GeneralInformation

Hostnames	discountasp.net web805.discountasp.net
Domains	discountasp.net
Country	United States
City	Los Angeles
Organization	Host Collective, Inc.
ISP	Host Collective, Inc.
ASN	AS14415
Operating System	Windows

WebTechnologies

JavaScript libraries

Reviews

UI frameworks

Web frameworks

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-23064	Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the <options> element.
CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2014-4078	5.1The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not properly process wildcard allow and deny rules for domains within the "IP Address and Domain Restrictions" list, which makes it easier for remote attackers to bypass an intended rule set via an HTTP request, aka "IIS Security Feature Bypass Vulnerability."

OpenPorts

21 25 80

782148001 | 2024-05-06T19:52:15.908332

21 / tcp

220-Microsoft FTP Service
220 DiscountASP.NET FTP
530 Valid hostname is expected.
214-The following commands are recognized (* ==>'s unimplemented).
    ABOR 
    ACCT 
    ADAT *
    ALLO 
    APPE 
    AUTH 
    CCC 
    CDUP 
    CWD 
    DELE 
    ENC *
    EPRT 
    EPSV 
    FEAT 
    HELP 
    HOST 
    LANG 
    LIST 
    MDTM 
    MIC *
    MKD 
    MODE 
    NLST 
    NOOP 
    OPTS 
    PASS 
    PASV 
    PBSZ 
    PORT 
    PROT 
    PWD 
    QUIT 
    REIN 
    REST 
    RETR 
    RMD 
    RNFR 
    RNTO 
    SITE 
    SIZE 
    SMNT 
    STAT 
    STOR 
    STOU 
    STRU 
    SYST 
    TYPE 
    USER 
    XCUP 
    XCWD 
    XMKD 
    XPWD 
    XRMD 
214 HELP command successful.
211-Extended features supported:
 LANG EN*
 UTF8
 AUTH TLS;TLS-C;SSL;TLS-P;
 PBSZ
 PROT C;P;
 CCC
 HOST
 SIZE
 MDTM
 REST STREAM
211 END

