GeneralInformation

Hostnames

ec2-52-29-3-132.eu-central-1.compute.amazonaws.com
mydutyfree.net

Domains

amazonaws.com mydutyfree.net

Cloud Provider

Amazon

Cloud Region

eu-central-1

Cloud Service

EC2

Country

Germany

City

Frankfurt am Main

Organization

A100 ROW GmbH

ISP

Amazon.com, Inc.

ASN

AS16509

WebTechnologies

Analytics

Google Analytics

Tag managers

Google Tag Manager

OpenPorts

80 443 10050

80 / tcp

-1908519854 | 2025-04-03T13:10:38.852095

Hashes

hash

547108044

http.dom_hash

1239617585

http.html_hash

-1908519854

http.server_hash

1841725594

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.19.1
Date: Thu, 03 Apr 2025 13:10:38 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://52.29.3.132/

Vulnerabilities

443 / tcp

-585032262 | 2025-04-05T05:15:17.179838

Hashes

hash

-268718569

http.dom_hash

-1715136508

http.favicon.hash

803359151

http.html_hash

-585032262

http.robots_hash

-1689556359

http.server_hash

1841725594

http.sitemap_hash

447698079

Official website of the pre-ordering goods in duty-free ➦ Mydutyfree ✈

HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 05 Apr 2025 05:15:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: session_id=0a170217ic46stq2q07jjtf7k5; path=/; domain=.mydutyfree.net
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: location=403df5579ace356877dcbb3f62eb8bbf97379934dd13ca2365487b2b398c2187a%3A2%3A%7Bi%3A0%3Bs%3A8%3A%22location%22%3Bi%3A1%3Bi%3A1%3B%7D; expires=Mon, 05-May-2025 05:15:06 GMT; Max-Age=2592000; path=/; domain=.mydutyfree.net; HttpOnly; SameSite=Lax
Set-Cookie: lang=e355f8e00be8822d2fd404479e35a83315518b7c497f870a18078a4c1f0f241fa%3A2%3A%7Bi%3A0%3Bs%3A4%3A%22lang%22%3Bi%3A1%3Bs%3A2%3A%22en%22%3B%7D; expires=Sun, 05-Apr-2026 05:15:06 GMT; Max-Age=31536000; path=/; domain=.mydutyfree.net; HttpOnly; SameSite=Lax
Set-Cookie: currency=2198cbe8b192bf302be87091bd23b0a811766f683e365a4d07111f45af9ae6a3a%3A2%3A%7Bi%3A0%3Bs%3A8%3A%22currency%22%3Bi%3A1%3Bs%3A3%3A%22EUR%22%3B%7D; expires=Mon, 05-May-2025 05:15:06 GMT; Max-Age=2592000; path=/; HttpOnly; SameSite=Lax
Set-Cookie: carts=56b51df8b40c70a2cfee6e45fe313a87d0f27b450215c9ae526c400f8975dc33a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22carts%22%3Bi%3A1%3Bs%3A177%3A%22%7B%22458%22%3A%7B%22user_id%22%3Anull%2C%22parent_order_id%22%3Anull%2C%22store_id%22%3A458%2C%22products_ids%22%3A%22%5B%5D%22%2C%22quizzes_poll_ids%22%3A%22%5B%5D%22%2C%22discount_code%22%3Anull%2C%22created_at%22%3Anull%2C%22updated_at%22%3Anull%2C%22to_remind%22%3A0%7D%7D%22%3B%7D; expires=Sun, 05-Apr-2026 05:15:06 GMT; Max-Age=31536000; path=/; domain=.mydutyfree.net; HttpOnly; SameSite=Lax
Set-Cookie: _csrf=750716c48c3c40ef8975644d57f32eaa3cfb6ec27d8460546607f807fc52d29ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22T3nk59X2uDA04DDp-KOKkVFYCvkjdqJ7%22%3B%7D; path=/; HttpOnly; SameSite=Lax
Access-Control-Allow-Origin: *

