GeneralInformation

Hostnames	a1-heatingandcooling.com cpanel.a1-heatingandcooling.com cpcalendars.a1-heatingandcooling.com cpcontacts.a1-heatingandcooling.com mail.a1-heatingandcooling.com webdisk.a1-heatingandcooling.com webmail.a1-heatingandcooling.com www.a1-heatingandcooling.com topro2.fcomet.com scoresta.topro2.fcomet.com mail.scoresta.topro2.fcomet.com www.scoresta.topro2.fcomet.com scorestat.com cpanel.scorestat.com cpcalendars.scorestat.com cpcontacts.scorestat.com mail.scorestat.com webdisk.scorestat.com webmail.scorestat.com www.scorestat.com
Domains	a1-heatingandcooling.com fcomet.com scorestat.com
Cloud Provider	Linode
Cloud Region	ca-on
Country	Canada
City	Toronto
Organization	Linode
ISP	Akamai Connected Cloud
ASN	AS63949

WebTechnologies

Analytics

Google Analytics

Miscellaneous

HTTP/3

UI frameworks

ZURB Foundation

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2022-37454	The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.
CVE-2022-31629	In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.
CVE-2022-31628	In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.
CVE-2017-8923	7.5The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string.
CVE-2013-2220	7.5Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.
CVE-2007-3205	5.0The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

OpenPorts

80 443 2082 2083 3306

977076610 | 2024-05-04T22:15:18.983768

80 / tcp

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 22:15:18 GMT
Content-Length: 1476
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Cache-Control: no-store, max-age=0
Server: imunify360-webshield/1.21

