GeneralInformation

Hostnames	nip13314118.gda.nodea.net.pl app.ralert.io www.app.ralert.io
Domains	nodea.net.pl ralert.io
Country	Poland
City	Gdańsk
Organization	NODEA Mateusz Adach
ISP	Artnet Sp. z o.o.
ASN	AS197155

WebTechnologies

CDN

JavaScript libraries

Miscellaneous

Programming languages

PHP

Web frameworks

Laravel

Livewire

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

80 443

1651973090 | 2024-04-12T13:52:56.284530

80 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 12 Apr 2024 13:52:56 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 13 Dec 2022 13:39:15 GMT
Connection: keep-alive
ETag: "63988083-264"
Accept-Ranges: bytes

1405426436 | 2024-04-05T05:13:52.075805

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.18.0
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Fri, 05 Apr 2024 05:13:51 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkViRlo4MklOOEhiblVKbUk3VERSRkE9PSIsInZhbHVlIjoid2h6cXFxZDNqV2ZJcFBuVTFvY3NKcmRuYm4zd1M0VFRpclludzBubDVpcXRPRWNBZTFWbFVEb0cvdzY3VklzeklrSUI4RmJEc21NYXFuOUNTenNLdDhnN0IvMlVFYUFabG1BaC9iZ1ExbzRUZVJwVGhjcVVaMGFqd0hHTUJmNlIiLCJtYWMiOiJmMzI3M2M4ZWI4Y2Q2ZjEyZmI0ZjAxZjk5OTE0OGE4MTA3YmExMTkzNWYyMzg1Njk5Zjk5ODIxM2QwODliZWE3IiwidGFnIjoiIn0%3D; expires=Fri, 05 Apr 2024 07:13:51 GMT; Max-Age=7200; path=/; secure; samesite=lax
Set-Cookie: appralertio_session=eyJpdiI6IlRDaTdLcng5SE4yL3ZySWJQK21PcXc9PSIsInZhbHVlIjoiYldzaXRWZGlkYXpWYXJkUUJ0S3dsNzkxMTJNSEZjSmxxMjZFa1plTUZQUFB6RHh3dDE0ZnZLNmJkbFg2NUxrdEoyZkYzeTZsZ091c2lDRUY2eVZnRlA3ajFxRUZKd0VnaTJvUS9IT2l5N0tQVUtCTU4rTXo1Vmx5R3ovUlpMdUgiLCJtYWMiOiI1MmI4MDQxYjUxNTI2NmJiNDQ0ZDBiZTc3MTcyOTg3MjY1MjFlYTE5MWMwZDJmMDc1ZmU3NTJmMWZiZDNjOGMyIiwidGFnIjoiIn0%3D; expires=Fri, 05 Apr 2024 07:13:51 GMT; Max-Age=7200; path=/; httponly; samesite=lax

