GeneralInformation

Hostnames	ec2-54-164-238-81.compute-1.amazonaws.com ndcrimson.backend.newsdirect.com ndcrimson.convsys.newsdirect.com ndcrimson.encsys.newsdirect.com ndcrimson.newsdirect.com www.ndcrimson.newsdirect.com
Domains	amazonaws.com newsdirect.com
Cloud Provider	Amazon
Cloud Region	us-east-1
Cloud Service	EC2
Country	United States
City	Ashburn
Organization	Amazon Technologies Inc.
ISP	Amazon.com, Inc.
ASN	AS14618

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443

80 / tcp

-1908519854 | 2025-03-13T02:28:36.607807

Hashes

hash

514675838

http.dom_hash

1239617585

http.html_hash

-1908519854

http.server_hash

1841725594

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Date: Thu, 13 Mar 2025 02:28:36 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Server: nginx/1.19.1
Location: https://54.164.238.81/

Vulnerabilities

443 / tcp

1301009318 | 2025-03-17T11:52:38.562630

Hashes

hash

-481990007

http.dom_hash

783547998

http.favicon.hash

1854819545

http.html_hash

1301009318

http.server_hash

1841725594

http.title_hash

1719548365

News Direct

HTTP/1.1 200 OK
Date: Mon, 17 Mar 2025 11:52:38 GMT
Content-Type: text/html
Content-Length: 2324
Connection: keep-alive
Server: nginx/1.19.1
Last-Modified: Tue, 21 Nov 2023 03:01:16 GMT
ETag: "655c1d7c-914"
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ae:62:d4:66:83:b4:3f:06:ac:47:2e:c8:79:d1:9b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M03
        Validity
            Not Before: Dec  2 00:00:00 2024 GMT
            Not After : Dec 31 23:59:59 2025 GMT
        Subject: CN=ndcrimson.newsdirect.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:89:8c:99:c1:ff:e6:1c:2d:aa:69:6c:ce:fd:9c:
                    26:9d:71:d8:05:20:3d:32:7c:5e:ab:1d:6c:ce:61:
                    a4:27:29:3f:d0:70:07:71:98:7a:11:9e:b7:11:07:
                    ef:6c:a6:12:ce:f7:c7:1f:2e:aa:fc:ee:ea:b0:b4:
                    ac:80:5a:cc:f1:bb:b1:32:d5:a8:45:f6:8c:0e:67:
                    fc:20:03:a6:32:04:6c:6f:39:66:1d:0f:e9:88:69:
                    5b:9d:f8:97:a1:6f:ed:4f:b1:11:52:96:82:47:35:
                    7c:4d:98:6a:f1:70:34:01:a5:7e:5b:2a:bb:04:89:
                    9b:d4:53:01:04:f3:cd:f5:2f:dd:01:9e:89:f1:2b:
                    02:98:81:70:a1:14:85:94:60:47:c5:4a:b6:88:87:
                    aa:48:9c:ce:9d:3f:25:16:69:a8:58:8b:2d:4f:ff:
                    99:fc:aa:62:4f:21:16:c1:93:c2:91:b1:7e:28:12:
                    e4:66:f8:10:d6:c8:aa:a7:1e:6e:50:ad:9b:c8:1f:
                    be:79:07:33:1e:f6:d3:44:93:f8:79:2e:66:9d:e5:
                    76:39:b8:63:9c:01:fc:3e:2b:b6:d4:2a:d4:02:4b:
                    2d:de:46:4c:20:ba:78:a1:99:53:b5:52:4a:c1:be:
                    b0:f4:47:7b:94:4c:87:14:e9:5f:c0:ab:aa:b2:1e:
                    2a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                55:D9:18:5F:D2:1C:CC:01:E1:58:B4:BE:AB:D9:55:42:01:D7:2E:02
            X509v3 Subject Key Identifier: 
                AF:0A:A7:C5:BA:CF:6E:28:EC:6D:74:17:98:CC:49:EA:EB:98:1E:B7
            X509v3 Subject Alternative Name: 
                DNS:ndcrimson.newsdirect.com, DNS:ndcrimson.encsys.newsdirect.com, DNS:ndcrimson.convsys.newsdirect.com, DNS:ndcrimson.backend.newsdirect.com, DNS:www.ndcrimson.newsdirect.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m03.amazontrust.com/r2m03.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m03.amazontrust.com
