GeneralInformation

Hostnames	axsender.com.ar ml1.fmmelon.com.ar
Domains	axsender.com.ar fmmelon.com.ar
Country	Argentina
City	Buenos Aires
Organization	FLEETMAILER S.R.L.
ISP	Gigared S.A.
ASN	AS20207

WebTechnologies

JavaScript libraries

jQuery1.11.0

jQuery UI

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251	4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

25 80 111 443 3306

1456822185 | 2024-04-18T11:49:48.142438

25 / tcp

421 ml1 You talk too soon

-2100514759 | 2024-04-13T11:15:06.273939

80 / tcp

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 13 Apr 2024 11:15:05 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://aiv.fleetmailer.com/

-1345205424 | 2024-03-21T15:39:41.556460

111 / tcp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111

-1345205424 | 2024-04-17T16:45:43.644460

111 / udp

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111

-787251324 | 2024-04-03T03:25:51.451699

443 / tcp

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 03 Apr 2024 03:25:51 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 3711
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=9ffp9pnsshp80m11i1v0uojr9v; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding,User-Agent

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:88:39:c4:cd:59:93:70:a4:28:23:db:cc:75:9d:9c:ff:aa
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr 27 14:29:40 2021 GMT
            Not After : Jul 26 14:29:40 2021 GMT
        Subject: CN=axsender.com.ar
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ce:6d:b6:ab:80:81:eb:5c:88:74:1c:16:d0:44:
                    fb:4c:99:76:e9:b3:61:c7:33:71:7f:22:09:e9:a9:
                    1d:59:dd:9f:41:d0:66:29:d5:be:f6:11:0d:a3:b6:
                    33:47:7d:32:d4:a4:53:72:82:92:4b:8d:91:0a:c7:
                    6c:d2:6c:93:0b:53:75:90:ac:d3:f5:04:89:cb:d6:
                    bb:a8:06:d3:e0:84:ef:42:5b:e6:d8:09:52:20:12:
                    36:f4:06:cd:68:68:0c:3a:b3:11:cd:4f:a1:fc:36:
                    e7:34:27:2d:69:f8:7b:af:ff:71:7d:52:ae:58:b2:
                    96:cb:01:12:3c:ab:a3:d7:62:43:b6:f6:02:c5:9a:
                    0b:ca:87:d0:f0:9f:fa:d2:6e:be:86:96:4a:90:5a:
                    ba:7e:e6:0a:51:13:1c:93:fd:a4:4c:21:d7:1d:29:
                    cf:9c:c2:c4:a4:e6:2d:1d:4d:f0:18:a2:a1:6d:00:
                    bb:14:14:01:f9:4b:be:56:0c:47:db:be:4e:b4:c2:
                    63:10:05:e5:67:99:1a:1d:b3:ce:7b:73:c1:b1:54:
                    5a:6d:76:52:56:d8:f7:ea:4e:52:99:99:9a:fe:d8:
                    41:c3:51:43:24:36:4a:bb:8e:82:0c:b7:e2:ba:0e:
                    cd:4b:ea:4a:18:4a:a6:dc:a2:94:d5:e7:64:dc:ce:
                    4e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                3F:10:2A:81:ED:77:84:6B:D4:77:3F:FA:7E:57:A4:43:D0:14:B4:D1
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:axsender.com.ar
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.44947.1.1.1
                  CPS: http://cps.letsencrypt.org
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 44:94:65:2E:B0:EE:CE:AF:C4:40:07:D8:A8:FE:28:C0:
                                DA:E6:82:BE:D8:CB:31:B5:3F:D3:33:96:B5:B6:81:A8
                    Timestamp : Apr 27 15:29:40.546 2021 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F0:29:5B:23:D7:E5:8C:5A:6B:10:67:
                                C2:CC:84:84:1F:30:13:3B:F3:4B:B7:62:EE:5C:73:89:
                                0B:9E:AF:D0:1E:02:20:33:B6:3D:A7:19:BA:E2:C8:21:
                                AC:DE:50:3F:C6:3B:67:DC:5B:4B:55:54:4A:17:C8:3B:
                                36:55:3D:3E:F5:49:EE
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : F6:5C:94:2F:D1:77:30:22:14:54:18:08:30:94:56:8E:
                                E3:4D:13:19:33:BF:DF:0C:2F:20:0B:CC:4E:F1:64:E3
                    Timestamp : Apr 27 15:29:40.518 2021 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:28:6A:02:34:3D:1C:6A:C3:E5:0F:15:4B:
                                BB:6F:41:C7:AC:2D:96:92:9D:AF:AC:46:92:6F:A1:32:
                                7B:AB:97:99:02:20:02:AB:28:F6:62:7B:7D:F4:58:91:
                                0D:07:C1:FA:1B:15:C7:7E:02:CD:0E:40:EB:67:4A:E5:
                                5B:B0:BD:95:67:81
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        98:34:95:d3:9f:4c:f7:e6:95:f1:1f:5d:2f:e9:9a:b6:dc:cb:
        b1:cc:d6:a4:7d:ac:5c:2e:4b:c2:5f:26:55:df:4e:ee:d6:48:
        f0:d4:ca:e2:d8:e5:53:5c:ab:90:91:bb:2a:1f:69:98:4c:54:
        92:49:97:37:58:5d:c3:ab:9e:98:00:b9:4f:36:8b:a2:55:31:
        c0:b2:15:3d:42:d9:76:53:55:53:15:0a:73:f5:e8:b1:ff:31:
        55:99:6e:fa:00:a2:6e:47:63:2b:79:5a:18:18:14:fe:3d:3e:
        02:22:86:39:8f:c8:25:05:57:62:86:6f:eb:bf:05:76:32:97:
        21:d8:f3:99:c4:36:9a:9d:86:92:a6:99:30:18:47:b6:df:7e:
        05:0b:73:bd:ce:4a:0c:53:f4:a2:86:62:b4:3f:34:c1:d0:ef:
        31:9e:df:33:91:ff:ce:f5:ee:5d:71:fb:f9:a8:e5:36:2f:1c:
        f1:94:4d:35:36:24:03:27:ee:cf:40:2d:a7:76:de:34:57:21:
        8e:12:de:48:32:48:d0:09:e9:24:30:68:e4:6d:fb:a8:9b:f7:
        60:9a:55:c5:01:46:97:31:b5:5f:50:31:69:a2:fb:24:c2:60:
        b9:1f:6c:b3:bb:9c:a7:86:ef:42:b0:71:2f:d7:fd:9a:2c:96:
        06:5a:f1:3f

