GeneralInformation

Hostnames	blr.com
Domains	blr.com
Country	United States
City	New Haven
Organization	Cloudsmart
ISP	Cloudsmart
ASN	AS11598
Operating System	Windows

WebTechnologies

CDN

Google Hosted Libraries

Font scripts

JavaScript libraries

Tag managers

UI frameworks

Video players

Web frameworks

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251	4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVE-2014-4078	5.1The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not properly process wildcard allow and deny rules for domains within the "IP Address and Domain Restrictions" list, which makes it easier for remote attackers to bypass an intended rule set via an HTTP request, aka "IIS Security Feature Bypass Vulnerability."

OpenPorts

80 443

1835418956 | 2024-04-24T01:45:10.026660

80 / tcp

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.5
Set-Cookie: host=regupdate.blr.com; domain=.blr.com; path=/
Set-Cookie: SRCEFF=WBE%2c3348; domain=.blr.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/
X-AspNet-Version: 4.0.30319
Set-Cookie: CATCODE=EAAA; domain=.blr.com; path=/
X-Powered-By: ASP.NET
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains
Date: Wed, 24 Apr 2024 01:45:09 GMT
Content-Length: 12002

-1265851640 | 2024-04-24T14:57:57.175927

443 / tcp

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.5
Set-Cookie: host=compensation.blr.com; domain=.blr.com; path=/
Set-Cookie: SRCEFF=WBP%2c17880; domain=.blr.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/
Set-Cookie: ASP.NET_SessionId=udx2crvj5cg4bfeksyw2kqzr; path=/; HttpOnly
X-AspNet-Version: 4.0.30319
Set-Cookie: upapi-auth-token=jvumn2rQuMpDyosaMY9fMBntvt/EGwDNU6VnBRkT8M+/wxdzNgXcxMBJcMk9GJWuE+eeW2XJU5U4FYdpiHScjg==; expires=Wed, 24-Apr-2024 15:57:56 GMT; path=/
Set-Cookie: CATCODE=SAAA; domain=.blr.com; path=/
X-Powered-By: ASP.NET
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains
Date: Wed, 24 Apr 2024 14:57:55 GMT
Content-Length: 108132

