· 9 years ago · Sep 01, 2016, 09:16 PM
1
2 _____ _ _____ _
3 | __ \ | | _ | | |
4 | | \/ |__ | |/' | ___| |_
5 | | __| '_ \| |/| |/ __| __|
6 | |_\ \ | | \ |_/ /\__ \ |_
7 \____/_ | |_|\___/ |___/\__|
8
9#OpStreets
10#OpFoodKillers
11
12By: GhostSquad Hacker
13
14Target: gatesfoundation.org
15
16Domain Name: GATESFOUNDATION.ORG
17Domain ID: D2361774-LROR
18WHOIS Server:
19Referral URL: http://www.networksolutions.com
20Updated Date: 2015-11-24T23:02:05Z
21Creation Date: 1998-11-06T05:00:00Z
22Registry Expiry Date: 2021-11-05T05:00:00Z
23Sponsoring Registrar: Network Solutions, LLC
24Sponsoring Registrar IANA ID: 2
25Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
26Registrant ID: 16723432-NSIV
27Registrant Name: Perfect Privacy, LLC
28Registrant Organization: Bill & Melinda Gates Foundation
29Registrant Street: 12808 Gran Bay Parkway West
30Registrant Street: care of Network Solutions
31Registrant City: Jacksonville
32Registrant State/Province: FL
33Registrant Postal Code: 32258
34Registrant Country: US
35Registrant Phone: +1.5707088780
36Registrant Phone Ext:
37Registrant Fax:
38Registrant Fax Ext:
39Registrant Email: nz6tx6km72s@networksolutionsprivateregistration.com
40Admin ID: 51695178-NSIV
41Admin Name: Perfect Privacy, LLC
42Admin Organization: Bill & Melinda Gates Foundation
43Admin Street: 12808 Gran Bay Parkway West
44Admin Street: care of Network Solutions
45Admin City: Jacksonville
46Admin State/Province: FL
47Admin Postal Code: 32258
48Admin Country: US
49Admin Phone: +1.5707088780
50Admin Phone Ext:
51Admin Fax:
52Admin Fax Ext:
53Admin Email: rt6ve6jw8t4@networksolutionsprivateregistration.com
54Tech ID: 51695190-NSIV
55Tech Name: Perfect Privacy, LLC
56Tech Organization: Bill & Melinda Gates Foundation
57Tech Street: 12808 Gran Bay Parkway West
58Tech Street: care of Network Solutions
59Tech City: Jacksonville
60Tech State/Province: FL
61Tech Postal Code: 32258
62Tech Country: US
63Tech Phone: +1.5707088780
64Tech Phone Ext:
65Tech Fax:
66Tech Fax Ext:
67Tech Email: zc5de5tr8v2@networksolutionsprivateregistration.com
68Name Server: PDNS1.ULTRADNS.NET
69Name Server: PDNS2.ULTRADNS.NET
70Name Server: PDNS3.ULTRADNS.ORG
71Name Server: PDNS4.ULTRADNS.ORG
72Name Server: PDNS5.ULTRADNS.INFO
73Name Server: PDNS6.ULTRADNS.CO.UK
74
75gatesfoundation.org. 86400 IN SOA pdns1.ultradns.net. itns.gatesfoundation.org. 2014020827 10800 3600 2592000 86400
76gatesfoundation.org. 300 IN TXT "v=spf1 ip4:66.17.185.89 ip4:66.45.179.187 ip4:74.203.48.0/23 ip4:74.203.57.0/24 ip4:174.46.206.0/23 ip4:216.182.83.32/29 ip4:209.90.227.0/24 ip4:86.58.175.4/32 ip4:86.58.175.12/32 ip4:151.151.26.128/28 include:spf.protection.outlook.com include:spf1.gates" "foundation.org include:sendgrid.net include:aspmx.pardot.com include:mail.zendesk.com ~all"
77gatesfoundation.org. 300 IN TXT "MS=ms88012354"
78gatesfoundation.org. 300 IN TXT "docusign=0c46760c-b515-48d3-a4d9-5ef1c7feb87a"
79gatesfoundation.org. 300 IN TXT "docusign=54c0fc9a-f3de-4b6b-a3a8-b701dcbe4326\\010"
80gatesfoundation.org. 300 IN TXT "Fn2jVfqiuP9S+UIG1HpkgiSMUg0M5aol35NwvMlnVjY/MEj3b1zT568jMnZNc2b0+TPwJfyLkjauN/RFuxz37Q=="
81gatesfoundation.org. 86400 IN NS pdns1.ultradns.net.
82gatesfoundation.org. 86400 IN NS pdns2.ultradns.net.
83gatesfoundation.org. 86400 IN NS pdns3.ultradns.org.
84gatesfoundation.org. 86400 IN NS pdns4.ultradns.org.