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0c:1a:29:3b:f4:b2:55:42:2a:16:7f:da:6f:08:6b:6e:a6
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Feb 15 11:41:37 2024 GMT
            Not After : May 15 11:41:36 2024 GMT
        Subject: CN=app.ralert.io
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c7:40:56:d0:92:7e:c0:8b:1a:5e:55:d4:a9:3a:
                    02:22:e7:48:7f:8c:66:77:d8:cb:91:62:99:03:24:
                    96:a1:a0:ed:fd:be:4a:39:a5:d2:9f:05:db:d8:05:
                    fa:37:ae:b3:41:f5:1d:9f:cc:c8:ee:d9:f2:d3:47:
                    0c:14:16:6c:c9:c6:cb:42:f3:3b:33:6c:df:00:50:
                    1e:78:d0:15:87:12:31:69:1c:65:e6:38:2f:eb:4e:
                    c2:b9:95:4e:fa:49:1d:92:af:47:74:22:d9:c2:34:
                    42:6d:59:e7:41:f1:d7:a5:d4:f0:da:95:ae:7a:35:
                    35:74:63:ca:a2:39:0a:69:f8:9a:49:32:7d:7c:48:
                    d8:28:77:45:0b:64:a4:83:96:cb:4c:66:3e:35:02:
                    87:b4:38:b2:51:cb:f6:bd:f1:2d:2f:f3:42:1e:b9:
                    d4:6d:03:9d:41:04:b7:fb:7f:bd:d0:72:da:e5:02:
                    b4:73:bb:6e:f3:87:c1:86:db:4a:8d:e3:4d:f0:02:
                    e9:8a:4c:06:d2:4e:9b:eb:21:4d:6d:ed:7c:be:0d:
                    2c:eb:3e:96:c1:0f:4c:b4:87:c1:d1:27:b5:08:3a:
                    27:f1:3c:fd:84:0d:1d:fa:d3:82:bb:97:7d:20:e0:
                    9d:14:a1:f5:34:4b:40:21:ed:fa:d3:a6:0a:a6:99:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                9D:09:F7:FE:42:8B:FF:4B:FF:DF:1A:07:48:E9:8E:8B:EA:4C:2B:E2
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:app.ralert.io, DNS:www.app.ralert.io
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Feb 15 12:41:37.454 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:44:9B:62:FF:17:4A:00:BF:72:1A:D9:AE:
                                D7:F5:90:4C:45:05:BA:26:56:28:27:A9:18:9D:4A:D4:
                                73:09:B4:F8:02:21:00:AC:07:87:CE:C7:FD:AC:D8:CD:
                                60:49:B3:03:65:15:28:76:03:C2:38:9D:F6:D5:89:FB:
                                4D:F4:D5:09:BE:80:25
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Feb 15 12:41:38.048 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:4A:64:4F:E9:9B:66:8E:50:3B:4A:C7:B0:
                                4A:6C:4D:13:6D:76:B2:0A:C1:31:74:21:61:E8:82:0F:
                                4E:6E:2D:AF:02:20:31:B2:9A:18:42:8B:88:1F:27:44:
                                84:0B:5D:6B:CA:CD:EB:B5:00:D3:D9:73:66:1D:AD:43:
                                9B:71:13:28:EA:17
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        10:ed:29:f1:59:84:f2:b8:a2:81:d8:c0:4c:d7:5b:98:21:ff:
        66:95:40:b5:61:6e:c9:56:ef:9a:32:28:d9:55:b2:16:53:c2:
        62:ad:3a:8e:b2:89:8d:49:c2:8a:fc:5e:71:9d:cc:2a:d2:b2:
        ea:f4:04:ce:27:e0:f3:93:23:0f:07:bc:61:64:b2:c0:c5:77:
        51:6d:66:24:1b:16:08:ac:82:eb:e1:3a:d1:69:8c:e2:ce:ce:
        8a:37:f9:29:a8:52:10:b8:36:3c:06:39:75:27:dc:db:eb:7e:
        f0:a6:e7:21:c9:d5:8e:34:18:4c:48:b2:52:c0:75:5e:67:a1:
        b8:a8:f1:b1:4e:26:aa:47:c9:4c:ea:79:6d:3e:23:22:52:d6:
        98:1b:be:52:18:b1:dc:16:ec:4a:bb:54:01:8b:4c:3e:50:34:
        42:bb:dd:ea:24:14:f9:d0:52:2a:d8:fc:20:98:8c:bf:fb:db:
        db:c7:e3:de:7b:59:9d:83:9e:19:0f:e1:2f:fe:cb:eb:cb:01:
        1b:6e:7c:0b:ec:fe:1d:f3:70:53:a7:9d:77:07:d2:d8:82:c8:
        e3:32:f2:6d:40:60:e7:a5:41:10:74:b0:b7:ae:00:3d:90:6b:
        bf:d9:3a:13:5e:d1:03:14:1b:56:1c:e8:55:76:49:7d:75:9b:
        c9:89:c8:20

5.133.14.118

Last Seen: 2024-04-12

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1651973090 | 2024-04-12T13:52:56.284530
80 / tcp

nginx1.18.0

1405426436 | 2024-04-05T05:13:52.075805
443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

5.133.14.118

Last Seen: 2024-04-12

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1651973090 | 2024-04-12T13:52:56.284530 80 / tcp

nginx1.18.0

1405426436 | 2024-04-05T05:13:52.075805 443 / tcp

nginx1.18.0

Products

Pricing

Contact Us

1651973090 | 2024-04-12T13:52:56.284530
80 / tcp

1405426436 | 2024-04-05T05:13:52.075805
443 / tcp