· 8 years ago · Sep 10, 2017, 11:02 AM
1##########################################################################################
2Hostname www.sweet-youngs.com ISP Quasi Networks LTD. (AS29073)
3Continent Africa Flag
4SC
5Country Seychelles Country Code SC (SYC)
6Region Unknown Local time 09 Sep 2017 22:32 +04
7City Unknown Latitude -4.583
8IP Address 94.102.48.35 Longitude 55.667
9##########################################################################################
10sweet-youngs.com
11
12whois sweet-youngs.com
13 Domain Name: SWEET-YOUNGS.COM
14 Registry Domain ID: 1465281305_DOMAIN_COM-VRSN
15 Registrar WHOIS Server: whois.nic.ru
16 Registrar URL: http://nic.ru
17 Updated Date: 2017-04-27T10:45:09Z
18 Creation Date: 2008-05-05T09:26:43Z
19 Registry Expiry Date: 2018-05-05T09:26:43Z
20 Registrar: Regional Network Information Center, JSC dba RU-CENTER
21 Registrar IANA ID: 463
22 Registrar Abuse Contact Email: tld-abuse@nic.ru
23 Registrar Abuse Contact Phone: +7 (495) 994-46-01
24 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
25 Name Server: NS1.DXGIRLZ.COM
26 Name Server: NS2.DXGIRLZ.COM
27 DNSSEC: unsigned
28 URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
29
30Domain Name: SWEET-YOUNGS.COM
31Registry Domain ID: 1465281305_DOMAIN_COM-VRSN
32Registrar WHOIS Server: whois.nic.ru
33Registrar URL: http://www.nic.ru
34Creation Date: 2008-05-05T09:26:43Z
35Registrar Registration Expiration Date: 2018-05-04T21:00:00Z
36Registrar: Regional Network Information Center, JSC dba RU-CENTER
37Registrar IANA ID: 463
38Registrar Abuse Contact Email: tld-abuse@nic.ru
39Registrar Abuse Contact Phone: +7.4959944601
40Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
41Registry Registrant ID:
42Registrant Name: Evgeniy Kahanov
43Registrant Organization: Evgeniy Kahanov
44Registrant Street: 12 Saharova str., 7
45Registrant City: Lvov
46Registrant Postal Code: 79019
47Registrant Country: UA
48Registrant Phone: +380.322320539
49Registrant Phone Ext:
50Registrant Email: karalama10@mail.ru
51Registry Admin ID:
52Admin Name: Evgeniy Kahanov
53Admin Organization: Evgeniy Kahanov
54Admin Street: 12 Saharova str., 7
55Admin City: Lvov
56Admin Postal Code: 79019
57Admin Country: UA
58Admin Phone: +380.322320539
59Admin Phone Ext:
60Admin Email: karalama10@mail.ru
61Registry Tech ID:
62Tech Name: Evgeniy Kahanov
63Tech Organization: Evgeniy Kahanov
64Tech Street: 12 Saharova str., 7
65Tech City: Lvov
66Tech Postal Code: 79019
67Tech Country: UA
68Tech Phone: +380.322320539
69Tech Phone Ext:
70Tech Email: karalama10@mail.ru
71Name Server: ns1.dxgirlz.com
72Name Server: ns2.dxgirlz.com
73DNSSEC: unsigned
74URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
75For more information on Whois status codes, please visit: https://icann.org/epp
76>>> Last update of WHOIS database: 2017.09.09T18:35:41Z <<<
77###########################################################################################
78
79;sweet-youngs.com. IN ANY
80
81;; ANSWER SECTION:
82sweet-youngs.com. 3334 IN A 94.102.48.35
83sweet-youngs.com. 3334 IN NS ns1.dxgirlz.com.
84sweet-youngs.com. 3334 IN NS ns2.dxgirlz.com.
85###########################################################################################
86
87tcptraceroute -i eth0 sweet-youngs.com
88
89Running:
90 traceroute -T -O info -i eth0 sweet-youngs.com
91traceroute to sweet-youngs.com (94.102.48.35), 30 hops max, 60 byte packets
92 1 gateway (192.168.1.254) 0.553 ms 0.759 ms 0.930 ms
93 2 10.135.18.1 (10.135.18.1) 7.273 ms 7.366 ms 7.849 ms
94 3 75.154.223.222 (75.154.223.222) 29.858 ms 29.946 ms 30.016 ms
95 4 lag-113.ear3.NewYork1.Level3.net (4.15.212.245) 150.329 ms 150.800 ms 150.878 ms
96 5 ae-240-3616.edge6.Amsterdam1.Level3.net (4.69.162.254) 104.612 ms 104.701 ms 105.129 ms
97 6 * * *
98 7 no-reverse-dns-configured.com (94.102.48.35) <syn,ack> 103.339 ms 103.912 ms 103.767 ms
99
100###########################################################################################
101[*] Performing TLD Brute force Enumeration against sweet-youngs.com
102[*] The operation could take up to: 00:01:07
103[*] A sweet-youngs.biz.af 5.45.75.45
104[*] A sweet-youngs.co.asia 91.195.240.135
105[*] CNAME sweet-youngs.biz.at free.biz.at
106[*] A free.biz.at 216.92.134.29
107[*] A sweet-youngs.org.aw 142.4.20.12
108[*] A sweet-youngs.co.ba 176.9.45.78
109[*] A sweet-youngs.com.ba 195.222.33.180
110[*] A sweet-youngs.com.be 95.173.170.166
111[*] A sweet-youngs.biz.by 71.18.52.2
112[*] A sweet-youngs.biz.bz 199.59.242.150
113[*] A sweet-youngs.com.cc 54.252.107.64
114[*] A sweet-youngs.net.cc 54.252.89.206
115[*] A sweet-youngs.co.cc 175.126.123.219
116[*] A sweet-youngs.org.ch 72.52.4.122
117[*] A sweet-youngs.co.cm 85.25.140.105
118[*] A sweet-youngs.biz.cl 185.53.178.8
119[*] A sweet-youngs.net.cm 85.25.140.105
120[*] A sweet-youngs.com.com 52.33.196.199
121[*] A sweet-youngs.net.com 199.59.242.150
122[*] A sweet-youngs.org.com 23.23.86.44
123[*] A sweet-youngs.co.com 173.192.115.17
124[*] A sweet-youngs.com 94.102.48.35
125[*] A sweet-youngs.biz.cr 72.52.4.122
126[*] CNAME sweet-youngs.biz.cm i.cns.cm
127[*] A i.cns.cm 118.184.56.30
128[*] A sweet-youngs.biz.cx 72.52.4.122
129[*] A sweet-youngs.biz.cz 185.53.179.7
130[*] A sweet-youngs.net.cz 80.250.24.177
131[*] A sweet-youngs.com.cz 62.109.128.30
132[*] A sweet-youngs.com.de 50.56.68.37
133[*] CNAME sweet-youngs.org.de www.org.de
134[*] A www.org.de 78.47.128.8
135[*] CNAME sweet-youngs.co.de co.de
136[*] A co.de 144.76.162.245
137[*] A sweet-youngs.org.eu 78.46.90.98
138[*] A sweet-youngs.biz.fi 185.55.85.123
139[*] A sweet-youngs.net.eu 78.46.90.98
140[*] A sweet-youngs.fm 173.230.131.38
141[*] A sweet-youngs.biz.fm 173.230.131.38
142[*] A sweet-youngs.org.fr 149.202.133.35
143[*] A sweet-youngs.biz.gl 72.52.4.122
144[*] CNAME sweet-youngs.co.gp co.gp
145[*] A co.gp 144.76.162.245
146[*] A sweet-youngs.co.hn 208.100.40.203
147[*] CNAME sweet-youngs.net.hr net.hr
148[*] A net.hr 192.0.78.25
149[*] A net.hr 192.0.78.24
150[*] A sweet-youngs.co.ht 72.52.4.122
151[*] CNAME sweet-youngs.biz.hn parkmydomain.vhostgo.com
152[*] A parkmydomain.vhostgo.com 107.186.245.118
153[*] A sweet-youngs.co.jobs 50.17.193.222
154[*] A sweet-youngs.com.jobs 50.19.241.165
155[*] A sweet-youngs.net.jobs 50.19.241.165
156[*] A sweet-youngs.biz.jobs 50.19.241.165
157[*] A sweet-youngs.org.jobs 50.19.241.165
158[*] A sweet-youngs.biz.ky 199.184.144.27
159[*] CNAME sweet-youngs.biz.li 712936.parkingcrew.net
160[*] A 712936.parkingcrew.net 185.53.179.29
161[*] A sweet-youngs.biz.lu 195.26.5.2
162[*] A sweet-youngs.biz.ly 64.136.20.39
163[*] A sweet-youngs.biz.md 72.52.4.122
164[*] A sweet-youngs.co.mk 87.76.31.211
165[*] A sweet-youngs.co.mobi 54.225.105.179
166[*] A sweet-youngs.biz.my 202.190.174.44
167[*] A sweet-youngs.co.net 188.166.216.219
168[*] A sweet-youngs.net.net 52.50.81.210
169[*] A sweet-youngs.org.net 23.23.86.44
170[*] A sweet-youngs.com.nl 83.98.157.102
171[*] A sweet-youngs.net.nl 83.98.157.102
172[*] A sweet-youngs.co.nl 37.97.184.204
173[*] A sweet-youngs.co.nr 208.100.40.202
174[*] CNAME sweet-youngs.co.nu co.nu
175[*] A co.nu 144.76.162.245
176[*] CNAME sweet-youngs.com.nu com.nu
177[*] A com.nu 144.76.162.245
178[*] A sweet-youngs.net.nu 199.102.76.78
179[*] A sweet-youngs.org.nu 80.92.84.139
180[*] A sweet-youngs.com.org 23.23.86.44
181[*] CNAME sweet-youngs.net.org pewtrusts.org
182[*] A pewtrusts.org 204.74.99.100
183[*] A sweet-youngs.ph 45.79.222.138
184[*] A sweet-youngs.co.ph 45.79.222.138
185[*] A sweet-youngs.com.ph 45.79.222.138
186[*] A sweet-youngs.net.ph 45.79.222.138
187[*] A sweet-youngs.org.ph 45.79.222.138
188[*] A sweet-youngs.org.pm 208.73.210.217
189[*] A sweet-youngs.org.pm 208.73.210.202
190[*] A sweet-youngs.org.pm 208.73.211.165
191[*] A sweet-youngs.org.pm 208.73.211.177
192[*] A sweet-youngs.co.pl 212.91.6.55
193[*] A sweet-youngs.co.ps 66.96.132.56
194[*] A sweet-youngs.co.pt 194.107.127.52
195[*] CNAME sweet-youngs.biz.ps biz.ps
196[*] A biz.ps 144.76.162.245
197[*] A sweet-youngs.pw 141.8.226.58
198[*] A sweet-youngs.co.pw 141.8.226.59
199[*] A sweet-youngs.net.pw 141.8.226.59
200[*] A sweet-youngs.biz.pw 141.8.226.59
201[*] A sweet-youngs.org.pw 141.8.226.59
202[*] A sweet-youngs.org.re 217.70.184.38
203[*] A sweet-youngs.net.ro 69.64.52.127
204[*] CNAME sweet-youngs.co.ro now.co.ro
205[*] A now.co.ro 185.27.255.9
206[*] A sweet-youngs.com.ru 178.210.89.119
207[*] A sweet-youngs.biz.se 54.72.9.51
208[*] CNAME sweet-youngs.net.se 773147.parkingcrew.net
209[*] A 773147.parkingcrew.net 185.53.179.29
210[*] A sweet-youngs.co.sl 91.195.240.135
211[*] A sweet-youngs.com.sr 143.95.106.249
212[*] A sweet-youngs.biz.st 91.121.28.115
213[*] A sweet-youngs.co.su 72.52.4.122
214[*] A sweet-youngs.biz.tc 64.136.20.39
215[*] A sweet-youngs.biz.tf 85.236.153.18
216[*] A sweet-youngs.net.tf 188.40.70.29
217[*] A sweet-youngs.net.tf 188.40.117.12
218[*] A sweet-youngs.net.tf 188.40.70.27
219[*] A sweet-youngs.co.tl 208.100.40.202
220[*] A sweet-youngs.co.to 175.118.124.44
221[*] A sweet-youngs.co.tv 31.186.25.163
222[*] A sweet-youngs.biz.tv 72.52.4.122
223[*] A sweet-youngs.org.tv 72.52.4.122
224[*] CNAME sweet-youngs.biz.uz biz.uz
225[*] A biz.uz 144.76.162.245
226[*] A sweet-youngs.vg 88.198.29.97
227[*] A sweet-youngs.co.vg 88.198.29.97
228[*] A sweet-youngs.com.vg 88.198.29.97
229[*] A sweet-youngs.net.vg 68.178.254.180
230[*] A sweet-youngs.biz.vg 89.31.143.20
231[*] A sweet-youngs.ws 64.70.19.203
232[*] A sweet-youngs.com.ws 202.4.48.211
233[*] A sweet-youngs.net.ws 202.4.48.211
234[*] A sweet-youngs.org.ws 202.4.48.211
235[*] A sweet-youngs.biz.ws 184.168.221.104
236
237###########################################################################################
238
239Checking for HTTP-Loadbalancing [Date]: 16:34:47, 16:34:47, 16:34:47, 16:34:47, 16:34:48, 16:34:48, 16:34:48, 16:34:49, 16:34:49, 16:34:49, 16:34:49, 16:34:50, 16:34:50, 16:34:50, 16:34:50, 16:34:51, 16:34:51, 16:34:51, 16:34:51, 16:34:52, 16:34:52, 16:34:52, 16:34:52, 16:34:53, 16:34:53, 16:34:53, 16:34:53, 16:34:54, 16:34:54, 16:34:54, 16:34:54, 16:34:55, 16:34:55, 16:34:55, 16:34:56, 16:34:56, 16:34:56, 16:34:56, 16:34:57, 16:34:57, 16:34:57, 16:34:57, 16:34:58, 16:34:58, 16:34:58, 16:34:58, 16:34:59, 16:34:59, 16:34:59, 16:34:59, NOT FOUND
240
241Checking for HTTP-Loadbalancing [Diff]: NOT FOUND
242
243sweet-youngs.com does NOT use Load-balancing.
244
245###########################################################################################
246
247###########################################################################################
248
249nmap -PN -n -F -T4 -sV -A -oG temp.txt sweet-youngs.com
250
251Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 14:36 EDT
252Nmap scan report for sweet-youngs.com (94.102.48.35)
253Host is up (0.12s latency).
254Not shown: 84 closed ports
255PORT STATE SERVICE VERSION
25621/tcp filtered ftp
25722/tcp filtered ssh
25825/tcp filtered smtp
25953/tcp open domain ISC BIND 9.8.2rc1
260| dns-nsid:
261|_ bind.version: 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4
26280/tcp open http nginx 1.12.1
263|_http-server-header: nginx/1.12.1
264|_http-title: Did not follow redirect to http://www.sweet-youngs.com/new.html
26581/tcp filtered hosts2-ns
266110/tcp open pop3 Dovecot pop3d
267|_pop3-capabilities: SASL(PLAIN LOGIN DIGEST-MD5 CRAM-MD5) STLS RESP-CODES UIDL CAPA PIPELINING TOP USER
268| ssl-cert: Subject: commonName=imap.example.com
269| Not valid before: 2015-06-12T12:04:14
270|_Not valid after: 2016-06-11T12:04:14
271|_ssl-date: 2017-09-09T16:35:42+00:00; -2h01m10s from scanner time.
272135/tcp filtered msrpc
273139/tcp filtered netbios-ssn
274143/tcp open imap Dovecot imapd
275|_imap-capabilities: IMAP4rev1 STARTTLS ID AUTH=CRAM-MD5A0001 SASL-IR AUTH=LOGIN IDLE Capability OK AUTH=DIGEST-MD5 LOGIN-REFERRALS ENABLE completed AUTH=PLAIN LITERAL+
276| ssl-cert: Subject: commonName=imap.example.com
277| Not valid before: 2015-06-12T12:04:14
278|_Not valid after: 2016-06-11T12:04:14
279|_ssl-date: 2017-09-09T16:35:40+00:00; -2h01m10s from scanner time.
280445/tcp filtered microsoft-ds
281465/tcp filtered smtps
282587/tcp filtered submission
283993/tcp open ssl/imap Dovecot imapd
284|_imap-capabilities: AUTH=PLAIN ID AUTH=CRAM-MD5A0001 SASL-IR AUTH=LOGIN IDLE Capability OK AUTH=DIGEST-MD5 LOGIN-REFERRALS ENABLE completed IMAP4rev1 LITERAL+
285| ssl-cert: Subject: commonName=imap.example.com
286| Not valid before: 2015-06-12T12:04:14
287|_Not valid after: 2016-06-11T12:04:14
288|_ssl-date: 2017-09-09T16:35:38+00:00; -2h01m10s from scanner time.
289995/tcp open ssl/pop3 Dovecot pop3d
290| ssl-cert: Subject: commonName=imap.example.com
291| Not valid before: 2015-06-12T12:04:14
292|_Not valid after: 2016-06-11T12:04:14
293|_ssl-date: 2017-09-09T16:35:37+00:00; -2h01m10s from scanner time.
2943306/tcp open mysql MySQL (unauthorized)
295Device type: general purpose|firewall|storage-misc|WAP|webcam
296Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|2.4.X (99%), WatchGuard Fireware 11.X (94%), Synology DiskStation Manager 5.X (94%), Tandberg embedded (90%)
297OS CPE: cpe:/o:linux:linux_kernel:2.6.39 cpe:/o:linux:linux_kernel:3.10 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:linux:linux_kernel:4.2 cpe:/o:linux:linux_kernel:2.4 cpe:/h:tandberg:vcs
298Aggressive OS guesses: Linux 2.6.39 (99%), Linux 2.6.32 (94%), Linux 2.6.32 or 3.10 (94%), Linux 3.4 (94%), WatchGuard Fireware 11.8 (94%), Synology DiskStation Manager 5.1 (94%), Linux 3.10 (94%), Linux 3.1 - 3.2 (94%), Linux 2.6.32 - 2.6.39 (92%), Linux 2.6.32 - 3.0 (91%)
299No exact OS matches for host (test conditions non-ideal).
300Network Distance: 11 hops
301Service Info: OS: Red Hat Enterprise Linux 6; CPE: cpe:/o:redhat:enterprise_linux:6
302
303Host script results:
304|_clock-skew: mean: -2h01m10s, deviation: 0s, median: -2h01m10s
305
306TRACEROUTE (using port 1723/tcp)
307HOP RTT ADDRESS
3081 109.40 ms 10.13.0.1
3092 ...
3103 109.94 ms 178.33.103.231
3114 111.29 ms 10.95.33.10
3125 119.53 ms 91.121.131.19
3136 119.32 ms 94.23.122.217
3147 ...
3158 124.31 ms 176.10.83.128
3169 120.32 ms 176.10.83.5
31710 ...
31811 120.34 ms 94.102.48.35
319
320OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
321Nmap done: 1 IP address (1 host up) scanned in 35.62 seconds
322
323###########################################################################################
324
325amap -i temp.txt
326amap v5.4 (www.thc.org/thc-amap) started at 2017-09-09 14:36:58 - APPLICATION MAPPING mode
327
328Protocol on 94.102.48.35:80/tcp matches http
329Protocol on 94.102.48.35:80/tcp matches http-apache-2
330Protocol on 94.102.48.35:110/tcp matches pop3
331Protocol on 94.102.48.35:143/tcp matches imap
332Protocol on 94.102.48.35:3306/tcp matches mysql
333Protocol on 94.102.48.35:3306/tcp matches mysql-secured
334Protocol on 94.102.48.35:995/tcp matches ssl
335Protocol on 94.102.48.35:993/tcp matches ssl
336Protocol on 94.102.48.35:53/tcp matches dns
337
338Unidentified ports: none.
339
340amap v5.4 finished at 2017-09-09 14:37:16
341###########################################################################################
342
343inetnum: 94.102.48.0 - 94.102.48.150
344netname: SC-QUASI58
345descr: QUASI
346country: SC
347org: ORG-QNL3-RIPE
348admin-c: QNL1-RIPE
349tech-c: QNL1-RIPE
350status: ASSIGNED PA
351mnt-by: QUASINETWORKS-MNT
352mnt-lower: QUASINETWORKS-MNT
353mnt-routes: QUASINETWORKS-MNT
354created: 2011-05-07T22:25:22Z
355last-modified: 2016-01-23T22:29:27Z
356source: RIPE
357
358organisation: ORG-QNL3-RIPE
359org-name: Quasi Networks LTD.
360org-type: OTHER
361address: Suite 1, Second Floor
362address: Sound & Vision House, Francis Rachel Street
363address: Victoria, Mahe, SEYCHELLES
364remarks: *****************************************************************************
365remarks: IMPORTANT INFORMATION
366remarks: *****************************************************************************
367remarks: We are a high bandwidth network provider offering bandwidth solutions.
368remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
369remarks: Please only use abuse@quasinetworks.com for abuse reports.
370remarks: For all other requests, please see the details on our website.
371remarks: *****************************************************************************
372abuse-mailbox: abuse@quasinetworks.com
373abuse-c: AR34302-RIPE
374mnt-ref: QUASINETWORKS-MNT
375mnt-by: QUASINETWORKS-MNT
376created: 2015-11-08T22:25:26Z
377last-modified: 2015-11-27T09:37:50Z
378source: RIPE # Filtered
379
380role: Quasi Networks LTD
381address: Suite 1, Second Floor
382address: Sound & Vision House, Francis Rachel Street
383address: Victoria, Mahe, SEYCHELLES
384remarks: *****************************************************************************
385remarks: IMPORTANT INFORMATION
386remarks: *****************************************************************************
387remarks: We are a high bandwidth network provider offering bandwidth solutions.
388remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
389remarks: Please only use abuse@quasinetworks.com for abuse reports.
390remarks: For all other requests, please see the details on our website.
391remarks: *****************************************************************************
392abuse-mailbox: abuse@quasinetworks.com
393nic-hdl: QNL1-RIPE
394mnt-by: QUASINETWORKS-MNT
395created: 2015-11-07T22:43:04Z
396last-modified: 2015-11-07T23:04:49Z
397source: RIPE # Filtered
398
399% Information related to '94.102.48.0/20AS29073'
400
401route: 94.102.48.0/20
402descr: Quasi Networks LTD (IBC)
403origin: AS29073
404mnt-by: QUASINETWORKS-MNT
405created: 2008-09-02T11:55:23Z
406last-modified: 2016-01-23T22:40:05Z
407source: RIPE
408
409
410########################################################################################
411*] Performing General Enumeration of Domain:
412[*] Checking for Zone Transfer for sweet-youngs.com name servers
413[*] Resolving SOA Record
414[-] Error while resolving SOA record.
415[*] Resolving NS Records
416[*] NS Servers found:
417[*] NS ns1.dxgirlz.com 93.174.93.111
418[*] NS ns2.dxgirlz.com 192.133.136.162
419[*] Removing any duplicate NS server IP Addresses...
420[*]
421[*] Trying NS server 93.174.93.111
422[+] 93.174.93.111 Has port 53 TCP Open
423[+] Zone Transfer was successful!!
424[*] NS ns1.dxgirlz.com 93.174.93.111
425[*] NS ns2.dxgirlz.com 192.133.136.162
426[*] TXT v=spf1 ip4:93.174.93.111 a mx ~all
427[*] A @.sweet-youngs.com 94.102.48.35
428[*] A www.sweet-youngs.com 94.102.48.35
429[*]
430[*] Trying NS server 192.133.136.162
431[+] 192.133.136.162 Has port 53 TCP Open
432[+] Zone Transfer was successful!!
433[*] NS ns1.dxgirlz.com 93.174.93.111
434[*] NS ns2.dxgirlz.com 192.133.136.162
435[*] TXT v=spf1 ip4:93.174.93.111 a mx ~all
436[*] A @.sweet-youngs.com 94.102.48.35
437[*] A www.sweet-youngs.com 94.102.48.35
438[*] Checking for Zone Transfer for sweet-youngs.com name servers
439[*] Resolving SOA Record
440[-] Error while resolving SOA record.
441[*] Resolving NS Records
442[*] NS Servers found:
443[*] NS ns2.dxgirlz.com 192.133.136.162
444[*] NS ns1.dxgirlz.com 93.174.93.111
445[*] Removing any duplicate NS server IP Addresses...
446[*]
447[*] Trying NS server 93.174.93.111
448[+] 93.174.93.111 Has port 53 TCP Open
449[+] Zone Transfer was successful!!
450[*] NS ns1.dxgirlz.com 93.174.93.111
451[*] NS ns2.dxgirlz.com 192.133.136.162
452[*] TXT v=spf1 ip4:93.174.93.111 a mx ~all
453[*] A @.sweet-youngs.com 94.102.48.35
454[*] A www.sweet-youngs.com 94.102.48.35
455[*]
456[*] Trying NS server 192.133.136.162
457[+] 192.133.136.162 Has port 53 TCP Open
458[+] Zone Transfer was successful!!
459[*] NS ns1.dxgirlz.com 93.174.93.111
460[*] NS ns2.dxgirlz.com 192.133.136.162
461[*] TXT v=spf1 ip4:93.174.93.111 a mx ~all
462[*] A @.sweet-youngs.com 94.102.48.35
463[*] A www.sweet-youngs.com 94.102.48.35
464[-] DNSSEC is not configured for sweet-youngs.com
465[-] Error while resolving SOA record.
466[*] NS ns1.dxgirlz.com 93.174.93.111
467[*] Bind Version for 93.174.93.111 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4
468[*] NS ns2.dxgirlz.com 192.133.136.162
469[*] Bind Version for 192.133.136.162 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4
470[-] Could not Resolve MX Records for sweet-youngs.com
471[*] A sweet-youngs.com 94.102.48.35
472[*] TXT sweet-youngs.com v=spf1 ip4:93.174.93.111 a mx ~all
473[*] Expanding IP ranges found in DNS and TXT records for Reverse Look-up
474[*] Performing Reverse Look-up of SPF Ranges
475[*] Performing Reverse Lookup from 93.174.93.111 to 93.174.93.111
476[+] 0 Records Found
477[*] Enumerating SRV Records
478[-] No SRV Records Found for sweet-youngs.com
479[+] 0 Records Found
480[*] Performing Google Search Enumeration
481[+] 0 Records Found
482[i] Scanning Site: http://sweet-youngs.com
483
484
485
486B A S I C I N F O
487====================
488
489
490[+] Site Title:
491[+] IP address: 94.102.48.35
492[+] Web Server: nginx/1.12.1
493[+] CMS: Could Not Detect
494[+] Cloudflare: Not Detected
495[+] Robots File: Could NOT Find robots.txt!
496
497
498
499
500W H O I S L O O K U P
501========================
502
503 Domain Name: SWEET-YOUNGS.COM
504 Registry Domain ID: 1465281305_DOMAIN_COM-VRSN
505 Registrar WHOIS Server: whois.nic.ru
506 Registrar URL: http://nic.ru
507 Updated Date: 2017-04-27T10:45:09Z
508 Creation Date: 2008-05-05T09:26:43Z
509 Registry Expiry Date: 2018-05-05T09:26:43Z
510 Registrar: Regional Network Information Center, JSC dba RU-CENTER
511 Registrar IANA ID: 463
512 Registrar Abuse Contact Email: tld-abuse@nic.ru
513 Registrar Abuse Contact Phone: +7 (495) 994-46-01
514 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
515 Name Server: NS1.DXGIRLZ.COM
516 Name Server: NS2.DXGIRLZ.COM
517 DNSSEC: unsigned
518
519
520
521
522G E O I P L O O K U P
523=========================
524
525[i] IP Address: 94.102.48.35
526[i] Country: SC
527[i] State: N/A
528[i] City: N/A
529[i] Latitude: -4.583300
530[i] Longitude: 55.666698
531
532
533
534
535H T T P H E A D E R S
536=======================
537
538
539[i] HTTP/1.1 301 Moved Permanently
540[i] Server: nginx/1.12.1
541[i] Date: Sat, 09 Sep 2017 16:34:50 GMT
542[i] Content-Type: text/html; charset=iso-8859-1
543[i] Content-Length: 326
544[i] Connection: close
545[i] Location: http://www.sweet-youngs.com/new.html
546[i] HTTP/1.1 404 Not Found
547[i] Server: nginx/1.12.1
548[i] Date: Sat, 09 Sep 2017 16:34:51 GMT
549[i] Content-Type: text/html; charset=iso-8859-1
550[i] Content-Length: 292
551[i] Connection: close
552
553
554
555
556D N S L O O K U P
557===================
558
559sweet-youngs.com. 3596 IN A 94.102.48.35
560sweet-youngs.com. 3600 IN NS ns2.dxgirlz.com.
561sweet-youngs.com. 3600 IN NS ns1.dxgirlz.com.
562sweet-youngs.com. 3600 IN SOA b06s06.com. root.dxgirlz.com. 2015061601 10800 3600 604800 86400
563sweet-youngs.com. 3600 IN TXT "v=spf1 ip4:93.174.93.111 a mx ~all"
564
565
566
567
568S U B N E T C A L C U L A T I O N
569====================================
570
571Address = 94.102.48.35
572Network = 94.102.48.35 / 32
573Netmask = 255.255.255.255
574Broadcast = not needed on Point-to-Point links
575Wildcard Mask = 0.0.0.0
576Hosts Bits = 0
577Max. Hosts = 1 (2^0 - 0)
578Host Range = { 94.102.48.35 - 94.102.48.35 }
579
580
581
582N M A P P O R T S C A N
583============================
584
585
586Starting Nmap 7.01 ( https://nmap.org ) at 2017-09-09 18:36 UTC
587Nmap scan report for sweet-youngs.com (94.102.48.35)
588Host is up (0.082s latency).
589rDNS record for 94.102.48.35: no-reverse-dns-configured.com
590PORT STATE SERVICE VERSION
59121/tcp filtered ftp
59222/tcp filtered ssh
59323/tcp closed telnet
59425/tcp open smtp Postfix smtpd
59580/tcp open http nginx 1.12.1
596110/tcp open pop3 Dovecot pop3d
597143/tcp open imap Dovecot imapd
598443/tcp closed https
599445/tcp closed microsoft-ds
6003389/tcp closed ms-wbt-server
601Service Info: Host: b06s06.com
602
603Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
604Nmap done: 1 IP address (1 host up) scanned in 8.58 seconds
605
606
607
608S U B - D O M A I N F I N D E R
609==================================
610
611
612[i] Total Subdomains Found : 1
613
614[+] Subdomain: sweet-youngs.com
615[-] IP: 94.102.48.35
616
617
618
619
620
621Crawling Types & Descriptions:
622sweet-youngs.com
623
624
625 Domain Name: SWEET-YOUNGS.COM
626 Registry Domain ID: 1465281305_DOMAIN_COM-VRSN
627 Registrar WHOIS Server: whois.nic.ru
628 Registrar URL: http://nic.ru
629 Updated Date: 2017-04-27T10:45:09Z
630 Creation Date: 2008-05-05T09:26:43Z
631 Registry Expiry Date: 2018-05-05T09:26:43Z
632 Registrar: Regional Network Information Center, JSC dba RU-CENTER
633 Registrar IANA ID: 463
634 Registrar Abuse Contact Email: tld-abuse@nic.ru
635 Registrar Abuse Contact Phone: +7 (495) 994-46-01
636 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
637 Name Server: NS1.DXGIRLZ.COM
638 Name Server: NS2.DXGIRLZ.COM
639 DNSSEC: unsigned
640
641Domain Name: SWEET-YOUNGS.COM
642Registry Domain ID: 1465281305_DOMAIN_COM-VRSN
643Registrar WHOIS Server: whois.nic.ru
644Registrar URL: http://www.nic.ru
645Creation Date: 2008-05-05T09:26:43Z
646Registrar Registration Expiration Date: 2018-05-04T21:00:00Z
647Registrar: Regional Network Information Center, JSC dba RU-CENTER
648Registrar IANA ID: 463
649Registrar Abuse Contact Email: tld-abuse@nic.ru
650Registrar Abuse Contact Phone: +7.4959944601
651Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
652Registry Registrant ID:
653Registrant Name: Evgeniy Kahanov
654Registrant Organization: Evgeniy Kahanov
655Registrant Street: 12 Saharova str., 7
656Registrant City: Lvov
657Registrant Postal Code: 79019
658Registrant Country: UA
659Registrant Phone: +380.322320539
660Registrant Phone Ext:
661Registrant Email: karalama10@mail.ru
662Registry Admin ID:
663Admin Name: Evgeniy Kahanov
664Admin Organization: Evgeniy Kahanov
665Admin Street: 12 Saharova str., 7
666Admin City: Lvov
667Admin Postal Code: 79019
668Admin Country: UA
669Admin Phone: +380.322320539
670Admin Phone Ext:
671Admin Email: karalama10@mail.ru
672Registry Tech ID:
673Tech Name: Evgeniy Kahanov
674Tech Organization: Evgeniy Kahanov
675Tech Street: 12 Saharova str., 7
676Tech City: Lvov
677Tech Postal Code: 79019
678Tech Country: UA
679Tech Phone: +380.322320539
680Tech Phone Ext:
681Tech Email: karalama10@mail.ru
682Name Server: ns1.dxgirlz.com
683Name Server: ns2.dxgirlz.com
684
685;sweet-youngs.com. IN ANY
686
687;; ANSWER SECTION:
688sweet-youngs.com. 3307 IN A 94.102.48.35
689sweet-youngs.com. 3307 IN NS ns1.dxgirlz.com.
690sweet-youngs.com. 3307 IN NS ns2.dxgirlz.com.
691
692;; Query time: 8 msec
693;; SERVER: 192.168.1.254#53(192.168.1.254)
694;; WHEN: Sat Sep 09 14:36:08 EDT 2017
695;; MSG SIZE rcvd: 105
696
697
698Running:
699 traceroute -T -O info -i eth0 sweet-youngs.com
700traceroute to sweet-youngs.com (94.102.48.35), 30 hops max, 60 byte packets
701 1 gateway (192.168.1.254) 0.448 ms 0.647 ms 0.818 ms
702 2 10.135.18.1 (10.135.18.1) 8.385 ms 9.406 ms 13.568 ms
703 3 75.154.223.222 (75.154.223.222) 29.581 ms 30.063 ms 30.136 ms
704 4 lag-113.ear3.NewYork1.Level3.net (4.15.212.245) 30.546 ms 30.782 ms 31.338 ms
705 5 ae-237-3613.edge6.Amsterdam1.Level3.net (4.69.162.242) 104.861 ms ae-240-3616.edge6.Amsterdam1.Level3.net (4.69.162.254) 105.038 ms ae-237-3613.edge6.Amsterdam1.Level3.net (4.69.162.242) 104.933 ms
706 6 * * *
707 7 no-reverse-dns-configured.com (94.102.48.35) <syn,ack> 103.682 ms 104.517 ms 104.637 ms
708
709----- sweet-youngs.com -----
710
711
712Host's addresses:
713__________________
714
715sweet-youngs.com. 3298 IN A 94.102.48.35
716
717
718Name Servers:
719______________
720
721ns1.dxgirlz.com. 957 IN A 93.174.93.111
722ns2.dxgirlz.com. 957 IN A 192.133.136.162
723
724
725Mail (MX) Servers:
726___________________
727
728
729
730Trying Zone Transfers and getting Bind Versions:
731_________________________________________________
732
733
734Trying Zone Transfer for sweet-youngs.com on ns1.dxgirlz.com ...
735sweet-youngs.com. 3600 IN SOA (
736sweet-youngs.com. 3600 IN NS ns1.dxgirlz.com.
737sweet-youngs.com. 3600 IN NS ns2.dxgirlz.com.
738sweet-youngs.com. 3600 IN A 94.102.48.35
739sweet-youngs.com. 3600 IN TXT "v=spf1
740www.sweet-youngs.com. 3600 IN A 94.102.48.35
741
742Trying Zone Transfer for sweet-youngs.com on ns2.dxgirlz.com ...
743sweet-youngs.com. 3600 IN SOA (
744sweet-youngs.com. 3600 IN NS ns1.dxgirlz.com.
745sweet-youngs.com. 3600 IN NS ns2.dxgirlz.com.
746sweet-youngs.com. 3600 IN A 94.102.48.35
747sweet-youngs.com. 3600 IN TXT "v=spf1
748www.sweet-youngs.com. 3600 IN A 94.102.48.35
749
750
751
752sweet-youngs.com class C netranges:
753____________________________________
754
755 94.102.48.0/24
756
757
758Performing reverse lookup on 256 ip addresses:
759_______________________________________________
760
761
7620 results out of 256 IP addresses.
763
764
765sweet-youngs.com ip blocks:
766____________________________
767
768www.sweet-youngs.com
769IP address #1: 94.102.48.35
770
771[+] 1 (sub)domains and 1 IP address(es) found
772[+] completion time: 142 second(s)
773
774
775
776WhatWeb report for http://sweet-youngs.com
777Status : 301 Moved Permanently
778Title : 301 Moved Permanently
779IP : 94.102.48.35
780Country : NETHERLANDS, NL
781
782Summary : HTTPServer[nginx/1.12.1], RedirectLocation[http://www.sweet-youngs.com/new.html], nginx[1.12.1]
783
784Detected Plugins:
785[ HTTPServer ]
786 HTTP server header string. This plugin also attempts to
787 identify the operating system from the server header.
788
789 String : nginx/1.12.1 (from server string)
790
791[ RedirectLocation ]
792 HTTP Server string location. used with http-status 301 and
793 302
794
795 String : http://www.sweet-youngs.com/new.html (from location)
796
797[ nginx ]
798 Nginx (Engine-X) is a free, open-source, high-performance
799 HTTP server and reverse proxy, as well as an IMAP/POP3
800 proxy server.
801
802 Version : 1.12.1
803 Website : http://nginx.net/
804
805HTTP Headers:
806 HTTP/1.1 301 Moved Permanently
807 Server: nginx/1.12.1
808 Date: Sat, 09 Sep 2017 16:38:16 GMT
809 Content-Type: text/html; charset=iso-8859-1
810 Content-Length: 326
811 Connection: close
812 Location: http://www.sweet-youngs.com/new.html
813
814WhatWeb report for http://www.sweet-youngs.com/new.html
815Status : 404 Not Found
816Title : 404 Not Found
817IP : 94.102.48.35
818Country : NETHERLANDS, NL
819
820Summary : HTTPServer[nginx/1.12.1], nginx[1.12.1]
821
822Detected Plugins:
823[ HTTPServer ]
824 HTTP server header string. This plugin also attempts to
825 identify the operating system from the server header.
826
827 String : nginx/1.12.1 (from server string)
828
829[ nginx ]
830 Nginx (Engine-X) is a free, open-source, high-performance
831 HTTP server and reverse proxy, as well as an IMAP/POP3
832 proxy server.
833
834 Version : 1.12.1
835 Website : http://nginx.net/
836
837HTTP Headers:
838 HTTP/1.1 404 Not Found
839 Server: nginx/1.12.1
840 Date: Sat, 09 Sep 2017 16:38:16 GMT
841 Content-Type: text/html; charset=iso-8859-1
842 Content-Length: 292
843 Connection: close
844
845
846[+] Hosts found in search engines:
847------------------------------------
848[-] Resolving hostnames IPs...
84994.102.48.35:www.sweet-youngs.com
850
851
852
853 ^ ^
854 _ __ _ ____ _ __ _ _ ____
855 ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
856 | V V // o // _/ | V V // 0 // 0 // _/
857 |_n_,'/_n_//_/ |_n_,' \_,' \_,'/_/
858 <
859 ...'
860
861 WAFW00F - Web Application Firewall Detection Tool
862
863 By Sandro Gauci && Wendel G. Henrique
864
865Checking http://sweet-youngs.com
866Generic Detection results:
867No WAF detected by the generic detection
868Number of requests: 13
869
870
871DNS Servers for sweet-youngs.com:
872 ns1.dxgirlz.com
873 ns2.dxgirlz.com
874
875Trying zone transfer first...
876 Testing ns1.dxgirlz.com
877
878Whoah, it worked - misconfigured DNS server found:
879sweet-youngs.com. 3600 IN SOA ( b06s06.com. root.dxgirlz.com.
880 2015061601 ;serial
881 10800 ;refresh
882 3600 ;retry
883 604800 ;expire
884 86400 ;minimum
885 )
886sweet-youngs.com. 3600 IN NS ns1.dxgirlz.com.
887sweet-youngs.com. 3600 IN NS ns2.dxgirlz.com.
888sweet-youngs.com. 3600 IN A 94.102.48.35
889sweet-youngs.com. 3600 IN TXT "v=spf1 ip4:93.174.93.111 a mx ~all"
890www.sweet-youngs.com. 3600 IN A 94.102.48.35
891
892There isn't much point continuing, you have everything.
893Have a nice day.
894Exiting...
895
896
897
898lbd - load balancing detector 0.2 - Checks if a given domain uses load-balancing.
899 Written by Stefan Behte (http://ge.mine.nu)
900 Proof-of-concept! Might give false positives.
901
902Checking for DNS-Loadbalancing: NOT FOUND
903Checking for HTTP-Loadbalancing [Server]:
904 nginx/1.12.1
905 NOT FOUND
906
907Checking for HTTP-Loadbalancing [Date]: 16:38:57, 16:38:57, 16:38:57, 16:38:58, 16:38:58, 16:38:58, 16:38:58, 16:38:59, 16:38:59, 16:38:59, 16:38:59, 16:39:00, 16:39:00, 16:39:00, 16:39:00, 16:39:01, 16:39:01, 16:39:01, 16:39:01, 16:39:02, 16:39:02, 16:39:02, 16:39:02, 16:39:03, 16:39:03, 16:39:03, 16:39:03, 16:39:04, 16:39:04, 16:39:04, 16:39:05, 16:39:05, 16:39:05, 16:39:05, 16:39:06, 16:39:06, 16:39:06, 16:39:06, 16:39:07, 16:39:07, 16:39:07, 16:39:07, 16:39:08, 16:39:08, 16:39:08, 16:39:08, 16:39:09, 16:39:09, 16:39:09, 16:39:09, NOT FOUND
908
909Checking for HTTP-Loadbalancing [Diff]: NOT FOUND
910
911sweet-youngs.com does NOT use Load-balancing.
912
913
914
915Starting smtp-user-enum v1.2 ( http://pentestmonkey.net/tools/smtp-user-enum )
916
917 ----------------------------------------------------------
918| Scan Information |
919 ----------------------------------------------------------
920
921Mode ..................... VRFY
922Worker Processes ......... 5
923Usernames file ........... users.txt
924Target count ............. 1
925Username count ........... 494
926Target TCP port .......... 25
927Query timeout ............ 5 secs
928Target domain ............
929
930######## Scan started at Sat Sep 9 14:40:32 2017 #########
931######## Scan completed at Sat Sep 9 14:48:47 2017 #########
9320 results.
933
934494 queries in 495 seconds (1.0 queries / sec)
935
936
937
938Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 14:48 EDT
939NSE: Loaded 146 scripts for scanning.
940NSE: Script Pre-scanning.
941Initiating NSE at 14:48
942Completed NSE at 14:48, 0.00s elapsed
943Initiating NSE at 14:48
944Completed NSE at 14:48, 0.00s elapsed
945Failed to resolve "sweet-youngs.com.txt".
946Initiating Parallel DNS resolution of 1 host. at 14:48
947Completed Parallel DNS resolution of 1 host. at 14:48, 0.47s elapsed
948Initiating SYN Stealth Scan at 14:48
949Scanning sweet-youngs.com (94.102.48.35) [100 ports]
950Discovered open port 143/tcp on 94.102.48.35
951Discovered open port 3306/tcp on 94.102.48.35
952Discovered open port 110/tcp on 94.102.48.35
953Discovered open port 993/tcp on 94.102.48.35
954Discovered open port 995/tcp on 94.102.48.35
955Discovered open port 80/tcp on 94.102.48.35
956Discovered open port 53/tcp on 94.102.48.35
957Increasing send delay for 94.102.48.35 from 0 to 5 due to 61 out of 152 dropped probes since last increase.
958Completed SYN Stealth Scan at 14:48, 3.07s elapsed (100 total ports)
959Initiating Service scan at 14:48
960Scanning 7 services on sweet-youngs.com (94.102.48.35)
961Completed Service scan at 14:48, 6.95s elapsed (7 services on 1 host)
962Initiating OS detection (try #1) against sweet-youngs.com (94.102.48.35)
963Retrying OS detection (try #2) against sweet-youngs.com (94.102.48.35)
964adjust_timeouts2: packet supposedly had rtt of -105152 microseconds. Ignoring time.
965adjust_timeouts2: packet supposedly had rtt of -105152 microseconds. Ignoring time.
966Initiating Traceroute at 14:49
967Completed Traceroute at 14:49, 3.02s elapsed
968Initiating Parallel DNS resolution of 7 hosts. at 14:49
969Completed Parallel DNS resolution of 7 hosts. at 14:49, 5.61s elapsed
970NSE: Script scanning 94.102.48.35.
971Initiating NSE at 14:49
972Completed NSE at 14:49, 12.76s elapsed
973Initiating NSE at 14:49
974Completed NSE at 14:49, 0.00s elapsed
975Nmap scan report for sweet-youngs.com (94.102.48.35)
976Host is up (0.13s latency).
977rDNS record for 94.102.48.35: no-reverse-dns-configured.com
978Not shown: 84 closed ports
979PORT STATE SERVICE VERSION
98021/tcp filtered ftp
98122/tcp filtered ssh
98225/tcp filtered smtp
98353/tcp open domain ISC BIND 9.8.2rc1
984| dns-nsid:
985|_ bind.version: 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4
98680/tcp open http nginx 1.12.1
987|_http-favicon: Unknown favicon MD5: D41D8CD98F00B204E9800998ECF8427E
988| http-methods:
989|_ Supported Methods: GET HEAD POST OPTIONS
990|_http-server-header: nginx/1.12.1
991|_http-title: Did not follow redirect to http://www.sweet-youngs.com/new.html
99281/tcp filtered hosts2-ns
993110/tcp open pop3 Dovecot pop3d
994|_pop3-capabilities: RESP-CODES SASL(PLAIN LOGIN DIGEST-MD5 CRAM-MD5) USER PIPELINING CAPA UIDL STLS TOP
995| ssl-cert: Subject: commonName=imap.example.com
996| Issuer: commonName=imap.example.com
997| Public Key type: rsa
998| Public Key bits: 1024
999| Signature Algorithm: sha1WithRSAEncryption
1000| Not valid before: 2015-06-12T12:04:14
1001| Not valid after: 2016-06-11T12:04:14
1002| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
1003|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
1004|_ssl-date: 2017-09-09T16:48:07+00:00; -2h01m10s from scanner time.
1005135/tcp filtered msrpc
1006139/tcp filtered netbios-ssn
1007143/tcp open imap Dovecot imapd
1008|_imap-capabilities: IMAP4rev1 completed LOGIN-REFERRALS AUTH=PLAIN LITERAL+ Capability ENABLE AUTH=LOGIN ID AUTH=DIGEST-MD5 AUTH=CRAM-MD5A0001 OK SASL-IR STARTTLS IDLE
1009| ssl-cert: Subject: commonName=imap.example.com
1010| Issuer: commonName=imap.example.com
1011| Public Key type: rsa
1012| Public Key bits: 1024
1013| Signature Algorithm: sha1WithRSAEncryption
1014| Not valid before: 2015-06-12T12:04:14
1015| Not valid after: 2016-06-11T12:04:14
1016| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
1017|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
1018|_ssl-date: 2017-09-09T16:48:07+00:00; -2h01m10s from scanner time.
1019445/tcp filtered microsoft-ds
1020465/tcp filtered smtps
1021587/tcp filtered submission
1022993/tcp open ssl/imap Dovecot imapd
1023| ssl-cert: Subject: commonName=imap.example.com
1024| Issuer: commonName=imap.example.com
1025| Public Key type: rsa
1026| Public Key bits: 1024
1027| Signature Algorithm: sha1WithRSAEncryption
1028| Not valid before: 2015-06-12T12:04:14
1029| Not valid after: 2016-06-11T12:04:14
1030| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
1031|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
1032|_ssl-date: 2017-09-09T16:48:06+00:00; -2h01m10s from scanner time.
1033995/tcp open ssl/pop3 Dovecot pop3d
1034| ssl-cert: Subject: commonName=imap.example.com
1035| Issuer: commonName=imap.example.com
1036| Public Key type: rsa
1037| Public Key bits: 1024
1038| Signature Algorithm: sha1WithRSAEncryption
1039| Not valid before: 2015-06-12T12:04:14
1040| Not valid after: 2016-06-11T12:04:14
1041| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
1042|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
1043|_ssl-date: 2017-09-09T16:48:05+00:00; -2h01m10s from scanner time.
10443306/tcp open mysql MySQL (unauthorized)
1045
1046TRACEROUTE (using port 1723/tcp)
1047HOP RTT ADDRESS
10481 108.87 ms 10.13.0.1
10492 ...
10503 109.96 ms po101.gra-g2-a75.fr.eu (178.33.103.231)
10514 ...
10525 119.21 ms be100-1113.fra-5-a9.de.eu (91.121.131.19)
10536 119.23 ms be100-2.fra-1-a9.de.eu (94.23.122.217)
10547 ...
10558 136.71 ms vlan3555.bb1.ams2.nl.m247.com (176.10.83.128)
10569 120.50 ms 176.10.83.5
105710 ...
105811 120.53 ms no-reverse-dns-configured.com (94.102.48.35)
1059
1060
1061
1062
1063
1064 _/ _/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/
1065 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
1066 _/ _/ _/_/_/_/ _/_/_/ _/ _/_/_/ _/_/_/_/ _/ _/_/_/ _/_/_/_
1067 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
1068 _/_/_/_/ _/ _/ _/ _/_/_/_/ _/_/_/_/ _/ _/_/_/_/ _/ _/ [v1.06]
1069
1070 _/ User-Agent Tester ↵
1071 _/ AKA: Purple Pimp ↵
1072 _/ ChrisJohnRiley ↵
1073 _/ blog.c22.cc ↵
1074
1075 [>] Performing initial request and confirming stability
1076 [>] Using User-Agent string Mozilla/5.0
1077
1078 [*] HTTPError: HTTP Error 404: Not Found
1079
1080#########################################################################################
1081Hostname 100nonude.info ISP Quasi Networks LTD. (AS29073)
1082Continent Africa Flag
1083SC
1084Country Seychelles Country Code SC (SYC)
1085Region Unknown Local time 09 Sep 2017 22:57 +04
1086City Unknown Latitude -4.583
1087IP Address 93.174.93.40 Longitude 55.667
1088#############################################################################################
1089
1090whois 100nonude.info
1091Domain Name: 100NONUDE.INFO
1092Registry Domain ID: D503300000038501535-LRMS
1093Registrar WHOIS Server:
1094Registrar URL: http://www.nic.ru
1095Updated Date: 2017-06-12T20:32:55Z
1096Creation Date: 2017-04-13T08:10:42Z
1097Registry Expiry Date: 2018-04-13T08:10:42Z
1098Registrar Registration Expiration Date:
1099Registrar: Regional Network Information Center, JSC dba RU-CENTER
1100Registrar IANA ID: 463
1101Registrar Abuse Contact Email:
1102Registrar Abuse Contact Phone:
1103Reseller:
1104Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
1105Registry Registrant ID: C201182491-LRMS
1106Registrant Name: Barinov Andrey
1107Registrant Organization: Barinov Andrey
1108Registrant Street: Gvardeyskaya st. 11-51
1109Registrant City: Melitopol
1110Registrant State/Province:
1111Registrant Postal Code: 72307
1112Registrant Country: UA
1113Registrant Phone: +380.684506451
1114Registrant Phone Ext:
1115Registrant Fax:
1116Registrant Fax Ext:
1117Registrant Email: barinandr@mail.ru
1118Registry Admin ID: C201182491-LRMS
1119Admin Name: Barinov Andrey
1120Admin Organization: Barinov Andrey
1121Admin Street: Gvardeyskaya st. 11-51
1122Admin City: Melitopol
1123Admin State/Province:
1124Admin Postal Code: 72307
1125Admin Country: UA
1126Admin Phone: +380.684506451
1127Admin Phone Ext:
1128Admin Fax:
1129Admin Fax Ext:
1130Admin Email: barinandr@mail.ru
1131Registry Tech ID: C201182491-LRMS
1132Tech Name: Barinov Andrey
1133Tech Organization: Barinov Andrey
1134Tech Street: Gvardeyskaya st. 11-51
1135Tech City: Melitopol
1136Tech State/Province:
1137Tech Postal Code: 72307
1138Tech Country: UA
1139Tech Phone: +380.684506451
1140Tech Phone Ext:
1141Tech Fax:
1142Tech Fax Ext:
1143Tech Email: barinandr@mail.ru
1144Registry Billing ID: C201182491-LRMS
1145Billing Name: Barinov Andrey
1146Billing Organization: Barinov Andrey
1147Billing Street: Gvardeyskaya st. 11-51
1148Billing City: Melitopol
1149Billing State/Province:
1150Billing Postal Code: 72307
1151Billing Country: UA
1152Billing Phone: +380.684506451
1153Billing Phone Ext:
1154Billing Fax:
1155Billing Fax Ext:
1156Billing Email: barinandr@mail.ru
1157Name Server: NS1.DNS-FORCE.NET
1158Name Server: NS2.DNS-FORCE.NET
1159
1160###########################################################################################
1161
1162;100nonude.info. IN ANY
1163
1164;; ANSWER SECTION:
1165100nonude.info. 27357 IN A 93.174.93.40
1166100nonude.info. 27357 IN NS ns1.dns-force.net.
1167100nonude.info. 27357 IN NS ns2.dns-force.net.
1168
1169;; Query time: 8 msec
1170;; SERVER: 192.168.1.254#53(192.168.1.254)
1171;; WHEN: Sat Sep 09 14:59:53 EDT 2017
1172;; MSG SIZE rcvd: 108
1173
1174###########################################################################################
1175#
1176
1177tcptraceroute -i eth0 100nonude.info
1178
1179Running:
1180 traceroute -T -O info -i eth0 100nonude.info
1181traceroute to 100nonude.info (93.174.93.40), 30 hops max, 60 byte packets
1182 1 gateway (192.168.1.254) 0.410 ms 0.587 ms 0.758 ms
1183 2 10.135.18.1 (10.135.18.1) 15.530 ms 17.020 ms 17.164 ms
1184 3 75.154.223.222 (75.154.223.222) 29.737 ms 29.906 ms 30.272 ms
1185 4 lag-113.ear3.NewYork1.Level3.net (4.15.212.245) 30.506 ms 30.834 ms 30.997 ms
1186 5 ae-237-3613.edge6.Amsterdam1.Level3.net (4.69.162.242) 104.834 ms ae-238-3614.edge6.Amsterdam1.Level3.net (4.69.162.246) 104.952 ms ae-237-3613.edge6.Amsterdam1.Level3.net (4.69.162.242) 105.063 ms
1187 6 * * *
1188 7 93.174.93.40 (93.174.93.40) <syn,ack> 103.895 ms 103.743 ms 103.827 ms
1189
1190###########################################################################################
1191
1192###########################################################################################
1193
1194
1195Checking for HTTP-Loadbalancing [Date]: 17:36:58, 17:36:58, 17:36:59, 17:36:59, 17:36:59, 17:37:00, 17:37:00, 17:37:00, 17:37:00, 17:37:01, 17:37:01, 17:37:01, 17:37:02, 17:37:02, 17:37:02, 17:37:02, 17:37:03, 17:37:03, 17:37:03, 17:37:04, 17:37:04, 17:37:04, 17:37:04, 17:37:05, 17:37:05, 17:37:05, 17:37:06, 17:37:06, 17:37:06, 17:37:06, 17:37:07, 17:37:07, 17:37:07, 17:37:08, 17:37:10, 17:37:14, 17:37:15, 17:37:17, 17:37:21, 17:37:22, 17:37:23, 17:37:25, 17:37:30, 17:37:30, 17:37:30, 17:37:30, 17:37:31, 17:37:31, 17:37:31, 17:37:32, NOT FOUND
1196
1197###########################################################################################
1198
1199nmap -PN -n -F -T4 -sV -A -oG temp.txt 100nonude.info
1200
1201Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 15:01 EDT
1202Nmap scan report for 100nonude.info (93.174.93.40)
1203Host is up (0.16s latency).
1204Not shown: 92 closed ports
1205PORT STATE SERVICE VERSION
120622/tcp open ssh OpenSSH 5.3 (protocol 2.0)
1207| ssh-hostkey:
1208|_ 2048 c6:97:3d:68:af:14:9e:c0:1a:9c:a4:f6:75:32:ae:6f (RSA)
120925/tcp filtered smtp
121080/tcp open http nginx 1.0.15
1211|_http-generator: CuteHTML
1212|_http-server-header: nginx/1.0.15
1213|_http-title: ? 100 NoNude Models ?
1214135/tcp filtered msrpc
1215139/tcp filtered netbios-ssn
1216445/tcp filtered microsoft-ds
1217465/tcp filtered smtps
1218587/tcp filtered submission
1219Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.35 (92%), Linux 2.6.39 (92%), Linux 3.10 (92%), Linux 3.10 - 3.12 (92%), Linux 3.4 (92%), Linux 3.5 (92%), Linux 4.2 (92%), Linux 4.4 (92%), Synology DiskStation Manager 5.1 (92%)
1220No exact OS matches for host (test conditions non-ideal).
