GeneralInformation

Hostnames	webcaster.pro
Domains	webcaster.pro
Country	Russian Federation
City	Moscow
Organization	LLC INVENTOS
ISP	LLC Inventos
ASN	AS50169

WebTechnologies

Programming languages

Ruby

Web frameworks

Ruby on Rails

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

80 443

-549157627 | 2024-05-27T15:47:44.475572

80 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Status: 200 OK
Cache-Control: max-age=0, private, must-revalidate
X-Robots-Tag: noindex
X-Request-Id: 84dbab883a775296e3abb66d4752be15
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
X-UA-Compatible: IE=Edge,chrome=1
ETag: "eb9548d08a115add4e128176ed48da2e"
X-Runtime: 0.012738
Date: Mon, 27 May 2024 15:47:44 GMT
X-Powered-By: Phusion Passenger(R)
Server: nginx + Phusion Passenger(R)
X-App-Server: webcaster.m9-host2
X-App-Group: default

-1520182062 | 2024-05-31T13:30:41.729365

443 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Status: 200 OK
Cache-Control: max-age=0, private, must-revalidate
X-Robots-Tag: noindex
X-Request-Id: c690e37850667acbc2c1f1d74cda93be
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
X-UA-Compatible: IE=Edge,chrome=1
ETag: "4b12c9afd186f0f5c50100eeeb3c2b9f"
X-Runtime: 0.015741
Date: Fri, 31 May 2024 13:30:41 GMT
Set-Cookie: _webcaster_new_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJTgzMzkyY2UzODdlNGU1NjcyMzJmY2ExYWQzYWMzNzY5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMWlMaTBCODZoSVZvdUl0aW5HK2pZemdoN0NuRmtLbXVXeFJJSHdkUFFIcTg9BjsARg%3D%3D--352582a3fec12d3cb5201d36c5bdd33c7354c850; path=/; secure; HttpOnly; SameSite=None
X-Powered-By: Phusion Passenger 6.0.2
Server: nginx/1.18.0 + Phusion Passenger 6.0.2
X-App-Server: bl.tc-host1
X-App-Group: default

