GeneralInformation

Hostnames	auditandtaxsolutionscpas.com host1.byfcpasites.com stevenwhitecpas.com www.stevenwhitecpas.com
Domains	auditandtaxsolutionscpas.com byfcpasites.com stevenwhitecpas.com
Country	United States
City	Lansing
Organization	Build Your Firm
ISP	Liquid Web, L.L.C
ASN	AS32244

WebTechnologies

CDN

JavaScript libraries

Miscellaneous

UI frameworks

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2018-14042	4.3In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVE-2018-14041	4.3In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.
CVE-2018-14040	4.3In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
CVE-2016-10735	4.3In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

OpenPorts

21 53 80 443 2087

240448296 | 2024-05-22T19:05:43.330103

21 / tcp

220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
220-You are user number 1 of 50 allowed.
220-Local time is now 15:05. Server port: 21.
220-This is a private system - No anonymous login
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
421-Sorry, cleartext sessions and weak ciphers are not accepted on this server.
421 Please reconnect using TLS security mechanisms.
214-The following SITE commands are recognized
 ALIAS
 CHMOD
 IDLE
 UTIME
214 Pure-FTPd - http://pureftpd.org/
211-Extensions supported:
 UTF8
 EPRT
 IDLE
 MDTM
 SIZE
 MFMT
 REST STREAM
 MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
 MLSD
 PRET
 AUTH TLS
 PBSZ
 PROT
 TVFS
 ESTA
 PASV
 EPSV
 ESTP
211 End.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:db:ad:06:71:0c:b5:02:90:48:ac:02:af:d5:81:84:73:93
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr  7 13:55:04 2024 GMT
            Not After : Jul  6 13:55:03 2024 GMT
        Subject: CN=host1.byfcpasites.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9e:8b:db:64:36:4b:a1:3a:bc:8c:d1:d6:ec:c5:
                    aa:8b:d7:a5:e0:55:41:9c:54:f4:6a:76:7e:d5:20:
                    35:0e:ad:d0:1b:ee:e8:9d:09:a7:ab:a2:0f:2c:d1:
                    b5:14:ee:f2:f0:f8:83:52:51:bf:b3:9b:cb:bf:9b:
                    cc:42:04:57:d1:f7:4b:6c:ce:e0:fb:37:fd:5c:cb:
                    09:8e:50:42:ab:81:32:63:40:ae:ea:ee:b9:45:0f:
                    1a:ec:01:b9:84:71:c6:7e:92:54:d9:9c:ff:a8:e9:
                    33:b3:96:29:3e:da:af:55:ba:8c:9a:2f:ac:a5:d4:
                    12:a5:a2:b3:07:17:83:b5:8d:fb:60:41:7e:0a:b8:
                    0e:2f:ca:d6:4f:92:c4:1d:f7:d6:8c:f1:a2:3a:be:
                    47:83:26:25:57:7c:82:ae:e2:d3:09:2e:b8:3f:98:
                    6d:2a:df:61:50:fa:04:63:87:fc:40:6d:8f:86:fc:
                    cc:13:72:5f:af:66:ed:fc:ce:5c:4e:26:b9:08:fa:
                    a1:7f:6f:48:94:65:7c:df:47:59:aa:d0:00:36:81:
                    58:bf:d2:0f:d4:51:43:d4:44:e8:7f:f4:b6:0b:68:
                    15:14:88:70:5e:4c:cd:49:c2:28:12:11:ec:81:a0:
                    55:73:95:cf:27:2b:99:a9:74:f5:42:5d:9c:b5:1f:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                40:DB:2E:2B:F6:2D:BF:91:5A:1A:F4:13:DA:B2:33:D5:70:1D:A1:F4
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:host1.byfcpasites.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Apr  7 14:55:04.319 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:4F:03:15:2D:C5:5A:1F:B1:99:8E:50:25:
                                3F:BB:5D:C7:2A:65:9B:D3:24:23:E7:72:78:B4:B9:82:
                                9E:03:AB:46:02:20:17:AF:D5:F8:36:A4:39:2F:8A:CF:
                                BB:53:44:7B:F6:48:55:56:65:37:40:FE:D9:10:E7:CE:
                                87:87:4F:19:45:8D
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Apr  7 14:55:04.335 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:15:42:CF:C1:71:D4:AA:31:71:A2:C4:83:
                                DD:66:31:1A:26:B7:D3:05:2B:63:71:DA:39:BE:FB:56:
                                DE:BF:64:A7:02:21:00:DE:A9:BF:4E:F4:71:1A:C6:9E:
                                A2:9F:A1:E5:FE:18:C0:5B:56:BF:89:5E:03:40:C0:C7:
                                9C:35:D1:FB:F1:89:47
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        75:94:e1:49:d3:de:8d:0f:c3:e4:c4:e6:fb:ba:08:bc:8f:9d:
        9b:2a:21:ea:8d:e9:f9:2d:45:cf:9a:d6:62:7f:13:33:80:15:
        ae:c1:a8:b8:fd:24:3b:96:13:46:78:22:24:58:6e:18:4b:7f:
        e6:6d:e7:86:7c:db:ad:83:77:67:cd:4f:36:86:c1:0e:00:ce:
        b6:e5:d7:ff:c7:b5:b9:15:8f:4f:75:b4:4c:b7:f2:96:64:f1:
        32:4b:c4:a0:9c:9d:01:92:b7:1b:c5:e5:53:e7:07:ec:37:63:
        e3:90:ff:c2:74:2f:8f:bf:b9:7f:a8:a8:00:74:95:c7:b4:45:
        7f:69:7a:18:ef:93:16:a4:6c:04:90:aa:23:fe:64:ff:44:42:
        1d:35:82:d5:a3:6a:fb:76:39:06:35:30:ed:6c:ed:3b:69:ff:
        d9:79:fa:7c:85:12:7c:9e:2e:a9:7e:af:db:37:6f:de:f6:66:
        65:15:64:50:a6:38:b2:9f:4c:49:99:6b:36:e4:df:d4:45:09:
        e5:b7:86:70:d8:c7:2c:a9:0d:af:24:04:25:0d:83:02:57:d3:
        1c:6f:c9:62:10:bb:34:ed:19:95:ba:75:12:2e:75:2d:74:be:
        a2:a2:79:16:fa:8b:18:a9:f7:f1:1a:2a:bc:2a:26:d7:d6:3d:
        57:f7:46:01