85gatesfoundation.org. 86400 IN NS pdns5.ultradns.info.
86gatesfoundation.org. 86400 IN NS pdns6.ultradns.co.uk.
87gatesfoundation.org. 300 IN A 206.81.217.38
88gatesfoundation.org. 600 IN MX 0 gatesfoundation-org.mail.protection.outlook.com.
89
90;; ADDITIONAL SECTION:
91pdns2.ultradns.net. 2557 IN A 204.74.109.1
92pdns3.ultradns.org. 2749 IN A 199.7.68.1
93pdns4.ultradns.org. 2741 IN A 199.7.69.1
94pdns5.ultradns.info. 1470 IN A 204.74.114.1
95pdns6.ultradns.co.uk. 282 IN A 204.74.115.1
96pdns1.ultradns.net. 1902 IN A 204.74.108.1
97
98Host's addresses:
99__________________
100
101gatesfoundation.org. 240 IN A 206.81.217.38
102
103
104Name Servers:
105______________
106
107pdns3.ultradns.org. 2718 IN A 199.7.68.1
108pdns4.ultradns.org. 2710 IN A 199.7.69.1
109pdns5.ultradns.info. 1439 IN A 204.74.114.1
110pdns6.ultradns.co.uk. 251 IN A 204.74.115.1
111pdns1.ultradns.net. 1871 IN A 204.74.108.1
112pdns2.ultradns.net. 2526 IN A 204.74.109.1
113
114
115Mail (MX) Servers:
116___________________
117
118gatesfoundation-org.mail.protection.outlook.com. 10 IN A 207.46.163.170
119gatesfoundation-org.mail.protection.outlook.com. 10 IN A 207.46.163.138
120gatesfoundation-org.mail.protection.outlook.com. 10 IN A 207.46.163.247
121
122
123Google Results:
124________________
125
126www.gatesfoundation.org. 300 IN CNAME chinacdn.iov2.impatientoptimists.org.edgesuite.net.
127chinacdn.iov2.impatientoptimists.org.edgesuite.net. 21600 IN CNAME chinacdn.iov2.impatientoptimists.org.edgesuite.net.globalredir.akadns.net.
128chinacdn.iov2.impatientoptimists.org.edgesuite.net.globalredir.akadns.net. 900 IN CNAME a1702.g1.akamai.net.
129a1702.g1.akamai.net. 20 IN A 216.104.99.201
130a1702.g1.akamai.net. 20 IN A 216.104.99.200
131
132
133Brute forcing with dns.txt:
134____________________________
135
136access.gatesfoundation.org. 600 IN CNAME bmgfaccess.azurewebsites.net.
137bmgfaccess.azurewebsites.net. 1800 IN CNAME waws-prod-bay-005.vip.azurewebsites.windows.net.
138waws-prod-bay-005.vip.azurewebsites.windows.net. 300 IN CNAME waws-prod-bay-005.cloudapp.net.
139waws-prod-bay-005.cloudapp.net. 60 IN A 23.99.0.12
140alumni.gatesfoundation.org. 300 IN CNAME gatesfoundation.conenza.net.
141gatesfoundation.conenza.net. 86400 IN CNAME conenza.com.edgekey.net.
142conenza.com.edgekey.net. 21600 IN CNAME e9044.b.akamaiedge.net.
143e9044.b.akamaiedge.net. 20 IN A 23.208.51.165
144autodiscover.gatesfoundation.org. 86400 IN A 66.17.185.59
145beta.gatesfoundation.org. 86400 IN A 65.117.201.112
146connect.gatesfoundation.org. 300 IN A 66.17.185.66
147dialin.gatesfoundation.org. 86400 IN A 66.17.185.85
148email.gatesfoundation.org. 3600 IN A 136.147.129.27
149ftp.gatesfoundation.org. 86400 IN A 66.17.185.46
150ia.gatesfoundation.org. 300 IN A 206.81.217.38
151jobs.gatesfoundation.org. 86400 IN A 66.77.22.185
152list.gatesfoundation.org. 600 IN A 89.16.176.81
153lyncdiscover.gatesfoundation.org. 86400 IN A 66.17.185.85
154mail.gatesfoundation.org. 86400 IN A 66.17.185.79
155meet.gatesfoundation.org. 300 IN A 66.17.185.85
156mobile.gatesfoundation.org. 300 IN A 66.17.185.54
157ns1.gatesfoundation.org. 86400 IN A 65.117.201.99
158NS1.gatesfoundation.org. 86400 IN A 65.117.201.99
159ns2.gatesfoundation.org. 86400 IN A 65.117.201.98
160NS2.gatesfoundation.org. 86400 IN A 65.117.201.98
161ns3.gatesfoundation.org. 86400 IN A 66.45.179.188
162origin-www.gatesfoundation.org. 86400 IN A 65.117.201.112
163portal.gatesfoundation.org. 300 IN A 66.17.185.106
164sip.gatesfoundation.org. 86400 IN A 206.81.217.20
165sip.gatesfoundation.org. 86400 IN A 206.81.217.23
166smtp.gatesfoundation.org. 86400 IN A 66.17.185.89
167SMTP.gatesfoundation.org. 86400 IN A 66.17.185.89
168rms.gatesfoundation.org. 600 IN A 206.81.217.50
169stats.gatesfoundation.org. 600 IN CNAME sendgrid.net.
