GeneralInformation

Hostnames	server-108-138-189-58.mxp64.r.cloudfront.net retailprospa.it www.retailprospa.it
Domains	cloudfront.net retailprospa.it
Cloud Provider	Amazon
Cloud Region	GLOBAL
Cloud Service	CLOUDFRONT
Country	Italy
City	Milan
Organization	Amazon.com, Inc.
ISP	Amazon.com, Inc.
ASN	AS16509

WebTechnologies

CDN

jQuery CDN

JavaScript frameworks

Nuxt.js

Vue.js

JavaScript libraries

jQuery1.11.3

Programming languages

Node.js

Static site generator

Nuxt.js

Web frameworks

Nuxt.js

Web servers

Nuxt.js

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251	4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

80 443

460258428 | 2024-05-03T01:28:50.291823

80 / tcp

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Fri, 03 May 2024 01:28:50 GMT
Content-Type: text/html
Content-Length: 915
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 0dfe79aed7452aeeec8075594a25c0fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MXP64-P1
X-Amz-Cf-Id: k66LKE15B-UwEevHviKJmD-aB4YfRh4_P9S3K9YNc4j9EuwfjdMzKA==

2029736848 | 2024-05-01T00:33:55.790412

443 / tcp

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1951
Connection: keep-alive
Date: Tue, 30 Apr 2024 10:42:47 GMT
Last-Modified: Tue, 30 Apr 2024 10:20:49 GMT
ETag: "33ef8a4b31e0b04c50572e8da861cef1"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 b61152e740e230075fb9605e656b9520.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MXP64-P1
X-Amz-Cf-Id: FJ_hQ_9PI6tWEtRUqtkxduLUklqILySSRN4RvyD8TzDQGFiqZTzBFQ==
Age: 49868

