GeneralInformation

Hostnames	expiereddnsmanager.com www.expiereddnsmanager.com icsvm3.webair.com
Domains	expiereddnsmanager.com webair.com
Country	United States
City	New York City
Organization	Webair Internet Development Company Inc.
ISP	Webair Internet Development Company Inc.
ASN	AS27257

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVE-2021-3618

5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

25 53 80 110 111 443

482432220 | 2024-04-14T01:26:41.824423

25 / tcp

220 icsvm3.webair.com ESMTP Postfix (Ubuntu)
250-icsvm3.webair.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9e:38:24:f7:0e:4a:96:9b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a20dc176237f
        Validity
            Not Before: Jan 22 16:56:43 2019 GMT
            Not After : Jan 19 16:56:43 2029 GMT
        Subject: CN=a20dc176237f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e0:20:94:50:76:b6:8b:9d:31:d7:ed:f4:5a:d3:
                    eb:35:9c:99:c8:de:b8:11:80:32:16:9a:d8:b3:84:
                    c6:47:81:2b:e2:8c:e2:a2:75:27:26:25:7a:46:ce:
                    34:5a:11:a5:0c:90:37:e1:a4:0d:ab:7f:bd:12:2d:
                    db:de:e9:5f:78:8e:40:a6:c8:3e:9d:3d:ff:1e:2b:
                    7e:cb:c2:57:37:0f:10:f7:0a:7a:69:a5:52:af:43:
                    bb:6a:bb:95:0c:30:52:45:45:f2:96:e1:8e:55:b3:
                    97:31:e4:0a:ed:62:c1:20:06:18:77:97:98:de:09:
                    0f:a5:75:6d:b7:9d:dd:56:bf:9c:46:19:3e:40:c5:
                    d3:20:cf:1b:a0:4c:79:90:48:90:53:4e:9a:07:58:
                    77:1a:77:13:d9:07:3c:f3:a1:1c:37:2d:28:32:52:
                    57:db:73:68:f1:11:87:e5:de:a5:42:16:c1:5d:19:
                    5c:78:4f:51:43:8f:ae:7c:5c:18:3e:6d:24:3b:54:
                    31:f3:7b:fd:26:fd:6b:ba:b6:97:6c:46:da:d6:93:
                    9e:fe:57:88:cf:7f:ca:d3:f7:5c:52:d1:11:66:68:
                    d0:51:ad:33:7a:eb:d0:41:ed:1f:14:f7:24:9a:de:
                    dd:3e:1d:89:e5:1a:4e:91:39:ab:a6:11:6d:e9:29:
                    84:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Subject Alternative Name: 
                DNS:a20dc176237f
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        d4:64:79:78:d1:4c:ce:df:64:a6:19:5d:4b:3f:1b:53:4d:27:
        f7:56:12:3e:7d:b6:32:2c:16:9a:b5:eb:10:36:a2:f8:5b:2d:
        fa:e3:75:e0:ac:ed:cb:b5:40:3a:d8:e8:e4:68:eb:aa:78:a7:
        a6:13:ad:37:a2:bd:a4:74:52:34:75:fe:2a:99:b3:62:c9:a8:
        19:d3:b7:3d:fb:b9:11:02:0d:98:01:1f:19:91:29:74:0c:3a:
        b4:f7:7f:11:14:b3:c8:87:2c:bd:5c:d2:f8:69:61:01:e3:7f:
        47:66:46:3b:b0:ac:d0:eb:97:d5:39:2f:b8:de:89:88:01:c3:
        09:03:e2:6d:c2:82:5c:82:f1:db:8f:52:38:05:85:78:cb:36:
        24:76:0f:ab:54:79:4d:0d:34:91:d5:10:13:aa:f4:cf:de:98:
        57:28:f7:68:b1:a0:90:15:19:62:b8:07:d4:6f:ba:b0:27:d9:
        c5:36:d5:c7:af:5e:8f:67:10:3e:08:20:0f:61:c3:21:59:42:
        7f:c8:03:95:f6:33:c5:d8:64:1a:9d:b6:8b:af:47:e5:af:7d:
        84:79:8d:e0:e2:0f:67:14:3b:51:4f:79:b1:99:a7:2c:f1:89:
        63:86:97:4c:54:44:92:5f:50:3a:21:99:f6:ff:ae:3b:f1:39:
        09:c8:bb:26