499755629 | 2024-05-19T20:05:51.627483

53 / tcp

9.11.36-RedHat-9.11.36-11.el8_9.1
Resolver name: host1.byfcpasites.com

1303734390 | 2024-05-17T10:26:28.545230

80 / tcp

HTTP/1.1 200 OK
Date: Fri, 17 May 2024 10:26:27 GMT
Content-Length: 1514
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Cache-Control: no-store, max-age=0
Server: imunify360-webshield/1.21

-182524545 | 2024-05-23T06:50:27.773314

443 / tcp

HTTP/1.1 200 OK
Date: Thu, 23 May 2024 06:45:45 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=3a7b2a2a14084d486af2a242faba5212; path=/
Vary: Accept-Encoding,User-Agent
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:93:2c:c5:12:6c:5e:d2:eb:74:10:b9:c6:f8:02:84:40:1f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Apr 28 06:12:26 2024 GMT
            Not After : Jul 27 06:12:25 2024 GMT
        Subject: CN=www.stevenwhitecpas.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:58:fc:1b:08:22:c1:2b:01:33:86:d3:89:
                    0b:ed:f0:38:a3:31:ec:0c:99:1d:4d:36:43:67:e1:
                    fe:3c:ac:f3:ed:33:cd:b9:e4:cb:ab:e5:2c:b2:ba:
                    ae:13:02:78:91:71:17:c2:23:56:bd:9d:a2:26:14:
                    28:b2:6a:13:7a:e9:d0:68:3c:3c:1a:f9:00:8e:28:
                    2d:16:16:9a:6d:c1:26:7d:f8:2c:b2:88:ab:ac:30:
                    cd:4e:58:83:09:af:29:5f:5f:a5:e7:c6:a9:72:8e:
                    c2:d8:c5:ed:04:70:84:e7:6a:a6:82:79:8b:bb:91:
                    e9:7e:82:0e:3c:bf:5b:b6:e5:00:ef:c5:78:77:48:
                    c7:7b:9a:04:70:72:68:ae:f2:f0:0a:51:5a:ca:0f:
                    8c:17:da:34:05:6d:97:87:09:f4:22:51:39:34:b2:
                    45:e4:30:e1:38:26:03:0b:6e:e6:ea:bb:f6:15:0c:
                    3c:b7:ba:a2:8f:a6:0d:e3:64:79:e7:25:65:fb:60:
                    b5:40:7f:3b:d5:19:52:4a:66:8a:b4:7d:d2:fa:68:
                    1f:16:6c:31:be:30:84:dc:07:36:da:d5:7c:bb:98:
                    b4:2b:7c:93:df:dc:dc:c8:e6:93:c5:46:a0:63:c5:
                    b9:09:58:fa:a9:0d:c5:f2:30:bc:d6:d2:a1:25:c6:
                    97:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                DA:FA:62:95:B2:4F:D2:62:88:3F:56:57:D7:DB:23:99:70:EB:38:67
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:stevenwhitecpas.com, DNS:www.stevenwhitecpas.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Apr 28 07:12:26.538 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:32:14:E2:16:72:94:E4:76:5D:A7:6B:69:
                                C1:E2:AE:97:EA:7C:1B:C3:00:0A:7C:97:B5:96:63:98:
                                39:4A:25:E6:02:21:00:C2:5F:53:59:4F:EB:D6:01:6E:
                                FE:F2:88:E2:E1:48:AF:7E:6B:92:A5:B7:17:DD:BF:B2:
                                C3:BB:65:D6:66:E4:C5
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