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            88:1b:c7:5a:93:63:ca:bc
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2
        Validity
            Not Before: Jul 28 10:26:37 2023 GMT
            Not After : Aug 28 10:26:37 2024 GMT
        Subject: CN=*.webcaster.pro
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:44:82:e3:27:8a:25:a8:d5:01:bc:6c:f9:
                    09:ce:71:97:99:1a:9d:08:54:78:ba:02:d6:f3:30:
                    c1:c9:0d:cb:98:c6:f2:1d:b8:e4:f5:d8:a8:4a:89:
                    b3:58:1c:37:0e:c4:e7:06:bd:63:dd:11:ac:06:d7:
                    ea:2d:87:d8:8b:fc:57:95:eb:4c:eb:97:1f:4d:72:
                    36:d9:76:e1:a3:a5:74:db:4a:07:db:52:1c:9a:15:
                    d7:a5:ea:67:c6:f0:7a:af:ea:a6:a8:4d:37:71:2c:
                    96:b8:7e:d7:63:9d:c7:ca:37:67:fd:59:85:aa:67:
                    23:2c:c1:04:fb:d4:f2:76:f6:30:a9:14:6c:40:52:
                    a5:7d:b6:22:9e:ab:6f:e0:f0:21:2e:7d:43:67:0b:
                    f5:01:0c:8d:48:5f:16:c1:8a:f6:3b:b3:4c:74:c2:
                    20:56:43:b6:2b:34:84:7c:8d:08:ef:ad:02:52:9d:
                    15:64:e9:1b:13:19:57:1f:87:a1:ed:49:e2:47:ff:
                    3f:77:a9:f1:9c:33:82:f5:f5:58:40:a5:e8:18:96:
                    34:b9:1d:56:79:fc:f7:58:ab:ff:45:ab:8e:b8:80:
                    dd:58:2f:4c:cf:e5:19:90:b4:92:2e:2d:fa:c6:e1:
                    4f:cc:54:38:c5:c3:55:ba:cf:2b:4a:cf:f2:94:8b:
                    8f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.godaddy.com/gdig2s1-7439.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114413.1.7.23.1
                  CPS: http://certificates.godaddy.com/repository/
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com/
                CA Issuers - URI:http://certificates.godaddy.com/repository/gdig2.crt
            X509v3 Authority Key Identifier: 
                40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE
            X509v3 Subject Alternative Name: 
                DNS:*.webcaster.pro, DNS:webcaster.pro
            X509v3 Subject Key Identifier: 
                41:10:A1:2A:BD:EC:AE:DD:EF:3C:ED:C6:3C:E7:5C:51:3D:18:00:1B
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Jul 28 10:26:37.835 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:25:EF:1D:98:00:90:5B:73:F2:9D:C4:32:
                                1A:00:00:A6:68:73:70:6D:D8:6E:A6:3F:09:BF:97:D1:
                                E5:2D:2B:31:02:20:1C:A1:8D:85:31:F7:7F:1E:0B:A0:
                                B6:2D:EB:3B:F0:9D:64:43:F0:0E:D9:13:1A:EA:C4:3D:
                                2E:73:D9:23:C6:6D
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Jul 28 10:26:38.136 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:13:9F:2D:5A:21:BA:FF:7A:E6:FD:B4:D6:
                                CA:FC:40:B5:71:88:FF:B7:50:30:7C:B9:ED:BF:C2:67:
                                57:92:52:F7:02:20:67:27:5E:79:7A:DD:34:A8:40:DE:
                                25:96:7A:55:5D:CC:08:9D:B2:9C:0F:9C:75:1D:64:B6:
                                10:55:06:12:AF:49
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Jul 28 10:26:38.241 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A5:FF:8E:8C:F0:C9:A6:7B:D2:14:7F:
                                9A:66:89:B6:1E:60:82:F7:F0:1A:D2:93:61:17:FB:46:
                                19:B9:E4:36:A5:02:20:72:38:6B:F0:01:EC:47:A0:49:
                                4E:D4:32:B9:53:53:C9:10:63:31:17:0A:B3:C2:3E:7A:
                                AF:02:6B:42:A7:31:3C
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        4a:b5:6f:bc:80:64:b9:3d:37:2d:96:69:4f:9b:87:31:63:ff:
        14:31:4b:f1:a9:c7:dd:f4:f8:f9:f3:83:ac:1e:68:ba:49:b8:
        82:b8:e0:76:4a:6c:dd:3c:5e:2e:16:2c:24:7e:44:9f:92:05:
        5d:78:46:bc:57:28:37:00:ee:03:a2:1c:b9:62:bd:46:a1:a9:
        1c:52:35:fc:96:48:bb:26:33:68:c8:8f:82:6f:5a:ec:50:b4:
        6d:96:d0:60:6d:10:0b:00:25:f6:cc:8b:ec:5d:a4:f5:43:03:
        1b:a6:bf:a5:f1:31:57:5e:a2:b6:91:a8:ee:61:c2:3c:a8:6c:
        a4:80:e6:f0:ae:2f:8a:5d:db:66:fb:da:db:de:5c:ef:b4:8b:
        67:c0:94:f9:8e:ff:72:01:38:b8:c0:b3:d2:5b:7d:81:d9:b4:
        0b:35:71:05:ba:ae:32:10:8c:47:cd:db:30:e8:82:83:6c:65:
        61:92:d5:93:12:76:09:e2:57:ec:9a:93:7e:4f:9d:c0:5a:3c:
        34:bc:70:98:b3:1a:6c:83:a0:23:fa:6c:d4:68:c0:b2:73:cb:
        b0:e8:01:15:39:67:69:33:38:a7:e4:33:7b:30:ce:91:bb:34:
        22:64:4d:5a:98:20:b7:98:d1:c7:01:34:e9:9f:07:1e:18:fe:
        78:95:ca:23

194.190.130.28

Last Seen: 2024-05-31

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-549157627 | 2024-05-27T15:47:44.475572
80 / tcp

nginx

-1520182062 | 2024-05-31T13:30:41.729365
443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

194.190.130.28

Last Seen: 2024-05-31

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-549157627 | 2024-05-27T15:47:44.475572 80 / tcp

nginx

-1520182062 | 2024-05-31T13:30:41.729365 443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

-549157627 | 2024-05-27T15:47:44.475572
80 / tcp

-1520182062 | 2024-05-31T13:30:41.729365
443 / tcp