MAC Addresses

A2:0D:C1:76:23:7F
    Unknown

1200904736 | 2024-04-03T19:17:16.900971

53 / tcp

Resolver ID: icpv-dns1

1200904736 | 2024-04-09T09:48:48.489333

53 / udp

Resolver ID: icpv-dns1

1294721975 | 2024-04-18T08:24:12.632896

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Thu, 18 Apr 2024 08:24:11 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

-2029277987 | 2024-04-04T13:27:03.353758

110 / tcp

+OK Dovecot (Ubuntu) ready.
+OK
CAPA
TOP
UIDL
RESP-CODES
PIPELINING
AUTH-RESP-CODE
USER
SASL PLAIN
.

-1345205424 | 2024-04-10T05:07:53.597306

111 / tcp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111

-1345205424 | 2024-04-14T18:00:33.003258

111 / udp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111

2088919101 | 2024-04-17T02:04:59.542731

443 / tcp

HTTP/1.1 302 Found
Server: nginx/1.20.1
Date: Wed, 17 Apr 2024 02:04:58 GMT
Content-Length: 0
Connection: keep-alive
Location: http://nexiumcase.com/?t=16a13d8cbeec55ba3c7be6656ecc54c5

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:80:c1:96:ec:4e:70:db:7d:34:9a:39:b7:78:fb:76:33:d2
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Mar 23 14:15:35 2024 GMT
            Not After : Jun 21 14:15:34 2024 GMT
        Subject: CN=expiereddnsmanager.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:85:10:26:40:6d:44:dd:34:08:4d:2d:d2:
                    94:71:82:db:aa:25:7b:88:33:62:09:5b:69:64:e0:
                    97:a6:1e:46:26:70:5d:f7:75:25:47:63:92:a6:16:
                    68:c3:ed:66:45:39:f0:f3:5a:93:9a:11:ab:cf:c7:
                    c7:b8:db:70:af:de:99:0f:18:a2:97:88:73:ee:a0:
                    3c:dd:31:2c:72:71:f5:74:45:31:51:82:39:ed:a2:
                    25:e4:3f:ec:8a:9e:ca:ae:6f:44:75:2d:a9:dc:49:
                    f7:a1:f7:18:6c:a8:84:83:f4:59:cd:30:ce:e9:90:
                    73:42:46:29:3b:18:f7:23:34:06:5a:75:de:63:39:
                    55:b2:45:ee:6f:19:b4:d3:b1:75:fb:d1:98:1b:f0:
                    8e:1d:7a:ab:44:bd:1a:7e:32:d6:9f:fe:8a:77:90:
                    ee:6c:9e:b7:49:1c:08:f3:5c:0c:b9:9e:b2:17:bb:
                    56:46:d0:26:0a:f3:18:2f:7e:0d:96:be:07:93:ee:
                    72:49:a4:c9:2e:6b:0e:17:f1:3a:82:b1:e7:54:17:
                    27:0d:02:fd:9d:8c:48:22:f8:1e:8d:a3:2f:8c:42:
                    28:29:9d:68:f1:61:e5:88:a7:a3:6a:f3:7f:fb:4a:
                    37:84:94:f3:9d:60:25:ac:f1:4e:b0:8a:60:0a:80:
                    ef:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                D2:CA:15:98:28:A5:FC:1E:49:36:5A:5F:0C:FA:2B:E2:6F:20:B9:63
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:expiereddnsmanager.com, DNS:www.expiereddnsmanager.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Mar 23 15:15:36.217 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:5B:07:A0:FE:DD:D6:DC:A6:28:87:B2:4E:
                                DA:B4:D2:B6:EC:E4:E2:52:39:17:91:EB:B0:7C:F8:2F:
                                D1:0C:AB:BF:02:20:56:16:41:4E:A0:85:0A:5B:A7:14:
                                90:D0:36:AE:E3:3B:6F:D0:67:E8:D1:9C:7B:D6:16:D0:
                                B5:85:61:A6:B1:4E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : Mar 23 15:15:38.160 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:B1:B5:81:C2:71:5B:FB:63:7D:99:38:
                                E3:F9:BE:38:74:52:8B:33:6B:48:B1:93:11:0B:9C:CE:
                                30:F8:71:17:5C:02:20:32:24:E8:2D:9E:B1:2F:80:21:
                                0C:7E:0A:2F:85:80:9D:D6:13:E5:D6:25:70:0C:97:B6:
                                F5:43:F9:9D:5B:BC:82
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        96:28:52:90:e9:54:a1:03:64:ab:7e:61:9d:1c:f5:3b:c5:67:
        f7:ed:c3:94:db:32:42:55:f8:6b:20:6d:79:1f:52:06:48:c7:
        c7:4d:12:bb:bd:f0:81:9b:6f:b2:4f:a9:33:3b:c4:bb:40:79:
        4e:6c:b5:5e:c0:11:28:6b:ee:46:b8:95:93:c0:82:41:25:29:
        ad:76:a3:ff:ca:fe:80:98:b7:75:10:fa:0d:b6:bf:13:76:07:
        76:c5:24:4e:c5:27:16:e8:ec:f9:1b:be:66:2d:82:93:e7:11:
        55:44:80:e6:b9:bd:ad:16:55:39:e2:a0:78:3a:c8:c6:c1:1f:
        18:de:ff:a7:32:7a:25:5b:f6:29:4d:da:91:e0:85:8a:19:9b:
        5f:39:f7:f1:7b:32:97:b0:20:ed:27:cf:6a:f1:ae:e7:9b:9d:
        31:75:42:56:e7:77:a4:e6:d2:82:a6:f3:ad:6d:03:54:7f:68:
        6b:e9:de:eb:36:85:53:ad:6e:cf:fd:b9:c7:6c:e0:fc:89:b5:
        6d:de:68:bf:1d:c7:55:77:d0:bb:f4:b9:71:6f:f9:f3:5f:bb:
        cb:5e:55:76:18:d2:79:9a:c0:24:50:f0:12:e5:06:ec:1f:e3:
        a4:42:b8:4f:1a:79:89:91:ee:5d:ca:75:47:c4:9a:fa:3a:4d:
        9a:e4:aa:b1