1221Network Distance: 11 hops
1222
1223TRACEROUTE (using port 8888/tcp)
1224HOP RTT ADDRESS
12251 110.05 ms 10.13.0.1
12262 ...
12273 110.07 ms 178.33.103.231
12284 ...
12295 118.83 ms 91.121.131.19
12306 119.06 ms 94.23.122.217
12317 ...
12328 124.08 ms 176.10.83.128
12339 120.05 ms 176.10.83.5
123410 ...
123511 120.41 ms 93.174.93.40
1236
1237OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
1238Nmap done: 1 IP address (1 host up) scanned in 63.34 seconds
1239
1240###########################################################################################
1241
1242amap -i temp.txt
1243amap v5.4 (www.thc.org/thc-amap) started at 2017-09-09 15:02:04 - APPLICATION MAPPING mode
1244
1245Protocol on 93.174.93.40:80/tcp matches http
1246Protocol on 93.174.93.40:22/tcp matches ssh
1247Protocol on 93.174.93.40:22/tcp matches ssh-openssh
1248Protocol on 93.174.93.40:80/tcp matches http-apache-2
1249
1250Unidentified ports: none.
1251
1252amap v5.4 finished at 2017-09-09 15:02:10
1253#############################################################################################
1254inetnum: 93.174.93.0 - 93.174.93.255
1255netname: SC-QUASI55
1256descr: QUASI
1257country: SC
1258org: ORG-QNL3-RIPE
1259admin-c: QNL1-RIPE
1260tech-c: QNL1-RIPE
1261status: ASSIGNED PA
1262mnt-by: QUASINETWORKS-MNT
1263mnt-lower: QUASINETWORKS-MNT
1264mnt-routes: QUASINETWORKS-MNT
1265created: 2008-06-29T21:36:16Z
1266last-modified: 2016-01-23T22:23:14Z
1267source: RIPE
1268
1269organisation: ORG-QNL3-RIPE
1270org-name: Quasi Networks LTD.
1271org-type: OTHER
1272address: Suite 1, Second Floor
1273address: Sound & Vision House, Francis Rachel Street
1274address: Victoria, Mahe, SEYCHELLES
1275remarks: *****************************************************************************
1276remarks: IMPORTANT INFORMATION
1277remarks: *****************************************************************************
1278remarks: We are a high bandwidth network provider offering bandwidth solutions.
1279remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
1280remarks: Please only use abuse@quasinetworks.com for abuse reports.
1281remarks: For all other requests, please see the details on our website.
1282remarks: *****************************************************************************
1283abuse-mailbox: abuse@quasinetworks.com
1284abuse-c: AR34302-RIPE
1285mnt-ref: QUASINETWORKS-MNT
1286mnt-by: QUASINETWORKS-MNT
1287created: 2015-11-08T22:25:26Z
1288last-modified: 2015-11-27T09:37:50Z
1289source: RIPE # Filtered
1290
1291role: Quasi Networks LTD
1292address: Suite 1, Second Floor
1293address: Sound & Vision House, Francis Rachel Street
1294address: Victoria, Mahe, SEYCHELLES
1295remarks: *****************************************************************************
1296remarks: IMPORTANT INFORMATION
1297remarks: *****************************************************************************
1298remarks: We are a high bandwidth network provider offering bandwidth solutions.
1299remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
1300remarks: Please only use abuse@quasinetworks.com for abuse reports.
1301remarks: For all other requests, please see the details on our website.
1302remarks: *****************************************************************************
1303abuse-mailbox: abuse@quasinetworks.com
1304nic-hdl: QNL1-RIPE
1305mnt-by: QUASINETWORKS-MNT
1306created: 2015-11-07T22:43:04Z
1307last-modified: 2015-11-07T23:04:49Z
1308source: RIPE # Filtered
1309
1310% Information related to '93.174.88.0/21as29073'
1311
1312route: 93.174.88.0/21
1313descr: Quasi Networks LTD (IBC)
1314origin: as29073
1315mnt-by: QUASINETWORKS-MNT
1316created: 2008-06-20T15:33:47Z
1317last-modified: 2016-01-23T22:26:12Z
1318source: RIPE
1319
1320% This query was served by the RIPE Database Query Service version 1.89.2 (ANGUS)
1321
1322
1323###########################################################################################
1324[*] Performing TLD Brute force Enumeration against 100nonude.info
1325[*] The operation could take up to: 00:01:07
1326[*] A 100nonude.biz.af 5.45.75.45
1327[*] A 100nonude.co.asia 91.195.240.135
1328[*] CNAME 100nonude.biz.at free.biz.at
1329[*] A free.biz.at 216.92.134.29
1330[*] A 100nonude.org.aw 142.4.20.12
1331[*] A 100nonude.co.ba 176.9.45.78
1332[*] A 100nonude.com.ba 195.222.33.180
1333[*] A 100nonude.com.be 95.173.170.166
1334[*] A 100nonude.biz 185.66.9.92
1335[*] A 100nonude.biz.by 71.18.52.2
1336[*] A 100nonude.biz.bz 199.59.242.150
1337[*] A 100nonude.net.cc 54.252.89.206
1338[*] A 100nonude.com.cc 54.252.107.64
1339[*] A 100nonude.co.cc 10.10.10.10
1340[*] A 100nonude.org.ch 72.52.4.122
1341[*] A 100nonude.biz.cl 185.53.178.8
1342[*] A 100nonude.com 69.172.201.153
1343[*] A 100nonude.com.com 52.33.196.199
1344[*] A 100nonude.net.com 199.59.242.150
1345[*] A 100nonude.co.com 173.192.115.17
1346[*] A 100nonude.org.com 23.23.86.44
1347[*] A 100nonude.co.cm 85.25.140.105
1348[*] A 100nonude.net.cm 85.25.140.105
1349[*] CNAME 100nonude.biz.cm i.cns.cm
1350[*] A i.cns.cm 118.184.56.30
1351[*] A 100nonude.biz.cr 72.52.4.122
1352[*] A 100nonude.biz.cx 72.52.4.122
1353[*] A 100nonude.biz.cz 185.53.179.7
1354[*] A 100nonude.net.cz 80.250.24.177
1355[*] A 100nonude.com.cz 62.109.128.30
1356[*] A 100nonude.com.de 50.56.68.37
1357[*] CNAME 100nonude.org.de www.org.de
1358[*] A www.org.de 78.47.128.8
1359[*] CNAME 100nonude.co.de co.de
1360[*] A co.de 144.76.162.245
1361[*] A 100nonude.net.eu 78.46.90.98
1362[*] A 100nonude.org.eu 78.46.90.98
1363[*] A 100nonude.biz.fi 185.55.85.123
1364[*] A 100nonude.fm 173.230.131.38
1365[*] A 100nonude.biz.fm 173.230.131.38
1366[*] A 100nonude.org.fr 149.202.133.35
1367[*] A 100nonude.biz.gl 72.52.4.122
1368[*] CNAME 100nonude.co.gp co.gp
1369[*] A co.gp 144.76.162.245
1370[*] A 100nonude.co.hn 208.100.40.203
1371[*] CNAME 100nonude.net.hr net.hr
1372[*] A net.hr 192.0.78.24
1373[*] A net.hr 192.0.78.25
1374[*] CNAME 100nonude.biz.hn parkmydomain.vhostgo.com
1375[*] A parkmydomain.vhostgo.com 107.186.245.118
1376[*] A 100nonude.co.ht 72.52.4.122
1377[*] A 100nonude.info 93.174.93.40
1378[*] A 100nonude.co.jobs 50.17.193.222
1379[*] A 100nonude.com.jobs 50.19.241.165
1380[*] A 100nonude.net.jobs 50.19.241.165
1381[*] A 100nonude.biz.jobs 50.19.241.165
1382[*] A 100nonude.org.jobs 50.19.241.165
1383[*] A 100nonude.biz.ky 199.184.144.27
1384[*] CNAME 100nonude.biz.li 712936.parkingcrew.net
1385[*] A 712936.parkingcrew.net 185.53.179.29
1386[*] A 100nonude.biz.lu 195.26.5.2
1387[*] A 100nonude.biz.ly 64.136.20.39
1388[*] A 100nonude.biz.md 72.52.4.122
1389[*] A 100nonude.co.mk 87.76.31.211
1390[*] A 100nonude.co.mobi 54.225.105.179
1391[*] A 100nonude.biz.my 202.190.174.44
1392[*] A 100nonude.co.net 188.166.216.219
1393[*] A 100nonude.net.net 52.50.81.210
1394[*] A 100nonude.org.net 23.23.86.44
1395[*] A 100nonude.net.nl 83.98.157.102
1396[*] A 100nonude.com.nl 83.98.157.102
1397[*] A 100nonude.co.nl 37.97.184.204
1398[*] A 100nonude.co.nr 208.100.40.202
1399[*] A 100nonude.org.nu 80.92.84.139
1400[*] A 100nonude.net.nu 199.102.76.78
1401[*] CNAME 100nonude.co.nu co.nu
1402[*] A co.nu 144.76.162.245
1403[*] CNAME 100nonude.com.nu com.nu
1404[*] A com.nu 144.76.162.245
1405[*] A 100nonude.org 69.64.146.192
1406[*] A 100nonude.com.org 23.23.86.44
1407[*] CNAME 100nonude.net.org pewtrusts.org
1408[*] A pewtrusts.org 204.74.99.100
1409[*] A 100nonude.ph 45.79.222.138
1410[*] A 100nonude.co.ph 45.79.222.138
1411[*] A 100nonude.com.ph 45.79.222.138
1412[*] A 100nonude.net.ph 45.79.222.138
1413[*] A 100nonude.org.ph 45.79.222.138
1414[*] A 100nonude.co.pl 212.91.6.55
1415[*] A 100nonude.org.pm 208.73.211.165
1416[*] A 100nonude.org.pm 208.73.210.217
1417[*] A 100nonude.org.pm 208.73.211.177
1418[*] A 100nonude.org.pm 208.73.210.202
1419[*] A 100nonude.co.ps 66.96.132.56
1420[*] A 100nonude.pw 141.8.226.58
1421[*] A 100nonude.co.pw 141.8.226.59
1422[*] A 100nonude.co.pt 194.107.127.52
1423[*] CNAME 100nonude.biz.ps biz.ps
1424[*] A biz.ps 144.76.162.245
1425[*] A 100nonude.net.pw 141.8.226.59
1426[*] A 100nonude.biz.pw 141.8.226.59
1427[*] A 100nonude.org.pw 141.8.226.59
1428[*] CNAME 100nonude.co.ro now.co.ro
1429[*] A now.co.ro 185.27.255.9
1430[*] A 100nonude.org.re 217.70.184.38
1431[*] A 100nonude.net.ro 69.64.52.127
1432[*] A 100nonude.com.ru 178.210.89.119
1433[*] A 100nonude.biz.se 185.53.179.6
1434[*] CNAME 100nonude.net.se 773147.parkingcrew.net
1435[*] A 773147.parkingcrew.net 185.53.179.29
1436[*] A 100nonude.co.sl 91.195.240.135
1437[*] A 100nonude.com.sr 143.95.106.249
1438[*] A 100nonude.biz.st 91.121.28.115
1439[*] A 100nonude.co.su 72.52.4.122
1440[*] A 100nonude.biz.tc 64.136.20.39
1441[*] A 100nonude.biz.tf 85.236.153.18
1442[*] A 100nonude.net.tf 188.40.70.27
1443[*] A 100nonude.net.tf 188.40.70.29
1444[*] A 100nonude.net.tf 188.40.117.12
1445[*] A 100nonude.co.tl 208.100.40.202
1446[*] A 100nonude.co.to 175.118.124.44
1447[*] A 100nonude.co.tv 31.186.25.163
1448[*] A 100nonude.biz.tv 72.52.4.122
1449[*] A 100nonude.org.tv 72.52.4.122
1450[*] CNAME 100nonude.biz.uz biz.uz
1451[*] A biz.uz 144.76.162.245
1452[*] A 100nonude.vg 88.198.29.97
1453[*] A 100nonude.co.vg 88.198.29.97
1454[*] A 100nonude.com.vg 88.198.29.97
1455[*] A 100nonude.net.vg 68.178.254.180
1456[*] A 100nonude.biz.vg 89.31.143.20
1457[*] A 100nonude.ws 64.70.19.203
1458[*] A 100nonude.com.ws 202.4.48.211
1459[*] A 100nonude.net.ws 202.4.48.211
1460[*] A 100nonude.org.ws 202.4.48.211
1461[*] A 100nonude.biz.ws 184.168.221.104
1462[i] Scanning Site: http://100nonude.info
1463
1464
1465
1466B A S I C I N F O
1467====================
1468
1469
1470[+] Site Title: ? 100 NoNude Models ?
1471[+] IP address: 93.174.93.40
1472[+] Web Server: nginx/1.0.15
1473[+] CMS: Could Not Detect
1474[+] Cloudflare: Not Detected
1475[+] Robots File: Found
1476
1477-------------[ contents ]----------------
1478User-agent: *
1479Disallow:
1480Host: nonstop-nn.info
1481Sitemap: http://nonstop-nn.info/sitemap.xml
1482-----------[end of contents]-------------
1483
1484
1485
1486W H O I S L O O K U P
1487========================
1488
1489 Domain Name: 100NONUDE.INFO
1490Registry Domain ID: D503300000038501535-LRMS
1491Registrar WHOIS Server:
1492Registrar URL: http://www.nic.ru
1493Updated Date: 2017-06-12T20:32:55Z
1494Creation Date: 2017-04-13T08:10:42Z
1495Registry Expiry Date: 2018-04-13T08:10:42Z
1496Registrar Registration Expiration Date:
1497Registrar: Regional Network Information Center, JSC dba RU-CENTER
1498Registrar IANA ID: 463
1499Registrar Abuse Contact Email:
1500Registrar Abuse Contact Phone:
1501Reseller:
1502Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
1503Registry Registrant ID: C201182491-LRMS
1504Registrant Name: Barinov Andrey
1505Registrant Organization: Barinov Andrey
1506Registrant Street: Gvardeyskaya st. 11-51
1507Registrant City: Melitopol
1508Registrant State/Province:
1509Registrant Postal Code: 72307
1510Registrant Country: UA
1511Registrant Phone: +380.684506451
1512Registrant Phone Ext:
1513Registrant Fax:
1514Registrant Fax Ext:
1515Registrant Email: barinandr@mail.ru
1516Registry Admin ID: C201182491-LRMS
1517Admin Name: Barinov Andrey
1518Admin Organization: Barinov Andrey
1519Admin Street: Gvardeyskaya st. 11-51
1520Admin City: Melitopol
1521Admin State/Province:
1522Admin Postal Code: 72307
1523Admin Country: UA
1524Admin Phone: +380.684506451
1525Admin Phone Ext:
1526Admin Fax:
1527Admin Fax Ext:
1528Admin Email: barinandr@mail.ru
1529Registry Tech ID: C201182491-LRMS
1530Tech Name: Barinov Andrey
1531Tech Organization: Barinov Andrey
1532Tech Street: Gvardeyskaya st. 11-51
1533Tech City: Melitopol
1534Tech State/Province:
1535Tech Postal Code: 72307
1536Tech Country: UA
1537Tech Phone: +380.684506451
1538Tech Phone Ext:
1539Tech Fax:
1540Tech Fax Ext:
1541Tech Email: barinandr@mail.ru
1542Registry Billing ID: C201182491-LRMS
1543Billing Name: Barinov Andrey
1544Billing Organization: Barinov Andrey
1545Billing Street: Gvardeyskaya st. 11-51
1546Billing City: Melitopol
1547Billing State/Province:
1548Billing Postal Code: 72307
1549Billing Country: UA
1550Billing Phone: +380.684506451
1551Billing Phone Ext:
1552Billing Fax:
1553Billing Fax Ext:
1554Billing Email: barinandr@mail.ru
1555Name Server: NS1.DNS-FORCE.NET
1556Name Server: NS2.DNS-FORCE.NET
1557G E O I P L O O K U P
1558=========================
1559
1560[i] IP Address: 93.174.93.40
1561[i] Country: SC
1562[i] State: N/A
1563[i] City: N/A
1564[i] Latitude: -4.583300
1565[i] Longitude: 55.666698
1566
1567
1568
1569
1570H T T P H E A D E R S
1571=======================
1572
1573
1574[i] HTTP/1.1 200 OK
1575[i] Server: nginx/1.0.15
1576[i] Date: Sat, 09 Sep 2017 19:54:55 GMT
1577[i] Content-Type: text/html; charset=UTF-8
1578[i] Connection: close
1579[i] Accept-Ranges: bytes
1580[i] Vary: Accept-Encoding
1581
1582
1583
1584
1585D N S L O O K U P
1586===================
1587
1588100nonude.info. 78155 IN A 93.174.93.40
1589100nonude.info. 78159 IN NS ns2.dns-force.net.
1590100nonude.info. 78159 IN NS ns1.dns-force.net.
1591100nonude.info. 78159 IN SOA ns1.dns-force.net. hostmaster.dns-force.net. 2012050402 28800 7200 864000 86400
1592
1593
1594
1595
1596S U B N E T C A L C U L A T I O N
1597====================================
1598
1599Address = 93.174.93.40
1600Network = 93.174.93.40 / 32
1601Netmask = 255.255.255.255
1602Broadcast = not needed on Point-to-Point links
1603Wildcard Mask = 0.0.0.0
1604Hosts Bits = 0
1605Max. Hosts = 1 (2^0 - 0)
1606Host Range = { 93.174.93.40 - 93.174.93.40 }
1607
1608
1609
1610N M A P P O R T S C A N
1611============================
1612
1613
1614Starting Nmap 7.01 ( https://nmap.org ) at 2017-09-09 21:18 UTC
1615Nmap scan report for 100nonude.info (93.174.93.40)
1616Host is up (0.083s latency).
1617PORT STATE SERVICE VERSION
161821/tcp closed ftp
161922/tcp open ssh OpenSSH 5.3 (protocol 2.0)
162023/tcp closed telnet
162125/tcp closed smtp
162280/tcp open http nginx 1.0.15
1623110/tcp closed pop3
1624143/tcp closed imap
1625443/tcp closed https
1626445/tcp closed microsoft-ds
16273389/tcp closed ms-wbt-server
1628
1629
1630S U B - D O M A I N F I N D E R
1631==================================
1632
1633
1634[i] Total Subdomains Found : 1
1635
1636[+] Subdomain: 100nonude.info
1637[-] IP: 93.174.93.40
1638100nonude.info
1639
1640
1641Domain Name: 100NONUDE.INFO
1642Registry Domain ID: D503300000038501535-LRMS
1643Registrar WHOIS Server:
1644Registrar URL: http://www.nic.ru
1645Updated Date: 2017-06-12T20:32:55Z
1646Creation Date: 2017-04-13T08:10:42Z
1647Registry Expiry Date: 2018-04-13T08:10:42Z
1648Registrar Registration Expiration Date:
1649Registrar: Regional Network Information Center, JSC dba RU-CENTER
1650Registrar IANA ID: 463
1651Registrar Abuse Contact Email:
1652Registrar Abuse Contact Phone:
1653Reseller:
1654Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
1655Registry Registrant ID: C201182491-LRMS
1656Registrant Name: Barinov Andrey
1657Registrant Organization: Barinov Andrey
1658Registrant Street: Gvardeyskaya st. 11-51
1659Registrant City: Melitopol
1660Registrant State/Province:
1661Registrant Postal Code: 72307
1662Registrant Country: UA
1663Registrant Phone: +380.684506451
1664Registrant Phone Ext:
1665Registrant Fax:
1666Registrant Fax Ext:
1667Registrant Email: barinandr@mail.ru
1668Registry Admin ID: C201182491-LRMS
1669Admin Name: Barinov Andrey
1670Admin Organization: Barinov Andrey
1671Admin Street: Gvardeyskaya st. 11-51
1672Admin City: Melitopol
1673Admin State/Province:
1674Admin Postal Code: 72307
1675Admin Country: UA
1676Admin Phone: +380.684506451
1677Admin Phone Ext:
1678Admin Fax:
1679Admin Fax Ext:
1680Admin Email: barinandr@mail.ru
1681Registry Tech ID: C201182491-LRMS
1682Tech Name: Barinov Andrey
1683Tech Organization: Barinov Andrey
1684Tech Street: Gvardeyskaya st. 11-51
1685Tech City: Melitopol
1686Tech State/Province:
1687Tech Postal Code: 72307
1688Tech Country: UA
1689Tech Phone: +380.684506451
1690Tech Phone Ext:
1691Tech Fax:
1692Tech Fax Ext:
1693Tech Email: barinandr@mail.ru
1694Registry Billing ID: C201182491-LRMS
1695Billing Name: Barinov Andrey
1696Billing Organization: Barinov Andrey
1697Billing Street: Gvardeyskaya st. 11-51
1698Billing City: Melitopol
1699Billing State/Province:
1700Billing Postal Code: 72307
1701Billing Country: UA
1702Billing Phone: +380.684506451
1703Billing Phone Ext:
1704Billing Fax:
1705Billing Fax Ext:
1706Billing Email: barinandr@mail.ru
1707Name Server: NS1.DNS-FORCE.NET
1708Name Server: NS2.DNS-FORCE.NET
1709
1710
1711;100nonude.info. IN ANY
1712
1713;; ANSWER SECTION:
1714100nonude.info. 19074 IN A 93.174.93.40
1715100nonude.info. 19074 IN NS ns2.dns-force.net.
1716100nonude.info. 19074 IN NS ns1.dns-force.net.
1717
1718;; Query time: 8 msec
1719;; SERVER: 192.168.1.254#53(192.168.1.254)
1720;; WHEN: Sat Sep 09 17:17:56 EDT 2017
1721;; MSG SIZE rcvd: 108
1722
1723
1724Running:
1725 traceroute -T -O info -i eth0 100nonude.info
1726traceroute to 100nonude.info (93.174.93.40), 30 hops max, 60 byte packets
1727 1 gateway (192.168.1.254) 0.509 ms 0.706 ms 0.872 ms
1728 2 10.135.18.1 (10.135.18.1) 7.443 ms 7.825 ms 8.151 ms
1729 3 75.154.223.222 (75.154.223.222) 29.672 ms 29.757 ms 30.225 ms
1730 4 lag-113.ear3.NewYork1.Level3.net (4.15.212.245) 30.429 ms 30.590 ms 30.953 ms
1731 5 ae-238-3614.edge6.Amsterdam1.Level3.net (4.69.162.246) 104.616 ms ae-237-3613.edge6.Amsterdam1.Level3.net (4.69.162.242) 104.813 ms ae-238-3614.edge6.Amsterdam1.Level3.net (4.69.162.246) 104.985 ms
1732 6 * * *
1733 7 93.174.93.40 (93.174.93.40) <syn,ack> 103.497 ms 103.616 ms 103.966 ms
1734
1735----- 100nonude.info -----
1736
1737
1738Host's addresses:
1739__________________
1740
1741100nonude.info. 19068 IN A 93.174.93.40
1742
1743
1744Wildcard detection using: cwgpsyonxjju
1745_______________________________________
1746
1747cwgpsyonxjju.100nonude.info. 86400 IN A 93.174.93.40
1748
1749
1750!!!!!!!!!!!!!!!!!!!!!!!!!!!!
1751
1752 Wildcards detected, all subdomains will point to the same IP address
1753 Omitting results containing 93.174.93.40.
1754 Maybe you are using OpenDNS servers.
1755
1756!!!!!!!!!!!!!!!!!!!!!!!!!!!!
1757
1758
1759Name Servers:
1760______________
1761
1762ns1.dns-force.net. 33300 IN A 94.102.49.121
1763
1764
1765Mail (MX) Servers:
1766___________________
1767
1768
1769
1770Trying Zone Transfers and getting Bind Versions:
1771_________________________________________________
1772
1773
1774Trying Zone Transfer for 100nonude.info on ns2.dns-force.net ...
1775AXFR record query failed: no socket TCP[93.174.93.40] Connection refused
1776
1777Trying Zone Transfer for 100nonude.info on ns1.dns-force.net ...
1778100nonude.info. 86400 IN SOA (
1779100nonude.info. 86400 IN A 93.174.93.40
1780100nonude.info. 86400 IN NS ns1.dns-force.net.
1781100nonude.info. 86400 IN NS ns2.dns-force.net.
1782*.100nonude.info. 86400 IN A 93.174.93.40
1783
1784
1785
1786100nonude.info class C netranges:
1787__________________________________
1788
1789 93.174.93.0/24
1790
1791
1792Performing reverse lookup on 256 ip addresses:
1793_______________________________________________
1794
1795
17960 results out of 256 IP addresses.
1797
1798
1799
1800WhatWeb report for http://100nonude.info
1801Status : 200 OK
1802Title : ? 100 NoNude Models ?
1803IP : 93.174.93.40
1804Country : NETHERLANDS, NL
1805
1806Summary : MetaGenerator[CuteHTML], HTTPServer[nginx/1.0.15], nginx[1.0.15], Script[JavaScript,text/javascript], AddThis
1807
1808Detected Plugins:
1809[ AddThis ]
1810 AddThis is a free way to boost traffic back to your site by
1811 making it easier for visitors to share your content.
1812
1813 Website : http://www.addthis.com/
1814
1815[ HTTPServer ]
1816 HTTP server header string. This plugin also attempts to
1817 identify the operating system from the server header.
1818
1819 String : nginx/1.0.15 (from server string)
1820
1821[ MetaGenerator ]
1822 This plugin identifies meta generator tags and extracts its
1823 value.
1824
1825 String : CuteHTML
1826
1827[ Script ]
1828 This plugin detects instances of script HTML elements and
1829 returns the script language/type.
1830
1831 String : JavaScript,text/javascript
1832
1833[ nginx ]
1834 Nginx (Engine-X) is a free, open-source, high-performance
1835 HTTP server and reverse proxy, as well as an IMAP/POP3
1836 proxy server.
1837
1838 Version : 1.0.15
1839 Website : http://nginx.net/
1840
1841HTTP Headers:
1842 HTTP/1.1 200 OK
1843 Server: nginx/1.0.15
1844 Date: Sat, 09 Sep 2017 19:55:54 GMT
1845 Content-Type: text/html; charset=UTF-8
1846 Connection: close
1847 Accept-Ranges: bytes
1848 Vary: Accept-Encoding
1849 Content-Encoding: gzip
1850 Content-Length: 12452
1851
1852
1853[+] Hosts found in search engines:
1854------------------------------------
1855[-] Resolving hostnames IPs...
185693.174.93.40:www.100nonude.info
1857
1858
1859
1860 ^ ^
1861 _ __ _ ____ _ __ _ _ ____
1862 ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
1863 | V V // o // _/ | V V // 0 // 0 // _/
1864 |_n_,'/_n_//_/ |_n_,' \_,' \_,'/_/
1865 <
1866 ...'
1867
1868 WAFW00F - Web Application Firewall Detection Tool
1869
1870 By Sandro Gauci && Wendel G. Henrique
1871
1872Checking http://100nonude.info
1873Generic Detection results:
1874No WAF detected by the generic detection
1875Number of requests: 13
1876
1877
1878DNS Servers for 100nonude.info:
1879 ns2.dns-force.net
1880 ns1.dns-force.net
1881
1882Trying zone transfer first...
1883 Testing ns2.dns-force.net
1884 Request timed out or transfer not allowed.
1885 Testing ns1.dns-force.net
1886
1887Whoah, it worked - misconfigured DNS server found:
1888100nonude.info. 86400 IN SOA ( ns1.dns-force.net. hostmaster.dns-force.net.
1889 2012050402 ;serial
1890 28800 ;refresh
1891 7200 ;retry
1892 864000 ;expire
1893 86400 ;minimum
1894 )
1895100nonude.info. 86400 IN A 93.174.93.40
1896100nonude.info. 86400 IN NS ns1.dns-force.net.
1897100nonude.info. 86400 IN NS ns2.dns-force.net.
1898*.100nonude.info. 86400 IN A 93.174.93.40
1899
1900
1901Checking for HTTP-Loadbalancing [Date]: 19:56:50, 19:56:50, 19:56:50, 19:56:51, 19:56:51, 19:56:51, 19:56:52, 19:56:52, 19:56:52, 19:56:53, 19:56:53, 19:56:53, 19:56:53, 19:56:54, 19:56:54, 19:56:54, 19:56:55, 19:56:55, 19:56:55, 19:56:55, 19:56:56, 19:56:56, 19:56:56, 19:56:57, 19:56:57, 19:56:57, 19:56:57, 19:56:58, 19:56:58, 19:56:58, 19:56:59, 19:56:59, 19:56:59, 19:56:59, 19:57:00, 19:57:00, 19:57:00, 19:57:01, 19:57:01, 19:57:01, 19:57:01, 19:57:02, 19:57:02, 19:57:02, 19:57:03, 19:57:03, 19:57:03, 19:57:04, 19:57:04, 19:57:04, NOT FOUND
1902
1903Checking for HTTP-Loadbalancing [Diff]: NOT FOUND
1904
1905100nonude.info does NOT use Load-balancing.
1906
1907
1908
1909Starting smtp-user-enum v1.2 ( http://pentestmonkey.net/tools/smtp-user-enum )
1910
1911 ----------------------------------------------------------
1912| Scan Information |
1913 ----------------------------------------------------------
1914
1915Mode ..................... VRFY
1916Worker Processes ......... 5
1917Usernames file ........... users.txt
1918Target count ............. 1
1919Username count ........... 494
1920Target TCP port .......... 25
1921Query timeout ............ 5 secs
1922Target domain ............
1923
1924######## Scan started at Sat Sep 9 17:20:31 2017 #########
1925######## Scan completed at Sat Sep 9 17:28:46 2017 #########
19260 results.
1927
1928494 queries in 495 seconds (1.0 queries / sec)
1929
1930
1931
1932Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 17:28 EDT
1933NSE: Loaded 146 scripts for scanning.
1934NSE: Script Pre-scanning.
1935Initiating NSE at 17:28
1936Completed NSE at 17:28, 0.00s elapsed
1937Initiating NSE at 17:28
1938Completed NSE at 17:28, 0.00s elapsed
1939Failed to resolve "100nonude.info.txt".
1940Initiating Parallel DNS resolution of 1 host. at 17:28
1941Completed Parallel DNS resolution of 1 host. at 17:28, 0.60s elapsed
1942Initiating SYN Stealth Scan at 17:28
1943Scanning 100nonude.info (93.174.93.40) [100 ports]
1944Discovered open port 80/tcp on 93.174.93.40
1945Discovered open port 22/tcp on 93.174.93.40
1946Increasing send delay for 93.174.93.40 from 0 to 5 due to 59 out of 146 dropped probes since last increase.
1947Increasing send delay for 93.174.93.40 from 5 to 10 due to 11 out of 25 dropped probes since last increase.
1948Completed SYN Stealth Scan at 17:28, 7.12s elapsed (100 total ports)
1949Initiating Service scan at 17:28
1950Scanning 2 services on 100nonude.info (93.174.93.40)
1951Completed Service scan at 17:29, 6.28s elapsed (2 services on 1 host)
1952Initiating OS detection (try #1) against 100nonude.info (93.174.93.40)
1953adjust_timeouts2: packet supposedly had rtt of -94333 microseconds. Ignoring time.
1954adjust_timeouts2: packet supposedly had rtt of -110194 microseconds. Ignoring time.
1955adjust_timeouts2: packet supposedly had rtt of -110194 microseconds. Ignoring time.
1956Retrying OS detection (try #2) against 100nonude.info (93.174.93.40)
1957Initiating Traceroute at 17:29
1958Completed Traceroute at 17:29, 3.01s elapsed
1959Initiating Parallel DNS resolution of 8 hosts. at 17:29
1960Completed Parallel DNS resolution of 8 hosts. at 17:29, 5.51s elapsed
1961NSE: Script scanning 93.174.93.40.
1962Initiating NSE at 17:29
1963Completed NSE at 17:29, 25.31s elapsed
1964Initiating NSE at 17:29
1965Completed NSE at 17:29, 0.00s elapsed
1966Nmap scan report for 100nonude.info (93.174.93.40)
1967Host is up (0.12s latency).
1968Not shown: 92 closed ports
1969PORT STATE SERVICE VERSION
197022/tcp open ssh OpenSSH 5.3 (protocol 2.0)
1971| ssh-hostkey:
1972|_ 2048 c6:97:3d:68:af:14:9e:c0:1a:9c:a4:f6:75:32:ae:6f (RSA)
197325/tcp filtered smtp
197480/tcp open http nginx 1.0.15
1975|_http-favicon: Unknown favicon MD5: D92B1936AF11EC235A2BD448C0E1BFF6
1976|_http-generator: CuteHTML
1977| http-methods:
1978|_ Supported Methods: POST OPTIONS GET HEAD
1979|_http-server-header: nginx/1.0.15
1980|_http-title: ? 100 NoNude Models ?
1981135/tcp filtered msrpc
1982139/tcp filtered netbios-ssn
1983445/tcp filtered microsoft-ds
1984465/tcp filtered smtps
1985587/tcp filtered submission
1986Aggressive OS guesses: Linux 2.6.32 or 3.10 (91%), Tandberg VCS video conferencing system (91%), Synology DiskStation Manager 5.1 (90%), Linux 2.6.32 (90%), Linux 2.6.35 (90%), Linux 2.6.37 (89%), Linux 3.18 (89%), DD-WRT v24-sp2 (Linux 2.4.36) (88%), Linux 2.6.32 - 2.6.35 (88%), Linux 2.6.39 (88%)
1987No exact OS matches for host (test conditions non-ideal).
1988Uptime guess: 22.069 days (since Fri Aug 18 15:50:49 2017)
1989Network Distance: 11 hops
1990TCP Sequence Prediction: Difficulty=246 (Good luck!)
1991IP ID Sequence Generation: All zeros
1992
1993TRACEROUTE (using port 23/tcp)
1994HOP RTT ADDRESS
19951 110.19 ms 10.13.0.1
19962 ...
19973 110.43 ms po101.gra-g2-a75.fr.eu (178.33.103.231)
19984 112.49 ms 10.95.33.10
19995 119.01 ms be100-1113.fra-5-a9.de.eu (91.121.131.19)
20006 119.04 ms be100-2.fra-1-a9.de.eu (94.23.122.217)
20017 ...
20028 124.50 ms vlan3555.bb1.ams2.nl.m247.com (176.10.83.128)
20039 120.28 ms 176.10.83.5
200410 ...
200511 120.44 ms 93.174.93.40
2006
2007
2008
2009
2010 _/ _/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/
2011 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
2012 _/ _/ _/_/_/_/ _/_/_/ _/ _/_/_/ _/_/_/_/ _/ _/_/_/ _/_/_/_
2013 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
2014 _/_/_/_/ _/ _/ _/ _/_/_/_/ _/_/_/_/ _/ _/_/_/_/ _/ _/ [v1.06]
2015
2016 _/ User-Agent Tester ↵
2017 _/ AKA: Purple Pimp ↵
2018 _/ ChrisJohnRiley ↵
2019 _/ blog.c22.cc ↵
2020
2021 [>] Performing initial request and confirming stability
2022 [>] Using User-Agent string Mozilla/5.0
2023
2024 [ ] URL (ENTERED): http://100nonude.info
2025 [ ] Response Code: 200 OK
2026 [ ] Server: nginx/1.0.15
2027 [ ] Date: Sat, 09 Sep 2017 20:06:34 GMT
2028 [ ] Content-Type: text/html; charset=UTF-8
2029 [ ] Transfer-Encoding: chunked
2030 [ ] Connection: close
2031 [ ] Accept-Ranges: bytes
2032 [ ] Vary: Accept-Encoding
2033 [ ] Data (MD5): 87c6c60cd93c32ccd594791ea8ede54d
2034
2035 [1] Pass
2036 [2] Pass
2037 [3] Pass
2038
2039 [>] URL appears stable. Beginning test
2040
2041 [>] Using DEFAULT User-Agent Strings
2042
2043 [>] Using Crazy User-Agent Strings
2044 [>] Using Bot User-Agent Strings
2045
2046 [>] Output: [+] Added Headers, [-] Removed Headers, [!] Altered Headers, [ ] No Change
2047
2048
2049 [>] User-Agent String : Windows-Media-Player/9.00.00.4503
2050
2051
2052 [!] Data (MD5): 144fd0404615872960264b53118f1b22
2053
2054
2055 [>] User-Agent String : Mozilla/5.0 (PLAYSTATION 3; 2.00)
2056
2057
2058 [!] Data (MD5): 02c56a171176be875efebd8b525dc1e0
2059
2060
2061 [>] User-Agent String : TrackBack/1.02
2062
2063
2064 [!] Data (MD5): 0a2533a1c242a1d9b047a5f0f811c63d
2065
2066
2067 [>] User-Agent String : wispr
2068
2069
2070 [!] Data (MD5): ceee78c85b52f2757304662f5e662281
2071
2072
2073 [>] User-Agent String : EMPTY USER-AGENT STRING!
2074
2075
2076 [!] Data (MD5): c22a6da3b3a035a8e06825b23cb8409b
2077
2078
2079 [>] User-Agent String : Googlebot/2.1 (+http://www.google.com/bot.html)
2080
2081
2082 [!] Data (MD5): 66d4a995ecae72ca9dba1b9951b59808
2083
2084
2085 [>] User-Agent String : Googlebot-Image/1.0
2086
2087
2088 [!] Data (MD5): 39a5bb826a8c6b9d2e5e25a822afbb82
2089
2090
2091 [>] User-Agent String : Mediapartners-Google
2092
2093
2094 [!] Data (MD5): 97ddd72c9398785ae791946ad46f015c
2095
2096
2097 [>] User-Agent String : Mozilla/2.0 (compatible; Ask Jeeves)
2098
2099
2100 [!] Data (MD5): 2831a3ffc5feac75b6f598e7e2e05ec6
2101
2102
2103 [>] User-Agent String : msnbot-Products/1.0 (+http://search.msn.com/msnbot.htm)
2104
2105
2106 [!] Data (MD5): 0a34fa4d84770aa02225c6b28f24ee1f
2107
2108
2109 [>] User-Agent String : mmcrawler
2110
2111
2112 [!] Data (MD5): 4265d1f2f8187725c89f0206f70b4b69
2113
2114
2115 [>] Checks completed... try enabling VERBOSE mode for more detailed output
2116
2117 [>] That's all folks... Fo' Shizzle!
2118#########################################################################################
2119Hostname sgirls.hotdolls.info ISP Quasi Networks LTD. (AS29073)
2120Continent Africa Flag
2121SC
2122Country Seychelles Country Code SC (SYC)
2123Region Unknown Local time 09 Sep 2017 23:19 +04
2124City Unknown Latitude -4.583
2125IP Address 80.82.79.11 Longitude 55.667
2126#########################################################################################
2127s
2128dig sgirls.hotdolls.info any
2129
2130; <<>> DiG 9.10.3-P4-Debian <<>> sgirls.hotdolls.info any
2131;; global options: +cmd
2132;; Got answer:
2133;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 142
2134;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
2135
2136;; OPT PSEUDOSECTION:
2137; EDNS: version: 0, flags:; udp: 4096
2138;; QUESTION SECTION:
2139;sgirls.hotdolls.info. IN ANY
2140
2141;; ANSWER SECTION:
2142sgirls.hotdolls.info. 1778 IN A 80.82.79.11
2143
2144;; Query time: 9 msec
2145;; SERVER: 192.168.1.254#53(192.168.1.254)
2146;; WHEN: Sat Sep 09 17:56:55 EDT 2017
2147;; MSG SIZE rcvd: 65
2148
2149
2150###########################################################################################
2151
2152tcptraceroute -i eth0 sgirls.hotdolls.info
2153
2154Running:
2155 traceroute -T -O info -i eth0 sgirls.hotdolls.info
2156traceroute to sgirls.hotdolls.info (80.82.79.11), 30 hops max, 60 byte packets
2157 1 gateway (192.168.1.254) 0.377 ms 0.538 ms 0.698 ms
2158 2 10.135.18.1 (10.135.18.1) 6.921 ms 7.570 ms 7.602 ms
2159 3 75.154.223.222 (75.154.223.222) 29.862 ms 29.913 ms 29.979 ms
2160 4 lag-113.ear3.NewYork1.Level3.net (4.15.212.245) 35.050 ms 35.239 ms 35.299 ms
2161 5 ae-240-3616.edge6.Amsterdam1.Level3.net (4.69.162.254) 105.067 ms ae-239-3615.edge6.Amsterdam1.Level3.net (4.69.162.250) 105.142 ms 105.185 ms
2162 6 * * *
2163 7 no-reverse-dns-configured.com (80.82.79.11) <syn,ack> 103.541 ms 103.603 ms *
2164
2165###########################################################################################
2166
2167###########################################################################################
2168
2169nmap -PN -n -F -T4 -sV -A -oG temp.txt sgirls.hotdolls.info
2170
2171Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 17:59 EDT
2172Nmap scan report for sgirls.hotdolls.info (80.82.79.11)
2173Host is up (0.29s latency).
2174Not shown: 84 closed ports
2175PORT STATE SERVICE VERSION
217621/tcp filtered ftp
217722/tcp filtered ssh
217825/tcp filtered smtp
217953/tcp open domain ISC BIND 9.8.2rc1
218080/tcp open http nginx 1.12.1
2181|_http-server-header: nginx/1.12.1
2182|_http-title: SCHOOLGIRLS LIST - Preteen Models, Young Russian Teen Models, ...
218381/tcp filtered hosts2-ns
2184110/tcp open pop3 Dovecot pop3d
2185|_pop3-capabilities: SASL(PLAIN LOGIN DIGEST-MD5 CRAM-MD5) TOP CAPA RESP-CODES STLS UIDL PIPELINING USER
2186135/tcp filtered msrpc
2187139/tcp filtered netbios-ssn
2188143/tcp open imap Dovecot imapd
2189445/tcp filtered microsoft-ds
2190465/tcp filtered smtps
2191587/tcp filtered submission
2192993/tcp open ssl/imaps?
2193|_imap-capabilities: CAPABILITY
2194| ssl-cert: Subject: commonName=imap.example.com
2195| Not valid before: 2015-06-12T12:04:14
2196|_Not valid after: 2016-06-11T12:04:14
2197|_ssl-date: 2017-09-09T19:58:33+00:00; -2h01m11s from scanner time.
2198995/tcp open ssl/pop3s?
2199| ssl-cert: Subject: commonName=imap.example.com
2200| Not valid before: 2015-06-12T12:04:14
2201|_Not valid after: 2016-06-11T12:04:14
2202|_ssl-date: 2017-09-09T19:58:33+00:00; -2h01m11s from scanner time.
22033306/tcp open mysql MySQL (unauthorized)
2204Device type: general purpose|firewall|storage-misc|WAP|webcam
2205Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|2.4.X (99%), WatchGuard Fireware 11.X (94%),
2206TRACEROUTE (using port 1723/tcp)
2207HOP RTT ADDRESS
22081 ...
22092 1395.74 ms 37.187.24.252
22103 1391.48 ms 178.33.103.231
22114 1399.49 ms 10.95.33.10
22125 1411.49 ms 91.121.131.19
22136 1405.31 ms 94.23.122.217
22147 ...
22158 1424.33 ms 176.10.83.128
22169 1420.00 ms 176.10.83.119
221710 ...
221811 1417.55 ms 80.82.79.11
2219
2220OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
2221Nmap done: 1 IP address (1 host up) scanned in 111.60 seconds
2222
2223###########################################################################################
2224
2225amap -i temp.txt
2226amap v5.4 (www.thc.org/thc-amap) started at 2017-09-09 18:00:52 - APPLICATION MAPPING mode
2227
2228Protocol on 80.82.79.11:80/tcp matches http
2229Protocol on 80.82.79.11:80/tcp matches http-apache-2
2230Protocol on 80.82.79.11:110/tcp matches pop3
2231Protocol on 80.82.79.11:143/tcp matches imap
2232Protocol on 80.82.79.11:3306/tcp matches mysql
2233Protocol on 80.82.79.11:3306/tcp matches mysql-secured
2234Protocol on 80.82.79.11:993/tcp matches ssl
2235Protocol on 80.82.79.11:995/tcp matches ssl
2236Protocol on 80.82.79.11:53/tcp matches dns
2237
2238Unidentified ports: none.
2239
2240amap v5.4 finished at 2017-09-09 18:01:15
2241
2242###########################################################################################
2243
2244
2245inetnum: 80.82.79.0 - 80.82.79.255
2246netname: SC-QUASI80
2247descr: QUASI
2248country: SC
2249org: ORG-QNL3-RIPE
2250admin-c: QNL1-RIPE
2251tech-c: QNL1-RIPE
2252status: ASSIGNED PA
2253mnt-by: QUASINETWORKS-MNT
2254mnt-lower: QUASINETWORKS-MNT
2255mnt-routes: QUASINETWORKS-MNT
2256created: 2010-08-25T21:29:49Z
2257last-modified: 2016-01-23T23:04:27Z
2258source: RIPE
2259
2260organisation: ORG-QNL3-RIPE
2261org-name: Quasi Networks LTD.
2262org-type: OTHER
2263address: Suite 1, Second Floor
2264address: Sound & Vision House, Francis Rachel Street
2265address: Victoria, Mahe, SEYCHELLES
2266remarks: *****************************************************************************
2267remarks: IMPORTANT INFORMATION
2268remarks: *****************************************************************************
2269remarks: We are a high bandwidth network provider offering bandwidth solutions.
2270remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
2271remarks: Please only use abuse@quasinetworks.com for abuse reports.
2272remarks: For all other requests, please see the details on our website.
2273remarks: *****************************************************************************
2274abuse-mailbox: abuse@quasinetworks.com
2275abuse-c: AR34302-RIPE
2276mnt-ref: QUASINETWORKS-MNT
2277mnt-by: QUASINETWORKS-MNT
2278created: 2015-11-08T22:25:26Z
2279last-modified: 2015-11-27T09:37:50Z
2280source: RIPE # Filtered
2281
2282role: Quasi Networks LTD
2283address: Suite 1, Second Floor
2284address: Sound & Vision House, Francis Rachel Street
2285address: Victoria, Mahe, SEYCHELLES
2286remarks: *****************************************************************************
2287remarks: IMPORTANT INFORMATION
2288remarks: *****************************************************************************
2289remarks: We are a high bandwidth network provider offering bandwidth solutions.
2290remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
2291remarks: Please only use abuse@quasinetworks.com for abuse reports.
2292remarks: For all other requests, please see the details on our website.
2293remarks: *****************************************************************************
2294abuse-mailbox: abuse@quasinetworks.com
2295nic-hdl: QNL1-RIPE
2296mnt-by: QUASINETWORKS-MNT
2297created: 2015-11-07T22:43:04Z
2298last-modified: 2015-11-07T23:04:49Z
2299source: RIPE # Filtered
2300
2301% Information related to '80.82.79.0/24AS29073'
2302
2303route: 80.82.79.0/24
2304descr: Quasi Networks LTD (IBC)
2305origin: AS29073
2306mnt-by: QUASINETWORKS-MNT
2307created: 2010-08-25T21:31:02Z
2308last-modified: 2016-01-23T23:04:45Z
2309source: RIPE
2310
2311% This query was served by the RIPE Database Query Service version 1.89.2 (ANGUS)
2312
2313###########################################################################################
2314[i] Scanning Site: http://sgirls.hotdolls.info
2315
2316
2317
2318B A S I C I N F O
2319====================
2320
2321
2322[+] Site Title: SCHOOLGIRLS LIST - Preteen Models, Young Russian Teen Models, Teen Models, Young Teen Models Nonnude, Young Teen Portfolio Models, Teen Fashion Models, Teen Glamour Models, Teen Girl Models, Teen Models Gallery, Models Teen, Teen Model
2323[+] IP address: 80.82.79.11
2324[+] Web Server: nginx/1.12.1
2325[+] CMS: Could Not Detect
2326[+] Cloudflare: Not Detected
2327[+] Robots File: Could NOT Find robots.txt!
2328
2329
2330
2331
2332G E O I P L O O K U P
2333=========================
2334
2335[i] IP Address: 80.82.79.11
2336[i] Country: SC
2337[i] State: N/A
2338[i] City: N/A
2339[i] Latitude: -4.583300
2340[i] Longitude: 55.666698
2341
2342
2343
2344
2345H T T P H E A D E R S
2346=======================
2347
2348
2349[i] HTTP/1.1 200 OK
2350[i] Server: nginx/1.12.1
2351[i] Date: Sat, 09 Sep 2017 19:56:14 GMT
2352[i] Content-Type: text/html; charset=UTF-8
2353[i] Connection: close
2354[i] Accept-Ranges: bytes
2355
2356
2357
2358
2359D N S L O O K U P
2360===================
2361
2362sgirls.hotdolls.info. 1796 IN A 80.82.79.11
2363
2364
2365
2366
2367S U B N E T C A L C U L A T I O N
2368====================================
2369
2370Address = 80.82.79.11
2371Network = 80.82.79.11 / 32
2372Netmask = 255.255.255.255
2373Broadcast = not needed on Point-to-Point links
2374Wildcard Mask = 0.0.0.0
2375Hosts Bits = 0
2376Max. Hosts = 1 (2^0 - 0)
2377Host Range = { 80.82.79.11 - 80.82.79.11 }
2378
2379
2380
2381N M A P P O R T S C A N
2382============================
2383
2384
2385Starting Nmap 7.01 ( https://nmap.org ) at 2017-09-09 21:57 UTC
2386Nmap scan report for sgirls.hotdolls.info (80.82.79.11)
2387Host is up (0.082s latency).
2388rDNS record for 80.82.79.11: no-reverse-dns-configured.com
2389PORT STATE SERVICE VERSION
239021/tcp filtered ftp
239122/tcp filtered ssh
239223/tcp closed telnet
239325/tcp open smtp Postfix smtpd
239480/tcp open http nginx 1.12.1
2395110/tcp open pop3 Dovecot pop3d
2396143/tcp open imap Dovecot imapd
2397443/tcp closed https
2398445/tcp closed microsoft-ds
23993389/tcp closed ms-wbt-server
2400Service Info: Host: b06s06.com
2401
2402Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
2403Nmap done: 1 IP address (1 host up) scanned in 8.44 seconds
2404
2405
2406
2407S U B - D O M A I N F I N D E R
2408==================================
2409
2410
2411[i] Total Subdomains Found : 1
2412
2413[+] Subdomain: sgirls.hotdolls.info
2414[-] IP: 80.82.79.11
2415
2416
2417
2418
2419
2420R E V E R S E I P L O O K U P
2421==================================
2422
2423
2424[i] Total Sites Found On This Server : 7
2425
2426
2427[#] crazy-models.photo-angels.name
2428[-] CMS: Could Not Detect
2429
2430[#] nn-girls.biz
2431[-] CMS: Could Not Detect
2432
2433[#] sgirls.hotdolls.info
2434[-] CMS: Could Not Detect
2435
2436[#] teeny-video.photo-angels.name
2437[-] CMS: Could Not Detect
2438
2439[#] www.atlasphones.com
2440[-] CMS: Could Not Detect
2441
2442[#] www.charming-dolls.info
2443[-] CMS: Could Not Detect
2444
2445[#] www.youngs-list.com,
2446[-] CMS: Could Not Detect
2447[*] Performing TLD Brute force Enumeration against sgirls.hotdolls.info
2448[*] The operation could take up to: 00:01:07
2449[*] A sgirls.biz.af 5.45.75.45
2450[*] A sgirls.co.asia 91.195.240.135
2451[*] CNAME sgirls.biz.at free.biz.at
2452[*] A free.biz.at 216.92.134.29
2453[*] A sgirls.org.aw 142.4.20.12
2454[*] A sgirls.com.ba 195.222.33.180
2455[*] A sgirls.com.be 95.173.170.166
2456[*] A sgirls.co.ba 176.9.45.78
2457[*] A sgirls.biz.by 71.18.52.2
2458[*] A sgirls.biz.bz 199.59.242.150
2459[*] A sgirls.net.cc 54.252.89.206
2460[*] A sgirls.com.cc 54.252.107.64
2461[*] A sgirls.co.cc 175.126.123.219
2462[*] A sgirls.org.ch 72.52.4.122
2463[*] A sgirls.co.cm 85.25.140.105
2464[*] A sgirls.net.cm 85.25.140.105
2465[*] A sgirls.biz.cl 185.53.178.8
2466[*] A sgirls.com.com 52.33.196.199
2467[*] A sgirls.net.com 199.59.242.150
2468[*] A sgirls.org.com 23.23.86.44
2469[*] A sgirls.co.com 173.192.115.17
2470[*] A sgirls.com 98.124.245.24
2471[*] A sgirls.biz.cr 72.52.4.122
2472[*] CNAME sgirls.biz.cm i.cns.cm
2473[*] A i.cns.cm 118.184.56.30
2474[*] A sgirls.biz.cx 72.52.4.122
2475[*] A sgirls.net.cz 80.250.24.177
2476[*] A sgirls.biz.cz 185.53.179.7
2477[*] A sgirls.cz 46.28.105.3
2478[*] AAAA sgirls.cz 2a02:2b88:1:4::17
2479[*] A sgirls.com.cz 62.109.128.30
2480[*] CNAME sgirls.co.de co.de
2481[*] A co.de 144.76.162.245
2482[*] CNAME sgirls.org.de www.org.de
2483[*] A www.org.de 78.47.128.8
2484[*] A sgirls.com.de 50.56.68.37
2485[*] A sgirls.de 85.114.133.20
2486[*] A sgirls.net.eu 78.46.90.98
2487[*] A sgirls.org.eu 78.46.90.98
2488[*] A sgirls.biz.fi 185.55.85.123
2489[*] A sgirls.fm 173.230.131.38
2490[*] A sgirls.biz.fm 173.230.131.38
2491[*] A sgirls.org.fr 149.202.133.35
2492[*] A sgirls.biz.gl 72.52.4.122
2493[*] CNAME sgirls.co.gp co.gp
2494[*] A co.gp 144.76.162.245
2495[*] A sgirls.co.hn 208.100.40.203
2496[*] CNAME sgirls.net.hr net.hr
2497[*] A net.hr 192.0.78.24
2498[*] A net.hr 192.0.78.25
2499[*] CNAME sgirls.biz.hn parkmydomain.vhostgo.com
2500[*] A parkmydomain.vhostgo.com 107.186.245.118
2501[*] A sgirls.co.ht 72.52.4.122
2502[*] A sgirls.co.jobs 50.17.193.222
2503[*] A sgirls.net.jobs 50.19.241.165
2504[*] A sgirls.com.jobs 50.19.241.165
2505[*] A sgirls.biz.jobs 50.19.241.165
2506[*] A sgirls.org.jobs 50.19.241.165
2507[*] A sgirls.biz.ky 199.184.144.27
2508[*] CNAME sgirls.biz.li 712936.parkingcrew.net
2509[*] A 712936.parkingcrew.net 185.53.179.29
2510[*] A sgirls.biz.lu 195.26.5.2
2511[*] A sgirls.biz.ly 64.136.20.39
2512[*] A sgirls.biz.md 72.52.4.122
2513[*] A sgirls.co.mk 87.76.31.211
2514[*] A sgirls.co.mobi 54.225.105.179
2515[*] A sgirls.biz.my 202.190.174.44
2516[*] A sgirls.net 88.85.68.115
2517[*] A sgirls.co.net 188.166.216.219
2518[*] A sgirls.net.net 52.50.81.210
2519[*] A sgirls.org.net 23.23.86.44
2520[*] A sgirls.co.nl 37.97.184.204
2521[*] A sgirls.com.nl 83.98.157.102
2522[*] A sgirls.net.nl 83.98.157.102
2523[*] A sgirls.co.nr 208.100.40.202
2524[*] CNAME sgirls.co.nu co.nu
2525[*] A co.nu 144.76.162.245
2526[*] CNAME sgirls.com.nu com.nu
2527[*] A com.nu 144.76.162.245
2528[*] A sgirls.net.nu 199.102.76.78
2529[*] A sgirls.org.nu 80.92.84.139
2530[*] A sgirls.com.org 23.23.86.44
2531[*] CNAME sgirls.net.org pewtrusts.org
2532[*] A pewtrusts.org 204.74.99.100
2533[*] A sgirls.ph 45.79.222.138
2534[*] A sgirls.co.ph 45.79.222.138
2535[*] A sgirls.com.ph 45.79.222.138
2536[*] A sgirls.net.ph 45.79.222.138
2537[*] A sgirls.org.ph 45.79.222.138
2538[*] A sgirls.co.pl 212.91.6.55
2539[*] A sgirls.org.pm 208.73.211.165
2540[*] A sgirls.org.pm 208.73.210.202
2541[*] A sgirls.org.pm 208.73.210.217
2542[*] A sgirls.org.pm 208.73.211.177
2543[*] A sgirls.co.ps 66.96.132.56
2544[*] CNAME sgirls.biz.ps biz.ps
2545[*] A biz.ps 144.76.162.245
2546[*] A sgirls.co.pt 194.107.127.52
2547[*] A sgirls.co.pw 141.8.226.59
2548[*] A sgirls.net.pw 141.8.226.59
2549[*] A sgirls.biz.pw 141.8.226.59
2550[*] A sgirls.org.pw 141.8.226.59
2551[*] CNAME sgirls.co.ro now.co.ro
2552[*] A now.co.ro 185.27.255.9
2553[*] A sgirls.net.ro 69.64.52.127
2554[*] A sgirls.org.re 217.70.184.38
2555[*] A sgirls.ru 185.53.179.40
2556[*] A sgirls.com.ru 178.210.89.119
2557[*] A sgirls.biz.se 185.53.179.6
2558[*] CNAME sgirls.net.se 773147.parkingcrew.net
2559[*] A 773147.parkingcrew.net 185.53.179.29
2560[*] A sgirls.co.sl 91.195.240.135
2561[*] A sgirls.com.sr 143.95.106.249
2562[*] A sgirls.biz.st 91.121.28.115
2563[*] A sgirls.co.su 72.52.4.122
2564[*] A sgirls.biz.tc 64.136.20.39
2565[*] A sgirls.biz.tf 85.236.153.18
2566[*] A sgirls.net.tf 188.40.117.12
2567[*] A sgirls.net.tf 188.40.70.29
2568[*] A sgirls.net.tf 188.40.70.27
2569[*] A sgirls.co.tl 208.100.40.202
2570[*] A sgirls.co.to 175.118.124.44
2571[*] A sgirls.co.tv 31.186.25.163
2572[*] A sgirls.biz.tv 72.52.4.122
2573[*] A sgirls.org.tv 72.52.4.122
2574[*] CNAME sgirls.biz.uz biz.uz
2575[*] A biz.uz 144.76.162.245
2576[*] A sgirls.vg 88.198.29.97
2577[*] A sgirls.co.vg 88.198.29.97
2578[*] A sgirls.com.vg 88.198.29.97
2579[*] A sgirls.net.vg 68.178.254.180
2580[*] A sgirls.biz.vg 89.31.143.20
2581[*] A sgirls.ws 64.70.19.203
2582[*] A sgirls.com.ws 202.4.48.211
2583[*] A sgirls.net.ws 202.4.48.211
2584[*] A sgirls.biz.ws 184.168.221.104
2585[*] A sgirls.org.ws 202.4.48.211
2586
2587 IN ANY
2588
2589;; ANSWER SECTION:
2590sgirls.hotdolls.info. 1786 IN A 80.82.79.11
2591
2592;; Query time: 8 msec
2593;; SERVER: 192.168.1.254#53(192.168.1.254)
2594;; WHEN: Sat Sep 09 17:56:47 EDT 2017
2595;; MSG SIZE rcvd: 65
2596
2597
2598 traceroute -T -O info -i eth0 sgirls.hotdolls.info
2599traceroute to sgirls.hotdolls.info (80.82.79.11), 30 hops max, 60 byte packets
2600 1 gateway (192.168.1.254) 0.493 ms 0.691 ms 0.861 ms
2601 2 10.135.18.1 (10.135.18.1) 14.308 ms 19.953 ms 23.800 ms
2602 3 75.154.223.222 (75.154.223.222) 29.925 ms 29.999 ms 30.157 ms
2603 4 lag-113.ear3.NewYork1.Level3.net (4.15.212.245) 37.953 ms 38.623 ms 38.625 ms
2604 5 ae-239-3615.edge6.Amsterdam1.Level3.net (4.69.162.250) 104.714 ms 104.745 ms 104.815 ms
2605 6 * * *
2606 7 no-reverse-dns-configured.com (80.82.79.11) <syn,ack> 103.494 ms 103.310 ms 103.343 ms
2607
2608----- sgirls.hotdolls.info -----
2609
2610
2611Host's addresses:
2612__________________
2613
2614sgirls.hotdolls.info. 1780 IN A 80.82.79.11
2615
2616
2617Name Servers:
2618______________
2619
2620 sgirls.hotdolls.info NS record query failed: NOERROR
2621
2622
2623WhatWeb report for http://sgirls.hotdolls.info
2624Status : 200 OK
2625Title : SCHOOLGIRLS LIST - Preteen Models, Young Russian Teen Models, Teen Models, Young Teen Models Nonnude, Young Teen Portfolio Models, Teen Fashion Models, Teen Glamour Models, Teen Girl Models, Teen Models Gallery, Models Teen, Teen Model
2626IP : 80.82.79.11
2627Country : NETHERLANDS, NL
2628
2629Summary : HTTPServer[nginx/1.12.1], nginx[1.12.1], Script[JavaScript]
2630
2631Detected Plugins:
2632[ HTTPServer ]
2633 HTTP server header string. This plugin also attempts to
2634 identify the operating system from the server header.
