GeneralInformation

Hostnames	cdn-contact-support.com www.cdn-contact-support.com
Domains	cdn-contact-support.com
Country	United States
City	San Francisco
Organization	Fastly, Inc.
ISP	Fastly, Inc.
ASN	AS54113

WebTechnologies

Blogs

Wix

CMS

Wix

JavaScript frameworks

JavaScript libraries

Miscellaneous

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-7676	3.5angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "<option>" elements in "<select>" ones changes parsing behavior, leading to possibly unsanitizing code.
CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-14863	4.3There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2019-10768	5.0In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload.
CVE-2015-9251	4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

80 443

1353654927 | 2024-04-22T18:19:37.726383

80 / tcp

HTTP/1.1 404 Not Found
Connection: keep-alive
Content-Type: text/html; charset=utf-8
x-wix-request-id: 1713809977.649670000117124494
Age: 0
Server: Pepyaka
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Date: Mon, 22 Apr 2024 18:19:37 GMT
X-Served-By: cache-fra-etou8220063-FRA
X-Cache: MISS
Vary: Accept-Encoding
server-timing: cache;desc=miss, varnish;desc=miss_miss, dc;desc=fastly_84
X-Seen-By: roqoaVaG/Y0K4FDXPQbYVA==,GilIRCy+Ky2nI9KZaDKzWLxkNjrXdwdgtu6E0yACibU=,m0j2EEknGIVUW/liY8BLLjO0sjRhOPEJr2NINQYU94zDa2gaReObvoMyILa0JRsy,2d58ifebGbosy5xc+FRaljloO8mgnhkTrBq9dSilQZPk4JTyKTk6NO5J1duANxWvsquyBLG5UPq5G51Gy4x0mw==,2UNV7KOq4oGjA5+PKsX47H8fcDDTK1h4pebfMCDOGYS8ZDY613cHYLbuhNMgAom1,VdATtBf5hevuWcyf9l5KlpCK5rbuYarAGePVwyK6BTA=,qmnlAsVCOcMWgU+Ve/D5imCTfyM0osXjO2+0nWs1F4U=,EJEd9b7dmFptmyI1HOovv5VWeYPRBVIBfiG3w+7WMc0EKVeOJeJQ0+wLqrFxqoCl/1e4aGadi6jxnHfiwUUNFg==
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
transfer-encoding: chunked

-1610551662 | 2024-04-18T01:46:22.207321

443 / tcp

HTTP/1.1 404 Not Found
Connection: keep-alive
Content-Type: text/html; charset=utf-8
x-wix-request-id: 1713404780.4255688008405612940
Age: 0
Server: Pepyaka
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Date: Thu, 18 Apr 2024 01:46:20 GMT
X-Served-By: cache-ams21067-AMS
X-Cache: MISS
Vary: Accept-Encoding
server-timing: cache;desc=miss, varnish;desc=miss_miss, dc;desc=fastly_84
X-Seen-By: roqoaVaG/Y0K4FDXPQbYVA==,REmTqJKTo7BM/eF7JdTbUrxkNjrXdwdgtu6E0yACibU=,m0j2EEknGIVUW/liY8BLLphidMtWzh3rsfhiQCDTS12PfR5Gq0aOvPi6ADB6Ij8Q,2d58ifebGbosy5xc+FRalmbpYeSFdT1zUb6mFb4T3gzBo55sv27sy+FTcdWLoZbSfWmWi6eQ4YFO2xFRplYDZw==,2UNV7KOq4oGjA5+PKsX47H8fcDDTK1h4pebfMCDOGYS8ZDY613cHYLbuhNMgAom1,VdATtBf5hevuWcyf9l5KlpCK5rbuYarAGePVwyK6BTA=,2pUKMtvyVyxyplUBaAwfN8ccShlVBSWSYPvaWnchkK4=,EJEd9b7dmFptmyI1HOovvw8YhZ/r22a5sE4M1/t/MRwJvHiZOurVRGvjrQo7Ni9nYH/Z2Xnoi2l1Y5JYiWhkAA==
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
transfer-encoding: chunked

