| Hostnames |
blog.albertsonsmarket.com sni.cloudflaressl.com files.norcal-group.com groupnet.norcalmutual.com novar.com |
| Domains | albertsonsmarket.com cloudflaressl.com norcal-group.com norcalmutual.com novar.com |
| Country | United States |
| City | Cambridge |
| Organization | HubSpot, Inc. |
| ISP | Cloudflare London, LLC |
| ASN | AS209242 |
Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.
| CVE-2020-7656 | 6.1jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed. |
| CVE-2020-11023 | 6.1In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. |
| CVE-2020-11022 | 6.1In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. |
| CVE-2019-11358 | 6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype. |
| CVE-2015-9251 | 6.1jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed. |
| CVE-2012-6708 | 6.1jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common. |
148480496 | 2024-04-16T06:07:39.14486780 / tcp
HTTP/1.1 409 Conflict Date: Tue, 16 Apr 2024 06:07:38 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 6140 Connection: close X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Vary: Accept-Encoding Server: cloudflare CF-RAY: 8751ff0b6a85ce54-SJC
793147067 | 2024-04-16T07:37:09.055762443 / tcp
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 07:37:08 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 36409
Connection: keep-alive
Cache-Control: s-maxage=10800, max-age=0
ETag: W/"b4f13bd4890324a132792ef0ab236f7c"
Last-Modified: Mon, 15 Apr 2024 01:50:14 GMT
Link: </hs/hsstatic/cos-i18n/static-1.53/bundles/project.js>; rel=preload; as=script,</hs/hsstatic/AsyncSupport/static-1.122/js/post_listing_asset.js>; rel=preload; as=script
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: upgrade-insecure-requests
Edge-Cache-Tag: CG-3894598,P-3894598,L-9788681858,CW-100987708546,CW-9751504643,CW-9788679669,CW-9788679670,CW-9795889320,E-9789117099,PGS-ALL,SW-4,B-9805121821
Referrer-Policy: no-referrer-when-downgrade
X-HS-Cache-Config: BrowserCache-5s-EdgeCache-180s
X-HS-Cache-Control: s-maxage=10800, max-age=0
X-HS-CF-Cache-Status: HIT
X-HS-Content-Group-Id: 9805121821
X-HS-Hub-Id: 3894598
X-HS-Prerendered: Mon, 15 Apr 2024 01:50:14 GMT
Set-Cookie: __cf_bm=WE36eGfOaCHVQ382HnEpZ5.UiNAKdIZAsRxeEzPa2Qg-1713253028-1.0.1.1-jHtA825J5JZ5UjgoZv4UGJtdwg2CtoBeDhzhl8cSihasXNL41QTJeDyRNN1p3t9b0duUNrHtWcU.M4vogvUQtQ; path=/; expires=Tue, 16-Apr-24 08:07:08 GMT; domain=.blog.albertsonsmarket.com; HttpOnly; Secure; SameSite=None