2635
2636 String : nginx/1.12.1 (from server string)
2637
2638[ Script ]
2639 This plugin detects instances of script HTML elements and
2640 returns the script language/type.
2641
2642 String : JavaScript
2643
2644[ nginx ]
2645 Nginx (Engine-X) is a free, open-source, high-performance
2646 HTTP server and reverse proxy, as well as an IMAP/POP3
2647 proxy server.
2648
2649 Version : 1.12.1
2650 Website : http://nginx.net/
2651
2652HTTP Headers:
2653 HTTP/1.1 200 OK
2654 Server: nginx/1.12.1
2655 Date: Sat, 09 Sep 2017 19:57:30 GMT
2656 Content-Type: text/html; charset=UTF-8
2657 Transfer-Encoding: chunked
2658 Connection: close
2659 Accept-Ranges: bytes
2660
2661
2662
2663 ^ ^
2664 _ __ _ ____ _ __ _ _ ____
2665 ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
2666 | V V // o // _/ | V V // 0 // 0 // _/
2667 |_n_,'/_n_//_/ |_n_,' \_,' \_,'/_/
2668 <
2669
2670
2671
2672lbd - load balancing detector 0.2 - Checks if a given domain uses load-balancing.
2673 Written by Stefan Behte (http://ge.mine.nu)
2674 Proof-of-concept! Might give false positives.
2675
2676Checking for DNS-Loadbalancing: NOT FOUND
2677Checking for HTTP-Loadbalancing [Server]:
2678 nginx/1.12.1
2679 NOT FOUND
2680
2681Checking for HTTP-Loadbalancing [Date]: 20:00:28, 20:00:29, 20:00:29, 20:00:32, 20:00:32, 20:00:32, 20:00:33, 20:00:33, 20:00:34, 20:00:34, 20:00:34, 20:00:34, 20:00:35, 20:00:35, 20:00:35, 20:00:36, 20:00:40, 20:00:40, 20:00:41, 20:00:46, 20:00:54, 20:00:55, 20:00:56, 20:00:56, 20:00:56, 20:00:57, 20:01:07, 20:01:09, 20:01:10, 20:01:11, 20:01:12, 20:01:13, 20:01:17, 20:01:20, 20:01:20, 20:01:21, 20:01:21, 20:01:21, 20:01:22, 20:01:22, 20:01:22, 20:01:23, 20:01:27, 20:01:27, 20:01:28, 20:01:28, 20:01:28, 20:01:28, 20:01:29, 20:01:29, NOT FOUND
2682
2683Checking for HTTP-Loadbalancing [Diff]: NOT FOUND
2684
2685sgirls.hotdolls.info does NOT use Load-balancing.
2686
2687
2688
2689Starting smtp-user-enum v1.2 ( http://pentestmonkey.net/tools/smtp-user-enum )
2690
2691 ----------------------------------------------------------
2692| Scan Information |
2693 ----------------------------------------------------------
2694
2695Mode ..................... VRFY
2696Worker Processes ......... 5
2697Usernames file ........... users.txt
2698Target count ............. 1
2699Username count ........... 494
2700Target TCP port .......... 25
2701Query timeout ............ 5 secs
2702Target domain ............
2703
2704######## Scan started at Sat Sep 9 18:03:24 2017 #########
2705######## Scan completed at Sat Sep 9 18:11:39 2017 #########
27060 results.
2707
2708494 queries in 495 seconds (1.0 queries / sec)
2709
2710
2711
2712Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 18:11 EDT
2713NSE: Loaded 146 scripts for scanning.
2714NSE: Script Pre-scanning.
2715Initiating NSE at 18:11
2716Completed NSE at 18:11, 0.00s elapsed
2717Initiating NSE at 18:11
2718Completed NSE at 18:11, 0.00s elapsed
2719Failed to resolve "sgirls.hotdolls.info.txt".
2720Initiating Parallel DNS resolution of 1 host. at 18:11
2721Completed Parallel DNS resolution of 1 host. at 18:11, 0.53s elapsed
2722Initiating SYN Stealth Scan at 18:11
2723Scanning sgirls.hotdolls.info (80.82.79.11) [100 ports]
2724Discovered open port 995/tcp on 80.82.79.11
2725Discovered open port 53/tcp on 80.82.79.11
2726Discovered open port 143/tcp on 80.82.79.11
2727Discovered open port 993/tcp on 80.82.79.11
2728Discovered open port 3306/tcp on 80.82.79.11
2729Discovered open port 110/tcp on 80.82.79.11
2730Discovered open port 80/tcp on 80.82.79.11
2731Increasing send delay for 80.82.79.11 from 0 to 5 due to 61 out of 152 dropped probes since last increase.
2732Completed SYN Stealth Scan at 18:11, 4.55s elapsed (100 total ports)
2733Initiating Service scan at 18:11
2734Scanning 7 services on sgirls.hotdolls.info (80.82.79.11)
2735Completed Service scan at 18:11, 6.94s elapsed (7 services on 1 host)
2736Initiating OS detection (try #1) against sgirls.hotdolls.info (80.82.79.11)
2737Initiating Traceroute at 18:11
2738Completed Traceroute at 18:11, 3.02s elapsed
2739Initiating Parallel DNS resolution of 8 hosts. at 18:11
2740Completed Parallel DNS resolution of 8 hosts. at 18:12, 5.62s elapsed
2741NSE: Script scanning 80.82.79.11.
2742Initiating NSE at 18:12
2743Completed NSE at 18:12, 32.91s elapsed
2744Initiating NSE at 18:12
2745Completed NSE at 18:12, 0.00s elapsed
2746Nmap scan report for sgirls.hotdolls.info (80.82.79.11)
2747Host is up (0.16s latency).
2748rDNS record for 80.82.79.11: no-reverse-dns-configured.com
2749Not shown: 84 closed ports
2750PORT STATE SERVICE VERSION
275121/tcp filtered ftp
275222/tcp filtered ssh
275325/tcp filtered smtp
275453/tcp open domain ISC BIND 9.8.2rc1
2755| dns-nsid:
2756|_ bind.version: 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4
275780/tcp open http nginx 1.12.1
2758| http-methods:
2759| Supported Methods: GET HEAD POST OPTIONS TRACE
2760|_ Potentially risky methods: TRACE
2761|_http-server-header: nginx/1.12.1
2762|_http-title: SCHOOLGIRLS LIST - Preteen Models, Young Russian Teen Models, ...
276381/tcp filtered hosts2-ns
2764110/tcp open pop3 Dovecot pop3d
2765135/tcp filtered msrpc
2766139/tcp filtered netbios-ssn
2767143/tcp open imap Dovecot imapd
2768|_imap-capabilities: STARTTLS ENABLE completed IDLE OK AUTH=DIGEST-MD5 Capability LITERAL+ AUTH=CRAM-MD5A0001 AUTH=PLAIN AUTH=LOGIN IMAP4rev1 ID SASL-IR LOGIN-REFERRALS
2769| ssl-cert: Subject: commonName=imap.example.com
2770| Issuer: commonName=imap.example.com
2771| Public Key type: rsa
2772| Public Key bits: 1024
2773| Signature Algorithm: sha1WithRSAEncryption
2774| Not valid before: 2015-06-12T12:04:14
2775| Not valid after: 2016-06-11T12:04:14
2776| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
2777|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
2778445/tcp filtered microsoft-ds
2779465/tcp filtered smtps
2780587/tcp filtered submission
2781993/tcp open ssl/imap Dovecot imapd
2782| ssl-cert: Subject: commonName=imap.example.com
2783| Issuer: commonName=imap.example.com
2784| Public Key type: rsa
2785| Public Key bits: 1024
2786| Signature Algorithm: sha1WithRSAEncryption
2787| Not valid before: 2015-06-12T12:04:14
2788| Not valid after: 2016-06-11T12:04:14
2789| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
2790|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
2791995/tcp open ssl/pop3 Dovecot pop3d
2792| ssl-cert: Subject: commonName=imap.example.com
2793| Issuer: commonName=imap.example.com
2794| Public Key type: rsa
2795| Public Key bits: 1024
2796| Signature Algorithm: sha1WithRSAEncryption
2797| Not valid before: 2015-06-12T12:04:14
2798| Not valid after: 2016-06-11T12:04:14
2799| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
2800|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
2801|_ssl-date: 2017-09-09T20:10:57+00:00; -2h01m12s from scanner time.
28023306/tcp open mysql MySQL (unauthorized)
2803Device type: general purpose
2804Running: Linux 2.6.X
2805OS CPE: cpe:/o:linux:linux_kernel:2.6.39
2806OS details: Linux 2.6.39
2807Uptime guess: 11.633 days (since Tue Aug 29 03:01:01 2017)
2808Network Distance: 11 hops
2809TCP Sequence Prediction: Difficulty=263 (Good luck!)
2810IP ID Sequence Generation: All zeros
2811Service Info: OS: Red Hat Enterprise Linux 6; CPE: cpe:/o:redhat:enterprise_linux:6
2812
2813Host script results:
2814|_clock-skew: mean: -2h01m12s, deviation: 0s, median: -2h01m12s
2815
2816TRACEROUTE (using port 23/tcp)
2817HOP RTT ADDRESS
28181 109.41 ms 10.13.0.1
28192 139.74 ms 37.187.24.252
28203 110.99 ms po101.gra-g2-a75.fr.eu (178.33.103.231)
28214 ...
28225 119.23 ms be100-1113.fra-5-a9.de.eu (91.121.131.19)
28236 119.39 ms be100-2.fra-1-a9.de.eu (94.23.122.217)
28247 ...
28258 124.23 ms vlan3555.bb1.ams2.nl.m247.com (176.10.83.128)
28269 120.71 ms 176.10.83.119
282710 ...
282811 120.01 ms no-reverse-dns-configured.com (80.82.79.11)
2829
2830NSE: Script Post-scanning.
2831Initiating NSE at 18:12
2832Completed NSE at 18:12, 0.00s elapsed
2833Initiating NSE at 18:12
2834Completed NSE at 18:12, 0.00s elapsed
2835Read data files from: /usr/bin/../share/nmap
2836OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
2837Nmap done: 1 IP address (1 host up) scanned in 57.29 seconds
2838 Raw packets sent: 240 (11.514KB) | Rcvd: 190 (8.816KB)
2839
2840
2841 _/ _/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/
2842 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
2843 _/ _/ _/_/_/_/ _/_/_/ _/ _/_/_/ _/_/_/_/ _/ _/_/_/ _/_/_/_
2844 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
2845 _/_/_/_/ _/ _/ _/ _/_/_/_/ _/_/_/_/ _/ _/_/_/_/ _/ _/ [v1.06]
2846
2847 _/ User-Agent Tester ↵
2848 _/ AKA: Purple Pimp ↵
2849 _/ ChrisJohnRiley ↵
2850 _/ blog.c22.cc ↵
2851
2852 [>] Performing initial request and confirming stability
2853 [>] Using User-Agent string Mozilla/5.0
2854
2855 [ ] URL (ENTERED): http://sgirls.hotdolls.info
2856 [ ] Response Code: 200 OK
2857 [ ] Server: nginx/1.12.1
2858 [ ] Date: Sat, 09 Sep 2017 20:11:32 GMT
2859 [ ] Content-Type: text/html; charset=UTF-8
2860 [ ] Transfer-Encoding: chunked
2861 [ ] Connection: close
2862 [ ] Accept-Ranges: bytes
2863 [ ] Data (MD5): 5a88814c10bc5fa844c7e4caf5726898
2864
2865 [1] Pass
2866 [2] Pass
2867 [3] Pass
2868
2869 [>] URL appears stable. Beginning test
2870
2871 [>] Using DEFAULT User-Agent Strings
2872
2873 [>] Using Crazy User-Agent Strings
2874 [>] Using Bot User-Agent Strings
2875
2876 [>] Output: [+] Added Headers, [-] Removed Headers, [!] Altered Headers, [ ] No Change
2877
2878
2879 [>] User-Agent String : msnbot-Products/1.0 (+http://search.msn.com/msnbot.htm)
2880
2881
2882 [!] Data (MD5): a9d4974aa64013e950d0ec1318cc27bf
2883
2884
2885 [>] User-Agent String : mmcrawler
2886
2887
2888 [!] Data (MD5): a9d4974aa64013e950d0ec1318cc27bf
2889
2890
2891 [>] Checks completed... try enabling VERBOSE mode for more detailed output
2892
2893 [>] That's all folks... Fo' Shizzle!
2894
2895
2896########################################################################################
2897Hostname sweet-stars.com ISP Quasi Networks LTD. (AS29073)
2898Continent Africa Flag
2899SC
2900Country Seychelles Country Code SC (SYC)
2901Region Unknown Local time 10 Sep 2017 05:09 +04
2902City Unknown Latitude -4.583
2903IP Address 93.174.91.159 Longitude 55.667
2904########################################################################################
2905sweet-stars.com
2906
2907###########################################################################################
2908
2909whois sweet-stars.com
2910 Domain Name: SWEET-STARS.COM
2911 Registry Domain ID: 1777584062_DOMAIN_COM-VRSN
2912 Registrar WHOIS Server: whois.bizcn.com
2913 Registrar URL: http://www.bizcn.com
2914 Updated Date: 2017-04-28T09:34:39Z
2915 Creation Date: 2013-01-31T20:46:58Z
2916 Registry Expiry Date: 2018-01-31T20:46:58Z
2917 Registrar: Bizcn.com, Inc.
2918 Registrar IANA ID: 471
2919 Registrar Abuse Contact Email:
2920 Registrar Abuse Contact Phone:
2921 Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
2922 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
2923 Name Server: NS23.CLOUDNS.NET
2924 Name Server: PNS21.CLOUDNS.NET
2925 Name Server: PNS23.CLOUDNS.NET
2926 Name Server: PNS24.CLOUDNS.NET
2927 Name Server: PNS28.CLOUDNS.NET
2928 Name Server: PNS30.CLOUDNS.NET
2929
2930Domain name: sweet-stars.com
2931Registry Domain ID: 1777584062_DOMAIN_COM-VRSN
2932Registrar WHOIS Server: whois.bizcn.com
2933Registrar URL: http://www.bizcn.com
2934Updated Date: 2016-02-06T01:30:12Z
2935Creation Date: 2013-01-31T20:46:58Z
2936Registrar Registration Expiration Date: 2018-01-31T20:46:58Z
2937Registrar: Bizcn.com,Inc.
2938Registrar IANA ID: 471
2939Registrar Abuse Contact Email: abuse@bizcn.com
2940Registrar Abuse Contact Phone: +86.5922577888
2941Reseller: Cnobin Technology HK Limited
2942Domain Status: clientDeleteProhibited (http://www.icann.org/epp#clientDeleteProhibited)
2943Domain Status: clientTransferProhibited (http://www.icann.org/epp#clientTransferProhibited)
2944Registry Registrant ID: Not Available From Registry
2945Registrant Name: Wuxi Yilian LLC
2946Registrant Organization: Wuxi Yilian LLC
2947Registrant Street: No.1001 Anling Road
2948Registrant City: Xiamen
2949Registrant State/Province: Fujian
2950Registrant Postal Code: 361008
2951Registrant Country: cn
2952Registrant Phone: +86.5922577888
2953Registrant Phone Ext:
2954Registrant Fax: +86.5922179606
2955Registrant Fax Ext:
2956Registrant Email: whoisprivacyprotect@whoisservices.cn
2957Registry Admin ID: Not Available From Registry
2958Admin Name: Wuxi Yilian LLC
2959Admin Organization: Wuxi Yilian LLC
2960Admin Street: No.1001 Anling Road
2961Admin City: Xiamen
2962Admin State/Province: Fujian
2963Admin Postal Code: 361008
2964Admin Country: cn
2965Admin Phone: +86.5922577888
2966Admin Phone Ext:
2967Admin Fax: +86.5922179606
2968Admin Fax Ext:
2969Admin Email: whoisprivacyprotect@whoisservices.cn
2970Registry Tech ID: Not Available From Registry
2971Tech Name: Wuxi Yilian LLC
2972Tech Organization: Wuxi Yilian LLC
2973Tech Street: No.1001 Anling Road
2974Tech City: Xiamen
2975Tech State/Province: Fujian
2976Tech Postal Code: 361008
2977Tech Country: cn
2978Tech Phone: +86.5922577888
2979Tech Phone Ext:
2980Tech Fax: +86.5922179606
2981Tech Fax Ext:
2982Tech Email: whoisprivacyprotect@whoisservices.cn
2983Name Server: pns23.cloudns.net
2984Name Server: pns24.cloudns.net
2985Name Server: pns21.cloudns.net
2986Name Server: pns28.cloudns.net
2987Name Server: pns30.cloudns.net
2988
2989###########################################################################################
2990
2991;sweet-stars.com. IN ANY
2992
2993;; ANSWER SECTION:
2994sweet-stars.com. 53 IN A 93.174.91.159
2995sweet-stars.com. 3387 IN NS pns24.cloudns.net.
2996sweet-stars.com. 3387 IN NS pns25.cloudns.net.
2997sweet-stars.com. 3387 IN NS pns27.cloudns.net.
2998sweet-stars.com. 3387 IN NS pns22.cloudns.net.
2999sweet-stars.com. 3387 IN NS pns21.cloudns.net.
3000sweet-stars.com. 3387 IN NS pns26.cloudns.net.
3001sweet-stars.com. 3387 IN NS ns24.cloudns.net.
3002sweet-stars.com. 3387 IN NS pns23.cloudns.net.
3003sweet-stars.com. 3387 IN NS ns21.cloudns.net.
3004sweet-stars.com. 3387 IN NS ns23.cloudns.net.
3005sweet-stars.com. 3387 IN NS pns30.cloudns.net.
3006sweet-stars.com. 3387 IN NS ns22.cloudns.net.
3007sweet-stars.com. 3387 IN NS pns29.cloudns.net.
3008sweet-stars.com. 3387 IN NS pns28.cloudns.net.
3009
3010
3011Running:
3012 traceroute -T -O info -i eth0 sweet-stars.com
3013traceroute to sweet-stars.com (93.174.91.159), 30 hops max, 60 byte packets
3014 1 gateway (192.168.1.254) 0.573 ms 0.755 ms 1.036 ms
3015 2 10.135.18.1 (10.135.18.1) 14.621 ms 19.836 ms 20.283 ms
3016 3 75.154.223.222 (75.154.223.222) 29.868 ms 30.001 ms 30.158 ms
3017 4 lag-113.ear3.NewYork1.Level3.net (4.15.212.245) 31.682 ms 31.773 ms 32.227 ms
3018 5 ae-238-3614.edge6.Amsterdam1.Level3.net (4.69.162.246) 104.520 ms ae-237-3613.edge6.Amsterdam1.Level3.net (4.69.162.242) 105.100 ms ae-238-3614.edge6.Amsterdam1.Level3.net (4.69.162.246) 105.247 ms
3019 6 * * *
3020 7 no-reverse-dns-configured.com (93.174.91.159) <syn,ack> 103.495 ms 103.355 ms 103.406 ms
3021
3022Checking for HTTP-Loadbalancing [Date]: 01:17:10, 01:17:10, 01:17:10, 01:17:11, 01:17:11, 01:17:11, 01:17:11, 01:17:12, 01:17:12, 01:17:12, 01:17:12, 01:17:13, 01:17:14, 01:17:14, 01:17:14, 01:17:15, 01:17:15, 01:17:15, 01:17:15, 01:17:16, 01:17:16, 01:17:17, 01:17:17, 01:17:17, 01:17:18, 01:17:18, 01:17:18, 01:17:18, 01:17:19, 01:17:19, 01:17:19, 01:17:19, 01:17:20, 01:17:20, 01:17:20, 01:17:20, 01:17:21, 01:17:21, 01:17:21, 01:17:22, 01:17:22, 01:17:22, 01:17:22, 01:17:26, 01:17:26, 01:17:27, 01:17:27, 01:17:27, 01:17:27, 01:17:28, NOT FOUND
3023
3024Checking for HTTP-Loadbalancing [Diff]: NOT FOUND
3025
3026sweet-stars.com does NOT use Load-balancing.
3027
3028###########################################################################################
3029
3030nmap -PN -n -F -T4 -sV -A -oG temp.txt sweet-stars.com
3031
3032Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 21:14 EDT
3033Nmap scan report for sweet-stars.com (93.174.91.159)
3034Host is up (0.19s latency).
3035Not shown: 89 closed ports
3036PORT STATE SERVICE VERSION
303721/tcp open ftp vsftpd 3.0.2
303822/tcp open ssh OpenSSH 6.0p1 Debian 4+deb7u6 (protocol 2.0)
3039| ssh-hostkey:
3040| 1024 ab:16:56:89:21:7e:75:1c:77:f3:a2:7e:c2:f1:4c:09 (DSA)
3041| 2048 22:f8:e3:f6:1a:1c:6a:99:09:6b:1e:7c:fd:30:e3:95 (RSA)
3042|_ 256 a8:03:f4:96:36:d1:39:de:2e:4f:56:e9:0f:f3:63:56 (ECDSA)
304325/tcp filtered smtp
304453/tcp open domain
304580/tcp open http nginx
3046|_http-server-header: nginx
3047|_http-title: underage models , girls inside
3048111/tcp open rpcbind 2-4 (RPC #100000)
3049135/tcp filtered msrpc
3050139/tcp filtered netbios-ssn
3051445/tcp filtered microsoft-ds
3052465/tcp filtered smtps
3053587/tcp filtered submission
3054Aggressive OS guesses: Linux 2.6.39 (95%), Linux 3.2 - 3.8 (95%), Linux 3.8 (95%), WatchGuard Fireware 11.8 (95%), Linux 3.1 - 3.2 (94%), Linux 3.5 (93%), Linux 2.6.32 - 2.6.39 (93%), Linux 3.0 - 3.2 (92%), Linux 2.6.32 - 3.0 (92%), Linux 2.6.32 (91%)
3055No exact OS matches for host (test conditions non-ideal).
3056Network Distance: 11 hops
3057Service Info: OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel
3058
3059TRACEROUTE (using port 110/tcp)
3060HOP RTT ADDRESS
30611 819.91 ms 10.13.0.1
30622 175.04 ms 37.187.24.252
30633 180.79 ms 178.33.103.231
30644 ...
30655 370.26 ms 91.121.131.19
30666 364.47 ms 94.23.122.217
30677 ...
30688 383.47 ms 176.10.83.128
30699 378.72 ms 176.10.83.5
307010 ...
307111 376.24 ms 93.174.91.159
3072
3073OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
3074Nmap done: 1 IP address (1 host up) scanned in 99.98 seconds
3075
3076###########################################################################################
3077
3078amap -i temp.txt
3079amap v5.4 (www.thc.org/thc-amap) started at 2017-09-09 21:15:53 - APPLICATION MAPPING mode
3080
3081Protocol on 93.174.91.159:21/tcp matches ftp
3082Protocol on 93.174.91.159:22/tcp matches ssh
3083Protocol on 93.174.91.159:22/tcp matches ssh-openssh
3084Protocol on 93.174.91.159:80/tcp matches http
3085Protocol on 93.174.91.159:111/tcp matches rpc
3086Protocol on 93.174.91.159:53/tcp matches dns
3087Protocol on 93.174.91.159:111/tcp matches rpc-rpcbind-v4
3088########################################################################################
3089inetnum: 93.174.91.0 - 93.174.91.255
3090netname: SC-QUASI52
3091descr: QUASI
3092country: SC
3093org: ORG-QNL3-RIPE
3094admin-c: QNL1-RIPE
3095tech-c: QNL1-RIPE
3096status: ASSIGNED PA
3097mnt-by: QUASINETWORKS-MNT
3098mnt-lower: QUASINETWORKS-MNT
3099mnt-routes: QUASINETWORKS-MNT
3100created: 2016-01-23T22:20:58Z
3101last-modified: 2016-01-23T22:20:58Z
3102source: RIPE
3103
3104organisation: ORG-QNL3-RIPE
3105org-name: Quasi Networks LTD.
3106org-type: OTHER
3107address: Suite 1, Second Floor
3108address: Sound & Vision House, Francis Rachel Street
3109address: Victoria, Mahe, SEYCHELLES
3110remarks: *****************************************************************************
3111remarks: IMPORTANT INFORMATION
3112remarks: *****************************************************************************
3113remarks: We are a high bandwidth network provider offering bandwidth solutions.
3114remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
3115remarks: Please only use abuse@quasinetworks.com for abuse reports.
3116remarks: For all other requests, please see the details on our website.
3117remarks: *****************************************************************************
3118abuse-mailbox: abuse@quasinetworks.com
3119abuse-c: AR34302-RIPE
3120mnt-ref: QUASINETWORKS-MNT
3121mnt-by: QUASINETWORKS-MNT
3122created: 2015-11-08T22:25:26Z
3123last-modified: 2015-11-27T09:37:50Z
3124source: RIPE # Filtered
3125
3126role: Quasi Networks LTD
3127address: Suite 1, Second Floor
3128address: Sound & Vision House, Francis Rachel Street
3129address: Victoria, Mahe, SEYCHELLES
3130remarks: *****************************************************************************
3131remarks: IMPORTANT INFORMATION
3132remarks: *****************************************************************************
3133remarks: We are a high bandwidth network provider offering bandwidth solutions.
3134remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
3135remarks: Please only use abuse@quasinetworks.com for abuse reports.
3136remarks: For all other requests, please see the details on our website.
3137remarks: *****************************************************************************
3138abuse-mailbox: abuse@quasinetworks.com
3139nic-hdl: QNL1-RIPE
3140mnt-by: QUASINETWORKS-MNT
3141created: 2015-11-07T22:43:04Z
3142last-modified: 2015-11-07T23:04:49Z
3143source: RIPE # Filtered
3144
3145% Information related to '93.174.88.0/21as29073'
3146
3147route: 93.174.88.0/21
3148descr: Quasi Networks LTD (IBC)
3149origin: as29073
3150mnt-by: QUASINETWORKS-MNT
3151created: 2008-06-20T15:33:47Z
3152last-modified: 2016-01-23T22:26:12Z
3153source: RIPE
3154
3155###########################################################################################
3156[i] Scanning Site: http://sweet-stars.com
3157
3158
3159
3160B A S I C I N F O
3161====================
3162
3163
3164[+] Site Title: underage models , girls inside
3165[+] IP address: 93.174.91.159
3166[+] Web Server: nginx
3167[+] CMS: Could Not Detect
3168[+] Cloudflare: Not Detected
3169[+] Robots File: Could NOT Find robots.txt!
3170
3171
3172
3173
3174W H O I S L O O K U P
3175========================
3176
3177 Domain Name: SWEET-STARS.COM
3178 Registry Domain ID: 1777584062_DOMAIN_COM-VRSN
3179 Registrar WHOIS Server: whois.bizcn.com
3180 Registrar URL: http://www.bizcn.com
3181 Updated Date: 2017-04-28T09:34:39Z
3182 Creation Date: 2013-01-31T20:46:58Z
3183 Registry Expiry Date: 2018-01-31T20:46:58Z
3184 Registrar: Bizcn.com, Inc.
3185 Registrar IANA ID: 471
3186 Registrar Abuse Contact Email:
3187 Registrar Abuse Contact Phone:
3188 Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
3189 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
3190 Name Server: NS23.CLOUDNS.NET
3191 Name Server: PNS21.CLOUDNS.NET
3192 Name Server: PNS23.CLOUDNS.NET
3193 Name Server: PNS24.CLOUDNS.NET
3194 Name Server: PNS28.CLOUDNS.NET
3195 Name Server: PNS30.CLOUDNS.NET
3196
3197
3198G E O I P L O O K U P
3199=========================
3200
3201[i] IP Address: 93.174.91.159
3202[i] Country: SC
3203[i] State: N/A
3204[i] City: N/A
3205[i] Latitude: -4.583300
3206[i] Longitude: 55.666698
3207
3208
3209
3210
3211H T T P H E A D E R S
3212=======================
3213
3214
3215[i] HTTP/1.1 200 OK
3216[i] Server: nginx
3217[i] Date: Sun, 10 Sep 2017 01:17:12 GMT
3218[i] Content-Type: text/html
3219[i] Connection: close
3220[i] Vary: Accept-Encoding
3221[i] X-Powered-By: PHP/5.4.45-0+deb7u8
3222[i] Vary: Accept-Encoding
3223
3224
3225
3226
3227D N S L O O K U P
3228===================
3229
3230sweet-stars.com. 56 IN A 93.174.91.159
3231sweet-stars.com. 3600 IN NS pns30.cloudns.net.
3232sweet-stars.com. 3600 IN NS pns22.cloudns.net.
3233sweet-stars.com. 3600 IN NS ns22.cloudns.net.
3234sweet-stars.com. 3600 IN NS ns24.cloudns.net.
3235sweet-stars.com. 3600 IN NS pns25.cloudns.net.
3236sweet-stars.com. 3600 IN NS pns29.cloudns.net.
3237sweet-stars.com. 3600 IN NS pns23.cloudns.net.
3238sweet-stars.com. 3600 IN NS ns23.cloudns.net.
3239sweet-stars.com. 3600 IN NS pns26.cloudns.net.
3240sweet-stars.com. 3600 IN NS pns24.cloudns.net.
3241sweet-stars.com. 3600 IN NS pns28.cloudns.net.
3242sweet-stars.com. 3600 IN NS pns27.cloudns.net.
3243sweet-stars.com. 3600 IN NS pns21.cloudns.net.
3244sweet-stars.com. 3600 IN NS ns21.cloudns.net.
3245sweet-stars.com. 3600 IN SOA ns21.cloudns.net. support.cloudns.net. 2017091008 7200 1800 1209600 3600
3246
3247
3248
3249
3250S U B N E T C A L C U L A T I O N
3251====================================
3252
3253Address = 93.174.91.159
3254Network = 93.174.91.159 / 32
3255Netmask = 255.255.255.255
3256Broadcast = not needed on Point-to-Point links
3257Wildcard Mask = 0.0.0.0
3258Hosts Bits = 0
3259Max. Hosts = 1 (2^0 - 0)
3260Host Range = { 93.174.91.159 - 93.174.91.159 }
3261
3262
3263
3264N M A P P O R T S C A N
3265============================
3266
3267
3268Starting Nmap 7.01 ( https://nmap.org ) at 2017-09-10 01:13 UTC
3269Nmap scan report for sweet-stars.com (93.174.91.159)
3270Host is up (0.082s latency).
3271rDNS record for 93.174.91.159: no-reverse-dns-configured.com
3272PORT STATE SERVICE VERSION
327321/tcp open ftp vsftpd 3.0.2
327422/tcp open ssh OpenSSH 6.0p1 Debian 4+deb7u6 (protocol 2.0)
327523/tcp closed telnet
327625/tcp closed smtp
327780/tcp open http nginx
3278110/tcp closed pop3
3279143/tcp closed imap
3280443/tcp closed https
3281445/tcp closed microsoft-ds
32823389/tcp closed ms-wbt-server
3283
3284
3285S U B - D O M A I N F I N D E R
3286==================================
3287
3288
3289[i] Total Subdomains Found : 1
3290
3291[+] Subdomain: sweet-stars.com
3292[-] IP: 93.174.91.159
3293sweet-stars.com
3294[*] Performing TLD Brute force Enumeration against sweet-stars.com
3295[*] The operation could take up to: 00:01:07
3296[*] A sweet-stars.biz.af 5.45.75.45
3297[*] CNAME sweet-stars.biz.at free.biz.at
3298[*] A free.biz.at 216.92.134.29
3299[*] A sweet-stars.co.asia 91.195.240.135
3300[*] A sweet-stars.org.aw 142.4.20.12
3301[*] A sweet-stars.co.ba 176.9.45.78
3302[*] A sweet-stars.com.ba 195.222.33.180
3303[*] A sweet-stars.com.be 95.173.170.166
3304[*] A sweet-stars.biz.by 71.18.52.2
3305[*] A sweet-stars.biz.bz 199.59.242.150
3306[*] A sweet-stars.com.cc 54.252.107.64
3307[*] A sweet-stars.net.cc 54.252.89.206
3308[*] A sweet-stars.co.cc 10.10.10.10
3309[*] A sweet-stars.org.ch 72.52.4.122
3310[*] A sweet-stars.co.cm 85.25.140.105
3311[*] A sweet-stars.net.cm 85.25.140.105
3312[*] A sweet-stars.biz.cl 185.53.178.8
3313[*] CNAME sweet-stars.biz.cm i.cns.cm
3314[*] A i.cns.cm 118.184.56.30
3315[*] A sweet-stars.com.com 52.33.196.199
3316[*] A sweet-stars.net.com 199.59.242.150
3317[*] A sweet-stars.org.com 23.23.86.44
3318[*] A sweet-stars.co.com 173.192.115.17
3319[*] A sweet-stars.com 93.174.91.159
3320[*] A sweet-stars.biz.cr 72.52.4.122
3321[*] A sweet-stars.biz.cx 72.52.4.122
3322[*] A sweet-stars.net.cz 80.250.24.177
3323[*] A sweet-stars.com.cz 62.109.128.30
3324[*] A sweet-stars.biz.cz 185.53.179.7
3325[*] CNAME sweet-stars.co.de co.de
3326[*] A co.de 144.76.162.245
3327[*] A sweet-stars.com.de 50.56.68.37
3328[*] CNAME sweet-stars.org.de www.org.de
3329[*] A www.org.de 78.47.128.8
3330[*] A sweet-stars.net.eu 78.46.90.98
3331[*] A sweet-stars.org.eu 78.46.90.98
3332[*] A sweet-stars.biz.fi 185.55.85.123
3333[*] A sweet-stars.fm 173.230.131.38
3334[*] A sweet-stars.biz.fm 173.230.131.38
3335[*] A sweet-stars.org.fr 149.202.133.35
3336[*] A sweet-stars.biz.gl 72.52.4.122
3337[*] CNAME sweet-stars.co.gp co.gp
3338[*] A co.gp 144.76.162.245
3339[*] A sweet-stars.co.hn 208.100.40.203
3340[*] CNAME sweet-stars.net.hr net.hr
3341[*] A net.hr 192.0.78.25
3342[*] A net.hr 192.0.78.24
3343[*] CNAME sweet-stars.biz.hn parkmydomain.vhostgo.com
3344[*] A parkmydomain.vhostgo.com 107.186.245.118
3345[*] A sweet-stars.co.ht 72.52.4.122
3346[*] A sweet-stars.co.jobs 50.17.193.222
3347[*] A sweet-stars.com.jobs 50.19.241.165
3348[*] A sweet-stars.net.jobs 50.19.241.165
3349[*] A sweet-stars.biz.jobs 50.19.241.165
3350[*] A sweet-stars.org.jobs 50.19.241.165
3351[*] A sweet-stars.biz.ky 199.184.144.27
3352[*] CNAME sweet-stars.biz.li 712936.parkingcrew.net
3353[*] A 712936.parkingcrew.net 185.53.179.29
3354[*] A sweet-stars.biz.lu 195.26.5.2
3355[*] A sweet-stars.biz.ly 64.136.20.39
3356[*] A sweet-stars.biz.md 72.52.4.122
3357[*] A sweet-stars.co.mk 87.76.31.211
3358[*] A sweet-stars.co.mobi 54.225.105.179
3359[*] A sweet-stars.biz.my 202.190.174.44
3360[*] A sweet-stars.co.net 188.166.216.219
3361[*] A sweet-stars.net.net 52.50.81.210
3362[*] A sweet-stars.org.net 23.23.86.44
3363[*] A sweet-stars.co.nl 37.97.184.204
3364[*] A sweet-stars.com.nl 83.98.157.102
3365[*] A sweet-stars.net.nl 83.98.157.102
3366[*] A sweet-stars.co.nr 208.100.40.202
3367[*] CNAME sweet-stars.co.nu co.nu
3368[*] A co.nu 144.76.162.245
3369[*] CNAME sweet-stars.com.nu com.nu
3370[*] A com.nu 144.76.162.245
3371[*] A sweet-stars.net.nu 199.102.76.78
3372[*] A sweet-stars.org.nu 80.92.84.139
3373[*] A sweet-stars.com.org 23.23.86.44
3374[*] CNAME sweet-stars.net.org pewtrusts.org
3375[*] A pewtrusts.org 204.74.99.100
3376[*] A sweet-stars.ph 45.79.222.138
3377[*] A sweet-stars.co.ph 45.79.222.138
3378[*] A sweet-stars.com.ph 45.79.222.138
3379[*] A sweet-stars.org.ph 45.79.222.138
3380[*] A sweet-stars.net.ph 45.79.222.138
3381[*] A sweet-stars.co.pl 212.91.6.55
3382[*] A sweet-stars.org.pm 208.73.211.165
3383[*] A sweet-stars.org.pm 208.73.210.217
3384[*] A sweet-stars.org.pm 208.73.211.177
3385[*] A sweet-stars.org.pm 208.73.210.202
3386[*] A sweet-stars.co.ps 66.96.132.56
3387[*] CNAME sweet-stars.biz.ps biz.ps
3388[*] A biz.ps 144.76.162.245
3389[*] A sweet-stars.co.pt 194.107.127.52
3390[*] A sweet-stars.pw 141.8.226.58
3391[*] A sweet-stars.co.pw 141.8.226.59
3392[*] A sweet-stars.net.pw 141.8.226.59
3393[*] A sweet-stars.biz.pw 141.8.226.59
3394[*] A sweet-stars.org.pw 141.8.226.59
3395[*] CNAME sweet-stars.co.ro now.co.ro
3396[*] A now.co.ro 185.27.255.9
3397[*] A sweet-stars.net.ro 69.64.52.127
3398[*] A sweet-stars.org.re 217.70.184.38
3399[*] A sweet-stars.com.ru 178.210.89.119
3400[*] A sweet-stars.biz.se 185.53.179.6
3401[*] CNAME sweet-stars.net.se 773147.parkingcrew.net
3402[*] A 773147.parkingcrew.net 185.53.179.29
3403[*] A sweet-stars.co.sl 91.195.240.135
3404[*] A sweet-stars.com.sr 143.95.106.249
3405[*] A sweet-stars.biz.st 91.121.28.115
3406[*] A sweet-stars.co.su 72.52.4.122
3407[*] A sweet-stars.biz.tc 64.136.20.39
3408[*] A sweet-stars.biz.tf 85.236.153.18
3409[*] A sweet-stars.net.tf 188.40.70.27
3410[*] A sweet-stars.net.tf 188.40.117.12
3411[*] A sweet-stars.net.tf 188.40.70.29
3412[*] A sweet-stars.tk 195.20.46.189
3413[*] A sweet-stars.co.tl 208.100.40.202
3414[*] A sweet-stars.co.to 175.118.124.44
3415[*] A sweet-stars.co.tv 31.186.25.163
3416[*] A sweet-stars.biz.tv 72.52.4.122
3417[*] A sweet-stars.org.tv 72.52.4.122
3418[*] CNAME sweet-stars.biz.uz biz.uz
3419[*] A biz.uz 144.76.162.245
3420[*] A sweet-stars.vg 88.198.29.97
3421[*] A sweet-stars.co.vg 88.198.29.97
3422[*] A sweet-stars.com.vg 88.198.29.97
3423[*] A sweet-stars.net.vg 68.178.254.180
3424[*] A sweet-stars.biz.vg 89.31.143.20
3425[*] A sweet-stars.biz.ws 184.168.221.104
3426[*] A sweet-stars.ws 64.70.19.203
3427[*] A sweet-stars.com.ws 202.4.48.211
3428[*] A sweet-stars.org.ws 202.4.48.211
3429[*] A sweet-stars.net.ws 202.4.48.211
3430 Domain Name: SWEET-STARS.COM
3431 Registry Domain ID: 1777584062_DOMAIN_COM-VRSN
3432 Registrar WHOIS Server: whois.bizcn.com
3433 Registrar URL: http://www.bizcn.com
3434 Updated Date: 2017-04-28T09:34:39Z
3435 Creation Date: 2013-01-31T20:46:58Z
3436 Registry Expiry Date: 2018-01-31T20:46:58Z
3437 Registrar: Bizcn.com, Inc.
3438 Registrar IANA ID: 471
3439 Registrar Abuse Contact Email:
3440 Registrar Abuse Contact Phone:
3441 Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
3442 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
3443 Name Server: NS23.CLOUDNS.NET
3444 Name Server: PNS21.CLOUDNS.NET
3445 Name Server: PNS23.CLOUDNS.NET
3446 Name Server: PNS24.CLOUDNS.NET
3447 Name Server: PNS28.CLOUDNS.NET
3448 Name Server: PNS30.CLOUDNS.NET
3449
3450Domain name: sweet-stars.com
3451Registry Domain ID: 1777584062_DOMAIN_COM-VRSN
3452Registrar WHOIS Server: whois.bizcn.com
3453Registrar URL: http://www.bizcn.com
3454Updated Date: 2016-02-06T01:30:12Z
3455Creation Date: 2013-01-31T20:46:58Z
3456Registrar Registration Expiration Date: 2018-01-31T20:46:58Z
3457Registrar: Bizcn.com,Inc.
3458Registrar IANA ID: 471
3459Registrar Abuse Contact Email: abuse@bizcn.com
3460Registrar Abuse Contact Phone: +86.5922577888
3461Reseller: Cnobin Technology HK Limited
3462Domain Status: clientDeleteProhibited (http://www.icann.org/epp#clientDeleteProhibited)
3463Domain Status: clientTransferProhibited (http://www.icann.org/epp#clientTransferProhibited)
3464Registry Registrant ID: Not Available From Registry
3465Registrant Name: Wuxi Yilian LLC
3466Registrant Organization: Wuxi Yilian LLC
3467Registrant Street: No.1001 Anling Road
3468Registrant City: Xiamen
3469Registrant State/Province: Fujian
3470Registrant Postal Code: 361008
3471Registrant Country: cn
3472Registrant Phone: +86.5922577888
3473Registrant Phone Ext:
3474Registrant Fax: +86.5922179606
3475Registrant Fax Ext:
3476Registrant Email: whoisprivacyprotect@whoisservices.cn
3477Registry Admin ID: Not Available From Registry
3478Admin Name: Wuxi Yilian LLC
3479Admin Organization: Wuxi Yilian LLC
3480Admin Street: No.1001 Anling Road
3481Admin City: Xiamen
3482Admin State/Province: Fujian
3483Admin Postal Code: 361008
3484Admin Country: cn
3485Admin Phone: +86.5922577888
3486Admin Phone Ext:
3487Admin Fax: +86.5922179606
3488Admin Fax Ext:
3489Admin Email: whoisprivacyprotect@whoisservices.cn
3490Registry Tech ID: Not Available From Registry
3491Tech Name: Wuxi Yilian LLC
3492Tech Organization: Wuxi Yilian LLC
3493Tech Street: No.1001 Anling Road
3494Tech City: Xiamen
3495Tech State/Province: Fujian
3496Tech Postal Code: 361008
3497Tech Country: cn
3498Tech Phone: +86.5922577888
3499Tech Phone Ext:
3500Tech Fax: +86.5922179606
3501Tech Fax Ext:
3502Tech Email: whoisprivacyprotect@whoisservices.cn
3503Name Server: pns23.cloudns.net
3504Name Server: pns24.cloudns.net
3505Name Server: pns21.cloudns.net
3506Name Server: pns28.cloudns.net
3507Name Server: pns30.cloudns.net
3508Name Server: ns23.cloudns.net
3509
3510
3511;sweet-stars.com. IN ANY
3512
3513;; ANSWER SECTION:
3514sweet-stars.com. 3405 IN NS pns22.cloudns.net.
3515sweet-stars.com. 3405 IN NS pns29.cloudns.net.
3516sweet-stars.com. 3405 IN NS pns27.cloudns.net.
3517sweet-stars.com. 3405 IN NS ns23.cloudns.net.
3518sweet-stars.com. 3405 IN NS pns30.cloudns.net.
3519sweet-stars.com. 3405 IN NS pns26.cloudns.net.
3520sweet-stars.com. 3405 IN NS ns21.cloudns.net.
3521sweet-stars.com. 3405 IN NS pns21.cloudns.net.
3522sweet-stars.com. 3405 IN NS ns24.cloudns.net.
3523sweet-stars.com. 3405 IN NS pns28.cloudns.net.
3524sweet-stars.com. 3405 IN NS ns22.cloudns.net.
3525sweet-stars.com. 3405 IN NS pns24.cloudns.net.
3526sweet-stars.com. 3405 IN NS pns23.cloudns.net.
3527sweet-stars.com. 3405 IN NS pns25.cloudns.net.
3528
3529Running:
3530 traceroute -T -O info -i eth0 sweet-stars.com
3531traceroute to sweet-stars.com (93.174.91.159), 30 hops max, 60 byte packets
3532 1 gateway (192.168.1.254) 0.585 ms 0.752 ms 0.903 ms
3533 2 10.135.18.1 (10.135.18.1) 7.369 ms 8.954 ms 11.017 ms
3534 3 75.154.223.222 (75.154.223.222) 30.014 ms 30.119 ms 30.239 ms
3535 4 lag-113.ear3.NewYork1.Level3.net (4.15.212.245) 30.476 ms 30.600 ms 31.257 ms
3536 5 ae-237-3613.edge6.Amsterdam1.Level3.net (4.69.162.242) 104.650 ms ae-238-3614.edge6.Amsterdam1.Level3.net (4.69.162.246) 104.700 ms ae-237-3613.edge6.Amsterdam1.Level3.net (4.69.162.242) 104.792 ms
3537 6 * * *
3538 7 no-reverse-dns-configured.com (93.174.91.159) <syn,ack> 103.543 ms 103.648 ms 103.762 ms
3539
3540
3541Smartmatch is experimental at /usr/bin/dnsenum line 698.
3542Smartmatch is experimental at /usr/bin/dnsenum line 698.
3543dnsenum VERSION:1.2.4
3544Warning: can't load Net::Whois::IP module, whois queries disabled.
3545
3546----- sweet-stars.com -----
3547
3548
3549Host's addresses:
3550__________________
3551
3552sweet-stars.com. 59 IN A 93.174.91.159
3553
3554
3555Wildcard detection using: szjfzngswkju
3556_______________________________________
3557
3558szjfzngswkju.sweet-stars.com. 60 IN A 93.174.91.159
3559
3560
3561!!!!!!!!!!!!!!!!!!!!!!!!!!!!
3562
3563 Wildcards detected, all subdomains will point to the same IP address
3564 Omitting results containing 93.174.91.159.
3565 Maybe you are using OpenDNS servers.
3566
3567!!!!!!!!!!!!!!!!!!!!!!!!!!!!
3568
3569
3570Name Servers:
3571______________
3572
3573pns30.cloudns.net. 130380 IN A 185.136.96.96
3574ns21.cloudns.net. 62414 IN A 109.201.133.61
3575pns27.cloudns.net. 38643 IN A 185.136.98.96
3576pns25.cloudns.net. 38643 IN A 185.136.96.96
3577pns24.cloudns.net. 123043 IN A 185.136.99.96
3578pns26.cloudns.net. 38643 IN A 185.136.97.96
3579pns29.cloudns.net. 38643 IN A 185.136.96.96
3580pns23.cloudns.net. 161369 IN A 185.136.98.96
3581pns22.cloudns.net. 123043 IN A 185.136.97.96
3582ns22.cloudns.net. 140732 IN A 108.59.2.202
3583ns24.cloudns.net. 156473 IN A 46.165.221.164
3584pns21.cloudns.net. 123043 IN A 185.136.96.96
3585pns28.cloudns.net. 172800 IN A 185.136.99.96
3586ns23.cloudns.net. 172800 IN A 79.137.84.65
3587
3588
3589Mail (MX) Servers:
3590___________________
3591
3592
3593
3594
3595sweet-stars.com class C netranges:
3596___________________________________
3597
3598 93.174.91.0/24
3599
3600
3601Performing reverse lookup on 256 ip addresses:
3602_______________________________________________
3603
3604
36050 results out of 256 IP addresses.
3606
3607
3608
3609WhatWeb report for http://sweet-stars.com
3610Status : 200 OK
3611Title : underage models , girls inside
3612IP : 93.174.91.159
3613Country : NETHERLANDS, NL
3614
3615Summary : Google-API[ajax/libs/jquery/1.10.2/jquery.min.js], X-Powered-By[PHP/5.4.45-0+deb7u8], HTTPServer[nginx], PHP[5.4.45-0+deb7u8], nginx, JQuery, Script[text/javascript]
3616
3617Detected Plugins:
3618[ Google-API ]
3619 This plugin identifies references to Google API in
3620 <script>.
3621
3622 String : ajax/libs/jquery/1.10.2/jquery.min.js
3623
3624[ HTTPServer ]
3625 HTTP server header string. This plugin also attempts to
3626 identify the operating system from the server header.
3627
3628 String : nginx (from server string)
3629
3630[ JQuery ]
3631 A fast, concise, JavaScript that simplifies how to traverse
3632 HTML documents, handle events, perform animations, and add
3633 AJAX.
3634
3635 Website : http://jquery.com/
3636
3637[ PHP ]
3638 PHP is a widely-used general-purpose scripting language
3639 that is especially suited for Web development and can be
3640 embedded into HTML. This plugin identifies PHP errors,
3641 modules and versions and extracts the local file path and
3642 username if present.
3643
3644 Version : 5.4.45-0+deb7u8
3645 Google Dorks: (2)
3646 Website : http://www.php.net/
3647
3648[ Script ]
3649 This plugin detects instances of script HTML elements and
3650 returns the script language/type.
3651
3652 String : text/javascript
3653
3654[ X-Powered-By ]
3655 X-Powered-By HTTP header
3656
3657 String : PHP/5.4.45-0+deb7u8 (from x-powered-by string)
3658
3659[ nginx ]
3660 Nginx (Engine-X) is a free, open-source, high-performance
3661 HTTP server and reverse proxy, as well as an IMAP/POP3
3662 proxy server.
3663
3664 Website : http://nginx.net/
3665
3666HTTP Headers:
3667 HTTP/1.1 200 OK
3668 Server: nginx
3669 Date: Sun, 10 Sep 2017 01:22:22 GMT
3670 Content-Type: text/html
3671 Content-Length: 9266
3672 Connection: close
3673 X-Powered-By: PHP/5.4.45-0+deb7u8
3674 Vary: Accept-Encoding
3675 Content-Encoding: gzip
3676
3677
3678
3679[+] Hosts found in search engines:
3680------------------------------------
3681[-] Resolving hostnames IPs...
368293.174.91.159:www.sweet-stars.com
3683
3684
3685
3686 ^ ^
3687 _ __ _ ____ _ __ _ _ ____
3688 ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
3689 | V V // o // _/ | V V // 0 // 0 // _/
3690 |_n_,'/_n_//_/ |_n_,' \_,' \_,'/_/
3691 <
3692 ...'
3693
3694 WAFW00F - Web Application Firewall Detection Tool
3695
3696 By Sandro Gauci && Wendel G. Henrique
3697
3698Checking http://sweet-stars.com
3699Generic Detection results:
3700No WAF detected by the generic detection
3701Number of requests: 13
3702
3703
3704DNS Servers for sweet-stars.com:
3705 pns30.cloudns.net
3706 pns23.cloudns.net
3707 ns21.cloudns.net
3708 pns21.cloudns.net
3709 pns22.cloudns.net
3710 ns23.cloudns.net
3711 pns24.cloudns.net
3712 pns28.cloudns.net
3713 ns22.cloudns.net
3714 pns26.cloudns.net
3715 pns25.cloudns.net
3716 pns29.cloudns.net
3717 pns27.cloudns.net
3718 ns24.cloudns.net
3719
3720Checking for HTTP-Loadbalancing [Date]: 01:28:33, 01:28:34, 01:28:34, 01:28:34, 01:28:34, 01:28:35, 01:28:35, 01:28:35, 01:28:35, 01:28:36, 01:28:36, 01:28:36, 01:28:36, 01:28:37, 01:28:37, 01:28:37, 01:28:38, 01:28:38, 01:28:38, 01:28:38, 01:28:39, 01:28:39, 01:28:39, 01:28:39, 01:28:40, 01:28:40, 01:28:40, 01:28:40, 01:28:41, 01:28:41, 01:28:41, 01:28:42, 01:28:42, 01:28:42, 01:28:42, 01:28:43, 01:28:43, 01:28:43, 01:28:43, 01:28:44, 01:28:44, 01:28:44, 01:28:44, 01:28:45, 01:28:45, 01:28:45, 01:28:46, 01:28:46, 01:28:46, 01:28:46, NOT FOUND
3721
3722Checking for HTTP-Loadbalancing [Diff]: NOT FOUND
3723
3724sweet-stars.com does NOT use Load-balancing.
3725
3726
3727
3728Starting smtp-user-enum v1.2 ( http://pentestmonkey.net/tools/smtp-user-enum )
3729
3730 ----------------------------------------------------------
3731| Scan Information |
3732 ----------------------------------------------------------
3733
3734Mode ..................... VRFY
3735Worker Processes ......... 5
3736Usernames file ........... users.txt
3737Target count ............. 1
3738Username count ........... 494
3739Target TCP port .......... 25
3740Query timeout ............ 5 secs
3741Target domain ............
3742
3743######## Scan started at Sat Sep 9 21:25:21 2017 #########
3744######## Scan completed at Sat Sep 9 21:33:36 2017 #########
37450 results.
3746
3747494 queries in 495 seconds (1.0 queries / sec)
3748
3749
3750
3751Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 21:33 EDT
3752NSE: Loaded 146 scripts for scanning.
3753NSE: Script Pre-scanning.
