GeneralInformation

Hostnames	krogersc.com
Domains	krogersc.com
Country	United States
City	San Francisco
Organization	Fastly, Inc.
ISP	Fastly, Inc.
ASN	AS54113

WebTechnologies

Analytics

Datadog

CDN

Google Hosted Libraries

Cookie compliance

Issue trackers

JavaScript libraries

Miscellaneous

RUM

UI frameworks

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-23064	Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the <options> element.
CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2018-14042	4.3In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVE-2018-14041	4.3In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.
CVE-2018-14040	4.3In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
CVE-2016-10735	4.3In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

OpenPorts

80 443

-172766826 | 2024-05-12T13:34:50.093424

80 / tcp

HTTP/1.1 500 Domain Not Found
Connection: keep-alive
Content-Length: 249
Server: Varnish
Retry-After: 0
content-type: text/html
Cache-Control: private, no-cache
X-Served-By: cache-ams21023-AMS
Accept-Ranges: bytes
Date: Sun, 12 May 2024 13:34:47 GMT
Via: 1.1 varnish

959533316 | 2024-05-12T12:43:36.446235

443 / tcp

HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 28255
Content-Type: text/html; charset=UTF-8
Set-Cookie: session=2LQ4psCT51S7O4lv7E7EYN5hwa_5luXlnZOoLw4eNoQOKkr4oAXx7NQgvk1IoMaRdf0jJK8ywsVZklY24kLyjTanicdF2bk1tDJkkAYL68B-TiH4NSB2ggs5bADj-7-BZTk0G3hi52EYrUxKP15n9nkJJIY; Domain=www.krogersc.com; Max-Age=86400; Path=/; expires=Mon, 13-May-2024 12:43:35 GMT; secure; HttpOnly; SameSite=Lax
Accept-Ranges: bytes
Via: 1.1 varnish, 1.1 varnish
Date: Sun, 12 May 2024 12:43:35 GMT
Set-Cookie: _pxhd=9cfl04rfVXlHFIc-jfoHJQR81LZ0F65ymTfLe-16SyMb7MKNmHa5oWa-1oQF5mkKwIXSTB8doK0hoWFVcbcxkA==:nmGJ90/BDGqKU6qalov/vVY7LZftQIXN-Cb-JVmQJVBEKvMfSrr/DANsTHBEou/BfKdHjjZXle-RRIAdIaOBn9RRYXBtMi508ROrzYnsGqk=; path=/;
X-Served-By: cache-bfi-kbfi7400109-BFI, cache-sjc10053-SJC
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
X-Timer: S1715517815.629635,VS0,VE1025
Vary: Accept-Encoding, Authorization, Cookie
Referrer-Policy: origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: https://*.goodrx.com https://blocked.goodrx.com https://*.grxstatic.com https://*.grxweb.com https://*.krogersc.com https://*.px-cloud.net https://*.perimeterx.net https://*.pxchk.net https://*.px-cdn.net https://*.px-client.net  https://www.youtube.com https://*.ytimg.com https://*.doubleclick.net https://*.doubleverify.com https://*.osano.com https://*.gstatic.com https://*.google.com https://*.googleapis.com https://*.googlesyndication.com https://*.googleadservices.com https://*.google-analytics.com https://*.googletagservices.com https://*.googletagmanager.com https://*.stripe.com https://*.split.io https://sentry.io https://o17108.ingest.sentry.io https://*.smartystreets.com https://maxcdn.bootstrapcdn.com https://browser.sentry-cdn.com https://cdnjs.cloudflare.com https://bat.bing.com https://*.ggpht.com https://www.recaptcha.net https://*.segment.io https://*.segment.com https://www.datadoghq-browser-agent.com https://rum-http-intake.logs.datadoghq.com https://di.rlcdn.com https://*.adsrvr.org https://optimizely-edge.com https://*.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com; report-uri https://o17108.ingest.sentry.io/api/5196482/security/?sentry_key=190d487d8312403c8a1ec2a0c2ce589d
Strict-Transport-Security: max-age=31557600