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T2oojj4L1sEPFLdR1R7jg4AqiR%2BUI3MboF9ch%2FONqu0uHN%2FENfBixsQuSsYos95f5MlAuBgM%2BmbCb3QwYHDGxdX%2Fynn80MwThvrdKuzE589XjY6MFDwjTgiJLMmR5yRh54dn8DHXhwkYAiiTzL%2FcjdyLt%2FveJ%2F4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Set-Cookie: __cfruid=88c463af9afebf7c3af8b77a28b4f41edfc0613b-1713253028; path=/; domain=.blog.albertsonsmarket.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 87528224fc5167a6-SJC
alt-svc: h3=":443"; ma=86400
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a0:8e:9f:c7:eb:94:a4:83:0d:ec:40:eb:8b:7f:94:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Google Trust Services LLC, CN=GTS CA 1P5
Validity
Not Before: Mar 10 00:14:02 2024 GMT
Not After : Jun 8 00:14:01 2024 GMT
Subject: CN=blog.albertsonsmarket.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:db:b7:f1:e5:e8:3e:4f:74:c4:62:f8:8a:5e:8b:
62:a0:65:f1:4d:ee:1e:bb:75:a0:3a:1e:dd:e0:39:
9f:86:85:10:d1:cc:f7:ae:c7:17:26:c9:ef:7a:a2:
a1:3d:8e:92:a2:79:f6:40:f6:57:01:fd:64:7f:2f:
66:7f:d1:51:9d:ad:30:2d:27:85:01:cd:ad:6d:45:
82:7c:94:6f:94:a7:78:aa:c3:2a:7a:16:cd:29:36:
9a:6e:be:bc:ae:38:7e:c2:09:d1:d2:2b:2b:3c:33:
6c:53:26:b4:00:01:42:e8:b7:48:62:37:ac:f6:d1:
8e:33:a7:1d:38:1a:3d:a1:cd:e8:17:ec:d9:5f:dc:
a1:d1:b5:73:0b:2c:63:a1:28:ff:51:f2:38:f9:aa:
00:fe:5b:2b:03:a6:d8:c5:04:58:17:46:8c:01:7e:
00:29:ba:c6:0f:62:8d:49:4e:c9:ac:38:81:02:37:
b1:09:99:f5:59:f1:75:a9:4b:a5:55:15:82:fa:23:
93:0c:2f:fd:0b:1d:57:83:3d:16:bd:6e:03:7d:d1:
88:b2:74:4c:52:86:71:12:48:4c:a4:e1:05:48:bc:
a7:92:47:10:26:d0:70:40:a5:c7:ea:e6:57:35:42:
62:8a:84:7b:8a:91:40:d0:a6:5c:e3:7e:38:1d:af:
b7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
E6:53:E6:B1:88:53:8D:23:61:59:4E:F3:7C:C1:36:4C:FE:FA:A1:48
X509v3 Authority Key Identifier:
D5:FC:9E:0D:DF:1E:CA:DD:08:97:97:6E:2B:C5:5F:C5:2B:F5:EC:B8
Authority Information Access:
OCSP - URI:http://ocsp.pki.goog/s/gts1p5/MsLcuiTsJ3Q
CA Issuers - URI:http://pki.goog/repo/certs/gts1p5.der
X509v3 Subject Alternative Name:
DNS:blog.albertsonsmarket.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
Policy: 1.3.6.1.4.1.11129.2.5.3
X509v3 CRL Distribution Points:
Full Name:
URI:http://crls.pki.goog/gts1p5/rQZLuVzD8Fg.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : Mar 10 01:14:02.923 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:7B:1A:35:AB:10:D1:02:16:C0:9B:27:2C:
4B:EF:8E:48:48:E5:5A:1B:A6:57:48:04:ED:DC:EE:5E:
8A:1B:BF:A6:02:21:00:9A:0B:F2:08:0D:27:D7:07:32:
54:F7:A2:CF:3C:10:6C:72:9D:F1:19:F2:FF:78:91:44:
40:88:62:42:BE:63:70
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
Timestamp : Mar 10 01:14:02.888 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:FB:32:7D:36:B4:A7:C0:AD:27:18:41:
BF:0E:66:94:24:76:D4:5E:CF:52:E5:86:39:B0:D6:F3:
B8:59:27:98:32:02:20:26:F5:AE:6D:08:5A:84:4E:DC:
81:33:D4:32:C8:97:1B:4E:CE:C3:20:D8:BA:76:AA:EB:
F8:AD:79:9B:07:0F:E5
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
7b:29:60:45:8a:4b:7b:64:28:3e:22:df:28:48:27:aa:ed:e1:
a0:22:00:ba:86:97:8b:38:0f:13:0b:93:4d:9a:19:24:f9:67:
98:fc:46:93:11:c8:37:bd:20:b0:6e:31:fc:41:b5:e8:f1:08:
00:64:f8:f9:61:cd:a6:e3:52:d0:dd:06:df:48:40:4c:16:90:
27:61:ae:aa:f8:15:82:99:b0:36:6a:8d:f7:ac:cc:5b:12:74:
03:fe:59:f9:b8:59:8f:97:38:2b:e5:b4:41:8c:12:24:49:b4:
8d:3f:9a:28:e6:74:27:a5:a1:d5:d0:f0:cc:20:28:0d:f0:fc:
8c:e8:cf:59:fb:b6:2d:49:a7:95:fa:02:db:ac:21:bd:70:a4:
c4:15:7f:bd:d7:8b:31:3a:92:fa:34:e1:b4:c9:cf:2b:67:29:
9d:9e:b1:74:e0:86:1f:e0:bf:c4:cb:df:38:30:d7:dd:09:5c:
cd:af:05:b7:74:f8:2c:c4:ea:ed:c2:5d:a5:f7:af:b1:80:14:
0b:13:c7:c1:48:3b:80:12:41:28:57:64:c2:c8:0c:4c:7c:ed:
79:c9:13:81:e5:82:b0:97:59:a5:83:5b:e1:01:8a:7e:29:e3:
a0:0f:47:c8:7d:98:13:4e:a9:97:91:98:3d:3a:17:cc:4f:95:
79:d5:98:25
1638192708 | 2024-04-13T08:10:51.9035512082 / tcp
HTTP/1.1 403 Forbidden
Date: Sat, 13 Apr 2024 08:10:51 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 2105
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Sat, 13 Apr 2024 08:11:06 GMT
Set-Cookie: __cf_bm=H50_z6YKNa.gkAYBkTm2aXlUkSEVoZwSMFuNjEHR5Cg-1712995851-1.0.1.1-3wePmDFj_oUgZVVP0kSbp7AoqS0e9Wgnu9K9XLnC1a.uQovQgSiOJNO1XblV1GWxHN3UTTcq3riAes_0X38S5w; path=/; expires=Sat, 13-Apr-24 08:40:51 GMT; domain=.corporate.allied.com; HttpOnly; SameSite=None
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7vE%2F7Gcoyt4Ig8FkHIveatblKCapfgbktSAyEVH6zRgucp6OWy%2Fh6TvH4PxMYj5%2FAtxOnEpnjtYuHywOUvi%2BXIACWG0XTHXmsKQSL3B8Irr8Cz2DJD50EJYmNqOL1lJpFFnfQ83u1cjxEKX4WMF6BlCw"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Set-Cookie: __cfruid=d39ca884fff0be243ae693d28d3df59419e2dd32-1712995851; path=/; domain=.corporate.allied.com; HttpOnly
Server: cloudflare
CF-RAY: 8739fb69b950ceb1-SJC
alt-svc: h3=":443"; ma=86400
909384682 | 2024-04-16T03:14:28.7087702083 / tcp
HTTP/1.1 403 Forbidden
Date: Tue, 16 Apr 2024 03:14:28 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 2105
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Tue, 16 Apr 2024 03:14:43 GMT
Set-Cookie: __cf_bm=LG73_uMBMhxQHoHMrwDzaQV6zYDxIUxSpwfXX3li6rQ-1713237268-1.0.1.1-xF_ojqBgBV60hQFU4WR4.4azra3jXMvi_4fzRx9DvdT1uqpnPgYDBTwcPqlcW1VpqDqweL5JcI7XCGd.ufoDCw; path=/; expires=Tue, 16-Apr-24 03:44:28 GMT; domain=.files.norcal-group.com; HttpOnly; Secure; SameSite=None