3754Initiating NSE at 21:33
3755Completed NSE at 21:33, 0.00s elapsed
3756Initiating NSE at 21:33
3757Completed NSE at 21:33, 0.00s elapsed
3758Failed to resolve "sweet-stars.com.txt".
3759Initiating Parallel DNS resolution of 1 host. at 21:33
3760Completed Parallel DNS resolution of 1 host. at 21:33, 0.59s elapsed
3761Initiating SYN Stealth Scan at 21:33
3762Scanning sweet-stars.com (93.174.91.159) [100 ports]
3763Discovered open port 53/tcp on 93.174.91.159
3764Discovered open port 21/tcp on 93.174.91.159
3765Discovered open port 80/tcp on 93.174.91.159
3766Discovered open port 22/tcp on 93.174.91.159
3767Discovered open port 111/tcp on 93.174.91.159
3768Increasing send delay for 93.174.91.159 from 0 to 5 due to 63 out of 156 dropped probes since last increase.
3769Completed SYN Stealth Scan at 21:33, 5.94s elapsed (100 total ports)
3770Initiating Service scan at 21:33
3771Scanning 5 services on sweet-stars.com (93.174.91.159)
3772Completed Service scan at 21:34, 32.98s elapsed (5 services on 1 host)
3773Initiating OS detection (try #1) against sweet-stars.com (93.174.91.159)
3774Retrying OS detection (try #2) against sweet-stars.com (93.174.91.159)
3775Initiating Traceroute at 21:34
3776Completed Traceroute at 21:34, 3.00s elapsed
3777Initiating Parallel DNS resolution of 8 hosts. at 21:34
3778Completed Parallel DNS resolution of 8 hosts. at 21:34, 5.64s elapsed
3779NSE: Script scanning 93.174.91.159.
3780Initiating NSE at 21:34
3781Completed NSE at 21:35, 56.65s elapsed
3782Initiating NSE at 21:35
3783Completed NSE at 21:35, 0.25s elapsed
3784Nmap scan report for sweet-stars.com (93.174.91.159)
3785Host is up (0.20s latency).
3786rDNS record for 93.174.91.159: no-reverse-dns-configured.com
3787Not shown: 89 closed ports
3788PORT STATE SERVICE VERSION
378921/tcp open ftp vsftpd 3.0.2
379022/tcp open ssh OpenSSH 6.0p1 Debian 4+deb7u6 (protocol 2.0)
3791| ssh-hostkey:
3792| 1024 ab:16:56:89:21:7e:75:1c:77:f3:a2:7e:c2:f1:4c:09 (DSA)
3793| 2048 22:f8:e3:f6:1a:1c:6a:99:09:6b:1e:7c:fd:30:e3:95 (RSA)
3794|_ 256 a8:03:f4:96:36:d1:39:de:2e:4f:56:e9:0f:f3:63:56 (ECDSA)
379525/tcp filtered smtp
379653/tcp open domain
379780/tcp open http nginx
3798|_http-favicon: Unknown favicon MD5: 7E7A46308882211FDA59242CD1F72677
3799| http-methods:
3800|_ Supported Methods: OPTIONS
3801|_http-server-header: nginx
3802|_http-title: underage models , girls inside
3803111/tcp open rpcbind 2-4 (RPC #100000)
3804| rpcinfo:
3805| program version port/proto service
3806| 100000 2,3,4 111/tcp rpcbind
3807| 100000 2,3,4 111/udp rpcbind
3808| 100024 1 43806/udp status
3809|_ 100024 1 59220/tcp status
3810135/tcp filtered msrpc
3811139/tcp filtered netbios-ssn
3812445/tcp filtered microsoft-ds
3813465/tcp filtered smtps
3814587/tcp filtered submission
3815Aggressive OS guesses: Linux 2.6.39 (96%), Linux 3.2 - 3.8 (94%), Linux 3.8 (94%), WatchGuard Fireware 11.8 (94%), Linux 3.1 - 3.2 (94%), Linux 2.6.32 - 2.6.39 (92%), Linux 3.5 (92%), Linux 3.0 - 3.2 (91%), Linux 2.6.32 (91%), Linux 3.0 (91%)
3816No exact OS matches for host (test conditions non-ideal).
3817Uptime guess: 6.381 days (since Sun Sep 3 12:27:22 2017)
3818Network Distance: 11 hops
3819TCP Sequence Prediction: Difficulty=262 (Good luck!)
3820IP ID Sequence Generation: All zeros
3821Service Info: OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel
3822
3823TRACEROUTE (using port 554/tcp)
3824HOP RTT ADDRESS
38251 109.21 ms 10.13.0.1
38262 109.64 ms 37.187.24.252
38273 777.41 ms po101.gra-g2-a75.fr.eu (178.33.103.231)
38284 ...
38295 781.79 ms be100-1113.fra-5-a9.de.eu (91.121.131.19)
38306 787.73 ms be100-2.fra-1-a9.de.eu (94.23.122.217)
38317 ...
38328 800.72 ms vlan3555.bb1.ams2.nl.m247.com (176.10.83.128)
38339 796.26 ms 176.10.83.5
383410 ...
383511 794.06 ms no-reverse-dns-configured.com (93.174.91.159)
3836
3837NSE: Script Post-scanning.
3838Initiating NSE at 21:35
3839Completed NSE at 21:35, 0.00s elapsed
3840Initiating NSE at 21:35
3841Completed NSE at 21:35, 0.00s elapsed
3842Read data files from: /usr/bin/../share/nmap
3843OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
3844Nmap done: 1 IP address (1 host up) scanned in 111.53 seconds
3845 Raw packets sent: 347 (21.124KB) | Rcvd: 311 (19.797KB)
3846
3847
3848Error: can not open nmap file: sweet-stars.com.txt
3849
3850
3851httprint v0.301 (beta) - web server fingerprinting tool
3852(c) 2003-2005 net-square solutions pvt. ltd. - see readme.txt
3853http://net-square.com/httprint/
3854httprint@net-square.com
3855
3856Finger Printing on http://sweet-stars.com:80/
3857Finger Printing Completed on http://sweet-stars.com:80/
3858--------------------------------------------------
3859Host: sweet-stars.com
3860Fingerprinting Error: Host/URL not found...
3861
3862--------------------------------------------------
3863
3864
3865
3866
3867 _/ _/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/
3868 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
3869 _/ _/ _/_/_/_/ _/_/_/ _/ _/_/_/ _/_/_/_/ _/ _/_/_/ _/_/_/_
3870 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
3871 _/_/_/_/ _/ _/ _/ _/_/_/_/ _/_/_/_/ _/ _/_/_/_/ _/ _/ [v1.06]
3872
3873 _/ User-Agent Tester ↵
3874 _/ AKA: Purple Pimp ↵
3875 _/ ChrisJohnRiley ↵
3876 _/ blog.c22.cc ↵
3877
3878 [>] Performing initial request and confirming stability
3879 [>] Using User-Agent string Mozilla/5.0
3880
3881 [ ] URL (ENTERED): http://sweet-stars.com
3882 [ ] Response Code: 200 OK
3883 [ ] Server: nginx
3884 [ ] Date: Sun, 10 Sep 2017 01:39:14 GMT
3885 [ ] Content-Type: text/html
3886 [ ] Transfer-Encoding: chunked
3887 [ ] Connection: close
3888 [ ] Vary: Accept-Encoding
3889 [ ] X-Powered-By: PHP/5.4.45-0+deb7u8
3890 [ ] Vary: Accept-Encoding
3891 [ ] Data (MD5): 047b7a519f332eb24d7b85463adbb1b0
3892
3893 [1] Pass
3894 [2] Pass
3895 [3] Pass
3896
3897 [>] URL appears stable. Beginning test
3898
3899 [>] Using DEFAULT User-Agent Strings
3900
3901 [>] Using Crazy User-Agent Strings
3902 [>] Using Bot User-Agent Strings
3903
3904 [>] Output: [+] Added Headers, [-] Removed Headers, [!] Altered Headers, [ ] No Change
3905
3906
3907 [>] User-Agent String : Windows-Media-Player/9.00.00.4503
3908
3909
3910 [!] Data (MD5): 27906c20f87b08bdd02a78d8452a371d
3911
3912
3913 [>] User-Agent String : Mozilla/5.0 (PLAYSTATION 3; 2.00)
3914
3915
3916 [!] Data (MD5): 27906c20f87b08bdd02a78d8452a371d
3917
3918
3919 [>] User-Agent String : TrackBack/1.02
3920
3921
3922 [!] Data (MD5): 27906c20f87b08bdd02a78d8452a371d
3923
3924
3925 [>] User-Agent String : wispr
3926
3927
3928 [!] Data (MD5): 27906c20f87b08bdd02a78d8452a371d
3929
3930
3931 [>] User-Agent String : EMPTY USER-AGENT STRING!
3932
3933
3934 [!] Data (MD5): 27906c20f87b08bdd02a78d8452a371d
3935
3936
3937 [>] User-Agent String : Googlebot/2.1 (+http://www.google.com/bot.html)
3938
3939
3940 [!] Data (MD5): 27906c20f87b08bdd02a78d8452a371d
3941
3942
3943 [>] User-Agent String : Googlebot-Image/1.0
3944
3945
3946 [!] Data (MD5): 27906c20f87b08bdd02a78d8452a371d
3947
3948
3949 [>] User-Agent String : Mediapartners-Google
3950
3951
3952 [!] Data (MD5): 27906c20f87b08bdd02a78d8452a371d
3953
3954
3955 [>] User-Agent String : Mozilla/2.0 (compatible; Ask Jeeves)
3956
3957
3958 [!] Data (MD5): 27906c20f87b08bdd02a78d8452a371d
3959
3960
3961 [>] User-Agent String : msnbot-Products/1.0 (+http://search.msn.com/msnbot.htm)
3962
3963
3964 [!] Data (MD5): 27906c20f87b08bdd02a78d8452a371d
3965
3966
3967 [>] User-Agent String : mmcrawler
3968
3969
3970 [!] Data (MD5): 27906c20f87b08bdd02a78d8452a371d
3971
3972
3973 [>] Checks completed... try enabling VERBOSE mode for more detailed output
3974
3975 [>] That's all folks... Fo' Shizzle!
3976
3977#########################################################################################
3978
3979Hostname top.models-list.org ISP Quasi Networks LTD. (AS29073)
3980Continent Africa Flag
3981SC
3982Country Seychelles Country Code SC (SYC)
3983Region Unknown Local time 10 Sep 2017 05:31 +04
3984City Unknown Latitude -4.583
3985IP Address 89.248.166.76 Longitude 55.667
3986########################################################################################
3987
3988top.models-list.org
3989
3990;top.models-list.org. IN ANY
3991
3992;; ANSWER SECTION:
3993top.models-list.org. 2206 IN A 89.248.166.76
3994
3995;; Query time: 8 msec
3996;; SERVER: 192.168.1.254#53(192.168.1.254)
3997;; WHEN: Sat Sep 09 21:32:45 EDT 2017
3998;; MSG SIZE rcvd: 64
3999
4000
4001###########################################################################################
4002
4003tcptraceroute -i eth0 top.models-list.org
4004
4005Running:
4006 traceroute -T -O info -i eth0 top.models-list.org
4007traceroute to top.models-list.org (89.248.166.76), 30 hops max, 60 byte packets
4008 1 gateway (192.168.1.254) 0.461 ms 0.749 ms 0.937 ms
4009 2 10.135.18.1 (10.135.18.1) 7.968 ms 17.261 ms 25.470 ms
4010 3 75.154.223.222 (75.154.223.222) 29.491 ms 30.040 ms 30.176 ms
4011 4 lag-113.ear3.NewYork1.Level3.net (4.15.212.245) 30.415 ms 31.690 ms 31.760 ms
4012 5 ae-240-3616.edge6.Amsterdam1.Level3.net (4.69.162.254) 104.478 ms 104.847 ms ae-238-3614.edge6.Amsterdam1.Level3.net (4.69.162.246) 104.684 ms
4013 6 * * *
4014 7 no-reverse-dns-configured.com (89.248.166.76) <syn,ack> 103.613 ms 103.658 ms 104.076 ms
4015
4016###########################################################################################
4017
4018Checking for HTTP-Loadbalancing [Date]: 23:31:51, 23:31:51, 23:31:51, 23:31:51, 23:31:52, 23:31:52, 23:31:52, 23:31:53, 23:31:53, 23:31:53, 23:31:53, 23:31:54, 23:31:54, 23:31:54, 23:31:54, 23:31:55, 23:31:55, 23:31:55, 23:31:55, 23:31:56, 23:31:56, 23:31:56, 23:31:57, 23:31:57, 23:31:57, 23:31:57, 23:31:58, 23:31:58, 23:31:58, 23:31:58, 23:31:59, 23:31:59, 23:31:59, 23:31:59, 23:32:00, 23:32:00, 23:32:00, 23:32:00, 23:32:01, 23:32:01, 23:32:01, 23:32:02, 23:32:02, 23:32:02, 23:32:02, 23:32:03, 23:32:03, 23:32:03, 23:32:03, 23:32:04, NOT FOUND
4019
4020Checking for HTTP-Loadbalancing [Diff]: NOT FOUND
4021
4022top.models-list.org does NOT use Load-balancing.
4023
4024
4025###########################################################################################
4026
4027nmap -PN -n -F -T4 -sV -A -oG temp.txt top.models-list.org
4028
4029Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 21:33 EDT
4030Nmap scan report for top.models-list.org (89.248.166.76)
4031Host is up (0.13s latency).
4032Not shown: 84 closed ports
4033PORT STATE SERVICE VERSION
403421/tcp filtered ftp
403522/tcp filtered ssh
403625/tcp filtered smtp
403753/tcp open domain ISC BIND 9.8.2rc1
4038| dns-nsid:
4039|_ bind.version: 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4
404080/tcp open http nginx 1.12.1
4041| http-methods:
4042|_ Potentially risky methods: TRACE
4043|_http-server-header: nginx/1.12.1
4044|_http-title: REAL Preteen Galleries! Unbelievable OMG !! Smallest beautiful...
404581/tcp filtered hosts2-ns
4046110/tcp open pop3 Dovecot pop3d
4047|_pop3-capabilities: STLS TOP CAPA PIPELINING RESP-CODES SASL(PLAIN LOGIN DIGEST-MD5 CRAM-MD5) USER UIDL
4048135/tcp filtered msrpc
4049139/tcp filtered netbios-ssn
4050143/tcp open imap Dovecot imapd
4051|_imap-capabilities: ID LITERAL+ IDLE OK completed AUTH=PLAIN IMAP4rev1 Capability AUTH=LOGIN AUTH=CRAM-MD5A0001 AUTH=DIGEST-MD5 ENABLE SASL-IR STARTTLS LOGIN-REFERRALS
4052|_ssl-date: 2017-09-09T23:32:53+00:00; -2h01m10s from scanner time.
4053445/tcp filtered microsoft-ds
4054465/tcp filtered smtps
4055587/tcp filtered submission
4056993/tcp open ssl/imap Dovecot imapd
4057| ssl-cert: Subject: commonName=imap.example.com
4058| Not valid before: 2015-06-12T12:04:14
4059|_Not valid after: 2016-06-11T12:04:14
4060|_ssl-date: 2017-09-09T23:32:46+00:00; -2h01m11s from scanner time.
4061995/tcp open ssl/pop3 Dovecot pop3d
4062| ssl-cert: Subject: commonName=imap.example.com
4063| Not valid before: 2015-06-12T12:04:14
4064|_Not valid after: 2016-06-11T12:04:14
4065|_ssl-date: 2017-09-09T23:32:44+00:00; -2h01m11s from scanner time.
40663306/tcp open mysql MySQL (unauthorized)
4067Aggressive OS guesses: Linux 2.6.39 (99%), Linux 2.6.32 (95%), Linux 2.6.32 or 3.10 (95%), WatchGuard Fireware 11.8 (95%), Synology DiskStation Manager 5.1 (94%), Linux 3.10 (94%), Linux 3.4 (94%), Linux 3.1 - 3.2 (93%), Linux 2.6.32 - 2.6.39 (93%), Linux 3.2 - 3.8 (91%)
4068No exact OS matches for host (test conditions non-ideal).
4069Network Distance: 10 hops
4070Service Info: OS: Red Hat Enterprise Linux 6; CPE: cpe:/o:redhat:enterprise_linux:6
4071
4072Host script results:
4073|_clock-skew: mean: -2h01m10s, deviation: 0s, median: -2h01m11s
4074
4075TRACEROUTE (using port 1720/tcp)
4076HOP RTT ADDRESS
40771 109.65 ms 10.13.0.1
40782 110.32 ms 37.187.24.252
40793 110.04 ms 178.33.103.229
40804 ...
40815 118.84 ms 213.186.32.213
40826 ...
40837 142.40 ms 176.10.83.128
40848 120.35 ms 176.10.83.119
40859 ...
408610 120.38 ms 89.248.166.76
4087
4088OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
4089Nmap done: 1 IP address (1 host up) scanned in 36.39 seconds
4090
4091###########################################################################################
4092
4093amap -i temp.txt
4094amap v5.4 (www.thc.org/thc-amap) started at 2017-09-09 21:34:03 - APPLICATION MAPPING mode
4095
4096Protocol on 89.248.166.76:80/tcp matches http
4097Protocol on 89.248.166.76:80/tcp matches http-apache-2
4098Protocol on 89.248.166.76:3306/tcp matches mysql
4099Protocol on 89.248.166.76:3306/tcp matches mysql-secured
4100Protocol on 89.248.166.76:110/tcp matches pop3
4101Protocol on 89.248.166.76:143/tcp matches imap
4102Protocol on 89.248.166.76:993/tcp matches ssl
4103Protocol on 89.248.166.76:995/tcp matches ssl
4104Protocol on 89.248.166.76:53/tcp matches dns
4105
4106Unidentified ports: none.
4107
4108amap v5.4 finished at 2017-09-09 21:34:23
4109
4110###########################################################################################
4111%
4112inetnum: 89.248.166.0 - 89.248.166.127
4113netname: SC-QUASI24
4114descr: QUASI
4115country: SC
4116org: ORG-QNL3-RIPE
4117admin-c: QNL1-RIPE
4118tech-c: QNL1-RIPE
4119status: ASSIGNED PA
4120mnt-by: QUASINETWORKS-MNT
4121mnt-lower: QUASINETWORKS-MNT
4122mnt-routes: QUASINETWORKS-MNT
4123created: 2008-08-25T13:43:07Z
4124last-modified: 2016-01-23T22:02:02Z
4125source: RIPE
4126
4127organisation: ORG-QNL3-RIPE
4128org-name: Quasi Networks LTD.
4129org-type: OTHER
4130address: Suite 1, Second Floor
4131address: Sound & Vision House, Francis Rachel Street
4132address: Victoria, Mahe, SEYCHELLES
4133remarks: *****************************************************************************
4134remarks: IMPORTANT INFORMATION
4135remarks: *****************************************************************************
4136remarks: We are a high bandwidth network provider offering bandwidth solutions.
4137remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
4138remarks: Please only use abuse@quasinetworks.com for abuse reports.
4139remarks: For all other requests, please see the details on our website.
4140remarks: *****************************************************************************
4141abuse-mailbox: abuse@quasinetworks.com
4142abuse-c: AR34302-RIPE
4143mnt-ref: QUASINETWORKS-MNT
4144mnt-by: QUASINETWORKS-MNT
4145created: 2015-11-08T22:25:26Z
4146last-modified: 2015-11-27T09:37:50Z
4147source: RIPE # Filtered
4148
4149role: Quasi Networks LTD
4150address: Suite 1, Second Floor
4151address: Sound & Vision House, Francis Rachel Street
4152address: Victoria, Mahe, SEYCHELLES
4153remarks: *****************************************************************************
4154remarks: IMPORTANT INFORMATION
4155remarks: *****************************************************************************
4156remarks: We are a high bandwidth network provider offering bandwidth solutions.
4157remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
4158remarks: Please only use abuse@quasinetworks.com for abuse reports.
4159remarks: For all other requests, please see the details on our website.
4160remarks: *****************************************************************************
4161abuse-mailbox: abuse@quasinetworks.com
4162nic-hdl: QNL1-RIPE
4163mnt-by: QUASINETWORKS-MNT
4164created: 2015-11-07T22:43:04Z
4165last-modified: 2015-11-07T23:04:49Z
4166source: RIPE # Filtered
4167
4168% Information related to '89.248.160.0/21AS29073'
4169
4170route: 89.248.160.0/21
4171descr: Quasi Networks LTD (IBC)
4172origin: AS29073
4173mnt-by: QUASINETWORKS-MNT
4174created: 2006-07-14T16:36:01Z
4175last-modified: 2015-11-09T12:02:24Z
4176source: RIPE
4177
4178% This query was served by the RIPE Database Query Service version 1.89.2 (BLAARKOP)
4179
4180
4181###########################################################################################
4182[i] Scanning Site: http://top.models-list.org
4183
4184
4185
4186B A S I C I N F O
4187====================
4188
4189
4190[+] Site Title: REAL Preteen Galleries! Unbelievable OMG !! Smallest beautiful bodies!! All high quality videos of only
4191[+] IP address: 89.248.166.76
4192[+] Web Server: nginx/1.12.1
4193[+] CMS: Could Not Detect
4194[+] Cloudflare: Not Detected
4195[+] Robots File: Could NOT Find robots.txt!
4196
4197
4198
4199
4200G E O I P L O O K U P
4201=========================
4202
4203[i] IP Address: 89.248.166.76
4204[i] Country: SC
4205[i] State: N/A
4206[i] City: N/A
4207[i] Latitude: -4.583300
4208[i] Longitude: 55.666698
4209
4210
4211
4212
4213H T T P H E A D E R S
4214=======================
4215
4216
4217[i] HTTP/1.1 200 OK
4218[i] Server: nginx/1.12.1
4219[i] Date: Sat, 09 Sep 2017 23:33:16 GMT
4220[i] Content-Type: text/html; charset=UTF-8
4221[i] Connection: close
4222[i] Accept-Ranges: bytes
4223
4224
4225
4226
4227D N S L O O K U P
4228===================
4229
4230top.models-list.org. 3596 IN A 89.248.166.76
4231
4232
4233
4234
4235S U B N E T C A L C U L A T I O N
4236====================================
4237
4238Address = 89.248.166.76
4239Network = 89.248.166.76 / 32
4240Netmask = 255.255.255.255
4241Broadcast = not needed on Point-to-Point links
4242Wildcard Mask = 0.0.0.0
4243Hosts Bits = 0
4244Max. Hosts = 1 (2^0 - 0)
4245Host Range = { 89.248.166.76 - 89.248.166.76 }
4246
4247
4248
4249N M A P P O R T S C A N
4250============================
4251
4252
4253Starting Nmap 7.01 ( https://nmap.org ) at 2017-09-10 01:34 UTC
4254Nmap scan report for top.models-list.org (89.248.166.76)
4255Host is up (0.082s latency).
4256rDNS record for 89.248.166.76: no-reverse-dns-configured.com
4257PORT STATE SERVICE VERSION
425821/tcp filtered ftp
425922/tcp filtered ssh
426023/tcp closed telnet
426125/tcp open smtp Postfix smtpd
426280/tcp open http nginx 1.12.1
4263110/tcp open pop3 Dovecot pop3d
4264143/tcp open imap Dovecot imapd
4265443/tcp closed https
4266445/tcp closed microsoft-ds
42673389/tcp closed ms-wbt-server
4268Service Info: Host: b06s06.com
4269
4270Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
4271Nmap done: 1 IP address (1 host up) scanned in 8.36 seconds
4272
4273
4274
4275S U B - D O M A I N F I N D E R
4276==================================
4277
4278
4279[i] Total Subdomains Found : 1
4280
4281[+] Subdomain: top.models-list.org
4282[-] IP: 89.248.166.76
4283
4284
4285
4286
4287
4288R E V E R S E I P L O O K U P
4289==================================
4290
4291
4292[i] Total Sites Found On This Server : 2
4293
4294
4295[#] top.models-list.org
4296[-] CMS: Could Not Detect
4297
4298[#] www.mynewmodels.com,
4299[-] CMS: Could Not Detect
4300top.models-list.org
4301[*] Performing TLD Brute force Enumeration against top.models-list.org
4302[*] The operation could take up to: 00:01:07
4303[*] A top.ac 66.96.161.132
4304[*] A top.ae 86.96.130.64
4305[*] A top.ae 86.96.163.42
4306[*] A top.af 108.61.170.199
4307[*] AAAA top.af 2001:19f0:6c01:547:5400:ff:fe7c:9f77
4308[*] A top.biz.af 5.45.75.45
4309[*] A top.ag 94.75.116.15
4310[*] A top.ai 47.90.1.220
4311[*] A top.am 50.62.112.1
4312[*] A top.al 212.7.8.182
4313[*] A top.com.ar 72.52.231.0
4314[*] A top.as 72.52.4.119
4315[*] A top.org.ar 190.183.59.134
4316[*] A top.asia 77.221.130.34
4317[*] A top.at 83.137.116.70
4318[*] A top.co.asia 91.195.240.135
4319[*] A top.co.at 213.229.60.9
4320[*] CNAME top.biz.at free.biz.at
4321[*] A free.biz.at 216.92.134.29
4322[*] A top.com.au 69.172.201.153
4323[*] A top.org.au 223.130.25.70
4324[*] A top.org.aw 142.4.20.12
4325[*] A top.net.au 203.87.108.74
4326[*] A top.ax 104.27.185.202
4327[*] A top.ax 104.27.184.202
4328[*] AAAA top.ax 2400:cb00:2048:1::681b:b9ca
4329[*] AAAA top.ax 2400:cb00:2048:1::681b:b8ca
4330[*] A top.az 136.243.74.74
4331[*] A top.co.ba 176.9.45.78
4332[*] A top.com.ba 195.222.33.180
4333[*] A top.ba 81.93.76.14
4334[*] A top.be 86.39.240.67
4335[*] A top.com.be 95.173.170.166
4336[*] A top.bg 78.90.206.51
4337[*] A top.bi 77.104.162.193
4338[*] A top.biz 72.52.4.119
4339[*] A top.com.br 177.154.148.10
4340[*] A top.biz.by 71.18.52.2
4341[*] A top.by 93.171.222.16
4342[*] A top.biz.bz 199.59.242.150
4343[*] A top.ca 199.59.242.150
4344[*] A top.net.cc 54.252.89.206
4345[*] A top.com.cc 54.252.107.64
4346[*] A top.co.cc 175.126.123.219
4347[*] A top.cc 112.74.87.111
4348[*] A top.ch 35.156.3.16
4349[*] A top.org.ch 72.52.4.122
4350[*] A top.cl 216.75.37.169
4351[*] A top.co.cm 85.25.140.105
4352[*] A top.net.cm 85.25.140.105
4353[*] A top.biz.cl 185.53.178.8
4354[*] A top.cn 23.27.192.117
4355[*] A top.co 208.73.211.70
4356[*] A top.com.cn 118.26.164.16
4357[*] A top.net.cn 23.27.192.117
4358[*] A top.net.co 184.168.221.59
4359[*] A top.com.com 52.33.196.199
4360[*] A top.com.co 185.28.20.39
4361[*] A top.net.com 199.59.242.150
4362[*] A top.co.com 173.192.115.17
4363[*] A top.com 184.168.221.59
4364[*] A top.co.ca 66.196.36.16
4365[*] A top.org.com 23.23.86.44
4366[*] A top.biz.cr 72.52.4.122
4367[*] A top.cr 198.1.104.236
4368[*] CNAME top.biz.cm i.cns.cm
4369[*] A i.cns.cm 118.184.56.30
4370[*] A top.cx 153.231.198.148
4371[*] A top.biz.cx 72.52.4.122
4372[*] A top.net.cz 80.250.24.177
4373[*] A top.biz.cz 185.53.179.7
4374[*] A top.com.cz 62.109.128.30
4375[*] A top.de 213.165.64.4
4376[*] A top.cz 91.228.100.92
4377[*] A top.com.de 199.59.242.150
4378[*] CNAME top.org.de www.org.de
4379[*] A www.org.de 78.47.128.8
4380[*] A top.co.de 128.199.226.195
4381[*] A top.dk 46.4.18.10
4382[*] A top.ec 72.52.4.119
4383[*] A top.ee 217.146.69.11
4384[*] AAAA top.ee 2a02:29e8:770:0:3::21
4385[*] A top.es 185.53.178.8
4386[*] A top.com.es 72.52.4.122
4387[*] A top.eu 86.39.240.67
4388[*] A top.net.eu 78.46.90.98
4389[*] A top.org.eu 78.46.90.98
4390[*] A top.biz.fi 185.55.85.123
4391[*] A top.fm 173.230.131.38
4392[*] A top.biz.fm 173.230.131.38
4393[*] A top.fo 104.27.131.13
4394[*] A top.fo 104.27.130.13
4395[*] AAAA top.fo 2400:cb00:2048:1::681b:820d
4396[*] AAAA top.fo 2400:cb00:2048:1::681b:830d
4397[*] A top.fr 37.187.182.95
4398[*] A top.org.fr 149.202.133.35
4399[*] A top.gd 72.52.4.119
4400[*] A top.ge 188.93.95.26
4401[*] A top.gg 185.26.105.244
4402[*] A top.gf 128.65.195.88
4403[*] A top.biz.gl 72.52.4.122
4404[*] A top.co.gp 144.76.162.245
4405[*] A top.gp 72.52.4.119
4406[*] A top.gs 184.168.221.55
4407[*] A top.gr 185.4.133.65
4408[*] A top.gt 198.49.72.66
4409[*] A top.hk 203.124.113.1
4410[*] A top.co.hn 208.100.40.203
4411[*] A top.hn 217.70.184.38
4412[*] A top.hr 178.218.174.100
4413[*] CNAME top.net.hr net.hr
4414[*] A net.hr 192.0.78.24
4415[*] A net.hr 192.0.78.25
4416[*] CNAME top.biz.hn parkmydomain.vhostgo.com
4417[*] A parkmydomain.vhostgo.com 107.186.245.118
4418[*] A top.ht 174.129.233.169
4419[*] A top.co.ht 72.52.4.122
4420[*] A top.hu 185.80.49.249
4421[*] A top.co.id 198.252.100.115
4422[*] A top.ie 185.2.66.91
4423[*] A top.org.il 194.90.156.145
4424[*] A top.org.il 194.90.184.11
4425[*] A top.im 89.31.143.1
4426[*] A top.net.in 50.63.202.32
4427[*] A top.in 72.52.4.119
4428[*] A top.co.in 72.52.4.122
4429[*] A top.org.in 72.52.4.122
4430[*] A top.info 210.114.223.199
4431[*] A top.io 138.201.54.27
4432[*] A top.co.ir 216.158.77.118
4433[*] A top.is 193.4.58.173
4434[*] A top.it 185.2.4.102
4435[*] CNAME top.je park.io
4436[*] A park.io 54.243.148.214
4437[*] A park.io 50.17.238.198
4438[*] A top.co.jobs 50.17.193.222
4439[*] A top.jobs 50.19.241.165
4440[*] A top.com.jobs 50.19.241.165
4441[*] A top.net.jobs 50.19.241.165
4442[*] A top.biz.jobs 50.19.241.165
4443[*] A top.org.jobs 50.19.241.165
4444[*] A top.com.jo 104.238.99.152
4445[*] A top.jp 52.198.47.173
4446[*] A top.co.ke 72.52.4.122
4447[*] A top.co.jp 211.13.196.139
4448[*] A top.kg 195.38.166.72
4449[*] A top.net.kg 178.208.83.11
4450[*] CNAME top.kr parking3.dnstool.net
4451[*] CNAME parking3.dnstool.net wwwp.3dupndown.co.kr
4452[*] CNAME wwwp.3dupndown.co.kr wqkboog.x.incapdns.net
4453[*] A wqkboog.x.incapdns.net 107.154.155.33
4454[*] CNAME top.co.kr parking3.dnstool.net
4455[*] CNAME parking3.dnstool.net wwwp.3dupndown.co.kr
4456[*] CNAME wwwp.3dupndown.co.kr wqkboog.x.incapdns.net
4457[*] A wqkboog.x.incapdns.net 107.154.155.33
4458[*] A top.biz.ky 199.184.144.27
4459[*] A top.kz 136.243.146.176
4460[*] A top.la 72.52.4.119
4461[*] A top.lc 144.76.162.245
4462[*] A top.com.kz 82.200.247.241
4463[*] CNAME top.biz.li 712936.parkingcrew.net
4464[*] A 712936.parkingcrew.net 185.53.179.29
4465[*] A top.li 72.52.4.119
4466[*] A top.lk 208.76.243.50
4467[*] A top.lt 79.98.25.1
4468[*] A top.lu 194.154.192.85
4469[*] A top.biz.lu 195.26.5.2
4470[*] A top.lv 194.105.56.171
4471[*] A top.biz.ly 64.136.20.39
4472[*] A top.co.ma 5.135.5.49
4473[*] A top.md 88.99.29.152
4474[*] A top.biz.md 72.52.4.122
4475[*] A top.me 198.204.239.194
4476[*] A top.co.mk 87.76.31.211
4477[*] A top.mk 212.7.8.186
4478[*] A top.mn 218.100.84.130
4479[*] A top.co.mobi 54.225.105.179
4480[*] A top.com.mx 184.173.249.72
4481[*] A top.com.my 209.99.40.223
4482[*] A top.biz.my 202.190.174.44
4483[*] A top.co.net 188.166.216.219
4484[*] A top.net.net 52.50.81.210
4485[*] A top.net 72.249.144.95
4486[*] A top.org.net 23.23.86.44
4487[*] A top.co.nf 185.176.40.54
4488[*] A top.biz.nf 185.176.40.54
4489[*] A top.ng 91.195.240.135
4490[*] A top.com.ng 91.195.240.135
4491[*] A top.nl 109.72.85.122
4492[*] AAAA top.nl 2a00:f10:ff03:1::103
4493[*] A top.com.nl 83.98.157.102
4494[*] A top.net.nl 83.98.157.102
4495[*] A top.co.nl 77.174.199.0
4496[*] A top.co.nr 208.100.40.202
4497[*] A top.no 195.18.148.21
4498[*] A top.nu 217.116.211.149
4499[*] CNAME top.co.nu co.nu
4500[*] A co.nu 144.76.162.245
4501[*] A top.com.nu 144.76.162.245
4502[*] A top.net.nu 199.102.76.78
4503[*] A top.org.nu 80.92.84.139
4504[*] A top.org.nz 104.25.242.31
4505[*] A top.org.nz 104.25.243.31
4506[*] AAAA top.org.nz 2400:cb00:2048:1::6819:f21f
4507[*] AAAA top.org.nz 2400:cb00:2048:1::6819:f31f
4508[*] CNAME top.net.org pewtrusts.org
4509[*] A pewtrusts.org 204.74.99.100
4510[*] A top.com.org 23.23.86.44
4511[*] A top.net.nz 103.250.119.215
4512[*] A top.co.nz 35.190.14.252
4513[*] A top.pe 103.224.182.249
4514[*] A top.com.pe 72.52.4.122
4515[*] A top.co.ph 45.79.222.138
4516[*] A top.ph 192.64.147.201
4517[*] A top.net.ph 45.79.222.138
4518[*] A top.com.ph 72.52.4.122
4519[*] A top.org.ph 45.79.222.138
4520[*] A top.com.pk 174.136.29.165
4521[*] A top.pl 178.33.53.57
4522[*] A top.net.pl 91.200.92.2
4523[*] A top.com.pl 176.9.137.196
4524[*] A top.co.pl 213.239.198.135
4525[*] A top.pm 103.224.182.241
4526[*] A top.org.pl 77.55.152.162
4527[*] A top.org.pm 208.73.211.177
4528[*] A top.org.pm 208.73.211.165
4529[*] A top.org.pm 208.73.210.202
4530[*] A top.org.pm 208.73.210.217
4531[*] A top.biz.pl 94.23.89.40
4532[*] A top.pro 192.252.144.48
4533[*] A top.co.ps 66.96.132.56
4534[*] CNAME top.biz.ps biz.ps
4535[*] A biz.ps 144.76.162.245
4536[*] A top.co.pt 194.107.127.52
4537[*] A top.pt 72.52.4.119
4538[*] A top.co.pw 141.8.226.59
4539[*] A top.net.pw 141.8.226.59
4540[*] A top.pw 141.8.226.59
4541[*] A top.biz.pw 141.8.226.59
4542[*] A top.org.pw 141.8.226.59
4543[*] A top.com.qa 82.148.100.102
4544[*] A top.re 69.172.201.153
4545[*] A top.org.re 217.70.184.38
4546[*] A top.qa 208.91.197.91
4547[*] A top.net.ro 69.64.52.127
4548[*] A top.ro 193.25.113.232
4549[*] A top.rs 217.26.210.185
4550[*] A top.org.ro 188.241.152.102
4551[*] A top.org.rs 178.218.166.204
4552[*] A top.ru 185.77.233.40
4553[*] A top.net.ru 138.201.187.251
4554[*] A top.org.ru 37.140.192.250
4555[*] A top.com.ru 193.232.159.145
4556[*] A top.com.ru 193.232.158.144
4557[*] A top.com.ru 193.232.159.144
4558[*] A top.com.ru 193.232.158.145
4559[*] A top.sa 208.91.197.91
4560[*] A top.co.rs 217.26.213.91
4561[*] A top.net.sa 77.240.80.85
4562[*] A top.sc 78.109.25.58
4563[*] A top.com.se 52.32.224.120
4564[*] A top.biz.se 185.53.179.6
4565[*] CNAME top.net.se 773147.parkingcrew.net
4566[*] A 773147.parkingcrew.net 185.53.179.29
4567[*] A top.sg 91.136.8.131
4568[*] A top.sh 107.150.98.48
4569[*] A top.com.sg 119.31.233.166
4570[*] A top.si 91.223.115.153
4571[*] A top.sk 37.9.175.5
4572[*] A top.co.sl 91.195.240.135
4573[*] A top.com.sr 143.95.106.249
4574[*] A top.st 13.69.186.222
4575[*] A top.biz.st 91.121.28.115
4576[*] A top.co.su 72.52.4.122
4577[*] A top.su 82.146.61.146
4578[*] A top.biz.tc 64.136.20.39
4579[*] A top.tc 144.76.162.245
4580[*] A top.biz.tf 85.236.153.18
4581[*] A top.tf 77.174.199.0
4582[*] A top.net.tf 188.40.117.12
4583[*] A top.net.tf 188.40.70.29
4584[*] A top.net.tf 188.40.70.27
4585[*] A top.tk 195.20.47.239
4586[*] A top.co.tl 208.100.40.202
4587[*] A top.tel 52.50.143.27
4588[*] A top.to 222.122.205.134
4589[*] A top.co.to 175.118.124.44
4590[*] A top.travel 72.52.4.119
4591[*] A top.com.tr 77.245.149.29
4592[*] A top.co.th 203.146.170.57
4593[*] A top.co.tv 31.186.25.163
4594[*] A top.biz.tv 72.52.4.122
4595[*] A top.org.tv 72.52.4.122
4596[*] A top.com.tw 106.186.25.125
4597[*] A top.tw 61.220.152.244
4598[*] A top.co.tz 216.194.168.113
4599[*] A top.org.tw 61.63.62.68
4600[*] A top.ua 82.144.222.56
4601[*] A top.net.ua 80.91.160.7
4602[*] A top.co.ua 138.201.57.91
4603[*] A top.com.ua 77.120.122.115
4604[*] A top.biz.ua 95.213.135.229
4605[*] AAAA top.biz.ua 2a00:ab00:4300:1df::2
4606[*] A top.net.tw 60.249.15.213
4607[*] A top.co.uk 212.36.97.12
4608[*] A top.uk 212.36.97.12
4609[*] A top.uz 83.69.139.158
4610[*] A top.biz.uz 144.76.162.245
4611[*] A top.vc 199.59.242.150
4612[*] A top.net.ve 67.220.187.66
4613[*] A top.vg 88.198.29.97
4614[*] A top.com.ve 185.53.178.6
4615[*] A top.co.vg 88.198.29.97
4616[*] A top.com.vg 88.198.29.97
4617[*] A top.net.vg 68.178.254.180
4618[*] A top.biz.vg 89.31.143.20
4619[*] A top.net.vn 112.213.89.3
4620[*] A top.ws 184.168.221.104
4621[*] A top.com.ws 202.4.48.211
4622[*] A top.net.ws 202.4.48.211
4623[*] A top.biz.ws 184.168.221.104
4624[*] A top.org.ws 202.4.48.211
4625[*] A top.yt 103.224.182.241
4626[*] CNAME top.wf dnspod-free.mydnspod.net
4627[*] A dnspod-free.mydnspod.net 49.51.10.19
4628
4629; <<>> DiG 9.10.3-P4-Debian <<>> top.models-list.org any
4630;; global options: +cmd
4631;; Got answer:
4632;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28240
4633;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
4634
4635;; OPT PSEUDOSECTION:
4636; EDNS: version: 0, flags:; udp: 4096
4637;; QUESTION SECTION:
4638;top.models-list.org. IN ANY
4639
4640;; ANSWER SECTION:
4641top.models-list.org. 2627 IN A 89.248.166.76
4642
4643;; Query time: 8 msec
4644;; SERVER: 192.168.1.254#53(192.168.1.254)
4645;; WHEN: Sat Sep 09 21:34:16 EDT 2017
4646;; MSG SIZE rcvd: 64
4647
4648
4649Running:
4650 traceroute -T -O info -i eth0 top.models-list.org
4651traceroute to top.models-list.org (89.248.166.76), 30 hops max, 60 byte packets
4652 1 gateway (192.168.1.254) 0.371 ms 0.555 ms 0.722 ms
4653 2 10.135.18.1 (10.135.18.1) 7.119 ms 7.204 ms 7.301 ms
4654 3 75.154.223.222 (75.154.223.222) 29.378 ms 29.998 ms 30.171 ms
4655 4 lag-113.ear3.NewYork1.Level3.net (4.15.212.245) 30.371 ms 30.505 ms 30.627 ms
4656 5 ae-237-3613.edge6.Amsterdam1.Level3.net (4.69.162.242) 104.623 ms ae-240-3616.edge6.Amsterdam1.Level3.net (4.69.162.254) 104.657 ms 104.720 ms
4657 6 * * *
4658 7 no-reverse-dns-configured.com (89.248.166.76) <syn,ack> 103.635 ms 103.680 ms 104.098 ms
4659
4660
4661
4662----- top.models-list.org -----
4663
4664
4665Host's addresses:
4666__________________
4667
4668top.models-list.org. 2618 IN A 89.248.166.76
4669
4670
4671
4672
4673Tracing to top.models-list.org[a] via 192.168.1.254, maximum of 3 retries
4674192.168.1.254 (192.168.1.254) Got answer
4675
4676
4677WhatWeb report for http://top.models-list.org
4678Status : 200 OK
4679Title : REAL Preteen Galleries! Unbelievable OMG !! Smallest beautiful bodies!! All high quality videos of only
4680IP : 89.248.166.76
4681Country : NETHERLANDS, NL
4682
4683Summary : HTTPServer[nginx/1.12.1], nginx[1.12.1]
4684
4685Detected Plugins:
4686[ HTTPServer ]
4687 HTTP server header string. This plugin also attempts to
4688 identify the operating system from the server header.
4689
4690 String : nginx/1.12.1 (from server string)
4691
4692[ nginx ]
4693 Nginx (Engine-X) is a free, open-source, high-performance
4694 HTTP server and reverse proxy, as well as an IMAP/POP3
4695 proxy server.
4696
4697 Version : 1.12.1
4698 Website : http://nginx.net/
4699
4700HTTP Headers:
4701 HTTP/1.1 200 OK
4702 Server: nginx/1.12.1
4703 Date: Sat, 09 Sep 2017 23:35:51 GMT
4704 Content-Type: text/html; charset=UTF-8
4705 Transfer-Encoding: chunked
4706 Connection: close
4707 Accept-Ranges: bytes
4708
4709
4710 ^ ^
4711 _ __ _ ____ _ __ _ _ ____
4712 ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
4713 | V V // o // _/ | V V // 0 // 0 // _/
4714 |_n_,'/_n_//_/ |_n_,' \_,' \_,'/_/
4715 <
4716 ...'
4717
4718 WAFW00F - Web Application Firewall Detection Tool
4719
4720 By Sandro Gauci && Wendel G. Henrique
4721
4722Checking http://top.models-list.org
4723Generic Detection results:
4724No WAF detected by the generic detection
4725Number of requests: 13
4726
4727
4728
4729Trying zone transfer first...
4730
4731Unsuccessful in zone transfer (it was worth a shot)
4732Okay, trying the good old fashioned way... brute force
4733
4734Checking for wildcard DNS...
4735Nope. Good.
4736Now performing 2280 test(s)...
4737
4738Subnets found (may want to probe here using nmap or unicornscan):
4739
4740Done with Fierce scan: http://ha.ckers.org/fierce/
4741Found 0 entries.
4742
4743Have a nice day.
4744
4745
4746
4747lbd - load balancing detector 0.2 - Checks if a given domain uses load-balancing.
4748 Written by Stefan Behte (http://ge.mine.nu)
4749 Proof-of-concept! Might give false positives.
4750
4751Checking for DNS-Loadbalancing: NOT FOUND
4752Checking for HTTP-Loadbalancing [Server]:
4753 nginx/1.12.1
4754 NOT FOUND
4755
4756Checking for HTTP-Loadbalancing [Date]: 23:37:36, 23:37:36, 23:37:37, 23:37:37, 23:37:38, 23:37:39, 23:37:39, 23:37:39, 23:37:40, 23:37:40, 23:37:40, 23:37:40, 23:37:41, 23:37:45, 23:37:45, 23:37:45, 23:37:45, 23:37:46, 23:37:46, 23:37:46, 23:37:47, 23:37:47, 23:37:48, 23:37:48, 23:37:48, 23:37:48, 23:37:49, 23:37:49, 23:37:49, 23:37:50, 23:37:50, 23:37:51, 23:37:51, 23:37:51, 23:37:52, 23:37:52, 23:37:52, 23:37:52, 23:37:53, 23:37:53, 23:37:53, 23:37:53, 23:37:54, 23:37:55, 23:38:00, 23:38:01, 23:38:02, 23:38:02, 23:38:02, 23:38:02, NOT FOUND
4757
4758Checking for HTTP-Loadbalancing [Diff]: NOT FOUND
4759
4760top.models-list.org does NOT use Load-balancing.
4761
4762
4763
4764Starting smtp-user-enum v1.2 ( http://pentestmonkey.net/tools/smtp-user-enum )
4765
4766 ----------------------------------------------------------
4767| Scan Information |
4768 ----------------------------------------------------------
4769
4770Mode ..................... VRFY
4771Worker Processes ......... 5
4772Usernames file ........... users.txt
4773Target count ............. 1
4774Username count ........... 494
4775Target TCP port .......... 25
4776Query timeout ............ 5 secs
4777Target domain ............
4778
4779######## Scan started at Sat Sep 9 21:40:03 2017 #########
4780######## Scan completed at Sat Sep 9 21:48:18 2017 #########
47810 results.
4782
4783494 queries in 495 seconds (1.0 queries / sec)
4784
4785
4786
4787Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 21:48 EDT
4788NSE: Loaded 146 scripts for scanning.
4789NSE: Script Pre-scanning.
4790Initiating NSE at 21:48
4791Completed NSE at 21:48, 0.00s elapsed
4792Initiating NSE at 21:48
4793Completed NSE at 21:48, 0.00s elapsed
4794Failed to resolve "top.models-list.org.txt".
4795Initiating Parallel DNS resolution of 1 host. at 21:48
4796Completed Parallel DNS resolution of 1 host. at 21:48, 0.50s elapsed
4797Initiating SYN Stealth Scan at 21:48
4798Scanning top.models-list.org (89.248.166.76) [100 ports]
4799Discovered open port 3306/tcp on 89.248.166.76
4800Discovered open port 143/tcp on 89.248.166.76
4801Discovered open port 110/tcp on 89.248.166.76
4802Discovered open port 80/tcp on 89.248.166.76
4803Discovered open port 53/tcp on 89.248.166.76
4804Discovered open port 993/tcp on 89.248.166.76
4805Discovered open port 995/tcp on 89.248.166.76
4806Increasing send delay for 89.248.166.76 from 0 to 5 due to 61 out of 152 dropped probes since last increase.
4807Completed SYN Stealth Scan at 21:48, 3.61s elapsed (100 total ports)
4808Initiating Service scan at 21:48
4809Scanning 7 services on top.models-list.org (89.248.166.76)
4810Completed Service scan at 21:48, 6.79s elapsed (7 services on 1 host)
4811Initiating OS detection (try #1) against top.models-list.org (89.248.166.76)
4812adjust_timeouts2: packet supposedly had rtt of -90296 microseconds. Ignoring time.
4813adjust_timeouts2: packet supposedly had rtt of -90296 microseconds. Ignoring time.
4814Retrying OS detection (try #2) against top.models-list.org (89.248.166.76)
4815Initiating Traceroute at 21:48
4816Completed Traceroute at 21:48, 3.02s elapsed
4817Initiating Parallel DNS resolution of 7 hosts. at 21:48
4818Completed Parallel DNS resolution of 7 hosts. at 21:48, 5.51s elapsed
4819NSE: Script scanning 89.248.166.76.
4820Initiating NSE at 21:48
4821Completed NSE at 21:48, 14.72s elapsed
4822Initiating NSE at 21:48
4823Completed NSE at 21:48, 0.01s elapsed
4824Nmap scan report for top.models-list.org (89.248.166.76)
4825Host is up (0.13s latency).
4826rDNS record for 89.248.166.76: no-reverse-dns-configured.com
4827Not shown: 84 closed ports
4828PORT STATE SERVICE VERSION
482921/tcp filtered ftp
483022/tcp filtered ssh
483125/tcp filtered smtp
483253/tcp open domain ISC BIND 9.8.2rc1
4833| dns-nsid:
4834|_ bind.version: 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4
483580/tcp open http nginx 1.12.1
4836| http-methods:
4837| Supported Methods: GET HEAD POST OPTIONS TRACE
4838|_ Potentially risky methods: TRACE
4839|_http-server-header: nginx/1.12.1
4840|_http-title: REAL Preteen Galleries! Unbelievable OMG !! Smallest beautiful...
484181/tcp filtered hosts2-ns
4842110/tcp open pop3 Dovecot pop3d
4843|_pop3-capabilities: PIPELINING SASL(PLAIN LOGIN DIGEST-MD5 CRAM-MD5) CAPA USER RESP-CODES TOP UIDL STLS
4844| ssl-cert: Subject: commonName=imap.example.com
4845| Issuer: commonName=imap.example.com
4846| Public Key type: rsa
4847| Public Key bits: 1024
4848| Signature Algorithm: sha1WithRSAEncryption
4849| Not valid before: 2015-06-12T12:04:14
4850| Not valid after: 2016-06-11T12:04:14
4851| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
4852|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
4853|_ssl-date: 2017-09-09T23:47:46+00:00; -2h01m10s from scanner time.
4854135/tcp filtered msrpc
4855139/tcp filtered netbios-ssn
4856143/tcp open imap Dovecot imapd
4857|_ssl-date: 2017-09-09T23:47:46+00:00; -2h01m10s from scanner time.
4858445/tcp filtered microsoft-ds
4859465/tcp filtered smtps
4860587/tcp filtered submission
4861993/tcp open ssl/imap Dovecot imapd
4862| ssl-cert: Subject: commonName=imap.example.com
4863| Issuer: commonName=imap.example.com
4864| Public Key type: rsa
4865| Public Key bits: 1024
4866| Signature Algorithm: sha1WithRSAEncryption
4867| Not valid before: 2015-06-12T12:04:14
4868| Not valid after: 2016-06-11T12:04:14
4869| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
4870|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
4871995/tcp open ssl/pop3 Dovecot pop3d
4872| ssl-cert: Subject: commonName=imap.example.com
4873| Issuer: commonName=imap.example.com
4874| Public Key type: rsa
4875| Public Key bits: 1024
4876| Signature Algorithm: sha1WithRSAEncryption
4877| Not valid before: 2015-06-12T12:04:14
4878| Not valid after: 2016-06-11T12:04:14
4879| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
4880|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
4881|_ssl-date: 2017-09-09T23:47:42+00:00; -2h01m10s from scanner time.
48823306/tcp open mysql MySQL (unauthorized)
4883Aggressive OS guesses: Linux 2.6.39 (99%), Linux 2.6.32 (95%), Synology DiskStation Manager 5.1 (94%), Linux 2.6.32 or 3.10 (94%), Linux 3.4 (94%), WatchGuard Fireware 11.8 (94%), Linux 3.10 (93%), Linux 3.1 - 3.2 (93%), Linux 2.6.32 - 2.6.39 (93%), Linux 3.2 - 3.8 (91%)
4884No exact OS matches for host (test conditions non-ideal).
4885Uptime guess: 11.783 days (since Tue Aug 29 03:01:01 2017)
4886Network Distance: 10 hops
4887TCP Sequence Prediction: Difficulty=262 (Good luck!)
4888IP ID Sequence Generation: All zeros
4889Service Info: OS: Red Hat Enterprise Linux 6; CPE: cpe:/o:redhat:enterprise_linux:6
4890
4891Host script results:
4892|_clock-skew: mean: -2h01m10s, deviation: 0s, median: -2h01m10s
4893
4894TRACEROUTE (using port 554/tcp)
4895HOP RTT ADDRESS
48961 110.41 ms 10.13.0.1
48972 109.94 ms 37.187.24.252
48983 110.45 ms po101.gra-g1-a75.fr.eu (178.33.103.229)
48994 ...
49005 119.38 ms be100-1109.fra-1-a9.de.eu (213.186.32.213)
49016 ...
49027 124.39 ms vlan3555.bb1.ams2.nl.m247.com (176.10.83.128)
49038 120.64 ms 176.10.83.119
49049 ...
490510 120.23 ms no-reverse-dns-configured.com (89.248.166.76)
4906
4907
4908
4909
4910 _/ _/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/
4911 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
4912 _/ _/ _/_/_/_/ _/_/_/ _/ _/_/_/ _/_/_/_/ _/ _/_/_/ _/_/_/_
4913 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
4914 _/_/_/_/ _/ _/ _/ _/_/_/_/ _/_/_/_/ _/ _/_/_/_/ _/ _/ [v1.06]
4915
4916 _/ User-Agent Tester ↵
4917 _/ AKA: Purple Pimp ↵
4918 _/ ChrisJohnRiley ↵
4919 _/ blog.c22.cc ↵
4920
4921 [>] Performing initial request and confirming stability
4922 [>] Using User-Agent string Mozilla/5.0
4923
4924 [ ] URL (ENTERED): http://top.models-list.org
4925 [ ] Response Code: 200 OK
4926 [ ] Server: nginx/1.12.1
4927 [ ] Date: Sat, 09 Sep 2017 23:47:55 GMT
4928 [ ] Content-Type: text/html; charset=UTF-8
4929 [ ] Transfer-Encoding: chunked
4930 [ ] Connection: close
4931 [ ] Accept-Ranges: bytes
4932 [ ] Data (MD5): bea36b44354ccfea526ff572b761fe98
4933
4934 [1] Pass
4935 [2] Pass
4936 [3] Pass
4937
4938 [>] URL appears stable. Beginning test
4939
4940 [>] Using DEFAULT User-Agent Strings
4941
4942 [>] Using Crazy User-Agent Strings
4943 [>] Using Bot User-Agent Strings
4944
4945 [>] Output: [+] Added Headers, [-] Removed Headers, [!] Altered Headers, [ ] No Change
4946
4947
4948 [>] Checks completed... try enabling VERBOSE mode for more detailed output
4949
4950 [>] That's all folks... Fo' Shizzle!
4951
4952#########################################################################################
4953Hostname smallmodels.net ISP Quasi Networks LTD. (AS29073)
4954Continent Africa Flag
4955SC
4956Country Seychelles Country Code SC (SYC)
4957Region Unknown Local time 10 Sep 2017 05:58 +04
4958City Unknown Latitude -4.583
4959IP Address 93.174.91.159 Longitude 55.667
4960#########################################################################################
4961smallmodels.net
4962
4963###########################################################################################
4964
4965whois smallmodels.net
4966 Domain Name: SMALLMODELS.NET
4967 Registry Domain ID: 1778057866_DOMAIN_NET-VRSN
4968 Registrar WHOIS Server: whois.bizcn.com
4969 Registrar URL: http://www.bizcn.com
4970 Updated Date: 2017-04-28T08:20:45Z
4971 Creation Date: 2013-02-03T08:00:40Z
4972 Registry Expiry Date: 2018-02-03T08:00:40Z
4973 Registrar: Bizcn.com, Inc.
4974 Registrar IANA ID: 471
4975 Registrar Abuse Contact Email:
4976 Registrar Abuse Contact Phone:
4977 Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
4978 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
4979 Name Server: NS23.CLOUDNS.NET
4980 Name Server: PNS21.CLOUDNS.NET
4981 Name Server: PNS23.CLOUDNS.NET
4982 Name Server: PNS24.CLOUDNS.NET
4983 Name Server: PNS28.CLOUDNS.NET
4984 Name Server: PNS30.CLOUDNS.NET
4985
4986Domain name: smallmodels.net
4987Registry Domain ID: 1778057866_DOMAIN_NET-VRSN
4988Registrar WHOIS Server: whois.bizcn.com
4989Registrar URL: http://www.bizcn.com
4990Updated Date: 2017-02-02T23:01:18Z
4991Creation Date: 2013-02-03T08:00:40Z
4992Registrar Registration Expiration Date: 2018-02-03T08:00:40Z
4993Registrar: Bizcn.com,Inc.