170sendgrid.net. 16 IN A 167.89.125.30
171stg.gatesfoundation.org. 300 IN A 66.70.4.100
172test.gatesfoundation.org. 86400 IN A 10.10.10.10
173video.gatesfoundation.org. 300 IN CNAME video.gatesfoundation.org.edgekey.net.
174video.gatesfoundation.org.edgekey.net. 300 IN CNAME e5075.g.akamaiedge.net.
175e5075.g.akamaiedge.net. 20 IN A 96.6.185.197
176webmail.gatesfoundation.org. 86400 IN A 66.17.185.59
177Webmail.gatesfoundation.org. 86400 IN A 66.17.185.59
178
179
180Performing recursion:
181______________________
182
183
184 ---- Checking subdomains NS records ----
185list.gatesfoundation.org. 86400 IN NS pdns6.ultradns.co.uk.
186list.gatesfoundation.org. 86400 IN NS pdns1.ultradns.net.
187list.gatesfoundation.org. 86400 IN NS pdns2.ultradns.net.
188list.gatesfoundation.org. 86400 IN NS pdns3.ultradns.org.
189list.gatesfoundation.org. 86400 IN NS pdns4.ultradns.org.
190jobs.gatesfoundation.org. 86400 IN NS pdns1.ultradns.net.
191list.gatesfoundation.org. 86400 IN NS pdns5.ultradns.info.
192jobs.gatesfoundation.org. 86400 IN NS pdns2.ultradns.net.
193jobs.gatesfoundation.org. 86400 IN NS pdns3.ultradns.org.
194jobs.gatesfoundation.org. 86400 IN NS pdns4.ultradns.org.
195jobs.gatesfoundation.org. 86400 IN NS pdns5.ultradns.info.
196jobs.gatesfoundation.org. 86400 IN NS pdns6.ultradns.co.uk.
197email.gatesfoundation.org. 3600 IN NS ns3.exacttarget.com.
198email.gatesfoundation.org. 3600 IN NS ns1.exacttarget.com.
199email.gatesfoundation.org. 3600 IN NS ns2.exacttarget.com.
200email.gatesfoundation.org. 3600 IN NS ns4.exacttarget.com.
201sendgrid.net. 59709 IN NS ns10.dnsmadeeasy.com.
202sendgrid.net. 59709 IN NS ns11.dnsmadeeasy.com.
203sendgrid.net. 59709 IN NS ns14.dnsmadeeasy.com.
204sendgrid.net. 59709 IN NS ns13.dnsmadeeasy.com.
205sendgrid.net. 59709 IN NS ns15.dnsmadeeasy.com.
206sendgrid.net. 59709 IN NS ns12.dnsmadeeasy.com.
207stg.gatesfoundation.org. 86400 IN NS pdns1.ultradns.net.
208stg.gatesfoundation.org. 86400 IN NS pdns2.ultradns.net.
209stg.gatesfoundation.org. 86400 IN NS pdns3.ultradns.org.
210stg.gatesfoundation.org. 86400 IN NS pdns4.ultradns.org.
211stg.gatesfoundation.org. 86400 IN NS pdns5.ultradns.info.
212stg.gatesfoundation.org. 86400 IN NS pdns6.ultradns.co.uk.
213
214 ---- Recursion level 1 ----
215
216 Recursion on email.gatesfoundation.org ...
217localhost.email.gatesfoundation.org. 3600 IN A 127.0.0.1
218pub.email.gatesfoundation.org. 3600 IN CNAME pub.s7.exacttarget.com.
219pub.s7.exacttarget.com. 14400 IN A 136.147.129.35
220
221 Recursion on stg.gatesfoundation.org ...
222
223 Recursion on jobs.gatesfoundation.org ...
224
225 Recursion on list.gatesfoundation.org ...
226mail.list.gatesfoundation.org. 86400 IN A 66.17.185.75
227
228
229Checking subdomains NS records:
230________________________________
231
232
233
234gatesfoundation.org class C netranges:
235_______________________________________
236
237 65.117.201.0/24
238 66.17.185.0/24
239 66.45.179.0/24
240 66.70.4.0/24
241 66.77.22.0/24
242 89.16.176.0/24
243 136.147.129.0/24
244 206.81.217.0/24
245
246
247Performing reverse lookup on 2048 ip addresses:
248________________________________________________
249
25060.201.117.65.in-addr.arpa. 86400 IN PTR connect.gatesfoundation.org.
