GeneralInformation

Hostnames	66-70-159-18.cloud.brettworks.net snowball.brettworks.net cpanel.snowball.brettworks.net cpcalendars.snowball.brettworks.net cpcontacts.snowball.brettworks.net mail.snowball.brettworks.net webmail.snowball.brettworks.net whm.snowball.brettworks.net www.snowball.brettworks.net carpetking.com flooringexpo.com www.flooringexpo.com
Domains	brettworks.net carpetking.com flooringexpo.com
Country	Canada
City	Beauharnois
Organization	OVH (NWK)
ISP	OVH SAS
ASN	AS16276

WebTechnologies

Advertising

Google Ads

Analytics

Google Ads Conversion Tracking

Blogs

WordPress

CDN

Google Hosted Libraries

CMS

Databases

Form builders

JavaScript libraries

jQuery UI1.11.41.11.2

Performance

WP Fastest Cache

Programming languages

PHP

Security

Tag managers

UI frameworks

Video players

WordPress plugins

Google Tag Manager for WordPress1.19.1

Contact Form 75.7.7

WP Fastest Cache

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251	4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

80 443 2082 2083 2095 8888

-240654828 | 2024-04-21T06:23:10.912136

80 / tcp

HTTP/1.1 200 OK
Date: Sun, 21 Apr 2024 06:23:10 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Transfer-Encoding: chunked
Content-Type: text/html