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d2:b3:69:04:aa:fc:9f:8e:02:f6:6f:6e:65:87:f2
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=RapidSSL TLS RSA CA G1
        Validity
            Not Before: May 22 00:00:00 2023 GMT
            Not After : Jun 11 23:59:59 2024 GMT
        Subject: CN=*.discountasp.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d7:2e:70:80:36:7d:63:26:f8:46:44:a5:db:7d:
                    c3:b9:b5:0a:ad:7b:ab:61:4e:24:71:ed:6f:8a:13:
                    a0:ac:bc:45:9b:bf:63:fb:91:af:7d:8d:01:77:e5:
                    76:a1:10:e9:d9:56:fa:cc:0d:b8:1c:91:16:d5:36:
                    a5:c4:aa:f4:f5:a8:11:e6:5d:43:1a:7d:d3:03:98:
                    57:6e:d3:f3:f6:72:33:c0:1e:7a:97:76:e6:55:01:
                    8d:9d:8a:35:09:81:c0:7f:11:50:17:0d:f7:c8:05:
                    1b:82:90:e4:49:d4:04:0d:f9:c4:e7:7f:47:41:87:
                    f6:4c:cc:6f:88:61:14:a8:e2:d6:20:6f:fe:6b:a7:
                    8f:ff:87:de:de:4a:06:21:b1:e5:ed:dd:43:60:3c:
                    40:e1:b8:2f:db:49:ce:78:ac:fd:d0:a8:f9:c2:35:
                    1f:6f:28:d2:14:18:42:4c:a8:9d:8e:8d:39:a7:de:
                    3c:74:d7:7f:5f:da:c0:ee:bd:2c:5a:88:7f:ec:3d:
                    6d:c7:41:f7:3a:88:b0:7d:18:a2:f1:c7:33:22:0d:
                    b7:59:f4:e4:d3:1e:13:86:2a:08:aa:c1:cd:57:9d:
                    04:d0:f0:12:ff:aa:37:7a:24:07:c6:4f:5e:76:82:
                    39:75:cd:67:c8:b0:47:2f:b3:89:a3:c6:df:7c:ea:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                0C:DB:6C:82:49:0F:4A:67:0A:B8:14:EE:7A:C4:48:52:88:EB:56:38
            X509v3 Subject Key Identifier: 
                19:D0:85:71:07:3F:99:E0:B3:7A:2E:30:EA:D7:06:51:1E:94:E6:07
            X509v3 Subject Alternative Name: 
                DNS:*.discountasp.net, DNS:discountasp.net
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                  CPS: http://www.digicert.com/CPS
            Authority Information Access: 
                OCSP - URI:http://status.rapidssl.com
                CA Issuers - URI:http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt
            X509v3 Basic Constraints: 
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : May 22 08:02:33.881 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:5C:DC:F9:50:7C:45:79:32:00:E1:39:3F:
                                0F:28:4C:37:C1:7D:EF:9D:CF:B8:3E:4C:9E:CC:14:33:
                                86:FD:5C:29:02:21:00:D5:13:2F:FD:44:27:35:74:E2:
                                36:05:9C:BC:E5:26:E1:CD:6F:C8:62:43:C4:EB:C0:18:
                                CF:4E:18:30:86:DE:96
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : May 22 08:02:33.883 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:D7:55:1D:92:5F:49:B8:87:1B:E3:59:
                                AA:A9:E4:97:63:2E:33:B8:E6:4C:EA:7D:88:72:4A:42:
                                CB:D0:F5:F5:D4:02:21:00:8D:3C:2F:94:DC:EC:DC:A1:
                                DA:02:5A:13:1A:BA:1A:7F:0A:AA:DC:C5:58:9E:E1:2D:
                                55:93:24:B9:21:11:EB:43
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : May 22 08:02:33.829 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:03:88:A4:6E:F2:91:AA:DF:82:93:5C:0F:
                                E4:45:76:30:A8:48:B8:D0:0C:B2:2A:C8:BE:53:9D:88:
                                D0:C7:FA:A9:02:21:00:94:C1:56:1B:C2:C7:33:E1:21:
                                D0:FC:58:CE:12:46:2C:18:68:0F:BE:AF:50:57:3A:0F:
                                4D:45:B1:01:B6:61:D7
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        2b:cd:dd:a2:d6:9b:45:42:28:ad:67:00:aa:66:bd:83:f6:cb:
        80:5a:c2:03:29:59:27:15:4d:f9:70:60:35:8c:80:cd:7f:59:
        4c:f7:e9:f9:89:eb:19:10:8b:28:b7:e6:c4:6b:1e:34:02:7f:
        f3:ae:c4:2a:13:23:ed:0f:61:87:b2:f3:e5:c0:e2:d4:09:91:
        86:96:31:ef:20:b1:5c:b0:e2:9d:6c:f3:2c:02:be:a6:38:d9:
        80:31:15:16:0c:ed:02:d7:62:60:90:5b:e3:9d:79:df:3a:83:
        99:eb:cc:de:c6:7b:81:8b:4e:1d:5a:43:f0:0a:a6:62:9f:34:
        f8:ff:3b:01:41:95:e4:8e:44:73:b3:df:3c:46:d8:4b:63:95:
        fa:40:42:41:01:26:61:75:d7:16:ee:c1:25:ef:27:5c:5f:b4:
        75:0a:cc:5d:b2:70:61:8a:41:51:77:c4:c0:c5:62:cf:f2:19:
        33:25:32:cd:5f:01:ae:e5:f1:a7:4a:48:59:c5:68:88:09:38:
        29:f8:55:32:05:67:5e:09:12:5e:50:e5:59:78:c6:6b:bd:7a:
        28:4f:8f:1a:aa:88:15:a7:b9:bd:7d:77:df:4f:d6:29:f4:48:
        82:b6:f5:2d:11:61:65:23:c3:ef:ba:cf:92:20:3a:7a:a0:3e:
        5e:7a:6b:a0

116696338 | 2024-05-09T05:19:09.582911

25 / tcp

220 web805.dotnetplayground.com Microsoft ESMTP MAIL Service, Version: 8.5.9600.16384 ready at  Wed, 8 May 2024 22:19:07 -0700 
250-web805.dotnetplayground.com Hello [224.222.24.236]
250-TURN
250-SIZE 2097152
250-ETRN
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-8bitmime
250-BINARYMIME
250-CHUNKING
250-VRFY
250 OK

-428868149 | 2024-05-12T02:44:49.211595

80 / tcp

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.5
Set-Cookie: ASP.NET_SessionId=hu2ryckjpqbc5ycpwk43lyro; path=/; HttpOnly; SameSite=Lax
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 12 May 2024 02:44:48 GMT
Content-Length: 130666

96.31.33.39

Last Seen: 2024-05-12

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

782148001 | 2024-05-06T19:52:15.908332
21 / tcp

116696338 | 2024-05-09T05:19:09.582911
25 / tcp

Microsoft ESMTP8.5.9600.16384

-428868149 | 2024-05-12T02:44:49.211595
80 / tcp

Microsoft IIS httpd8.5

Products

Pricing

Contact Us