GeneralInformation

Hostnames	ec2-54-200-224-203.us-west-2.compute.amazonaws.com success-staging.ea.com
Domains	amazonaws.com ea.com
Cloud Provider	Amazon
Cloud Region	us-west-2
Cloud Service	EC2
Country	United States
City	Boardman
Organization	Amazon.com, Inc.
ISP	Amazon.com, Inc.
ASN	AS16509

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVE-2021-3618

5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443

1949896279 | 2024-03-29T02:48:28.696765

80 / tcp

HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Fri, 29 Mar 2024 02:48:28 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://54.200.224.203:443/

-1173753122 | 2024-04-19T00:05:38.178614

443 / tcp

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:05:28 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: AWSALB=3h1jmxcQfWj7v6B5Bz+uCd+iQLBqKFDRQWsLp8BAAH6wpmykj0ALmygSQsKantWL+lEw0qdX5DYEIG5ZVO6//Dla3Nt5bY+yq5BEU2TcGftQqrSMXTRMsiy79q+Q; Expires=Fri, 26 Apr 2024 00:05:28 GMT; Path=/
Set-Cookie: AWSALBCORS=3h1jmxcQfWj7v6B5Bz+uCd+iQLBqKFDRQWsLp8BAAH6wpmykj0ALmygSQsKantWL+lEw0qdX5DYEIG5ZVO6//Dla3Nt5bY+yq5BEU2TcGftQqrSMXTRMsiy79q+Q; Expires=Fri, 26 Apr 2024 00:05:28 GMT; Path=/; SameSite=None; Secure
Server: nginx/1.20.1
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding
x-nextjs-cache: HIT
x-powered-by: Next.js
etag: "3z1j370ql76bb"
cache-control: s-maxage=31536000, stale-while-revalidate

