GeneralInformation

Hostnames	panel.nexuscraft2.de threatoff.eu
Domains	nexuscraft2.de threatoff.eu
Country	Germany
City	Aachen
Organization	Threatoff
ISP	Tom Gewiese
ASN	AS215365
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443

80 / tcp

677579724 | 2025-03-20T09:51:40.079996

Hashes

hash

613553767

http.dom_hash

1239617585

http.html_hash

677579724

http.server_hash

967792298

http.title_hash

-1207101977

404 Not Found

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 20 Mar 2025 09:51:40 GMT
Content-Type: text/html
Content-Length: 564
Connection: keep-alive

Vulnerabilities

443 / tcp

1454334986 | 2025-03-24T10:54:16.715132

Hashes

hash

-1798035733

http.dom_hash

-978630322

http.favicon.hash

-456405319

http.html_hash

1454334986

http.robots_hash

-1022729730

http.server_hash

967792298

http.title_hash

1366908720

Pterodactyl

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Mon, 24 Mar 2025 10:54:16 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6InFJN1hwZUFhUDZtNFV4TXpZWGFTVWc9PSIsInZhbHVlIjoiTVNKS08wQzZsM0d3YmpWaTB3WkhJL09XeWI5aUg0c0ZmblA2RWJvd3Zsd2NSK1VacTFXZnlJZmRPNkRjVzF6QmhTTFlMU2lDQm5mYlZ1SmNTMmZqcFVFTFhkWnlxSXFPczd4MlkwSmFrbHVlbzlGeGtrOVM1VGc0VS9VYUQvcTYiLCJtYWMiOiJjYTIwNTkxYWIzZWMyYmM4MzFmOGIwMmQ5MTlhY2VjZDM4ZWEyZTQwYTcwZDY1MjNkNDNiYjJjMmE2OWE2YmU0IiwidGFnIjoiIn0%3D; expires=Mon, 24 Mar 2025 22:54:16 GMT; Max-Age=43200; path=/; secure; samesite=lax
Set-Cookie: pterodactyl_session=eyJpdiI6Imc1bml4R3VjOU1PSVZ5ajBUb0RKOVE9PSIsInZhbHVlIjoiR0FVMmphVTZNa1EraTFSUVVGVXVuZ0FJK280V3dFdWFpWlRqSXp4M3pSK2JzSVNOTXY5aFJUbWVIVFROOUttalN6ZTBBT1pXcEU2aGFUdTdVV0VLVVh1WFd2anFSVTVrVlQ5T09jam5weWFDZllpMW90NkhaRWRiVEw1ZXU3L1IiLCJtYWMiOiI4OTRmNGE4ZWYyMmQyNTI5N2JkYjQ0OGRmMjgyOGY4MDdiZjY0NzgxMjg5ZDg2ZDAxODg3NGE3ZGYxOGI5MTdhIiwidGFnIjoiIn0%3D; expires=Mon, 24 Mar 2025 22:54:16 GMT; Max-Age=43200; path=/; secure; httponly; samesite=lax