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X6JZ88hBfnozgCUgLWL14hgsFrvUui0vIewkFx%2BbZo%2F1%2B64DVeDUv65zYqW%2Bm9bDTPcbKKsScadPY%2BHLGQnSLuOhdKvun3bTno8DvMGNKIv26iqy67F2l%2FlKKttDJGeEI2ZMSRX1Tn%2Beo8ZtRi0Il9PS8Hs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Set-Cookie: __cfruid=a55c20730a279364c0eb6136c096555eebe2729b-1713237268; path=/; domain=.files.norcal-group.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 8751016019ca1574-SJC
alt-svc: h3=":2083"; ma=86400
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b3:df:a4:4d:8e:2d:56:52:13:b8:4e:8c:16:ac:61:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Google Trust Services LLC, CN=GTS CA 1P5
Validity
Not Before: Feb 18 20:16:38 2024 GMT
Not After : May 18 20:16:37 2024 GMT
Subject: CN=files.norcal-group.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:99:b7:13:25:b6:4d:bb:12:28:19:2a:79:0b:2e:
10:d0:dd:d9:80:13:e3:7d:9e:a3:2e:89:1b:f2:e4:
02:2a:26:aa:33:13:2e:43:af:a9:e5:85:c0:3e:f5:
53:18:05:40:99:bc:21:e5:86:75:c3:3c:82:8d:73:
6a:f2:69:96:80:e9:a6:f0:dd:3b:e9:4d:35:e9:05:
86:a5:64:9e:3c:b6:6d:cd:21:bf:d1:c0:d7:38:4e:
51:f3:77:e0:a9:5e:1a:c4:65:65:50:4c:57:b2:ce:
85:60:33:fc:58:c1:d3:3b:16:ff:ce:4b:70:aa:10:
26:e5:11:fa:1c:98:92:b0:c9:b0:7f:4e:50:36:16:
77:d9:d3:f4:9a:76:1a:5e:92:14:74:46:30:ab:bb:
2e:6b:d3:f3:d7:77:d1:35:27:6b:43:73:7d:86:1a:
0a:33:3b:b9:79:08:f9:47:02:cf:e7:80:27:a1:bc:
84:ab:0a:97:ea:51:c8:6c:b2:23:22:09:ab:9d:52:
75:11:da:0b:05:04:d8:8c:e5:e4:4b:8e:61:53:1f:
b0:b5:24:8b:b1:78:12:bd:b6:30:4c:9a:15:1d:61:
f5:be:30:f1:38:ea:92:6d:6d:a4:03:66:e4:e0:08:
eb:cf:55:d0:c0:6a:83:53:68:1d:cb:bf:7f:10:74:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
93:32:0B:CE:E6:D8:D4:23:FA:17:1D:7A:97:D5:83:05:E3:25:7B:76
X509v3 Authority Key Identifier:
D5:FC:9E:0D:DF:1E:CA:DD:08:97:97:6E:2B:C5:5F:C5:2B:F5:EC:B8
Authority Information Access:
OCSP - URI:http://ocsp.pki.goog/s/gts1p5/7kWVn_Qz7cU
CA Issuers - URI:http://pki.goog/repo/certs/gts1p5.der
X509v3 Subject Alternative Name:
DNS:files.norcal-group.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
Policy: 1.3.6.1.4.1.11129.2.5.3
X509v3 CRL Distribution Points:
Full Name:
URI:http://crls.pki.goog/gts1p5/aUa_fIeePaA.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : Feb 18 21:16:38.413 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:6D:5B:92:74:8B:90:6B:A2:50:D1:81:59:
18:73:98:19:29:9F:20:A2:87:B4:02:97:E7:EE:9D:7C:
29:18:40:9B:02:21:00:B8:84:B9:91:7A:E9:9B:7E:D9:
4D:35:0C:63:06:E3:DF:A1:73:04:0E:2E:83:8B:7B:AF:
71:9C:60:DC:C9:DB:56
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