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:62:e5:31:1d:23:b4:c3:b9:44:8f:59:d2:f7:40:eb
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA
        Validity
            Not Before: Jun  2 00:00:00 2023 GMT
            Not After : Jun  4 23:59:59 2024 GMT
        Subject: C=US, ST=CALIFORNIA, L=Redwood City, O=Electronic Arts, Inc., CN=success-staging.ea.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:86:da:0c:4a:51:49:68:72:1d:0e:7a:ba:
                    eb:d1:7e:01:88:31:3a:ac:f0:4a:ca:f0:d4:c7:c7:
                    e1:a5:3a:01:be:97:3f:31:f5:df:70:84:ef:74:30:
                    c9:2d:e6:52:06:7e:38:ca:fe:a7:87:63:fe:9e:4b:
                    c2:4d:39:65:4d:bc:4c:bb:38:55:95:b2:ef:dd:91:
                    5b:30:f9:92:13:a8:1e:0a:a4:3b:7c:9a:c3:5d:8f:
                    7f:aa:78:f3:b7:67:c4:96:56:b6:2e:a7:ec:97:ab:
                    12:a9:c7:ac:06:f7:c9:22:52:0b:9a:51:ed:6b:52:
                    86:00:e0:85:f2:1f:c5:8b:84:a9:3b:2c:7a:6e:69:
                    ee:34:8f:1a:39:9f:eb:c2:25:f7:8b:2d:77:45:ff:
                    3e:d6:80:19:56:ef:27:67:77:8b:27:94:e0:36:87:
                    a7:92:c3:03:4b:70:8f:20:5b:09:c8:91:0e:8a:ea:
                    77:97:ea:12:63:81:eb:12:54:d7:f2:2f:0d:7d:70:
                    5e:b9:c1:dd:3f:90:a1:08:e3:30:26:b7:c7:ab:eb:
                    95:f3:27:26:3c:7b:46:89:77:6d:3d:6c:56:c3:2a:
                    7c:0b:a0:de:86:a3:f7:2d:13:fc:47:d8:dc:a3:1e:
                    a4:8a:cd:39:24:d3:5d:e5:5f:45:f9:68:a3:24:fe:
                    e9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                0F:80:61:1C:82:31:61:D5:2F:28:E7:8D:46:38:B4:2C:E1:C6:D9:E2
            X509v3 Subject Key Identifier: 
                BC:9F:E2:9E:7C:F0:B5:4B:AF:DF:86:5C:9B:A0:D8:96:2B:E1:22:1D
            X509v3 Subject Alternative Name: 
                DNS:success-staging.ea.com
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt
            X509v3 Basic Constraints: 
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Jun  2 12:14:05.971 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:72:31:55:8E:6E:01:D3:DA:72:3E:FF:59:
                                EF:AA:BE:BE:ED:2A:ED:65:59:31:EA:36:81:4B:89:D4:
                                D6:E8:20:11:02:20:49:B7:CB:47:DF:22:06:F1:B6:F5:
                                DC:B2:05:0B:FB:85:B4:AD:F3:5D:BA:8F:B7:D8:9E:56:
                                A9:F5:60:AA:6D:3C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Jun  2 12:14:05.914 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:97:82:6E:6C:3E:C5:A0:12:25:F6:AB:
                                7E:59:29:6F:7F:15:AF:C8:9A:CA:13:B4:9A:DF:E9:29:
                                25:3E:19:8C:AA:02:20:4D:A2:89:64:25:3F:44:9B:38:
                                F5:10:61:F7:09:27:E5:A8:7C:9F:0A:E8:EA:B4:8D:D7:
                                BA:23:9B:5F:BA:D4:27
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Jun  2 12:14:05.867 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:78:FE:3B:35:5E:A8:96:39:BA:ED:39:59:
                                60:64:FA:06:0B:FF:4E:75:E9:D1:63:86:86:43:FE:5D:
                                EB:1E:82:BC:02:20:1A:79:87:FA:C0:F2:47:33:D3:67:
                                B9:99:BE:9E:8A:46:FA:E9:19:60:41:4A:BC:8C:13:9E:
                                07:98:5F:74:58:B4
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        4e:76:ba:8a:30:17:7a:d1:bb:2b:58:16:4e:a3:fb:2d:99:7e:
        8b:eb:ef:62:f6:bb:38:bb:d8:a0:5c:a6:ac:50:5c:b5:f8:84:
        c7:b9:47:cb:6c:63:95:42:77:39:a8:be:54:5b:e3:f2:ce:2a:
        5a:ee:de:22:8e:75:1f:2c:b1:a4:3f:1d:c4:5d:fa:27:2c:3c:
        df:52:f8:fd:ad:5c:33:6d:06:c7:cd:68:13:d9:e6:83:07:f2:
        23:79:c2:b5:1f:01:1b:d8:1a:dd:00:a5:86:5c:e3:26:4b:0e:
        b1:e4:c6:af:f8:9c:96:ce:7e:ae:a2:59:e0:18:98:26:c8:ad:
        5e:b6:d1:24:1e:84:b1:b4:57:89:bf:30:f4:52:9c:7e:3c:42:
        bf:cb:19:a9:4c:39:27:bc:d2:e5:6c:d4:5b:3f:7b:6b:5d:b4:
        0e:6c:06:ad:ce:f2:f6:eb:5b:59:a5:6c:d8:ea:42:cc:93:09:
        cf:21:47:48:15:bd:a6:e3:9a:40:9f:65:54:6c:12:37:bc:ec:
        1c:dd:9f:31:ed:83:bc:e9:54:7e:71:25:e9:b8:fb:e3:c8:cb:
        eb:89:50:6d:ca:c6:49:0e:fc:0d:ba:cb:63:30:bf:6d:71:c9:
        d6:d4:b4:6c:4c:05:b0:9f:b1:ca:32:c7:be:78:81:0b:64:b6:
        f6:5c:7d:47

54.200.224.203

Last Seen: 2024-04-19

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1949896279 | 2024-03-29T02:48:28.696765
80 / tcp

AWS ELB2.0

-1173753122 | 2024-04-19T00:05:38.178614
443 / tcp

nginx1.20.1

Products

Pricing

Contact Us

54.200.224.203

Last Seen: 2024-04-19

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1949896279 | 2024-03-29T02:48:28.696765 80 / tcp

AWS ELB2.0

-1173753122 | 2024-04-19T00:05:38.178614 443 / tcp

nginx1.20.1

Products

Pricing

Contact Us

1949896279 | 2024-03-29T02:48:28.696765
80 / tcp

-1173753122 | 2024-04-19T00:05:38.178614
443 / tcp