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4f:34:51:b3:37:20:25:a6:27:16:4c:09:ed:c7:41
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2024 Q1
        Validity
            Not Before: Apr  3 20:50:12 2024 GMT
            Not After : May  5 20:50:11 2025 GMT
        Subject: CN=krogersc.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:8b:eb:e0:99:16:47:be:a9:5d:2a:6e:67:
                    92:7e:1a:e9:9d:7f:76:60:a5:2a:6a:45:73:ff:50:
                    48:a5:05:fe:6e:9b:28:2a:2f:0e:7d:69:5d:c5:21:
                    08:14:b3:97:44:39:19:2b:04:2d:0a:ee:dc:92:37:
                    3e:b4:6f:0a:e6:aa:2a:32:f9:e7:53:08:ed:6e:e6:
                    37:50:ea:58:50:24:b1:51:cf:da:af:95:8b:63:82:
                    ca:92:fb:87:ab:28:49:46:9a:f8:46:47:c1:dd:bb:
                    e6:5e:23:75:d9:d9:a1:6d:85:83:22:11:1b:dc:2c:
                    b2:82:af:3b:64:db:00:f2:39:65:d1:11:db:b2:5d:
                    f1:2a:90:db:f0:bb:0c:2a:fe:69:1b:f3:45:ee:01:
                    fa:c5:8c:f5:a8:86:8b:f5:b0:97:01:f5:ab:51:07:
                    19:f2:82:cd:fb:49:95:98:50:a9:08:1c:c6:06:ad:
                    6e:59:86:cf:5a:92:ae:48:36:af:f2:9e:c9:e1:af:
                    50:11:a5:c0:ae:e8:b6:42:79:23:4a:7d:58:4b:01:
                    94:2e:50:4b:86:5f:fd:20:58:86:1d:dc:1e:96:59:
                    57:f4:71:56:a3:e7:5f:a0:14:cc:20:8b:45:bc:5c:
                    44:a4:57:77:48:08:59:fa:2f:e9:88:7d:9c:2d:57:
                    e4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Alternative Name: 
                DNS:krogersc.com
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Key Identifier: 
                74:67:A1:01:DB:8C:59:3E:B9:BC:4E:F1:FD:77:2D:53:29:12:B0:B4
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.4146.10.1.3
                  CPS: https://www.globalsign.com/repository/
            X509v3 Basic Constraints: critical
                CA:FALSE
            Authority Information Access: 
                OCSP - URI:http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt
            X509v3 Authority Key Identifier: 
                66:C0:C7:A3:9A:CD:FE:F3:EA:CE:4B:53:0B:61:5E:AF:33:05:B3:E1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Apr  3 20:50:12.773 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:BA:D7:1E:DC:B4:46:2D:05:2D:D0:E7:
                                D1:B8:61:71:ED:B2:A0:DA:C7:39:EB:87:45:88:BB:4B:
                                5B:7E:DC:EE:ED:02:20:53:78:D9:8D:CF:BD:30:3F:F6:
                                31:6B:D6:0A:39:4F:AB:B8:BB:49:49:1F:E0:BA:0A:2C:
                                96:98:95:76:AE:90:07
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Apr  3 20:50:12.979 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:CB:A9:AF:50:80:E6:C3:9D:B0:30:5F:
                                15:A4:32:4F:AF:DF:35:70:C1:E7:8D:A4:A9:E9:DB:52:
                                09:D5:5C:2D:04:02:20:5B:C6:CF:61:3B:23:FF:22:44:
                                D7:B9:C6:C7:43:88:82:F9:36:FB:DD:5D:A9:11:D9:8F:
                                50:62:2B:9F:7C:D6:3E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Apr  3 20:50:13.184 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:20:82:10:8F:9D:3D:90:8B:E6:F5:A5:20:
                                14:25:BC:B6:05:8C:19:80:36:24:27:C9:13:7E:A3:76:
                                32:03:AB:52:02:21:00:81:02:C7:1E:AF:BC:35:7C:2C:
                                B2:98:9A:A7:3D:C6:9F:55:17:B4:81:E0:BC:0C:34:D6:
                                09:B2:FB:55:19:02:E8
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        2d:3f:c8:66:7c:95:d1:ba:32:30:a8:25:a6:a9:2a:49:f9:2c:
        75:e1:69:81:ec:4e:1b:80:cd:41:b5:2f:42:1b:0e:6b:74:12:
        04:07:d2:21:8e:c8:b4:da:c8:20:33:2a:58:b0:b2:29:5f:04:
        37:5c:b9:91:42:44:a4:be:24:ca:e6:b7:ca:fd:90:42:da:9d:
        7b:9e:9b:7c:30:f9:e3:97:ae:b3:6c:33:b1:97:75:28:ea:5b:
        7a:6b:46:1d:71:a3:27:84:b5:9d:a1:cc:bf:a4:28:83:d9:3b:
        8d:30:d4:92:00:b1:5a:4b:d6:cb:b4:2f:6f:6f:9a:e2:89:22:
        67:47:c1:6c:5d:98:df:ca:78:c6:dd:7d:c8:97:94:a6:93:34:
        b1:e5:03:39:aa:b0:f4:71:22:c3:ac:48:5b:13:e4:52:d6:d5:
        9a:a6:d2:23:d0:a3:e5:fa:83:05:7f:de:78:e3:c3:82:42:f6:
        87:86:51:6b:c3:bf:61:48:89:88:cc:47:71:96:be:52:6b:c8:
        52:69:b6:b5:30:d6:d2:4a:c1:a0:b0:8e:6f:e0:0e:19:d2:f0:
        6a:eb:10:75:21:31:31:e7:50:67:2e:d9:9c:d5:24:1e:21:e9:
        33:12:57:ea:45:81:a5:64:36:38:18:f3:62:3b:7d:45:67:68:
        5b:4a:77:e7

151.101.130.49

Last Seen: 2024-05-12

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-172766826 | 2024-05-12T13:34:50.093424
80 / tcp

959533316 | 2024-05-12T12:43:36.446235
443 / tcp

Products

Pricing

Contact Us

151.101.130.49

Last Seen: 2024-05-12

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-172766826 | 2024-05-12T13:34:50.093424 80 / tcp

959533316 | 2024-05-12T12:43:36.446235 443 / tcp

Products

Pricing

Contact Us

-172766826 | 2024-05-12T13:34:50.093424
80 / tcp

959533316 | 2024-05-12T12:43:36.446235
443 / tcp