GeneralInformation

Hostnames	ec2-44-199-8-20.compute-1.amazonaws.com prolificworks.xyz
Domains	amazonaws.com prolificworks.xyz
Cloud Provider	Amazon
Cloud Region	us-east-1
Cloud Service	EC2
Country	United States
City	Ashburn
Organization	Amazon Data Services NoVa
ISP	Amazon.com, Inc.
ASN	AS14618

WebTechnologies

Analytics

CDN

JavaScript libraries

UI frameworks

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2022-31629	In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.
CVE-2022-31628	In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.
CVE-2020-11579	5.0An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.
CVE-2017-8923	7.5The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string.
CVE-2013-2220	7.5Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.
CVE-2007-3205	5.0The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

OpenPorts

80 443

-1427803479 | 2024-04-30T01:49:27.697204

80 / tcp

HTTP/1.1 301 Moved Permanently
Date: Tue, 30 Apr 2024 01:49:27 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Set-Cookie: AWSALB=hmUp3YOl99QB6uwMK3I5qcQOW+yfZjUZmTLgMDbTbZBZ3CmZqY5uya7a8pHPh9s8N/kqmqE/2ZtJowoESBREwfd21mGS4znNPqcrnjkZyHP0iUQz1Ze/7qNgPkoD; Expires=Tue, 07 May 2024 01:49:27 GMT; Path=/
Set-Cookie: AWSALBCORS=hmUp3YOl99QB6uwMK3I5qcQOW+yfZjUZmTLgMDbTbZBZ3CmZqY5uya7a8pHPh9s8N/kqmqE/2ZtJowoESBREwfd21mGS4znNPqcrnjkZyHP0iUQz1Ze/7qNgPkoD; Expires=Tue, 07 May 2024 01:49:27 GMT; Path=/; SameSite=None
Server: nginx
Location: https://44.199.8.20/
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

