GeneralInformation

Hostnames	ec2-54-144-211-13.compute-1.amazonaws.com playready3.entitlement.aor.theplatform.com playready3.entitlement.ava.theplatform.com playready.entitlement.theplatform.com playready2.entitlement.theplatform.com playready.entitlement.next.theplatform.com playready.entitlement.us.theplatform.com playready2.entitlement.us.theplatform.com playready3.entitlement.us.theplatform.com pr3diverter.entitlement.us.theplatform.com
Domains	amazonaws.com theplatform.com
Cloud Provider	Amazon
Cloud Region	us-east-1
Cloud Service	EC2
Country	United States
City	Ashburn
Organization	Amazon Data Services NoVa
ISP	Amazon.com, Inc.
ASN	AS14618
Operating System	Windows

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

80 443

589765266 | 2024-04-13T11:28:36.653768

80 / tcp

HTTP/1.1 301 Moved Permanently
Date: Sat, 13 Apr 2024 11:28:36 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Server: nginx/1.18.0 (Ubuntu)
Location: https://54.144.211.13/
Strict-Transport-Security: max-age=31536000; includeSubdomains

-985096807 | 2024-05-10T02:21:56.145252

443 / tcp

HTTP/1.1 403 Forbidden
Content-Type: text/html
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Fri, 10 May 2024 02:21:56 GMT
Connection: close
Content-Length: 1233