25161.201.117.65.in-addr.arpa. 86400 IN PTR connect01.gatesfoundation.org.
25262.201.117.65.in-addr.arpa. 86400 IN PTR connect02.gatesfoundation.org.
25363.201.117.65.in-addr.arpa. 86400 IN PTR connect03.gatesfoundation.org.
25494.201.117.65.in-addr.arpa. 86400 IN PTR websvclync.dev.gatesfoundation.org.
25595.201.117.65.in-addr.arpa. 86400 IN PTR siplync.dev.gatesfoundation.org.
25697.201.117.65.in-addr.arpa. 86400 IN PTR avlync.dev.gatesfoundation.org.
25796.201.117.65.in-addr.arpa. 86400 IN PTR dplync.dev.gatesfoundation.org.
25898.201.117.65.in-addr.arpa. 86400 IN PTR ns2.gatesfoundation.org.
259101.201.117.65.in-addr.arpa. 86400 IN PTR devmail.dev.gatesfoundation.org.
260154.201.117.65.in-addr.arpa. 86400 IN PTR mail01.gatesfoundation.org.
261155.201.117.65.in-addr.arpa. 86400 IN PTR mail02.gatesfoundation.org.
262156.201.117.65.in-addr.arpa. 86400 IN PTR mail00.gatesfoundation.org.
263201.201.117.65.in-addr.arpa. 86400 IN PTR natpat.gatesfoundation.org.
264230.201.117.65.in-addr.arpa. 86400 IN PTR mail.gatesfoundation.org.
26575.185.17.66.in-addr.arpa. 86400 IN PTR list.gatesfoundation.org.
26679.185.17.66.in-addr.arpa. 86400 IN PTR mail.gatesfoundation.org.
26789.185.17.66.in-addr.arpa. 86400 IN PTR smtp.gatesfoundation.org.
268170.185.17.66.in-addr.arpa. 86400 IN PTR mail.dev.gatesfoundation.org.
269189.185.17.66.in-addr.arpa. 86400 IN PTR smtp.dev.gatesfoundation.org.
270188.179.45.66.in-addr.arpa. 86400 IN PTR ns3.gatesfoundation.org.
271189.179.45.66.in-addr.arpa. 86400 IN PTR ns4.gatesfoundation.org.
272
27322 results out of 2048 IP addresses.
274
275
276gatesfoundation.org ip blocks:
277_______________________________
278
279 65.117.201.60/30
280 65.117.201.94/31
281 65.117.201.96/31
282 65.117.201.98/32
283 65.117.201.101/32
284 65.117.201.154/31
285 65.117.201.156/32
286 65.117.201.201/32
287 65.117.201.230/32
288 66.17.185.75/32
289 66.17.185.79/32
290 66.17.185.89/32
291 66.17.185.170/32
292 66.17.185.189/32
293 66.45.179.188/31
294
295done.
296
297
298dnsmap 0.30 - DNS Network Mapper by pagvac (gnucitizen.org)
299
300[+] searching (sub)domains for gatesfoundation.org using built-in wordlist
301[+] using maximum random delay of 10 millisecond(s) between requests
302
303access.gatesfoundation.org
304IP address #1: 23.99.0.12
305
306beta.gatesfoundation.org
307IP address #1: 65.117.201.112
308
309chronos.gatesfoundation.org
310IP address #1: 86.58.175.5
311
312connect.gatesfoundation.org
313IP address #1: 66.17.185.66
314
315da.gatesfoundation.org
316IP address #1: 206.81.217.12
317
318email.gatesfoundation.org
319IP address #1: 136.147.129.27
320
321events.gatesfoundation.org
322IP address #1: 192.190.92.37
323
324ftp.gatesfoundation.org
325IP address #1: 66.17.185.46
326
327ia.gatesfoundation.org
328IP address #1: 206.81.217.38
329
330login.gatesfoundation.org
331IP address #1: 206.81.217.38
332
333mail.gatesfoundation.org
334IP address #1: 66.17.185.79
335
336mobile.gatesfoundation.org
337IP address #1: 66.17.185.54
338
339ns1.gatesfoundation.org
340IP address #1: 65.117.201.99
341
342ns2.gatesfoundation.org
343IP address #1: 65.117.201.98
344
345ns3.gatesfoundation.org
346IP address #1: 66.45.179.188
347
348portal.gatesfoundation.org
349IP address #1: 66.17.185.106
350
351remote.gatesfoundation.org
352IP address #1: 65.117.201.98
353
354smtp.gatesfoundation.org
355IP address #1: 66.17.185.89
356
357stats.gatesfoundation.org
358IP address #1: 167.89.125.30
359
360te.gatesfoundation.org
361IP address #1: 206.81.217.38
362
363test.gatesfoundation.org
364IP address #1: 10.10.10.10
365[+] warning: internal IP address disclosed
366
367tftp.gatesfoundation.org
368IP address #1: 65.117.201.140
369
370vc.gatesfoundation.org
371IP address #1: 206.81.217.38
372
373webmail.gatesfoundation.org
374IP address #1: 66.17.185.59
375
376www.gatesfoundation.org
377IP address #1: 216.104.99.200
378IP address #2: 216.104.99.201
379
380[+] 25 (sub)domains and 26 IP address(es) found
381[+] 1 internal IP address(es) disclosed
382[+] completion time: 145 second(s)
383
384
385Tracing to gatesfoundation.org[a] via 10.42.0.1, maximum of 3 retries
