GeneralInformation

Hostnames	epay.bg www.epay.bg
Domains	epay.bg
Country	Bulgaria
City	Sofia
Organization	Datamax Online Payment Systems
ISP	Datamax JSC
ASN	AS35464

WebTechnologies

JavaScript libraries

jQuery3.6.0

UI frameworks

Bootstrap3.4.1

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2024(1)

CVE-2024-6484

6.4A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an <a> tag due to inadequate sanitization. This vulnerability could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.

OpenPorts

80 443

80 / tcp

-2100514759 | 2025-03-21T00:37:06.976745

Hashes

hash

89437787

http.dom_hash

1239617585

http.html_hash

-2100514759

http.server_hash

-1340961475

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 21 Mar 2025 00:37:06 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://epay.bg//

443 / tcp

-724134569 | 2025-03-29T10:20:11.568054

Hashes

hash

1579768599

http.dom_hash

-46379782

http.favicon.hash

239060791

http.html_hash

-724134569

http.robots_hash

841015348

http.server_hash

-1340961475

http.title_hash

-313636184

ePay.bg

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 29 Mar 2025 10:20:11 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 32492
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=0,no-cache,no-store,must-revalidate
Pragma: no-cache
Set-Cookie: epay3_session=1fd552c31b38f9747b89704620f38f0ed3d2459f391279c971d6faf646ce60fd; path=/v3main; Secure; HttpOnly
Set-Cookie: epay3lang=bg; path=/