                CA Issuers - URI:http://crt.r2m03.amazontrust.com/r2m03.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Dec  2 10:10:26.186 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:BA:C1:A7:67:11:9E:1B:A5:DF:DE:18:
                                8F:0D:1E:EC:4E:26:91:75:31:EC:DF:97:1A:78:CA:BE:
                                51:78:89:22:00:02:20:37:E1:6A:44:28:5B:22:EE:CC:
                                EC:32:CC:E1:C5:AE:64:EC:EE:86:BF:20:E2:50:36:4B:
                                68:D8:C9:93:B4:7D:92
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : ED:3C:4B:D6:E8:06:C2:A4:A2:00:57:DB:CB:24:E2:38:
                                01:DF:51:2F:ED:C4:86:C5:70:0F:20:DD:B7:3E:3F:E0
                    Timestamp : Dec  2 10:10:26.120 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:6F:C1:E4:A2:DD:E1:D5:55:27:B7:1A:A7:
                                F7:4F:33:2F:E4:D6:68:D2:35:11:FA:AD:15:06:E1:17:
                                8E:80:41:97:02:21:00:C6:63:76:45:DD:4A:46:ED:4B:
                                46:EB:81:14:D1:EA:DB:8B:16:24:9A:6E:F0:E7:9A:24:
                                07:21:66:FC:E1:86:54
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A4:42:C5:06:49:60:61:54:8F:0F:D4:EA:9C:FB:7A:2D:
                                26:45:4D:87:A9:7F:2F:DF:45:59:F6:27:4F:3A:84:54
                    Timestamp : Dec  2 10:10:26.273 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:EA:D4:78:EF:70:5F:B0:C8:5E:E3:5A:
                                A1:2C:7D:7A:CE:68:34:E5:BD:C6:4B:6B:7C:90:22:E0:
                                2E:C0:E8:35:F9:02:20:23:53:EA:64:D8:5F:08:F6:30:
                                86:CA:12:73:83:27:3F:4C:9C:2E:93:CD:7B:E5:5C:EE:
                                9C:D7:A6:03:2A:BE:90
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        ac:5e:ad:ea:bb:8d:23:29:9c:7d:fc:8f:24:60:52:76:e4:5d:
        21:11:b1:33:e6:2b:df:d7:82:bf:8a:66:8e:da:1c:cc:0f:62:
        53:8c:6f:99:35:8b:af:5c:e4:26:97:55:f1:b1:b8:ec:15:1b:
        c2:43:95:60:92:21:5e:57:66:8b:2e:85:46:24:7a:c9:89:26:
        25:68:0d:87:88:25:cd:d4:55:fb:10:c0:0e:87:44:65:3f:91:
        b2:07:b7:3e:02:35:7e:b3:40:61:65:bf:03:5b:c2:2f:31:d6:
        97:c3:13:6e:9c:1e:31:b4:2a:92:cd:6f:98:ff:23:d4:d9:16:
        7b:78:ac:0d:3c:12:16:be:2e:a6:87:8a:2b:b6:54:72:3e:1c:
        1f:e0:a0:d3:fc:99:c8:e8:4b:e3:0d:0d:f9:a5:54:3c:f9:38:
        6d:91:36:ca:dc:3f:22:90:ed:8b:a6:00:70:54:2d:93:35:34:
        17:25:b9:5b:d3:d5:b9:c0:05:41:a4:76:d5:47:05:2c:0c:1e:
        5b:8f:c5:76:8c:f2:60:dc:21:31:13:41:d7:db:fa:a5:f6:8c:
        2f:f6:ff:cc:f5:f6:80:ae:92:e5:a5:d0:e3:ae:80:53:65:ec:
        17:3e:eb:f2:35:f0:6b:96:35:fd:0f:54:62:73:ca:9b:e4:60:
        04:49:ec:38

Vulnerabilities

54.164.238.81

Last Seen: 2025-03-17

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

-1908519854 | 2025-03-13T02:28:36.607807

Hashes

nginx1.19.1

443 / tcp

1301009318 | 2025-03-17T11:52:38.562630

Hashes

nginx1.19.1

Products

Pricing

Contact Us

54.164.238.81

Last Seen: 2025-03-17

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

80 / tcp -1908519854 | 2025-03-13T02:28:36.607807

Hashes

nginx1.19.1

443 / tcp 1301009318 | 2025-03-17T11:52:38.562630

Hashes

nginx1.19.1

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

-1908519854 | 2025-03-13T02:28:36.607807

443 / tcp

1301009318 | 2025-03-17T11:52:38.562630