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2c:70:1e:07:9b:fe:0d:b9:6d:c2:17:4a:18:c4:31
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: Jan  4 00:00:00 2024 GMT
            Not After : Feb  1 23:59:59 2025 GMT
        Subject: CN=retailprospa.it
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:af:37:55:a9:21:8f:29:ad:92:c4:07:d2:
                    34:60:d7:ee:c4:fc:78:83:57:d8:d7:be:b6:2d:6b:
                    73:03:b2:88:4e:df:03:d0:9d:ab:02:36:4b:7a:53:
                    bc:93:45:38:09:a4:21:27:f0:96:68:d9:de:38:c1:
                    26:ab:ec:62:89:eb:48:56:01:5a:b8:74:dc:74:38:
                    88:df:19:8c:a7:37:67:0e:0a:ec:ea:74:b9:61:b6:
                    4e:0c:80:32:e5:76:67:c1:30:3d:9b:90:7a:d1:97:
                    c1:56:56:c6:07:6c:30:e2:8b:6f:37:3a:bf:5d:d2:
                    ba:47:20:3b:48:f9:6a:52:3b:89:75:92:78:eb:5c:
                    9b:11:0e:bc:f8:88:72:c2:aa:d0:39:b3:7e:9a:71:
                    b7:99:00:45:31:e3:31:a3:38:83:f1:8f:4e:97:10:
                    95:b1:50:9d:0d:3d:59:9f:45:38:67:39:fb:8e:04:
                    9c:04:fc:35:5d:3e:f3:ed:f6:ae:0a:39:7f:69:f7:
                    75:d1:a1:15:8c:56:95:da:24:49:97:34:e0:d9:b3:
                    fa:5e:65:44:c5:47:8c:bf:c3:50:a2:e0:cb:5f:81:
                    25:16:b4:90:30:b9:1a:54:f4:0e:e9:5d:41:c5:50:
                    85:da:e8:15:39:65:f7:e3:53:d6:89:14:d5:9c:77:
                    cd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                D7:F5:04:9B:29:1D:0A:54:91:73:BF:AE:CA:92:A9:06:CB:B8:22:F1
            X509v3 Subject Alternative Name: 
                DNS:retailprospa.it, DNS:www.retailprospa.it
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Jan  4 12:09:18.648 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:C9:77:DE:05:1B:19:D3:7C:04:D6:8A:
                                B6:A4:0D:63:DC:1F:BB:E5:4D:1E:35:2F:7A:74:90:1A:
                                2E:DE:12:F0:9D:02:20:2F:F7:D6:B9:C4:23:CE:E4:F0:
                                6E:B2:B6:2B:81:51:E1:72:AF:36:55:DD:33:FE:BA:60:
                                32:F9:1E:5E:B7:95:16
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Jan  4 12:09:18.691 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:59:F7:25:52:42:46:E6:BF:2E:E4:98:05:
                                B9:A4:B4:2A:13:CD:49:D1:37:46:BA:43:9D:6A:D5:08:
                                F8:1A:0D:84:02:21:00:D7:DA:1C:26:8B:E9:51:7E:E1:
                                8A:18:3F:76:D7:F3:96:37:77:B2:1B:81:50:74:B8:05:
                                10:EC:2F:AD:24:12:82
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Jan  4 12:09:18.730 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:6C:B6:7C:B3:0E:0F:CF:44:65:8F:CF:F8:
                                CC:E1:E2:30:F5:E5:14:57:1C:DC:74:D5:93:C8:36:B2:
                                FA:45:BD:41:02:20:71:79:70:55:AE:F1:BD:D5:49:4C:
                                87:AE:7B:28:5D:0A:C1:2F:13:E0:86:DD:95:5A:71:D5:
                                52:14:A2:0E:06:C3
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        22:17:a6:7f:6a:80:e1:bf:a1:dc:ff:f2:76:4f:da:e6:1f:75:
        22:c5:fc:df:45:c0:7d:eb:7f:50:ec:19:ac:b4:35:ae:7e:dd:
        35:e9:b7:69:f4:12:f6:2d:80:fb:79:dd:95:c2:99:63:ad:fe:
        00:64:88:93:af:b5:54:7d:8e:49:cc:27:61:58:04:84:21:71:
        d5:6d:42:f7:52:bb:5a:36:87:66:6a:ff:2b:f5:5f:eb:e3:55:
        dc:74:5d:c7:60:17:d9:19:bd:18:41:45:1e:88:8f:cf:ff:e8:
        06:45:4a:71:d2:27:89:9c:a1:a0:c1:b4:c8:29:54:7e:55:22:
        87:53:fc:1c:cf:24:a2:17:69:d6:4b:c0:11:8b:70:2a:a5:b5:
        fa:56:b4:b7:58:2b:b8:ac:41:4c:0e:7f:10:a4:53:ce:ef:a6:
        6d:37:74:4b:e1:b8:88:98:bc:eb:38:4c:1e:14:48:03:89:53:
        4d:33:3b:0d:1b:8b:eb:e0:c5:bc:04:30:77:86:db:b8:8f:50:
        16:1c:0c:7e:7a:cf:d3:9d:ec:fa:75:e3:1e:1b:74:1e:58:1c:
        0f:02:5d:b4:1b:68:04:7a:ae:d7:51:77:23:83:7b:2b:f9:07:
        e5:51:d9:09:f0:54:ef:53:01:c9:f9:c5:2b:bb:0f:bc:12:52:
        c0:82:55:28

108.138.189.58

Last Seen: 2024-05-03

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

460258428 | 2024-05-03T01:28:50.291823
80 / tcp

CloudFront httpd

2029736848 | 2024-05-01T00:33:55.790412
443 / tcp

Products

Pricing

Contact Us

108.138.189.58

Last Seen: 2024-05-03

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

460258428 | 2024-05-03T01:28:50.291823 80 / tcp

CloudFront httpd

2029736848 | 2024-05-01T00:33:55.790412 443 / tcp

Products

Pricing

Contact Us

460258428 | 2024-05-03T01:28:50.291823
80 / tcp

2029736848 | 2024-05-01T00:33:55.790412
443 / tcp