38610.42.0.1 (10.42.0.1)
387 |\___ pdns3.ultradns.org [gatesfoundation.org] (199.7.68.1) Got authoritative answer
388 |\___ pdns2.ultradns.net [gatesfoundation.org] (204.74.109.1) Got authoritative answer
389 |\___ pdns2.ultradns.net [gatesfoundation.org] (2610:00a1:1014:0000:0000:0000:0000:0001) send_data/sendto: Network is unreachable
390* send_data/sendto: Network is unreachable
391* send_data/sendto: Network is unreachable
392*
393 |\___ pdns6.ultradns.co.uk [gatesfoundation.org] (204.74.115.1) Got authoritative answer
394 |\___ pdns6.ultradns.co.uk [gatesfoundation.org] (2610:00a1:1017:0000:0000:0000:0000:0001) send_data/sendto: Network is unreachable
395* send_data/sendto: Network is unreachable
396* send_data/sendto: Network is unreachable
397*
398 |\___ pdns1.ultradns.net [gatesfoundation.org] (204.74.108.1) Got authoritative answer
399 |\___ pdns1.ultradns.net [gatesfoundation.org] (2001:0502:f3ff:0000:0000:0000:0000:0001) send_data/sendto: Network is unreachable
400* send_data/sendto: Network is unreachable
401* send_data/sendto: Network is unreachable
402*
403 |\___ pdns4.ultradns.org [gatesfoundation.org] (199.7.69.1) Got authoritative answer
404 \___ pdns5.ultradns.info [gatesfoundation.org] (204.74.114.1) Got authoritative answer
405 \___ pdns5.ultradns.info [gatesfoundation.org] (2610:00a1:1016:0000:0000:0000:0000:0001) send_data/sendto: Network is unreachable
406* send_data/sendto: Network is unreachable
407* send_data/sendto: Network is unreachable
408*
409
410
411http://gatesfoundation.org/ [301]
412http://gatesfoundation.org [301] Country[UNITED STATES][US], HTTPServer[BigIP], IP[206.81.217.38], RedirectLocation[http://www.gatesfoundation.org/]
413URL : http://gatesfoundation.org
414Status : 301
415 Country --------------------------------------------------------------------
416 Description: Shows the country the IPv4 address belongs to. This uses
417 the GeoIP IP2Country database from
418 http://software77.net/geo-ip/. Instructions on updating the
419 database are in the plugin comments.
420 String : UNITED STATES
421 Module : US
422
423 HTTPServer -----------------------------------------------------------------
424 Description: HTTP server header string. This plugin also attempts to
425 identify the operating system from the server header.
426 String : BigIP (from server string)
427
428 IP -------------------------------------------------------------------------
429 Description: IP address of the target, if available.
430 String : 206.81.217.38
431
432 RedirectLocation -----------------------------------------------------------
433 Description: HTTP Server string location. used with http-status 301 and
434 302
435 String : http://www.gatesfoundation.org/ (from location)
436
437http://www.gatesfoundation.org/ [200]
438http://www.gatesfoundation.org/ [200] ASP_NET[4.0.30319], AddThis, Cookies[ASP.NET_SessionId,gfo#lang], Country[CANADA][CA], Email[username@example.com], HTML5, HTTPServer[Microsoft-IIS/7.5], HttpOnly[ASP.NET_SessionId], IP[216.104.99.200], JQuery[1.7.2], Microsoft-IIS[7.5], Modernizr, OpenGraphProtocol, Script[javascript,text/javascript], Title[Bill & Melinda Gates Foundation][Title element contains newline(s)!], X-Frame-Options[SAMEORIGIN], X-Powered-By[ASP.NET]
439URL : http://www.gatesfoundation.org/
440Status : 200
441 ASP_NET --------------------------------------------------------------------
442 Description: ASP.NET is a free web framework that enables great Web
443 applications. Used by millions of developers, it runs some
444 of the biggest sites in the world. - homepage:
445 http://www.asp.net/
446 Version : 4.0.30319
447
448 AddThis --------------------------------------------------------------------
449 Description: AddThis is a free way to boost traffic back to your site by
450 making it easier for visitors to share your content. -
451 Homepage: http://www.addthis.com/
452
453 Cookies --------------------------------------------------------------------
454 Description: Display the names of cookies in the HTTP headers. The
455 values are not returned to save on space.