807038307 | 2024-04-30T01:49:29.538890

443 / tcp

HTTP/1.1 200 OK
Date: Tue, 30 Apr 2024 01:49:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: AWSALB=up+jucwyhzfaRY79l7nKU9ASFX34cBDdaiba6uygs6rdJ/sKkD9Lda0hipseJAHCwrlfdlcqU6lk67JhGv0hHumkPPBFmeFBf/pud7Lgu23QRm2/RjKaEO0oRWPE; Expires=Tue, 07 May 2024 01:49:29 GMT; Path=/
Set-Cookie: AWSALBCORS=up+jucwyhzfaRY79l7nKU9ASFX34cBDdaiba6uygs6rdJ/sKkD9Lda0hipseJAHCwrlfdlcqU6lk67JhGv0hHumkPPBFmeFBf/pud7Lgu23QRm2/RjKaEO0oRWPE; Expires=Tue, 07 May 2024 01:49:29 GMT; Path=/; SameSite=None; Secure
Server: nginx
X-Powered-By: PHP/7.1.33
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6IldVQlVsT1VidWJLZnFsZjFFRUZIRGc9PSIsInZhbHVlIjoiYlJWWWRpZG96Vld6b0ZieDJXamtEME5lVmhcL1N2K3U3RHVYUFZwOEl1Mnl3bFhKb2tRZXhhQW5VeUpYZ2xHQjZGSkRcL2xuNE40Z0s1eUJMK3pKQ3VPQT09IiwibWFjIjoiNmZjYmM0ZjM2YTY1OTFkMzhkMzgwNDExN2RiY2M1YzA4N2QzODM3YzZiMDNhNTE0M2U0MjljMDE0YjE4MTRjNyJ9; expires=Tue, 30-Apr-2024 03:49:29 GMT; Max-Age=7200; path=/; domain=prolificworks.xyz; secure
Set-Cookie: laravel_session=eyJpdiI6Im5KNWhTNktoa0V6ME9RVWFpQVZtT2c9PSIsInZhbHVlIjoiUnRqZUd2OFwvWGM1TEd2a1ZUYzdTTlhPYjVWQ0ordTRUT2NaSnRrNHpUelwvOTh3bUJxYWpybVEwdE55bW45eU4wZUlNajBPd1RYbzBzbHdJSzFsSktVZz09IiwibWFjIjoiOWRlODY2ZGJmODE2YzYyY2M1MzRhNTIxMzE4Njk3NmJiMWRiNTIzMmQ1YWJjMTljOGJkODFhYjFmYmUwMjMxMCJ9; expires=Tue, 30-Apr-2024 03:49:29 GMT; Max-Age=7200; path=/; domain=prolificworks.xyz; secure; httponly
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ef:29:80:5f:c2:55:5c:6c:35:7e:fb:77:4f:eb:36
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: Mar 21 00:00:00 2024 GMT
            Not After : Apr 19 23:59:59 2025 GMT
        Subject: CN=*.prolificworks.xyz
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:d4:af:de:56:fa:64:9f:22:46:38:ca:b5:
                    eb:3b:99:de:49:76:a6:f0:49:d4:f9:9c:5f:3b:1a:
                    45:3d:47:dd:4f:a6:9c:d8:83:6f:32:25:95:bc:64:
                    7d:cd:0b:f4:5f:20:f0:07:66:ac:f9:85:53:08:46:
                    62:20:f4:b0:97:41:e3:4b:71:59:6d:34:f1:f5:48:
                    3b:df:53:f2:ec:87:4d:f3:8b:f4:58:a6:91:86:91:
                    e7:e0:46:92:7e:1e:b8:49:15:67:c9:99:f6:4d:8f:
                    aa:14:b8:c1:4c:ee:19:0c:4d:1e:1e:79:bf:ca:c8:
                    ad:e7:1b:a3:f0:3a:44:f0:09:f5:1f:b8:b8:42:70:
                    4c:0e:9d:1d:eb:ca:5d:ac:da:db:ba:f4:f9:3b:fd:
                    32:26:74:21:f3:ad:46:50:dd:b7:db:9f:56:4f:3a:
                    5d:25:71:c4:31:1e:84:f0:6a:e3:af:4b:d7:8f:39:
                    25:ef:58:85:86:f0:aa:6f:1f:19:39:40:49:23:b0:
                    27:9e:b2:44:71:a4:d1:b3:3a:55:d3:3e:96:e2:1e:
                    96:e9:32:93:b3:22:70:28:ef:4d:3f:42:e4:ef:53:
                    7a:24:44:64:c9:9e:02:52:f6:b5:a2:56:26:62:c3:
                    75:10:57:f4:2d:ef:e0:c4:fd:c9:95:35:1d:36:6c:
                    c9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                BE:E0:6C:17:17:B4:26:1A:6B:BF:1F:47:2B:BA:24:86:45:10:90:8D
            X509v3 Subject Alternative Name: 
                DNS:*.prolificworks.xyz, DNS:prolificworks.xyz
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Mar 21 04:21:39.346 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:30:76:10:92:66:E8:FA:2D:D7:59:12:0C:
                                51:7C:C2:CD:57:AF:E0:53:55:7B:F0:3B:9E:48:3E:C3:
                                BD:4F:86:8B:02:20:10:CA:8C:5B:15:49:DE:9A:5B:D2:
                                77:1C:0A:DF:E5:D7:E5:2E:BB:48:FB:DB:FE:3F:19:F4:
                                B3:CC:6A:EE:80:E8
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Mar 21 04:21:39.316 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:09:4F:37:43:2D:76:19:C4:1D:80:40:1A:
                                06:05:F2:2E:AD:7E:C2:6A:73:1E:4F:61:62:54:2B:FC:
                                08:06:6A:60:02:21:00:E6:A2:13:39:BB:92:AD:55:73:
                                56:46:33:FD:8A:B9:3C:93:39:B7:9B:65:41:A7:C3:A2:
                                37:70:B1:EA:62:21:78
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Mar 21 04:21:39.300 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:0F:A8:10:28:12:22:CB:F9:2D:2F:21:64:
                                28:09:85:6B:55:51:EC:44:67:EA:8F:2C:1D:58:24:06:
                                74:53:2C:87:02:20:1C:2B:A3:86:B1:04:E2:F8:10:15:
                                17:51:B4:E1:A0:35:FE:E1:D1:8A:AD:EE:35:96:AE:EF:
                                25:9B:2C:92:5C:32
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        37:ae:e9:77:cd:bf:d1:a6:5d:26:95:03:b1:c0:e6:a0:c5:98:
        b1:86:dc:ca:45:1a:8a:e1:e9:37:e9:32:22:e2:42:43:96:5e:
        66:18:36:f2:68:44:56:d5:54:8f:ee:78:9c:35:ef:eb:05:5d:
        65:5b:fb:d7:11:c8:f1:77:52:08:b2:43:75:df:8e:52:0a:de:
        fa:52:af:1e:44:c3:47:7d:a5:76:c4:15:63:c9:c4:07:4c:7a:
        18:17:5c:0a:45:69:c8:77:d3:71:0b:99:c3:13:0c:93:62:e6:
        ca:24:a4:f5:c9:b5:2f:5f:5b:93:ef:7c:30:18:89:0b:c3:4a:
        17:41:b8:77:c0:66:b0:01:dd:3b:8b:20:86:e9:37:50:e3:90:
        85:d6:f4:83:45:c4:d2:3f:f5:52:be:1a:71:18:e9:96:b2:70:
        ff:b4:bd:2f:d1:3a:85:2e:18:81:07:ce:99:bc:a4:bd:65:67:
        98:6a:b8:0d:19:55:59:fe:2e:19:e9:b5:38:a6:95:ad:04:9e:
        fb:df:29:77:2c:85:76:d8:3a:28:f1:0d:a6:fe:c5:5f:f1:0d:
        50:5b:f3:04:e4:c9:dc:10:e5:bd:2a:1d:7e:78:2e:e3:74:4c:
        15:86:4f:44:95:21:f3:02:7c:43:a9:de:fe:4e:a4:41:12:df:
        2e:05:ca:5e

44.199.8.20

Last Seen: 2024-04-30

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1427803479 | 2024-04-30T01:49:27.697204
80 / tcp

nginx

807038307 | 2024-04-30T01:49:29.538890
443 / tcp

nginx

Products

Pricing

Contact Us

44.199.8.20

Last Seen: 2024-04-30

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1427803479 | 2024-04-30T01:49:27.697204 80 / tcp

nginx

807038307 | 2024-04-30T01:49:29.538890 443 / tcp

nginx

Products

Pricing

Contact Us

-1427803479 | 2024-04-30T01:49:27.697204
80 / tcp

807038307 | 2024-04-30T01:49:29.538890
443 / tcp