GeneralInformation

Hostnames	happyfuelcards.total.be totalcardsonline.total.be vs-dedicated-prod-cardpro-extranet.ebusiness.total.com happyfuelcards.total.de prepaid-karte.total.de totalcardsonline.total.de gronline.total.fr jubileo.total.fr happyfuelcards.total.lu totalcardsonline.total.lu happyfuelcards.total.nl totalcardsonline.total.nl cardsonline.totalenergies.be prepaidcards.totalenergies.be cardsonline.totalenergies.de prepaidcards.totalenergies.de gronline.totalenergies.fr jubileo.totalenergies.fr cardsonline.totalenergies.lu prepaidcards.totalenergies.lu cardsonline.totalenergies.nl prepaidcards.totalenergies.nl cardsonline.totalenergies.pl
Domains	total.be total.com total.de total.fr total.lu total.nl totalenergies.be totalenergies.de totalenergies.fr totalenergies.lu totalenergies.nl totalenergies.pl
Country	France
City	Courbevoie
Organization	TotalEnergies SE
ISP	Vodafone Group PLC
ASN	AS1273

WebTechnologies

JavaScript libraries

jQuery1.11.1

jQuery UI1.10.4

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251	4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

80 443

1796552390 | 2024-05-24T01:05:51.588041

80 / tcp

HTTP/1.0 403 Forbidden
Content-Type: text/html
Pragma: No-Cache
Cache-Control: No-Cache
Server: Ebusiness
Connection: close
Content-Length: 15900

1182926577 | 2024-05-25T08:20:20.801024

443 / tcp

HTTP/1.0 403 Forbidden
Content-Type: text/html
Pragma: No-Cache
Cache-Control: No-Cache
Server: Ebusiness
Connection: close
Content-Length: 15908