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b9:49:35:31:e8:74:e1:8c:1c:c6:04:d4:12:2a:92:07
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
        Validity
            Not Before: Jun 14 00:00:00 2024 GMT
            Not After : Jun 15 23:59:59 2025 GMT
        Subject: C=UA, ST=Kyiv, O=MAIDYUTIFRI, TOV, CN=*.mydutyfree.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:52:7d:4b:2e:f0:05:99:86:a3:0c:68:33:
                    79:11:15:7f:99:b1:06:e5:28:2e:95:21:45:a7:41:
                    de:a4:eb:3e:f4:cb:d1:fd:e5:a4:c0:83:bd:5e:27:
                    75:71:1e:08:b3:f5:c6:78:25:b1:a7:ad:d0:c7:a1:
                    2f:af:9a:18:de:61:11:d1:e6:f5:c7:5c:06:15:71:
                    f1:a2:5f:d0:70:ee:c2:a0:72:fd:73:8b:06:3a:a6:
                    e5:b2:8b:25:5b:ee:81:ab:86:8a:8e:ee:db:f2:a9:
                    45:97:9d:1a:55:21:1a:b3:0b:60:2a:fe:67:d3:f3:
                    7f:f4:01:a9:4b:ab:6e:e1:d6:5a:b6:c7:35:48:d4:
                    43:c8:38:27:45:07:7a:f6:47:4a:1a:de:f7:4c:25:
                    34:17:dd:a6:88:c5:39:74:dd:47:7a:62:38:7e:c2:
                    59:04:3a:a0:27:4f:04:7e:27:ab:4e:36:af:5b:06:
                    25:a5:1d:f5:82:c6:64:bd:72:4c:8e:eb:aa:73:cb:
                    5b:a0:a4:74:db:24:bf:46:29:68:ca:d2:78:b3:85:
                    0a:b6:77:1e:be:bd:96:62:2c:49:27:14:7f:52:2e:
                    87:e6:66:c0:99:2b:90:5f:de:a5:b7:0b:a9:b9:84:
                    b3:c8:8c:81:47:74:31:51:bc:b0:50:41:ba:cc:0f:
                    46:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                17:D9:D6:25:27:67:F9:31:C2:49:43:D9:30:36:44:8C:6C:A9:4F:EB
            X509v3 Subject Key Identifier: 
                DD:48:E8:E1:1F:A1:18:28:4A:E2:F7:E2:7E:38:83:8B:01:CF:42:00
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.4
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.mydutyfree.net, DNS:mydutyfree.net
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Jun 14 17:28:07.779 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:3F:C3:32:B7:83:89:71:2C:43:F5:53:6C:
                                4A:1E:4C:25:61:64:73:BE:21:0D:FF:55:35:C8:28:1F:
                                BC:5E:55:A8:02:20:46:46:32:90:4D:AA:62:45:74:1C:
                                40:C8:B7:95:9D:A1:0F:F0:43:9C:90:FD:8D:FB:D4:11:
                                5E:35:52:42:04:21
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Jun 14 17:28:07.687 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:90:50:3B:14:2B:61:20:D6:5F:2E:B5:
                                D2:70:9A:A5:DE:B0:E1:0F:E8:47:24:79:9F:25:B3:92:
                                0B:8B:DF:8A:0E:02:20:6A:BD:A1:1D:96:6E:61:40:0D:
                                0C:1F:CD:0B:7B:43:DB:A0:B8:73:40:7F:3B:BA:55:22:
                                25:26:F9:F7:67:D3:0A
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Jun 14 17:28:07.686 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:6A:04:B1:D6:CF:CD:16:3C:A5:C3:BD:13:
                                F5:AD:25:DC:BF:DF:16:9A:D7:02:7A:89:80:A8:1F:26:
                                B3:DA:EF:69:02:20:1A:3A:82:20:09:DA:3B:EF:F1:8C:
                                37:61:C4:A6:D9:6C:D9:97:49:3D:FE:DA:6F:0C:7E:42:
                                13:46:25:A4:CC:A5
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        6b:db:46:b2:6b:58:8a:88:96:56:1a:40:e8:7f:98:1e:73:d8:
        0d:8a:94:d5:44:a7:e6:6c:23:bf:66:be:de:d7:cc:65:b6:5a:
        2d:01:4e:c2:35:3f:9a:ab:e5:73:29:57:9d:78:9d:6d:a9:ab:
        cd:d1:f6:51:f8:1d:71:38:bd:a3:6a:1b:3b:92:33:09:15:ba:
        82:e1:38:39:64:09:11:3b:de:9a:b1:7d:6a:c2:97:40:d7:5c:
        44:d6:ca:25:f3:1f:84:ee:c5:ed:27:ac:ac:6d:54:97:bb:43:
        22:2e:42:d6:49:07:0d:41:c6:0d:e1:f1:33:fe:12:f7:33:89:
        b4:c6:8f:6f:56:4d:51:04:b8:04:76:e0:6e:69:ff:e8:c9:7f:
        92:57:7f:5b:be:d0:fc:4e:f4:4b:8f:9b:8c:d6:8c:5e:b1:93:
        94:d5:02:ef:25:44:2a:bf:45:86:1e:4f:e4:8f:cf:dc:40:b3:
        3b:f6:57:8a:c0:38:16:7c:09:8c:66:8e:4c:0c:cc:aa:9e:bd:
        40:a4:4a:1e:93:51:d2:7b:34:84:19:dd:76:75:af:7d:2d:fd:
        d4:b7:6a:1b:a5:b8:aa:3e:8a:c1:fc:20:8f:28:e0:19:56:30:
        b1:2f:46:4c:5d:13:f3:b7:9c:48:c7:74:a0:02:1b:22:a8:41:
        93:96:0e:ff

Vulnerabilities

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

52.29.3.132

Last Seen: 2025-04-06

Tags:

GeneralInformation

WebTechnologies

OpenPorts

80 / tcp

-1908519854 | 2025-04-03T13:10:38.852095

Hashes

nginx1.19.1

443 / tcp

-585032262 | 2025-04-05T05:15:17.179838

Hashes

nginx1.19.1

Vulnerabilities

Products

Pricing

Contact Us

52.29.3.132

Last Seen: 2025-04-06

Tags:

GeneralInformation

WebTechnologies

OpenPorts

80 / tcp -1908519854 | 2025-04-03T13:10:38.852095

Hashes

nginx1.19.1

443 / tcp -585032262 | 2025-04-05T05:15:17.179838

Hashes

nginx1.19.1

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

Products

Pricing

Contact Us

80 / tcp

-1908519854 | 2025-04-03T13:10:38.852095

443 / tcp

-585032262 | 2025-04-05T05:15:17.179838

Vulnerabilities