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d2:30:97:ec:48:6b:2a:c2:ea:fa:ad:2d:cc:fd:2a:2e
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
        Validity
            Not Before: Jul 25 00:00:00 2024 GMT
            Not After : Jul 27 23:59:59 2025 GMT
        Subject: CN=www.epay.bg
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:a4:ce:38:8b:6c:9b:c6:d2:cc:55:63:35:
                    b2:53:0e:55:ba:16:66:39:4e:aa:96:fd:c2:1b:f3:
                    05:c3:d7:58:31:8f:84:6d:c2:b8:23:bf:15:13:b9:
                    f9:2c:5a:8b:a1:f2:72:f7:3e:27:4e:83:d6:b0:ca:
                    46:7a:55:53:04:a5:d1:f1:94:a8:2e:e4:63:4e:2f:
                    f6:95:82:99:4f:0b:f5:59:91:c4:95:90:0f:d4:8e:
                    3a:88:97:ce:e3:db:de:4f:33:6d:64:76:5e:85:7a:
                    0d:ff:1a:e2:e2:48:82:11:78:5e:51:ad:2f:47:42:
                    89:6f:91:79:2e:d0:e0:85:f2:60:c7:1f:b7:78:3f:
                    81:a9:61:eb:c3:84:54:45:ea:08:c5:e8:cb:48:27:
                    e1:a1:fb:23:c8:85:bd:04:72:53:83:25:78:83:8b:
                    d7:c6:09:fd:5d:15:77:14:bd:d5:f2:9b:64:c6:ea:
                    23:95:b4:17:d7:90:71:49:0f:f8:69:d8:e6:2e:76:
                    c7:8c:c7:1c:e2:85:71:fb:cf:db:a0:a7:a5:6b:3e:
                    f0:7a:1f:82:c7:7d:9e:6d:47:48:c8:ea:ad:7a:52:
                    a2:58:10:95:02:ce:d0:65:a8:f6:b9:23:66:72:2c:
                    c8:82:98:61:03:b1:54:d0:00:c6:4a:6c:43:6f:a5:
                    c3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
            X509v3 Subject Key Identifier: 
                55:05:4A:4A:7F:6D:20:4E:B3:DD:BC:AD:2B:FD:76:A0:3C:6A:AE:AA
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.7
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:www.epay.bg, DNS:epay.bg
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
                    Timestamp : Jul 25 12:47:05.694 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:99:4D:96:7B:70:49:EE:50:1B:2A:22:
                                A4:7A:54:0D:E1:A5:11:95:05:71:06:BE:97:91:CF:8F:
                                10:CA:81:3D:51:02:21:00:CF:E6:62:2C:4A:0F:3B:B9:
                                1B:2D:B1:CF:3A:2E:6A:5B:F1:79:E5:FC:EA:6F:2D:07:
                                DA:E1:82:3C:36:22:31:05
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:
                                47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34
                    Timestamp : Jul 25 12:47:05.660 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:71:C8:91:33:9E:FB:2A:F3:3D:93:1E:5E:
                                61:02:2D:36:B0:05:F7:8A:C0:29:88:96:A5:6E:1D:9C:
                                CB:CE:9C:60:02:20:0C:84:3D:6C:78:44:00:1D:19:B5:
                                26:86:E4:7A:2B:A4:96:45:5C:B8:27:75:6E:DF:9B:8A:
                                A1:87:36:43:3E:32
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Jul 25 12:47:05.659 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:0C:0C:01:86:CD:FE:D3:B9:31:DD:E0:EA:
                                CC:17:44:16:91:CB:E7:5D:DA:30:B5:9E:52:6A:F2:05:
                                E0:74:87:EE:02:20:33:D3:CE:CF:D1:F0:41:EA:FD:28:
                                EB:DC:96:6A:EC:6A:20:67:B5:EE:3E:AF:79:E2:17:C5:
                                3B:D5:C1:E5:21:68
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        0b:7d:76:ec:9d:53:12:40:9a:97:8a:07:13:83:97:bf:9c:e7:
        cb:26:d3:09:07:d2:97:42:bd:e5:8e:74:9c:48:43:55:59:13:
        f4:02:6f:ac:0f:76:53:4a:96:af:b6:0a:fa:97:a7:69:38:67:
        cd:3b:89:7d:ba:87:53:6a:4e:f8:c0:f5:02:c6:90:c7:3e:bb:
        f4:4a:e8:b9:97:e4:04:f6:67:cd:33:2a:a2:b4:6a:c6:23:b4:
        44:52:ff:08:03:41:eb:e9:ff:4b:ab:ec:6c:c8:a0:9e:27:68:
        50:1f:11:d5:2f:4a:ee:01:aa:b0:76:1b:eb:77:13:03:c6:e3:
        4a:ff:1c:25:2a:f5:e7:b9:a2:5f:77:17:57:9a:d4:49:5c:d6:
        49:6c:4d:d2:13:7b:70:85:ff:76:de:51:dc:08:a8:d8:d7:2e:
        a7:db:52:4d:de:1a:99:67:32:a7:08:19:57:57:44:8d:dc:22:
        95:ba:f5:6c:09:f1:fe:dc:72:6a:50:7e:ec:80:ed:6e:6f:f5:
        fc:53:52:dc:33:eb:90:26:e2:bd:83:c2:ac:c1:6b:ea:96:76:
        72:6a:d4:b6:29:75:3f:07:0d:6b:28:0b:2c:1f:29:23:ee:07:
        93:9a:ce:0e:5e:b6:98:e3:fe:4e:82:5e:1f:5a:b0:d2:0a:da:
        72:33:13:d8

Vulnerabilities

82.103.104.150

Last Seen: 2025-03-29

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

80 / tcp

-2100514759 | 2025-03-21T00:37:06.976745

Hashes

nginx

443 / tcp

-724134569 | 2025-03-29T10:20:11.568054

Hashes

nginx

Products

Pricing

Contact Us

82.103.104.150

Last Seen: 2025-03-29

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

80 / tcp -2100514759 | 2025-03-21T00:37:06.976745

Hashes

nginx

443 / tcp -724134569 | 2025-03-29T10:20:11.568054

Hashes

nginx

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

-2100514759 | 2025-03-21T00:37:06.976745

443 / tcp

-724134569 | 2025-03-29T10:20:11.568054