1629271587 | 2024-05-10T23:50:27.139477

443 / tcp

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-powered-by: PHP/7.2.34
content-type: text/html; charset=UTF-8
cache-control: public, max-age=0
expires: Fri, 10 May 2024 23:50:27 GMT
content-length: 23690
date: Fri, 10 May 2024 23:50:27 GMT
server: LiteSpeed
vary: User-Agent
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f4:c1:fd:ad:c9:3b:0d:d0:5e:64:a4:bc:58:f1:85:62:4d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr  2 05:41:29 2024 GMT
            Not After : Jul  1 05:41:28 2024 GMT
        Subject: CN=cpcalendars.scorestat.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:e0:26:e3:0c:a3:b7:35:98:81:bc:07:c8:
                    20:53:03:b8:f9:1c:2a:c8:4d:b2:fd:54:99:99:6d:
                    e5:44:bb:81:97:97:3e:ae:80:82:61:8d:5b:9f:9c:
                    f0:0f:3f:f1:51:af:d3:b6:5e:c1:d7:1a:75:1e:07:
                    2a:3f:30:c0:18:2e:41:00:78:04:0a:e0:13:94:c8:
                    59:99:3d:5d:85:dd:a4:01:80:ea:0f:93:84:ec:46:
                    0e:e4:1d:bc:04:92:d8:2f:f6:d0:89:e7:f2:da:71:
                    7e:bc:4a:29:eb:ed:4e:e5:aa:60:0b:d1:9b:da:13:
                    85:cd:af:45:77:9e:82:a5:9b:f4:bc:80:c4:93:43:
                    d9:6f:fa:ae:01:77:27:2a:61:fd:27:a8:6d:fa:ae:
                    97:ce:6c:38:da:cb:c2:d0:27:a3:a9:c8:aa:03:34:
                    1e:85:51:05:2f:1f:e7:e3:be:e9:20:c2:9c:ac:50:
                    49:88:07:37:7e:b6:0f:ce:0f:f3:ca:0c:18:db:49:
                    6e:91:ac:32:76:46:f7:cd:2e:a5:25:9f:84:b3:c7:
                    75:94:05:8d:58:fa:3f:48:06:c8:36:cb:e4:b0:53:
                    da:fe:68:5c:69:92:84:77:ca:aa:45:66:ac:32:f1:
                    45:26:20:c2:22:27:d2:8d:10:e9:63:57:58:36:86:
                    9b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                34:BB:B0:B1:04:8C:C7:C0:4A:79:73:8A:FD:CA:0F:5A:57:B7:67:38
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:cpanel.scorestat.com, DNS:cpcalendars.scorestat.com, DNS:cpcontacts.scorestat.com, DNS:mail.scoresta.topro2.fcomet.com, DNS:mail.scorestat.com, DNS:scoresta.topro2.fcomet.com, DNS:scorestat.com, DNS:webdisk.scorestat.com, DNS:webmail.scorestat.com, DNS:www.scoresta.topro2.fcomet.com, DNS:www.scorestat.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : Apr  2 06:41:29.088 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C3:86:03:98:2C:D6:6F:E0:CF:73:08:
                                80:4B:1D:43:DA:B7:DE:D7:AF:4D:CE:5E:16:5A:7C:6B:
                                BA:FF:1F:A8:E5:02:21:00:F0:AA:4D:E0:61:09:BF:4E:
                                94:01:E3:60:CF:78:CC:96:E4:65:E0:8B:62:43:6B:A5:
                                29:B4:EE:60:59:DF:28:AB
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 19:98:10:71:09:F0:D6:52:2E:30:80:D2:9E:3F:64:BB:
                                83:6E:28:CC:F9:0F:52:8E:EE:DF:CE:4A:3F:16:B4:CA
                    Timestamp : Apr  2 06:41:29.142 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A8:B1:62:E9:83:26:67:AF:CA:C2:4A:
                                E9:3C:EB:43:AC:44:3D:CD:F8:4B:6B:62:72:8B:57:7E:
                                54:9E:CC:99:1E:02:20:11:BD:94:67:68:05:A2:FC:C7:
                                2A:55:2A:00:85:35:3C:BE:FB:BD:2A:DF:64:AE:96:63:
                                8A:09:DD:4B:EE:E4:28
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        30:e7:79:0f:bc:48:11:80:a8:1c:de:dc:57:23:ec:ec:03:0b:
        62:e4:81:ad:e5:aa:0e:31:d4:90:53:ca:6c:4b:d4:b4:24:15:
        22:a6:40:34:0e:8d:00:a6:95:8d:a5:5c:7d:c8:e3:65:28:59:
        0e:e1:cc:bd:e7:97:c6:e7:d3:33:fc:53:ef:e5:1b:a8:81:5d:
        02:ca:eb:32:a0:04:5b:a2:71:8b:cd:8a:9e:de:ec:59:58:c4:
        54:d1:91:f4:46:64:b8:3e:c7:35:e3:e6:20:a4:6a:30:1a:e9:
        45:b3:f7:73:e1:f7:2c:68:61:dc:59:20:6e:ed:dd:eb:f0:b7:
        87:22:22:50:ff:7d:f8:c5:54:21:02:0d:d4:69:16:2a:3d:4a:
        4d:65:b8:28:61:ef:9e:59:72:ff:52:b3:ea:80:e4:bd:10:ce:
        9a:d2:18:ef:c3:be:e7:20:c1:46:a1:b9:8c:5d:ab:c3:be:db:
        34:b0:4e:b5:d6:d7:c3:61:a4:e2:28:b5:6c:23:d5:bb:a5:98:
        0e:ea:95:78:c1:19:f9:05:db:ab:c1:10:6b:c4:54:16:8f:a5:
        32:5a:26:f8:e6:b6:e7:e9:4b:44:6c:ea:ea:a5:75:99:5c:ef:
        d4:da:c7:1a:71:3c:8c:38:b7:57:7e:9d:f9:f4:ae:7a:8b:45:
        cd:93:bc:27

1711527167 | 2024-04-22T07:56:18.122682

2082 / tcp

HTTP/1.1 200 OK
Date: Mon, 22 Apr 2024 07:56:17 GMT
Content-Length: 1560
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Cache-Control: no-store, max-age=0
Server: imunify360-webshield/1.21