4994Registrar IANA ID: 471
4995Registrar Abuse Contact Email: abuse@bizcn.com
4996Registrar Abuse Contact Phone: +86.5922577888
4997Reseller: Cnobin Technology HK Limited
4998Domain Status: clientDeleteProhibited (http://www.icann.org/epp#clientDeleteProhibited)
4999Domain Status: clientTransferProhibited (http://www.icann.org/epp#clientTransferProhibited)
5000Registry Registrant ID: Not Available From Registry
5001Registrant Name: Wuxi Yilian LLC
5002Registrant Organization: Wuxi Yilian LLC
5003Registrant Street: No.1001 Anling Road
5004Registrant City: Xiamen
5005Registrant State/Province: Fujian
5006Registrant Postal Code: 361008
5007Registrant Country: cn
5008Registrant Phone: +86.5922577888
5009Registrant Phone Ext:
5010Registrant Fax: +86.5922179606
5011Registrant Fax Ext:
5012Registrant Email: whoisprivacyprotect@whoisservices.cn
5013Registry Admin ID: Not Available From Registry
5014Admin Name: Wuxi Yilian LLC
5015Admin Organization: Wuxi Yilian LLC
5016Admin Street: No.1001 Anling Road
5017Admin City: Xiamen
5018Admin State/Province: Fujian
5019Admin Postal Code: 361008
5020Admin Country: cn
5021Admin Phone: +86.5922577888
5022Admin Phone Ext:
5023Admin Fax: +86.5922179606
5024Admin Fax Ext:
5025Admin Email: whoisprivacyprotect@whoisservices.cn
5026Registry Tech ID: Not Available From Registry
5027Tech Name: Wuxi Yilian LLC
5028Tech Organization: Wuxi Yilian LLC
5029Tech Street: No.1001 Anling Road
5030Tech City: Xiamen
5031Tech State/Province: Fujian
5032Tech Postal Code: 361008
5033Tech Country: cn
5034Tech Phone: +86.5922577888
5035Tech Phone Ext:
5036Tech Fax: +86.5922179606
5037Tech Fax Ext:
5038Tech Email: whoisprivacyprotect@whoisservices.cn
5039Name Server: pns23.cloudns.net
5040Name Server: pns24.cloudns.net
5041Name Server: pns21.cloudns.net
5042Name Server: pns28.cloudns.net
5043Name Server: pns30.cloudns.net
5044Name Server: ns23.cloudns.net
5045
5046###########################################################################################
5047
5048;smallmodels.net. IN ANY
5049
5050;; ANSWER SECTION:
5051smallmodels.net. 2232 IN NS pns30.cloudns.net.
5052smallmodels.net. 2232 IN NS pns23.cloudns.net.
5053smallmodels.net. 2232 IN NS ns22.cloudns.net.
5054smallmodels.net. 2232 IN NS ns24.cloudns.net.
5055smallmodels.net. 2232 IN NS pns28.cloudns.net.
5056smallmodels.net. 2232 IN NS pns25.cloudns.net.
5057smallmodels.net. 2232 IN NS pns24.cloudns.net.
5058smallmodels.net. 2232 IN NS pns22.cloudns.net.
5059smallmodels.net. 2232 IN NS ns21.cloudns.net.
5060smallmodels.net. 2232 IN NS pns21.cloudns.net.
5061smallmodels.net. 2232 IN NS ns23.cloudns.net.
5062smallmodels.net. 2232 IN NS pns29.cloudns.net.
5063smallmodels.net. 2232 IN NS pns26.cloudns.net.
5064smallmodels.net. 2232 IN NS pns27.cloudns.net.
5065
5066###########################################################################################
5067
5068tcptraceroute -i eth0 smallmodels.net
5069
5070Running:
5071 traceroute -T -O info -i eth0 smallmodels.net
5072traceroute to smallmodels.net (93.174.91.159), 30 hops max, 60 byte packets
5073 1 gateway (192.168.1.254) 0.447 ms 0.618 ms 0.775 ms
5074 2 10.135.18.1 (10.135.18.1) 16.137 ms 16.802 ms 17.100 ms
5075 3 75.154.223.222 (75.154.223.222) 29.580 ms 29.634 ms 30.142 ms
5076 4 lag-113.ear3.NewYork1.Level3.net (4.15.212.245) 30.787 ms 30.949 ms 31.161 ms
5077 5 ae-237-3613.edge6.Amsterdam1.Level3.net (4.69.162.242) 129.013 ms 129.042 ms 129.098 ms
5078 6 * * *
5079 7 no-reverse-dns-configured.com (93.174.91.159) <syn,ack> 103.504 ms 103.727 ms 103.788 ms
5080
5081###########################################################################################
5082
5083
5084Checking for HTTP-Loadbalancing [Date]: 02:06:46, 02:06:47, 02:06:47, 02:06:47, 02:06:47, 02:06:48, 02:06:48, 02:06:48, 02:06:49, 02:06:49, 02:06:49, 02:06:49, 02:06:50, 02:06:50, 02:06:50, 02:06:50, 02:06:51, 02:06:51, 02:06:51, 02:06:51, 02:06:52, 02:06:52, 02:06:52, 02:06:53, 02:06:53, 02:06:53, 02:06:53, 02:06:54, 02:06:54, 02:06:54, 02:06:54, 02:06:55, 02:06:55, 02:06:55, 02:06:55, 02:06:56, 02:06:56, 02:06:56, 02:06:57, 02:06:57, 02:06:57, 02:06:57, 02:06:58, 02:06:58, 02:06:58, 02:06:58, 02:06:59, 02:06:59, 02:06:59, 02:07:00, NOT FOUND
5085
5086Checking for HTTP-Loadbalancing [Diff]: NOT FOUND
5087
5088smallmodels.net does NOT use Load-balancing.
5089
5090###########################################################################################
5091
5092nmap -PN -n -F -T4 -sV -A -oG temp.txt smallmodels.net
5093
5094Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 22:03 EDT
5095Nmap scan report for smallmodels.net (93.174.91.159)
5096Host is up (0.19s latency).
5097Not shown: 89 closed ports
5098PORT STATE SERVICE VERSION
509921/tcp open ftp vsftpd 3.0.2
510022/tcp open ssh OpenSSH 6.0p1 Debian 4+deb7u6 (protocol 2.0)
5101| ssh-hostkey:
5102| 1024 ab:16:56:89:21:7e:75:1c:77:f3:a2:7e:c2:f1:4c:09 (DSA)
5103| 2048 22:f8:e3:f6:1a:1c:6a:99:09:6b:1e:7c:fd:30:e3:95 (RSA)
5104|_ 256 a8:03:f4:96:36:d1:39:de:2e:4f:56:e9:0f:f3:63:56 (ECDSA)
510525/tcp filtered smtp
510653/tcp open domain
5107| dns-nsid:
5108|_ bind.version: 9.8.4-rpz2+rl005.12-P1
510980/tcp open http nginx
5110|_http-server-header: nginx
5111|_http-title: virginity was, pictures teen, sweet teen
5112111/tcp open rpcbind 2-4 (RPC #100000)
5113135/tcp filtered msrpc
5114139/tcp filtered netbios-ssn
5115445/tcp filtered microsoft-ds
5116465/tcp filtered smtps
5117587/tcp filtered submission
5118Aggressive OS guesses: Linux 2.6.39 (96%), Linux 3.2 - 3.8 (94%), Linux 3.8 (94%), WatchGuard Fireware 11.8 (94%), Linux 3.1 - 3.2 (94%), Linux 3.5 (93%), Linux 2.6.32 - 2.6.39 (92%), Linux 2.6.32 - 3.0 (91%), Linux 2.6.32 (91%), Linux 2.6.32 or 3.10 (91%)
5119No exact OS matches for host (test conditions non-ideal).
5120Network Distance: 11 hops
5121Service Info: OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel
5122
5123TRACEROUTE (using port 143/tcp)
5124HOP RTT ADDRESS
51251 419.99 ms 10.13.0.1
51262 677.91 ms 37.187.24.252
51273 673.15 ms 178.33.103.231
51284 710.56 ms 10.95.33.10
51295 681.31 ms 91.121.131.19
51306 687.29 ms 94.23.122.217
51317 ...
51328 700.05 ms 176.10.83.128
51339 695.75 ms 176.10.83.5
513410 ...
513511 693.29 ms 93.174.91.159
5136
5137Protocol on 93.174.91.159:21/tcp matches ftp
5138Protocol on 93.174.91.159:22/tcp matches ssh
5139Protocol on 93.174.91.159:22/tcp matches ssh-openssh
5140Protocol on 93.174.91.159:80/tcp matches http
5141Protocol on 93.174.91.159:111/tcp matches rpc
5142Protocol on 93.174.91.159:53/tcp matches dns
5143this connect
5144Protocol on 93.174.91.159:111/tcp matches rpc-rpcbind-v4
5145
5146Unidentified ports: none.
5147
5148amap v5.4 finished at 2017-09-09 22:06:03
5149
5150###########################################################################################
5151
5152inetnum: 93.174.91.0 - 93.174.91.255
5153netname: SC-QUASI52
5154descr: QUASI
5155country: SC
5156org: ORG-QNL3-RIPE
5157admin-c: QNL1-RIPE
5158tech-c: QNL1-RIPE
5159status: ASSIGNED PA
5160mnt-by: QUASINETWORKS-MNT
5161mnt-lower: QUASINETWORKS-MNT
5162mnt-routes: QUASINETWORKS-MNT
5163created: 2016-01-23T22:20:58Z
5164last-modified: 2016-01-23T22:20:58Z
5165source: RIPE
5166
5167organisation: ORG-QNL3-RIPE
5168org-name: Quasi Networks LTD.
5169org-type: OTHER
5170address: Suite 1, Second Floor
5171address: Sound & Vision House, Francis Rachel Street
5172address: Victoria, Mahe, SEYCHELLES
5173remarks: *****************************************************************************
5174remarks: IMPORTANT INFORMATION
5175remarks: *****************************************************************************
5176remarks: We are a high bandwidth network provider offering bandwidth solutions.
5177remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
5178remarks: Please only use abuse@quasinetworks.com for abuse reports.
5179remarks: For all other requests, please see the details on our website.
5180remarks: *****************************************************************************
5181abuse-mailbox: abuse@quasinetworks.com
5182abuse-c: AR34302-RIPE
5183mnt-ref: QUASINETWORKS-MNT
5184mnt-by: QUASINETWORKS-MNT
5185created: 2015-11-08T22:25:26Z
5186last-modified: 2015-11-27T09:37:50Z
5187source: RIPE # Filtered
5188
5189role: Quasi Networks LTD
5190address: Suite 1, Second Floor
5191address: Sound & Vision House, Francis Rachel Street
5192address: Victoria, Mahe, SEYCHELLES
5193remarks: *****************************************************************************
5194remarks: IMPORTANT INFORMATION
5195remarks: *****************************************************************************
5196remarks: We are a high bandwidth network provider offering bandwidth solutions.
5197remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
5198remarks: Please only use abuse@quasinetworks.com for abuse reports.
5199remarks: For all other requests, please see the details on our website.
5200remarks: *****************************************************************************
5201abuse-mailbox: abuse@quasinetworks.com
5202nic-hdl: QNL1-RIPE
5203mnt-by: QUASINETWORKS-MNT
5204created: 2015-11-07T22:43:04Z
5205last-modified: 2015-11-07T23:04:49Z
5206source: RIPE # Filtered
5207
5208% Information related to '93.174.88.0/21as29073'
5209
5210route: 93.174.88.0/21
5211descr: Quasi Networks LTD (IBC)
5212origin: as29073
5213mnt-by: QUASINETWORKS-MNT
5214created: 2008-06-20T15:33:47Z
5215last-modified: 2016-01-23T22:26:12Z
5216source: RIPE
5217
5218% This query was served by the RIPE Database Query Service version 1.89.2 (WAGYU)
5219
5220
5221
5222###########################################################################################
5223[i] Scanning Site: http://smallmodels.net
5224
5225
5226
5227B A S I C I N F O
5228====================
5229
5230
5231[+] Site Title: virginity was, pictures teen, sweet teen
5232[+] IP address: 93.174.91.159
5233[+] Web Server: nginx
5234[+] CMS: Could Not Detect
5235[+] Cloudflare: Not Detected
5236[+] Robots File: Could NOT Find robots.txt!
5237
5238
5239
5240
5241W H O I S L O O K U P
5242========================
5243
5244 Domain Name: SMALLMODELS.NET
5245 Registry Domain ID: 1778057866_DOMAIN_NET-VRSN
5246 Registrar WHOIS Server: whois.bizcn.com
5247 Registrar URL: http://www.bizcn.com
5248 Updated Date: 2017-04-28T08:20:45Z
5249 Creation Date: 2013-02-03T08:00:40Z
5250 Registry Expiry Date: 2018-02-03T08:00:40Z
5251 Registrar: Bizcn.com, Inc.
5252 Registrar IANA ID: 471
5253 Registrar Abuse Contact Email:
5254 Registrar Abuse Contact Phone:
5255 Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
5256 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
5257 Name Server: NS23.CLOUDNS.NET
5258 Name Server: PNS21.CLOUDNS.NET
5259 Name Server: PNS23.CLOUDNS.NET
5260 Name Server: PNS24.CLOUDNS.NET
5261 Name Server: PNS28.CLOUDNS.NET
5262 Name Server: PNS30.CLOUDNS.NET
5263
5264
5265
5266G E O I P L O O K U P
5267=========================
5268
5269[i] IP Address: 93.174.91.159
5270[i] Country: SC
5271[i] State: N/A
5272[i] City: N/A
5273[i] Latitude: -4.583300
5274[i] Longitude: 55.666698
5275
5276
5277
5278
5279H T T P H E A D E R S
5280=======================
5281
5282
5283[i] HTTP/1.1 200 OK
5284[i] Server: nginx
5285[i] Date: Sun, 10 Sep 2017 02:06:41 GMT
5286[i] Content-Type: text/html
5287[i] Connection: close
5288[i] Vary: Accept-Encoding
5289[i] X-Powered-By: PHP/5.4.45-0+deb7u8
5290[i] Vary: Accept-Encoding
5291
5292
5293
5294
5295D N S L O O K U P
5296===================
5297
5298smallmodels.net. 56 IN A 93.174.91.159
5299smallmodels.net. 3600 IN NS pns26.cloudns.net.
5300smallmodels.net. 3600 IN NS pns23.cloudns.net.
5301smallmodels.net. 3600 IN NS pns28.cloudns.net.
5302smallmodels.net. 3600 IN NS pns25.cloudns.net.
5303smallmodels.net. 3600 IN NS ns24.cloudns.net.
5304smallmodels.net. 3600 IN NS ns21.cloudns.net.
5305smallmodels.net. 3600 IN NS pns30.cloudns.net.
5306smallmodels.net. 3600 IN NS pns27.cloudns.net.
5307smallmodels.net. 3600 IN NS pns24.cloudns.net.
5308smallmodels.net. 3600 IN NS pns29.cloudns.net.
5309smallmodels.net. 3600 IN NS ns23.cloudns.net.
5310smallmodels.net. 3600 IN NS ns22.cloudns.net.
5311smallmodels.net. 3600 IN NS pns21.cloudns.net.
5312smallmodels.net. 3600 IN NS pns22.cloudns.net.
5313smallmodels.net. 3600 IN SOA ns21.cloudns.net. support.cloudns.net. 2017091010 7200 1800 1209600 3600
5314
5315
5316
5317
5318S U B N E T C A L C U L A T I O N
5319====================================
5320
5321Address = 93.174.91.159
5322Network = 93.174.91.159 / 32
5323Netmask = 255.255.255.255
5324Broadcast = not needed on Point-to-Point links
5325Wildcard Mask = 0.0.0.0
5326Hosts Bits = 0
5327Max. Hosts = 1 (2^0 - 0)
5328Host Range = { 93.174.91.159 - 93.174.91.159 }
5329
5330
5331
5332N M A P P O R T S C A N
5333============================
5334
5335
5336Starting Nmap 7.01 ( https://nmap.org ) at 2017-09-10 02:03 UTC
5337Nmap scan report for smallmodels.net (93.174.91.159)
5338Host is up (0.083s latency).
5339rDNS record for 93.174.91.159: no-reverse-dns-configured.com
5340PORT STATE SERVICE VERSION
534121/tcp open ftp vsftpd 3.0.2
534222/tcp open ssh OpenSSH 6.0p1 Debian 4+deb7u6 (protocol 2.0)
534323/tcp closed telnet
534425/tcp closed smtp
534580/tcp open http nginx
5346110/tcp closed pop3
5347143/tcp closed imap
5348443/tcp closed https
5349445/tcp closed microsoft-ds
53503389/tcp closed ms-wbt-server
5351Service Info: OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel
5352
5353Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
5354Nmap done: 1 IP address (1 host up) scanned in 8.39 seconds
5355
5356
5357
5358S U B - D O M A I N F I N D E R
5359==================================
5360
5361
5362[i] Total Subdomains Found : 1
5363
5364[+] Subdomain: smallmodels.net
5365[-] IP: 89.248.166.21
5366[*] Performing TLD Brute force Enumeration against smallmodels.net
5367[*] The operation could take up to: 00:01:07
5368[*] A smallmodels.biz.af 5.45.75.45
5369[*] A smallmodels.co.asia 91.195.240.135
5370[*] CNAME smallmodels.biz.at free.biz.at
5371[*] A free.biz.at 216.92.134.29
5372[*] A smallmodels.org.aw 142.4.20.12
5373[*] A smallmodels.co.ba 176.9.45.78
5374[*] A smallmodels.com.ba 195.222.33.180
5375[*] A smallmodels.com.be 95.173.170.166
5376[*] A smallmodels.biz.by 71.18.52.2
5377[*] A smallmodels.biz.bz 199.59.242.150
5378[*] A smallmodels.com.cc 54.252.107.64
5379[*] A smallmodels.net.cc 54.252.89.206
5380[*] A smallmodels.co.cc 175.126.123.219
5381[*] A smallmodels.org.ch 72.52.4.122
5382[*] A smallmodels.co.cm 85.25.140.105
5383[*] A smallmodels.net.cm 85.25.140.105
5384[*] A smallmodels.biz.cl 185.53.178.8
5385[*] A smallmodels.com.com 52.33.196.199
5386[*] A smallmodels.net.com 199.59.242.150
5387[*] A smallmodels.co.com 173.192.115.17
5388[*] A smallmodels.org.com 23.23.86.44
5389[*] CNAME smallmodels.com HDRedirect-LB3-890977680.us-east-1.elb.amazonaws.com
5390[*] A HDRedirect-LB3-890977680.us-east-1.elb.amazonaws.com 54.172.131.220
5391[*] A HDRedirect-LB3-890977680.us-east-1.elb.amazonaws.com 52.71.185.125
5392[*] CNAME smallmodels.biz.cm i.cns.cm
5393[*] A i.cns.cm 118.184.56.30
5394[*] A smallmodels.biz.cr 72.52.4.122
5395[*] A smallmodels.biz.cx 72.52.4.122
5396[*] A smallmodels.net.cz 80.250.24.177
5397[*] A smallmodels.biz.cz 185.53.179.7
5398[*] A smallmodels.com.cz 62.109.128.30
5399[*] A smallmodels.cz 193.85.185.32
5400[*] CNAME smallmodels.co.de co.de
5401[*] A co.de 144.76.162.245
5402[*] A smallmodels.com.de 50.56.68.37
5403[*] CNAME smallmodels.org.de www.org.de
5404[*] A www.org.de 78.47.128.8
5405[*] A smallmodels.net.eu 78.46.90.98
5406[*] A smallmodels.org.eu 78.46.90.98
5407[*] A smallmodels.biz.fi 185.55.85.123
5408[*] A smallmodels.fm 173.230.131.38
5409[*] A smallmodels.biz.fm 173.230.131.38
5410[*] A smallmodels.org.fr 149.202.133.35
5411[*] A smallmodels.biz.gl 72.52.4.122
5412[*] CNAME smallmodels.co.gp co.gp
5413[*] A co.gp 144.76.162.245
5414[*] A smallmodels.co.hn 208.100.40.203
5415[*] CNAME smallmodels.net.hr net.hr
5416[*] A net.hr 192.0.78.25
5417[*] A net.hr 192.0.78.24
5418[*] CNAME smallmodels.biz.hn parkmydomain.vhostgo.com
5419[*] A parkmydomain.vhostgo.com 107.186.245.118
5420[*] A smallmodels.co.ht 72.52.4.122
5421[*] A smallmodels.co.jobs 50.17.193.222
5422[*] A smallmodels.com.jobs 50.19.241.165
5423[*] A smallmodels.net.jobs 50.19.241.165
5424[*] A smallmodels.biz.jobs 50.19.241.165
5425[*] A smallmodels.org.jobs 50.19.241.165
5426[*] A smallmodels.biz.ky 199.184.144.27
5427[*] CNAME smallmodels.biz.li 712936.parkingcrew.net
5428[*] A 712936.parkingcrew.net 185.53.179.29
5429[*] A smallmodels.biz.lu 195.26.5.2
5430[*] A smallmodels.biz.ly 64.136.20.39
5431[*] A smallmodels.biz.md 72.52.4.122
5432[*] A smallmodels.co.mk 87.76.31.211
5433[*] A smallmodels.co.mobi 54.225.105.179
5434[*] A smallmodels.biz.my 202.190.174.44
5435[*] A smallmodels.co.net 188.166.216.219
5436[*] A smallmodels.net.net 52.50.81.210
5437[*] A smallmodels.org.net 23.23.86.44
5438[*] A smallmodels.net 94.102.48.103
5439[*] A smallmodels.co.nl 37.97.184.204
5440[*] A smallmodels.com.nl 83.98.157.102
5441[*] A smallmodels.net.nl 83.98.157.102
5442[*] A smallmodels.co.nr 208.100.40.202
5443[*] CNAME smallmodels.co.nu co.nu
5444[*] A co.nu 144.76.162.245
5445[*] A smallmodels.net.nu 199.102.76.78
5446[*] CNAME smallmodels.com.nu com.nu
5447[*] A com.nu 144.76.162.245
5448[*] A smallmodels.org.nu 80.92.84.139
5449[*] A smallmodels.com.org 23.23.86.44
5450[*] CNAME smallmodels.net.org pewtrusts.org
5451[*] A pewtrusts.org 204.74.99.100
5452[*] A smallmodels.org 157.7.184.14
5453[*] A smallmodels.ph 45.79.222.138
5454[*] A smallmodels.co.ph 45.79.222.138
5455[*] A smallmodels.com.ph 45.79.222.138
5456[*] A smallmodels.net.ph 45.79.222.138
5457[*] A smallmodels.org.ph 45.79.222.138
5458[*] A smallmodels.co.pl 212.91.6.55
5459[*] A smallmodels.org.pm 208.73.211.165
5460[*] A smallmodels.org.pm 208.73.210.202
5461[*] A smallmodels.org.pm 208.73.210.217
5462[*] A smallmodels.org.pm 208.73.211.177
5463[*] A smallmodels.co.ps 66.96.132.56
5464[*] CNAME smallmodels.biz.ps biz.ps
5465[*] A biz.ps 144.76.162.245
5466[*] A smallmodels.co.pt 194.107.127.52
5467[*] A smallmodels.co.pw 141.8.226.59
5468[*] A smallmodels.net.pw 141.8.226.59
5469[*] A smallmodels.pw 141.8.226.58
5470[*] A smallmodels.org.pw 141.8.226.59
5471[*] A smallmodels.biz.pw 141.8.226.59
5472[*] CNAME smallmodels.co.ro now.co.ro
5473[*] A now.co.ro 185.27.255.9
5474[*] A smallmodels.net.ro 69.64.52.127
5475[*] A smallmodels.org.re 217.70.184.38
5476[*] A smallmodels.com.ru 178.210.89.119
5477[*] A smallmodels.biz.se 185.53.179.6
5478[*] CNAME smallmodels.net.se 773147.parkingcrew.net
5479[*] A 773147.parkingcrew.net 185.53.179.29
5480[*] A smallmodels.co.sl 91.195.240.135
5481[*] A smallmodels.com.sr 143.95.106.249
5482[*] A smallmodels.biz.st 91.121.28.115
5483[*] A smallmodels.co.su 72.52.4.122
5484[*] A smallmodels.biz.tc 64.136.20.39
5485[*] A smallmodels.biz.tf 85.236.153.18
5486[*] A smallmodels.net.tf 188.40.70.29
5487[*] A smallmodels.net.tf 188.40.70.27
5488[*] A smallmodels.net.tf 188.40.117.12
5489[*] A smallmodels.co.tl 208.100.40.202
5490[*] A smallmodels.co.to 175.118.124.44
5491[*] A smallmodels.co.tv 31.186.25.163
5492[*] A smallmodels.biz.tv 72.52.4.122
5493[*] A smallmodels.org.tv 72.52.4.122
5494[*] CNAME smallmodels.biz.uz biz.uz
5495[*] A biz.uz 144.76.162.245
5496[*] A smallmodels.vg 88.198.29.97
5497[*] A smallmodels.co.vg 88.198.29.97
5498[*] A smallmodels.com.vg 88.198.29.97
5499[*] A smallmodels.net.vg 68.178.254.180
5500[*] A smallmodels.biz.vg 89.31.143.20
5501[*] A smallmodels.ws 64.70.19.203
5502[*] A smallmodels.biz.ws 184.168.221.104
5503[*] A smallmodels.com.ws 202.4.48.211
5504[*] A smallmodels.net.ws 202.4.48.211
5505[*] A smallmodels.org.ws 202.4.48.211
5506 Domain Name: SMALLMODELS.NET
5507 Registry Domain ID: 1778057866_DOMAIN_NET-VRSN
5508 Registrar WHOIS Server: whois.bizcn.com
5509 Registrar URL: http://www.bizcn.com
5510 Updated Date: 2017-04-28T08:20:45Z
5511 Creation Date: 2013-02-03T08:00:40Z
5512 Registry Expiry Date: 2018-02-03T08:00:40Z
5513 Registrar: Bizcn.com, Inc.
5514 Registrar IANA ID: 471
5515 Registrar Abuse Contact Email:
5516 Registrar Abuse Contact Phone:
5517 Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
5518 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
5519 Name Server: NS23.CLOUDNS.NET
5520 Name Server: PNS21.CLOUDNS.NET
5521 Name Server: PNS23.CLOUDNS.NET
5522 Name Server: PNS24.CLOUDNS.NET
5523 Name Server: PNS28.CLOUDNS.NET
5524 Name Server: PNS30.CLOUDNS.NET
5525
5526Domain name: smallmodels.net
5527Registry Domain ID: 1778057866_DOMAIN_NET-VRSN
5528Registrar WHOIS Server: whois.bizcn.com
5529Registrar URL: http://www.bizcn.com
5530Updated Date: 2017-02-02T23:01:18Z
5531Creation Date: 2013-02-03T08:00:40Z
5532Registrar Registration Expiration Date: 2018-02-03T08:00:40Z
5533Registrar: Bizcn.com,Inc.
5534Registrar IANA ID: 471
5535Registrar Abuse Contact Email: abuse@bizcn.com
5536Registrar Abuse Contact Phone: +86.5922577888
5537Reseller: Cnobin Technology HK Limited
5538Domain Status: clientDeleteProhibited (http://www.icann.org/epp#clientDeleteProhibited)
5539Domain Status: clientTransferProhibited (http://www.icann.org/epp#clientTransferProhibited)
5540Registry Registrant ID: Not Available From Registry
5541Registrant Name: Wuxi Yilian LLC
5542Registrant Organization: Wuxi Yilian LLC
5543Registrant Street: No.1001 Anling Road
5544Registrant City: Xiamen
5545Registrant State/Province: Fujian
5546Registrant Postal Code: 361008
5547Registrant Country: cn
5548Registrant Phone: +86.5922577888
5549Registrant Phone Ext:
5550Registrant Fax: +86.5922179606
5551Registrant Fax Ext:
5552Registrant Email: whoisprivacyprotect@whoisservices.cn
5553Registry Admin ID: Not Available From Registry
5554Admin Name: Wuxi Yilian LLC
5555Admin Organization: Wuxi Yilian LLC
5556Admin Street: No.1001 Anling Road
5557Admin City: Xiamen
5558Admin State/Province: Fujian
5559Admin Postal Code: 361008
5560Admin Country: cn
5561Admin Phone: +86.5922577888
5562Admin Phone Ext:
5563Admin Fax: +86.5922179606
5564Admin Fax Ext:
5565Admin Email: whoisprivacyprotect@whoisservices.cn
5566Registry Tech ID: Not Available From Registry
5567Tech Name: Wuxi Yilian LLC
5568Tech Organization: Wuxi Yilian LLC
5569Tech Street: No.1001 Anling Road
5570Tech City: Xiamen
5571Tech State/Province: Fujian
5572Tech Postal Code: 361008
5573Tech Country: cn
5574Tech Phone: +86.5922577888
5575Tech Phone Ext:
5576Tech Fax: +86.5922179606
5577Tech Fax Ext:
5578Tech Email: whoisprivacyprotect@whoisservices.cn
5579Name Server: pns23.cloudns.net
5580Name Server: pns24.cloudns.net
5581Name Server: pns21.cloudns.net
5582Name Server: pns28.cloudns.net
5583Name Server: pns30.cloudns.net
5584Name Server: ns23.cloudns.net
5585
5586;smallmodels.net. IN ANY
5587
5588;; ANSWER SECTION:
5589smallmodels.net. 2232 IN NS pns28.cloudns.net.
5590smallmodels.net. 2232 IN NS pns23.cloudns.net.
5591smallmodels.net. 2232 IN NS pns27.cloudns.net.
5592smallmodels.net. 2232 IN NS pns30.cloudns.net.
5593smallmodels.net. 2232 IN NS pns24.cloudns.net.
5594smallmodels.net. 2232 IN NS pns29.cloudns.net.
5595smallmodels.net. 2232 IN NS pns26.cloudns.net.
5596smallmodels.net. 2232 IN NS ns22.cloudns.net.
5597smallmodels.net. 2232 IN NS pns22.cloudns.net.
5598smallmodels.net. 2232 IN NS ns23.cloudns.net.
5599smallmodels.net. 2232 IN NS pns25.cloudns.net.
5600smallmodels.net. 2232 IN NS ns24.cloudns.net.
5601smallmodels.net. 2232 IN NS pns21.cloudns.net.
5602smallmodels.net. 2232 IN NS ns21.cloudns.net.
5603
5604
5605----- smallmodels.net -----
5606
5607
5608Host's addresses:
5609__________________
5610
5611smallmodels.net. 40 IN A 93.174.91.159
5612
5613
5614Wildcard detection using: bkpnbylfekfc
5615_______________________________________
5616
5617bkpnbylfekfc.smallmodels.net. 60 IN A 93.174.91.159
5618
5619
5620!!!!!!!!!!!!!!!!!!!!!!!!!!!!
5621
5622 Wildcards detected, all subdomains will point to the same IP address
5623 Omitting results containing 93.174.91.159.
5624 Maybe you are using OpenDNS servers.
5625
5626!!!!!!!!!!!!!!!!!!!!!!!!!!!!
5627
5628
5629Name Servers:
5630______________
5631
5632pns29.cloudns.net. 143963 IN A 185.136.96.96
5633pns30.cloudns.net. 130954 IN A 185.136.96.96
5634pns26.cloudns.net. 143963 IN A 185.136.97.96
5635pns24.cloudns.net. 120830 IN A 185.136.99.96
5636ns23.cloudns.net. 119968 IN A 79.137.84.65
5637pns23.cloudns.net. 120830 IN A 185.136.98.96
5638ns24.cloudns.net. 155931 IN A 46.165.221.164
5639pns25.cloudns.net. 143963 IN A 185.136.96.96
5640pns28.cloudns.net. 88589 IN A 185.136.99.96
5641ns22.cloudns.net. 119967 IN A 108.59.2.202
5642pns21.cloudns.net. 120428 IN A 185.136.96.96
5643pns22.cloudns.net. 120797 IN A 185.136.97.96
5644pns27.cloudns.net. 143963 IN A 185.136.98.96
5645ns21.cloudns.net. 119967 IN A 109.201.133.61
5646
5647smallmodels.net class C netranges:
5648___________________________________
5649
5650 93.174.91.0/24
5651
5652
5653Performing reverse lookup on 256 ip addresses:
5654_______________________________________________
5655
5656
56570 results out of 256 IP addresses.
5658
5659
5660smallmodels.net ip blocks:
5661___________________________
5662
5663
5664
5665
5666WhatWeb report for http://smallmodels.net
5667Status : 200 OK
5668Title : virginity was, pictures teen, sweet teen
5669IP : 93.174.91.159
5670Country : NETHERLANDS, NL
5671
5672Summary : X-Powered-By[PHP/5.4.45-0+deb7u8], HTTPServer[nginx], PHP[5.4.45-0+deb7u8], Frame, nginx, Script[text/javascript]
5673
5674Detected Plugins:
5675[ Frame ]
5676 This plugin detects instances of frame and iframe HTML
5677 elements.
5678
5679
5680[ HTTPServer ]
5681 HTTP server header string. This plugin also attempts to
5682 identify the operating system from the server header.
5683
5684 String : nginx (from server string)
5685
5686[ PHP ]
5687 PHP is a widely-used general-purpose scripting language
5688 that is especially suited for Web development and can be
5689 embedded into HTML. This plugin identifies PHP errors,
5690 modules and versions and extracts the local file path and
5691 username if present.
5692
5693 Version : 5.4.45-0+deb7u8
5694 Google Dorks: (2)
5695 Website : http://www.php.net/
5696
5697[ Script ]
5698 This plugin detects instances of script HTML elements and
5699 returns the script language/type.
5700
5701 String : text/javascript
5702
5703[ X-Powered-By ]
5704 X-Powered-By HTTP header
5705
5706 String : PHP/5.4.45-0+deb7u8 (from x-powered-by string)
5707
5708[ nginx ]
5709 Nginx (Engine-X) is a free, open-source, high-performance
5710 HTTP server and reverse proxy, as well as an IMAP/POP3
5711 proxy server.
5712
5713 Website : http://nginx.net/
5714
5715HTTP Headers:
5716 HTTP/1.1 200 OK
5717 Server: nginx
5718 Date: Sun, 10 Sep 2017 02:12:26 GMT
5719 Content-Type: text/html
5720 Content-Length: 15487
5721 Connection: close
5722 X-Powered-By: PHP/5.4.45-0+deb7u8
5723 Vary: Accept-Encoding
5724 Content-Encoding: gzip
5725
5726
5727
5728------------------------------------
5729[-] Resolving hostnames IPs...
573093.174.91.159:www.smallmodels.net
5731
5732
5733
5734 ^ ^
5735 _ __ _ ____ _ __ _ _ ____
5736 ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
5737 | V V // o // _/ | V V // 0 // 0 // _/
5738 |_n_,'/_n_//_/ |_n_,' \_,' \_,'/_/
5739 <
5740 ...'
5741
5742 WAFW00F - Web Application Firewall Detection Tool
5743
5744 By Sandro Gauci && Wendel G. Henrique
5745
5746Checking http://smallmodels.net
5747Generic Detection results:
5748No WAF detected by the generic detection
5749Number of requests: 13
5750
5751
5752DNS Servers for smallmodels.net:
5753 pns26.cloudns.net
5754 pns22.cloudns.net
5755 pns21.cloudns.net
5756 pns28.cloudns.net
5757 pns24.cloudns.net
5758 ns23.cloudns.net
5759 pns23.cloudns.net
5760 pns25.cloudns.net
5761 ns21.cloudns.net
5762 pns29.cloudns.net
5763 pns30.cloudns.net
5764 ns24.cloudns.net
5765 ns22.cloudns.net
5766
5767lbd - load balancing detector 0.2 - Checks if a given domain uses load-balancing.
5768 Written by Stefan Behte (http://ge.mine.nu)
5769 Proof-of-concept! Might give false positives.
5770
5771Checking for DNS-Loadbalancing: NOT FOUND
5772Checking for HTTP-Loadbalancing [Server]:
5773 nginx
5774 NOT FOUND
5775
5776Checking for HTTP-Loadbalancing [Date]: 02:21:50, 02:21:50, 02:21:50, 02:21:51, 02:21:51, 02:21:51, 02:21:51, 02:21:52, 02:21:55, 02:21:56, 02:21:57, 02:21:57, 02:21:57, 02:21:57, 02:21:58, 02:21:58, 02:21:58, 02:21:58, 02:21:59, 02:21:59, 02:21:59, 02:21:59, 02:22:00, 02:22:00, 02:22:00, 02:22:00, 02:22:01, 02:22:01, 02:22:01, 02:22:02, 02:22:02, 02:22:02, 02:22:02, 02:22:03, 02:22:03, 02:22:03, 02:22:03, 02:22:04, 02:22:04, 02:22:04, 02:22:05, 02:22:05, 02:22:05, 02:22:06, 02:22:06, 02:22:06, 02:22:07, 02:22:07, 02:22:07, 02:22:07, NOT FOUND
5777
5778Checking for HTTP-Loadbalancing [Diff]: NOT FOUND
5779
5780smallmodels.net does NOT use Load-balancing.
5781
5782
5783
5784Starting smtp-user-enum v1.2 ( http://pentestmonkey.net/tools/smtp-user-enum )
5785
5786 ----------------------------------------------------------
5787| Scan Information |
5788 ----------------------------------------------------------
5789
5790Mode ..................... VRFY
5791Worker Processes ......... 5
5792Usernames file ........... users.txt
5793Target count ............. 1
5794Username count ........... 494
5795Target TCP port .......... 25
5796Query timeout ............ 5 secs
5797Target domain ............
5798
5799######## Scan started at Sat Sep 9 22:18:42 2017 #########
5800######## Scan completed at Sat Sep 9 22:26:57 2017 #########
58010 results.
5802
5803494 queries in 495 seconds (1.0 queries / sec)
5804
5805
5806
5807Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 22:26 EDT
5808NSE: Loaded 146 scripts for scanning.
5809NSE: Script Pre-scanning.
5810Initiating NSE at 22:26
5811Completed NSE at 22:26, 0.00s elapsed
5812Initiating NSE at 22:26
5813Completed NSE at 22:26, 0.00s elapsed
5814Failed to resolve "smallmodels.net.txt".
5815Initiating Parallel DNS resolution of 1 host. at 22:26
5816Completed Parallel DNS resolution of 1 host. at 22:26, 0.06s elapsed
5817Initiating SYN Stealth Scan at 22:26
5818Scanning smallmodels.net (93.174.91.159) [100 ports]
5819Discovered open port 22/tcp on 93.174.91.159
5820Discovered open port 21/tcp on 93.174.91.159
5821Discovered open port 80/tcp on 93.174.91.159
5822Discovered open port 53/tcp on 93.174.91.159
5823Discovered open port 111/tcp on 93.174.91.159
5824Increasing send delay for 93.174.91.159 from 0 to 5 due to 63 out of 157 dropped probes since last increase.
5825Completed SYN Stealth Scan at 22:27, 3.48s elapsed (100 total ports)
5826Initiating Service scan at 22:27
5827Scanning 5 services on smallmodels.net (93.174.91.159)
5828Completed Service scan at 22:27, 11.38s elapsed (5 services on 1 host)
5829Initiating OS detection (try #1) against smallmodels.net (93.174.91.159)
5830Retrying OS detection (try #2) against smallmodels.net (93.174.91.159)
5831adjust_timeouts2: packet supposedly had rtt of -53295 microseconds. Ignoring time.
5832adjust_timeouts2: packet supposedly had rtt of -53295 microseconds. Ignoring time.
5833Initiating Traceroute at 22:27
5834Completed Traceroute at 22:27, 3.01s elapsed
5835Initiating Parallel DNS resolution of 8 hosts. at 22:27
5836Completed Parallel DNS resolution of 8 hosts. at 22:27, 5.51s elapsed
5837NSE: Script scanning 93.174.91.159.
5838Initiating NSE at 22:27
5839Completed NSE at 22:28, 63.10s elapsed
5840Initiating NSE at 22:28
5841Completed NSE at 22:28, 0.34s elapsed
5842Nmap scan report for smallmodels.net (93.174.91.159)
5843Host is up (0.13s latency).
5844rDNS record for 93.174.91.159: no-reverse-dns-configured.com
5845Not shown: 89 closed ports
5846PORT STATE SERVICE VERSION
584721/tcp open ftp vsftpd 3.0.2
584822/tcp open ssh OpenSSH 6.0p1 Debian 4+deb7u6 (protocol 2.0)
5849| ssh-hostkey:
5850| 1024 ab:16:56:89:21:7e:75:1c:77:f3:a2:7e:c2:f1:4c:09 (DSA)
5851| 2048 22:f8:e3:f6:1a:1c:6a:99:09:6b:1e:7c:fd:30:e3:95 (RSA)
5852|_ 256 a8:03:f4:96:36:d1:39:de:2e:4f:56:e9:0f:f3:63:56 (ECDSA)
585325/tcp filtered smtp
585453/tcp open domain
5855| dns-nsid:
5856|_ bind.version: 9.8.4-rpz2+rl005.12-P1
585780/tcp open http nginx
5858|_http-favicon: Unknown favicon MD5: C34DD2A3D94F9DDA8F0C943EAC5816ED
5859| http-methods:
5860|_ Supported Methods: POST OPTIONS
5861|_http-server-header: nginx
5862|_http-title: virginity was, pictures teen, sweet teen
5863111/tcp open rpcbind 2-4 (RPC #100000)
5864135/tcp filtered msrpc
5865139/tcp filtered netbios-ssn
5866445/tcp filtered microsoft-ds
5867465/tcp filtered smtps
5868587/tcp filtered submission
5869Aggressive OS guesses: Linux 2.6.39 (96%), Linux 3.2 - 3.8 (95%), Linux 3.8 (95%), WatchGuard Fireware 11.8 (95%), Linux 3.1 - 3.2 (94%), Linux 2.6.32 - 2.6.39 (93%), Linux 3.5 (92%), Linux 3.0 - 3.2 (92%), Linux 2.6.32 (91%), Linux 3.0 (91%)
5870No exact OS matches for host (test conditions non-ideal).
5871Uptime guess: 6.417 days (since Sun Sep 3 12:27:47 2017)
5872Network Distance: 11 hops
5873TCP Sequence Prediction: Difficulty=261 (Good luck!)
5874IP ID Sequence Generation: All zeros
5875Service Info: OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel
5876
5877TRACEROUTE (using port 110/tcp)
5878HOP RTT ADDRESS
58791 109.55 ms 10.13.0.1
58802 110.72 ms 37.187.24.252
58813 110.70 ms po101.gra-g2-a75.fr.eu (178.33.103.231)
58824 ...
58835 119.00 ms be100-1113.fra-5-a9.de.eu (91.121.131.19)
58846 118.98 ms be100-2.fra-1-a9.de.eu (94.23.122.217)
58857 ...
58868 124.45 ms vlan3555.bb1.ams2.nl.m247.com (176.10.83.128)
58879 120.49 ms 176.10.83.5
588810 ...
588911 120.50 ms no-reverse-dns-configured.com (93.174.91.159)
5890
5891NSE: Script Post-scanning.
5892Initiating NSE at 22:28
5893Completed NSE at 22:28, 0.00s elapsed
5894Initiating NSE at 22:28
5895Completed NSE at 22:28, 0.00s elapsed
5896Read data files from: /usr/bin/../share/nmap
5897OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
5898Nmap done: 1 IP address (1 host up) scanned in 92.78 seconds
5899 Raw packets sent: 258 (13.276KB) | Rcvd: 216 (12.476KB)
5900
5901
5902 _/ _/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/
5903 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
5904 _/ _/ _/_/_/_/ _/_/_/ _/ _/_/_/ _/_/_/_/ _/ _/_/_/ _/_/_/_
5905 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
5906 _/_/_/_/ _/ _/ _/ _/_/_/_/ _/_/_/_/ _/ _/_/_/_/ _/ _/ [v1.06]
5907
5908 _/ User-Agent Tester ↵
5909 _/ AKA: Purple Pimp ↵
5910 _/ ChrisJohnRiley ↵
5911 _/ blog.c22.cc ↵
5912
5913 [>] Performing initial request and confirming stability
5914 [>] Using User-Agent string Mozilla/5.0
5915
5916 [ ] URL (ENTERED): http://smallmodels.net
5917 [ ] Response Code: 200 OK
5918 [ ] Server: nginx
5919 [ ] Date: Sun, 10 Sep 2017 02:32:14 GMT
5920 [ ] Content-Type: text/html
5921 [ ] Transfer-Encoding: chunked
5922 [ ] Connection: close
5923 [ ] Vary: Accept-Encoding
5924 [ ] X-Powered-By: PHP/5.4.45-0+deb7u8
5925 [ ] Vary: Accept-Encoding
5926 [ ] Data (MD5): 4698c44f52dbf23b268a2a232f5c5d4d
5927
5928 [1] Pass
5929 [2] Pass
5930 [3] Pass
5931
5932 [>] URL appears stable. Beginning test
5933
5934 [>] Using DEFAULT User-Agent Strings
5935
5936 [>] Using Crazy User-Agent Strings
5937 [>] Using Bot User-Agent Strings
5938
5939 [>] Output: [+] Added Headers, [-] Removed Headers, [!] Altered Headers, [ ] No Change
5940
5941
5942 [>] Checks completed... try enabling VERBOSE mode for more detailed output
5943
5944 [>] That's all folks... Fo' Shizzle!
5945#########################################################################################
5946Hostname littleshoolgirls.com ISP Quasi Networks LTD. (AS29073)
5947Continent Africa Flag
5948SC
5949Country Seychelles Country Code SC (SYC)
5950Region Unknown Local time 10 Sep 2017 06:18 +04
5951City Unknown Latitude -4.583
5952IP Address 94.102.48.103 Longitude 55.667
5953##########################################################################################
5954
5955whois littleshoolgirls.com
5956 Domain Name: LITTLESHOOLGIRLS.COM
5957 Registry Domain ID: 1777538070_DOMAIN_COM-VRSN
5958 Registrar WHOIS Server: whois.pairnic.com
5959 Registrar URL: http://www.pairnic.com
5960 Updated Date: 2017-04-19T11:39:58Z
5961 Creation Date: 2013-01-31T17:56:46Z
5962 Registry Expiry Date: 2018-01-31T17:56:46Z
5963 Registrar: Pair Networks Inc.d/b/a pairNIC
5964 Registrar IANA ID: 99
5965 Registrar Abuse Contact Email:
5966 Registrar Abuse Contact Phone:
5967 Domain Status: ok https://icann.org/epp#ok
5968 Name Server: PNS21.CLOUDNS.NET
5969 Name Server: PNS22.CLOUDNS.NET
5970 Name Server: PNS23.CLOUDNS.NET
5971 Name Server: PNS24.CLOUDNS.NET
5972 DNSSEC: unsigned
5973
5974 Domain Name: littleshoolgirls.com
5975 Registry Domain ID: 1777538070_DOMAIN_COM-VRSN
5976 Registrar WHOIS Server: whois.pairDomains.com
5977 Registrar URL: https://www.pairDomains.com
5978 Updated Date: 2017-04-19T11:39:58+0000Z
5979 Creation Date: 2013-01-31T17:56:46+0000Z
5980 Registrar Registration Expiration Date: 2018-01-31T17:56:46+0000Z
5981 Registrar: pair Domains INC
5982 Registrar IANA ID: 99
5983 Registrar Abuse Contact Email: abuse@pairdomains.com
5984 Registrar Abuse Contact Phone: +1.8887247642
5985 Registry Registrant ID:
5986 Registrant Name: denis duchene
5987 Registrant Organization:
5988 Registrant Street: c/o pairDomains.com Whois Privacy PO Box 42319
5989 Registrant City: Pittsburgh
5990 Registrant State/Province: PA
5991 Registrant Postal Code: 15203
5992 Registrant Country: US
5993 Registrant Phone: +1.4123257437
5994 Registrant Phone Ext:
5995 Registrant Fax:
5996 Registrant Fax Ext:
5997 Registrant Email: 915q6w4i8499@nojunkemailaddress.com
5998 Registry Admin ID:
5999 Admin Name: denis duchene
6000 Admin Organization:
6001 Admin Street: c/o pairDomains.com Whois Privacy PO Box 42319
6002 Admin City: Pittsburgh
6003 Admin State/Province: PA
6004 Admin Postal Code: 15203
6005 Admin Country: US
6006 Admin Phone: +1.4123257437
6007 Admin Phone Ext:
6008 Admin Fax:
6009 Admin Fax Ext:
6010 Admin Email: 915q6w4i8499@nojunkemailaddress.com
6011 Registry Tech ID:
6012 Tech Name: denis duchene
6013 Tech Organization:
6014 Tech Street: c/o pairDomains.com Whois Privacy PO Box 42319
6015 Tech City: Pittsburgh
6016 Tech State/Province: PA
6017 Tech Postal Code: 15203
6018 Tech Country: US
6019 Tech Phone: +1.4123257437
6020 Tech Phone Ext:
6021 Tech Fax:
6022 Tech Fax Ext:
6023 Tech Email: 915q6w4i8499@nojunkemailaddress.com
6024 Name Server: PNS22.CLOUDNS.NET
6025 Name Server: PNS24.CLOUDNS.NET
6026 Name Server: PNS23.CLOUDNS.NET
6027 Name Server: PNS21.CLOUDNS.NET
6028
6029
6030###########################################################################################
6031
6032;littleshoolgirls.com. IN ANY
6033
6034;; ANSWER SECTION:
6035littleshoolgirls.com. 35 IN A 94.102.48.103
6036littleshoolgirls.com. 987 IN NS pns21.cloudns.net.
6037littleshoolgirls.com. 987 IN NS ns22.cloudns.net.
6038littleshoolgirls.com. 987 IN NS ns23.cloudns.net.
6039littleshoolgirls.com. 987 IN NS pns24.cloudns.net.
6040littleshoolgirls.com. 987 IN NS pns22.cloudns.net.
6041littleshoolgirls.com. 987 IN NS ns21.cloudns.net.
6042littleshoolgirls.com. 987 IN NS pns23.cloudns.net.
6043littleshoolgirls.com. 987 IN NS ns24.cloudns.net.
6044
6045;; Query time: 9 msec
6046;; SERVER: 192.168.1.254#53(192.168.1.254)
6047;; WHEN: Sat Sep 09 22:21:52 EDT 2017
6048;; MSG SIZE rcvd: 232
6049
6050###########################################################################################
6051
6052
6053Checking for HTTP-Loadbalancing [Date]: 02:26:00, 02:26:00, 02:26:00, 02:26:00, 02:26:01, 02:26:01, 02:26:01, 02:26:01, 02:26:02, 02:26:02, 02:26:02, 02:26:03, 02:26:03, 02:26:03, 02:26:03, 02:26:04, 02:26:04, 02:26:04, 02:26:04, 02:26:05, 02:26:05, 02:26:05, 02:26:05, 02:26:06, 02:26:06, 02:26:06, 02:26:07, 02:26:07, 02:26:07, 02:26:08, 02:26:08, 02:26:08, 02:26:08, 02:26:09, 02:26:09, 02:26:09, 02:26:09, 02:26:10, 02:26:10, 02:26:10, 02:26:10, 02:26:11, 02:26:11, 02:26:11, 02:26:12, 02:26:12, 02:26:12, 02:26:12, 02:26:13, 02:26:13, NOT FOUND
6054
6055###########################################################################################
6056
6057nmap -PN -n -F -T4 -sV -A -oG temp.txt littleshoolgirls.com
6058
6059Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 22:22 EDT
6060Nmap scan report for littleshoolgirls.com (94.102.48.103)
6061Host is up (0.12s latency).
6062Not shown: 89 closed ports
6063PORT STATE SERVICE VERSION
606421/tcp open ftp vsftpd 3.0.2
606522/tcp open ssh OpenSSH 6.0p1 Debian 4+deb7u6 (protocol 2.0)
6066| ssh-hostkey:
6067| 1024 ab:16:56:89:21:7e:75:1c:77:f3:a2:7e:c2:f1:4c:09 (DSA)
6068| 2048 22:f8:e3:f6:1a:1c:6a:99:09:6b:1e:7c:fd:30:e3:95 (RSA)
6069|_ 256 a8:03:f4:96:36:d1:39:de:2e:4f:56:e9:0f:f3:63:56 (ECDSA)
607025/tcp filtered smtp
607153/tcp open domain
6072| dns-nsid:
6073|_ bind.version: 9.8.4-rpz2+rl005.12-P1
607480/tcp open http nginx
6075|_http-server-header: nginx
6076|_http-title: teenstight teens pictures, teens your videos, drunk amateur...
6077111/tcp open rpcbind 2-4 (RPC #100000)
6078135/tcp filtered msrpc
6079139/tcp filtered netbios-ssn
6080445/tcp filtered microsoft-ds
6081465/tcp filtered smtps
6082587/tcp filtered submission
6083Aggressive OS guesses: Linux 2.6.39 (96%), Linux 3.2 - 3.8 (94%), Linux 3.8 (94%), WatchGuard Fireware 11.8 (94%), Linux 3.1 - 3.2 (94%), Linux 2.6.32 - 2.6.39 (92%), Linux 3.5 (92%), Linux 3.0 - 3.2 (91%), Linux 2.6.32 (91%), Linux 3.0 (91%)
6084No exact OS matches for host (test conditions non-ideal).
6085Network Distance: 11 hops
6086Service Info: OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel
6087
6088TRACEROUTE (using port 995/tcp)
6089HOP RTT ADDRESS
60901 109.18 ms 10.13.0.1
60912 ...
60923 110.47 ms 178.33.103.231
60934 112.02 ms 10.95.33.10
60945 119.03 ms 91.121.131.19
60956 119.51 ms 94.23.122.217
60967 ...
60978 124.27 ms 176.10.83.128
60989 120.36 ms 176.10.83.119
609910 ...
610011 120.38 ms 94.102.48.103
6101
6102OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
6103Nmap done: 1 IP address (1 host up) scanned in 49.52 seconds
6104
6105###########################################################################################
6106
6107amap -i temp.txt
6108amap v5.4 (www.thc.org/thc-amap) started at 2017-09-09 22:23:37 - APPLICATION MAPPING mode
6109
6110Protocol on 94.102.48.103:80/tcp matches http
6111Protocol on 94.102.48.103:22/tcp matches ssh
6112Protocol on 94.102.48.103:22/tcp matches ssh-openssh
6113Protocol on 94.102.48.103:21/tcp matches ftp
6114Protocol on 94.102.48.103:111/tcp matches rpc
6115Protocol on 94.102.48.103:53/tcp matches dns
6116Protocol on 94.102.48.103:111/tcp matches rpc-rpcbind-v4
6117
6118inetnum: 94.102.48.0 - 94.102.48.150
6119netname: SC-QUASI58
6120descr: QUASI
6121country: SC
6122org: ORG-QNL3-RIPE
6123admin-c: QNL1-RIPE
6124tech-c: QNL1-RIPE
6125status: ASSIGNED PA
6126mnt-by: QUASINETWORKS-MNT
6127mnt-lower: QUASINETWORKS-MNT
6128mnt-routes: QUASINETWORKS-MNT
6129created: 2011-05-07T22:25:22Z
6130last-modified: 2016-01-23T22:29:27Z
6131source: RIPE
6132
6133organisation: ORG-QNL3-RIPE
6134org-name: Quasi Networks LTD.
6135org-type: OTHER
6136address: Suite 1, Second Floor
6137address: Sound & Vision House, Francis Rachel Street
6138address: Victoria, Mahe, SEYCHELLES
6139remarks: *****************************************************************************
6140remarks: IMPORTANT INFORMATION
6141remarks: *****************************************************************************
6142remarks: We are a high bandwidth network provider offering bandwidth solutions.
6143remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
6144remarks: Please only use abuse@quasinetworks.com for abuse reports.
6145remarks: For all other requests, please see the details on our website.
6146remarks: *****************************************************************************
6147abuse-mailbox: abuse@quasinetworks.com
6148abuse-c: AR34302-RIPE
6149mnt-ref: QUASINETWORKS-MNT
6150mnt-by: QUASINETWORKS-MNT
6151created: 2015-11-08T22:25:26Z
6152last-modified: 2015-11-27T09:37:50Z
6153source: RIPE # Filtered
6154
6155role: Quasi Networks LTD
6156address: Suite 1, Second Floor
6157address: Sound & Vision House, Francis Rachel Street
6158address: Victoria, Mahe, SEYCHELLES
6159remarks: *****************************************************************************
6160remarks: IMPORTANT INFORMATION
6161remarks: *****************************************************************************
6162remarks: We are a high bandwidth network provider offering bandwidth solutions.
6163remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
6164remarks: Please only use abuse@quasinetworks.com for abuse reports.
6165remarks: For all other requests, please see the details on our website.
