85:c8:06:b6:47:cd:2d:2d:62:30:d0:eb:a0:5c:
        ff:14:91:53:cc:cb:6f:7d:35:64:ac:2e:ca:fa:92:b8:ae:10:
        69:0b:8c:fd:87:1a:aa:e7:7f:a7:b3:61:9f:9e:93:df:e6:39:
        50:dd:e6:eb:fc:db:d7:59:44:76:ae:30:55:bb:1d:01:ae:6e:
        f7:6e:06:69:35:73:2f:54:a4:cf:21:c5:86:d3:1e:36:e6:5f:
        b3:e6:25:b5:3b:40:d2:88:a9:d6:67:8c:48:76:ac:a1:23:74:
        1a:65:21:5c:e8:a5:6f:09:80:1d:71:42:e8:1e:77:23:e5:ba:
        da:43:36:df:5a:41:7b:b7:6f:e5:e7:e7:21:ae:39:3b:f2:01:
        21:8b:58:e8:aa:46:a4:16:b3:51:7b:c4:fe:8c:1d:8e:5a:b8:
        f0:70:8f:ba:ed:95:fe:61:5e:57:c4:27:5e:c4:4d:48:57:e6:
        25:80:f2:d6:92:66:e2:e4:e2:e2:48:a8:0a:f5:11:d7:1e:15:
        02:8c:01:9e:39:1c:9e:e6:cc:9a:81:df:e6:6a:0a:95:9b:9e:
        54:ea:6a:5c:d8:ec:83:c8:a3:a2:12:60:66:c9:0d:1a:d9:47:
        32:af:15:f9:08:f0:f9:76:55:1f:42:f6:cd:20:36:f6:f5:09:
        9f:62:e6:56

33060 / tcp

-795948505 | 2025-04-11T17:46:54.995039

MySQL X Protocol:
  tls: False
  authentication.mechanisms:
    MYSQL41
    SHA256_MEMORY
  doc.formats: text
  client.interactive: False
  compression:
    algorithm:
      deflate_stream
      lz4_message
      zstd_stream
  node_type: mysql
  client.pwd_expire_ok: False

51.79.145.132

Last Seen: 2025-04-14

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

21 / tcp

2142287764 | 2025-04-04T01:54:09.164715

25 / tcp

712869755 | 2025-03-21T14:42:25.730471

443 / tcp

932759495 | 2025-04-14T18:43:28.374474

Hashes

Apache httpd2.4.62

587 / tcp

712869755 | 2025-03-28T17:12:31.932980

993 / tcp

362744253 | 2025-04-02T18:37:24.465538

3306 / tcp

923442282 | 2025-04-12T14:30:59.476372

MySQL

10000 / tcp

-1244309438 | 2025-04-04T09:40:17.441844

Hashes

Webmin

33060 / tcp

-795948505 | 2025-04-11T17:46:54.995039

MySQL X Protocol

Products

Pricing

Contact Us

51.79.145.132

Last Seen: 2025-04-14

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

21 / tcp 2142287764 | 2025-04-04T01:54:09.164715

25 / tcp 712869755 | 2025-03-21T14:42:25.730471

443 / tcp 932759495 | 2025-04-14T18:43:28.374474

Hashes

Apache httpd2.4.62

587 / tcp 712869755 | 2025-03-28T17:12:31.932980

993 / tcp 362744253 | 2025-04-02T18:37:24.465538

3306 / tcp 923442282 | 2025-04-12T14:30:59.476372

MySQL

10000 / tcp -1244309438 | 2025-04-04T09:40:17.441844

Hashes

Webmin

33060 / tcp -795948505 | 2025-04-11T17:46:54.995039

MySQL X Protocol

Products

Pricing

Contact Us

Vulnerabilities

21 / tcp

2142287764 | 2025-04-04T01:54:09.164715

25 / tcp

712869755 | 2025-03-21T14:42:25.730471

443 / tcp

932759495 | 2025-04-14T18:43:28.374474

587 / tcp

712869755 | 2025-03-28T17:12:31.932980

993 / tcp

362744253 | 2025-04-02T18:37:24.465538

3306 / tcp

923442282 | 2025-04-12T14:30:59.476372

10000 / tcp

-1244309438 | 2025-04-04T09:40:17.441844

33060 / tcp

-795948505 | 2025-04-11T17:46:54.995039