2016944454 | 2024-05-06T14:06:10.984301

2083 / tcp

HTTP/1.1 200 OK
Date: Mon, 06 May 2024 14:06:10 GMT
Content-Length: 1430
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Cache-Control: no-store, max-age=0
Server: imunify360-webshield/1.21

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8a:8f:f9:f4:61:a2:f5:ce:f4:e3:58:b8:1f:6e:28:87
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=TX, L=Houston, O=cPanel, Inc., CN=cPanel, Inc. Certification Authority
        Validity
            Not Before: Mar 25 00:00:00 2024 GMT
            Not After : Jun 23 23:59:59 2024 GMT
        Subject: CN=a1-heatingandcooling.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9e:f3:0e:b3:f5:fc:b7:79:8d:eb:27:04:d6:7f:
                    eb:35:47:16:c8:e9:dd:67:c3:0d:f7:e7:05:69:6d:
                    af:53:ba:5d:8c:f2:4f:74:ac:7d:42:40:cc:b0:c0:
                    23:20:0c:67:32:d8:39:9e:5d:d1:0d:04:53:08:b4:
                    15:57:b7:40:ae:4d:00:28:4f:c6:50:f7:fa:d7:d7:
                    92:91:59:46:da:38:77:3e:95:bc:cb:6e:77:f8:ee:
                    15:d9:63:24:21:9f:07:89:e0:ab:b7:83:42:b1:72:
                    1f:43:0f:af:29:09:24:8e:59:33:c0:08:8b:f2:83:
                    9a:ec:b3:24:b8:5c:7a:2a:3b:98:11:2d:fc:1a:d1:
                    9e:cf:ba:1d:ad:c4:0e:40:41:79:8d:10:94:da:e1:
                    2d:bd:9b:e5:06:33:50:0b:db:52:60:62:df:a2:5a:
                    02:22:32:52:68:f5:21:05:de:de:56:26:19:da:a7:
                    4c:ad:e0:50:14:5b:9a:23:6e:16:68:4d:77:5e:d0:
                    4b:d6:52:a6:19:17:06:de:18:68:12:74:ef:0f:95:
                    e7:12:ae:38:1f:89:c9:f5:e6:3b:e8:73:95:f4:29:
                    b6:88:9a:0f:a2:42:9f:d1:48:47:3e:c8:e1:ce:d0:
                    5e:15:97:94:8c:5e:d0:b6:b4:fb:90:ed:f5:87:74:
                    94:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                7E:03:5A:65:41:6B:A7:7E:0A:E1:B8:9D:08:EA:1D:8E:1D:6A:C7:65
            X509v3 Subject Key Identifier: 
                8F:78:45:4E:65:39:23:A7:67:F3:25:55:9C:71:81:21:A4:B0:00:DF
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.52
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.comodoca.com/cPanelIncCertificationAuthority.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/cPanelIncCertificationAuthority.crt
                OCSP - URI:http://ocsp.comodoca.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Mar 25 07:34:33.186 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:6B:16:9D:06:8D:8A:6F:59:C5:6F:3D:5B:
                                3C:D6:B0:39:35:02:16:8E:4A:7D:F4:97:57:42:70:9D:
                                1F:84:7F:B6:02:21:00:FF:54:BC:1F:71:01:48:DE:31:
                                72:E8:20:F2:05:D0:DB:A5:E3:01:04:BA:85:F2:52:77:
                                90:92:00:67:94:CA:0E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Mar 25 07:34:33.084 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:2C:4E:A1:B3:4B:87:BC:31:CC:24:9E:AD:
                                0E:A7:6E:5E:22:58:A2:04:A0:B4:DA:DC:A5:AC:1F:BC:
                                16:04:3F:23:02:21:00:8A:62:91:07:5A:47:FD:95:C8:
                                86:20:CA:5D:5B:B6:31:E9:36:FB:FF:E6:84:60:52:DB:
                                28:23:68:B3:10:B9:40
            X509v3 Subject Alternative Name: 
                DNS:a1-heatingandcooling.com, DNS:cpanel.a1-heatingandcooling.com, DNS:cpcalendars.a1-heatingandcooling.com, DNS:cpcontacts.a1-heatingandcooling.com, DNS:mail.a1-heatingandcooling.com, DNS:webdisk.a1-heatingandcooling.com, DNS:webmail.a1-heatingandcooling.com, DNS:www.a1-heatingandcooling.com
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        32:64:89:cb:2a:e4:aa:b0:8e:3f:f7:6b:59:7b:51:c4:aa:e9:
        6c:ec:b9:bc:b3:3a:ce:10:b9:4e:48:0d:88:1e:80:89:3c:61:
        cd:34:b0:fc:f3:ad:38:67:82:00:e7:d5:91:37:a5:d0:80:33:
        80:a7:66:70:9b:e9:6f:b7:f9:c0:a6:4e:e8:6b:a7:8f:8e:fd:
        f7:30:ce:29:a8:df:8c:76:53:e5:05:92:e0:36:f1:e0:a6:16:
        37:64:43:c2:e4:f5:08:bf:ea:ed:33:8e:e9:10:d7:ec:24:13:
        e6:71:d0:ab:73:ac:c2:7c:71:86:c8:f6:dc:45:33:a4:d9:00:
        1a:80:2a:cc:44:ca:b7:17:af:c0:ee:84:36:79:01:c2:e7:a7:
        a7:eb:b8:ea:90:ec:11:dc:d3:2c:25:00:1c:20:77:40:a0:94:
        be:93:2c:17:bd:68:9a:6e:e3:dd:10:7d:b3:81:d8:06:68:b0:
        89:18:e5:b3:c0:90:0f:0c:68:ec:be:d3:69:ee:a0:e9:50:70:
        2c:6a:e9:86:dc:01:9d:30:30:d6:2a:99:89:f6:e5:85:42:17:
        2b:d1:8e:f4:1c:3c:58:96:64:36:94:ca:30:0c:66:18:5a:c4:
        52:f4:9f:80:88:ab:ea:af:43:75:f4:a4:62:11:fc:3e:b5:c6:
        2c:b8:67:37

