GeneralInformation

Hostnames	ec2-52-88-3-65.us-west-2.compute.amazonaws.com loyalty.icmcontrols.com loyalty-test.icmcontrols.com
Domains	amazonaws.com icmcontrols.com
Cloud Provider	Amazon
Cloud Region	us-west-2
Cloud Service	EC2
Country	United States
City	Boardman
Organization	Amazon Technologies Inc.
ISP	Amazon.com, Inc.
ASN	AS16509

WebTechnologies

JavaScript libraries

jQuery3.3.1

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2020

CVE-2020-11023

6.9In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-11022

6.9In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

2019

CVE-2019-11358

6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

OpenPorts

80 443

80 / tcp

0 | 2025-02-22T05:37:51.352157

Hashes

hash

-1293820708

http.dom_hash

http.html_hash

HTTP/1.1 503 Service Unavailable: Back-end server is at capacity
Content-Length: 0
Connection: keep-alive

443 / tcp

797060049 | 2025-02-28T20:46:36.539410

Hashes

hash

1507659401

http.dom_hash

897784489

http.favicon.hash

-2108138687

http.html_hash

797060049

http.server_hash

869690771

http.title_hash

973198489

ICM Contractor Loyalty Program - Login

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Date: Fri, 28 Feb 2025 20:46:36 GMT
Server: Apache
transfer-encoding: chunked
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3a:ea:1f:3a:50:0b:dd:13:c9:be:1b:77:13:65:fa
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M03
        Validity
            Not Before: Jan 20 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2026 GMT
        Subject: CN=loyalty.icmcontrols.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:0f:0c:21:9d:5f:ad:af:85:4a:18:2c:08:
                    b0:1e:28:bf:df:29:35:09:5f:5c:d9:c6:f2:54:49:
                    7a:b8:0d:0f:ee:ed:4f:b5:a2:bf:45:b3:9c:4f:ac:
                    3f:99:3e:62:17:24:b8:4c:7f:60:d0:0f:dd:92:c8:
                    b1:e7:e5:f0:b3:79:fd:3b:a2:2e:b1:b8:cf:74:37:
                    ce:6a:12:98:57:11:6a:44:e1:81:56:59:54:31:7a:
                    40:99:0b:bc:fb:fd:a0:b0:65:a0:05:7c:77:5e:69:
                    ed:e0:00:da:4a:21:1e:9a:31:b6:d5:50:6c:8e:e9:
                    3e:17:43:25:4a:d9:51:4e:25:f5:48:db:54:4d:47:
                    60:f8:8f:94:12:e4:bc:4b:53:0c:c9:65:43:86:8a:
                    c4:dc:a3:87:13:36:15:9e:fa:ac:bd:2c:f9:16:fc:
                    a8:84:dc:13:ea:eb:2f:a5:01:e3:26:3a:6f:ea:e0:
                    12:65:6a:49:d3:06:bf:72:9a:d2:d2:42:1f:c0:1b:
                    0a:2f:d7:c9:de:0f:71:a5:24:4e:20:3c:d7:f8:b5:
                    02:d3:a9:3d:41:6e:f4:26:fc:15:b4:d9:8a:e7:3c:
                    3d:12:75:66:b3:88:cc:90:e1:05:a6:91:d6:b9:4a:
                    0c:56:46:9b:59:5d:22:a2:a2:8c:82:12:36:68:06:
                    7b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                55:D9:18:5F:D2:1C:CC:01:E1:58:B4:BE:AB:D9:55:42:01:D7:2E:02
            X509v3 Subject Key Identifier: 
                65:F3:84:19:5F:41:99:0B:94:96:B6:76:CF:01:25:57:88:92:B0:83
            X509v3 Subject Alternative Name: 
                DNS:loyalty.icmcontrols.com, DNS:loyalty-test.icmcontrols.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m03.amazontrust.com/r2m03.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m03.amazontrust.com