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5866898975314794575 (0x516b6988acbdd84f)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2
        Validity
            Not Before: Apr  9 07:22:27 2023 GMT
            Not After : May 10 07:22:27 2024 GMT
        Subject: CN=*.blr.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:b0:03:de:22:c5:35:22:f3:4a:e3:27:0d:bc:48:
                    9c:15:d8:2d:6f:7c:d2:fa:97:43:a6:bb:a6:8f:f3:
                    12:88:89:f2:89:42:80:79:d4:7f:d7:b2:16:31:1b:
                    d8:03:94:13:95:20:b3:27:f3:92:1f:a6:06:da:f7:
                    77:42:a9:e9:34:93:01:cc:76:a9:92:bc:63:c3:58:
                    1f:32:c2:47:7c:23:ae:aa:b1:46:cf:89:8c:4d:0b:
                    62:c7:63:a8:79:83:b9:18:b0:d9:44:13:a7:1f:90:
                    99:12:14:e6:7c:99:3b:1a:47:c7:b1:89:55:81:d1:
                    eb:52:4e:01:bf:f8:22:ab:02:61:d3:8b:21:c3:fa:
                    5c:ab:97:3f:7c:62:fb:c3:95:f5:21:3c:8b:96:fe:
                    66:b4:9f:06:79:62:e8:5d:32:a6:16:df:11:27:e5:
                    78:bd:fc:b1:ae:da:47:2c:bd:cf:39:9a:6c:72:c5:
                    64:44:33:d8:f7:6b:be:8c:90:77:ed:3a:d9:a7:d4:
                    9b:a2:be:1a:50:be:fe:2f:7e:b5:60:66:b1:bd:c5:
                    16:b4:75:cb:70:62:6a:48:67:21:a8:f5:96:c0:8f:
                    6c:dc:5c:be:3a:fe:3d:93:e9:a1:5d:e2:78:71:91:
                    39:5f:d5:f6:25:38:21:a5:5b:e8:a5:05:d6:1e:fd:
                    a7:64:83:37:c2:a4:d5:6e:65:b4:8a:cf:d2:b8:65:
                    28:13:4a:16:e2:f6:a6:8d:7b:d9:b4:a5:eb:82:94:
                    e0:4e:7f:d3:ee:8d:6f:1d:b6:c7:f1:ed:ec:c1:a4:
                    0d:56:b2:cf:e8:62:65:ab:36:5d:c1:08:62:0d:a5:
                    49:67:42:c6:72:fa:b5:f7:16:66:a5:f1:89:6f:03:
                    58:3f:89:97:b2:14:29:7d:cb:58:66:ef:16:54:5f:
                    f1:ca:1e:c8:04:44:6a:bf:91:69:63:2d:7d:a3:42:
                    9b:fc:64:d4:1b:5e:ef:10:b0:e6:36:92:45:f1:6c:
                    16:a7:36:a2:dc:00:73:e9:84:c0:de:64:f8:df:9e:
                    a5:1b:0a:81:cf:1a:0a:b4:d6:4c:4b:65:7a:3f:be:
                    06:35:1e:98:de:43:97:7f:a0:f9:21:72:ff:5b:d9:
                    5a:8e:63:93:28:0b:18:3c:b4:0a:5f:83:79:4c:be:
                    09:8a:f3:e5:59:86:7a:6f:26:45:83:da:88:4a:2a:
                    7e:47:82:8a:1d:df:ad:37:2d:8e:49:ab:39:c5:b2:
                    67:da:e2:9f:98:8b:3a:d9:96:bf:1d:b8:1d:cd:1f:
                    ea:42:2e:8a:aa:1a:84:0f:97:21:4d:c3:79:cd:d7:
                    06:89:e8:38:71:31:7a:39:08:f7:99:23:56:c5:18:
                    3f:c2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.godaddy.com/gdig2s1-5461.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114413.1.7.23.1
                  CPS: http://certificates.godaddy.com/repository/
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com/
                CA Issuers - URI:http://certificates.godaddy.com/repository/gdig2.crt
            X509v3 Authority Key Identifier: 
                40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE
            X509v3 Subject Alternative Name: 
                DNS:*.blr.com, DNS:blr.com
            X509v3 Subject Key Identifier: 
                B0:05:59:DA:86:D1:C0:0C:1B:2A:F0:A8:E3:B8:D5:54:4B:F1:05:58
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Apr  9 07:22:28.260 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:14:39:4B:12:9D:9E:18:E5:D2:1D:C6:5B:
                                47:35:4C:F2:E6:82:2D:1A:63:0F:23:CE:D2:59:48:97:
                                18:79:A9:13:02:20:17:3D:78:33:D3:3F:27:86:B7:50:
                                26:2D:DD:58:DE:E3:E6:DB:D9:D1:55:DC:13:96:6D:7A:
                                F4:92:9A:95:0F:D5
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Apr  9 07:22:28.485 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:2B:F6:1B:9C:43:78:1E:F5:C5:A2:F4:F4:
                                39:2A:70:6D:99:19:12:67:4A:58:A9:D6:97:A4:5B:47:
                                1B:9B:25:7C:02:21:00:8A:FF:7F:1E:63:C1:07:1A:6E:
                                A5:F5:23:88:F9:6C:91:96:78:1E:D3:C0:E5:B9:FE:13:
                                58:59:C9:A6:5E:07:E6
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Apr  9 07:22:28.677 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:99:60:F3:8D:13:CF:7F:08:3E:68:1F:
                                84:47:DC:C3:B0:7F:3D:58:EC:0E:5C:9A:BC:B9:DB:40:
                                EA:54:C0:05:14:02:20:31:76:66:19:E1:B4:23:81:51:
                                4E:6D:C5:EC:01:22:DD:F6:C4:FD:8C:FD:CA:E2:83:0A:
                                76:F1:E5:7D:0C:C6:A4
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        67:a6:64:85:03:88:cc:f0:0a:65:8b:4e:82:f6:15:dd:4b:d7:
        52:9a:6d:8b:f4:91:62:ba:e0:ee:5a:87:b1:a5:fa:1e:1c:07:
        cb:c9:32:8a:f0:28:d4:8c:e8:50:91:36:33:9c:9e:ad:e0:cc:
        5c:45:30:c7:f4:fa:fd:30:ae:08:b8:02:3e:3b:02:c2:ac:79:
        f9:d4:bd:e8:c4:5f:de:61:d6:03:50:17:f8:e8:14:25:ed:81:
        d1:5a:fc:0d:c9:11:71:a0:54:d7:3e:f0:45:9f:37:38:78:3d:
        8e:bc:a0:ea:c0:c6:49:ab:ec:fb:46:ea:ed:01:33:34:86:96:
        0a:40:95:74:49:b9:97:b7:f7:7b:0d:41:8c:cd:aa:59:b7:b0:
        f0:84:e1:d8:b1:60:41:8f:19:21:89:11:0a:68:38:3c:f1:e9:
        67:ec:3f:5b:a5:23:88:4c:c9:94:99:69:f4:8a:0d:8c:b1:7f:
        93:f3:0f:82:ba:42:e6:c3:07:2d:9b:8d:ea:1f:12:50:05:95:
        f1:22:f9:ec:58:5c:a1:dc:ed:ae:90:bd:d2:48:67:ff:63:65:
        21:3d:ae:26:d6:ea:fd:c4:80:3a:c6:01:28:f9:d2:b1:fd:50:
        cc:97:37:75:4f:92:7a:a4:6a:3c:d9:19:4d:08:a8:c3:f0:af:
        68:44:7f:7e

64.207.100.80

Last Seen: 2024-04-24

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1835418956 | 2024-04-24T01:45:10.026660
80 / tcp

Microsoft IIS httpd8.5

-1265851640 | 2024-04-24T14:57:57.175927
443 / tcp

Microsoft IIS httpd8.5

Products

Pricing

Contact Us

64.207.100.80

Last Seen: 2024-04-24

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1835418956 | 2024-04-24T01:45:10.026660 80 / tcp

Microsoft IIS httpd8.5

-1265851640 | 2024-04-24T14:57:57.175927 443 / tcp

Microsoft IIS httpd8.5

Products

Pricing

Contact Us

1835418956 | 2024-04-24T01:45:10.026660
80 / tcp

-1265851640 | 2024-04-24T14:57:57.175927
443 / tcp