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c8:87:80:f1:eb:dd:e9:d8:0f:22:e9:61:47:a7:f6:40
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
        Validity
            Not Before: Oct  9 00:00:00 2023 GMT
            Not After : Oct 16 23:59:59 2024 GMT
        Subject: C=FR, ST=Ile-de-France, O=TOTALENERGIES SE, CN=gronline.total.fr
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:c5:0d:32:63:dd:2c:99:59:8a:c9:6d:7a:51:14:
                    bf:49:f9:51:98:74:f6:aa:98:ed:ee:fe:98:12:ef:
                    4e:9c:5e:5b:97:72:e1:61:1e:52:3c:a3:2a:4d:5e:
                    84:3e:26:23:e3:a9:23:3e:bc:5b:e8:b7:3b:6f:59:
                    2d:00:55:50:61:e4:55:c4:2d:21:e7:4d:ee:a4:80:
                    15:4f:30:46:c4:e8:2b:f4:68:7e:ad:4d:9f:c6:d1:
                    00:a2:fd:1c:9d:04:64:14:54:c2:35:37:46:53:d7:
                    a4:f8:77:2a:4a:52:99:dc:89:fe:a2:9a:c8:15:a7:
                    43:da:5e:34:28:07:28:90:4b:60:c7:eb:2d:bf:90:
                    af:fd:09:86:57:6b:d3:8e:d2:6d:e8:db:fa:9a:e0:
                    d2:e1:0a:87:d1:54:6a:32:cf:88:d9:72:95:13:97:
                    85:df:f7:61:d0:d0:7f:b8:63:ff:cf:9f:a9:b3:2e:
                    f6:b5:0e:d5:8f:e4:5c:d4:66:2d:2f:df:c6:8e:34:
                    db:aa:b1:d8:6d:25:24:fe:ac:44:17:90:ed:34:61:
                    b4:81:c1:ad:36:cc:f1:2c:e1:2b:ef:15:af:47:67:
                    71:f1:e4:fb:20:6b:be:33:7f:5f:61:df:a9:99:39:
                    9d:54:36:b4:51:90:9e:6e:96:22:39:e2:f0:7a:f8:
                    58:6e:31:a4:62:89:85:56:b2:1f:4f:76:c4:2b:7c:
                    9e:10:82:2d:9b:84:9e:2e:79:06:45:ce:99:7d:0a:
                    f8:48:3f:2d:1d:9e:85:6e:06:aa:35:f4:d6:c0:5f:
                    2f:b7:d5:28:c3:00:69:55:a3:61:ca:a1:f3:c6:92:
                    0c:4e:12:29:fc:b4:27:8f:14:87:e8:35:b6:0e:78:
                    ea:2f:5b:be:82:5f:bd:40:61:5b:69:ab:68:3e:88:
                    bf:2d:66:09:d0:44:af:7c:48:b4:77:9f:51:1b:b9:
                    5e:20:64:24:e9:43:95:73:23:74:e0:07:ed:30:23:
                    3c:e2:00:d5:88:e1:00:75:d8:a7:e8:12:b4:57:0b:
                    ea:62:60:93:bd:6d:bb:cf:41:80:8f:af:89:15:d6:
                    b8:f6:69:27:00:56:1c:5f:d4:34:0a:9d:25:dc:fb:
                    21:1f:8e:8a:d7:46:07:c7:20:35:97:8e:6e:e8:e0:
                    b8:3e:bc:6f:19:39:76:b3:24:d6:95:02:0e:5f:df:
                    10:c8:21:6c:ec:a4:ef:ed:e5:0a:37:f8:47:30:5a:
                    d4:c7:2d:46:40:a9:ec:e1:2f:87:a9:d5:26:5d:83:
                    8a:86:1d:73:95:a6:72:ed:1f:90:58:eb:3a:b1:cb:
                    d8:73:cb:0b:54:78:73:c5:8a:44:a0:bf:fe:07:fa:
                    26:9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                17:D9:D6:25:27:67:F9:31:C2:49:43:D9:30:36:44:8C:6C:A9:4F:EB
            X509v3 Subject Key Identifier: 
                54:FA:D4:F7:10:8A:35:CE:8B:DD:ED:30:CF:A3:DB:F3:ED:37:41:E5
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.4
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Oct  9 14:37:30.945 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:D4:9A:25:20:35:F0:DB:B1:58:20:00:
                                A6:16:27:F9:E7:6D:88:98:D2:20:EF:41:4D:0C:50:E6:
                                81:73:55:AC:6B:02:20:38:7E:10:D2:3B:1B:B7:41:7F:
                                E4:8F:0D:50:E5:BB:2E:32:E2:D2:A8:B5:53:5C:75:13:
                                FE:85:26:64:A5:05:BC
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Oct  9 14:37:31.017 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:CD:1C:5C:BB:97:10:6A:D7:4F:A1:B2:
                                00:80:93:DC:E7:4C:04:BA:C1:6A:DD:81:67:A5:3A:4D:
                                BF:04:C5:E8:C8:02:20:59:C6:7F:4B:1E:08:80:93:0B:
                                07:34:6D:93:4A:20:2C:1C:16:2E:E3:1A:48:4A:DA:A3:
                                7D:06:BC:54:20:C7:1B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Oct  9 14:37:31.066 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:7B:4B:38:C5:E4:CC:60:7C:11:6A:8B:4B:
                                CB:96:68:E8:6C:22:47:FB:06:3B:B8:F3:21:A8:DD:7A:
                                0E:EC:27:83:02:21:00:8D:43:E4:F0:14:AB:F6:D8:6B:
                                AE:68:C3:34:A6:B0:42:21:0B:08:7A:AE:E0:AC:8D:EC:
                                85:B2:70:B2:40:57:B7
            X509v3 Subject Alternative Name: 
                DNS:gronline.total.fr, DNS:cardsonline.totalenergies.be, DNS:cardsonline.totalenergies.de, DNS:cardsonline.totalenergies.lu, DNS:cardsonline.totalenergies.nl, DNS:cardsonline.totalenergies.pl, DNS:gronline.totalenergies.fr, DNS:happyfuelcards.total.be, DNS:happyfuelcards.total.de, DNS:happyfuelcards.total.lu, DNS:happyfuelcards.total.nl, DNS:jubileo.total.fr, DNS:jubileo.totalenergies.fr, DNS:prepaid-karte.total.de, DNS:prepaidcards.totalenergies.be, DNS:prepaidcards.totalenergies.de, DNS:prepaidcards.totalenergies.lu, DNS:prepaidcards.totalenergies.nl, DNS:totalcardsonline.total.be, DNS:totalcardsonline.total.de, DNS:totalcardsonline.total.lu, DNS:totalcardsonline.total.nl
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        11:b4:67:71:32:79:95:cd:0b:74:81:6b:43:38:8d:2e:f4:e2:
        74:f5:c9:f5:00:eb:62:6d:26:c1:ae:5b:9f:dd:c6:92:1c:b8:
        72:46:ce:8b:9b:97:17:0c:4a:98:8a:f1:75:4a:aa:c0:8e:a3:
        e2:1d:97:d0:85:18:52:a5:5e:57:10:46:36:aa:d8:86:47:20:
        94:0b:73:94:73:ad:b6:1e:be:4b:87:74:26:b8:1a:d9:27:a5:
        8c:d0:21:9f:be:06:6b:f2:ff:85:01:32:90:fb:6d:9d:85:1a:
        3a:d8:07:b0:59:f9:32:ef:73:3d:34:2f:0f:c6:25:e2:c6:2f:
        f0:70:51:49:2f:57:52:74:ca:c5:76:9c:7c:2d:fb:8c:89:5d:
        a1:67:c2:99:dc:be:95:10:5a:13:ff:e3:89:c0:54:05:50:26:
        1f:ef:4a:cc:51:04:7f:9a:55:17:dd:d3:a0:60:1a:42:87:cd:
        fc:13:88:05:6d:78:36:3b:92:4c:f3:c3:c3:9e:25:3f:94:70:
        87:9f:0b:73:c9:c2:59:f1:79:7b:1c:89:c3:38:5c:89:ae:b7:
        c2:e2:15:49:ba:eb:b8:e3:92:1b:e9:9a:34:c4:5c:61:e0:b4:
        5d:29:8b:92:9d:c6:45:cc:97:6e:a4:c7:fd:cd:ed:4d:63:5f:
        88:6c:08:bd

146.249.208.100

Last Seen: 2024-05-25

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1796552390 | 2024-05-24T01:05:51.588041
80 / tcp

1182926577 | 2024-05-25T08:20:20.801024
443 / tcp

Products

Pricing

Contact Us

146.249.208.100

Last Seen: 2024-05-25

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1796552390 | 2024-05-24T01:05:51.588041 80 / tcp

1182926577 | 2024-05-25T08:20:20.801024 443 / tcp

Products

Pricing

Contact Us

1796552390 | 2024-05-24T01:05:51.588041
80 / tcp

1182926577 | 2024-05-25T08:20:20.801024
443 / tcp