173.239.8.164

Last Seen: 2024-04-18

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

482432220 | 2024-04-14T01:26:41.824423
25 / tcp

Postfix smtpd

1200904736 | 2024-04-03T19:17:16.900971
53 / tcp

1200904736 | 2024-04-09T09:48:48.489333
53 / udp

1294721975 | 2024-04-18T08:24:12.632896
80 / tcp

nginx1.20.1

-2029277987 | 2024-04-04T13:27:03.353758
110 / tcp

-1345205424 | 2024-04-10T05:07:53.597306
111 / tcp

-1345205424 | 2024-04-14T18:00:33.003258
111 / udp

2088919101 | 2024-04-17T02:04:59.542731
443 / tcp

nginx1.20.1

Products

Pricing

Contact Us

173.239.8.164

Last Seen: 2024-04-18

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

482432220 | 2024-04-14T01:26:41.824423 25 / tcp

Postfix smtpd

1200904736 | 2024-04-03T19:17:16.900971 53 / tcp

1200904736 | 2024-04-09T09:48:48.489333 53 / udp

1294721975 | 2024-04-18T08:24:12.632896 80 / tcp

nginx1.20.1

-2029277987 | 2024-04-04T13:27:03.353758 110 / tcp

-1345205424 | 2024-04-10T05:07:53.597306 111 / tcp

-1345205424 | 2024-04-14T18:00:33.003258 111 / udp

2088919101 | 2024-04-17T02:04:59.542731 443 / tcp

nginx1.20.1

Products

Pricing

Contact Us

482432220 | 2024-04-14T01:26:41.824423
25 / tcp

1200904736 | 2024-04-03T19:17:16.900971
53 / tcp

1200904736 | 2024-04-09T09:48:48.489333
53 / udp

1294721975 | 2024-04-18T08:24:12.632896
80 / tcp

-2029277987 | 2024-04-04T13:27:03.353758
110 / tcp

-1345205424 | 2024-04-10T05:07:53.597306
111 / tcp

-1345205424 | 2024-04-14T18:00:33.003258
111 / udp

2088919101 | 2024-04-17T02:04:59.542731
443 / tcp