6166remarks: *****************************************************************************
6167abuse-mailbox: abuse@quasinetworks.com
6168nic-hdl: QNL1-RIPE
6169mnt-by: QUASINETWORKS-MNT
6170created: 2015-11-07T22:43:04Z
6171last-modified: 2015-11-07T23:04:49Z
6172source: RIPE # Filtered
6173
6174% Information related to '94.102.48.0/20AS29073'
6175
6176route: 94.102.48.0/20
6177descr: Quasi Networks LTD (IBC)
6178origin: AS29073
6179mnt-by: QUASINETWORKS-MNT
6180created: 2008-09-02T11:55:23Z
6181last-modified: 2016-01-23T22:40:05Z
6182source: RIPE
6183
6184% This query was served by the RIPE Database Query Service version 1.89.2 (ANGUS)
6185
6186###########################################################################################
6187[i] Scanning Site: http://littleshoolgirls.com
6188
6189
6190
6191B A S I C I N F O
6192====================
6193
6194
6195[+] Site Title: teenstight teens pictures, teens your videos, drunk amateur teens
6196[+] IP address: 94.102.48.103
6197[+] Web Server: nginx
6198[+] CMS: Could Not Detect
6199[+] Cloudflare: Not Detected
6200[+] Robots File: Could NOT Find robots.txt!
6201
6202
6203
6204
6205W H O I S L O O K U P
6206========================
6207
6208 Domain Name: LITTLESHOOLGIRLS.COM
6209 Registry Domain ID: 1777538070_DOMAIN_COM-VRSN
6210 Registrar WHOIS Server: whois.pairnic.com
6211 Registrar URL: http://www.pairnic.com
6212 Updated Date: 2017-04-19T11:39:58Z
6213 Creation Date: 2013-01-31T17:56:46Z
6214 Registry Expiry Date: 2018-01-31T17:56:46Z
6215 Registrar: Pair Networks Inc.d/b/a pairNIC
6216 Registrar IANA ID: 99
6217 Registrar Abuse Contact Email:
6218 Registrar Abuse Contact Phone:
6219 Domain Status: ok https://icann.org/epp#ok
6220 Name Server: PNS21.CLOUDNS.NET
6221 Name Server: PNS22.CLOUDNS.NET
6222 Name Server: PNS23.CLOUDNS.NET
6223 Name Server: PNS24.CLOUDNS.NET
6224
6225
6226
6227
6228
6229G E O I P L O O K U P
6230=========================
6231
6232[i] IP Address: 94.102.48.103
6233[i] Country: SC
6234[i] State: N/A
6235[i] City: N/A
6236[i] Latitude: -4.583300
6237[i] Longitude: 55.666698
6238
6239
6240
6241
6242H T T P H E A D E R S
6243=======================
6244
6245
6246[i] HTTP/1.1 200 OK
6247[i] Server: nginx
6248[i] Date: Sun, 10 Sep 2017 02:25:15 GMT
6249[i] Content-Type: text/html
6250[i] Connection: close
6251[i] Vary: Accept-Encoding
6252[i] X-Powered-By: PHP/5.4.45-0+deb7u8
6253[i] Set-Cookie: nnmod=1; expires=Sun, 10-Sep-2017 14:25:15 GMT
6254[i] Vary: Accept-Encoding
6255
6256
6257
6258
6259D N S L O O K U P
6260===================
6261
6262littleshoolgirls.com. 56 IN A 94.102.48.103
6263littleshoolgirls.com. 3600 IN NS ns22.cloudns.net.
6264littleshoolgirls.com. 3600 IN NS ns23.cloudns.net.
6265littleshoolgirls.com. 3600 IN NS pns21.cloudns.net.
6266littleshoolgirls.com. 3600 IN NS pns22.cloudns.net.
6267littleshoolgirls.com. 3600 IN NS ns21.cloudns.net.
6268littleshoolgirls.com. 3600 IN NS pns24.cloudns.net.
6269littleshoolgirls.com. 3600 IN NS ns24.cloudns.net.
6270littleshoolgirls.com. 3600 IN NS pns23.cloudns.net.
6271littleshoolgirls.com. 3600 IN SOA ns21.cloudns.net. support.cloudns.net. 2017091015 7200 1800 1209600 3600
6272
6273
6274
6275
6276S U B N E T C A L C U L A T I O N
6277====================================
6278
6279Address = 94.102.48.103
6280Network = 94.102.48.103 / 32
6281Netmask = 255.255.255.255
6282Broadcast = not needed on Point-to-Point links
6283Wildcard Mask = 0.0.0.0
6284Hosts Bits = 0
6285Max. Hosts = 1 (2^0 - 0)
6286Host Range = { 94.102.48.103 - 94.102.48.103 }
6287
6288
6289
6290N M A P P O R T S C A N
6291============================
6292
6293
6294Starting Nmap 7.01 ( https://nmap.org ) at 2017-09-10 02:21 UTC
6295Nmap scan report for littleshoolgirls.com (94.102.48.103)
6296Host is up (0.083s latency).
6297PORT STATE SERVICE VERSION
629821/tcp open ftp vsftpd 3.0.2
629922/tcp open ssh OpenSSH 6.0p1 Debian 4+deb7u6 (protocol 2.0)
630023/tcp closed telnet
630125/tcp closed smtp
630280/tcp open http nginx
6303110/tcp closed pop3
6304143/tcp closed imap
6305443/tcp closed https
6306445/tcp closed microsoft-ds
63073389/tcp closed ms-wbt-server
6308Service Info: OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel
6309
6310Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
6311Nmap done: 1 IP address (1 host up) scanned in 7.21 seconds
6312
6313
6314
6315S U B - D O M A I N F I N D E R
6316==================================
6317
6318
6319[i] Total Subdomains Found : 1
6320
6321[+] Subdomain: littleshoolgirls.com
6322[-] IP: 94.102.48.103
6323*] Performing TLD Brute force Enumeration against littleshoolgirls.com
6324[*] The operation could take up to: 00:01:07
6325[*] A littleshoolgirls.biz.af 5.45.75.45
6326[*] CNAME littleshoolgirls.biz.at free.biz.at
6327[*] A free.biz.at 216.92.134.29
6328[*] A littleshoolgirls.co.asia 91.195.240.135
6329[*] A littleshoolgirls.org.aw 142.4.20.12
6330[*] A littleshoolgirls.co.ba 176.9.45.78
6331[*] A littleshoolgirls.com.ba 195.222.33.180
6332[*] A littleshoolgirls.com.be 95.173.170.166
6333[*] A littleshoolgirls.biz.by 71.18.52.2
6334[*] A littleshoolgirls.biz.bz 199.59.242.150
6335[*] A littleshoolgirls.com.cc 54.252.107.64
6336[*] A littleshoolgirls.net.cc 54.252.89.206
6337[*] A littleshoolgirls.co.cc 175.126.123.219
6338[*] A littleshoolgirls.org.ch 72.52.4.122
6339[*] A littleshoolgirls.co.cm 85.25.140.105
6340[*] A littleshoolgirls.net.cm 85.25.140.105
6341[*] A littleshoolgirls.biz.cl 185.53.178.8
6342[*] A littleshoolgirls.com.com 52.33.196.199
6343[*] CNAME littleshoolgirls.biz.cm i.cns.cm
6344[*] A i.cns.cm 118.184.56.30
6345[*] A littleshoolgirls.net.com 199.59.242.150
6346[*] A littleshoolgirls.org.com 23.23.86.44
6347[*] A littleshoolgirls.com 80.82.79.116
6348[*] A littleshoolgirls.co.com 173.192.115.17
6349[*] A littleshoolgirls.biz.cr 72.52.4.122
6350[*] A littleshoolgirls.biz.cx 72.52.4.122
6351[*] A littleshoolgirls.com.cz 62.109.128.30
6352[*] A littleshoolgirls.net.cz 80.250.24.177
6353[*] A littleshoolgirls.biz.cz 185.53.179.7
6354[*] CNAME littleshoolgirls.co.de co.de
6355[*] A co.de 144.76.162.245
6356[*] CNAME littleshoolgirls.org.de www.org.de
6357[*] A www.org.de 78.47.128.8
6358[*] A littleshoolgirls.com.de 50.56.68.37
6359[*] A littleshoolgirls.net.eu 78.46.90.98
6360[*] A littleshoolgirls.org.eu 78.46.90.98
6361[*] A littleshoolgirls.biz.fi 185.55.85.123
6362[*] A littleshoolgirls.fm 173.230.131.38
6363[*] A littleshoolgirls.biz.fm 173.230.131.38
6364[*] A littleshoolgirls.org.fr 149.202.133.35
6365[*] A littleshoolgirls.biz.gl 72.52.4.122
6366[*] CNAME littleshoolgirls.co.gp co.gp
6367[*] A co.gp 144.76.162.245
6368[*] A littleshoolgirls.co.hn 208.100.40.203
6369[*] CNAME littleshoolgirls.net.hr net.hr
6370[*] A net.hr 192.0.78.25
6371[*] A net.hr 192.0.78.24
6372[*] CNAME littleshoolgirls.biz.hn parkmydomain.vhostgo.com
6373[*] A parkmydomain.vhostgo.com 107.186.245.118
6374[*] A littleshoolgirls.co.ht 72.52.4.122
6375[*] A littleshoolgirls.co.jobs 50.17.193.222
6376[*] A littleshoolgirls.com.jobs 50.19.241.165
6377[*] A littleshoolgirls.net.jobs 50.19.241.165
6378[*] A littleshoolgirls.biz.jobs 50.19.241.165
6379[*] A littleshoolgirls.org.jobs 50.19.241.165
6380[*] A littleshoolgirls.biz.ky 199.184.144.27
6381[*] CNAME littleshoolgirls.biz.li 712936.parkingcrew.net
6382[*] A 712936.parkingcrew.net 185.53.179.29
6383[*] A littleshoolgirls.biz.lu 195.26.5.2
6384[*] A littleshoolgirls.biz.ly 64.136.20.39
6385[*] A littleshoolgirls.biz.md 72.52.4.122
6386[*] A littleshoolgirls.co.mk 87.76.31.211
6387[*] A littleshoolgirls.co.mobi 54.225.105.179
6388[*] A littleshoolgirls.biz.my 202.190.174.44
6389[*] A littleshoolgirls.co.net 188.166.216.219
6390[*] A littleshoolgirls.net.net 52.50.81.210
6391[*] A littleshoolgirls.org.net 23.23.86.44
6392[*] A littleshoolgirls.co.nl 37.97.184.204
6393[*] A littleshoolgirls.com.nl 83.98.157.102
6394[*] A littleshoolgirls.net.nl 83.98.157.102
6395[*] A littleshoolgirls.co.nr 208.100.40.202
6396[*] CNAME littleshoolgirls.co.nu co.nu
6397[*] A co.nu 144.76.162.245
6398[*] A littleshoolgirls.net.nu 199.102.76.78
6399[*] CNAME littleshoolgirls.com.nu com.nu
6400[*] A com.nu 144.76.162.245
6401[*] A littleshoolgirls.org.nu 80.92.84.139
6402[*] CNAME littleshoolgirls.net.org pewtrusts.org
6403[*] A pewtrusts.org 204.74.99.100
6404[*] A littleshoolgirls.com.org 23.23.86.44
6405[*] A littleshoolgirls.ph 45.79.222.138
6406[*] A littleshoolgirls.co.ph 45.79.222.138
6407[*] A littleshoolgirls.com.ph 45.79.222.138
6408[*] A littleshoolgirls.net.ph 45.79.222.138
6409[*] A littleshoolgirls.org.ph 45.79.222.138
6410[*] A littleshoolgirls.co.pl 212.91.6.55
6411[*] A littleshoolgirls.org.pm 208.73.211.165
6412[*] A littleshoolgirls.org.pm 208.73.211.177
6413[*] A littleshoolgirls.org.pm 208.73.210.217
6414[*] A littleshoolgirls.org.pm 208.73.210.202
6415[*] A littleshoolgirls.co.ps 66.96.132.56
6416[*] CNAME littleshoolgirls.biz.ps biz.ps
6417[*] A biz.ps 144.76.162.245
6418[*] A littleshoolgirls.pw 141.8.226.58
6419[*] A littleshoolgirls.co.pt 194.107.127.52
6420[*] A littleshoolgirls.co.pw 141.8.226.59
6421[*] A littleshoolgirls.net.pw 141.8.226.59
6422[*] A littleshoolgirls.biz.pw 141.8.226.59
6423[*] A littleshoolgirls.org.pw 141.8.226.59
6424[*] CNAME littleshoolgirls.co.ro now.co.ro
6425[*] A now.co.ro 185.27.255.9
6426[*] A littleshoolgirls.net.ro 69.64.52.127
6427[*] A littleshoolgirls.org.re 217.70.184.38
6428[*] A littleshoolgirls.com.ru 178.210.89.119
6429[*] A littleshoolgirls.biz.se 185.53.179.6
6430[*] CNAME littleshoolgirls.net.se 773147.parkingcrew.net
6431[*] A 773147.parkingcrew.net 185.53.179.29
6432[*] A littleshoolgirls.co.sl 91.195.240.135
6433[*] A littleshoolgirls.com.sr 143.95.106.249
6434[*] A littleshoolgirls.co.su 72.52.4.122
6435[*] A littleshoolgirls.biz.st 91.121.28.115
6436[*] A littleshoolgirls.biz.tc 64.136.20.39
6437[*] A littleshoolgirls.biz.tf 85.236.153.18
6438[*] A littleshoolgirls.co.tl 208.100.40.202
6439[*] A littleshoolgirls.net.tf 188.40.117.12
6440[*] A littleshoolgirls.net.tf 188.40.70.27
6441[*] A littleshoolgirls.net.tf 188.40.70.29
6442[*] A littleshoolgirls.co.to 175.118.124.44
6443[*] A littleshoolgirls.co.tv 31.186.25.163
6444[*] A littleshoolgirls.biz.tv 72.52.4.122
6445[*] A littleshoolgirls.org.tv 72.52.4.122
6446[*] CNAME littleshoolgirls.biz.uz biz.uz
6447[*] A biz.uz 144.76.162.245
6448[*] A littleshoolgirls.vg 88.198.29.97
6449[*] A littleshoolgirls.co.vg 88.198.29.97
6450[*] A littleshoolgirls.com.vg 88.198.29.97
6451[*] A littleshoolgirls.net.vg 68.178.254.180
6452[*] A littleshoolgirls.biz.vg 89.31.143.20
6453[*] A littleshoolgirls.ws 64.70.19.203
6454[*] A littleshoolgirls.biz.ws 184.168.221.104
6455[*] A littleshoolgirls.net.ws 202.4.48.211
6456[*] A littleshoolgirls.com.ws 202.4.48.211
6457[*] A littleshoolgirls.org.ws 202.4.48.211
6458
6459R E V E R S E I P L O O K U P
6460==================================
6461littleshoolgirls.com
6462
6463
6464 Domain Name: LITTLESHOOLGIRLS.COM
6465 Registry Domain ID: 1777538070_DOMAIN_COM-VRSN
6466 Registrar WHOIS Server: whois.pairnic.com
6467 Registrar URL: http://www.pairnic.com
6468 Updated Date: 2017-04-19T11:39:58Z
6469 Creation Date: 2013-01-31T17:56:46Z
6470 Registry Expiry Date: 2018-01-31T17:56:46Z
6471 Registrar: Pair Networks Inc.d/b/a pairNIC
6472 Registrar IANA ID: 99
6473 Registrar Abuse Contact Email:
6474 Registrar Abuse Contact Phone:
6475 Domain Status: ok https://icann.org/epp#ok
6476 Name Server: PNS21.CLOUDNS.NET
6477 Name Server: PNS22.CLOUDNS.NET
6478 Name Server: PNS23.CLOUDNS.NET
6479 Name Server: PNS24.CLOUDNS.NET
6480
6481 Domain Name: littleshoolgirls.com
6482 Registry Domain ID: 1777538070_DOMAIN_COM-VRSN
6483 Registrar WHOIS Server: whois.pairDomains.com
6484 Registrar URL: https://www.pairDomains.com
6485 Updated Date: 2017-04-19T11:39:58+0000Z
6486 Creation Date: 2013-01-31T17:56:46+0000Z
6487 Registrar Registration Expiration Date: 2018-01-31T17:56:46+0000Z
6488 Registrar: pair Domains INC
6489 Registrar IANA ID: 99
6490 Registrar Abuse Contact Email: abuse@pairdomains.com
6491 Registrar Abuse Contact Phone: +1.8887247642
6492 Registry Registrant ID:
6493 Registrant Name: denis duchene
6494 Registrant Organization:
6495 Registrant Street: c/o pairDomains.com Whois Privacy PO Box 42319
6496 Registrant City: Pittsburgh
6497 Registrant State/Province: PA
6498 Registrant Postal Code: 15203
6499 Registrant Country: US
6500 Registrant Phone: +1.4123257437
6501 Registrant Phone Ext:
6502 Registrant Fax:
6503 Registrant Fax Ext:
6504 Registrant Email: 915q6w4i8499@nojunkemailaddress.com
6505 Registry Admin ID:
6506 Admin Name: denis duchene
6507 Admin Organization:
6508 Admin Street: c/o pairDomains.com Whois Privacy PO Box 42319
6509 Admin City: Pittsburgh
6510 Admin State/Province: PA
6511 Admin Postal Code: 15203
6512 Admin Country: US
6513 Admin Phone: +1.4123257437
6514 Admin Phone Ext:
6515 Admin Fax:
6516 Admin Fax Ext:
6517 Admin Email: 915q6w4i8499@nojunkemailaddress.com
6518 Registry Tech ID:
6519 Tech Name: denis duchene
6520 Tech Organization:
6521 Tech Street: c/o pairDomains.com Whois Privacy PO Box 42319
6522 Tech City: Pittsburgh
6523 Tech State/Province: PA
6524 Tech Postal Code: 15203
6525 Tech Country: US
6526 Tech Phone: +1.4123257437
6527 Tech Phone Ext:
6528 Tech Fax:
6529 Tech Fax Ext:
6530 Tech Email: 915q6w4i8499@nojunkemailaddress.com
6531 Name Server: PNS22.CLOUDNS.NET
6532 Name Server: PNS24.CLOUDNS.NET
6533 Name Server: PNS23.CLOUDNS.NET
6534 Name Server: PNS21.CLOUDNS.NET
6535
6536;littleshoolgirls.com. IN ANY
6537
6538;; ANSWER SECTION:
6539littleshoolgirls.com. 1014 IN NS pns21.cloudns.net.
6540littleshoolgirls.com. 1014 IN NS pns24.cloudns.net.
6541littleshoolgirls.com. 1014 IN NS ns24.cloudns.net.
6542littleshoolgirls.com. 1014 IN NS pns22.cloudns.net.
6543littleshoolgirls.com. 1014 IN NS ns23.cloudns.net.
6544littleshoolgirls.com. 1014 IN NS pns23.cloudns.net.
6545littleshoolgirls.com. 1014 IN NS ns21.cloudns.net.
6546littleshoolgirls.com. 1014 IN NS ns22.cloudns.net.
6547
6548
6549Host's addresses:
6550__________________
6551
6552littleshoolgirls.com. 53 IN A 94.102.48.103
6553
6554
6555Wildcard detection using: xqrbkuymekkh
6556_______________________________________
6557
6558xqrbkuymekkh.littleshoolgirls.com. 60 IN A 94.102.48.103
6559
6560
6561!!!!!!!!!!!!!!!!!!!!!!!!!!!!
6562
6563 Wildcards detected, all subdomains will point to the same IP address
6564 Omitting results containing 94.102.48.103.
6565 Maybe you are using OpenDNS servers.
6566
6567!!!!!!!!!!!!!!!!!!!!!!!!!!!!
6568
6569
6570Name Servers:
6571______________
6572
6573pns23.cloudns.net. 119707 IN A 185.136.98.96
6574ns22.cloudns.net. 118844 IN A 108.59.2.202
6575ns23.cloudns.net. 118845 IN A 79.137.84.65
6576ns21.cloudns.net. 118844 IN A 109.201.133.61
6577pns21.cloudns.net. 119305 IN A 185.136.96.96
6578pns24.cloudns.net. 119707 IN A 185.136.99.96
6579ns24.cloudns.net. 154808 IN A 46.165.221.164
6580pns22.cloudns.net. 119674 IN A 185.136.97.96
6581
6582
6583Mail (MX) Servers:
6584___________________
6585
6586
6587 Can't perform recursion no subdomains.
6588
6589
6590littleshoolgirls.com class C netranges:
6591________________________________________
6592
6593 94.102.48.0/24
6594
6595 |\___ ns24.cloudns.net [littleshoolgirls.com] (2a00:0c98:2030:a006:0002:0000:0000:0001) Got authoritative answer
6596 |\___ ns24.cloudns.net [littleshoolgirls.com] (46.165.221.164) Got authoritative answer
6597 |\___ ns21.cloudns.net [littleshoolgirls.com] (2a00:1768:1001:0009:0000:0000:0000:0021) Got authoritative answer
6598 |\___ ns21.cloudns.net [littleshoolgirls.com] (109.201.133.61) Got authoritative answer
6599 |\___ pns23.cloudns.net [littleshoolgirls.com] (185.136.98.96) Got authoritative answer
6600 |\___ pns23.cloudns.net [littleshoolgirls.com] (2a06:fb00:0001:0000:0000:0000:0003:0096) Got authoritative answer
6601 |\___ ns23.cloudns.net [littleshoolgirls.com] (2001:41d0:0401:3100:0000:0000:0000:5784) Got authoritative answer
6602 |\___ ns23.cloudns.net [littleshoolgirls.com] (79.137.84.65) Got authoritative answer
6603 |\___ pns24.cloudns.net [littleshoolgirls.com] (2a06:fb00:0001:0000:0000:0000:0004:0096) Got authoritative answer
6604 |\___ pns24.cloudns.net [littleshoolgirls.com] (185.136.99.96) Got authoritative answer
6605 |\___ pns22.cloudns.net [littleshoolgirls.com] (185.136.97.96) Got authoritative answer
6606 |\___ ns22.cloudns.net [littleshoolgirls.com] (2604:9a00:2100:a006:0004:0000:0000:0001) Got authoritative answer
6607 |\___ ns22.cloudns.net [littleshoolgirls.com] (108.59.2.202) Got authoritative answer
6608 |\___ pns21.cloudns.net [littleshoolgirls.com] (2a06:fb00:0001:0000:0000:0000:0001:0096) Got authoritative answer
6609 \___ pns21.cloudns.net [littleshoolgirls.com] (185.136.96.96) Got authoritative answer
6610
6611
6612WhatWeb report for http://littleshoolgirls.com
6613Status : 200 OK
6614Title : teenstight teens pictures, teens your videos, drunk amateur teens
6615IP : 94.102.48.103
6616Country : NETHERLANDS, NL
6617
6618Summary : X-Powered-By[PHP/5.4.45-0+deb7u8], HTTPServer[nginx], Cookies[nnmod], PHP[5.4.45-0+deb7u8], nginx, Script[text/javascript]
6619
6620Detected Plugins:
6621[ Cookies ]
6622 Display the names of cookies in the HTTP headers. The
6623 values are not returned to save on space.
6624
6625 String : nnmod
6626
6627[ HTTPServer ]
6628 HTTP server header string. This plugin also attempts to
6629 identify the operating system from the server header.
6630
6631 String : nginx (from server string)
6632
6633[ PHP ]
6634 PHP is a widely-used general-purpose scripting language
6635 that is especially suited for Web development and can be
6636 embedded into HTML. This plugin identifies PHP errors,
6637 modules and versions and extracts the local file path and
6638 username if present.
6639
6640 Version : 5.4.45-0+deb7u8
6641 Google Dorks: (2)
6642 Website : http://www.php.net/
6643
6644[ Script ]
6645 This plugin detects instances of script HTML elements and
6646 returns the script language/type.
6647
6648 String : text/javascript
6649
6650[ X-Powered-By ]
6651 X-Powered-By HTTP header
6652
6653 String : PHP/5.4.45-0+deb7u8 (from x-powered-by string)
6654
6655[ nginx ]
6656 Nginx (Engine-X) is a free, open-source, high-performance
6657 HTTP server and reverse proxy, as well as an IMAP/POP3
6658 proxy server.
6659
6660 Website : http://nginx.net/
6661
6662HTTP Headers:
6663 HTTP/1.1 200 OK
6664 Server: nginx
6665 Date: Sun, 10 Sep 2017 02:29:37 GMT
6666 Content-Type: text/html
6667 Content-Length: 2918
6668 Connection: close
6669 X-Powered-By: PHP/5.4.45-0+deb7u8
6670 Set-Cookie: nnmod=1; expires=Sun, 10-Sep-2017 14:29:37 GMT
6671 Vary: Accept-Encoding
6672 Content-Encoding: gzip
6673
6674
6675
6676[+] Hosts found in search engines:
6677------------------------------------
6678[-] Resolving hostnames IPs...
667994.102.48.103:253Dwww.littleshoolgirls.com
668094.102.48.103:Www.littleshoolgirls.com
668194.102.48.103:www.littleshoolgirls.com
6682
6683
6684
6685 ^ ^
6686 _ __ _ ____ _ __ _ _ ____
6687 ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
6688 | V V // o // _/ | V V // 0 // 0 // _/
6689 |_n_,'/_n_//_/ |_n_,' \_,' \_,'/_/
6690 <
6691 ...'
6692
6693 WAFW00F - Web Application Firewall Detection Tool
6694
6695 By Sandro Gauci && Wendel G. Henrique
6696
6697Checking http://littleshoolgirls.com
6698Generic Detection results:
6699No WAF detected by the generic detection
6700Number of requests: 13
6701
6702
6703DNS Servers for littleshoolgirls.com:
6704 pns21.cloudns.net
6705 ns23.cloudns.net
6706 ns24.cloudns.net
6707 pns24.cloudns.net
6708 ns22.cloudns.net
6709 ns21.cloudns.net
6710 pns23.cloudns.net
6711 pns22.cloudns.net
6712
6713Trying zone transfer first...
6714 Testing pns21.cloudns.net
6715 Request timed out or transfer not allowed.
6716 Testing ns23.cloudns.net
6717 Request timed out or transfer not allowed.
6718 Testing ns24.cloudns.net
6719 Request timed out or transfer not allowed.
6720 Testing pns24.cloudns.net
6721 Request timed out or transfer not allowed.
6722 Testing ns22.cloudns.net
6723 Request timed out or transfer not allowed.
6724 Testing ns21.cloudns.net
6725 Request timed out or transfer not allowed.
6726 Testing pns23.cloudns.net
6727 Request timed out or transfer not allowed.
6728 Testing pns22.cloudns.net
6729 Request timed out or transfer not allowed.
6730
6731
6732Starting smtp-user-enum v1.2 ( http://pentestmonkey.net/tools/smtp-user-enum )
6733
6734 ----------------------------------------------------------
6735| Scan Information |
6736 ----------------------------------------------------------
6737
6738Mode ..................... VRFY
6739Worker Processes ......... 5
6740Usernames file ........... users.txt
6741Target count ............. 1
6742Username count ........... 494
6743Target TCP port .......... 25
6744Query timeout ............ 5 secs
6745Target domain ............
6746
6747######## Scan started at Sat Sep 9 22:34:25 2017 #########
6748######## Scan completed at Sat Sep 9 22:42:40 2017 #########
67490 results.
6750
6751494 queries in 495 seconds (1.0 queries / sec)
6752
6753
6754
6755Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 22:42 EDT
6756NSE: Loaded 146 scripts for scanning.
6757NSE: Script Pre-scanning.
6758Initiating NSE at 22:42
6759Completed NSE at 22:42, 0.00s elapsed
6760Initiating NSE at 22:42
6761Completed NSE at 22:42, 0.00s elapsed
6762Failed to resolve "littleshoolgirls.com.txt".
6763Initiating Parallel DNS resolution of 1 host. at 22:42
6764Completed Parallel DNS resolution of 1 host. at 22:42, 0.53s elapsed
6765Initiating SYN Stealth Scan at 22:42
6766Scanning littleshoolgirls.com (94.102.48.103) [100 ports]
6767Discovered open port 21/tcp on 94.102.48.103
6768Discovered open port 80/tcp on 94.102.48.103
6769Discovered open port 22/tcp on 94.102.48.103
6770Discovered open port 53/tcp on 94.102.48.103
6771Discovered open port 111/tcp on 94.102.48.103
6772Completed SYN Stealth Scan at 22:42, 3.28s elapsed (100 total ports)
6773Initiating Service scan at 22:42
6774Scanning 5 services on littleshoolgirls.com (94.102.48.103)
6775Completed Service scan at 22:42, 11.37s elapsed (5 services on 1 host)
6776Initiating OS detection (try #1) against littleshoolgirls.com (94.102.48.103)
6777Retrying OS detection (try #2) against littleshoolgirls.com (94.102.48.103)
6778adjust_timeouts2: packet supposedly had rtt of -130890 microseconds. Ignoring time.
6779adjust_timeouts2: packet supposedly had rtt of -130890 microseconds. Ignoring time.
6780Initiating Traceroute at 22:43
6781Completed Traceroute at 22:43, 3.03s elapsed
6782Initiating Parallel DNS resolution of 7 hosts. at 22:43
6783Completed Parallel DNS resolution of 7 hosts. at 22:43, 5.51s elapsed
6784NSE: Script scanning 94.102.48.103.
6785Initiating NSE at 22:43
6786Completed NSE at 22:43, 30.66s elapsed
6787Initiating NSE at 22:43
6788Completed NSE at 22:43, 0.59s elapsed
6789Nmap scan report for littleshoolgirls.com (94.102.48.103)
6790Host is up (0.13s latency).
6791Not shown: 89 closed ports
6792PORT STATE SERVICE VERSION
679321/tcp open ftp vsftpd 3.0.2
679422/tcp open ssh OpenSSH 6.0p1 Debian 4+deb7u6 (protocol 2.0)
6795| ssh-hostkey:
6796| 1024 ab:16:56:89:21:7e:75:1c:77:f3:a2:7e:c2:f1:4c:09 (DSA)
6797| 2048 22:f8:e3:f6:1a:1c:6a:99:09:6b:1e:7c:fd:30:e3:95 (RSA)
6798|_ 256 a8:03:f4:96:36:d1:39:de:2e:4f:56:e9:0f:f3:63:56 (ECDSA)
679925/tcp filtered smtp
680053/tcp open domain
6801| dns-nsid:
6802|_ bind.version: 9.8.4-rpz2+rl005.12-P1
680380/tcp open http nginx
6804|_http-favicon: Unknown favicon MD5: 9148DEBEB820D5EA5B01E73F08989CB1
6805| http-methods:
6806|_ Supported Methods: GET HEAD POST OPTIONS
6807|_http-server-header: nginx
6808|_http-title: teenstight teens pictures, teens your videos, drunk amateur...
6809111/tcp open rpcbind 2-4 (RPC #100000)
6810135/tcp filtered msrpc
6811139/tcp filtered netbios-ssn
6812445/tcp filtered microsoft-ds
6813465/tcp filtered smtps
6814587/tcp filtered submission
6815Aggressive OS guesses: Linux 2.6.39 (95%), Linux 3.2 - 3.8 (95%), Linux 3.8 (95%), Linux 3.1 - 3.2 (94%), WatchGuard Fireware 11.8 (94%), Linux 2.6.32 - 2.6.39 (93%), Linux 3.5 (92%), Linux 3.0 - 3.2 (92%), Linux 2.6.32 (91%), Linux 3.0 (91%)
6816No exact OS matches for host (test conditions non-ideal).
6817Uptime guess: 6.479 days (since Sun Sep 3 11:13:51 2017)
6818Network Distance: 11 hops
6819TCP Sequence Prediction: Difficulty=263 (Good luck!)
6820IP ID Sequence Generation: All zeros
6821Service Info: OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel
6822
6823TRACEROUTE (using port 143/tcp)
6824HOP RTT ADDRESS
68251 109.48 ms 10.13.0.1
68262 ...
68273 110.19 ms po101.gra-g2-a75.fr.eu (178.33.103.231)
68284 ...
68295 119.42 ms be100-1113.fra-5-a9.de.eu (91.121.131.19)
68306 119.45 ms be100-2.fra-1-a9.de.eu (94.23.122.217)
68317 ...
68328 158.26 ms vlan3555.bb1.ams2.nl.m247.com (176.10.83.128)
68339 120.47 ms 176.10.83.119
683410 ...
683511 120.50 ms 94.102.48.103
6836
6837
6838
6839 _/ _/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/
6840 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
6841 _/ _/ _/_/_/_/ _/_/_/ _/ _/_/_/ _/_/_/_/ _/ _/_/_/ _/_/_/_
6842 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
6843 _/_/_/_/ _/ _/ _/ _/_/_/_/ _/_/_/_/ _/ _/_/_/_/ _/ _/ [v1.06]
6844
6845 _/ User-Agent Tester ↵
6846 _/ AKA: Purple Pimp ↵
6847 _/ ChrisJohnRiley ↵
6848 _/ blog.c22.cc ↵
6849
6850 [>] Performing initial request and confirming stability
6851 [>] Using User-Agent string Mozilla/5.0
6852
6853 [ ] URL (ENTERED): http://littleshoolgirls.com
6854 [ ] Response Code: 200 OK
6855 [ ] Server: nginx
6856 [ ] Date: Sun, 10 Sep 2017 02:47:26 GMT
6857 [ ] Content-Type: text/html
6858 [ ] Transfer-Encoding: chunked
6859 [ ] Connection: close
6860 [ ] Vary: Accept-Encoding
6861 [ ] X-Powered-By: PHP/5.4.45-0+deb7u8
6862 [ ] Set-Cookie: nnmod=1; expires=Sun, 10-Sep-2017 14:47:26 GMT
6863 [ ] Vary: Accept-Encoding
6864 [ ] Data (MD5): a9378b535c8f67af8d2e6283db8391df
6865
6866 [1] Pass
6867 [2] Pass
6868 [3] Pass
6869
6870 [>] URL appears stable. Beginning test
6871
6872 [>] Using DEFAULT User-Agent Strings
6873
6874 [>] Using Crazy User-Agent Strings
6875 [>] Using Bot User-Agent Strings
6876
6877 [>] Output: [+] Added Headers, [-] Removed Headers, [!] Altered Headers, [ ] No Change
6878
6879
6880 [>] User-Agent String : Windows-Media-Player/9.00.00.4503
6881
6882
6883 [!] Data (MD5): 781d7dbcf62974b1cafe1884691ed55d
6884
6885
6886 [>] User-Agent String : Mozilla/5.0 (PLAYSTATION 3; 2.00)
6887
6888
6889 [!] Data (MD5): 6a0f0850a908e3e063736385ce7e39dc
6890
6891
6892 [>] User-Agent String : TrackBack/1.02
6893
6894
6895 [!] Data (MD5): 528b6388938ade008ab348ea5cefb490
6896
6897
6898 [>] User-Agent String : wispr
6899
6900
6901 [!] Data (MD5): fae121f1194e12b65a15eb7fd2e509a1
6902
6903
6904 [>] User-Agent String : EMPTY USER-AGENT STRING!
6905
6906
6907 [!] Data (MD5): d567bcee8be31fc74401cf28e268e0eb
6908
6909
6910 [>] User-Agent String : Googlebot/2.1 (+http://www.google.com/bot.html)
6911
6912
6913 [!] Data (MD5): 84a43f2b7538ee1482409353ea2323dc
6914
6915
6916 [>] User-Agent String : Googlebot-Image/1.0
6917
6918
6919 [!] Data (MD5): 10bdf4a11b332b641b44ca2617bebdd2
6920
6921
6922 [>] User-Agent String : Mediapartners-Google
6923
6924
6925 [!] Data (MD5): af381428a10d5266ba7b9a357977a6d2
6926
6927
6928 [>] User-Agent String : Mozilla/2.0 (compatible; Ask Jeeves)
6929
6930
6931 [!] Data (MD5): d7b1213384a6e7c1413a0068c1e7ff34
6932
6933
6934 [>] User-Agent String : msnbot-Products/1.0 (+http://search.msn.com/msnbot.htm)
6935
6936
6937 [!] Data (MD5): d3c86f2962e5c14006d5706f73788978
6938
6939
6940 [>] User-Agent String : mmcrawler
6941
6942
6943 [!] Data (MD5): b5586335e511fa0340da2c1c2dda6885
6944
6945
6946 [>] Checks completed... try enabling VERBOSE mode for more detailed output
6947
6948 [>] That's all folks... Fo' Shizzle!
6949
6950########################################################################################
6951Hostname top.top-dolls.net ISP Quasi Networks LTD. (AS29073)
6952Continent Africa Flag
6953SC
6954Country Seychelles Country Code SC (SYC)
6955Region Unknown Local time 10 Sep 2017 06:40 +04
6956City Unknown Latitude -4.583
6957IP Address 94.102.48.34 Longitude 55.667
6958##########################################################################################
6959
6960###########################################################################################
6961
6962dig top.top-dolls.net any
6963
6964; <<>> DiG 9.10.3-P4-Debian <<>> top.top-dolls.net any
6965;; global options: +cmd
6966;; Got answer:
6967;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47348
6968;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
6969
6970;; OPT PSEUDOSECTION:
6971; EDNS: version: 0, flags:; udp: 4096
6972;; QUESTION SECTION:
6973;top.top-dolls.net. IN ANY
6974
6975;; ANSWER SECTION:
6976top.top-dolls.net. 1278 IN A 94.102.48.34
6977
6978;; Query time: 8 msec
6979;; SERVER: 192.168.1.254#53(192.168.1.254)
6980;; WHEN: Sat Sep 09 22:44:37 EDT 2017
6981;; MSG SIZE rcvd: 62
6982
6983Checking for HTTP-Loadbalancing [Date]: 00:43:51, 00:43:52, 00:43:52, 00:43:52, 00:43:52, 00:43:53, 00:43:53, 00:43:53, 00:43:53, 00:43:54, 00:43:54, 00:43:54, 00:43:54, 00:43:55, 00:43:55, 00:43:55, 00:43:56, 00:43:56, 00:43:56, 00:43:56, 00:43:57, 00:43:57, 00:43:57, 00:43:57, 00:43:58, 00:43:58, 00:43:58, 00:43:58, 00:43:59, 00:43:59, 00:43:59, 00:44:00, 00:44:00, 00:44:00, 00:44:00, 00:44:01, 00:44:01, 00:44:01, 00:44:01, 00:44:02, 00:44:02, 00:44:02, 00:44:02, 00:44:03, 00:44:03, 00:44:03, 00:44:04, 00:44:04, 00:44:04, 00:44:04, NOT FOUND
6984
6985###########################################################################################
6986
6987nmap -PN -n -F -T4 -sV -A -oG temp.txt top.top-dolls.net
6988
6989Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 22:45 EDT
6990Nmap scan report for top.top-dolls.net (94.102.48.34)
6991Host is up (0.13s latency).
6992Not shown: 84 closed ports
6993PORT STATE SERVICE VERSION
699421/tcp filtered ftp
699522/tcp filtered ssh
699625/tcp filtered smtp
699753/tcp open domain ISC BIND 9.8.2rc1
6998| dns-nsid:
6999|_ bind.version: 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4
700080/tcp open http nginx 1.12.1
7001| http-methods:
7002|_ Potentially risky methods: TRACE
7003|_http-server-header: nginx/1.12.1
7004|_http-title: Apache HTTP Server Test Page powered by CentOS
700581/tcp filtered hosts2-ns
7006110/tcp open pop3 Dovecot pop3d
7007|_pop3-capabilities: USER UIDL SASL(PLAIN LOGIN DIGEST-MD5 CRAM-MD5) TOP PIPELINING RESP-CODES CAPA STLS
7008| ssl-cert: Subject: commonName=imap.example.com
7009| Not valid before: 2015-06-12T12:04:14
7010|_Not valid after: 2016-06-11T12:04:14
7011|_ssl-date: 2017-09-10T00:44:40+00:00; -2h01m10s from scanner time.
7012135/tcp filtered msrpc
7013139/tcp filtered netbios-ssn
7014143/tcp open imap Dovecot imapd
7015|_imap-capabilities: completed ENABLE ID Capability SASL-IR AUTH=CRAM-MD5A0001 AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=PLAIN OK STARTTLS LOGIN-REFERRALS IDLE IMAP4rev1 LITERAL+
7016| ssl-cert: Subject: commonName=imap.example.com
7017| Not valid before: 2015-06-12T12:04:14
7018|_Not valid after: 2016-06-11T12:04:14
7019|_ssl-date: 2017-09-10T00:44:39+00:00; -2h01m10s from scanner time.
7020445/tcp filtered microsoft-ds
7021465/tcp filtered smtps
7022587/tcp filtered submission
7023993/tcp open ssl/imap Dovecot imapd
7024| ssl-cert: Subject: commonName=imap.example.com
7025| Not valid before: 2015-06-12T12:04:14
7026|_Not valid after: 2016-06-11T12:04:14
7027|_ssl-date: 2017-09-10T00:44:35+00:00; -2h01m11s from scanner time.
7028995/tcp open ssl/pop3 Dovecot pop3d
7029| ssl-cert: Subject: commonName=imap.example.com
7030| Not valid before: 2015-06-12T12:04:14
7031|_Not valid after: 2016-06-11T12:04:14
7032|_ssl-date: 2017-09-10T00:44:35+00:00; -2h01m11s from scanner time.
70333306/tcp open mysql MySQL (unauthorized)
7034Device type: general purpose
7035Running: Linux 2.6.X
7036OS CPE: cpe:/o:linux:linux_kernel:2.6.39
7037OS details: Linux 2.6.39
7038Network Distance: 10 hops
7039Service Info: OS: Red Hat Enterprise Linux 6; CPE: cpe:/o:redhat:enterprise_linux:6
7040
7041Host script results:
7042|_clock-skew: mean: -2h01m10s, deviation: 0s, median: -2h01m11s
7043
7044TRACEROUTE (using port 8888/tcp)
7045HOP RTT ADDRESS
70461 110.60 ms 10.13.0.1
70472 ...
70483 110.64 ms 178.33.103.229
70494 ...
70505 119.39 ms 213.186.32.213
70516 ...
70527 124.40 ms 176.10.83.128
70538 120.39 ms 176.10.83.119
70549 ...
705510 120.22 ms 94.102.48.34
7056
7057OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
7058Nmap done: 1 IP address (1 host up) scanned in 29.43 seconds
7059
7060###########################################################################################
7061
7062amap -i temp.txt
7063amap v5.4 (www.thc.org/thc-amap) started at 2017-09-09 22:45:57 - APPLICATION MAPPING mode
7064
7065Protocol on 94.102.48.34:80/tcp matches http
7066Protocol on 94.102.48.34:80/tcp matches http-apache-2
7067Protocol on 94.102.48.34:110/tcp matches pop3
7068Protocol on 94.102.48.34:3306/tcp matches mysql
7069Protocol on 94.102.48.34:3306/tcp matches mysql-secured
7070Protocol on 94.102.48.34:143/tcp matches imap
7071Protocol on 94.102.48.34:993/tcp matches ssl
7072Protocol on 94.102.48.34:995/tcp matches ssl
7073Protocol on 94.102.48.34:53/tcp matches dns
7074
7075inetnum: 94.102.48.0 - 94.102.48.150
7076netname: SC-QUASI58
7077descr: QUASI
7078country: SC
7079org: ORG-QNL3-RIPE
7080admin-c: QNL1-RIPE
7081tech-c: QNL1-RIPE
7082status: ASSIGNED PA
7083mnt-by: QUASINETWORKS-MNT
7084mnt-lower: QUASINETWORKS-MNT
7085mnt-routes: QUASINETWORKS-MNT
7086created: 2011-05-07T22:25:22Z
7087last-modified: 2016-01-23T22:29:27Z
7088source: RIPE
7089
7090organisation: ORG-QNL3-RIPE
7091org-name: Quasi Networks LTD.
7092org-type: OTHER
7093address: Suite 1, Second Floor
7094address: Sound & Vision House, Francis Rachel Street
7095address: Victoria, Mahe, SEYCHELLES
7096remarks: *****************************************************************************
7097remarks: IMPORTANT INFORMATION
7098remarks: *****************************************************************************
7099remarks: We are a high bandwidth network provider offering bandwidth solutions.
7100remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
7101remarks: Please only use abuse@quasinetworks.com for abuse reports.
7102remarks: For all other requests, please see the details on our website.
7103remarks: *****************************************************************************
7104abuse-mailbox: abuse@quasinetworks.com
7105abuse-c: AR34302-RIPE
7106mnt-ref: QUASINETWORKS-MNT
7107mnt-by: QUASINETWORKS-MNT
7108created: 2015-11-08T22:25:26Z
7109last-modified: 2015-11-27T09:37:50Z
7110source: RIPE # Filtered
7111
7112role: Quasi Networks LTD
7113address: Suite 1, Second Floor
7114address: Sound & Vision House, Francis Rachel Street
7115address: Victoria, Mahe, SEYCHELLES
7116remarks: *****************************************************************************
7117remarks: IMPORTANT INFORMATION
7118remarks: *****************************************************************************
7119remarks: We are a high bandwidth network provider offering bandwidth solutions.
7120remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
7121remarks: Please only use abuse@quasinetworks.com for abuse reports.
7122remarks: For all other requests, please see the details on our website.
7123remarks: *****************************************************************************
7124abuse-mailbox: abuse@quasinetworks.com
7125nic-hdl: QNL1-RIPE
7126mnt-by: QUASINETWORKS-MNT
7127created: 2015-11-07T22:43:04Z
7128last-modified: 2015-11-07T23:04:49Z
7129source: RIPE # Filtered
7130
7131% Information related to '94.102.48.0/20AS29073'
7132
7133route: 94.102.48.0/20
7134descr: Quasi Networks LTD (IBC)
7135origin: AS29073
7136mnt-by: QUASINETWORKS-MNT
7137created: 2008-09-02T11:55:23Z
7138last-modified: 2016-01-23T22:40:05Z
7139source: RIPE
7140
7141% This query was served by the RIPE Database Query Service version 1.89.2 (WAGYU)
7142
7143
7144###########################################################################################
7145[i] Scanning Site: http://top.top-dolls.net
7146
7147
7148
7149B A S I C I N F O
7150====================
7151
7152
7153[+] Site Title:
7154[+] IP address: 94.102.48.34
7155[+] Web Server: nginx/1.12.1
7156[+] CMS: Could Not Detect
7157[+] Cloudflare: Not Detected
7158[+] Robots File: Could NOT Find robots.txt!
7159
7160
7161
7162
7163
7164G E O I P L O O K U P
7165=========================
7166
7167[i] IP Address: 94.102.48.34
7168[i] Country: SC
7169[i] State: N/A
7170[i] City: N/A
7171[i] Latitude: -4.583300
7172[i] Longitude: 55.666698
7173
7174
7175
7176
7177H T T P H E A D E R S
7178=======================
7179
7180
7181[i] HTTP/1.1 403 Forbidden
7182[i] Server: nginx/1.12.1
7183[i] Date: Sun, 10 Sep 2017 00:43:18 GMT
7184[i] Content-Type: text/html; charset=UTF-8
7185[i] Content-Length: 4961
7186[i] Connection: close
7187[i] Accept-Ranges: bytes
7188
7189
7190
7191
7192D N S L O O K U P
7193===================
7194
7195top.top-dolls.net. 3596 IN A 94.102.48.34
7196
7197
7198
7199
7200S U B N E T C A L C U L A T I O N
7201====================================
7202
7203Address = 94.102.48.34
7204Network = 94.102.48.34 / 32
7205Netmask = 255.255.255.255
7206Broadcast = not needed on Point-to-Point links
7207Wildcard Mask = 0.0.0.0
7208Hosts Bits = 0
7209Max. Hosts = 1 (2^0 - 0)
7210Host Range = { 94.102.48.34 - 94.102.48.34 }
7211
7212
7213
7214N M A P P O R T S C A N
7215============================
7216
7217
7218Starting Nmap 7.01 ( https://nmap.org ) at 2017-09-10 02:44 UTC
7219Nmap scan report for top.top-dolls.net (94.102.48.34)
7220Host is up (0.083s latency).
7221rDNS record for 94.102.48.34: no-reverse-dns-configured.com
7222PORT STATE SERVICE VERSION
722321/tcp filtered ftp
722422/tcp filtered ssh
722523/tcp closed telnet
722625/tcp open smtp Postfix smtpd
722780/tcp open http nginx 1.12.1
7228110/tcp open pop3 Dovecot pop3d
7229143/tcp open imap Dovecot imapd
7230443/tcp closed https
7231445/tcp closed microsoft-ds
72323389/tcp closed ms-wbt-server
7233
7234
7235S U B - D O M A I N F I N D E R
7236==================================
7237
7238
7239[i] Total Subdomains Found : 1
7240
7241[+] Subdomain: top.top-dolls.net
7242[-] IP: 94.102.48.34
7243[*] Performing TLD Brute force Enumeration against top.top-dolls.net
7244[*] The operation could take up to: 00:01:07
7245[*] A top.ac 66.96.161.132
7246[*] A top.ae 86.96.163.42
7247[*] A top.ae 86.96.130.64
7248[*] A top.biz.af 5.45.75.45
7249[*] A top.ag 94.75.116.15
7250[*] A top.af 108.61.170.199
7251[*] AAAA top.af 2001:19f0:6c01:547:5400:ff:fe7c:9f77
7252[*] A top.ai 47.90.1.220
7253[*] A top.al 212.7.8.182
7254[*] A top.am 50.62.112.1
7255[*] A top.com.ar 72.52.231.0
7256[*] A top.org.ar 190.183.59.134
7257[*] A top.as 72.52.4.119
7258[*] A top.co.at 213.229.60.9
7259[*] CNAME top.biz.at free.biz.at
7260[*] A free.biz.at 216.92.134.29
7261[*] A top.net.au 203.87.108.74
7262[*] A top.at 83.137.116.70
7263[*] A top.com.au 69.172.201.153
7264[*] A top.asia 77.221.130.34
7265[*] A top.org.aw 142.4.20.12
7266[*] A top.org.au 223.130.25.70
7267[*] A top.ax 104.27.184.202
7268[*] A top.ax 104.27.185.202
7269[*] AAAA top.ax 2400:cb00:2048:1::681b:b9ca
7270[*] AAAA top.ax 2400:cb00:2048:1::681b:b8ca
7271[*] A top.az 136.243.74.74
7272[*] A top.ba 81.93.76.14
7273[*] A top.co.ba 176.9.45.78
7274[*] A top.com.ba 195.222.33.180
7275[*] A top.be 86.39.240.67
7276[*] A top.co.asia 91.195.240.135
7277[*] A top.com.be 95.173.170.166
7278[*] A top.bg 78.90.206.51
7279[*] A top.bi 77.104.162.193
7280[*] A top.biz 72.52.4.119
7281[*] A top.com.br 177.154.148.10
7282[*] A top.by 93.171.222.16
7283[*] A top.biz.by 71.18.52.2
7284[*] A top.biz.bz 199.59.242.150
7285[*] A top.ca 199.59.242.150
7286[*] A top.com.cc 54.252.107.64
7287[*] A top.net.cc 54.252.89.206
7288[*] A top.co.cc 175.126.123.219
7289[*] A top.ch 35.156.3.16
7290[*] A top.cc 112.74.87.111
7291[*] A top.org.ch 72.52.4.122
7292[*] A top.cl 216.75.37.169
7293[*] A top.co.cm 85.25.140.105
7294[*] A top.net.cm 85.25.140.105
7295[*] A top.biz.cl 185.53.178.8
7296[*] A top.cn 23.27.192.117
7297[*] A top.net.cn 23.27.192.117
7298[*] A top.co 208.73.211.70
7299[*] A top.com.co 185.28.20.39
7300[*] A top.net.co 184.168.221.59
7301[*] A top.com 184.168.221.59
7302[*] A top.com.com 52.33.196.199
7303[*] A top.net.com 199.59.242.150
7304[*] A top.co.com 173.192.115.17
7305[*] A top.org.com 23.23.86.44
7306[*] A top.cr 198.1.104.236
7307[*] A top.com.cn 118.26.164.16
7308[*] A top.biz.cr 72.52.4.122
7309[*] CNAME top.biz.cm i.cns.cm
7310[*] A i.cns.cm 118.184.56.30
7311[*] A top.cx 153.231.198.148
7312[*] A top.cz 91.228.100.92
7313[*] A top.net.cz 80.250.24.177
7314[*] A top.biz.cx 72.52.4.122
7315[*] A top.co.de 128.199.226.195
7316[*] A top.com.de 199.59.242.150
7317[*] A top.de 213.165.64.4
7318[*] A top.com.cz 62.109.128.30
7319[*] CNAME top.org.de www.org.de
7320[*] A www.org.de 78.47.128.8
7321[*] A top.co.ca 66.196.36.16
7322[*] A top.biz.cz 185.53.179.7
7323[*] A top.dk 46.4.18.10
7324[*] A top.ec 72.52.4.119
7325[*] A top.ee 217.146.69.11
7326[*] AAAA top.ee 2a02:29e8:770:0:3::21
7327[*] A top.com.es 72.52.4.122
7328[*] A top.es 185.53.178.8
7329[*] A top.eu 86.39.240.67
7330[*] A top.net.eu 78.46.90.98
7331[*] A top.org.eu 78.46.90.98
7332[*] A top.biz.fi 185.55.85.123
7333[*] A top.fm 173.230.131.38
7334[*] A top.biz.fm 173.230.131.38
7335[*] A top.fo 104.27.131.13
7336[*] A top.fo 104.27.130.13
7337[*] AAAA top.fo 2400:cb00:2048:1::681b:820d
7338[*] AAAA top.fo 2400:cb00:2048:1::681b:830d
7339[*] A top.fr 37.187.182.95
7340[*] A top.org.fr 149.202.133.35
7341[*] A top.ge 188.93.95.26
7342[*] A top.gd 72.52.4.119
7343[*] A top.gf 128.65.195.88
7344[*] A top.gg 185.26.105.244
7345[*] A top.biz.gl 72.52.4.122
7346[*] A top.gp 72.52.4.119
7347[*] A top.co.gp 144.76.162.245
7348[*] A top.gr 185.4.133.65
7349[*] A top.gs 184.168.221.55
7350[*] A top.gt 198.49.72.66
7351[*] A top.hk 203.124.113.1
7352[*] A top.hn 217.70.184.38
7353[*] A top.co.hn 208.100.40.203
7354[*] A top.hr 178.218.174.100
7355[*] CNAME top.net.hr net.hr
7356[*] A net.hr 192.0.78.24
7357[*] A net.hr 192.0.78.25
7358[*] A top.ht 174.129.233.169
7359[*] A top.co.ht 72.52.4.122
7360[*] A top.hu 185.80.49.249
7361[*] CNAME top.biz.hn parkmydomain.vhostgo.com
7362[*] A parkmydomain.vhostgo.com 107.186.245.118
7363[*] A top.co.id 198.252.100.115
7364[*] A top.ie 185.2.66.91
7365[*] A top.im 89.31.143.1
7366[*] A top.org.il 194.90.184.11
7367[*] A top.org.il 194.90.156.145
7368[*] A top.in 72.52.4.119
7369[*] A top.co.in 72.52.4.122
7370[*] A top.info 210.114.223.199
7371[*] A top.net.in 50.63.202.32
7372[*] A top.org.in 72.52.4.122
7373[*] A top.io 138.201.54.27
7374[*] A top.co.ir 216.158.77.118
7375[*] A top.is 193.4.58.173
7376[*] CNAME top.je park.io
7377[*] A park.io 50.17.238.198
7378[*] A park.io 54.243.148.214
7379[*] A top.it 185.2.4.102
7380[*] A top.com.jo 104.238.99.152
7381[*] A top.co.jobs 50.17.193.222
7382[*] A top.jobs 50.19.241.165
7383[*] A top.net.jobs 50.19.241.165
7384[*] A top.com.jobs 50.19.241.165
7385[*] A top.biz.jobs 50.19.241.165
7386[*] A top.org.jobs 50.19.241.165
7387[*] A top.jp 52.198.47.173
7388[*] A top.co.jp 211.13.196.139
7389[*] A top.kg 195.38.166.72
7390[*] A top.co.ke 72.52.4.122
7391[*] A top.net.kg 178.208.83.11
7392[*] CNAME top.co.kr parking3.dnstool.net
7393[*] CNAME parking3.dnstool.net wwwp.3dupndown.co.kr
7394[*] CNAME wwwp.3dupndown.co.kr wqkboog.x.incapdns.net
7395[*] A wqkboog.x.incapdns.net 107.154.155.33
7396[*] CNAME top.kr parking3.dnstool.net
7397[*] CNAME parking3.dnstool.net wwwp.3dupndown.co.kr
7398[*] CNAME wwwp.3dupndown.co.kr wqkboog.x.incapdns.net
7399[*] A wqkboog.x.incapdns.net 107.154.155.33
7400[*] A top.com.kz 82.200.247.241
7401[*] A top.kz 136.243.146.176
7402[*] A top.biz.ky 199.184.144.27
7403[*] A top.la 72.52.4.119
7404[*] A top.lc 144.76.162.245
7405[*] A top.li 72.52.4.119
7406[*] CNAME top.biz.li 712936.parkingcrew.net
7407[*] A 712936.parkingcrew.net 185.53.179.29
7408[*] A top.lk 208.76.243.50
7409[*] A top.lt 79.98.25.1
7410[*] A top.lu 194.154.192.85
7411[*] A top.biz.lu 195.26.5.2
7412[*] A top.lv 194.105.56.171
7413[*] A top.biz.ly 64.136.20.39
7414[*] A top.co.ma 5.135.5.49
7415[*] A top.md 88.99.29.152
7416[*] A top.biz.md 72.52.4.122
7417[*] A top.me 198.204.239.194
7418[*] A top.mk 212.7.8.186
7419[*] A top.co.mk 87.76.31.211
7420[*] A top.mn 218.100.84.130
7421[*] A top.co.mobi 54.225.105.179
7422[*] A top.com.mx 184.173.249.72
7423[*] A top.com.my 209.99.40.223
7424[*] A top.biz.my 202.190.174.44
7425[*] A top.net 72.249.144.95
7426[*] A top.co.net 188.166.216.219
7427[*] A top.net.net 52.50.81.210
7428[*] A top.co.nf 185.176.40.54
7429[*] A top.biz.nf 185.176.40.54
7430[*] A top.org.net 23.23.86.44
7431[*] A top.nl 109.72.85.122
7432[*] AAAA top.nl 2a00:f10:ff03:1::103
7433[*] A top.co.nl 77.174.199.0
7434[*] A top.com.nl 83.98.157.102
7435[*] A top.net.nl 83.98.157.102
7436[*] A top.ng 91.195.240.135
7437[*] A top.no 195.18.148.21
7438[*] A top.com.ng 91.195.240.135
7439[*] A top.co.nr 208.100.40.202
7440[*] A top.nu 217.116.211.149
7441[*] A top.net.nu 199.102.76.78
7442[*] A top.org.nu 80.92.84.139
7443[*] CNAME top.co.nu co.nu
7444[*] A co.nu 144.76.162.245
7445[*] A top.com.nu 144.76.162.245
7446[*] A top.net.nz 103.250.119.215
7447[*] A top.org.nz 104.25.242.31
7448[*] A top.org.nz 104.25.243.31
7449[*] AAAA top.org.nz 2400:cb00:2048:1::6819:f21f
7450[*] AAAA top.org.nz 2400:cb00:2048:1::6819:f31f
7451[*] CNAME top.co.nz park.worldcloudshops.com
7452[*] A park.worldcloudshops.com 35.190.14.252
7453[*] A top.com.org 23.23.86.44
7454[*] CNAME top.net.org pewtrusts.org
7455[*] A pewtrusts.org 204.74.99.100
7456[*] A top.pe 103.224.182.249
7457[*] A top.com.pe 72.52.4.122
7458[*] A top.ph 192.64.147.201
7459[*] A top.com.ph 72.52.4.122
7460[*] A top.co.ph 45.79.222.138
7461[*] A top.net.ph 45.79.222.138
7462[*] A top.org.ph 45.79.222.138
7463[*] A top.com.pk 174.136.29.165
7464[*] A top.pl 178.33.53.57
7465[*] A top.co.pl 213.239.198.135
7466[*] A top.com.pl 176.9.137.196
7467[*] A top.net.pl 91.200.92.2
7468[*] A top.biz.pl 94.23.89.40
7469[*] A top.org.pl 77.55.152.162
7470[*] A top.pm 103.224.182.241
7471[*] A top.org.pm 208.73.210.202
7472[*] A top.org.pm 208.73.211.165
7473[*] A top.org.pm 208.73.211.177
7474[*] A top.org.pm 208.73.210.217
7475[*] A top.pro 192.252.144.48
7476[*] A top.co.ps 66.96.132.56
7477[*] CNAME top.biz.ps biz.ps
7478[*] A biz.ps 144.76.162.245
7479[*] A top.co.pt 194.107.127.52
7480[*] A top.pt 72.52.4.119
7481[*] A top.pw 141.8.226.59
7482[*] A top.co.pw 141.8.226.59
7483[*] A top.net.pw 141.8.226.59
7484[*] A top.biz.pw 141.8.226.59
7485[*] A top.org.pw 141.8.226.59
7486[*] A top.com.qa 82.148.100.102
7487[*] A top.re 69.172.201.153
7488[*] A top.org.re 217.70.184.38
7489[*] A top.ro 193.25.113.232
7490[*] A top.qa 208.91.197.91
7491[*] A top.net.ro 69.64.52.127
7492[*] A top.org.ro 188.241.152.102
7493[*] A top.rs 217.26.210.185
7494[*] A top.co.rs 217.26.213.91
7495[*] A top.org.rs 178.218.166.204
7496[*] A top.ru 185.77.233.40
7497[*] A top.net.ru 138.201.187.251
7498[*] A top.org.ru 37.140.192.250
7499[*] A top.com.ru 193.232.158.144
7500[*] A top.com.ru 193.232.159.144
7501[*] A top.com.ru 193.232.158.145
7502[*] A top.com.ru 193.232.159.145
7503[*] A top.net.sa 77.240.80.85
7504[*] A top.sa 208.91.197.91
7505[*] A top.sc 78.109.25.58
7506[*] A top.com.se 52.32.224.120
7507[*] A top.sg 91.136.8.131
7508[*] A top.biz.se 185.53.179.6
7509[*] A top.com.sg 119.31.233.166
7510[*] CNAME top.net.se 773147.parkingcrew.net
7511[*] A 773147.parkingcrew.net 185.53.179.29
7512[*] A top.sh 107.150.98.48
7513[*] A top.si 91.223.115.153
7514[*] A top.sk 37.9.175.5
7515[*] A top.com.sr 143.95.106.249
7516[*] A top.co.sl 91.195.240.135
7517[*] A top.st 13.69.186.222
7518[*] A top.biz.st 91.121.28.115
7519[*] A top.su 82.146.61.146
7520[*] A top.co.su 72.52.4.122
7521[*] A top.tc 144.76.162.245
7522[*] A top.biz.tc 64.136.20.39
7523[*] A top.tel 52.50.143.27
7524[*] A top.tf 77.174.199.0
7525[*] A top.net.tf 188.40.70.29
7526[*] A top.net.tf 188.40.70.27
7527[*] A top.net.tf 188.40.117.12
7528[*] A top.biz.tf 85.236.153.18
7529[*] A top.tk 195.20.47.239
7530[*] A top.co.tl 208.100.40.202
7531[*] A top.com.tr 77.245.149.29
7532[*] A top.travel 72.52.4.119
7533[*] A top.co.to 175.118.124.44
7534[*] A top.co.th 203.146.170.57
7535[*] A top.co.tv 31.186.25.163
7536[*] A top.tw 61.220.152.244
7537[*] A top.to 222.122.205.134
7538[*] A top.com.tw 106.186.25.125
7539[*] A top.net.tw 60.249.15.213
7540[*] A top.biz.tv 72.52.4.122
7541[*] A top.org.tv 72.52.4.122
7542[*] A top.org.tw 61.63.62.68
7543[*] A top.ua 82.144.222.56
7544[*] A top.co.ua 138.201.57.91
7545[*] A top.com.ua 77.120.122.115
7546[*] A top.net.ua 80.91.160.7
7547[*] A top.co.tz 216.194.168.113
7548[*] A top.uk 212.36.97.12
7549[*] A top.co.uk 212.36.97.12
7550[*] A top.biz.ua 95.213.135.229
7551[*] AAAA top.biz.ua 2a00:ab00:4300:1df::2
7552[*] A top.biz.uz 144.76.162.245
7553[*] A top.vc 199.59.242.150
7554[*] A top.net.ve 67.220.187.66
7555[*] A top.vg 88.198.29.97
7556[*] A top.co.vg 88.198.29.97
7557[*] A top.com.vg 88.198.29.97
7558[*] A top.net.vg 68.178.254.180
7559[*] A top.biz.vg 89.31.143.20
7560[*] A top.com.ve 185.53.178.6
7561[*] A top.uz 83.69.139.158
7562[*] A top.ws 184.168.221.104
7563[*] A top.net.vn 112.213.89.3
7564[*] A top.com.ws 202.4.48.211
7565[*] A top.net.ws 202.4.48.211
7566[*] A top.biz.ws 184.168.221.104
7567[*] A top.org.ws 202.4.48.211
7568[*] CNAME top.wf dnspod-free.mydnspod.net
7569[*] A dnspod-free.mydnspod.net 49.51.10.192
7570[*] A top.yt 103.224.182.241
7571----- top.top-dolls.net -----
7572
7573
7574Host's addresses:
7575__________________
7576
7577top.top-dolls.net. 1189 IN A 94.102.48.34
7578
7579
7580Name Servers:
7581______________
7582
7583 top.top-dolls.net NS record query failed: NOERROR
7584
7585
7586dnsmap 0.30 - DNS Network Mapper by pagvac (gnucitizen.org)
7587
7588[+] searching (sub)domains for top.top-dolls.net using built-in wordlist
7589[+] using maximum random delay of 10 millisecond(s) between requests
7590
7591[+] 0 (sub)domains and 0 IP address(es) found
7592[+] completion time: 153 second(s)
7593
7594
7595Tracing to top.top-dolls.net[a] via 192.168.1.254, maximum of 3 retries
7596192.168.1.254 (192.168.1.254) Got answer
7597
7598
7599WhatWeb report for http://top.top-dolls.net
7600Status : 403 Forbidden
7601Title : Apache HTTP Server Test Page powered by CentOS
7602IP : 94.102.48.34
7603Country : NETHERLANDS, NL
7604
7605Summary : PoweredBy[Apache,CentOS], Email[webmaster@example.com], HTTPServer[nginx/1.12.1], nginx[1.12.1]
7606
7607Detected Plugins:
7608[ Email ]
7609 Extract email addresses. Find valid email address and
7610 syntactically invalid email addresses from mailto: link
7611 tags. We match syntactically invalid links containing
7612 mailto: to catch anti-spam email addresses, eg. bob at
7613 gmail.com. This uses the simplified email regular
7614 expression from
7615 http://www.regular-expressions.info/email.html for valid
7616 email address matching.