                CA Issuers - URI:http://crt.r2m03.amazontrust.com/r2m03.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77:
                                E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6
                    Timestamp : Jan 20 01:38:11.078 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:13:FF:1F:A7:82:F9:FE:4D:1B:76:FF:29:
                                99:AF:94:23:EA:D2:91:02:08:39:77:E8:14:82:3B:1B:
                                73:F9:A7:B6:02:21:00:D2:30:3E:FC:21:40:09:45:5D:
                                39:A1:45:35:C8:FF:51:BD:A1:86:DD:E0:08:29:57:C4:
                                2C:B6:2F:77:E5:57:15
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
                    Timestamp : Jan 20 01:38:11.064 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:D2:02:40:4E:17:BD:FD:F7:58:FF:19:
                                23:A9:E5:10:2D:75:A4:C5:B8:1F:69:AA:CC:D9:D8:0B:
                                93:39:1F:28:B0:02:21:00:92:35:3D:75:A1:71:72:9D:
                                9E:F9:46:0E:49:B7:C5:9A:2B:37:82:7C:D3:73:A4:4D:
                                A5:FF:B0:F7:E4:15:B5:49
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
                                5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
                    Timestamp : Jan 20 01:38:11.088 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:45:12:D5:A9:FC:F7:D7:AB:26:5D:08:B8:
                                84:14:F7:84:38:8B:AF:BE:04:43:85:5C:CD:7D:F8:10:
                                07:FD:B7:1A:02:21:00:88:47:6F:3E:01:A1:7F:BF:6D:
                                22:1F:C2:84:93:9B:DC:E8:01:81:BC:CB:5A:26:ED:84:
                                7C:21:5D:54:98:65:26
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        07:b2:a6:ba:55:0d:10:4e:47:b5:7d:4d:05:02:52:76:75:c2:
        c0:cb:1a:e8:bb:3e:d7:b3:ab:cd:e0:4b:b9:b1:c9:58:87:98:
        4d:80:25:70:5c:28:32:ab:d0:45:be:3c:ab:66:c1:93:b3:41:
        af:7e:fd:aa:81:2c:58:1d:ca:1b:cf:1f:70:04:56:c3:a6:f7:
        b7:8e:de:97:2e:96:e0:65:e0:d6:8a:f2:3a:d7:f5:86:9f:d3:
        3f:1f:06:f7:79:8e:4f:19:15:b0:9d:64:7e:23:d8:72:e6:12:
        88:79:51:c8:19:fc:3e:5b:ce:17:e1:1f:b5:83:38:1f:f4:11:
        32:ab:35:18:5c:ea:40:5d:4c:1b:ac:e4:e3:65:a0:09:90:be:
        da:1f:1d:d1:9b:7a:3c:1f:a6:c8:38:1b:ea:b4:2c:9e:fb:2c:
        55:70:dc:c8:9f:39:60:5b:b9:4b:58:60:53:bb:4e:9a:2a:17:
        2b:d6:d9:87:49:0f:a2:c0:75:7f:7e:18:9d:64:f8:df:46:8e:
        aa:d8:11:d4:2f:04:cb:bd:77:d9:b8:13:4e:5f:c6:6d:0e:95:
        7e:02:51:79:59:c0:ef:0f:eb:b9:49:31:73:2b:f7:f9:46:af:
        e8:79:3a:0a:99:1b:26:3e:65:da:11:4a:e8:bd:94:89:6e:03:
        22:26:d3:f4

CVE-2020-11023 CVE-2020-11022 CVE-2019-11358

52.88.3.65

Last Seen: 2025-02-28

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

80 / tcp

0 | 2025-02-22T05:37:51.352157

Hashes

443 / tcp

797060049 | 2025-02-28T20:46:36.539410

Hashes

Products

Pricing

Contact Us

52.88.3.65

Last Seen: 2025-02-28

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

80 / tcp 0 | 2025-02-22T05:37:51.352157

Hashes

443 / tcp 797060049 | 2025-02-28T20:46:36.539410

Hashes

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

0 | 2025-02-22T05:37:51.352157

443 / tcp

797060049 | 2025-02-28T20:46:36.539410