GeneralInformation

Hostnames	ascbrazil.com.br condor1871.startdedicated.com
Domains	ascbrazil.com.br startdedicated.com
Country	United States
City	St. Louis
Organization	GoDaddy.com, LLC
ISP	GoDaddy.com, LLC
ASN	AS30083

WebTechnologies

JavaScript libraries

UI frameworks

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251	4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

80 443

574122553 | 2024-05-20T17:38:36.059731

80 / tcp

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 May 2024 17:38:35 GMT
Content-Type: text/html; charset=ISO-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: ASCCallCenter=jhp5pqql3ma18174ji67s691lo; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT", CP="CAO PSA OUR"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: accelerometer=(), autoplay=(self), camera=(self), encrypted-media=(), fullscreen=(), geolocation=(self ), gyroscope=(), magnetometer=(), microphone=(self), midi=(), payment=(), picture-in-picture=(), sync-xhr=(self), usb=() 
Content-Security-Policy: default-src 'self' data: gap: ws: https://www.google.com https://www.youtube-nocookie.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://trackjs.ascbrazil.com.br https://maps.googleapis.com https://www.gstatic.com https://ssl.google-analytics.com https://edge.fullstory.com https://*.google.com; img-src 'self' blob: data: content: https: *.googleapis.com sac1.ascbrazil.com.br https://maps.gstatic.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://p.typekit.net ; font-src * data:; object-src 'self';connect-src 'self' https://fcm.googleapis.com https://trackjs.ascbrazil.com.br wss://webrtc.ascbrazil.com.br:10443 wss://cc-ascbrazil.ascbrazil.com.br:8444/ws https://rs.fullstory.com https://maps.googleapis.com; media-src * blob:;

-1693927786 | 2024-05-19T20:22:21.977764

443 / tcp

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 19 May 2024 20:22:21 GMT
Content-Type: text/html; charset=ISO-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: ASCCallCenter=efuj3d4tb9r45mp3okrqq9i57o; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT", CP="CAO PSA OUR"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: accelerometer=(), autoplay=(self), camera=(self), encrypted-media=(), fullscreen=(), geolocation=(self ), gyroscope=(), magnetometer=(), microphone=(self), midi=(), payment=(), picture-in-picture=(), sync-xhr=(self), usb=() 
Content-Security-Policy: default-src 'self' data: gap: ws: https://www.google.com https://www.youtube-nocookie.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://trackjs.ascbrazil.com.br https://maps.googleapis.com https://www.gstatic.com https://ssl.google-analytics.com https://edge.fullstory.com https://*.google.com; img-src 'self' blob: data: content: https: *.googleapis.com sac1.ascbrazil.com.br https://maps.gstatic.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://p.typekit.net ; font-src * data:; object-src 'self';connect-src 'self' https://fcm.googleapis.com https://trackjs.ascbrazil.com.br wss://webrtc.ascbrazil.com.br:10443 wss://cc-ascbrazil.ascbrazil.com.br:8444/ws https://rs.fullstory.com https://maps.googleapis.com; media-src * blob:;