7617
7618 String : webmaster@example.com
7619
7620[ HTTPServer ]
7621 HTTP server header string. This plugin also attempts to
7622 identify the operating system from the server header.
7623
7624 String : nginx/1.12.1 (from server string)
7625
7626[ PoweredBy ]
7627 This plugin identifies instances of 'Powered by x' text and
7628 attempts to extract the value for x.
7629
7630 String : Apache,CentOS
7631
7632[ nginx ]
7633 Nginx (Engine-X) is a free, open-source, high-performance
7634 HTTP server and reverse proxy, as well as an IMAP/POP3
7635 proxy server.
7636
7637 Version : 1.12.1
7638 Website : http://nginx.net/
7639
7640HTTP Headers:
7641 HTTP/1.1 403 Forbidden
7642 Server: nginx/1.12.1
7643 Date: Sun, 10 Sep 2017 00:47:30 GMT
7644 Content-Type: text/html; charset=UTF-8
7645 Content-Length: 4961
7646 Connection: close
7647 Accept-Ranges: bytes
7648
7649
7650
7651 ^ ^
7652 _ __ _ ____ _ __ _ _ ____
7653 ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
7654 | V V // o // _/ | V V // 0 // 0 // _/
7655 |_n_,'/_n_//_/ |_n_,' \_,' \_,'/_/
7656 <
7657 ...'
7658
7659 WAFW00F - Web Application Firewall Detection Tool
7660
7661 By Sandro Gauci && Wendel G. Henrique
7662
7663Checking http://top.top-dolls.net
7664Generic Detection results:
7665No WAF detected by the generic detection
7666Number of requests: 12
7667
7668
7669
7670Trying zone transfer first...
7671
7672Unsuccessful in zone transfer (it was worth a shot)
7673Okay, trying the good old fashioned way... brute force
7674
7675Checking for wildcard DNS...
7676Nope. Good.
7677Now performing 2280 test(s)...
7678
7679Subnets found (may want to probe here using nmap or unicornscan):
7680
7681Done with Fierce scan: http://ha.ckers.org/fierce/
7682Found 0 entries.
7683
7684Have a nice day.
7685
7686
7687
7688lbd - load balancing detector 0.2 - Checks if a given domain uses load-balancing.
7689 Written by Stefan Behte (http://ge.mine.nu)
7690 Proof-of-concept! Might give false positives.
7691
7692Checking for DNS-Loadbalancing: NOT FOUND
7693Checking for HTTP-Loadbalancing [Server]:
7694 nginx/1.12.1
7695 NOT FOUND
7696
7697Checking for HTTP-Loadbalancing [Date]: 00:47:59, 00:47:59, 00:48:00, 00:48:00, 00:48:00, 00:48:00, 00:48:01, 00:48:01, 00:48:01, 00:48:01, 00:48:02, 00:48:02, 00:48:02, 00:48:03, 00:48:03, 00:48:03, 00:48:03, 00:48:04, 00:48:04, 00:48:04, 00:48:04, 00:48:05, 00:48:05, 00:48:05, 00:48:05, 00:48:06, 00:48:06, 00:48:06, 00:48:07, 00:48:07, 00:48:07, 00:48:07, 00:48:08, 00:48:08, 00:48:08, 00:48:08, 00:48:09, 00:48:09, 00:48:09, 00:48:09, 00:48:10, 00:48:10, 00:48:10, 00:48:11, 00:48:11, 00:48:11, 00:48:11, 00:48:12, 00:48:12, 00:48:12, NOT FOUND
7698
7699Checking for HTTP-Loadbalancing [Diff]: NOT FOUND
7700
7701top.top-dolls.net does NOT use Load-balancing.
7702
7703
7704
7705Starting smtp-user-enum v1.2 ( http://pentestmonkey.net/tools/smtp-user-enum )
7706
7707 ----------------------------------------------------------
7708| Scan Information |
7709 ----------------------------------------------------------
7710
7711Mode ..................... VRFY
7712Worker Processes ......... 5
7713Usernames file ........... users.txt
7714Target count ............. 1
7715Username count ........... 494
7716Target TCP port .......... 25
7717Query timeout ............ 5 secs
7718Target domain ............
7719
7720######## Scan started at Sat Sep 9 22:49:35 2017 #########
7721######## Scan completed at Sat Sep 9 22:57:50 2017 #########
77220 results.
7723
7724494 queries in 495 seconds (1.0 queries / sec)
7725
7726
7727
7728Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 22:57 EDT
7729NSE: Loaded 146 scripts for scanning.
7730NSE: Script Pre-scanning.
7731Initiating NSE at 22:57
7732Completed NSE at 22:57, 0.00s elapsed
7733Initiating NSE at 22:57
7734Completed NSE at 22:57, 0.00s elapsed
7735Failed to resolve "top.top-dolls.net.txt".
7736Initiating Parallel DNS resolution of 1 host. at 22:57
7737Completed Parallel DNS resolution of 1 host. at 22:57, 0.56s elapsed
7738Initiating SYN Stealth Scan at 22:57
7739Scanning top.top-dolls.net (94.102.48.34) [100 ports]
7740Discovered open port 993/tcp on 94.102.48.34
7741Discovered open port 110/tcp on 94.102.48.34
7742Discovered open port 3306/tcp on 94.102.48.34
7743Discovered open port 143/tcp on 94.102.48.34
7744Discovered open port 995/tcp on 94.102.48.34
7745Discovered open port 80/tcp on 94.102.48.34
7746Discovered open port 53/tcp on 94.102.48.34
7747Increasing send delay for 94.102.48.34 from 0 to 5 due to 59 out of 146 dropped probes since last increase.
7748Completed SYN Stealth Scan at 22:57, 3.29s elapsed (100 total ports)
7749Initiating Service scan at 22:57
7750Scanning 7 services on top.top-dolls.net (94.102.48.34)
7751Completed Service scan at 22:58, 6.78s elapsed (7 services on 1 host)
7752Initiating OS detection (try #1) against top.top-dolls.net (94.102.48.34)
7753adjust_timeouts2: packet supposedly had rtt of -78958 microseconds. Ignoring time.
7754adjust_timeouts2: packet supposedly had rtt of -78958 microseconds. Ignoring time.
7755adjust_timeouts2: packet supposedly had rtt of -80403 microseconds. Ignoring time.
7756adjust_timeouts2: packet supposedly had rtt of -80403 microseconds. Ignoring time.
7757Retrying OS detection (try #2) against top.top-dolls.net (94.102.48.34)
7758Initiating Traceroute at 22:58
7759Completed Traceroute at 22:58, 3.01s elapsed
7760Initiating Parallel DNS resolution of 7 hosts. at 22:58
7761Completed Parallel DNS resolution of 7 hosts. at 22:58, 5.51s elapsed
7762NSE: Script scanning 94.102.48.34.
7763Initiating NSE at 22:58
7764Completed NSE at 22:58, 13.97s elapsed
7765Initiating NSE at 22:58
7766Completed NSE at 22:58, 0.01s elapsed
7767Nmap scan report for top.top-dolls.net (94.102.48.34)
7768Host is up (0.13s latency).
7769rDNS record for 94.102.48.34: no-reverse-dns-configured.com
7770Not shown: 84 closed ports
7771PORT STATE SERVICE VERSION
777221/tcp filtered ftp
777322/tcp filtered ssh
777425/tcp filtered smtp
777553/tcp open domain ISC BIND 9.8.2rc1
7776| dns-nsid:
7777|_ bind.version: 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4
777880/tcp open http nginx 1.12.1
7779|_http-favicon: Unknown favicon MD5: D41D8CD98F00B204E9800998ECF8427E
7780| http-methods:
7781| Supported Methods: GET HEAD POST OPTIONS TRACE
7782|_ Potentially risky methods: TRACE
7783|_http-server-header: nginx/1.12.1
7784|_http-title: Apache HTTP Server Test Page powered by CentOS
778581/tcp filtered hosts2-ns
7786110/tcp open pop3 Dovecot pop3d
7787|_pop3-capabilities: TOP CAPA PIPELINING UIDL STLS RESP-CODES USER SASL(PLAIN LOGIN DIGEST-MD5 CRAM-MD5)
7788| ssl-cert: Subject: commonName=imap.example.com
7789| Issuer: commonName=imap.example.com
7790| Public Key type: rsa
7791| Public Key bits: 1024
7792| Signature Algorithm: sha1WithRSAEncryption
7793| Not valid before: 2015-06-12T12:04:14
7794| Not valid after: 2016-06-11T12:04:14
7795| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
7796|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
7797|_ssl-date: 2017-09-10T00:57:10+00:00; -2h01m10s from scanner time.
7798135/tcp filtered msrpc
7799139/tcp filtered netbios-ssn
7800143/tcp open imap Dovecot imapd
7801|_imap-capabilities: IMAP4rev1 LOGIN-REFERRALS AUTH=DIGEST-MD5 ID AUTH=LOGIN completed STARTTLS Capability OK AUTH=CRAM-MD5A0001 AUTH=PLAIN IDLE LITERAL+ ENABLE SASL-IR
7802| ssl-cert: Subject: commonName=imap.example.com
7803| Issuer: commonName=imap.example.com
7804| Public Key type: rsa
7805| Public Key bits: 1024
7806| Signature Algorithm: sha1WithRSAEncryption
7807| Not valid before: 2015-06-12T12:04:14
7808| Not valid after: 2016-06-11T12:04:14
7809| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
7810|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
7811|_ssl-date: 2017-09-10T00:57:10+00:00; -2h01m10s from scanner time.
7812445/tcp filtered microsoft-ds
7813465/tcp filtered smtps
7814587/tcp filtered submission
7815993/tcp open ssl/imap Dovecot imapd
7816| ssl-cert: Subject: commonName=imap.example.com
7817| Issuer: commonName=imap.example.com
7818| Public Key type: rsa
7819| Public Key bits: 1024
7820| Signature Algorithm: sha1WithRSAEncryption
7821| Not valid before: 2015-06-12T12:04:14
7822| Not valid after: 2016-06-11T12:04:14
7823| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
7824|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
7825|_ssl-date: 2017-09-10T00:57:09+00:00; -2h01m10s from scanner time.
7826995/tcp open ssl/pop3 Dovecot pop3d
7827| ssl-cert: Subject: commonName=imap.example.com
7828| Issuer: commonName=imap.example.com
7829| Public Key type: rsa
7830| Public Key bits: 1024
7831| Signature Algorithm: sha1WithRSAEncryption
7832| Not valid before: 2015-06-12T12:04:14
7833| Not valid after: 2016-06-11T12:04:14
7834| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
7835|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
7836|_ssl-date: 2017-09-10T00:57:07+00:00; -2h01m11s from scanner time.
78373306/tcp open mysql MySQL (unauthorized)
7838Aggressive OS guesses: Linux 2.6.39 (99%), Linux 2.6.32 (95%), Linux 2.6.32 or 3.10 (95%), WatchGuard Fireware 11.8 (95%), Synology DiskStation Manager 5.1 (94%), Linux 3.1 - 3.2 (94%), Linux 3.4 (94%), Linux 3.10 (93%), Linux 2.6.32 - 2.6.39 (93%), Linux 2.6.32 - 3.0 (92%)
7839No exact OS matches for host (test conditions non-ideal).
7840Uptime guess: 11.832 days (since Tue Aug 29 03:01:01 2017)
7841Network Distance: 10 hops
7842TCP Sequence Prediction: Difficulty=257 (Good luck!)
7843IP ID Sequence Generation: All zeros
7844Service Info: OS: Red Hat Enterprise Linux 6; CPE: cpe:/o:redhat:enterprise_linux:6
7845
7846Host script results:
7847|_clock-skew: mean: -2h01m10s, deviation: 0s, median: -2h01m10s
7848
7849TRACEROUTE (using port 5900/tcp)
7850HOP RTT ADDRESS
78511 110.21 ms 10.13.0.1
78522 ...
78533 110.25 ms po101.gra-g1-a75.fr.eu (178.33.103.229)
78544 112.29 ms 10.95.33.8
78555 119.09 ms be100-1109.fra-1-a9.de.eu (213.186.32.213)
78566 ...
78577 124.33 ms vlan3555.bb1.ams2.nl.m247.com (176.10.83.128)
78588 120.62 ms 176.10.83.119
78599 ...
786010 120.67 ms no-reverse-dns-configured.com (94.102.48.34)
7861
7862NSE: Script Post-scanning.
7863Initiating NSE at 22:58
7864Completed NSE at 22:58, 0.00s elapsed
7865Initiating NSE at 22:58
7866Completed NSE at 22:58, 0.00s elapsed
7867Read data files from: /usr/bin/../share/nmap
7868OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
7869Nmap done: 1 IP address (1 host up) scanned in 39.77 seconds
7870 Raw packets sent: 292 (15.702KB) | Rcvd: 222 (11.728KB)
7871
7872
7873
7874
7875 _/ _/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/
7876 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
7877 _/ _/ _/_/_/_/ _/_/_/ _/ _/_/_/ _/_/_/_/ _/ _/_/_/ _/_/_/_
7878 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
7879 _/_/_/_/ _/ _/ _/ _/_/_/_/ _/_/_/_/ _/ _/_/_/_/ _/ _/ [v1.06]
7880
7881 _/ User-Agent Tester ↵
7882 _/ AKA: Purple Pimp ↵
7883 _/ ChrisJohnRiley ↵
7884 _/ blog.c22.cc ↵
7885
7886 [>] Performing initial request and confirming stability
7887 [>] Using User-Agent string Mozilla/5.0
7888
7889 [*] HTTPError: HTTP Error 403: Forbidden
7890
7891########################################################################################
7892
7893Hostname www.youngs-list.com ISP Quasi Networks LTD. (AS29073)
7894Continent Africa Flag
7895SC
7896Country Seychelles Country Code SC (SYC)
7897Region Unknown Local time 10 Sep 2017 07:06 +04
7898City Unknown Latitude -4.583
7899IP Address 80.82.79.11 Longitude 55.667
7900########################################################################################
7901youngs-list.com
7902
7903###########################################################################################
7904
7905whois youngs-list.com
7906 Domain Name: YOUNGS-LIST.COM
7907 Registry Domain ID: 1465281303_DOMAIN_COM-VRSN
7908 Registrar WHOIS Server: whois.nic.ru
7909 Registrar URL: http://nic.ru
7910 Updated Date: 2017-04-27T12:19:35Z
7911 Creation Date: 2008-05-05T09:26:42Z
7912 Registry Expiry Date: 2018-05-05T09:26:42Z
7913 Registrar: Regional Network Information Center, JSC dba RU-CENTER
7914 Registrar IANA ID: 463
7915 Registrar Abuse Contact Email: tld-abuse@nic.ru
7916 Registrar Abuse Contact Phone: +7 (495) 994-46-01
7917 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
7918 Name Server: NS1.YOUNGS-LIST.COM
7919 Name Server: NS2.YOUNGS-LIST.COM
7920
7921Domain Name: YOUNGS-LIST.COM
7922Registry Domain ID: 1465281303_DOMAIN_COM-VRSN
7923Registrar WHOIS Server: whois.nic.ru
7924Registrar URL: http://www.nic.ru
7925Updated Date: 2017-04-27T08:19:27Z
7926Creation Date: 2008-05-05T09:26:42Z
7927Registrar Registration Expiration Date: 2018-05-04T21:00:00Z
7928Registrar: Regional Network Information Center, JSC dba RU-CENTER
7929Registrar IANA ID: 463
7930Registrar Abuse Contact Email: tld-abuse@nic.ru
7931Registrar Abuse Contact Phone: +7.4959944601
7932Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
7933Registry Registrant ID:
7934Registrant Name: Maksim A Boyko
7935Registrant Organization: Maksim A Boyko
7936Registrant Street: Pavlovskaya 98
7937Registrant City: Odessa
7938Registrant Postal Code: 184681
7939Registrant Country: UA
7940Registrant Phone: +380.2890115
7941Registrant Phone Ext:
7942Registrant Email: pandabox@bk.ru
7943Registry Admin ID:
7944Admin Name: Maksim A Boyko
7945Admin Organization: Maksim A Boyko
7946Admin Street: Pavlovskaya 98
7947Admin City: Odessa
7948Admin Postal Code: 184681
7949Admin Country: UA
7950Admin Phone: +380.2890115
7951Admin Phone Ext:
7952Admin Email: pandabox@bk.ru
7953Registry Tech ID:
7954Tech Name: Maksim A Boyko
7955Tech Organization: Maksim A Boyko
7956Tech Street: Pavlovskaya 98
7957Tech City: Odessa
7958Tech Postal Code: 184681
7959Tech Country: UA
7960Tech Phone: +380.2890115
7961Tech Phone Ext:
7962Tech Email: pandabox@bk.ru
7963Name Server: ns1.youngs-list.com 93.174.93.111
7964Name Server: ns2.youngs-list.com 192.133.136.162
7965DNSSEC: unsigned
7966URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
7967For more information on Whois status codes, please visit: https://icann.org/epp
7968>>> Last update of WHOIS database: 2017.09.10T03:08:14Z <<<
7969###########################################################################################
7970
7971dig youngs-list.com any
7972
7973; <<>> DiG 9.10.3-P4-Debian <<>> youngs-list.com any
7974;; global options: +cmd
7975;; Got answer:
7976;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62102
7977;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
7978
7979;; OPT PSEUDOSECTION:
7980; EDNS: version: 0, flags:; udp: 4096
7981;; QUESTION SECTION:
7982;youngs-list.com. IN ANY
7983
7984;; ANSWER SECTION:
7985youngs-list.com. 3065 IN A 80.82.79.11
7986youngs-list.com. 3064 IN NS ns1.dxgirlz.com.
7987youngs-list.com. 3064 IN NS ns2.dxgirlz.com.
7988
7989
7990###########################################################################################
7991
7992Checking for HTTP-Loadbalancing [Date]: 01:07:20, 01:07:20, 01:07:20, 01:07:21, 01:07:21, 01:07:21, 01:07:21, 01:07:22, 01:07:22, 01:07:22, 01:07:22, 01:07:23, 01:07:23, 01:07:23, 01:07:24, 01:07:24, 01:07:24, 01:07:24, 01:07:25, 01:07:25, 01:07:25, 01:07:25, 01:07:26, 01:07:26, 01:07:26, 01:07:26, 01:07:27, 01:07:27, 01:07:27, 01:07:28, 01:07:28, 01:07:28, 01:07:28, 01:07:29, 01:07:29, 01:07:29, 01:07:29, 01:07:30, 01:07:30, 01:07:30, 01:07:30, 01:07:31, 01:07:31, 01:07:31, 01:07:31, 01:07:32, 01:07:32, 01:07:32, 01:07:33, 01:07:33,
7993###########################################################################################
7994
7995nmap -PN -n -F -T4 -sV -A -oG temp.txt youngs-list.com
7996
7997Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 23:09 EDT
7998Nmap scan report for youngs-list.com (80.82.79.11)
7999Host is up (0.42s latency).
8000Not shown: 84 closed ports
8001PORT STATE SERVICE VERSION
800221/tcp filtered ftp
800322/tcp filtered ssh
800425/tcp filtered smtp
800553/tcp open tcpwrapped
8006| dns-nsid:
8007|_ bind.version: 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4
800880/tcp open tcpwrapped
8009|_http-server-header: nginx/1.12.1
8010|_http-title: Did not follow redirect to http://www.youngs-list.com/new.html
801181/tcp filtered hosts2-ns
8012110/tcp open tcpwrapped
8013|_pop3-capabilities: PIPELINING SASL(PLAIN LOGIN DIGEST-MD5 CRAM-MD5) USER RESP-CODES UIDL CAPA STLS TOP
8014| ssl-cert: Subject: commonName=imap.example.com
8015| Not valid before: 2015-06-12T12:04:14
8016|_Not valid after: 2016-06-11T12:04:14
8017|_ssl-date: 2017-09-10T01:09:13+00:00; -2h01m10s from scanner time.
8018135/tcp filtered msrpc
8019139/tcp filtered netbios-ssn
8020143/tcp open tcpwrapped
8021|_imap-capabilities: completed IMAP4rev1 OK ID STARTTLS SASL-IR ENABLE AUTH=CRAM-MD5A0001 LITERAL+ AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=PLAIN LOGIN-REFERRALS IDLE Capability
8022| ssl-cert: Subject: commonName=imap.example.com
8023| Not valid before: 2015-06-12T12:04:14
8024|_Not valid after: 2016-06-11T12:04:14
8025|_ssl-date: 2017-09-10T01:09:13+00:00; -2h01m10s from scanner time.
8026445/tcp filtered microsoft-ds
8027465/tcp filtered smtps
8028587/tcp filtered submission
8029993/tcp open tcpwrapped
8030|_imap-capabilities: IMAP4rev1 OK ID completed SASL-IR ENABLE AUTH=PLAIN LITERAL+ AUTH=LOGIN AUTH=CRAM-MD5A0001 AUTH=DIGEST-MD5 LOGIN-REFERRALS IDLE Capability
8031| ssl-cert: Subject: commonName=imap.example.com
8032| Not valid before: 2015-06-12T12:04:14
8033|_Not valid after: 2016-06-11T12:04:14
8034|_ssl-date: 2017-09-10T01:09:11+00:00; -2h01m10s from scanner time.
8035995/tcp open tcpwrapped
8036|_pop3-capabilities: PIPELINING USER RESP-CODES UIDL CAPA SASL(PLAIN LOGIN DIGEST-MD5 CRAM-MD5) TOP
8037| ssl-cert: Subject: commonName=imap.example.com
8038| Not valid before: 2015-06-12T12:04:14
8039|_Not valid after: 2016-06-11T12:04:14
8040|_ssl-date: 2017-09-10T01:09:10+00:00; -2h01m11s from scanner time.
80413306/tcp open tcpwrapped
8042Aggressive OS guesses: Linux 2.6.39 (99%), Linux 2.6.32 (95%), Linux 2.6.32 or 3.10 (95%), WatchGuard Fireware 11.8 (95%), Synology DiskStation Manager 5.1 (94%), Linux 3.1 - 3.2 (94%), Linux 3.4 (94%), Linux 3.10 (93%), Linux 2.6.32 - 2.6.39 (93%), Linux 2.6.32 - 3.0 (92%)
8043No exact OS matches for host (test conditions non-ideal).
8044Network Distance: 11 hops
8045
8046Host script results:
8047|_clock-skew: mean: -2h01m10s, deviation: 0s, median: -2h01m10s
8048
8049TRACEROUTE (using port 5060/tcp)
8050HOP RTT ADDRESS
80511 109.53 ms 10.13.0.1
80522 145.98 ms 37.187.24.252
80533 110.43 ms 178.33.103.231
80544 ...
80555 119.11 ms 91.121.131.19
80566 118.96 ms 94.23.122.217
80577 ...
80588 124.69 ms 176.10.83.128
80599 120.16 ms 176.10.83.119
806010 ...
806111 120.22 ms 80.82.79.11
8062
8063OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
8064Nmap done: 1 IP address (1 host up) scanned in 69.13 seconds
8065
8066###########################################################################################
8067
8068amap -i temp.txt
8069amap v5.4 (www.thc.org/thc-amap) started at 2017-09-09 23:10:34 - APPLICATION MAPPING mode
8070
8071Protocol on 80.82.79.11:80/tcp matches http
8072Protocol on 80.82.79.11:80/tcp matches http-apache-2
8073Protocol on 80.82.79.11:143/tcp matches imap
8074Protocol on 80.82.79.11:110/tcp matches pop3
8075Protocol on 80.82.79.11:993/tcp matches ssl
8076Protocol on 80.82.79.11:3306/tcp matches mysql
8077Protocol on 80.82.79.11:3306/tcp matches mysql-secured
8078Protocol on 80.82.79.11:995/tcp matches ssl
8079Protocol on 80.82.79.11:53/tcp matches dns
8080
8081Unidentified ports: none.
8082
8083amap v5.4 finished at 2017-09-09 23:10:52
8084
8085###########################################################################################
8086
8087
8088inetnum: 80.82.79.0 - 80.82.79.255
8089netname: SC-QUASI80
8090descr: QUASI
8091country: SC
8092org: ORG-QNL3-RIPE
8093admin-c: QNL1-RIPE
8094tech-c: QNL1-RIPE
8095status: ASSIGNED PA
8096mnt-by: QUASINETWORKS-MNT
8097mnt-lower: QUASINETWORKS-MNT
8098mnt-routes: QUASINETWORKS-MNT
8099created: 2010-08-25T21:29:49Z
8100last-modified: 2016-01-23T23:04:27Z
8101source: RIPE
8102
8103organisation: ORG-QNL3-RIPE
8104org-name: Quasi Networks LTD.
8105org-type: OTHER
8106address: Suite 1, Second Floor
8107address: Sound & Vision House, Francis Rachel Street
8108address: Victoria, Mahe, SEYCHELLES
8109remarks: *****************************************************************************
8110remarks: IMPORTANT INFORMATION
8111remarks: *****************************************************************************
8112remarks: We are a high bandwidth network provider offering bandwidth solutions.
8113remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
8114remarks: Please only use abuse@quasinetworks.com for abuse reports.
8115remarks: For all other requests, please see the details on our website.
8116remarks: *****************************************************************************
8117abuse-mailbox: abuse@quasinetworks.com
8118abuse-c: AR34302-RIPE
8119mnt-ref: QUASINETWORKS-MNT
8120mnt-by: QUASINETWORKS-MNT
8121created: 2015-11-08T22:25:26Z
8122last-modified: 2015-11-27T09:37:50Z
8123source: RIPE # Filtered
8124
8125role: Quasi Networks LTD
8126address: Suite 1, Second Floor
8127address: Sound & Vision House, Francis Rachel Street
8128address: Victoria, Mahe, SEYCHELLES
8129remarks: *****************************************************************************
8130remarks: IMPORTANT INFORMATION
8131remarks: *****************************************************************************
8132remarks: We are a high bandwidth network provider offering bandwidth solutions.
8133remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
8134remarks: Please only use abuse@quasinetworks.com for abuse reports.
8135remarks: For all other requests, please see the details on our website.
8136remarks: *****************************************************************************
8137abuse-mailbox: abuse@quasinetworks.com
8138nic-hdl: QNL1-RIPE
8139mnt-by: QUASINETWORKS-MNT
8140created: 2015-11-07T22:43:04Z
8141last-modified: 2015-11-07T23:04:49Z
8142source: RIPE # Filtered
8143
8144% Information related to '80.82.79.0/24AS29073'
8145
8146route: 80.82.79.0/24
8147descr: Quasi Networks LTD (IBC)
8148origin: AS29073
8149mnt-by: QUASINETWORKS-MNT
8150created: 2010-08-25T21:31:02Z
8151last-modified: 2016-01-23T23:04:45Z
8152source: RIPE
8153
8154% This query was served by the RIPE Database Query Service version 1.89.2 (HEREFORD)
8155
8156###########################################################################################
8157[i] Scanning Site: http://youngs-list.com
8158
8159
8160
8161B A S I C I N F O
8162====================
8163
8164
8165[+] Site Title:
8166[+] IP address: 80.82.79.11
8167[+] Web Server: nginx/1.12.1
8168[+] CMS: Could Not Detect
8169[+] Cloudflare: Not Detected
8170[+] Robots File: Could NOT Find robots.txt!
8171
8172
8173
8174
8175W H O I S L O O K U P
8176========================
8177
8178 Domain Name: YOUNGS-LIST.COM
8179 Registry Domain ID: 1465281303_DOMAIN_COM-VRSN
8180 Registrar WHOIS Server: whois.nic.ru
8181 Registrar URL: http://nic.ru
8182 Updated Date: 2017-04-27T12:19:35Z
8183 Creation Date: 2008-05-05T09:26:42Z
8184 Registry Expiry Date: 2018-05-05T09:26:42Z
8185 Registrar: Regional Network Information Center, JSC dba RU-CENTER
8186 Registrar IANA ID: 463
8187 Registrar Abuse Contact Email: tld-abuse@nic.ru
8188 Registrar Abuse Contact Phone: +7 (495) 994-46-01
8189 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
8190 Name Server: NS1.YOUNGS-LIST.COM
8191 Name Server: NS2.YOUNGS-LIST.COM
8192
8193
8194
8195
8196
8197G E O I P L O O K U P
8198=========================
8199
8200[i] IP Address: 80.82.79.11
8201[i] Country: SC
8202[i] State: N/A
8203[i] City: N/A
8204[i] Latitude: -4.583300
8205[i] Longitude: 55.666698
8206
8207
8208
8209
8210H T T P H E A D E R S
8211=======================
8212
8213
8214[i] HTTP/1.1 301 Moved Permanently
8215[i] Server: nginx/1.12.1
8216[i] Date: Sun, 10 Sep 2017 01:07:23 GMT
8217[i] Content-Type: text/html; charset=iso-8859-1
8218[i] Content-Length: 324
8219[i] Connection: close
8220[i] Location: http://www.youngs-list.com/new.html
8221[i] HTTP/1.1 404 Not Found
8222[i] Server: nginx/1.12.1
8223[i] Date: Sun, 10 Sep 2017 01:07:23 GMT
8224[i] Content-Type: text/html; charset=iso-8859-1
8225[i] Content-Length: 291
8226[i] Connection: close
8227
8228
8229
8230
8231D N S L O O K U P
8232===================
8233
8234youngs-list.com. 3597 IN A 80.82.79.11
8235youngs-list.com. 3600 IN NS ns2.dxgirlz.com.
8236youngs-list.com. 3600 IN NS ns1.dxgirlz.com.
8237youngs-list.com. 3600 IN SOA b06s06.com. root.dxgirlz.com. 2015061501 10800 3600 604800 86400
8238youngs-list.com. 3600 IN TXT "v=spf1 ip4:93.174.93.111 a mx ~all"
8239
8240
8241
8242
8243S U B N E T C A L C U L A T I O N
8244====================================
8245
8246Address = 80.82.79.11
8247Network = 80.82.79.11 / 32
8248Netmask = 255.255.255.255
8249Broadcast = not needed on Point-to-Point links
8250Wildcard Mask = 0.0.0.0
8251Hosts Bits = 0
8252Max. Hosts = 1 (2^0 - 0)
8253Host Range = { 80.82.79.11 - 80.82.79.11 }
8254
8255
8256
8257N M A P P O R T S C A N
8258============================
8259
8260
8261Starting Nmap 7.01 ( https://nmap.org ) at 2017-09-10 03:08 UTC
8262Nmap scan report for youngs-list.com (80.82.79.11)
8263Host is up (0.082s latency).
8264rDNS record for 80.82.79.11: no-reverse-dns-configured.com
8265PORT STATE SERVICE VERSION
826621/tcp filtered ftp
826722/tcp filtered ssh
826823/tcp closed telnet
826925/tcp open smtp Postfix smtpd
827080/tcp open http nginx 1.12.1
8271110/tcp open pop3 Dovecot pop3d
8272143/tcp open imap Dovecot imapd
8273443/tcp closed https
8274445/tcp closed microsoft-ds
82753389/tcp closed ms-wbt-server
8276
8277
8278S U B - D O M A I N F I N D E R
8279==================================
8280
8281
8282[i] Total Subdomains Found : 1
8283
8284[+] Subdomain: youngs-list.com
8285[-] IP: 80.82.79.11
8286[*] Performing TLD Brute force Enumeration against youngs-list.com
8287[*] The operation could take up to: 00:01:07
8288[*] A youngs-list.biz.af 5.45.75.45
8289[*] A youngs-list.co.asia 91.195.240.135
8290[*] CNAME youngs-list.biz.at free.biz.at
8291[*] A free.biz.at 216.92.134.29
8292[*] A youngs-list.org.aw 142.4.20.12
8293[*] A youngs-list.co.ba 176.9.45.78
8294[*] A youngs-list.com.ba 195.222.33.180
8295[*] A youngs-list.com.be 95.173.170.166
8296[*] A youngs-list.biz.by 71.18.52.2
8297[*] A youngs-list.biz.bz 199.59.242.150
8298[*] A youngs-list.com.cc 54.252.107.64
8299[*] A youngs-list.net.cc 54.252.89.206
8300[*] A youngs-list.co.cc 175.126.123.219
8301[*] A youngs-list.org.ch 72.52.4.122
8302[*] A youngs-list.co.cm 85.25.140.105
8303[*] A youngs-list.net.cm 85.25.140.105
8304[*] A youngs-list.biz.cl 185.53.178.8
8305[*] A youngs-list.com.com 52.33.196.199
8306[*] A youngs-list.net.com 199.59.242.150
8307[*] CNAME youngs-list.biz.cm i.cns.cm
8308[*] A i.cns.cm 118.184.56.30
8309[*] A youngs-list.org.com 23.23.86.44
8310[*] A youngs-list.com 80.82.79.11
8311[*] A youngs-list.co.com 173.192.115.17
8312[*] A youngs-list.biz.cr 72.52.4.122
8313[*] A youngs-list.biz.cx 72.52.4.122
8314[*] A youngs-list.com.cz 62.109.128.30
8315[*] A youngs-list.net.cz 80.250.24.177
8316[*] A youngs-list.biz.cz 54.72.9.51
8317[*] CNAME youngs-list.co.de co.de
8318[*] A co.de 144.76.162.245
8319[*] CNAME youngs-list.org.de www.org.de
8320[*] A www.org.de 78.47.128.8
8321[*] A youngs-list.com.de 50.56.68.37
8322[*] A youngs-list.net.eu 78.46.90.98
8323[*] A youngs-list.org.eu 78.46.90.98
8324[*] A youngs-list.biz.fi 185.55.85.123
8325[*] A youngs-list.fm 173.230.131.38
8326[*] A youngs-list.biz.fm 173.230.131.38
8327[*] A youngs-list.org.fr 149.202.133.35
8328[*] A youngs-list.biz.gl 72.52.4.122
8329[*] CNAME youngs-list.co.gp co.gp
8330[*] A co.gp 144.76.162.245
8331[*] A youngs-list.co.hn 208.100.40.203
8332[*] CNAME youngs-list.net.hr net.hr
8333[*] A net.hr 192.0.78.24
8334[*] A net.hr 192.0.78.25
8335[*] CNAME youngs-list.biz.hn parkmydomain.vhostgo.com
8336[*] A parkmydomain.vhostgo.com 107.186.245.118
8337[*] A youngs-list.co.ht 72.52.4.122
8338[*] A youngs-list.co.jobs 50.17.193.222
8339[*] A youngs-list.com.jobs 50.19.241.165
8340[*] A youngs-list.net.jobs 50.19.241.165
8341[*] A youngs-list.org.jobs 50.19.241.165
8342[*] A youngs-list.biz.jobs 50.19.241.165
8343[*] A youngs-list.biz.ky 199.184.144.27
8344[*] CNAME youngs-list.biz.li 712936.parkingcrew.net
8345[*] A 712936.parkingcrew.net 185.53.179.29
8346[*] A youngs-list.biz.lu 195.26.5.2
8347[*] A youngs-list.biz.ly 64.136.20.39
8348[*] A youngs-list.biz.md 72.52.4.122
8349[*] A youngs-list.co.mk 87.76.31.211
8350[*] A youngs-list.co.mobi 54.225.105.179
8351[*] A youngs-list.biz.my 202.190.174.44
8352[*] A youngs-list.co.net 188.166.216.219
8353[*] A youngs-list.net.net 52.50.81.210
8354[*] A youngs-list.org.net 23.23.86.44
8355[*] A youngs-list.co.nl 37.97.184.204
8356[*] A youngs-list.com.nl 83.98.157.102
8357[*] A youngs-list.net.nl 83.98.157.102
8358[*] A youngs-list.co.nr 208.100.40.202
8359[*] CNAME youngs-list.co.nu co.nu
8360[*] A co.nu 144.76.162.245
8361[*] CNAME youngs-list.com.nu com.nu
8362[*] A com.nu 144.76.162.245
8363[*] A youngs-list.net.nu 199.102.76.78
8364[*] A youngs-list.org.nu 80.92.84.139
8365[*] A youngs-list.com.org 23.23.86.44
8366[*] CNAME youngs-list.net.org pewtrusts.org
8367[*] A pewtrusts.org 204.74.99.100
8368[*] A youngs-list.ph 45.79.222.138
8369[*] A youngs-list.co.ph 45.79.222.138
8370[*] A youngs-list.com.ph 45.79.222.138
8371[*] A youngs-list.net.ph 45.79.222.138
8372[*] A youngs-list.org.ph 45.79.222.138
8373[*] A youngs-list.co.pl 212.91.6.55
8374[*] A youngs-list.org.pm 208.73.210.202
8375[*] A youngs-list.org.pm 208.73.210.217
8376[*] A youngs-list.org.pm 208.73.211.165
8377[*] A youngs-list.org.pm 208.73.211.177
8378[*] A youngs-list.co.ps 66.96.132.56
8379[*] CNAME youngs-list.biz.ps biz.ps
8380[*] A biz.ps 144.76.162.245
8381[*] A youngs-list.co.pt 194.107.127.52
8382[*] A youngs-list.co.pw 141.8.226.59
8383[*] A youngs-list.net.pw 141.8.226.59
8384[*] A youngs-list.pw 141.8.226.58
8385[*] A youngs-list.biz.pw 141.8.226.59
8386[*] A youngs-list.org.pw 141.8.226.59
8387[*] CNAME youngs-list.co.ro now.co.ro
8388[*] A now.co.ro 185.27.255.9
8389[*] A youngs-list.net.ro 69.64.52.127
8390[*] A youngs-list.org.re 217.70.184.38
8391[*] A youngs-list.com.ru 178.210.89.119
8392[*] A youngs-list.biz.se 185.53.179.6
8393[*] CNAME youngs-list.net.se 773147.parkingcrew.net
8394[*] A 773147.parkingcrew.net 185.53.179.29
8395[*] A youngs-list.co.sl 91.195.240.135
8396[*] A youngs-list.com.sr 143.95.106.249
8397[*] A youngs-list.biz.st 91.121.28.115
8398[*] A youngs-list.co.su 72.52.4.122
8399[*] A youngs-list.biz.tc 64.136.20.39
8400[*] A youngs-list.biz.tf 85.236.153.18
8401[*] A youngs-list.net.tf 188.40.70.29
8402[*] A youngs-list.net.tf 188.40.70.27
8403[*] A youngs-list.net.tf 188.40.117.12
8404[*] A youngs-list.co.tl 208.100.40.202
8405[*] A youngs-list.co.to 175.118.124.44
8406[*] A youngs-list.co.tv 31.186.25.163
8407[*] A youngs-list.biz.tv 72.52.4.122
8408[*] A youngs-list.org.tv 72.52.4.122
8409[*] CNAME youngs-list.biz.uz biz.uz
8410[*] A biz.uz 144.76.162.245
8411[*] A youngs-list.vg 88.198.29.97
8412[*] A youngs-list.co.vg 88.198.29.97
8413[*] A youngs-list.com.vg 88.198.29.97
8414[*] A youngs-list.net.vg 68.178.254.180
8415[*] A youngs-list.biz.vg 89.31.143.20
8416[*] A youngs-list.ws 64.70.19.203
8417[*] A youngs-list.com.ws 202.4.48.211
8418[*] A youngs-list.net.ws 202.4.48.211
8419[*] A youngs-list.biz.ws 184.168.221.104
8420[*] A youngs-list.org.ws 202.4.48.211
8421
8422R E V E R S E I P L O O K U P
8423==================================
8424
8425
8426[i] Total Sites Found On This Server : 8
8427
8428
8429[#] crazy-models.photo-angels.name
8430[-] CMS: Could Not Detect
8431
8432[#] nn-girls.biz
8433[-] CMS: Could Not Detect
8434
8435[#] sgirls.hotdolls.info
8436[-] CMS: Could Not Detect
8437
8438[#] teeny-video.photo-angels.name
8439[-] CMS: Could Not Detect
8440
8441[#] www.atlasphones.com
8442[-] CMS: Could Not Detect
8443
8444[#] www.charming-dolls.info
8445[-] CMS: Could Not Detect
8446
8447[#] www.youngs-list.com
8448[-] CMS: Could Not Detect
8449
8450[#] youngs-list.com,
8451[-] CMS: Could Not Detect
8452youngs-list.com
8453
8454
8455 Domain Name: YOUNGS-LIST.COM
8456 Registry Domain ID: 1465281303_DOMAIN_COM-VRSN
8457 Registrar WHOIS Server: whois.nic.ru
8458 Registrar URL: http://nic.ru
8459 Updated Date: 2017-04-27T12:19:35Z
8460 Creation Date: 2008-05-05T09:26:42Z
8461 Registry Expiry Date: 2018-05-05T09:26:42Z
8462 Registrar: Regional Network Information Center, JSC dba RU-CENTER
8463 Registrar IANA ID: 463
8464 Registrar Abuse Contact Email: tld-abuse@nic.ru
8465 Registrar Abuse Contact Phone: +7 (495) 994-46-01
8466 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
8467 Name Server: NS1.YOUNGS-LIST.COM
8468 Name Server: NS2.YOUNGS-LIST.COM
8469 DNSSEC: unsigned
8470
8471Domain Name: YOUNGS-LIST.COM
8472Registry Domain ID: 1465281303_DOMAIN_COM-VRSN
8473Registrar WHOIS Server: whois.nic.ru
8474Registrar URL: http://www.nic.ru
8475Updated Date: 2017-04-27T08:19:27Z
8476Creation Date: 2008-05-05T09:26:42Z
8477Registrar Registration Expiration Date: 2018-05-04T21:00:00Z
8478Registrar: Regional Network Information Center, JSC dba RU-CENTER
8479Registrar IANA ID: 463
8480Registrar Abuse Contact Email: tld-abuse@nic.ru
8481Registrar Abuse Contact Phone: +7.4959944601
8482Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
8483Registry Registrant ID:
8484Registrant Name: Maksim A Boyko
8485Registrant Organization: Maksim A Boyko
8486Registrant Street: Pavlovskaya 98
8487Registrant City: Odessa
8488Registrant Postal Code: 184681
8489Registrant Country: UA
8490Registrant Phone: +380.2890115
8491Registrant Phone Ext:
8492Registrant Email: pandabox@bk.ru
8493Registry Admin ID:
8494Admin Name: Maksim A Boyko
8495Admin Organization: Maksim A Boyko
8496Admin Street: Pavlovskaya 98
8497Admin City: Odessa
8498Admin Postal Code: 184681
8499Admin Country: UA
8500Admin Phone: +380.2890115
8501Admin Phone Ext:
8502Admin Email: pandabox@bk.ru
8503Registry Tech ID:
8504Tech Name: Maksim A Boyko
8505Tech Organization: Maksim A Boyko
8506Tech Street: Pavlovskaya 98
8507Tech City: Odessa
8508Tech Postal Code: 184681
8509Tech Country: UA
8510Tech Phone: +380.2890115
8511Tech Phone Ext:
8512Tech Email: pandabox@bk.ru
8513Name Server: ns1.youngs-list.com 93.174.93.111
8514Name Server: ns2.youngs-list.com 192.133.136.162
8515
8516;youngs-list.com. IN ANY
8517
8518;; ANSWER SECTION:
8519youngs-list.com. 3067 IN A 80.82.79.11
8520youngs-list.com. 3066 IN NS ns2.dxgirlz.com.
8521youngs-list.com. 3066 IN NS ns1.dxgirlz.com.
8522
8523----- youngs-list.com -----
8524
8525
8526Host's addresses:
8527__________________
8528
8529youngs-list.com. 3044 IN A 80.82.79.11
8530
8531
8532Name Servers:
8533______________
8534
8535ns1.dxgirlz.com. 2856 IN A 93.174.93.111
8536ns2.dxgirlz.com. 2856 IN A 192.133.136.162
8537
8538
8539Mail (MX) Servers:
8540___________________
8541
8542
8543
8544Trying Zone Transfers and getting Bind Versions:
8545_________________________________________________
8546
8547
8548Trying Zone Transfer for youngs-list.com on ns1.dxgirlz.com ...
8549youngs-list.com. 3600 IN SOA (
8550youngs-list.com. 3600 IN NS ns1.dxgirlz.com.
8551youngs-list.com. 3600 IN NS ns2.dxgirlz.com.
8552youngs-list.com. 3600 IN A 80.82.79.11
8553youngs-list.com. 3600 IN TXT "v=spf1
8554www.youngs-list.com. 3600 IN A 80.82.79.11
8555
8556Trying Zone Transfer for youngs-list.com on ns2.dxgirlz.com ...
8557youngs-list.com. 3600 IN SOA (
8558youngs-list.com. 3600 IN NS ns1.dxgirlz.com.
8559youngs-list.com. 3600 IN NS ns2.dxgirlz.com.
8560youngs-list.com. 3600 IN A 80.82.79.11
8561youngs-list.com. 3600 IN TXT "v=spf1
8562www.youngs-list.com. 3600 IN A 80.82.79.11
8563
8564
8565youngs-list.com class C netranges:
8566___________________________________
8567
8568 80.82.79.0/24
8569
8570
8571Performing reverse lookup on 256 ip addresses:
8572_______________________________________________
8573
8574
85750 results out of 256 IP addresses.
8576
8577
8578youngs-list.com ip blocks:
8579___________________________
8580
8581
8582done.
8583
8584
8585dnsmap 0.30 - DNS Network Mapper by pagvac (gnucitizen.org)
8586
8587[+] searching (sub)domains for youngs-list.com using built-in wordlist
8588[+] using maximum random delay of 10 millisecond(s) between requests
8589
8590www.youngs-list.com
8591IP address #1: 80.82.79.11
8592
8593[+] 1 (sub)domains and 1 IP address(es) found
8594[+] completion time: 142 second(s)
8595
8596
8597WhatWeb report for http://youngs-list.com
8598Status : 301 Moved Permanently
8599Title : 301 Moved Permanently
8600IP : 80.82.79.11
8601Country : NETHERLANDS, NL
8602
8603Summary : HTTPServer[nginx/1.12.1], RedirectLocation[http://www.youngs-list.com/new.html], nginx[1.12.1]
8604
8605Detected Plugins:
8606[ HTTPServer ]
8607 HTTP server header string. This plugin also attempts to
8608 identify the operating system from the server header.
8609
8610 String : nginx/1.12.1 (from server string)
8611
8612[ RedirectLocation ]
8613 HTTP Server string location. used with http-status 301 and
8614 302
8615
8616 String : http://www.youngs-list.com/new.html (from location)
8617
8618[ nginx ]
8619 Nginx (Engine-X) is a free, open-source, high-performance
8620 HTTP server and reverse proxy, as well as an IMAP/POP3
8621 proxy server.
8622
8623 Version : 1.12.1
8624 Website : http://nginx.net/
8625
8626HTTP Headers:
8627 HTTP/1.1 301 Moved Permanently
8628 Server: nginx/1.12.1
8629 Date: Sun, 10 Sep 2017 01:11:20 GMT
8630 Content-Type: text/html; charset=iso-8859-1
8631 Content-Length: 324
8632 Connection: close
8633 Location: http://www.youngs-list.com/new.html
8634
8635WhatWeb report for http://www.youngs-list.com/new.html
8636Status : 404 Not Found
8637Title : 404 Not Found
8638IP : 80.82.79.11
8639Country : NETHERLANDS, NL
8640
8641Summary : HTTPServer[nginx/1.12.1], nginx[1.12.1]
8642
8643Detected Plugins:
8644[ HTTPServer ]
8645 HTTP server header string. This plugin also attempts to
8646 identify the operating system from the server header.
8647
8648 String : nginx/1.12.1 (from server string)
8649
8650[ nginx ]
8651 Nginx (Engine-X) is a free, open-source, high-performance
8652 HTTP server and reverse proxy, as well as an IMAP/POP3
8653 proxy server.
8654
8655 Version : 1.12.1
8656 Website : http://nginx.net/
8657
8658HTTP Headers:
8659 HTTP/1.1 404 Not Found
8660 Server: nginx/1.12.1
8661 Date: Sun, 10 Sep 2017 01:11:20 GMT
8662 Content-Type: text/html; charset=iso-8859-1
8663 Content-Length: 291
8664 Connection: close
8665
8666
8667[+] Hosts found in search engines:
8668------------------------------------
8669[-] Resolving hostnames IPs...
867080.82.79.11:www.youngs-list.com
8671
8672
8673
8674 ^ ^
8675 _ __ _ ____ _ __ _ _ ____
8676 ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
8677 | V V // o // _/ | V V // 0 // 0 // _/
8678 |_n_,'/_n_//_/ |_n_,' \_,' \_,'/_/
8679 <
8680 ...'
