GeneralInformation

Hostnames	ec2-52-74-108-197.ap-southeast-1.compute.amazonaws.com
Domains	amazonaws.com
Cloud Provider	Amazon
Cloud Region	ap-southeast-1
Cloud Service	EC2
Country	Singapore
City	Singapore
Organization	Amazon Technologies Inc.
ISP	Amazon.com, Inc.
ASN	AS16509

WebTechnologies

JavaScript libraries

Miscellaneous

UI frameworks

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251	4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVE-2013-2220	7.5Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.
CVE-2007-3205	5.0The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

OpenPorts

80 443 6001

-474474549 | 2024-03-27T22:14:14.447864

80 / tcp

HTTP/1.1 200 OK
Date: Wed, 27 Mar 2024 22:14:14 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Server: nginx
Cache-Control: no-cache
X-Request-Id: 3cd2bdd0-ff5a-46be-8260-48be36159e6c
X-Runtime: 0.003819
Vary: Origin

561313718 | 2024-04-08T05:31:59.013522

443 / tcp

HTTP/1.1 200 OK
Date: Mon, 08 Apr 2024 05:31:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Host: 52.74.108.197
X-Powered-By: PHP/8.0.30
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6InVJMmhvdFlIQjBNR3lEUzF6NERXYXc9PSIsInZhbHVlIjoiNkxDdjRuRkRCbDdvb1Q4VjNTYlp2U0VVbExtNHJqeWRuZ1RZQXc0K2duWWlSV0NMYWkrd1pLbWRzd2pIc0l3b1hHcGR6UElneGo1SkFHMXpVbkRseFlMZU1rV3VlUktJVDFuK2tGWU56T0hwcnBUa3dadFZtYnhhcFJwdUVVN3AiLCJtYWMiOiI0ODdmOTg5MGFiOTU3NWJhODExNDNkYTM2YTk3ZmNlNGYyZDYzZWYxYjJlZDY1OTZjNzI1YjE3NzkyYmRiN2JkIn0%3D; expires=Mon, 08-Apr-2024 07:31:58 GMT; Max-Age=7200; path=/; secure; samesite=none
Set-Cookie: laravel_session=eyJpdiI6IlJlZ2Y0KzdveXVBYlU5cStJOUJNRmc9PSIsInZhbHVlIjoiQzhMcWZqSTJIcHIrZ1hVWmcwbStlNEtMVFNQOGYxRnZ4dnpSUU9nVEZUNTlKWnd5UTFKKzhWdXBqU2RlVlN0NytlKzFPbEExQ3YxSkZ4YkJEYW9nbG9UampPR3l0TVFLUVRjc2JNTjBkWnpIN0dRTWdPUFk1d09VcWtNS05NcnkiLCJtYWMiOiI1NjliMWUzYjcxZjIzZDc0ZWY2YTljOTMzNDM2ODE4MzYyMjA1MjRjYjY4NzRmYWUwNTA4YTRhNGUwYzdiMzE1In0%3D; expires=Mon, 08-Apr-2024 07:31:58 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:01:09:49:d3:31:08:4d:a3:42:4f:af:fa:72:f7:38
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M01
        Validity
            Not Before: Jun 28 00:00:00 2023 GMT
            Not After : Jul 26 23:59:59 2024 GMT
        Subject: CN=*.doitnow.asia
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9a:63:0c:77:d1:d5:38:6a:30:23:d4:c2:78:65:
                    99:48:96:e4:81:23:20:9c:38:c0:c7:7c:2f:13:50:
                    04:dd:b8:04:9d:a2:2c:48:13:fc:1e:4f:2b:a0:c0:
                    bf:49:b4:e8:f6:7a:17:3d:48:ed:f5:4e:68:88:b5:
                    cf:d5:1b:c8:ab:38:56:03:1a:b4:95:71:72:e9:c9:
                    aa:fe:c9:1b:be:ad:7b:99:5c:4a:5d:1e:a3:b3:18:
                    b7:c0:cc:bb:53:da:66:f2:83:9b:ae:67:54:af:f6:
                    36:fa:eb:db:40:04:60:05:ef:05:0a:0d:8e:0e:6b:
                    4f:93:d2:24:0b:7f:7b:a6:98:7b:24:33:8b:91:cc:
                    f9:eb:af:3c:e0:20:a5:72:0c:4d:5b:55:a4:52:d8:
                    d3:70:10:6e:b1:00:0e:87:6c:d6:e4:34:50:7c:d1:
                    53:4a:a6:6e:f1:99:b1:7b:06:b8:3b:03:52:ca:97:
                    33:d4:23:23:4b:e8:66:42:38:35:f6:17:52:50:f8:
                    90:e3:e5:ec:79:66:d3:cc:a1:c7:89:14:c0:51:a4:
                    81:42:0c:e6:4c:31:f3:04:33:20:50:10:ee:a3:98:
                    dd:a7:a9:83:ac:3d:bd:e0:df:0b:41:2d:c3:8c:80:
                    42:0a:cf:6c:b1:27:f5:2d:00:85:9e:95:7e:89:f9:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                81:B8:0E:63:8A:89:12:18:E5:FA:3B:3B:50:95:9F:E6:E5:90:13:85
            X509v3 Subject Key Identifier: 
