GeneralInformation

Hostnames	1264725.cloudwaysapps.com taylorhawkes.com.original staging.taylorhawkes.com
Domains	cloudwaysapps.com original. taylorhawkes.com
Cloud Provider	DigitalOcean
Cloud Region	gb-slg
Country	United Kingdom
City	London
Organization	DigitalOcean, LLC
ISP	DigitalOcean, LLC
ASN	AS14061
Operating System	Linux

WebTechnologies

CDN

Cookie compliance

JavaScript frameworks

JavaScript libraries

Miscellaneous

Tag managers

UI frameworks

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVE-2020-23064	Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the <options> element.
CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

OpenPorts

22 80 443

-958851204 | 2024-05-14T21:07:58.812541

22 / tcp

SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQCueKCrbin9z7nPrOjeB18vUunjqW+EKTSUxdD/wwJqTk1c
NnIEZ15J/WbUXSnYaSFgajeiMe4FrVCUhyPsh9dGWgKj/+Ysgef5K3wwXqRXyezFdWT9e3j6SUPj
PF+Ehj4U4Emcee+70KZ/S1KteFLBpav+HLJI5D/9bpSHrZ4VWSoDaOnM50y5yu1LFV6/w7v/NKDB
btGVM0rs3y103pvH4tZ37hfdIvEElV0jPCnqyf2vFvmWd3OaKcnNVu0JsXaoI89tTTP9o/LubqZl
u6wCjPixUKP/2RqFvhYg8PFpMqcCrH/2fp8iNainGUUIogN3Mb5W2iT0HwE84xwZ2e2JZPO2JC73
03aGRvo7K7bS9LeTIJkkSC0rHESpjO3kEw34OmwHGNXf6s1MQi9ukeJJbCpNYJSvqdtJ8n/qHjFr
dcTKT0a+YGYn6uqWNLGR28KTfwaNGzGqR/LfzeHxUMUGz4C9/0AGfk+4fK7jllZetmoL09JCh1XR
cb+c00qrzVk=
Fingerprint: 6a:08:db:41:69:97:a9:d5:13:66:9f:df:9a:97:91:a3

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

1982712703 | 2024-05-13T23:35:30.500053

80 / tcp

HTTP/1.1 403 Forbidden
Server: nginx
Date: Mon, 13 May 2024 23:35:30 GMT
Content-Type: text/html
Content-Length: 342
Connection: keep-alive
Vary: Accept-Encoding
ETag: "663d9d5c-156"