Timestamp : Feb 18 21:16:38.377 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:1F:D5:84:DC:C5:17:11:5E:59:5E:B9:69:
7F:2F:0F:EE:29:24:3A:E7:19:D8:71:D5:65:60:C2:FB:
B6:F1:EE:20:02:21:00:9F:2E:55:80:5D:F8:19:E2:64:
BD:6E:DF:36:2E:0E:5E:C5:57:BD:1C:C8:AC:E3:5E:43:
6E:64:DE:09:50:37:FA
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
60:f2:85:c3:24:b1:22:38:77:7b:f3:d9:f4:78:df:ef:bd:9f:
7f:fe:29:7e:a1:5d:c3:90:31:8e:08:40:c1:5b:24:09:65:72:
82:b1:4f:d3:17:e1:2e:1b:f7:02:5f:5a:e6:24:9e:dc:b2:3e:
f9:62:f5:7a:24:62:44:05:01:2b:31:dc:da:46:14:6a:ef:5d:
f3:a6:f2:7b:39:18:29:1d:ef:d4:8b:74:68:f7:8f:19:2b:ad:
9a:20:b3:ea:2b:79:a7:f2:bb:9b:0a:80:fa:80:21:57:65:60:
8c:7c:69:79:51:03:86:d1:de:d8:08:00:2e:78:c5:93:14:8f:
ce:76:7f:27:8c:8e:dc:74:88:54:78:bd:e8:24:d2:35:a0:08:
2f:72:5e:f3:71:56:9e:e2:aa:5e:11:81:e9:63:c2:3e:25:9c:
1f:5e:52:7d:b0:9b:b8:a2:e1:57:d7:73:22:81:37:b2:51:af:
16:00:fc:67:7e:5a:ab:2e:c0:8b:d6:7d:02:c0:05:b2:ea:90:
15:f8:c4:22:46:f3:43:47:ec:84:a0:13:62:3f:2f:be:7b:49:
a6:be:89:fe:00:ba:4e:f5:88:3d:c2:10:d1:b5:36:10:fb:7b:
25:25:c9:31:93:0b:cb:1c:15:fe:18:89:f7:8d:f8:9c:d9:e9:
5b:e1:12:d1
-2003409654 | 2024-04-13T02:47:20.0111062086 / tcp
HTTP/1.1 403 Forbidden
Date: Sat, 13 Apr 2024 02:47:19 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 2105
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Sat, 13 Apr 2024 02:47:34 GMT
Set-Cookie: __cf_bm=t2yixvcbxW7t8EFqep5TFoIZsh_VOPGlbij.kkBHNZg-1712976439-1.0.1.1-Jxd5FJjSDzGsdF0lc6yjIXK.9mHr5p59mnZ40viK6CpOvMHFtc2DQD2yXs2ZVrjRGWHMhRgLwBkfIbejM_bGPA; path=/; expires=Sat, 13-Apr-24 03:17:19 GMT; domain=.corporate.allied.com; HttpOnly; SameSite=None
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=izV%2F7M8I5k16MhluIkcEIdjn4foCW9zGmKZHg0YW%2BpgtFeSJEJ10TzKsNjhvqEZlVVXg9OGonOetKcTlqvM8hw5puw8ClZwUmPjgQ5hu%2BSETXdPdRp1xGzjZqXK1UZU37vG4lMLRUXx5zrw%2FPlGJLfZq"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Set-Cookie: __cfruid=9d449ef6bcb4188c6b39832171f296b31a79d9ad-1712976439; path=/; domain=.corporate.allied.com; HttpOnly
Server: cloudflare
CF-RAY: 8738217cfd567aaf-SJC
alt-svc: h3=":443"; ma=86400
1660943286 | 2024-04-14T01:57:14.8727442087 / tcp
HTTP/1.1 521 Date: Sun, 14 Apr 2024 01:57:14 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 6843 Connection: keep-alive X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8740157e7bff97b7-SJC
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:db:41:db:2b:f2:0a:92:e6:74:72:bf:29:4f:55:82
Signature Algorithm: ecdsa-with-SHA256
Issuer: C=US, O=Cloudflare, Inc., CN=Cloudflare Inc ECC CA-3
Validity
Not Before: Jul 6 00:00:00 2023 GMT
Not After : Jul 5 23:59:59 2024 GMT