456 String : gfo#lang
457 String : ASP.NET_SessionId
458
459 Country --------------------------------------------------------------------
460 Description: Shows the country the IPv4 address belongs to. This uses
461 the GeoIP IP2Country database from
462 http://software77.net/geo-ip/. Instructions on updating the
463 database are in the plugin comments.
464 String : CANADA
465 Module : CA
466
467 Email ----------------------------------------------------------------------
468 Description: Extract email addresses. Find valid email address and
469 syntactically invalid email addresses from mailto: link
470 tags. We match syntactically invalid links containing
471 mailto: to catch anti-spam email addresses, eg. bob at
472 gmail.com. This uses the simplified email regular
473 expression from
474 http://www.regular-expressions.info/email.html for valid
475 email add
476 String : username@example.com
477
478 HTML5 ----------------------------------------------------------------------
479 Description: HTML version 5, detected by the doctype declaration
480
481 HTTPServer -----------------------------------------------------------------
482 Description: HTTP server header string. This plugin also attempts to
483 identify the operating system from the server header.
484 String : Microsoft-IIS/7.5 (from server string)
485
486 HttpOnly -------------------------------------------------------------------
487 Description: If the HttpOnly flag is included in the HTTP set-cookie
488 response header and the browser supports it then the cookie
489 cannot be accessed through client side script - More Info:
490 http://en.wikipedia.org/wiki/HTTP_cookie
491 String : ASP.NET_SessionId
492
493 IP -------------------------------------------------------------------------
494 Description: IP address of the target, if available.
495 String : 216.104.99.200
496
497 JQuery ---------------------------------------------------------------------
498 Description: A fast, concise, JavaScript that simplifies how to traverse
499 HTML documents, handle events, perform animations, and add
500 AJAX. - Homepage: http://jquery.com/
501 Version : 1.7.2
502
503 Microsoft-IIS --------------------------------------------------------------
504 Description: Microsoft Internet Information Services (IIS) for Windows
505 Server is a flexible, secure and easy-to-manage Web server
506 for hosting anything on the Web. From media streaming to
507 web application hosting, IIS's scalable and open
508 architecture is ready to handle the most demanding tasks. -
509 homepage: http://www.iis.net/
510 Version : 7.5
511
512 Modernizr ------------------------------------------------------------------
513 Description: Modernizr adds classes to the <html> element which allow
514 you to target specific browser functionality in your
515 stylesheet. You don't actually need to write any Javascript
516 to use it. [JavaScript] - Homepage:
517 http://www.modernizr.com/
518
519 OpenGraphProtocol ----------------------------------------------------------
520 Description: The Open Graph protocol enables you to integrate your Web
521 pages into the social graph. It is currently designed for
522 Web pages representing profiles of real-world things .
523 things like movies, sports teams, celebrities, and
524 restaurants. Including Open Graph tags on your Web page,
525 makes your page equivalent to a Facebook Page.
526
527 Script ---------------------------------------------------------------------
528 Description: This plugin detects instances of script HTML elements and
529 returns the script language/type.