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:72:2c:f3:df:c3:63:5d:e0:7b:6c:e8:a3:80:cf:9c:ce:7a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Mar  8 16:54:04 2025 GMT
            Not After : Jun  6 16:54:03 2025 GMT
        Subject: CN=panel.nexuscraft2.de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:8c:65:20:65:dd:f3:d7:76:f2:2c:81:2f:
                    3e:ab:c3:f8:ce:6b:18:df:39:90:18:21:d9:72:b1:
                    10:a1:62:0b:c0:1b:38:33:7a:00:5f:e4:72:66:25:
                    92:fc:3f:68:69:2c:48:47:7f:09:ad:97:a9:aa:66:
                    a6:73:b7:12:29:ba:9e:ad:e8:90:31:f8:ff:3b:c1:
                    d3:a6:7e:5b:c0:17:ee:c8:21:90:d4:f1:9c:17:0f:
                    48:c3:e3:7f:ee:e8:d0:73:9b:65:80:c5:ff:33:95:
                    ac:0b:98:3b:9f:c9:c6:47:bb:a9:59:e2:76:6b:3f:
                    34:2f:fa:1d:f5:62:96:30:5f:e5:be:dc:f6:ce:53:
                    f5:a1:96:a7:71:3f:1c:57:c3:b5:b9:db:fa:df:a4:
                    eb:3b:7e:22:e0:32:76:c5:71:24:8d:35:84:08:7b:
                    73:79:29:6b:54:96:f6:85:0c:40:a0:90:0c:56:a1:
                    ae:fb:fd:9e:1f:d6:1b:1a:dd:63:4b:ec:d7:6b:5d:
                    16:93:d1:d2:af:f6:0c:06:67:af:92:e1:a2:60:3b:
                    09:ff:3c:94:2f:84:b2:2a:16:7d:67:d3:2a:f8:d8:
                    5d:09:23:6b:e3:83:89:67:f0:21:33:c6:e4:8a:4c:
                    8f:23:34:50:15:3a:cf:25:ec:04:d2:f7:94:e2:fa:
                    bf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                16:42:32:0B:60:01:34:05:4B:87:82:9C:AA:D5:43:79:17:9B:E3:45
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:panel.nexuscraft2.de
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Mar  8 17:52:34.373 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:37:90:C0:8F:84:3B:67:95:C9:D1:31:C5:
                                F2:C5:F7:F5:C7:78:98:12:AA:70:15:A5:A0:B5:90:48:
                                28:09:20:F4:02:21:00:99:5D:FA:38:E2:B4:59:8D:E1:
                                2B:3F:3C:C8:87:65:5C:1E:DD:BA:37:0B:A7:38:D3:55:
                                6B:E5:D4:29:C9:CB:C4
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Mar  8 17:52:34.744 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:E5:E9:DA:70:21:88:AC:8E:E3:3A:47:
                                2D:E8:31:35:AC:17:5D:01:FE:3A:DE:82:88:68:29:AD:
                                0D:FF:52:16:5E:02:20:02:42:18:8E:A2:5A:69:EE:BC:
                                07:85:7B:6E:86:8A:29:61:3D:CE:D1:EE:BF:18:C9:86:
                                AA:24:46:01:26:24:87
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        a7:b6:95:b6:0f:40:f0:55:35:00:fb:c5:9b:1f:7f:4c:e6:e5:
        d4:ff:53:a8:b9:23:8f:a3:d6:3e:5a:ba:b8:04:85:17:67:12:
        89:0b:89:4f:f3:45:0d:04:2e:be:4c:31:73:5d:2e:e6:ca:d6:
        61:62:91:57:cb:e9:02:fd:a7:88:ca:53:8b:64:cb:15:05:d0:
        8c:9e:90:0a:0a:fa:04:47:c3:a2:88:7b:34:6c:3d:05:01:04:
        0b:e6:d7:50:13:55:1d:3b:d0:85:90:d3:06:ba:c2:8e:84:5b:
        03:84:36:67:78:13:bf:3d:91:06:ee:3b:4b:31:f1:41:cf:4d:
        cf:1e:17:a2:21:23:cd:6a:3e:30:69:22:3f:7e:9d:9a:f3:d2:
        83:0b:04:0b:85:2f:53:26:ce:08:5a:8a:3d:b3:9f:bf:03:f2:
        7f:70:7e:99:06:59:ca:15:1d:85:fb:45:b5:e5:f3:1c:c2:83:
        d6:23:7a:28:48:9f:42:b4:7c:3c:09:6d:5a:de:d6:2a:b4:28:
        c2:03:d4:63:27:75:40:ad:2c:e1:a3:98:87:33:ae:be:4d:36:
        6a:08:ab:2c:16:25:83:02:9d:71:07:d4:a1:1d:70:1d:40:a2:
        24:a1:68:6e:94:19:34:14:da:b6:06:fb:be:4b:47:b8:8c:1e:
        83:57:f5:1d

Vulnerabilities

77.90.60.114

Last Seen: 2025-03-24

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

677579724 | 2025-03-20T09:51:40.079996

Hashes

nginx1.18.0

443 / tcp

1454334986 | 2025-03-24T10:54:16.715132

Hashes

nginx1.18.0

Products

Pricing

Contact Us

77.90.60.114

Last Seen: 2025-03-24

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

80 / tcp 677579724 | 2025-03-20T09:51:40.079996

Hashes

nginx1.18.0

443 / tcp 1454334986 | 2025-03-24T10:54:16.715132

Hashes

nginx1.18.0

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

677579724 | 2025-03-20T09:51:40.079996

443 / tcp

1454334986 | 2025-03-24T10:54:16.715132