Subject: C=US, ST=California, L=San Francisco, O=Cloudflare, Inc., CN=sni.cloudflaressl.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:19:67:a2:64:a7:80:ea:18:67:76:89:4c:43:04:
ff:1b:42:26:7c:8b:5c:7f:13:47:90:39:c4:6b:ff:
3d:2d:6a:e3:e7:e2:cf:3b:f3:2b:7b:5f:4f:01:de:
a0:4d:cb:7d:e7:8a:5a:a1:a9:bb:2a:9f:1d:c1:8a:
0f:74:fe:92:d1
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Authority Key Identifier:
A5:CE:37:EA:EB:B0:75:0E:94:67:88:B4:45:FA:D9:24:10:87:96:1F
X509v3 Subject Key Identifier:
03:63:85:56:85:CC:87:53:6D:3C:84:13:C0:0B:38:71:1C:A8:CA:3B
X509v3 Subject Alternative Name:
DNS:*.novar.com, DNS:sni.cloudflaressl.com, DNS:novar.com
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl3.digicert.com/CloudflareIncECCCA-3.crl
Full Name:
URI:http://crl4.digicert.com/CloudflareIncECCCA-3.crl
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.2
CPS: http://www.digicert.com/CPS
Authority Information Access:
OCSP - URI:http://ocsp.digicert.com
CA Issuers - URI:http://cacerts.digicert.com/CloudflareIncECCCA-3.crt
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
Timestamp : Jul 6 03:35:26.737 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:AD:92:87:45:D3:43:91:FD:EB:79:77:
4A:E2:66:76:39:6E:34:B9:45:50:57:E3:34:F6:97:20:
69:4A:E7:E5:81:02:21:00:C1:2B:71:6E:8D:62:26:6E:
4C:0C:D5:CC:DC:09:51:16:76:62:AB:43:09:A7:E2:0A:
EA:1D:BB:50:55:48:54:41
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
Timestamp : Jul 6 03:35:26.772 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:41:D8:95:29:DB:1E:82:AA:9C:42:17:63:
7F:EC:38:F4:7F:58:DF:41:1C:EE:65:E6:27:C5:A9:89:
17:A1:DD:EC:02:20:74:28:DE:33:C3:D5:80:95:8E:44:
93:DB:39:56:13:20:E2:F4:5B:E8:36:BD:92:65:E3:68:
ED:E6:46:30:E9:6B
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
Timestamp : Jul 6 03:35:26.817 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:07:CA:12:32:43:81:F4:61:9D:A7:2E:0F:
90:7C:E2:5A:9E:BA:A5:40:2A:C6:05:B3:B2:DE:0E:AC:
4A:ED:73:98:02:21:00:D3:3E:61:EE:60:38:35:BF:09:
60:AA:26:87:7F:E8:A5:F8:7D:F1:A2:3A:FF:B5:74:DE:
B4:98:F2:73:E8:B5:15
Signature Algorithm: ecdsa-with-SHA256
Signature Value:
30:45:02:20:19:06:26:9d:6e:83:04:21:ff:e3:03:b8:45:9f:
a0:71:40:9e:01:df:64:49:76:85:22:3a:d1:09:a6:35:3a:87:
02:21:00:d8:49:8f:87:2f:9f:e6:d7:82:36:87:11:13:9b:43:
f3:7e:15:b5:9b:6d:28:6f:67:f4:20:d2:b5:2a:c1:4f:dd
475213239 | 2024-04-13T08:40:43.2375588080 / tcp
HTTP/1.1 403 Forbidden
Date: Sat, 13 Apr 2024 08:40:43 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 2105
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Sat, 13 Apr 2024 08:40:58 GMT
