GeneralInformation

Hostnames	impactify.media hb-eu-de-01.impactify.media
Domains	impactify.media
Country	Germany
City	Frankfurt am Main
Organization	OVH GmbH
ISP	OVH SAS
ASN	AS16276

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

80 443 8000

2126691653 | 2024-04-21T05:14:39.525950

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sun, 21 Apr 2024 05:14:39 GMT
Content-Type: text/html
Content-Length: 12
Last-Modified: Mon, 12 Apr 2021 07:49:21 GMT
Connection: keep-alive
ETag: "6073fb81-c"
Accept-Ranges: bytes

1722457586 | 2024-04-12T09:29:51.178460

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 12 Apr 2024 09:29:50 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 142
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Last-Modified: Mon, 18 Mar 2024 07:39:45 GMT
Pragma: no-cache
Vary: Accept-Encoding
Vary: Origin

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            dc:de:e2:1d:da:05:af:c0
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2
        Validity
            Not Before: Oct 26 15:06:18 2023 GMT
            Not After : Nov  7 19:54:33 2024 GMT
        Subject: CN=*.impactify.media
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ca:55:e7:1d:3b:89:47:1d:3d:af:7f:49:62:d5:
                    ff:44:30:26:4c:91:55:1d:39:f2:1e:63:1b:6f:83:
                    d4:18:9c:51:25:ca:6a:67:7f:af:74:4a:0f:01:03:
                    95:39:85:a0:a6:a9:43:bb:79:62:5c:4a:13:6c:33:
                    c1:62:4b:48:88:d7:2e:ca:95:ef:42:f2:78:28:ce:
                    19:a0:23:7c:fc:6e:9b:57:33:c3:c5:08:09:00:84:
                    f1:1f:6a:85:c4:21:33:b7:44:b1:f2:95:13:fc:4c:
                    45:1b:82:61:04:98:60:b7:d3:65:88:15:f0:6e:4f:
                    e6:fb:73:c2:b6:f5:7d:7a:8e:99:f9:11:61:d2:07:
                    85:ad:28:0d:d9:1d:c0:49:54:4b:74:b4:fd:25:4f:
                    ca:cb:18:fe:a6:9c:34:96:04:36:d2:e8:f6:ff:69:
                    5f:5a:d7:27:77:38:f9:41:83:dd:d1:e4:f3:8c:df:
                    51:94:6b:cc:53:43:d6:23:37:10:5a:15:26:93:3f:
                    71:15:4a:fe:1e:94:c3:50:d1:01:c5:c7:3b:70:41:
                    e8:8b:30:a7:e1:92:a3:c2:d1:8c:78:c4:90:b6:a5:
                    ed:01:fa:8b:57:81:08:25:9c:6d:49:3f:b9:4d:ef:
                    0c:7e:b4:8d:6a:66:61:33:00:d4:75:5e:1b:32:33:
                    97:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.godaddy.com/gdig2s1-10721.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114413.1.7.23.1
                  CPS: http://certificates.godaddy.com/repository/
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com/
                CA Issuers - URI:http://certificates.godaddy.com/repository/gdig2.crt
            X509v3 Authority Key Identifier: 
                40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE
            X509v3 Subject Alternative Name: 
                DNS:*.impactify.media, DNS:impactify.media
            X509v3 Subject Key Identifier: 
                3F:7A:0D:CB:E2:6A:A3:C7:92:C7:E8:6E:90:3A:E9:93:2F:5B:C1:32
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Oct 26 15:06:19.102 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:74:B1:45:B5:DB:1A:60:65:11:6E:43:96:
                                3B:6B:B1:6C:86:F4:77:76:90:FE:4D:B2:8B:DD:F6:13:
                                C8:01:29:F8:02:21:00:FB:93:AA:B9:DB:D8:5F:85:A2:
                                98:B3:16:85:1B:30:92:48:FE:58:EC:A6:48:B8:92:6F:
                                FF:4B:3A:AB:D1:76:FB
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Oct 26 15:06:19.280 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B9:59:7C:D2:77:9C:3B:0B:AB:5B:CE:
                                76:97:1D:4F:7D:47:80:21:33:4C:A1:5E:2F:DD:D8:26:
                                AD:41:92:7E:4C:02:21:00:FE:A5:11:9E:76:A5:42:E2:
                                1F:59:38:A6:BE:5B:A9:5C:B8:6C:0F:04:F0:0E:1A:D6:
                                D2:30:D9:93:6E:21:15:8E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Oct 26 15:06:19.484 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:49:B6:D6:52:6A:BF:AD:4C:9E:8E:EE:88:
                                AD:37:D8:A7:24:67:4A:4F:4E:98:46:D3:94:85:C2:DB:
                                E5:CF:90:FD:02:20:5F:3B:83:CD:A1:B2:86:BD:90:93:
                                8B:43:C0:A8:31:E9:6A:7D:D4:B2:2B:92:41:2A:0D:9F:
                                BE:AC:58:79:9E:71
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        07:e3:99:8e:ee:cd:11:f9:a8:be:02:8f:58:fb:2c:5f:1f:8b:
        fc:0d:df:d7:b1:e5:b0:4c:68:04:4a:68:bb:0e:08:0f:36:21:
        d2:67:b0:e6:6c:eb:16:ce:32:ad:46:2a:db:ae:b2:eb:a5:6d:
        06:a2:fd:53:1f:f4:3c:59:56:7a:a0:c3:0d:c6:10:6e:ea:fe:
        ee:4b:ba:6c:65:d1:22:1c:c7:4a:3f:48:41:ea:ce:43:3d:81:
        cb:5f:bf:fd:e9:df:db:37:78:91:9f:0a:14:e1:3a:04:33:13:
        80:9c:2a:fc:d5:5a:53:9e:0d:fd:45:28:56:f9:3f:92:16:c3:
        48:73:c0:23:da:00:fc:70:e8:c5:03:e8:33:79:a9:51:24:2f:
        39:2b:f5:f0:43:69:27:e8:ac:fc:4a:95:b3:48:a2:df:45:ea:
        82:56:bd:ac:ff:fe:43:44:5d:79:ae:12:2e:40:b0:c0:45:5c:
        36:8e:b3:69:fa:8c:37:fb:a0:39:2d:2e:19:00:a4:8d:f9:59:
        f1:d9:e2:64:82:6b:59:1b:c9:fe:b3:40:ac:52:0f:bc:f6:e0:
        dc:ad:54:2e:5e:dd:9a:88:a7:b1:35:69:8c:e7:5b:ee:d7:70:
        eb:11:3e:38:30:80:7f:50:2d:cb:20:c8:2f:ab:7e:a7:9b:4b:
        b7:71:2a:45

