GeneralInformation

Hostnames	server-65-9-42-30.nrt12.r.cloudfront.net oxtos.jp www.oxtos.jp
Domains	cloudfront.net oxtos.jp
Cloud Provider	Amazon
Cloud Region	GLOBAL
Cloud Service	CLOUDFRONT
Country	United States
City	Ashburn
Organization	Amazon.com, Inc.
ISP	Amazon.com, Inc.
ASN	AS16509

WebTechnologies

CDN

Google Hosted Libraries

JavaScript libraries

jQuery1.9.1

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-11023	6.1In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	6.1In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251	6.1jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

80 443

-392618166 | 2024-04-18T14:37:27.612684

80 / tcp

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Thu, 18 Apr 2024 14:37:27 GMT
Content-Type: text/html
Content-Length: 915
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 d1e4d8ebe5533d5332b1c564eaf9661c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT12-C5
X-Amz-Cf-Id: czHjnR9ee4hXKXn0yIkTezvRx_Tlxy5-Si4BJutRi9blZ221C1chfg==

-1978198565 | 2024-04-14T08:39:38.259335

443 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=EUC-JP
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 14 Apr 2024 08:34:53 GMT
Set-Cookie: AWSALB=H6f8AQGEGIP1UNdkJVLznKaPst8qTnalzi72U8ZxVqgRO+/LEHJEmsI+lvKXhd/DI20zkC2TTrzCjdxTlyatU+nV3TJYf6mFrHLCBA9HEzGZQ+hbTvck+ftxYUxx; Expires=Sun, 21 Apr 2024 08:34:53 GMT; Path=/
Set-Cookie: AWSALBCORS=H6f8AQGEGIP1UNdkJVLznKaPst8qTnalzi72U8ZxVqgRO+/LEHJEmsI+lvKXhd/DI20zkC2TTrzCjdxTlyatU+nV3TJYf6mFrHLCBA9HEzGZQ+hbTvck+ftxYUxx; Expires=Sun, 21 Apr 2024 08:34:53 GMT; Path=/; SameSite=None; Secure
Server: Apache
Set-Cookie: db=oxtos8448; path=/; Samesite=None; secure
Set-Cookie: identify=9cf693c3ed45d4e466cbc5bdc99cb738; path=/; Samesite=None; secure
Set-Cookie: db=oxtos8448; path=; Samesite=None; secure
Set-Cookie: db=oxtos8448; path=/; Samesite=None; secure
Set-Cookie: identify=9cf693c3ed45d4e466cbc5bdc99cb738; path=/; Samesite=None; secure
Set-Cookie: tempid=e7e8a979e1cbf7ff95449c5b1ee2ef7f; expires=Tue, 14-May-2024 08:34:53 GMT; Max-Age=2592000; path=/; Samesite=None; secure
Set-Cookie: slvd=1713083693; expires=Tue, 14-May-2024 08:34:53 GMT; Max-Age=2592000; path=/; Samesite=None; secure; httponly
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self' https:
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
P3P: CP='CAO PSA CONi OTR OUR DEM ONL'
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 e461cfe48b147c7ebb96d61448fb1152.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT12-C5
X-Amz-Cf-Id: 2or3gdCyN8-jca_SHq5pEdVmlFo6ztMwqOWkTtNfMG-2ki_6AXwxyg==