79637264 | 2024-05-02T09:28:06.273570

443 / tcp

HTTP/1.1 200 OK
Date: Thu, 02 May 2024 09:28:04 GMT
Server: Apache
Link: <https://www.flooringexpo.com/wp-json/>; rel="https://api.w.org/", <https://www.flooringexpo.com/wp-json/wp/v2/pages/41774>; rel="alternate"; type="application/json", <https://www.flooringexpo.com/>; rel=shortlink
Upgrade: h2,h2c
Connection: Keep-Alive
Cache-Control: max-age=0
Expires: Thu, 02 May 2024 09:28:04 GMT
Vary: Accept-Encoding
X-UA-Compatible: IE=edge
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b5:46:47:40:b8:f7:4f:1b:eb:d6:c3:24:a6:e4:95:fa:79
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr 19 05:24:32 2024 GMT
            Not After : Jul 18 05:24:31 2024 GMT
        Subject: CN=www.flooringexpo.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:02:8c:e4:24:6d:22:ca:09:6f:02:98:5c:
                    fc:7b:30:e4:70:b2:92:35:31:bc:5c:5c:ba:dc:0f:
                    ad:a2:44:7a:a8:ac:eb:f9:ca:0a:8e:a1:b6:c2:6f:
                    c3:64:f1:92:ae:6c:70:ac:f8:7e:99:c4:58:27:70:
                    2c:9e:e2:d1:f9:61:32:cb:5d:2d:3c:75:c8:79:c9:
                    a8:11:ff:e8:99:de:51:10:dc:5c:97:ef:02:b5:03:
                    af:3c:f7:54:a0:38:4f:ea:6d:74:07:fa:f8:c1:61:
                    25:55:64:54:f4:73:c1:4e:9c:ae:27:ed:74:14:5a:
                    14:a7:47:66:91:8f:1f:55:55:b7:d0:c5:34:1e:1b:
                    ef:0a:e8:53:77:c0:e7:6c:0c:0e:8a:cc:18:d7:de:
                    ff:c3:83:c5:55:2c:c3:0a:dd:8f:a1:40:57:39:fe:
                    65:11:0f:ba:13:87:99:cb:b3:0a:52:c0:32:4e:9d:
                    de:25:c3:d3:7e:4e:6b:7f:a2:be:88:8b:55:1b:84:
                    df:13:e8:4d:11:af:cf:73:3e:a8:8f:23:5a:bc:f4:
                    a3:60:03:6d:fe:3d:be:10:08:14:9a:fb:50:c4:b7:
                    49:6d:ec:d8:b3:76:ff:4d:1d:4d:b7:7e:43:83:62:
                    61:7f:0f:15:3f:13:de:08:d6:5d:5f:da:75:54:a0:
                    d1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                B8:FA:EF:35:1B:98:8B:6B:8A:7A:02:81:02:28:C3:0C:12:92:15:B6
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.carpetking.com, DNS:carpetking.com, DNS:flooringexpo.com, DNS:www.flooringexpo.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Apr 19 06:24:33.183 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:EB:63:44:AD:76:56:ED:D3:F4:D6:4F:
                                09:94:25:E2:6A:FD:14:83:B4:2D:23:4A:7B:D9:3D:46:
                                26:7B:28:8C:AB:02:20:5A:F0:DD:0E:A2:2F:89:D2:BD:
                                5B:7A:02:8D:B1:34:53:6A:86:9D:B3:F2:67:84:1D:8C:
                                DC:BA:40:EE:E2:48:39
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
                                4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
                    Timestamp : Apr 19 06:24:33.372 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:51:8C:BF:37:6C:C4:98:C4:65:A1:45:E3:
                                B0:A4:9F:A5:7B:7A:F9:2D:A9:BA:C2:27:B4:09:BE:C5:
                                01:EB:A3:A5:02:21:00:E5:B3:6E:CF:42:46:71:72:E4:
                                6A:2E:74:BC:96:EB:6E:BA:F6:65:9D:51:CC:67:EE:2A:
                                5C:D0:14:A2:E9:95:79
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        36:da:34:f9:4f:68:df:42:64:c3:1a:43:2f:7d:83:63:2c:3d:
        15:75:b9:47:fa:71:b0:ae:b3:96:8d:ca:ca:0a:39:36:06:1a:
        27:65:36:a3:ac:a6:de:84:27:f4:e4:8a:68:f1:01:ce:32:9a:
        b6:ea:91:78:38:37:8c:2d:96:d8:29:c7:87:6a:21:15:28:b4:
        8f:c0:c7:8a:bc:8e:ed:24:c8:d2:8c:1c:43:50:ca:b2:d4:2f:
        a5:07:a3:17:7c:07:f8:df:23:59:5f:71:bd:ce:72:18:5d:32:
        78:35:f2:cf:c7:ed:58:a5:50:32:74:ae:70:25:84:b3:07:0d:
        28:3f:24:3c:87:97:6f:56:cc:d4:c7:3c:14:3b:d8:6f:b7:68:
        54:af:00:55:80:e0:b8:b3:af:eb:3f:64:f9:9e:66:60:04:8d:
        cc:79:b8:3b:08:ca:b3:27:c3:59:10:74:f6:b9:ad:1a:a6:18:
        c3:53:e0:99:08:bb:0b:08:d0:65:df:4b:bd:e8:cc:4b:69:de:
        2b:e5:c1:79:d7:ba:e0:fa:dd:23:13:34:f1:47:ab:6c:71:90:
        13:7e:f6:47:a5:37:1e:9d:47:dd:80:db:75:01:f2:5d:8c:ec:
        58:f9:85:61:4d:93:cf:6b:af:6c:28:11:58:12:7a:a4:a8:48:
        71:1e:e6:16

-1116653100 | 2024-04-13T06:13:49.202398

2082 / tcp

HTTP/1.1 301 Moved
Content-length: 121
Location: https://snowball.brettworks.net:2083/
Content-type: text/html; charset="utf-8"
Cache-Control: no-cache, no-store, must-revalidate, private

-1905678948 | 2024-04-27T02:42:00.811368

2083 / tcp

HTTP/1.1 200 OK
Connection: close
Content-Type: text/html; charset="utf-8"
Date: Sat, 27 Apr 2024 02:42:00 GMT
Cache-Control: no-cache, no-store, must-revalidate, private
Pragma: no-cache
Set-Cookie: cprelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
Set-Cookie: cpsession=%3aNFAOVzZQ3c2xX6PY%2c6a83131407477379a1a7737b4c9c14d1; HttpOnly; path=/; port=2083; secure
Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=66.70.159.18; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
Set-Cookie: PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
Cache-Control: no-cache, no-store, must-revalidate, private
Content-Length: 37105