-446901184 | 2024-05-06T20:01:13.784493

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Headers: Content-Type, X-Auth-Token, Authorization, Origin
Access-Control-Allow-Methods: POST, PUT
Cache-Control: no-cache, private
Date: Mon, 06 May 2024 20:01:13 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkJ0Z1JXS25ZSlh0eUw0bmlhc0xIYmc9PSIsInZhbHVlIjoiSldZeFdlZEFnMTV6bUIwNmdCdWVzcEk2RkE3NGRmeTd6YVA2R0hzVzFlWWlSVFdUN1kralU0VHNwZ3NDa0xGYW9ZTDltT1NlTll0bEcyUW13WlhjM2RWSm52alRiUXRUU0Q3UlE2TWU4M21SSVhZazFiQlVJNml2YWpxOExBK1QiLCJtYWMiOiJkZTkxNWYxNmM2ZjNmZDcxN2E0NDgwOGEzNmFlMmJlZmYwNWI2YzBjNjZmMWVlNTZlOGNlNzYyOTdmNTFmMjdhIiwidGFnIjoiIn0%3D; expires=Mon, 06-May-2024 22:01:13 GMT; Max-Age=7200; path=/; samesite=lax
Set-Cookie: taylor_hawkes_session=eyJpdiI6IklCWHU5d0NQM0VSWjQwbFY4VHYycmc9PSIsInZhbHVlIjoiMExlZ2JmTVZyR09JWFNJeTF4Nm5rYVNSTW9ndkJlSjUxalpCYVZiN2FiS20wbDhUSi91aGkrWEpZYSsxSHlZV05jaWYxSG8yTW5NbUxnZDd4eHRqV0p1UzBFNmtBeGlVSkRsb01ic3ZoQ20xVVR6SHNLT1BHc1VZQW1hdmNJSGciLCJtYWMiOiJiY2Q2Zjg5YzJiODM2NjQ4NDU2MTI2YjY3OTcxZjZjYzE4NWI1Nzk4YmEzOWNkYzNjZjNjZWI4MzAxYzljNmYwIiwidGFnIjoiIn0%3D; expires=Mon, 06-May-2024 22:01:13 GMT; Max-Age=7200; path=/; httponly; samesite=lax
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Feature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';fullscreen 'self';
Content-Security-Policy-Report-Only: frame-ancestors 'self' taylorhawkes.com staging.taylorhawkes.com;
Access-Control-Allow-Methods: GET,POST,HEAD,OPTIONS,PUT
Access-Control-Allow-Headers: Origin,Accept,Authorization,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3a:ce:25:ed:42:53:c4:4a:8b:92:a5:61:63:7a:d8:60:32
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Mar 14 09:23:28 2024 GMT
            Not After : Jun 12 09:23:27 2024 GMT
        Subject: CN=staging.taylorhawkes.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:86:e4:73:6f:8e:0a:c2:c5:7f:90:76:6e:7f:63:
                    91:bb:7c:1f:ea:2a:4d:0b:53:74:b6:aa:85:7e:dd:
                    9a:f1:53:30:43:76:8d:1d:c0:34:33:c1:2a:57:5c:
                    6e:8d:52:c7:37:70:1a:9a:45:a6:74:6f:f7:d4:3f:
                    a2:03:01:52:4b:6c:2f:99:ab:97:e6:b0:fb:2d:e7:
                    87:d7:38:ed:ae:80:f7:e2:81:e5:17:19:e6:8b:57:
                    e8:f5:96:00:77:03:dc:65:ce:fd:7b:56:cd:f8:b4:
                    01:15:54:48:de:6d:64:53:88:cb:60:d4:9f:7f:e8:
                    9e:81:26:9e:18:29:38:93:d3:6a:7d:a2:9f:c1:1d:
                    3b:bc:e8:a7:2f:6d:3f:98:ca:29:8e:7e:19:47:db:
                    c4:5f:bc:88:d9:d9:e4:09:1c:7e:53:76:10:9d:e2:
                    5a:81:0b:c7:24:17:d0:28:e8:fe:12:76:74:04:16:
                    a7:0a:72:07:24:9c:7f:f7:75:66:62:02:1f:40:e5:
                    6a:72:e0:43:bf:12:f8:8e:c2:d9:32:49:f7:c9:e1:
                    8d:12:13:4b:e3:84:92:3c:68:f2:f2:86:f7:8c:a5:
                    ba:81:2d:b9:dc:69:9f:a5:2d:22:67:dc:0f:b2:fa:
                    e6:e1:b3:f8:18:81:c0:ca:81:b2:91:c5:33:25:a7:
                    37:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                F1:58:AD:16:E0:A8:F8:CB:F5:1A:DB:8F:EF:EB:CC:DC:6F:CD:E9:F5
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:staging.taylorhawkes.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E2:BF:D6:1E:DE:2F:2F:07:A0:D6:4E:6D:37:A7:DC:
                                65:43:B0:C6:B5:2E:A2:DA:B7:8A:F8:9A:6D:F5:17:D8
                    Timestamp : Mar 14 10:23:28.128 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:50:F2:55:97:8E:9C:6B:C6:C4:E7:E5:D8:
                                17:AC:F6:DE:20:83:13:1E:1C:BD:95:4B:8E:4B:17:6C:
                                7D:7A:50:77:02:20:6F:B9:7D:AA:09:CF:E7:7E:91:3B:
                                8A:D0:60:11:5C:35:35:DB:87:33:0B:E2:A6:10:BC:CB:
                                68:4E:D2:BC:42:62
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Mar 14 10:23:28.137 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:1B:2D:92:5E:46:0F:FB:59:CC:0D:C7:18:
                                C3:16:1A:7B:AC:0E:7D:3D:23:04:D1:B2:CF:B0:EE:6A:
                                76:4F:D8:FA:02:21:00:BD:B7:1A:FA:46:C0:32:95:5C:
                                66:5B:A0:69:70:9A:EE:9C:67:95:0F:D2:0B:E8:59:9D:
                                DB:56:F7:B3:64:63:53
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        2e:0c:8c:19:ea:de:6e:bc:41:8c:4e:bd:46:28:bb:f8:aa:8a:
        cd:cd:32:50:be:ba:3f:98:3f:06:a5:19:64:d6:df:38:12:0e:
        20:4c:1f:40:bf:c7:f9:88:ca:24:bb:8c:70:7e:e8:5f:65:ec:
        ab:4b:a0:c4:24:a9:0d:f3:b3:4a:43:25:2a:81:0e:fb:ae:e9:
        5b:04:6c:24:19:f5:61:82:7c:c0:0e:e2:4b:03:e9:7b:2f:4b:
        51:83:d5:f3:07:81:4c:85:0e:a6:53:56:29:eb:2f:af:37:94:
        55:96:67:5b:82:52:f3:3e:b1:ef:12:f8:8c:d0:b2:fa:bd:38:
        71:1e:fa:99:3d:27:5d:c7:72:40:66:56:27:af:e4:44:68:14:
        15:ae:64:74:31:d6:ee:1c:c8:61:60:9c:47:b5:6f:58:0a:26:
        67:d0:f8:5b:5b:70:e0:7c:60:2a:1b:8f:b3:f9:48:8d:af:ef:
        3b:6b:7b:8f:79:c2:61:0e:2b:4f:54:ca:0c:9f:cf:88:5c:e3:
        8d:75:4f:50:0a:59:64:56:99:d9:c7:8c:3b:d5:d9:38:78:cb:
        0b:c8:6b:44:31:0b:cf:71:6b:ff:cf:f4:f2:37:9d:a8:b1:f0:
        2c:04:35:7d:3b:d4:95:c9:5c:9c:d2:a4:d4:6b:a9:63:f6:01:
        19:63:5a:6c

144.126.234.116

Last Seen: 2024-05-14

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-958851204 | 2024-05-14T21:07:58.812541
22 / tcp

OpenSSH8.4p1 Debian 5+deb11u3

1982712703 | 2024-05-13T23:35:30.500053
80 / tcp

nginx

-446901184 | 2024-05-06T20:01:13.784493
443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

144.126.234.116

Last Seen: 2024-05-14

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-958851204 | 2024-05-14T21:07:58.812541 22 / tcp

OpenSSH8.4p1 Debian 5+deb11u3

1982712703 | 2024-05-13T23:35:30.500053 80 / tcp

nginx

-446901184 | 2024-05-06T20:01:13.784493 443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

-958851204 | 2024-05-14T21:07:58.812541
22 / tcp

1982712703 | 2024-05-13T23:35:30.500053
80 / tcp

-446901184 | 2024-05-06T20:01:13.784493
443 / tcp