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:92:c9:0f:a0:2c:f0:43:97:50:2b:4b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G4
        Validity
            Not Before: Sep 25 05:30:51 2023 GMT
            Not After : Oct 26 05:30:50 2024 GMT
        Subject: CN=www.oxtos.jp
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:16:cf:73:c7:31:4c:7b:a9:d2:c7:86:7c:
                    13:19:76:a1:03:d3:47:5b:36:08:34:bb:94:f4:fd:
                    01:8d:c9:39:c9:61:aa:c2:05:ea:6b:50:83:6d:2b:
                    8f:22:01:ef:f1:c4:c1:02:96:c7:80:a3:1b:b5:a4:
                    13:cf:c3:18:97:89:e2:a0:54:a0:51:fc:a8:3c:ab:
                    09:b5:c3:e8:d8:54:1d:91:17:3b:b8:af:d3:ee:df:
                    1f:3a:54:ea:6d:01:52:6e:8b:5b:35:0a:49:62:36:
                    23:4d:59:50:8e:dc:0e:ca:f0:f0:92:98:1a:06:cd:
                    dd:1f:56:f2:30:78:74:5b:59:5e:ff:59:00:3b:a1:
                    f8:85:d2:14:f3:23:a1:4f:25:c3:1c:5e:19:7f:fa:
                    9e:7b:b0:48:f7:be:65:b7:07:6f:59:82:6b:89:59:
                    a0:9a:da:d4:9e:98:ec:43:56:64:7f:8f:70:1a:65:
                    6d:91:b8:66:cc:f7:3c:5d:2e:d3:e4:42:7b:3b:71:
                    2e:6e:1e:e6:d5:b2:82:08:1e:d9:37:6c:eb:f5:56:
                    84:e0:74:61:9d:56:02:f0:9a:26:97:7b:70:f0:94:
                    ff:0e:1e:87:3c:5e:b2:0b:cf:01:37:2c:ac:bd:ac:
                    24:40:e2:7f:53:1c:67:7e:fb:24:1e:3d:94:66:b6:
                    c0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/alphasslcasha256g4.crt
                OCSP - URI:http://ocsp.globalsign.com/alphasslcasha256g4
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.4146.10.1.3
                  CPS: https://www.globalsign.com/repository/
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/alphasslcasha256g4.crl
            X509v3 Subject Alternative Name: 
                DNS:www.oxtos.jp, DNS:oxtos.jp
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                4F:CB:AC:A8:C2:EF:AB:DD:83:6F:6B:BF:CE:98:3D:5C:58:25:76:15
            X509v3 Subject Key Identifier: 
                54:58:7B:F9:6B:C1:65:6A:88:51:0E:A8:45:B0:6C:FF:31:66:86:BC
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Sep 25 05:30:52.779 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:1F:47:69:BA:9F:87:99:97:42:FE:80:C5:B5:
                                AB:C7:1F:0B:15:4B:37:69:F9:09:6A:45:C5:BF:FC:32:
                                8C:00:35:02:21:00:DB:CD:26:66:22:26:AF:F0:62:CC:
                                9D:37:A7:0C:6A:A8:FB:11:B0:D9:B0:DF:0D:53:3A:DE:
                                DF:5B:2A:91:94:5C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Sep 25 05:30:52.791 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:7E:AB:5B:18:97:6C:0D:0C:64:CF:30:5B:
                                D1:FE:FD:DA:77:F1:2C:BD:23:C2:8F:BA:77:86:B2:9B:
                                49:42:8B:97:02:21:00:FB:21:64:C2:07:B5:33:62:9B:
                                AC:8B:10:50:C8:B0:92:A0:10:6C:EB:FA:35:AA:7B:9B:
                                44:68:CA:69:83:2E:ED
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Sep 25 05:30:52.828 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:0A:83:8C:79:E7:2E:27:7B:EA:B1:90:2C:
                                91:E3:2E:C5:4F:C1:0E:F5:A4:21:07:10:65:38:2B:F0:
                                8E:3E:61:98:02:21:00:F0:AA:FA:89:B0:52:AD:30:B9:
                                76:60:75:71:CC:02:B2:EA:65:B1:5B:B3:69:81:A2:92:
                                91:F3:AA:19:42:EA:AA
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        61:c9:20:22:e2:3a:64:b2:42:cc:50:f5:bb:b2:5d:eb:d2:1b:
        36:84:df:e1:b7:3d:9e:da:6a:6e:57:8c:89:e5:c1:db:f8:bd:
        e5:ab:58:d7:f2:1d:37:ac:ce:47:e0:f8:30:6a:0c:a2:28:55:
        61:8d:c9:9d:07:8d:cb:3e:d5:f7:f4:ff:d4:30:28:44:dd:87:
        b7:f4:b6:72:4d:45:25:20:39:ac:8c:ee:e5:e3:7d:9c:bd:5f:
        f6:5a:c5:80:81:7f:27:db:72:8e:2d:d0:32:bf:bd:5f:62:34:
        32:c4:8c:ed:26:3f:b1:2a:cc:5c:0f:dc:7c:1d:90:ce:d7:9d:
        a4:9f:e7:ad:a7:48:8d:73:ed:6b:6f:f9:4e:8e:d2:38:9f:cd:
        9b:b1:61:26:0c:4e:8d:97:b8:c3:c9:0a:4d:a0:1a:80:9b:fe:
        10:3e:f0:4e:60:6c:63:1d:6f:ac:c4:2b:97:99:ca:e5:a4:28:
        7a:e4:a7:0b:82:5e:2c:01:82:4f:4f:da:08:b2:7c:e1:5e:2d:
        42:44:ad:43:aa:6b:26:23:39:ab:6b:2c:fc:6b:c1:eb:64:4d:
        7b:64:29:a7:00:69:91:17:ce:82:89:95:c6:57:b2:15:3d:05:
        2e:5e:d0:50:76:91:b6:c5:ac:16:03:4a:91:6a:38:b3:55:e6:
        f6:dc:24:a1

65.9.42.30

Last Seen: 2024-04-18

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-392618166 | 2024-04-18T14:37:27.612684
80 / tcp

CloudFront httpd

-1978198565 | 2024-04-14T08:39:38.259335
443 / tcp

Products

Pricing

Contact Us

65.9.42.30

Last Seen: 2024-04-18

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-392618166 | 2024-04-18T14:37:27.612684 80 / tcp

CloudFront httpd

-1978198565 | 2024-04-14T08:39:38.259335 443 / tcp

Products

Pricing

Contact Us

-392618166 | 2024-04-18T14:37:27.612684
80 / tcp

-1978198565 | 2024-04-14T08:39:38.259335
443 / tcp