1722457586 | 2024-04-21T00:30:59.710829

8000 / tcp

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache, no-store, must-revalidate
Content-Length: 142
Content-Type: text/html; charset=utf-8
Expires: 0
Last-Modified: Mon, 18 Mar 2024 07:39:45 GMT
Pragma: no-cache
Vary: Accept-Encoding
Vary: Origin
Date: Sun, 21 Apr 2024 00:30:59 GMT

135.125.180.63

Last Seen: 2024-04-21

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

2126691653 | 2024-04-21T05:14:39.525950
80 / tcp

nginx1.18.0

1722457586 | 2024-04-12T09:29:51.178460
443 / tcp

nginx1.18.0

1722457586 | 2024-04-21T00:30:59.710829
8000 / tcp

Products

Pricing

Contact Us

135.125.180.63

Last Seen: 2024-04-21

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

2126691653 | 2024-04-21T05:14:39.525950 80 / tcp

nginx1.18.0

1722457586 | 2024-04-12T09:29:51.178460 443 / tcp

nginx1.18.0

1722457586 | 2024-04-21T00:30:59.710829 8000 / tcp

Products

Pricing

Contact Us

2126691653 | 2024-04-21T05:14:39.525950
80 / tcp

1722457586 | 2024-04-12T09:29:51.178460
443 / tcp

1722457586 | 2024-04-21T00:30:59.710829
8000 / tcp