530 String : javascript,text/javascript
531
532 Title ----------------------------------------------------------------------
533 Description: The HTML page title
534 Module : Title element contains newline(s)! (from WARNING)
535 String : Bill & Melinda Gates Foundation (from page title)
536
537 X-Frame-Options ------------------------------------------------------------
538 Description: This plugin retrieves the X-Frame-Options value from the
539 HTTP header. - More Info:
540 http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
541 aspx
542
543 String : SAMEORIGIN
544
545 X-Powered-By ---------------------------------------------------------------
546 Description: X-Powered-By HTTP header
547 String : ASP.NET (from x-powered-by string)
548
549
550[+] Emails found:
551------------------
552Michael.Kimerling@gatesfoundation.org
553Chris.Elias@gatesfoundation.org
554alan.magill@gatesfoundation.org
555kevin.kincaid@gatesfoundation.org
556kincaid@gatesfoundation.org
557gcmedia@gatesfoundation.org
558brandt.redd@gatesfoundation.org
559mariam.claeson@gatesfoundation.org
560Bundy@gatesfoundation.org
561sandra.fried@gatesfoundation.org
562Burgess@gatesfoundation.org
563Steven.Buchsbaum@gatesfoundation.org
564Kern@gatesfoundation.org
565daniel.kress@gatesfoundation.org
566julie.bernstein@gatesfoundation.org
567katie.porter@gatesfoundation.org
568media@gatesfoundation.org
569kimberly.hamilton@gatesfoundation.org
570Ghosh@gatesfoundation.org
571greg.traxler@gatesfoundation.org
572mariana.kim@gatesfoundation.org
573helene.madonick@gatesfoundation.org
574don.shalvey@gatesfoundation.org
575pam.yanchik@gatesfoundation.org
576brian.arbogast@gatesfoundation.org
577kim.bush@gatesfoundation.org
578Kettler@gatesfoundation.org
579info@gatesfoundation.org
580megan.tucci@gatesfoundation.org
581Hubbard@gatesfoundation.org
582Kiess@gatesfoundation.org
583angi.harris@gatesfoundation.org
584Katherine.Kahn@gatesfoundation.org
585jennifer.hansen@gatesfoundation.org
586openaccess@gatesfoundation.org
587Ankur.Anand@gatesfoundation.org
588Yamini.Atmavilas@gatesfoundation.org
589Bergquist@gatesfoundation.org
590vincent.seaman@gatesfoundation.org
591shanda.boyle@gatesfoundation.org
592maren.claassen@gatesfoundation.org
593peter.ehrenkranz@gatesfoundation.org
594lut.vandamme@gatesfoundation.org
595ellen.frede@gatesfoundation.org
596Bhattacharya@gatesfoundation.org
597stephen.becker@gatesfoundation.org
598Basinga@gatesfoundation.org
599papa.sarr@gatesfoundation.org
600kesdest.tesfagiorgis@gatesfoundation.org
601Daniel.Kress@gatesfoundation.org
602suzanne.walsh@gatesfoundation.org
603sindura.ganapathi@gatesfoundation.org
604@gatesfoundation.org
605girindre.beeharry@gatesfoundation.org
606Mariam.claeson@gatesfoundation.org
607Emelda.okiro@gatesfoundation.org
608news@gatesfoundation.org
609karen.reynolds@gatesfoundation.org
610Info@gatesfoundation.org
611gary.atlin@gatesfoundation.org
612thomas.brewer@gatesfoundation.org
613Cornelius@gatesfoundation.org
614ellen.piwoz@gatesfoundation.org
615Wertheimer@gatesfoundation.org
616anna.sohriakoff@gatesfoundation.org
617helene.gayle@gatesfoundation.org
618Marty.Gross@gatesfoundation.org
619donte.stewart@gatesfoundation.org
620Vincent.Seaman@gatesfoundation.org
621Rodrigo.Salvado@gatesfoundation.org
622Sidney.Hacker@gatesfoundation.org
623marguerite.roza@gatesfoundation.org
624.grubb@gatesfoundation.org
625Ramakrishnan@gatesfoundation.org
626ken.duncan@gatesfoundation.org
627phishing@gatesfoundation.org
628Pingali@gatesfoundation.org
629Chris.gingerich@gatesfoundation.org
630tom.scott@gatesfoundation.org
631eileen.Harrity@gatesfoundation.org
632rae.knopf@gatesfoundation.org
633doulaye.kone@gatesfoundation.org
634raja.rao@gatesfoundation.org
635matt.hanson@gatesfoundation.org
636olivia.leland@gatesfoundation.org
637Emily.lockwood@gatesfoundation.org
638emily.lockwood@gatesfoundation.org
6391der1?info@gatesfoundation.org
640joel.segre@gatesfoundation.org
641Edelman@gatesfoundation.org
642chris.williams@gatesfoundation.org
643marie.groark@gatesfoundation.org
644Jennifer.Alcorn@gatesfoundation.org
645sacha.polverini@gatesfoundation.org
646rachel@gatesfoundation.org
647
648[+] Hosts found in search engines:
649------------------------------------
650[-] Resolving hostnames IPs...
651216.104.99.201:www.gatesfoundation.org
652198.101.141.228:careers.gatesfoundation.org
65366.17.185.59:webmail.gatesfoundation.org
654216.104.99.200:Www.gatesfoundation.org
65566.17.185.66:connect.gatesfoundation.org
65666.17.185.59:Webmail.gatesfoundation.org
65766.17.185.106:docs.gatesfoundation.org
658162.242.241.140:k12education.gatesfoundation.org
659204.93.89.119:spaces.gatesfoundation.org
660216.104.99.200:visitorcenter.gatesfoundation.org
66166.17.185.152:webmail.dev.gatesfoundation.org
66261.95.149.68:webmail.india.gatesfoundation.org
66366.17.185.111:gce.gatesfoundation.org
664206.81.217.38:collegeready.gatesfoundation.org
665
666
667DNS Servers for gatesfoundation.org:
668 pdns1.ultradns.net
669 pdns2.ultradns.net
670 pdns3.ultradns.org
671 pdns4.ultradns.org
672 pdns5.ultradns.info
673 pdns6.ultradns.co.uk
674
675Trying zone transfer first...