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1b:7e:77:ed:04:dd:36:9c:53:e6:f6:0a:13:1a:f4
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K
        Validity
            Not Before: Feb 27 17:49:52 2024 GMT
            Not After : Feb 27 17:49:51 2025 GMT
        Subject: C=US, ST=Pennsylvania, L=Philadelphia, O=Comcast Cable Communications Management LLC, CN=playready.entitlement.theplatform.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:38:e4:d1:84:96:3a:07:c2:02:de:b2:87:
                    9e:ca:3b:b5:f4:47:26:63:45:26:34:4c:bd:e1:f0:
                    65:78:d7:1a:16:b5:c5:11:83:2a:76:79:a7:00:d2:
                    f3:1e:98:5a:14:62:de:29:99:be:b9:1b:41:96:90:
                    67:99:82:1d:d5:a5:b3:29:4c:42:0b:99:2d:7f:c6:
                    9a:fa:8a:9c:a9:e8:49:1b:73:23:53:27:64:0d:e3:
                    d0:b8:c6:5b:7d:5d:36:f8:12:a2:9b:9c:5b:7c:0d:
                    0d:9b:be:cd:97:9e:52:6d:44:39:61:e2:77:56:33:
                    c3:91:f3:79:ee:60:0f:f8:c5:2f:b9:f6:5c:c0:24:
                    66:61:8e:48:12:e4:e9:bc:e3:69:5b:fa:fb:a7:ab:
                    1b:0f:80:f5:1f:a3:b7:4a:7e:1a:66:4d:48:b5:83:
                    bf:5c:a8:c6:fa:ad:df:ed:6b:94:44:de:fc:7f:ba:
                    89:0c:75:e6:8d:1e:48:c9:a4:a8:86:0d:46:5c:c1:
                    56:ae:ac:af:a8:08:5b:61:ef:22:b8:09:7e:41:90:
                    6e:8b:ad:f7:83:50:4a:2a:bf:95:07:c7:a6:50:07:
                    17:d5:5f:aa:8e:c1:b1:e4:bd:1c:d6:40:07:3a:67:
                    63:4b:d6:21:9f:e4:43:fa:e4:78:97:85:f8:1b:3d:
                    6a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                95:56:55:AE:6F:BE:DA:65:65:4C:96:4E:E6:30:A1:0D:2C:93:2F:8B
            X509v3 Authority Key Identifier: 
                82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF
            Authority Information Access: 
                OCSP - URI:http://ocsp.entrust.net
                CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.entrust.net/level1k.crl
            X509v3 Subject Alternative Name: 
                DNS:playready.entitlement.theplatform.com, DNS:playready3.entitlement.us.theplatform.com, DNS:playready.entitlement.next.theplatform.com, DNS:playready.entitlement.us.theplatform.com, DNS:playready2.entitlement.us.theplatform.com, DNS:playready2.entitlement.theplatform.com, DNS:playready3.entitlement.aor.theplatform.com, DNS:playready3.entitlement.ava.theplatform.com, DNS:pr3diverter.entitlement.us.theplatform.com
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Feb 27 17:49:53.277 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:8B:22:B6:7A:43:04:C3:1D:51:24:CA:
                                DE:B4:4B:09:0E:9D:E8:3C:39:E8:B1:BE:F8:FB:B7:C8:
                                12:F9:0F:3F:E1:02:21:00:F9:92:38:E7:38:FF:7F:17:
                                C0:98:C7:71:F2:CF:52:97:2A:BD:03:0C:28:67:98:97:
                                DF:14:6D:4A:42:C6:D7:08
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Feb 27 17:49:53.279 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:2D:68:B5:9D:E6:D3:2D:3C:B1:46:F2:7D:
                                DF:5A:06:30:1C:8B:D3:E5:73:7F:07:1F:3B:0B:25:3F:
                                29:5F:D4:2C:02:20:61:3E:A0:16:D3:9F:88:C1:CC:CD:
                                B0:92:7B:B5:C2:DB:FA:4A:ED:94:11:C9:77:8E:C2:14:
                                27:BC:CA:AA:82:2F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Feb 27 17:49:53.279 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:AF:A9:EF:0D:B2:5B:BF:3D:6B:0A:67:
                                41:7F:FD:60:30:FA:80:E1:52:ED:B0:26:39:DD:AD:23:
                                F2:4A:7B:D7:AB:02:21:00:CC:DD:0B:D1:F9:D9:26:EC:
                                8E:92:20:C3:47:1D:06:A7:7C:CA:0B:0E:9F:11:A2:DF:
                                E3:E9:93:63:28:64:FE:DD
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        33:8a:00:3f:74:71:9d:91:c5:c9:89:93:52:bb:4f:b9:1f:49:
        0b:ff:cd:27:af:84:23:b9:cc:a8:50:be:6a:f6:04:2e:17:52:
        35:6e:36:85:dd:99:9c:7d:f9:a7:07:24:0f:be:8a:0f:83:0e:
        21:0f:aa:28:32:d6:49:6e:aa:7f:5b:19:78:5a:9d:a1:72:9a:
        a9:76:bf:d4:2f:14:ea:a8:e7:97:ac:4a:d9:6f:26:18:1e:0f:
        ed:0f:09:1b:11:b4:a1:20:0c:6c:88:a0:e4:db:47:52:2d:f0:
        88:45:ae:be:89:e9:90:bd:3e:e0:6f:2a:6e:54:ed:a1:69:5e:
        aa:dc:bc:11:97:3b:f7:4f:79:d9:43:47:50:d0:4e:d8:a1:4b:
        81:6e:78:99:15:d0:d6:5e:c7:84:5d:57:6f:e8:5c:41:1a:cd:
        ec:dd:c9:a8:ff:68:de:82:f0:37:a0:b9:77:2a:b7:d2:43:a6:
        31:75:08:23:f6:31:70:f3:fa:dd:ba:00:4b:87:91:af:6d:3a:
        71:e2:12:c3:13:2e:20:ed:28:e4:6e:b7:45:e4:0b:cf:ba:95:
        ff:01:50:86:ec:0d:95:83:52:90:16:31:ff:71:4c:34:ca:9c:
        9f:ce:d9:9b:36:ab:21:5d:91:63:13:b9:ad:a0:4e:7b:c1:dd:
        17:e6:03:1c

54.144.211.13

Last Seen: 2024-05-10

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

589765266 | 2024-04-13T11:28:36.653768
80 / tcp

nginx1.18.0

-985096807 | 2024-05-10T02:21:56.145252
443 / tcp

Microsoft IIS httpd10.0

Products

Pricing

Contact Us

54.144.211.13

Last Seen: 2024-05-10

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

589765266 | 2024-04-13T11:28:36.653768 80 / tcp

nginx1.18.0

-985096807 | 2024-05-10T02:21:56.145252 443 / tcp

Microsoft IIS httpd10.0

Products

Pricing

Contact Us

589765266 | 2024-04-13T11:28:36.653768
80 / tcp

-985096807 | 2024-05-10T02:21:56.145252
443 / tcp