GeneralInformation

Hostnames	ec2-52-51-33-239.eu-west-1.compute.amazonaws.com mgm-dev.scholastic.co.uk mgm-staging.scholastic.co.uk
Domains	amazonaws.com scholastic.co.uk
Cloud Provider	Amazon
Cloud Region	eu-west-1
Cloud Service	EC2
Country	Ireland
City	Dublin
Organization	Amazon Data Services Ireland Limited
ISP	Amazon.com, Inc.
ASN	AS16509

WebTechnologies

JavaScript libraries

jQuery1.12.4

Programming languages

Ruby

Web frameworks

Ruby on Rails

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2020(2)

CVE-2020-11023

6.9In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-11022

6.9In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

2019(1)

CVE-2019-11358

6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

2015(1)

CVE-2015-9251

6.1jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

80 443

80 / tcp

974570904 | 2025-03-20T15:38:42.844968

Hashes

hash

-1966538075

http.dom_hash

-2060582466

http.html_hash

974570904

http.server_hash

-982608622

http.title_hash

-1030444411

403 Forbidden

HTTP/1.1 403 Forbidden
Server: awselb/2.0
Date: Thu, 20 Mar 2025 15:38:42 GMT
Content-Type: text/html
Content-Length: 520
Connection: keep-alive

443 / tcp

-799604519 | 2025-04-01T11:30:45.093468

Hashes

hash

-774791393

http.dom_hash

-445496972

http.favicon.hash

-1843987985

http.html_hash

-799604519

http.robots_hash

-1022729730

http.server_hash

-1030729059

http.title_hash

239745721

Welcome to Mary Glasgow Magazines - Mary Glasgow Magazines

HTTP/1.1 200 OK
Date: Tue, 01 Apr 2025 11:30:44 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Status: 200 OK
Cache-Control: max-age=0, private, must-revalidate
Referrer-Policy: strict-origin-when-cross-origin
Server-Timing: start_processing.action_controller;dur=0.01, sql.active_record;dur=634.83, transaction.active_record;dur=8.78, instantiation.active_record;dur=2.69, render_template.action_view;dur=1.10, render_partial.action_view;dur=523.71, cache_read.active_support;dur=3.73, read_fragment.action_controller;dur=4.39, cache_write.active_support;dur=2.63, write_fragment.action_controller;dur=3.07, render_layout.action_view;dur=250.15, process_action.action_controller;dur=783.30
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
X-Request-Id: e1cc39e1-4bbd-4038-8954-c27bd46bb522
link: <https://www.staging.scholastic.co.uk/web-assets/bundles/mgm/config-ddc4003c59848c0a014597d00dfbdd960db29805b3242f79062a8d661c63464d.css>; rel=preload; as=style; nopush,<https://www.staging.scholastic.co.uk/web-assets/bundles/core_sites/reset-439311c5f401f3216888f4c7558d05da7017c9c75b96a3c62e294448f448c2df.css>; rel=preload; as=style; nopush,<https://www.staging.scholastic.co.uk/web-assets/bundles/core_sites/forms-d46a142bf354550dfabfa4ec0774f7820cb17741de388ae847d4ad12bc0069ff.css>; rel=preload; as=style; nopush,<https://www.staging.scholastic.co.uk/web-assets/bundles/core_sites/icon_font-b20fcf1f365b193c1772f6399cc61b5f6a4358ba853247331436a92fb112904b.css>; rel=preload; as=style; nopush,<https://www.staging.scholastic.co.uk/web-assets/bundles/mgm/cms_components-d441732ab230bcbe678f151b8ffc623a2d02e8a091e6993ff1d4c121e7a27c51.css>; rel=preload; as=style; nopush
X-Download-Options: noopen
ETag: W/"470a593bc7dda32ef0dac7daa163a535"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: session_main_remotestaging=2f295dd4ee1dc50a936cec431611b0a7; domain=.mgm-staging.scholastic.co.uk; path=/; secure; HttpOnly; SameSite=None
Set-Cookie: session_main_remotestaging_legacy=2f295dd4ee1dc50a936cec431611b0a7; domain=.mgm-staging.scholastic.co.uk; path=/; secure; HttpOnly; SameSite=Lax
X-Powered-By: Phusion Passenger(R) 6.0.26
Server: nginx + Phusion Passenger(R) 6.0.26