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a4:30:02:de:32:6c:b8:dc:a2:69:b0:46:13:3e:96
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=TX, L=Houston, O=cPanel, Inc., CN=cPanel, Inc. Certification Authority
        Validity
            Not Before: Mar 19 00:00:00 2024 GMT
            Not After : Jun 17 23:59:59 2024 GMT
        Subject: CN=snowball.brettworks.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f0:58:65:9c:47:33:e0:ef:b6:c6:4f:2f:05:58:
                    14:e2:ab:e3:5c:5b:88:57:45:b3:60:31:f6:d4:09:
                    34:f6:2d:c7:b2:de:f0:08:7d:84:75:4f:0b:ae:7a:
                    dd:57:85:c8:5b:49:92:75:f5:10:ed:74:02:78:4a:
                    88:39:44:c4:cc:a5:00:99:69:05:25:07:27:a8:e9:
                    89:16:03:82:9a:e3:c4:d4:ef:6d:59:1b:06:3b:ba:
                    b6:57:06:96:69:2f:a2:5f:54:7c:ea:74:6b:36:75:
                    4e:bc:89:65:ff:86:b7:60:de:ee:ef:b5:17:e0:3a:
                    19:43:f8:6b:00:c8:57:8d:85:4a:d8:95:d5:e6:db:
                    53:65:cd:bb:45:04:20:50:a7:23:a8:47:4b:76:2d:
                    8f:5e:c0:e8:a1:3d:b3:db:55:64:32:ae:99:46:10:
                    07:e9:52:05:80:0c:1a:f2:cc:fb:18:94:7d:19:3c:
                    1c:a6:3d:f6:20:4e:d5:b7:ed:e5:ca:4b:f9:40:12:
                    88:2a:09:c1:57:6b:58:9f:54:b9:81:6e:3e:d8:55:
                    da:de:34:4a:e8:a4:c4:1f:da:cc:4e:7e:10:75:bc:
                    ba:74:a2:62:46:13:ad:28:60:df:08:5b:85:6d:5f:
                    4e:58:8e:5a:52:87:d4:fc:3d:4f:dc:84:14:c0:b0:
                    05:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                7E:03:5A:65:41:6B:A7:7E:0A:E1:B8:9D:08:EA:1D:8E:1D:6A:C7:65
            X509v3 Subject Key Identifier: 
                5B:8D:F6:ED:45:87:92:6B:B1:31:6A:18:66:99:65:0D:7A:72:D1:8D
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.52
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.comodoca.com/cPanelIncCertificationAuthority.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/cPanelIncCertificationAuthority.crt
                OCSP - URI:http://ocsp.comodoca.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Mar 19 15:16:36.232 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:DA:64:31:D5:E1:36:5F:F9:A5:F2:68:
                                EB:C1:0B:AA:0F:A0:4A:66:E8:72:7E:8C:77:5A:B1:33:
                                64:BC:31:03:33:02:20:7D:9E:93:E9:33:C3:38:23:2F:
                                8C:BD:F5:D8:4B:25:30:8D:3A:7E:EF:F0:36:A0:5A:0B:
                                9A:32:A7:7A:F8:81:AA
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Mar 19 15:16:36.187 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B7:A8:92:0B:B0:5B:0D:2D:55:F0:C6:
                                C3:41:F2:1D:EA:17:43:67:F2:75:9C:67:A0:81:43:88:
                                A6:7C:B3:C8:E3:02:21:00:B2:42:0F:DA:B9:CC:01:DD:
                                57:89:98:D8:4C:04:8A:FC:B2:FD:B2:77:15:62:97:63:
                                F9:56:ED:60:5F:1A:7E:8F
            X509v3 Subject Alternative Name: 
                DNS:snowball.brettworks.net, DNS:cpanel.snowball.brettworks.net, DNS:cpcalendars.snowball.brettworks.net, DNS:cpcontacts.snowball.brettworks.net, DNS:mail.snowball.brettworks.net, DNS:webmail.snowball.brettworks.net, DNS:whm.snowball.brettworks.net, DNS:www.snowball.brettworks.net
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        52:b9:06:2e:24:b1:db:19:a4:34:5e:b5:b7:3e:eb:5c:b5:4e:
        e4:a7:97:59:f7:11:06:7e:5f:38:e6:c6:6c:3d:7e:ae:3c:0f:
        77:e6:a0:83:63:d8:22:09:15:2b:82:09:d1:e8:0b:0b:8e:90:
        8d:ce:27:2f:53:76:d6:7f:dc:57:cf:a8:12:cc:1f:d3:cb:bc:
        74:be:2f:b0:d5:bc:fc:2e:f4:cc:48:03:e0:a2:dc:dc:d2:04:
        cc:2b:d7:49:fd:8b:80:95:33:68:47:b5:57:93:ae:77:a5:e7:
        6a:f1:bd:87:65:50:34:ec:24:a5:71:46:d3:17:56:29:f2:89:
        b0:93:f7:47:d9:ab:a7:a8:a6:c3:e0:ba:88:24:9c:c1:b7:aa:
        fe:33:c9:0c:ea:9d:14:0f:26:e5:2c:56:b7:ac:46:9a:ea:ed:
        f8:84:89:6b:bd:56:ad:91:b2:9b:ab:54:1f:17:13:05:22:13:
        b7:ad:01:14:75:22:39:8e:7b:70:41:61:b6:cb:65:75:cb:dc:
        5c:58:7a:42:53:47:f6:a7:58:3e:82:76:77:36:b3:f6:89:74:
        d5:37:e8:2c:26:17:c8:67:19:5f:ef:97:22:c2:8d:6c:a4:68:
        59:21:b4:43:37:64:34:67:04:0f:ce:ee:f1:18:4e:12:b6:a9:
        0b:cb:db:df