-1302325280 | 2024-04-11T07:27:16.355013

3306 / tcp

MySQL:
  Protocol Version: 10
  Version: 5.6.47
  Capabilities: 63487
  Server Language: 8
  Server Status: 2
  Extended Server Capabilities: 32895
  Authentication Plugin: mysql_native_password

190.105.144.31

Last Seen: 2024-04-18

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1456822185 | 2024-04-18T11:49:48.142438
25 / tcp

-2100514759 | 2024-04-13T11:15:06.273939
80 / tcp

nginx

-1345205424 | 2024-03-21T15:39:41.556460
111 / tcp

-1345205424 | 2024-04-17T16:45:43.644460
111 / udp

-787251324 | 2024-04-03T03:25:51.451699
443 / tcp

nginx

-1302325280 | 2024-04-11T07:27:16.355013
3306 / tcp

MySQL5.6.47

Products

Pricing

Contact Us

190.105.144.31

Last Seen: 2024-04-18

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1456822185 | 2024-04-18T11:49:48.142438 25 / tcp

-2100514759 | 2024-04-13T11:15:06.273939 80 / tcp

nginx

-1345205424 | 2024-03-21T15:39:41.556460 111 / tcp

-1345205424 | 2024-04-17T16:45:43.644460 111 / udp

-787251324 | 2024-04-03T03:25:51.451699 443 / tcp

nginx

-1302325280 | 2024-04-11T07:27:16.355013 3306 / tcp

MySQL5.6.47

Products

Pricing

Contact Us

1456822185 | 2024-04-18T11:49:48.142438
25 / tcp

-2100514759 | 2024-04-13T11:15:06.273939
80 / tcp

-1345205424 | 2024-03-21T15:39:41.556460
111 / tcp

-1345205424 | 2024-04-17T16:45:43.644460
111 / udp

-787251324 | 2024-04-03T03:25:51.451699
443 / tcp

-1302325280 | 2024-04-11T07:27:16.355013
3306 / tcp