420229360 | 2024-05-07T23:24:07.322475

3306 / tcp

MySQL:
  Protocol Version: 10
  Version: 8.0.37
  Capabilities: 65535
  Server Language: 224
  Server Status: 2
  Extended Server Capabilities: 57343
  Authentication Plugin: mysql_native_password

172.105.110.6

Last Seen: 2024-05-10

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

977076610 | 2024-05-04T22:15:18.983768
80 / tcp

1629271587 | 2024-05-10T23:50:27.139477
443 / tcp

1711527167 | 2024-04-22T07:56:18.122682
2082 / tcp

2016944454 | 2024-05-06T14:06:10.984301
2083 / tcp

420229360 | 2024-05-07T23:24:07.322475
3306 / tcp

MySQL8.0.37

Products

Pricing

Contact Us

172.105.110.6

Last Seen: 2024-05-10

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

977076610 | 2024-05-04T22:15:18.983768 80 / tcp

1629271587 | 2024-05-10T23:50:27.139477 443 / tcp

1711527167 | 2024-04-22T07:56:18.122682 2082 / tcp

2016944454 | 2024-05-06T14:06:10.984301 2083 / tcp

420229360 | 2024-05-07T23:24:07.322475 3306 / tcp

MySQL8.0.37

Products

Pricing

Contact Us

977076610 | 2024-05-04T22:15:18.983768
80 / tcp

1629271587 | 2024-05-10T23:50:27.139477
443 / tcp

1711527167 | 2024-04-22T07:56:18.122682
2082 / tcp

2016944454 | 2024-05-06T14:06:10.984301
2083 / tcp

420229360 | 2024-05-07T23:24:07.322475
3306 / tcp