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            aa:f7:48:a6:b7:1b:2f:78:05:47:62:30:6f:36:47:0d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
        Validity
            Not Before: Apr 19 00:00:00 2021 GMT
            Not After : Jul 18 23:59:59 2021 GMT
        Subject: CN=cdn-contact-support.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:8e:f0:42:b0:1d:67:c4:85:2c:50:fa:ff:e1:6b:
                    6b:e9:54:0a:f6:3a:98:a5:88:d7:27:5c:48:e0:b7:
                    33:28:20:0f:11:ff:60:a1:e4:c2:b4:62:fb:15:e8:
                    38:d4:6c:62:9a:bc:4d:a3:8a:10:c1:b6:08:55:fa:
                    7a:53:f0:ca:76:d7:98:23:35:7e:90:fa:c8:41:b9:
                    3b:f3:c2:52:35:46:41:83:8e:bb:de:f6:ec:ff:65:
                    6a:db:53:dc:7c:8c:eb:65:c2:34:c4:ca:ad:88:1f:
                    11:c4:a0:a3:c2:bb:69:8e:fa:f4:cc:91:be:ef:af:
                    61:23:d6:2d:5e:ab:d5:ea:e5:7c:9d:8f:44:ac:68:
                    ef:70:fb:2b:92:3e:ce:38:da:f7:d2:c5:f7:60:3c:
                    c1:3e:a5:02:3a:14:32:5a:37:56:08:30:ad:79:0a:
                    80:f4:da:63:8a:8d:af:57:c5:0e:fb:c7:f8:f8:f4:
                    ed:5f:6c:ce:2f:4e:87:5b:14:ab:81:be:90:09:ee:
                    32:52:67:88:85:42:f6:ef:43:b9:ff:97:d5:14:bd:
                    a1:bd:e4:cd:67:b4:93:62:55:6d:f2:7a:20:4d:be:
                    a6:54:24:67:ff:f2:c1:cf:a1:59:d2:fc:17:67:8a:
                    3b:a7:d5:8e:7c:fd:3e:e5:d9:df:9c:cc:66:00:85:
                    73:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
            X509v3 Subject Key Identifier: 
                F4:71:F6:EC:4A:19:FE:86:FD:0E:67:D9:10:CA:83:92:ED:7A:90:7C
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.7
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:3E:F2:F8:8F:FF:88:55:68:24:C2:C0:CA:9E:52:89:
                                79:2B:C5:0E:78:09:7F:2E:6A:97:68:99:7E:22:F0:D7
                    Timestamp : Apr 19 15:51:57.607 2021 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:BF:4B:42:27:12:74:67:8C:84:55:D1:
                                64:BC:51:D7:5A:6E:CF:3E:92:4C:97:40:6A:3D:B0:8C:
                                82:94:E3:4C:21:02:21:00:E3:91:BE:58:53:E3:0B:1C:
                                F5:BD:79:C2:F9:E1:B5:E2:33:89:06:61:98:4D:72:DD:
                                ED:A0:61:50:A2:7F:0E:D2
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 94:20:BC:1E:8E:D5:8D:6C:88:73:1F:82:8B:22:2C:0D:
                                D1:DA:4D:5E:6C:4F:94:3D:61:DB:4E:2F:58:4D:A2:C2
                    Timestamp : Apr 19 15:51:57.548 2021 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:7B:D2:D7:2D:36:51:05:58:10:05:9A:7D:
                                68:FF:37:1F:16:C0:2F:09:08:1A:D3:82:B8:03:E6:F0:
                                2A:74:9C:81:02:21:00:91:40:43:2E:B7:8F:B2:6A:57:
                                85:07:F7:0E:7D:FA:9A:9D:EB:17:2C:2A:B8:6F:93:86:
                                E6:97:3A:22:93:89:A9
            X509v3 Subject Alternative Name: 
                DNS:cdn-contact-support.com, DNS:www.cdn-contact-support.com
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        32:1d:59:44:8f:8f:4d:f0:a1:3b:26:0f:50:f1:0f:a4:cb:0e:
        91:91:41:88:01:b2:95:66:49:3b:66:2e:f4:f1:72:e1:a7:92:
        2c:f0:b3:70:67:e3:31:04:3d:77:a5:1a:37:2e:4c:10:5a:d2:
        52:3b:bb:a0:84:74:28:05:55:a8:51:f6:c8:67:cf:3e:5c:98:
        90:d4:c4:cc:b8:21:d6:b0:65:db:60:de:7f:e8:a5:10:a2:c0:
        d6:dc:ab:bc:18:c5:d2:5e:80:24:40:33:6f:dd:36:1b:45:6c:
        3f:ff:3f:a3:32:48:f4:ad:14:45:a9:7f:12:13:bd:50:3f:7a:
        eb:ba:cc:8c:6e:c0:6a:62:ae:94:8a:af:94:6d:0a:e1:19:01:
        ee:75:ee:e9:6f:de:20:c7:7c:7c:4a:d3:21:7e:b0:0d:23:7d:
        74:d4:2b:a2:a1:dd:fe:45:33:7e:ec:52:09:6f:3d:e0:e3:92:
        fa:25:64:22:94:16:94:5c:ff:db:29:9f:80:38:d8:3f:fe:2c:
        87:e2:7a:79:70:f8:d2:b4:7f:25:e4:69:43:d1:78:fa:83:0d:
        e0:26:19:90:e8:54:52:55:2a:e3:1c:d1:ff:40:e0:e7:ff:fa:
        66:0f:2d:fd:ee:06:d5:d0:9f:00:7e:e3:23:4e:67:35:34:2d:
        f5:31:f7:92

151.101.193.84

Last Seen: 2024-04-22

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1353654927 | 2024-04-22T18:19:37.726383
80 / tcp

-1610551662 | 2024-04-18T01:46:22.207321
443 / tcp

Products

Pricing

Contact Us

151.101.193.84

Last Seen: 2024-04-22

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1353654927 | 2024-04-22T18:19:37.726383 80 / tcp

-1610551662 | 2024-04-18T01:46:22.207321 443 / tcp

Products

Pricing

Contact Us

1353654927 | 2024-04-22T18:19:37.726383
80 / tcp

-1610551662 | 2024-04-18T01:46:22.207321
443 / tcp