8681
8682 WAFW00F - Web Application Firewall Detection Tool
8683
8684 By Sandro Gauci && Wendel G. Henrique
8685
8686Checking http://youngs-list.com
8687Generic Detection results:
8688No WAF detected by the generic detection
8689Number of requests: 13
8690
8691
8692DNS Servers for youngs-list.com:
8693 ns2.dxgirlz.com
8694 ns1.dxgirlz.com
8695
8696Trying zone transfer first...
8697 Testing ns2.dxgirlz.com
8698
8699Whoah, it worked - misconfigured DNS server found:
8700youngs-list.com. 3600 IN SOA ( b06s06.com. root.dxgirlz.com.
8701 2015061501 ;serial
8702 10800 ;refresh
8703 3600 ;retry
8704 604800 ;expire
8705 86400 ;minimum
8706 )
8707youngs-list.com. 3600 IN NS ns1.dxgirlz.com.
8708youngs-list.com. 3600 IN NS ns2.dxgirlz.com.
8709youngs-list.com. 3600 IN A 80.82.79.11
8710youngs-list.com. 3600 IN TXT "v=spf1 ip4:93.174.93.111 a mx ~all"
8711www.youngs-list.com. 3600 IN A 80.82.79.11
8712
8713There isn't much point continuing, you have everything.
8714Have a nice day.
8715Exiting...
8716
8717
8718
8719lbd - load balancing detector 0.2 - Checks if a given domain uses load-balancing.
8720 Written by Stefan Behte (http://ge.mine.nu)
8721 Proof-of-concept! Might give false positives.
8722
8723Checking for DNS-Loadbalancing: NOT FOUND
8724Checking for HTTP-Loadbalancing [Server]:
8725 nginx/1.12.1
8726 NOT FOUND
8727
8728Checking for HTTP-Loadbalancing [Date]: 01:11:50, 01:11:50, 01:11:51, 01:11:51, 01:11:51, 01:11:51, 01:11:52, 01:11:52, 01:11:52, 01:11:52, 01:11:53, 01:11:53, 01:11:53, 01:11:54, 01:11:54, 01:11:54, 01:11:54, 01:11:55, 01:11:55, 01:11:55, 01:11:55, 01:11:56, 01:11:56, 01:11:56, 01:11:56, 01:11:57, 01:11:57, 01:11:57, 01:11:58, 01:11:58, 01:11:58, 01:11:58, 01:11:59, 01:11:59, 01:11:59, 01:11:59, 01:12:00, 01:12:00, 01:12:00, 01:12:00, 01:12:01, 01:12:01, 01:12:01, 01:12:02, 01:12:02, 01:12:02, 01:12:02, 01:12:03, 01:12:03, 01:12:03, NOT FOUND
8729
8730Checking for HTTP-Loadbalancing [Diff]: NOT FOUND
8731
8732youngs-list.com does NOT use Load-balancing.
8733
8734
8735
8736Starting smtp-user-enum v1.2 ( http://pentestmonkey.net/tools/smtp-user-enum )
8737
8738 ----------------------------------------------------------
8739| Scan Information |
8740 ----------------------------------------------------------
8741
8742Mode ..................... VRFY
8743Worker Processes ......... 5
8744Usernames file ........... users.txt
8745Target count ............. 1
8746Username count ........... 494
8747Target TCP port .......... 25
8748Query timeout ............ 5 secs
8749Target domain ............
8750
8751######## Scan started at Sat Sep 9 23:13:26 2017 #########
8752######## Scan completed at Sat Sep 9 23:21:41 2017 #########
87530 results.
8754
8755494 queries in 495 seconds (1.0 queries / sec)
8756
8757
8758
8759Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 23:21 EDT
8760NSE: Loaded 146 scripts for scanning.
8761NSE: Script Pre-scanning.
8762Initiating NSE at 23:21
8763Completed NSE at 23:21, 0.00s elapsed
8764Initiating NSE at 23:21
8765Completed NSE at 23:21, 0.00s elapsed
8766Failed to resolve "youngs-list.com.txt".
8767Initiating Parallel DNS resolution of 1 host. at 23:21
8768Completed Parallel DNS resolution of 1 host. at 23:21, 0.69s elapsed
8769Initiating SYN Stealth Scan at 23:21
8770Scanning youngs-list.com (80.82.79.11) [100 ports]
8771Discovered open port 143/tcp on 80.82.79.11
8772Discovered open port 3306/tcp on 80.82.79.11
8773Discovered open port 80/tcp on 80.82.79.11
8774Discovered open port 110/tcp on 80.82.79.11
8775Discovered open port 995/tcp on 80.82.79.11
8776Discovered open port 993/tcp on 80.82.79.11
8777Discovered open port 53/tcp on 80.82.79.11
8778Completed SYN Stealth Scan at 23:21, 3.29s elapsed (100 total ports)
8779Initiating Service scan at 23:21
8780Scanning 7 services on youngs-list.com (80.82.79.11)
8781Completed Service scan at 23:21, 6.95s elapsed (7 services on 1 host)
8782Initiating OS detection (try #1) against youngs-list.com (80.82.79.11)
8783Initiating Traceroute at 23:21
8784Completed Traceroute at 23:21, 3.00s elapsed
8785Initiating Parallel DNS resolution of 8 hosts. at 23:21
8786Completed Parallel DNS resolution of 8 hosts. at 23:22, 5.61s elapsed
8787NSE: Script scanning 80.82.79.11.
8788Initiating NSE at 23:22
8789Completed NSE at 23:22, 13.54s elapsed
8790Initiating NSE at 23:22
8791Completed NSE at 23:22, 0.01s elapsed
8792Nmap scan report for youngs-list.com (80.82.79.11)
8793Host is up (0.14s latency).
8794rDNS record for 80.82.79.11: no-reverse-dns-configured.com
8795Not shown: 84 closed ports
8796PORT STATE SERVICE VERSION
879721/tcp filtered ftp
879822/tcp filtered ssh
879925/tcp filtered smtp
880053/tcp open domain ISC BIND 9.8.2rc1
8801| dns-nsid:
8802|_ bind.version: 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4
880380/tcp open http nginx 1.12.1
8804| http-methods:
8805|_ Supported Methods: GET HEAD POST OPTIONS
8806|_http-server-header: nginx/1.12.1
8807|_http-title: Did not follow redirect to http://www.youngs-list.com/new.html
880881/tcp filtered hosts2-ns
8809110/tcp open pop3 Dovecot pop3d
8810|_pop3-capabilities: SASL(PLAIN LOGIN DIGEST-MD5 CRAM-MD5) PIPELINING USER UIDL STLS TOP RESP-CODES CAPA
8811| ssl-cert: Subject: commonName=imap.example.com
8812| Issuer: commonName=imap.example.com
8813| Public Key type: rsa
8814| Public Key bits: 1024
8815| Signature Algorithm: sha1WithRSAEncryption
8816| Not valid before: 2015-06-12T12:04:14
8817| Not valid after: 2016-06-11T12:04:14
8818| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
8819|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
8820|_ssl-date: 2017-09-10T01:21:00+00:00; -2h01m10s from scanner time.
8821135/tcp filtered msrpc
8822139/tcp filtered netbios-ssn
8823143/tcp open imap Dovecot imapd
8824|_imap-capabilities: LITERAL+ LOGIN-REFERRALS STARTTLS IDLE AUTH=LOGIN completed ID OK AUTH=PLAIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5A0001 Capability ENABLE IMAP4rev1 SASL-IR
8825| ssl-cert: Subject: commonName=imap.example.com
8826| Issuer: commonName=imap.example.com
8827| Public Key type: rsa
8828| Public Key bits: 1024
8829| Signature Algorithm: sha1WithRSAEncryption
8830| Not valid before: 2015-06-12T12:04:14
8831| Not valid after: 2016-06-11T12:04:14
8832| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
8833|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
8834|_ssl-date: 2017-09-10T01:20:59+00:00; -2h01m10s from scanner time.
8835445/tcp filtered microsoft-ds
8836465/tcp filtered smtps
8837587/tcp filtered submission
8838993/tcp open ssl/imap Dovecot imapd
8839| ssl-cert: Subject: commonName=imap.example.com
8840| Issuer: commonName=imap.example.com
8841| Public Key type: rsa
8842| Public Key bits: 1024
8843| Signature Algorithm: sha1WithRSAEncryption
8844| Not valid before: 2015-06-12T12:04:14
8845| Not valid after: 2016-06-11T12:04:14
8846| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
8847|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
8848|_ssl-date: 2017-09-10T01:20:56+00:00; -2h01m10s from scanner time.
8849995/tcp open ssl/pop3 Dovecot pop3d
8850| ssl-cert: Subject: commonName=imap.example.com
8851| Issuer: commonName=imap.example.com
8852| Public Key type: rsa
8853| Public Key bits: 1024
8854| Signature Algorithm: sha1WithRSAEncryption
8855| Not valid before: 2015-06-12T12:04:14
8856| Not valid after: 2016-06-11T12:04:14
8857| MD5: be0a 7a18 cb4b 2bc6 02ad 060e c3ad 0a1c
8858|_SHA-1: 5f78 efb9 5a11 b211 2176 1d7f fa7f cb51 0d75 4c98
8859|_ssl-date: 2017-09-10T01:20:55+00:00; -2h01m11s from scanner time.
88603306/tcp open mysql MySQL (unauthorized)
8861Device type: general purpose
8862Running: Linux 2.6.X
8863OS CPE: cpe:/o:linux:linux_kernel:2.6.39
8864OS details: Linux 2.6.39
8865Uptime guess: 11.848 days (since Tue Aug 29 03:01:01 2017)
8866Network Distance: 11 hops
8867TCP Sequence Prediction: Difficulty=258 (Good luck!)
8868IP ID Sequence Generation: All zeros
8869Service Info: OS: Red Hat Enterprise Linux 6; CPE: cpe:/o:redhat:enterprise_linux:6
8870
8871Host script results:
8872|_clock-skew: mean: -2h01m10s, deviation: 0s, median: -2h01m10s
8873
8874TRACEROUTE (using port 3389/tcp)
8875HOP RTT ADDRESS
88761 109.57 ms 10.13.0.1
88772 110.02 ms 37.187.24.252
88783 112.75 ms po101.gra-g2-a75.fr.eu (178.33.103.231)
88794 ...
88805 121.76 ms be100-1113.fra-5-a9.de.eu (91.121.131.19)
88816 121.49 ms be100-2.fra-1-a9.de.eu (94.23.122.217)
88827 ...
88838 132.26 ms vlan3555.bb1.ams2.nl.m247.com (176.10.83.128)
88849 122.78 ms 176.10.83.119
888510 ...
888611 122.85 ms no-reverse-dns-configured.com (80.82.79.11)
8887
8888--------------------------------------------------
8889
8890
8891
8892
8893 _/ _/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/
8894 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
8895 _/ _/ _/_/_/_/ _/_/_/ _/ _/_/_/ _/_/_/_/ _/ _/_/_/ _/_/_/_
8896 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
8897 _/_/_/_/ _/ _/ _/ _/_/_/_/ _/_/_/_/ _/ _/_/_/_/ _/ _/ [v1.06]
8898
8899 _/ User-Agent Tester ↵
8900 _/ AKA: Purple Pimp ↵
8901 _/ ChrisJohnRiley ↵
8902 _/ blog.c22.cc ↵
8903
8904 [>] Performing initial request and confirming stability
8905 [>] Using User-Agent string Mozilla/5.0
8906
8907 [*] HTTPError: HTTP Error 404: Not Found
8908##########################################################################################
8909Hostname preteen-art.info ISP Quasi Networks LTD. (AS29073)
8910Continent Africa Flag
8911SC
8912Country Seychelles Country Code SC (SYC)
8913Region Unknown Local time 10 Sep 2017 07:09 +04
8914City Unknown Latitude -4.583
8915IP Address 80.82.79.116 Longitude 55.667
8916###########################################################################################
8917preteen-art.info
8918
8919###########################################################################################
8920
8921whois preteen-art.info
8922Domain Name: PRETEEN-ART.INFO
8923Registry Domain ID: D503300000038978206-LRMS
8924Registrar WHOIS Server:
8925Registrar URL: http://www.ukraine.com.ua
8926Updated Date: 2017-06-25T20:31:58Z
8927Creation Date: 2017-04-26T17:20:10Z
8928Registry Expiry Date: 2018-04-26T17:20:10Z
8929Registrar Registration Expiration Date:
8930Registrar: Hosting Ukraine LLC
8931Registrar IANA ID: 2374
8932Registrar Abuse Contact Email:
8933Registrar Abuse Contact Phone:
8934Reseller:
8935Domain Status: ok https://icann.org/epp#ok
8936Registry Registrant ID: C201778539-LRMS
8937Registrant Name: Privacy Protection
8938Registrant Organization:
8939Registrant Street: PO Box 65
8940Registrant City: Kiev
8941Registrant State/Province:
8942Registrant Postal Code: 04112
8943Registrant Country: UA
8944Registrant Phone: +380.443927433
8945Registrant Phone Ext:
8946Registrant Fax:
8947Registrant Fax Ext:
8948Registrant Email: abuse@ukraine.com.ua
8949Registry Admin ID: C201778539-LRMS
8950Admin Name: Privacy Protection
8951Admin Organization:
8952Admin Street: PO Box 65
8953Admin City: Kiev
8954Admin State/Province:
8955Admin Postal Code: 04112
8956Admin Country: UA
8957Admin Phone: +380.443927433
8958Admin Phone Ext:
8959Admin Fax:
8960Admin Fax Ext:
8961Admin Email: abuse@ukraine.com.ua
8962Registry Tech ID: C201778539-LRMS
8963Tech Name: Privacy Protection
8964Tech Organization:
8965Tech Street: PO Box 65
8966Tech City: Kiev
8967Tech State/Province:
8968Tech Postal Code: 04112
8969Tech Country: UA
8970Tech Phone: +380.443927433
8971Tech Phone Ext:
8972Tech Fax:
8973Tech Fax Ext:
8974Tech Email: abuse@ukraine.com.ua
8975Registry Billing ID: C201778539-LRMS
8976Billing Name: Privacy Protection
8977Billing Organization:
8978Billing Street: PO Box 65
8979Billing City: Kiev
8980Billing State/Province:
8981Billing Postal Code: 04112
8982Billing Country: UA
8983Billing Phone: +380.443927433
8984Billing Phone Ext:
8985Billing Fax:
8986Billing Fax Ext:
8987Billing Email: abuse@ukraine.com.ua
8988Name Server: PNS21.CLOUDNS.NET
8989Name Server: PNS22.CLOUDNS.NET
8990Name Server: PNS24.CLOUDNS.NET
8991Name Server: PNS23.CLOUDNS.NET
8992
8993;preteen-art.info. IN ANY
8994
8995;; ANSWER SECTION:
8996preteen-art.info. 54 IN A 80.82.79.116
8997preteen-art.info. 1480 IN NS pns21.cloudns.net.
8998preteen-art.info. 1480 IN NS pns24.cloudns.net.
8999preteen-art.info. 1480 IN NS ns23.cloudns.net.
9000preteen-art.info. 1480 IN NS ns24.cloudns.net.
9001preteen-art.info. 1480 IN NS ns22.cloudns.net.
9002preteen-art.info. 1480 IN NS ns21.cloudns.net.
9003preteen-art.info. 1480 IN NS pns23.cloudns.net.
9004preteen-art.info. 1480 IN NS pns22.cloudns.net.
9005
9006###########################################################################################
9007
9008Checking for HTTP-Loadbalancing [Date]: 03:33:33, 03:33:33, 03:33:34, 03:33:34, 03:33:35, 03:33:36, 03:33:36, 03:33:36, 03:33:37, 03:33:38, 03:33:38, 03:33:38, 03:33:38, 03:33:39, 03:33:39, 03:33:39, 03:33:40, 03:33:40, 03:33:40, 03:33:40, 03:33:41, 03:33:41, 03:33:41, 03:33:41, 03:33:42, 03:33:42, 03:33:43, 03:33:43, 03:33:44, 03:33:44, 03:33:45, 03:33:45, 03:33:45, 03:33:45, 03:33:46, 03:33:46, 03:33:46, 03:33:47, 03:33:47, 03:33:47, 03:33:47, 03:33:48, 03:33:48, 03:33:48, 03:33:48, 03:33:49, 03:33:49, 03:33:51, 03:33:54, 03:33:54,
9009###########################################################################################
9010
9011nmap -PN -n -F -T4 -sV -A -oG temp.txt preteen-art.info
9012
9013Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 23:30 EDT
9014Nmap scan report for preteen-art.info (80.82.79.116)
9015Host is up (0.13s latency).
9016Not shown: 89 closed ports
9017PORT STATE SERVICE VERSION
901821/tcp open ftp vsftpd 3.0.2
901922/tcp open ssh OpenSSH 6.0p1 Debian 4+deb7u6 (protocol 2.0)
9020| ssh-hostkey:
9021| 1024 ab:16:56:89:21:7e:75:1c:77:f3:a2:7e:c2:f1:4c:09 (DSA)
9022| 2048 22:f8:e3:f6:1a:1c:6a:99:09:6b:1e:7c:fd:30:e3:95 (RSA)
9023|_ 256 a8:03:f4:96:36:d1:39:de:2e:4f:56:e9:0f:f3:63:56 (ECDSA)
902425/tcp filtered smtp
902553/tcp open domain
9026| dns-nsid:
9027|_ bind.version: 9.8.4-rpz2+rl005.12-P1
902880/tcp open http nginx
9029|_http-server-header: nginx
9030|_http-title: for virgin teen, girls small teen
9031111/tcp open rpcbind 2-4 (RPC #100000)
9032135/tcp filtered msrpc
9033139/tcp filtered netbios-ssn
9034445/tcp filtered microsoft-ds
9035465/tcp filtered smtps
9036587/tcp filtered submission
9037Aggressive OS guesses: Linux 2.6.39 (95%), Linux 3.2 - 3.8 (94%), Linux 3.8 (94%), WatchGuard Fireware 11.8 (94%), Linux 3.1 - 3.2 (94%), Linux 3.5 (93%), Linux 2.6.32 - 2.6.39 (92%), Linux 3.0 - 3.2 (91%), Linux 2.6.32 - 3.0 (91%), Linux 2.6.32 (91%)
9038No exact OS matches for host (test conditions non-ideal).
9039Network Distance: 10 hops
9040Service Info: OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel
9041
9042TRACEROUTE (using port 3389/tcp)
9043HOP RTT ADDRESS
90441 156.95 ms 10.13.0.1
90452 ...
90463 156.99 ms 178.33.103.229
90474 ...
90485 157.02 ms 213.186.32.213
90496 ...
90507 157.09 ms 176.10.83.128
90518 157.05 ms 176.10.83.5
90529 ...
905310 157.11 ms 80.82.79.116
9054
9055OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
9056Nmap done: 1 IP address (1 host up) scanned in 54.23 seconds
9057
9058###########################################################################################
9059
9060amap -i temp.txt
9061amap v5.4 (www.thc.org/thc-amap) started at 2017-09-09 23:31:23 - APPLICATION MAPPING mode
9062
9063Protocol on 80.82.79.116:80/tcp matches http
9064Protocol on 80.82.79.116:21/tcp matches ftp
9065Protocol on 80.82.79.116:22/tcp matches ssh
9066Protocol on 80.82.79.116:22/tcp matches ssh-openssh
9067Protocol on 80.82.79.116:111/tcp matches rpc
9068Protocol on 80.82.79.116:53/tcp matches dns
9069Protocol on 80.82.79.116:111/tcp matches rpc-rpcbind-v4
9070
9071Unidentified ports: none.
9072
9073amap v5.4 finished at 2017-09-09 23:31:36
9074
9075###########################################################################################
9076%
9077inetnum: 80.82.79.0 - 80.82.79.255
9078netname: SC-QUASI80
9079descr: QUASI
9080country: SC
9081org: ORG-QNL3-RIPE
9082admin-c: QNL1-RIPE
9083tech-c: QNL1-RIPE
9084status: ASSIGNED PA
9085mnt-by: QUASINETWORKS-MNT
9086mnt-lower: QUASINETWORKS-MNT
9087mnt-routes: QUASINETWORKS-MNT
9088created: 2010-08-25T21:29:49Z
9089last-modified: 2016-01-23T23:04:27Z
9090source: RIPE
9091
9092organisation: ORG-QNL3-RIPE
9093org-name: Quasi Networks LTD.
9094org-type: OTHER
9095address: Suite 1, Second Floor
9096address: Sound & Vision House, Francis Rachel Street
9097address: Victoria, Mahe, SEYCHELLES
9098remarks: *****************************************************************************
9099remarks: IMPORTANT INFORMATION
9100remarks: *****************************************************************************
9101remarks: We are a high bandwidth network provider offering bandwidth solutions.
9102remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
9103remarks: Please only use abuse@quasinetworks.com for abuse reports.
9104remarks: For all other requests, please see the details on our website.
9105remarks: *****************************************************************************
9106abuse-mailbox: abuse@quasinetworks.com
9107abuse-c: AR34302-RIPE
9108mnt-ref: QUASINETWORKS-MNT
9109mnt-by: QUASINETWORKS-MNT
9110created: 2015-11-08T22:25:26Z
9111last-modified: 2015-11-27T09:37:50Z
9112source: RIPE # Filtered
9113
9114role: Quasi Networks LTD
9115address: Suite 1, Second Floor
9116address: Sound & Vision House, Francis Rachel Street
9117address: Victoria, Mahe, SEYCHELLES
9118remarks: *****************************************************************************
9119remarks: IMPORTANT INFORMATION
9120remarks: *****************************************************************************
9121remarks: We are a high bandwidth network provider offering bandwidth solutions.
9122remarks: Government agencies can sent their requests to gov.request@quasinetworks.com
9123remarks: Please only use abuse@quasinetworks.com for abuse reports.
9124remarks: For all other requests, please see the details on our website.
9125remarks: *****************************************************************************
9126abuse-mailbox: abuse@quasinetworks.com
9127nic-hdl: QNL1-RIPE
9128mnt-by: QUASINETWORKS-MNT
9129created: 2015-11-07T22:43:04Z
9130last-modified: 2015-11-07T23:04:49Z
9131source: RIPE # Filtered
9132
9133% Information related to '80.82.79.0/24AS29073'
9134
9135route: 80.82.79.0/24
9136descr: Quasi Networks LTD (IBC)
9137origin: AS29073
9138mnt-by: QUASINETWORKS-MNT
9139created: 2010-08-25T21:31:02Z
9140last-modified: 2016-01-23T23:04:45Z
9141source: RIPE
9142
9143% This query was served by the RIPE Database Query Service version 1.89.2 (HEREFORD)
9144
9145###########################################################################################
9146
9147[i] Scanning Site: http://preteen-art.info
9148
9149
9150
9151B A S I C I N F O
9152====================
9153
9154
9155[+] Site Title: for virgin teen, girls small teen
9156[+] IP address: 80.82.79.116
9157[+] Web Server: nginx
9158[+] CMS: Could Not Detect
9159[+] Cloudflare: Not Detected
9160[+] Robots File: Could NOT Find robots.txt!
9161
9162
9163
9164
9165W H O I S L O O K U P
9166========================
9167
9168 Domain Name: PRETEEN-ART.INFO
9169Registry Domain ID: D503300000038978206-LRMS
9170Registrar WHOIS Server:
9171Registrar URL: http://www.ukraine.com.ua
9172Updated Date: 2017-06-25T20:31:58Z
9173Creation Date: 2017-04-26T17:20:10Z
9174Registry Expiry Date: 2018-04-26T17:20:10Z
9175Registrar Registration Expiration Date:
9176Registrar: Hosting Ukraine LLC
9177Registrar IANA ID: 2374
9178Registrar Abuse Contact Email:
9179Registrar Abuse Contact Phone:
9180Reseller:
9181Domain Status: ok https://icann.org/epp#ok
9182Registry Registrant ID: C201778539-LRMS
9183Registrant Name: Privacy Protection
9184Registrant Organization:
9185Registrant Street: PO Box 65
9186Registrant City: Kiev
9187Registrant State/Province:
9188Registrant Postal Code: 04112
9189Registrant Country: UA
9190Registrant Phone: +380.443927433
9191Registrant Phone Ext:
9192Registrant Fax:
9193Registrant Fax Ext:
9194Registrant Email: abuse@ukraine.com.ua
9195Registry Admin ID: C201778539-LRMS
9196Admin Name: Privacy Protection
9197Admin Organization:
9198Admin Street: PO Box 65
9199Admin City: Kiev
9200Admin State/Province:
9201Admin Postal Code: 04112
9202Admin Country: UA
9203Admin Phone: +380.443927433
9204Admin Phone Ext:
9205Admin Fax:
9206Admin Fax Ext:
9207Admin Email: abuse@ukraine.com.ua
9208Registry Tech ID: C201778539-LRMS
9209Tech Name: Privacy Protection
9210Tech Organization:
9211Tech Street: PO Box 65
9212Tech City: Kiev
9213Tech State/Province:
9214Tech Postal Code: 04112
9215Tech Country: UA
9216Tech Phone: +380.443927433
9217Tech Phone Ext:
9218Tech Fax:
9219Tech Fax Ext:
9220Tech Email: abuse@ukraine.com.ua
9221Registry Billing ID: C201778539-LRMS
9222Billing Name: Privacy Protection
9223Billing Organization:
9224Billing Street: PO Box 65
9225Billing City: Kiev
9226Billing State/Province:
9227Billing Postal Code: 04112
9228Billing Country: UA
9229Billing Phone: +380.443927433
9230Billing Phone Ext:
9231Billing Fax:
9232Billing Fax Ext:
9233Billing Email: abuse@ukraine.com.ua
9234Name Server: PNS21.CLOUDNS.NET
9235Name Server: PNS22.CLOUDNS.NET
9236Name Server: PNS24.CLOUDNS.NET
9237Name Server: PNS23.CLOUDNS.NET
9238
9239
9240G E O I P L O O K U P
9241=========================
9242
9243[i] IP Address: 80.82.79.116
9244[i] Country: SC
9245[i] State: N/A
9246[i] City: N/A
9247[i] Latitude: -4.583300
9248[i] Longitude: 55.666698
9249
9250
9251
9252
9253H T T P H E A D E R S
9254=======================
9255
9256
9257[i] HTTP/1.1 200 OK
9258[i] Server: nginx
9259[i] Date: Sun, 10 Sep 2017 03:33:20 GMT
9260[i] Content-Type: text/html
9261[i] Connection: close
9262[i] Vary: Accept-Encoding
9263[i] X-Powered-By: PHP/5.4.45-0+deb7u8
9264[i] Set-Cookie: site_id=1; expires=Sun, 10-Sep-2017 15:33:20 GMT
9265[i] Vary: Accept-Encoding
9266
9267
9268
9269
9270D N S L O O K U P
9271===================
9272
9273preteen-art.info. 56 IN A 80.82.79.116
9274preteen-art.info. 3600 IN NS ns23.cloudns.net.
9275preteen-art.info. 3600 IN NS ns22.cloudns.net.
9276preteen-art.info. 3600 IN NS ns21.cloudns.net.
9277preteen-art.info. 3600 IN NS pns23.cloudns.net.
9278preteen-art.info. 3600 IN NS ns24.cloudns.net.
9279preteen-art.info. 3600 IN NS pns22.cloudns.net.
9280preteen-art.info. 3600 IN NS pns21.cloudns.net.
9281preteen-art.info. 3600 IN NS pns24.cloudns.net.
9282preteen-art.info. 3600 IN SOA ns21.cloudns.net. support.cloudns.net. 2017091018 7200 1800 1209600 3600
9283
9284
9285
9286
9287S U B N E T C A L C U L A T I O N
9288====================================
9289
9290Address = 80.82.79.116
9291Network = 80.82.79.116 / 32
9292Netmask = 255.255.255.255
9293Broadcast = not needed on Point-to-Point links
9294Wildcard Mask = 0.0.0.0
9295Hosts Bits = 0
9296Max. Hosts = 1 (2^0 - 0)
9297Host Range = { 80.82.79.116 - 80.82.79.116 }
9298
9299
9300
9301N M A P P O R T S C A N
9302============================
9303
9304
9305Starting Nmap 7.01 ( https://nmap.org ) at 2017-09-10 03:29 UTC
9306Nmap scan report for preteen-art.info (80.82.79.116)
9307Host is up (0.083s latency).
9308rDNS record for 80.82.79.116: no-reverse-dns-configured.com
9309PORT STATE SERVICE VERSION
931021/tcp open ftp vsftpd 3.0.2
931122/tcp open ssh OpenSSH 6.0p1 Debian 4+deb7u6 (protocol 2.0)
931223/tcp closed telnet
931325/tcp closed smtp
931480/tcp open http nginx
9315110/tcp closed pop3
9316143/tcp closed imap
9317443/tcp closed https
9318445/tcp closed microsoft-ds
93193389/tcp closed ms-wbt-server
9320Service Info: OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel
9321
9322Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
9323Nmap done: 1 IP address (1 host up) scanned in 7.27 seconds
9324
9325
9326
9327S U B - D O M A I N F I N D E R
9328==================================
9329
9330
9331[i] Total Subdomains Found : 1
9332
9333[+] Subdomain: preteen-art.info
9334[-] IP: 80.82.79.116
9335[*] Performing TLD Brute force Enumeration against preteen-art.info
9336[*] The operation could take up to: 00:01:07
9337[*] A preteen-art.biz.af 5.45.75.45
9338[*] CNAME preteen-art.biz.at free.biz.at
9339[*] A free.biz.at 216.92.134.29
9340[*] A preteen-art.org.aw 142.4.20.12
9341[*] A preteen-art.co.ba 176.9.45.78
9342[*] A preteen-art.com.ba 195.222.33.180
9343[*] A preteen-art.com.be 95.173.170.166
9344[*] A preteen-art.co.asia 91.195.240.135
9345[*] A preteen-art.biz.by 71.18.52.2
9346[*] A preteen-art.biz.bz 199.59.242.150
9347[*] A preteen-art.com.cc 54.252.107.64
9348[*] A preteen-art.net.cc 54.252.89.206
9349[*] A preteen-art.co.cc 175.126.123.219
9350[*] A preteen-art.org.ch 72.52.4.122
9351[*] A preteen-art.co.cm 85.25.140.105
9352[*] A preteen-art.net.cm 85.25.140.105
9353[*] A preteen-art.biz.cl 185.53.178.8
9354[*] A preteen-art.com.com 52.33.196.199
9355[*] A preteen-art.com 167.114.156.214
9356[*] A preteen-art.net.com 199.59.242.150
9357[*] A preteen-art.co.com 173.192.115.17
9358[*] A preteen-art.org.com 23.23.86.44
9359[*] A preteen-art.biz.cr 72.52.4.122
9360[*] CNAME preteen-art.biz.cm i.cns.cm
9361[*] A i.cns.cm 118.184.56.30
9362[*] A preteen-art.biz.cx 72.52.4.122
9363[*] A preteen-art.net.cz 80.250.24.177
9364[*] A preteen-art.de 212.227.111.250
9365[*] A preteen-art.biz.cz 185.53.179.7
9366[*] A preteen-art.com.cz 62.109.128.30
9367[*] A preteen-art.com.de 50.56.68.37
9368[*] CNAME preteen-art.co.de co.de
9369[*] A co.de 144.76.162.245
9370[*] CNAME preteen-art.org.de www.org.de
9371[*] A www.org.de 78.47.128.8
9372[*] A preteen-art.net.eu 78.46.90.98
9373[*] A preteen-art.org.eu 78.46.90.98
9374[*] A preteen-art.biz.fi 185.55.85.123
9375[*] A preteen-art.fm 173.230.131.38
9376[*] A preteen-art.biz.fm 173.230.131.38
9377[*] A preteen-art.org.fr 149.202.133.35
9378[*] A preteen-art.biz.gl 72.52.4.122
9379[*] CNAME preteen-art.co.gp co.gp
9380[*] A co.gp 144.76.162.245
9381[*] A preteen-art.co.hn 208.100.40.203
9382[*] CNAME preteen-art.net.hr net.hr
9383[*] A net.hr 192.0.78.24
9384[*] A net.hr 192.0.78.25
9385[*] CNAME preteen-art.biz.hn parkmydomain.vhostgo.com
9386[*] A parkmydomain.vhostgo.com 107.186.245.118
9387[*] A preteen-art.co.ht 72.52.4.122
9388[*] A preteen-art.info 89.248.166.21
9389[*] A preteen-art.co.jobs 50.17.193.222
9390[*] A preteen-art.com.jobs 50.19.241.165
9391[*] A preteen-art.biz.jobs 50.19.241.165
9392[*] A preteen-art.net.jobs 50.19.241.165
9393[*] A preteen-art.org.jobs 50.19.241.165
9394[*] A preteen-art.biz.ky 199.184.144.27
9395[*] CNAME preteen-art.biz.li 712936.parkingcrew.net
9396[*] A 712936.parkingcrew.net 185.53.179.29
9397[*] A preteen-art.biz.lu 195.26.5.2
9398[*] A preteen-art.biz.ly 64.136.20.39
9399[*] A preteen-art.biz.md 72.52.4.122
9400[*] A preteen-art.co.mk 87.76.31.211
9401[*] A preteen-art.co.mobi 54.225.105.179
9402[*] A preteen-art.biz.my 202.190.174.44
9403[*] A preteen-art.co.net 188.166.216.219
9404[*] A preteen-art.net.net 52.50.81.210
9405[*] A preteen-art.net 45.33.9.234
9406[*] A preteen-art.org.net 23.23.86.44
9407[*] A preteen-art.co.nl 37.97.184.204
9408[*] A preteen-art.com.nl 83.98.157.102
9409[*] A preteen-art.net.nl 83.98.157.102
9410[*] A preteen-art.co.nr 208.100.40.202
9411[*] CNAME preteen-art.co.nu co.nu
9412[*] A co.nu 144.76.162.245
9413[*] CNAME preteen-art.com.nu com.nu
9414[*] A com.nu 144.76.162.245
9415[*] A preteen-art.net.nu 199.102.76.78
9416[*] A preteen-art.org.nu 80.92.84.139
9417[*] CNAME preteen-art.net.org pewtrusts.org
9418[*] A pewtrusts.org 204.74.99.100
9419[*] A preteen-art.com.org 23.23.86.44
9420[*] A preteen-art.ph 45.79.222.138
9421[*] A preteen-art.co.ph 45.79.222.138
9422[*] A preteen-art.com.ph 45.79.222.138
9423[*] A preteen-art.net.ph 45.79.222.138
9424[*] A preteen-art.org.ph 45.79.222.138
9425[*] A preteen-art.co.pl 212.91.6.55
9426[*] A preteen-art.org.pm 208.73.211.177
9427[*] A preteen-art.org.pm 208.73.210.202
9428[*] A preteen-art.org.pm 208.73.211.165
9429[*] A preteen-art.org.pm 208.73.210.217
9430[*] A preteen-art.co.ps 66.96.132.56
9431[*] CNAME preteen-art.biz.ps biz.ps
9432[*] A biz.ps 144.76.162.245
9433[*] A preteen-art.co.pt 194.107.127.52
9434[*] A preteen-art.co.pw 141.8.226.59
9435[*] A preteen-art.pw 141.8.226.58
9436[*] A preteen-art.net.pw 141.8.226.59
9437[*] A preteen-art.biz.pw 141.8.226.59
9438[*] A preteen-art.org.pw 141.8.226.59
9439[*] CNAME preteen-art.co.ro now.co.ro
9440[*] A now.co.ro 185.27.255.9
9441[*] A preteen-art.net.ro 69.64.52.127
9442[*] A preteen-art.org.re 217.70.184.38
9443[*] A preteen-art.com.ru 178.210.89.119
9444[*] A preteen-art.biz.se 185.53.179.6
9445[*] CNAME preteen-art.net.se 773147.parkingcrew.net
9446[*] A 773147.parkingcrew.net 185.53.179.29
9447[*] A preteen-art.co.sl 91.195.240.135
9448[*] A preteen-art.com.sr 143.95.106.249
9449[*] A preteen-art.biz.st 91.121.28.115
9450[*] A preteen-art.co.su 72.52.4.122
9451[*] A preteen-art.biz.tc 64.136.20.39
9452[*] A preteen-art.biz.tf 85.236.153.18
9453[*] A preteen-art.net.tf 188.40.70.27
9454[*] A preteen-art.net.tf 188.40.117.12
9455[*] A preteen-art.net.tf 188.40.70.29
9456[*] A preteen-art.co.tl 208.100.40.202
9457[*] A preteen-art.co.to 175.118.124.44
9458[*] A preteen-art.co.tv 31.186.25.163
9459[*] A preteen-art.biz.tv 72.52.4.122
9460[*] A preteen-art.org.tv 72.52.4.122
9461[*] CNAME preteen-art.biz.uz biz.uz
9462[*] A biz.uz 144.76.162.245
9463[*] A preteen-art.vg 88.198.29.97
9464[*] A preteen-art.co.vg 88.198.29.97
9465[*] A preteen-art.com.vg 88.198.29.97
9466[*] A preteen-art.net.vg 68.178.254.180
9467[*] A preteen-art.biz.vg 89.31.143.20
9468[*] A preteen-art.ws 64.70.19.203
9469[*] A preteen-art.com.ws 202.4.48.211
9470[*] A preteen-art.net.ws 202.4.48.211
9471[*] A preteen-art.org.ws 202.4.48.211
9472[*] A preteen-art.biz.ws 184.168.221.104
9473R E V E R S E I P L O O K U P
9474==================================
9475
9476
9477[i] Total Sites Found On This Server : 2
9478
9479
9480[#] preteen-art.info
9481[-] CMS: Could Not Detect
9482
9483[#] teendolls.online,
9484[-] CMS: Could Not Detect
9485preteen-art.info
9486
9487
9488Domain Name: PRETEEN-ART.INFO
9489Registry Domain ID: D503300000038978206-LRMS
9490Registrar WHOIS Server:
9491Registrar URL: http://www.ukraine.com.ua
9492Updated Date: 2017-06-25T20:31:58Z
9493Creation Date: 2017-04-26T17:20:10Z
9494Registry Expiry Date: 2018-04-26T17:20:10Z
9495Registrar Registration Expiration Date:
9496Registrar: Hosting Ukraine LLC
9497Registrar IANA ID: 2374
9498Registrar Abuse Contact Email:
9499Registrar Abuse Contact Phone:
9500Reseller:
9501Domain Status: ok https://icann.org/epp#ok
9502Registry Registrant ID: C201778539-LRMS
9503Registrant Name: Privacy Protection
9504Registrant Organization:
9505Registrant Street: PO Box 65
9506Registrant City: Kiev
9507Registrant State/Province:
9508Registrant Postal Code: 04112
9509Registrant Country: UA
9510Registrant Phone: +380.443927433
9511Registrant Phone Ext:
9512Registrant Fax:
9513Registrant Fax Ext:
9514Registrant Email: abuse@ukraine.com.ua
9515Registry Admin ID: C201778539-LRMS
9516Admin Name: Privacy Protection
9517Admin Organization:
9518Admin Street: PO Box 65
9519Admin City: Kiev
9520Admin State/Province:
9521Admin Postal Code: 04112
9522Admin Country: UA
9523Admin Phone: +380.443927433
9524Admin Phone Ext:
9525Admin Fax:
9526Admin Fax Ext:
9527Admin Email: abuse@ukraine.com.ua
9528Registry Tech ID: C201778539-LRMS
9529Tech Name: Privacy Protection
9530Tech Organization:
9531Tech Street: PO Box 65
9532Tech City: Kiev
9533Tech State/Province:
9534Tech Postal Code: 04112
9535Tech Country: UA
9536Tech Phone: +380.443927433
9537Tech Phone Ext:
9538Tech Fax:
9539Tech Fax Ext:
9540Tech Email: abuse@ukraine.com.ua
9541Registry Billing ID: C201778539-LRMS
9542Billing Name: Privacy Protection
9543Billing Organization:
9544Billing Street: PO Box 65
9545Billing City: Kiev
9546Billing State/Province:
9547Billing Postal Code: 04112
9548Billing Country: UA
9549Billing Phone: +380.443927433
9550Billing Phone Ext:
9551Billing Fax:
9552Billing Fax Ext:
9553Billing Email: abuse@ukraine.com.ua
9554Name Server: PNS21.CLOUDNS.NET
9555Name Server: PNS22.CLOUDNS.NET
9556Name Server: PNS24.CLOUDNS.NET
9557Name Server: PNS23.CLOUDNS.NET
9558
9559;preteen-art.info. IN ANY
9560
9561;; ANSWER SECTION:
9562preteen-art.info. 56 IN A 80.82.79.116
9563preteen-art.info. 1482 IN NS pns21.cloudns.net.
9564preteen-art.info. 1482 IN NS ns21.cloudns.net.
9565preteen-art.info. 1482 IN NS ns22.cloudns.net.
9566preteen-art.info. 1482 IN NS pns24.cloudns.net.
9567preteen-art.info. 1482 IN NS pns22.cloudns.net.
9568preteen-art.info. 1482 IN NS ns23.cloudns.net.
9569preteen-art.info. 1482 IN NS ns24.cloudns.net.
9570preteen-art.info. 1482 IN NS pns23.cloudns.net.
9571
9572Host's addresses:
9573__________________
9574
9575preteen-art.info. 45 IN A 80.82.79.116
9576
9577
9578Wildcard detection using: dfzsoiabzgya
9579_______________________________________
9580
9581dfzsoiabzgya.preteen-art.info. 60 IN A 80.82.79.116
9582
9583
9584!!!!!!!!!!!!!!!!!!!!!!!!!!!!
9585
9586 Wildcards detected, all subdomains will point to the same IP address
9587 Omitting results containing 80.82.79.116.
9588 Maybe you are using OpenDNS servers.
9589
9590!!!!!!!!!!!!!!!!!!!!!!!!!!!!
9591
9592
9593Name Servers:
9594______________
9595
9596pns24.cloudns.net. 114834 IN A 185.136.99.96
9597pns23.cloudns.net. 153160 IN A 185.136.98.96
9598pns21.cloudns.net. 114834 IN A 185.136.96.96
9599ns22.cloudns.net. 132523 IN A 108.59.2.202
9600ns21.cloudns.net. 54205 IN A 109.201.133.61
9601ns24.cloudns.net. 148264 IN A 46.165.221.164
9602ns23.cloudns.net. 164590 IN A 79.137.84.65
9603pns22.cloudns.net. 114833 IN A 185.136.97.96
9604
9605
9606Mail (MX) Servers:
9607___________________
9608
9609
9610preteen-art.info class C netranges:
9611____________________________________
9612
9613 80.82.79.0/24
9614
9615
9616Performing reverse lookup on 256 ip addresses:
9617_______________________________________________
9618
9619
96200 results out of 256 IP addresses.
9621
9622
9623preteen-art.info ip blocks:
9624____________________________
9625
9626
9627 |\___ ns22.cloudns.net [preteen-art.info] (2604:9a00:2100:a006:0004:0000:0000:0001) Got authoritative answer
9628 |\___ ns22.cloudns.net [preteen-art.info] (108.59.2.202) Got authoritative answer
9629 |\___ ns23.cloudns.net [preteen-art.info] (2001:41d0:0401:3100:0000:0000:0000:5784) * * *
9630 |\___ ns23.cloudns.net [preteen-art.info] (79.137.84.65) Got authoritative answer
9631 |\___ pns24.cloudns.net [preteen-art.info] (2a06:fb00:0001:0000:0000:0000:0004:0096) Got authoritative answer
9632 |\___ pns24.cloudns.net [preteen-art.info] (185.136.99.96) Got authoritative answer
9633 |\___ pns22.cloudns.net [preteen-art.info] (2a06:fb00:0001:0000:0000:0000:0002:0096) Got authoritative answer
9634 |\___ pns22.cloudns.net [preteen-art.info] (185.136.97.96) Got authoritative answer
9635 |\___ pns21.cloudns.net [preteen-art.info] (2a06:fb00:0001:0000:0000:0000:0001:0096) Got authoritative answer
9636 |\___ pns21.cloudns.net [preteen-art.info] (185.136.96.96) Got authoritative answer
9637 |\___ ns21.cloudns.net [preteen-art.info] (109.201.133.61) Got authoritative answer
9638 |\___ ns21.cloudns.net [preteen-art.info] (2a00:1768:1001:0009:0000:0000:0000:0021) Got authoritative answer
9639 |\___ ns24.cloudns.net [preteen-art.info] (2a00:0c98:2030:a006:0002:0000:0000:0001) Got authoritative answer
9640 |\___ ns24.cloudns.net [preteen-art.info] (46.165.221.164) Got authoritative answer
9641 |\___ pns23.cloudns.net [preteen-art.info] (2a06:fb00:0001:0000:0000:0000:0003:0096) Got authoritative answer
9642 \___ pns23.cloudns.net [preteen-art.info] (185.136.98.96) Got authoritative answer
9643
9644
9645WhatWeb report for http://preteen-art.info
9646Status : 200 OK
9647Title : for virgin teen, girls small teen
9648IP : 80.82.79.116
9649Country : NETHERLANDS, NL
9650
9651Summary : X-Powered-By[PHP/5.4.45-0+deb7u8], HTTPServer[nginx], Cookies[site_id], PHP[5.4.45-0+deb7u8], nginx, Script[text/javascript]
9652
9653Detected Plugins:
9654[ Cookies ]
9655 Display the names of cookies in the HTTP headers. The
9656 values are not returned to save on space.
9657
9658 String : site_id
9659
9660[ HTTPServer ]
9661 HTTP server header string. This plugin also attempts to
9662 identify the operating system from the server header.
9663
9664 String : nginx (from server string)
9665
9666[ PHP ]
9667 PHP is a widely-used general-purpose scripting language
9668 that is especially suited for Web development and can be
9669 embedded into HTML. This plugin identifies PHP errors,
9670 modules and versions and extracts the local file path and
9671 username if present.
9672
9673 Version : 5.4.45-0+deb7u8
9674 Google Dorks: (2)
9675 Website : http://www.php.net/
9676
9677[ Script ]
9678 This plugin detects instances of script HTML elements and
9679 returns the script language/type.
9680
9681 String : text/javascript
9682
9683[ X-Powered-By ]
9684 X-Powered-By HTTP header
9685
9686 String : PHP/5.4.45-0+deb7u8 (from x-powered-by string)
9687
9688[ nginx ]
9689 Nginx (Engine-X) is a free, open-source, high-performance
9690 HTTP server and reverse proxy, as well as an IMAP/POP3
9691 proxy server.
9692
9693 Website : http://nginx.net/
9694
9695HTTP Headers:
9696 HTTP/1.1 200 OK
9697 Server: nginx
9698 Date: Sun, 10 Sep 2017 03:38:56 GMT
9699 Content-Type: text/html
9700 Content-Length: 2909
9701 Connection: close
9702 X-Powered-By: PHP/5.4.45-0+deb7u8
9703 Set-Cookie: site_id=1; expires=Sun, 10-Sep-2017 15:38:56 GMT
9704 Vary: Accept-Encoding
9705 Content-Encoding: gzip
9706
9707
9708
9709
9710 ^ ^
9711 _ __ _ ____ _ __ _ _ ____
9712 ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
9713 | V V // o // _/ | V V // 0 // 0 // _/
9714 |_n_,'/_n_//_/ |_n_,' \_,' \_,'/_/
9715 <
9716 ...'
9717
9718 WAFW00F - Web Application Firewall Detection Tool
9719
9720 By Sandro Gauci && Wendel G. Henrique
9721
9722Checking http://preteen-art.info
9723Generic Detection results:
9724No WAF detected by the generic detection
9725Number of requests: 13
9726
9727
9728DNS Servers for preteen-art.info:
9729 pns21.cloudns.net
9730 pns22.cloudns.net
9731 ns22.cloudns.net
9732 pns23.cloudns.net
9733 ns21.cloudns.net
9734 pns24.cloudns.net
9735 ns23.cloudns.net
9736 ns24.cloudns.net
9737
9738
9739
9740Starting smtp-user-enum v1.2 ( http://pentestmonkey.net/tools/smtp-user-enum )
9741
9742 ----------------------------------------------------------
9743| Scan Information |
9744 ----------------------------------------------------------
9745
9746Mode ..................... VRFY
9747Worker Processes ......... 5
9748Usernames file ........... users.txt
9749Target count ............. 1
9750Username count ........... 494
9751Target TCP port .......... 25
9752Query timeout ............ 5 secs
9753Target domain ............
9754
9755######## Scan started at Sat Sep 9 23:42:55 2017 #########
9756######## Scan completed at Sat Sep 9 23:51:10 2017 #########
97570 results.
9758
9759494 queries in 495 seconds (1.0 queries / sec)
9760
9761
9762
9763Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-09 23:51 EDT
9764NSE: Loaded 146 scripts for scanning.
9765NSE: Script Pre-scanning.
9766Initiating NSE at 23:51
9767Completed NSE at 23:51, 0.00s elapsed
9768Initiating NSE at 23:51
9769Completed NSE at 23:51, 0.00s elapsed
9770Failed to resolve "preteen-art.info.txt".
9771Initiating Parallel DNS resolution of 1 host. at 23:51
9772Completed Parallel DNS resolution of 1 host. at 23:51, 0.59s elapsed
9773Initiating SYN Stealth Scan at 23:51
9774Scanning preteen-art.info (80.82.79.116) [100 ports]
9775Discovered open port 53/tcp on 80.82.79.116
9776Discovered open port 80/tcp on 80.82.79.116
9777Discovered open port 21/tcp on 80.82.79.116
9778Discovered open port 22/tcp on 80.82.79.116
9779Discovered open port 111/tcp on 80.82.79.116
9780Completed SYN Stealth Scan at 23:51, 3.63s elapsed (100 total ports)
9781Initiating Service scan at 23:51
9782Scanning 5 services on preteen-art.info (80.82.79.116)
9783Completed Service scan at 23:51, 11.37s elapsed (5 services on 1 host)
9784Initiating OS detection (try #1) against preteen-art.info (80.82.79.116)
9785Retrying OS detection (try #2) against preteen-art.info (80.82.79.116)
9786Initiating Traceroute at 23:51
9787Completed Traceroute at 23:51, 3.01s elapsed
9788Initiating Parallel DNS resolution of 7 hosts. at 23:51
9789Completed Parallel DNS resolution of 7 hosts. at 23:51, 5.62s elapsed
9790NSE: Script scanning 80.82.79.116.
9791Initiating NSE at 23:51
9792Completed NSE at 23:52, 32.19s elapsed
9793Initiating NSE at 23:52
9794Completed NSE at 23:52, 0.34s elapsed
9795Nmap scan report for preteen-art.info (80.82.79.116)
9796Host is up (0.18s latency).
9797rDNS record for 80.82.79.116: no-reverse-dns-configured.com
9798Not shown: 89 closed ports
9799PORT STATE SERVICE VERSION
980021/tcp open ftp vsftpd 3.0.2
980122/tcp open ssh OpenSSH 6.0p1 Debian 4+deb7u6 (protocol 2.0)
9802| ssh-hostkey:
9803| 1024 ab:16:56:89:21:7e:75:1c:77:f3:a2:7e:c2:f1:4c:09 (DSA)
9804| 2048 22:f8:e3:f6:1a:1c:6a:99:09:6b:1e:7c:fd:30:e3:95 (RSA)
9805|_ 256 a8:03:f4:96:36:d1:39:de:2e:4f:56:e9:0f:f3:63:56 (ECDSA)
980625/tcp filtered smtp
980753/tcp open domain
9808| dns-nsid:
9809|_ bind.version: 9.8.4-rpz2+rl005.12-P1
981080/tcp open http nginx
9811|_http-favicon: Unknown favicon MD5: E10A0146806273296BECCD951556D611
9812| http-methods:
9813|_ Supported Methods: GET HEAD POST
9814|_http-server-header: nginx
9815|_http-title: for virgin teen, girls small teen
9816111/tcp open rpcbind 2-4 (RPC #100000)
9817135/tcp filtered msrpc
9818139/tcp filtered netbios-ssn
9819445/tcp filtered microsoft-ds
9820465/tcp filtered smtps
9821587/tcp filtered submission
9822Aggressive OS guesses: Linux 2.6.39 (96%), Linux 3.2 - 3.8 (95%), Linux 3.8 (95%), WatchGuard Fireware 11.8 (95%), Linux 3.1 - 3.2 (94%), Linux 3.5 (93%), Linux 2.6.32 - 2.6.39 (93%), Linux 3.0 - 3.2 (92%), Linux 2.6.32 - 3.0 (92%), Linux 2.6.32 (91%)
9823No exact OS matches for host (test conditions non-ideal).
9824Uptime guess: 6.527 days (since Sun Sep 3 11:13:52 2017)
9825Network Distance: 10 hops
9826TCP Sequence Prediction: Difficulty=259 (Good luck!)
9827IP ID Sequence Generation: All zeros
9828Service Info: OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel
9829
9830TRACEROUTE (using port 8080/tcp)
9831HOP RTT ADDRESS
98321 408.56 ms 10.13.0.1
98332 ...
98343 413.27 ms po101.gra-g1-a75.fr.eu (178.33.103.229)
98354 424.32 ms 10.95.33.8
98365 424.36 ms be100-1109.fra-1-a9.de.eu (213.186.32.213)
98376 ...
98387 467.97 ms vlan3555.bb1.ams2.nl.m247.com (176.10.83.128)
98398 467.84 ms 176.10.83.5
98409 ...
984110 467.90 ms no-reverse-dns-configured.com (80.82.79.116)
9842
9843
9844
9845
9846 _/ _/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/ _/_/_/_/
9847 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
9848 _/ _/ _/_/_/_/ _/_/_/ _/ _/_/_/ _/_/_/_/ _/ _/_/_/ _/_/_/_
9849 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
9850 _/_/_/_/ _/ _/ _/ _/_/_/_/ _/_/_/_/ _/ _/_/_/_/ _/ _/ [v1.06]
9851
9852 _/ User-Agent Tester ↵
9853 _/ AKA: Purple Pimp ↵
9854 _/ ChrisJohnRiley ↵
9855 _/ blog.c22.cc ↵
9856
9857 [>] Performing initial request and confirming stability
9858 [>] Using User-Agent string Mozilla/5.0
9859
9860 [ ] URL (ENTERED): http://preteen-art.info
9861 [ ] Response Code: 200 OK
9862 [ ] Server: nginx
9863 [ ] Date: Sun, 10 Sep 2017 03:55:58 GMT
9864 [ ] Content-Type: text/html
9865 [ ] Transfer-Encoding: chunked
9866 [ ] Connection: close
9867 [ ] Vary: Accept-Encoding
9868 [ ] X-Powered-By: PHP/5.4.45-0+deb7u8
9869 [ ] Set-Cookie: site_id=1; expires=Sun, 10-Sep-2017 15:55:58 GMT
9870 [ ] Vary: Accept-Encoding
9871 [ ] Data (MD5): 96f209843590bb6aba7d59904bdc78f3
9872
9873 [1] Pass
9874 [2] Pass
9875 [3] Pass
9876
9877 [>] URL appears stable. Beginning test
9878
9879 [>] Using DEFAULT User-Agent Strings
9880
9881 [>] Using Crazy User-Agent Strings
9882 [>] Using Bot User-Agent Strings
9883
9884 [>] Output: [+] Added Headers, [-] Removed Headers, [!] Altered Headers, [ ] No Change
9885
9886
9887 [>] User-Agent String : Windows-Media-Player/9.00.00.4503
9888
9889
9890 [!] Data (MD5): b1d179b8237ca36aceb474efec763bf3
9891
9892
9893 [>] User-Agent String : Mozilla/5.0 (PLAYSTATION 3; 2.00)
9894
9895
9896 [!] Data (MD5): 427377b3885c947fc95dfb6d2cfe7305
9897
9898
9899 [>] User-Agent String : TrackBack/1.02
9900
9901
9902 [!] Data (MD5): 088be84a7a168744c6a94445b5c2e50e
9903
9904
9905 [>] User-Agent String : wispr
9906
9907
9908 [!] Data (MD5): 70b62f4d7d5c0eb9b892494d1537c534
9909
9910
9911 [>] User-Agent String : EMPTY USER-AGENT STRING!
9912
9913
9914 [!] Data (MD5): 89069f1591f0c6e749fcca836c2fcb14
9915
9916
9917 [>] User-Agent String : Googlebot/2.1 (+http://www.google.com/bot.html)
9918
9919
9920 [!] Data (MD5): 16eb4f40d5e17e4b12c79fc8c9d43ba6
9921
9922
9923 [>] User-Agent String : Googlebot-Image/1.0
9924
9925
9926 [!] Data (MD5): 0965bc18cb2ac8d18d5d99764016903c
9927
9928
9929 [>] User-Agent String : Mediapartners-Google
9930
9931
9932 [!] Data (MD5): 7e34014131d2105ec31d3810dd6c7bfb
9933
9934
9935 [>] User-Agent String : Mozilla/2.0 (compatible; Ask Jeeves)
9936
9937
9938 [!] Data (MD5): 41f61ece1c6010755324db743e6d16f3
9939
9940
9941 [>] User-Agent String : msnbot-Products/1.0 (+http://search.msn.com/msnbot.htm)
9942
9943
9944 [!] Data (MD5): 9da6e4cf49ae8eaf0d9e1a70d10635f5
9945
9946
9947 [>] User-Agent String : mmcrawler
9948
9949
9950 [!] Data (MD5): 966ce151ffd750c0390362d536387b23
9951
9952
9953 [>] Checks completed... try enabling VERBOSE mode for more detailed output
9954
9955 [>] That's all folks... Fo' Shizzle!