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f1:d6:fb:a9:e8:3c:36:c2:3a:d3:87:df:59:1c:c1
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
        Validity
            Not Before: Sep 13 00:00:00 2023 GMT
            Not After : Oct 13 23:59:59 2024 GMT
        Subject: CN=*.ascbrazil.com.br
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:9a:d2:24:a2:7e:e5:60:eb:6f:7e:59:ad:
                    bd:22:90:cc:1a:7e:7e:f5:05:cd:03:0a:42:00:aa:
                    3e:68:af:d3:ac:62:69:f5:3e:40:15:a2:12:dd:d1:
                    b8:d7:52:1b:12:94:e0:4a:7c:b9:76:92:6b:88:78:
                    90:5e:a2:4c:fe:80:38:67:12:0b:27:f3:0f:c7:98:
                    8f:53:1e:3e:77:44:27:c4:b5:79:79:f5:73:f7:99:
                    92:50:6b:f8:6d:8c:99:9d:e5:21:6f:ad:1c:1c:39:
                    b6:ca:22:ef:95:7e:38:d5:f2:47:ee:f8:69:e1:0e:
                    ca:98:46:6c:c6:7e:89:b9:5c:37:09:b1:f8:22:e2:
                    20:66:3d:e9:44:ce:cc:24:c4:7a:66:cf:8b:59:ae:
                    9c:34:49:16:2a:fe:91:1b:36:5f:f1:57:cd:79:c8:
                    41:8f:b1:aa:a8:0f:6b:95:5c:d3:9b:b2:b5:b8:00:
                    3d:4e:ac:4b:c6:61:67:46:31:6b:0a:cf:ce:c6:1a:
                    56:e8:42:4e:1e:be:7b:bf:7c:76:06:a0:87:a3:c3:
                    13:7d:5e:e9:4b:7f:36:b0:7b:e3:f8:9a:b5:c8:e8:
                    5f:43:c7:89:78:7c:08:0f:cd:3a:f0:8c:40:cc:d1:
                    cf:f4:0f:ba:70:08:e6:2e:53:92:a4:a9:fc:4c:aa:
                    7c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
            X509v3 Subject Key Identifier: 
                3D:7A:35:B4:2B:01:05:80:4B:A3:F6:67:29:D2:07:E9:5F:80:25:FA
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.7
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.ascbrazil.com.br, DNS:ascbrazil.com.br
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Sep 13 15:03:16.893 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:32:E7:79:72:7B:8F:2D:AA:F4:79:1A:35:
                                0F:A4:CA:4D:13:99:70:F5:AE:C3:40:5D:A9:42:1E:AF:
                                10:E7:CB:A9:02:20:35:79:08:3F:2A:92:5E:AF:35:DE:
                                49:DA:2D:FC:3E:FE:8F:6B:70:F1:91:18:D3:FE:A2:C5:
                                9F:B1:6A:62:D5:99
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Sep 13 15:03:16.980 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:19:BF:F9:F2:79:42:24:E7:83:1A:66:DC:
                                A4:EB:25:17:81:74:80:B0:E8:DD:23:C9:1E:74:46:F8:
                                59:BC:93:89:02:21:00:A4:89:B0:7D:C2:2F:21:C2:21:
                                2A:76:B2:44:91:DD:3C:59:21:4B:2D:77:DA:F2:A3:EA:
                                7A:7A:7A:00:5B:A8:10
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Sep 13 15:03:17.008 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:6F:E7:72:1D:13:48:FB:73:B2:37:BF:0A:
                                F0:5F:A4:A3:A6:04:7B:EB:57:FA:71:E1:F0:B3:EE:79:
                                A8:55:01:C4:02:21:00:88:BD:BC:07:42:39:D5:D3:B2:
                                7D:8E:88:CD:4A:A2:59:2E:09:BF:5F:43:DC:A9:16:D6:
                                31:99:3D:EE:DD:D9:23
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        be:cb:e6:16:66:6f:10:4f:64:99:f0:f4:96:e6:79:5c:9a:1f:
        23:82:48:ad:5c:60:82:a7:23:01:8d:84:75:a8:43:20:09:e5:
        9d:af:44:ff:1b:6a:37:0d:dd:4c:37:e6:ab:1a:e4:73:d7:8a:
        dc:0c:0f:a0:76:19:9d:d5:1a:3e:c7:d5:2b:3a:c1:72:ae:1f:
        b7:4e:27:31:da:f6:52:0d:a2:e2:ac:42:35:ee:76:d2:45:66:
        03:49:f8:7c:cb:b3:b3:2d:66:c1:4a:bd:09:20:71:b0:42:55:
        af:52:74:21:e9:15:e9:d7:27:cd:50:91:f4:30:31:36:a0:d8:
        1d:14:52:11:40:bc:96:50:51:60:62:75:bb:77:eb:d1:16:71:
        63:9a:86:2e:89:cf:5b:73:24:75:dc:b6:97:03:ff:30:88:d0:
        7b:f3:fb:d9:7c:06:e2:22:fd:16:00:a3:b5:c9:92:4c:6c:53:
        9e:8b:f9:aa:70:27:97:b1:a1:48:20:d4:91:2f:09:c6:22:02:
        f8:3c:f9:34:e7:84:7c:3a:ce:d5:f2:98:b3:6c:76:46:dd:06:
        e7:ab:b0:85:e9:d0:ea:db:34:f4:57:10:4e:e1:53:2c:31:a8:
        3d:45:4c:19:33:93:69:aa:f3:c1:01:07:67:07:2e:e4:aa:a0:
        0b:62:92:bd

209.126.119.29

Last Seen: 2024-05-20

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

574122553 | 2024-05-20T17:38:36.059731
80 / tcp

nginx

-1693927786 | 2024-05-19T20:22:21.977764
443 / tcp

nginx

Products

Pricing

Contact Us

209.126.119.29

Last Seen: 2024-05-20

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

574122553 | 2024-05-20T17:38:36.059731 80 / tcp

nginx

-1693927786 | 2024-05-19T20:22:21.977764 443 / tcp

nginx

Products

Pricing

Contact Us

574122553 | 2024-05-20T17:38:36.059731
80 / tcp

-1693927786 | 2024-05-19T20:22:21.977764
443 / tcp