Set-Cookie: __cf_bm=TxUpDhDM_uNKqczwi1UsK9n_Xe5_DO.cf_xdxKB9Fvo-1712997643-1.0.1.1-n4ajy2Nb2XygDU9YoXAJwGhRfpkc9Md3fQFhEJ4Xe0FHtx7gVVBxtP8EWDrkPBCdTIN09OW4JCv4ZMGd1Mj7AQ; path=/; expires=Sat, 13-Apr-24 09:10:43 GMT; domain=.corporate.allied.com; HttpOnly; SameSite=None
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6gXNHJWhrKbi%2Bipz8BO6R6DXbgIwKknmzD6OwS9dGAVbiVen%2BE9KEZ%2FL9eQDByLwCMX%2FTAghHR4qcbQgtD8jyKavANpmzMlOTHnRrjK%2Bm%2Br7J%2BUXqmgz2y27LNoiQ%2Bg%2BIwkXyU4xwqB9udC0hi2lNUpe"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Set-Cookie: __cfruid=98cabf643d7303a19d459cfdc59b1db14f36af8f-1712997643; path=/; domain=.corporate.allied.com; HttpOnly
Server: cloudflare
CF-RAY: 873a2724ef507aca-SJC
alt-svc: h3=":443"; ma=86400
-1121051917 | 2024-04-16T05:22:20.8858658443 / tcp
HTTP/1.1 403 Forbidden
Date: Tue, 16 Apr 2024 05:22:20 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 2105
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Tue, 16 Apr 2024 05:22:35 GMT
Set-Cookie: __cf_bm=ypd9vPTE25E8utN4JuHPOriOt19DXV15R0FSqq5nZ7A-1713244940-1.0.1.1-9SYMGAi4qHMRhe4XG.DOu5HP6HSgth9B40KRLGkzsufHhAyriZHbR659.FiVJ5Lpm8v2npDFYc.gbVCJR19ojw; path=/; expires=Tue, 16-Apr-24 05:52:20 GMT; domain=.groupnet.norcalmutual.com; HttpOnly; Secure; SameSite=None
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gtQiR9nlqegbfUBBE%2F8Tuvdts5Mc2rMKfTqu34OxSjROQaZSjRclEbNIXb%2BRsyKu5GIx12tnMAeGo56jq8lkDG8u3qvQBduytbcx3%2F8a6n1cACK5O8KKhEM4I36ExqpkUZiGKR%2B%2B3i57K%2FkVhAt2W9e9j5%2Fnvm4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Set-Cookie: __cfruid=8e72797f37fe84713ab267ba9f90bc077c42f5c6-1713244940; path=/; domain=.groupnet.norcalmutual.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 8751bcac382815cc-SJC
alt-svc: h3=":8443"; ma=86400
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e1:5d:02:90:1c:5f:16:bb:13:25:92:8d:e9:5e:1c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Google Trust Services LLC, CN=GTS CA 1P5
Validity
Not Before: Mar 16 22:24:13 2024 GMT
Not After : Jun 14 22:24:12 2024 GMT
Subject: CN=groupnet.norcalmutual.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:bf:e8:79:0f:94:4e:2d:05:c4:4a:af:e1:8e:25:
b0:b5:3a:06:a0:b5:b6:ac:eb:56:39:22:3a:f1:6c:
e2:15:6f:8e:2a:cd:7a:b7:ed:86:0c:5c:cb:a7:0d:
79:3f:46:a1:73:a9:9f:31:8f:ea:ae:9e:dc:b2:0f:
9b:6c:70:d0:67:0c:60:7b:7a:47:f7:cb:c9:9a:e6:
a5:df:0a:6a:72:2d:9b:fb:5e:70:be:cb:71:a7:6b:
2f:d1:25:6b:a6:16:84:ea:ef:8f:12:49:dd:52:41:
2a:22:8a:aa:c9:f3:5e:e5:29:73:f7:a8:f4:e1:9e:
dc:65:15:38:31:ab:9f:07:4c:f9:54:03:e1:f0:4a:
5a:70:91:04:93:de:64:dd:b9:57:7e:69:11:c8:9a:
9f:aa:a1:5a:f5:32:12:8c:c7:a0:94:04:09:26:68:
88:79:59:59:2b:23:8f:11:72:8c:83:3e:80:ae:b9:
41:02:c7:b4:b5:a6:e2:3e:aa:3a:a4:b5:bb:8f:34:
b6:54:9a:56:16:d7:0a:a2:b7:f8:ea:07:c7:c6:4d:
0a:21:bf:73:18:d5:13:d6:71:f3:47:e8:e5:13:27:
f8:a5:43:3d:ef:e2:15:53:39:76:b7:cb:b1:34:45:
90:59:1e:2e:bc:ed:f7:64:d9:64:85:6d:3d:12:0c:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
03:16:9E:20:0F:40:F2:45:60:CB:F1:7E:0E:9F:85:BC:AF:B4:0D:E7
X509v3 Authority Key Identifier:
D5:FC:9E:0D:DF:1E:CA:DD:08:97:97:6E:2B:C5:5F:C5:2B:F5:EC:B8
Authority Information Access:
OCSP - URI:http://ocsp.pki.goog/s/gts1p5/iW_XgMGrr0k
CA Issuers - URI:http://pki.goog/repo/certs/gts1p5.der
X509v3 Subject Alternative Name:
DNS:groupnet.norcalmutual.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
Policy: 1.3.6.1.4.1.11129.2.5.3
X509v3 CRL Distribution Points:
Full Name:
URI:http://crls.pki.goog/gts1p5/nEDi5TzHo5Q.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
Timestamp : Mar 16 23:24:14.025 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:E9:22:FB:D8:F6:7F:2D:2F:CD:B7:03:
05:8A:9C:A9:1B:75:F5:31:12:9F:CA:B6:05:8E:B8:FF:
A1:C9:06:DF:B1:02:21:00:B6:9F:19:32:65:9B:46:E8:
A0:19:4C:45:3A:25:0B:C4:0A:0C:23:74:E9:AA:B7:76:
95:31:D4:58:7C:A8:6C:9A
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : Mar 16 23:24:14.010 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:A8:96:BC:E2:08:EA:EC:07:58:B6:20:
43:C4:2A:5E:B5:77:DB:A3:D1:9F:4E:3C:5C:7D:A9:3E:
CA:A0:A9:AF:D4:02:21:00:E8:15:D3:2D:7D:0F:B6:0F:
BF:43:18:E7:48:D6:BA:3B:EE:F1:72:BE:CE:BB:80:04:
82:6C:A7:BA:7F:20:AB:49
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
78:40:d6:1f:8a:e9:d8:24:0b:f7:b0:75:f1:eb:d5:f9:54:14:
6b:83:56:63:e4:19:2e:d4:06:60:1e:f2:d7:48:87:df:22:6a:
6f:52:f4:44:22:b6:d3:35:57:a5:b9:1c:f2:54:0b:41:75:3a:
0b:bb:f9:05:20:f5:4d:38:33:9c:9e:49:8f:af:b9:5b:30:95:
0d:61:34:5e:e7:4d:54:e1:f4:b7:0a:14:89:cc:2c:99:4f:c5:
18:73:9c:fa:36:4c:61:31:e5:ad:21:f9:c4:26:95:92:eb:d6:
27:8e:16:22:b7:8f:f5:4b:f0:52:ab:8f:b4:2e:f8:55:18:5a:
71:43:4e:87:43:18:0b:ef:61:4d:b6:ee:c4:5d:dd:95:f9:a5:
10:5f:75:b2:81:0a:3e:b2:32:da:4c:9a:ef:5e:c1:01:ba:9e:
b1:d2:d1:e5:4a:81:f0:66:fc:77:57:e4:7c:1d:c5:a2:d7:53:
02:2c:9f:f2:be:90:6e:e5:a0:78:b6:aa:84:de:bd:e3:4b:4b:
cb:48:1c:bc:c9:d7:0d:ba:84:57:51:53:b1:4c:f9:e7:65:43:
81:b3:83:f9:7d:0d:21:0a:b4:c0:2a:11:7e:f3:78:8e:d7:59:
ce:d8:ee:9d:2d:93:13:0b:d5:20:60:18:1c:07:f2:ba:11:69:
9c:84:fa:51
-636177583 | 2024-04-13T10:15:44.5906378880 / tcp
HTTP/1.1 403 Forbidden Date: Sat, 13 Apr 2024 10:15:44 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 873ab257a9db96c5-SJC error code: 1003