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ec:08:5b:7f:01:8d:6f:4f:fd:ad:2f:d4:4c:a6:e7
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: May 21 00:00:00 2024 GMT
            Not After : Jun 19 23:59:59 2025 GMT
        Subject: CN=*.dev.scholastic.co.uk
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:e5:1c:aa:a8:aa:56:6f:7f:fc:fc:12:04:
                    c9:06:2f:94:81:da:b6:69:c4:ab:6c:e7:8f:70:0f:
                    86:05:b7:76:c7:49:4d:bf:e1:39:0f:44:77:00:90:
                    c9:f0:6a:41:a4:a1:f1:db:32:ca:ae:ed:8f:3f:6b:
                    75:eb:8b:88:de:dd:a1:01:81:2c:b6:3b:87:b1:6f:
                    6a:1c:be:94:26:6d:04:cb:f7:c5:86:0a:74:24:6a:
                    04:ee:f4:b9:a0:87:0e:7e:0f:9b:dd:70:b0:f7:da:
                    1a:0b:36:d7:da:83:c4:85:93:e7:ba:87:50:42:29:
                    af:3f:aa:64:0f:64:32:69:46:ac:14:db:f7:0a:1c:
                    e2:1a:4b:97:58:cc:74:19:43:6a:2a:bc:90:dd:bc:
                    16:32:e3:0d:ed:d2:40:0e:86:7a:d7:f5:77:8e:d6:
                    54:6f:6f:1b:d7:a6:e7:cd:e8:5a:bd:87:8b:64:16:
                    fe:12:ee:6f:1f:1a:b1:40:78:d3:6e:72:02:cc:fa:
                    f3:74:04:9c:70:83:84:c0:06:ad:2f:c4:8c:92:f9:
                    32:c6:41:94:52:92:83:d6:46:73:42:1c:ad:b2:f5:
                    0e:22:bf:7f:a8:69:d0:71:d4:f6:4a:5a:87:c3:88:
                    82:1e:cd:e7:f2:05:42:59:7a:bd:28:e2:b1:45:56:
                    95:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                DC:84:5E:45:E6:DE:73:69:BB:11:DA:F7:1F:6F:95:65:09:55:7A:55
            X509v3 Subject Alternative Name: 
                DNS:*.dev.scholastic.co.uk, DNS:*.mgm-staging.scholastic.co.uk, DNS:mgm-dev.scholastic.co.uk, DNS:*.mgm-dev.scholastic.co.uk, DNS:*.setanta-dev.scholastic.co.uk, DNS:*.ie-dev.scholastic.co.uk, DNS:*.ie-staging.scholastic.co.uk, DNS:*.setanta-staging.scholastic.co.uk, DNS:*.staging.scholastic.co.uk, DNS:mgm-staging.scholastic.co.uk
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : May 21 00:57:52.005 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F9:E5:21:E3:FA:42:06:C2:F2:B9:6B:
                                4E:B6:BC:0D:24:69:56:9C:93:4A:E5:AF:29:88:B3:3C:
                                BF:01:A1:74:D2:02:20:55:44:B7:96:A2:92:6B:EE:8E:
                                09:3D:CA:82:79:F1:1E:42:20:AB:B7:67:E9:4F:47:9E:
                                16:66:A0:C2:CC:F5:21
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : May 21 00:57:51.943 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:49:E3:FC:CA:19:E5:7D:55:B9:75:A6:E5:
                                BE:D6:06:1B:0B:37:DD:09:94:B6:6C:1B:9F:D6:18:15:
                                78:EF:2A:85:02:20:0E:A5:4E:00:1E:A0:C4:D8:EC:01:
                                B7:B3:AB:99:D1:F5:55:14:FE:DB:F2:70:0A:5D:F9:B1:
                                2E:70:28:EC:A6:1E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : May 21 00:57:51.959 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:36:C0:14:D9:CF:8C:C5:6B:F3:FC:29:05:
                                B1:C4:5F:08:B2:AB:00:25:E5:7E:56:8E:E1:D4:C5:2B:
                                6E:86:CD:4C:02:21:00:AE:F8:8A:C4:3D:AC:48:F9:00:
                                EB:F5:ED:AF:FA:2C:F8:08:DA:E7:69:0E:F4:32:9E:FE:
                                28:F6:F9:9D:B2:13:E2
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        0e:ec:e9:54:6f:78:72:24:b9:97:97:1c:1a:ae:14:d6:81:da:
        25:db:d5:93:fd:58:c0:9e:7c:d5:81:d3:e8:db:13:66:7d:f4:
        0a:fb:9d:f0:eb:5f:0e:27:4e:bd:47:3b:74:40:6e:ef:bc:75:
        52:1b:a3:83:c9:74:02:16:8c:79:c1:74:fe:ce:35:a8:13:06:
        60:c7:47:fe:eb:b6:0f:58:69:fb:72:7e:ea:1e:10:59:6f:9a:
        a8:39:45:17:1f:ac:55:6d:a8:4c:9e:97:0c:36:40:2b:3e:27:
        da:fb:38:11:72:ba:5f:c1:2f:4b:8b:dd:72:1b:ea:97:dc:3f:
        94:38:58:c2:7c:b5:14:6c:7b:c4:75:e1:5f:ad:04:6f:dc:b5:
        db:35:85:62:f5:75:ad:2f:5e:ba:51:30:03:2c:02:c4:c5:fa:
        93:b2:b0:30:77:e4:9d:6a:75:4b:8e:39:cf:95:4f:f9:f7:e1:
        c5:a0:c8:9e:7b:8f:d1:37:95:80:30:62:76:c0:82:c8:6b:75:
        11:d8:d4:57:29:e4:1a:9f:6c:28:97:16:77:f4:2f:e8:55:af:
        cb:29:bc:80:95:b6:e2:3e:01:89:09:64:bf:be:ac:23:58:9f:
        f4:c5:ec:15:b4:ed:c6:46:77:71:14:4d:14:2d:49:4f:d5:91:
        89:e6:4a:11

Vulnerabilities

52.51.33.239

Last Seen: 2025-04-01

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

80 / tcp

974570904 | 2025-03-20T15:38:42.844968

Hashes

AWS ELB2.0

443 / tcp

-799604519 | 2025-04-01T11:30:45.093468

Hashes

nginx

Products

Pricing

Contact Us

52.51.33.239

Last Seen: 2025-04-01

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

80 / tcp 974570904 | 2025-03-20T15:38:42.844968

Hashes

AWS ELB2.0

443 / tcp -799604519 | 2025-04-01T11:30:45.093468

Hashes

nginx

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

974570904 | 2025-03-20T15:38:42.844968

443 / tcp

-799604519 | 2025-04-01T11:30:45.093468