                                4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
                    Timestamp : Apr 28 07:12:26.730 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:49:0C:E9:C7:29:57:21:E0:DC:C1:55:CA:
                                DB:91:78:ED:37:1C:D1:8B:2C:21:6C:93:14:EB:38:A9:
                                8C:05:AE:C9:02:21:00:EA:2A:87:DA:70:68:08:4D:8D:
                                B9:90:B9:7C:2C:6F:62:CB:D8:66:34:41:4F:D0:F0:9B:
                                1A:CC:CF:C8:7D:97:E7
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        42:37:7b:1f:a7:35:6b:00:d1:3e:a5:46:e8:b9:a5:27:db:9f:
        1c:a9:11:57:f4:e3:48:a0:59:86:01:7b:78:f2:d3:91:bd:b6:
        b7:6b:7c:5c:a4:02:e6:ab:fd:38:fe:76:af:80:d1:34:42:bc:
        4b:eb:dd:cc:9a:0d:88:1f:0c:ca:c9:c4:59:0f:49:92:88:eb:
        4a:54:c6:58:11:80:e7:ed:c6:75:ea:92:24:9f:e4:1b:98:12:
        d3:b2:19:6b:7a:ed:3e:b4:7b:23:00:07:20:be:7a:88:07:36:
        4d:ad:ac:ec:ee:35:0e:17:cd:7c:4d:16:56:81:94:e3:05:94:
        8a:4e:d9:a0:12:94:89:ff:92:8f:b9:61:42:89:76:18:ef:88:
        22:39:78:80:59:ca:f6:ae:6b:ce:a0:b3:0d:2c:9b:9a:4a:e2:
        ec:0e:71:f6:e3:00:30:b3:e7:cd:93:1a:b8:c1:b6:a5:16:79:
        bb:35:50:73:97:78:e2:2a:bb:8f:14:a2:24:04:80:a3:dc:97:
        bf:5b:b8:ab:1c:52:50:67:9f:7d:80:43:df:f0:f6:61:fb:00:
        d9:be:93:3e:b7:57:f0:a6:7d:44:b9:6c:43:16:b2:f3:0e:58:
        08:3c:2f:db:f3:3d:21:65:9e:15:1c:5f:b0:5b:77:42:3a:9d:
        76:30:56:d7

-523874075 | 2024-05-22T06:17:33.737553

2087 / tcp

HTTP/1.1 400 Bad Request
Date: Wed, 22 May 2024 06:17:33 GMT
Content-Type: text/html
Content-Length: 154
Connection: close
Server: imunify360-webshield/1.21

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>openresty</center>
</body>
</html>

69.16.232.253

Last Seen: 2024-05-23

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

240448296 | 2024-05-22T19:05:43.330103
21 / tcp

Pure-FTPd

499755629 | 2024-05-19T20:05:51.627483
53 / tcp

1303734390 | 2024-05-17T10:26:28.545230
80 / tcp

-182524545 | 2024-05-23T06:50:27.773314
443 / tcp

Apache httpd

-523874075 | 2024-05-22T06:17:33.737553
2087 / tcp

Products

Pricing

Contact Us

69.16.232.253

Last Seen: 2024-05-23

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

240448296 | 2024-05-22T19:05:43.330103 21 / tcp

Pure-FTPd

499755629 | 2024-05-19T20:05:51.627483 53 / tcp

1303734390 | 2024-05-17T10:26:28.545230 80 / tcp

-182524545 | 2024-05-23T06:50:27.773314 443 / tcp

Apache httpd

-523874075 | 2024-05-22T06:17:33.737553 2087 / tcp

Products

Pricing

Contact Us

240448296 | 2024-05-22T19:05:43.330103
21 / tcp

499755629 | 2024-05-19T20:05:51.627483
53 / tcp

1303734390 | 2024-05-17T10:26:28.545230
80 / tcp

-182524545 | 2024-05-23T06:50:27.773314
443 / tcp

-523874075 | 2024-05-22T06:17:33.737553
2087 / tcp