-995586700 | 2024-05-02T16:00:51.742910

2095 / tcp

HTTP/1.1 301 Moved
Content-length: 121
Location: https://snowball.brettworks.net:2096/
Content-type: text/html; charset="utf-8"
Cache-Control: no-cache, no-store, must-revalidate, private

-376815039 | 2024-04-26T07:03:11.052029

8888 / tcp

HTTP/1.1 403 OK
Content-type: text/html

66.70.159.18

Last Seen: 2024-05-02

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-240654828 | 2024-04-21T06:23:10.912136
80 / tcp

Apache httpd

79637264 | 2024-05-02T09:28:06.273570
443 / tcp

Apache httpd

-1116653100 | 2024-04-13T06:13:49.202398
2082 / tcp

-1905678948 | 2024-04-27T02:42:00.811368
2083 / tcp

cPanel

-995586700 | 2024-05-02T16:00:51.742910
2095 / tcp

-376815039 | 2024-04-26T07:03:11.052029
8888 / tcp

Products

Pricing

Contact Us

66.70.159.18

Last Seen: 2024-05-02

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-240654828 | 2024-04-21T06:23:10.912136 80 / tcp

Apache httpd

79637264 | 2024-05-02T09:28:06.273570 443 / tcp

Apache httpd

-1116653100 | 2024-04-13T06:13:49.202398 2082 / tcp

-1905678948 | 2024-04-27T02:42:00.811368 2083 / tcp

cPanel

-995586700 | 2024-05-02T16:00:51.742910 2095 / tcp

-376815039 | 2024-04-26T07:03:11.052029 8888 / tcp

Products

Pricing

Contact Us

-240654828 | 2024-04-21T06:23:10.912136
80 / tcp

79637264 | 2024-05-02T09:28:06.273570
443 / tcp

-1116653100 | 2024-04-13T06:13:49.202398
2082 / tcp

-1905678948 | 2024-04-27T02:42:00.811368
2083 / tcp

-995586700 | 2024-05-02T16:00:51.742910
2095 / tcp

-376815039 | 2024-04-26T07:03:11.052029
8888 / tcp