676 Testing pdns1.ultradns.net
677 Request timed out or transfer not allowed.
678 Testing pdns2.ultradns.net
679 Request timed out or transfer not allowed.
680 Testing pdns3.ultradns.org
681 Request timed out or transfer not allowed.
682 Testing pdns4.ultradns.org
683 Request timed out or transfer not allowed.
684 Testing pdns5.ultradns.info
685 Request timed out or transfer not allowed.
686 Testing pdns6.ultradns.co.uk
687 Request timed out or transfer not allowed.
688
689Unsuccessful in zone transfer (it was worth a shot)
690Okay, trying the good old fashioned way... brute force
691
692Checking for wildcard DNS...
693Nope. Good.
694Now performing 2280 test(s)...
69565.117.201.112 beta.gatesfoundation.org
69666.17.185.59 calendar.gatesfoundation.org
69766.17.185.66 connect.gatesfoundation.org
698206.81.217.12 da.gatesfoundation.org
69966.17.185.106 docs.gatesfoundation.org
70066.17.185.46 ftp.gatesfoundation.org
701206.81.217.38 ia.gatesfoundation.org
70261.95.149.69 india.gatesfoundation.org
70366.77.22.185 jobs.gatesfoundation.org
704206.81.217.38 login.gatesfoundation.org
70566.17.185.75 list.gatesfoundation.org
70666.17.185.79 mail.gatesfoundation.org
70766.17.185.54 mobile.gatesfoundation.org
70865.117.201.94 websvclync.dev.gatesfoundation.org
70965.117.201.95 siplync.dev.gatesfoundation.org
71065.117.201.96 dplync.dev.gatesfoundation.org
71165.117.201.97 avlync.dev.gatesfoundation.org
71265.117.201.98 ns2.gatesfoundation.org
71365.117.201.101 devmail.dev.gatesfoundation.org
71465.117.201.99 ns1.gatesfoundation.org
71566.45.179.188 ns3.gatesfoundation.org
71666.45.179.189 ns4.gatesfoundation.org
71766.17.185.106 portal.gatesfoundation.org
71865.117.201.98 remote.gatesfoundation.org
71966.17.185.89 smtp.gatesfoundation.org
72010.10.10.10 test.gatesfoundation.org
72165.117.201.140 tftp.gatesfoundation.org
722206.81.217.38 vc.gatesfoundation.org
72366.17.185.59 webmail.gatesfoundation.org
724
725Subnets found (may want to probe here using nmap or unicornscan):
726 10.10.10.0-255 : 1 hostnames found.
727 206.81.217.0-255 : 4 hostnames found.
728 61.95.149.0-255 : 1 hostnames found.
729 65.117.201.0-255 : 10 hostnames found.
730 66.17.185.0-255 : 10 hostnames found.
731 66.45.179.0-255 : 2 hostnames found.
732 66.77.22.0-255 : 1 hostnames found.
733
734Nmap scan report for gatesfoundation.org (206.81.217.38)
735Host is up (0.11s latency).
736Not shown: 99 filtered ports
737PORT STATE SERVICE VERSION
73880/tcp open http?
739|_http-favicon: Unknown favicon MD5: 102290DC8B04EA135232C009D005A4F7
740| http-methods:
741|_ Supported Methods: GET HEAD POST OPTIONS
742| http-robots.txt: 3 disallowed entries
743|_/services /templates /layouts
744| http-title: Bill & Melinda Gates Foundation
745|_Requested resource was http://www.gatesfoundation.org/
746Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
747Device type: firewall|load balancer
748Running (JUST GUESSING): F5 Networks TMOS 11.4.X (87%), F5 Networks embedded (86%)
749OS CPE: cpe:/o:f5:tmos:11.4
750Aggressive OS guesses: F5 BIG-IP AFM firewall (87%), F5 BIG-IP Edge Gateway (86%)
751No exact OS matches for host (test conditions non-ideal).
752Uptime guess: 44.972 days (since Mon Jul 18 21:55:01 2016)
753Network Distance: 15 hops
754TCP Sequence Prediction: Difficulty=259 (Good luck!)
755IP ID Sequence Generation: Randomized
756
757TRACEROUTE (using port 80/tcp)
758HOP RTT ADDRESS
759
76013 105.99 ms 67.132.130.34
76114 106.47 ms 66.17.185.10
76215 105.87 ms 206.81.217.38