                21:67:B6:50:6B:6E:E1:A4:7D:25:3E:81:6A:7B:B3:67:38:C6:C2:CC
            X509v3 Subject Alternative Name: 
                DNS:*.doitnow.asia
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m01.amazontrust.com/r2m01.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m01.amazontrust.com
                CA Issuers - URI:http://crt.r2m01.amazontrust.com/r2m01.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Jun 28 00:38:24.704 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:B1:C5:11:2A:64:6B:9D:C6:84:AF:A0:
                                D2:A4:6B:70:B5:6E:E7:18:7D:B6:DB:77:13:A0:88:09:
                                98:17:DA:AE:EA:02:20:2C:39:D7:07:14:C4:6C:4C:72:
                                51:2A:57:0D:D2:F1:C3:EA:47:3B:77:0B:5E:1D:D0:92:
                                83:AD:56:58:C5:24:A3
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Jun 28 00:38:24.743 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:63:4C:B3:6A:E2:E0:B1:59:3E:03:F9:38:
                                E2:46:98:C6:B5:9A:05:2A:5F:DD:D8:A5:6E:A0:76:7E:
                                1B:89:D5:7C:02:20:61:16:B8:8A:D1:C6:D9:BC:71:33:
                                DA:07:3E:36:24:C1:17:83:4B:5D:CF:67:F6:1D:2E:AF:
                                31:1E:51:7D:E8:19
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Jun 28 00:38:24.717 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:78:FE:58:B8:1D:59:1E:3D:B6:12:64:2C:
                                21:AA:EC:73:44:C1:45:C2:D5:1F:98:45:85:DC:AF:D7:
                                0D:D2:D3:1B:02:20:69:95:70:5C:AB:96:32:32:E6:CE:
                                18:3A:97:23:B8:0B:7A:CE:08:80:D9:45:E0:ED:61:51:
                                DD:76:A0:5C:1D:57
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        39:a3:6b:9c:7b:d8:0d:17:ee:f3:cf:2d:80:cf:2d:ee:18:99:
        df:48:db:7e:0e:6f:4a:92:98:5c:40:07:57:35:68:fd:b4:35:
        41:f3:38:a9:42:a5:51:c9:9a:05:19:da:50:80:ee:f7:67:be:
        2f:ee:68:35:41:bd:d8:ca:69:7e:d8:a9:ff:34:64:b6:d0:d3:
        85:10:07:0a:ef:3b:7c:89:94:d4:44:be:e0:7d:20:9c:23:30:
        f8:cf:b0:ed:67:e0:2c:e6:c6:3e:a5:08:6f:44:8e:c7:ec:dd:
        bb:48:7c:98:89:93:b7:29:4a:b7:70:a2:b6:27:5f:fa:3e:6e:
        24:c7:ce:cc:e0:0c:95:2a:92:42:47:84:dd:41:4e:7a:7d:5a:
        a3:97:59:97:fc:b4:1e:96:8e:59:dd:51:be:ae:01:fa:c1:49:
        b5:5c:8f:c9:78:68:71:63:09:3e:2b:7e:46:19:8e:e7:2d:b2:
        00:55:4b:53:43:fa:9e:7c:83:f2:2f:d4:fc:64:4e:b7:d9:2d:
        81:63:27:9b:d1:b4:de:54:29:9c:9f:99:a0:28:9b:22:d8:36:
        0f:e4:49:fb:25:55:b7:11:36:33:77:aa:1a:fa:51:b2:ea:84:
        7b:2d:54:e5:08:0f:d0:74:39:c1:c5:e4:4b:e9:fc:65:8e:7f:
        67:e5:74:92

-381130042 | 2024-04-15T08:16:06.046284

6001 / tcp

HTTP/1.1 400 Bad Request
Server: awselb/2.0
Date: Mon, 15 Apr 2024 08:15:57 GMT
Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>

52.74.108.197

Last Seen: 2024-04-15

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-474474549 | 2024-03-27T22:14:14.447864
80 / tcp

nginx

561313718 | 2024-04-08T05:31:59.013522
443 / tcp

-381130042 | 2024-04-15T08:16:06.046284
6001 / tcp

Products

Pricing

Contact Us

52.74.108.197

Last Seen: 2024-04-15

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-474474549 | 2024-03-27T22:14:14.447864 80 / tcp

nginx

561313718 | 2024-04-08T05:31:59.013522 443 / tcp

-381130042 | 2024-04-15T08:16:06.046284 6001 / tcp

Products

Pricing

Contact Us

-474474549 | 2024-03-27T22:14:14.447864
80 / tcp

561313718 | 2024-04-08T05:31:59.013522
443 / tcp

-381130042 | 2024-04-15T08:16:06.046284
6001 / tcp