· 8 years ago · Mar 31, 2018, 01:42 AM
1######################################################################################################################################
2Hostname www.neopharm.co.il ISP Partner Communications Ltd. (AS12400)
3Continent Asia Flag
4IL
5Country Israel Country Code IL (ISR)
6Region Unknown Local time 29 Mar 2018 11:31 IDT
7City Unknown Latitude 31.5
8IP Address 195.28.180.198 Longitude 34.75
9######################################################################################################################################
10HostIP:195.28.180.198
11HostName:neopharm.co.il
12
13Gathered Inet-whois information for 195.28.180.198
14---------------------------------------------------------------------------------------------------------------------------------------
15
16
17inetnum: 195.28.180.0 - 195.28.180.255
18netname: CloudWebManage
19country: IL
20admin-c: CWM7-RIPE
21tech-c: CWM7-RIPE
22status: ASSIGNED PA
23mnt-by: CloudWebManage-MNT
24created: 2016-08-23T20:40:39Z
25last-modified: 2016-09-11T14:49:26Z
26source: RIPE
27
28role: Cloud Web Manage
29admin-c: YA57445-RIPE
30tech-c: YA57445-RIPE
31address: 15 Madison Ave., New York City, New York
32nic-hdl: CWM7-RIPE
33mnt-by: CloudWebManage-MNT
34created: 2016-08-23T19:39:53Z
35last-modified: 2017-09-17T14:16:29Z
36source: RIPE # Filtered
37abuse-mailbox: abuse@cloudwm.com
38
39% Information related to '195.28.180.0/24AS12400'
40
41route: 195.28.180.0/24
42origin: AS12400
43mnt-by: CloudWebManage-MNT
44created: 2018-01-30T09:34:08Z
45last-modified: 2018-01-30T09:34:08Z
46source: RIPE
47
48% This query was served by the RIPE Database Query Service version 1.91.1 (BLAARKOP)
49
50
51
52Gathered Inic-whois information for neopharm.co.il
53---------------------------------------------------------------------------------------------------------------------------------------
54domain: neopharm.co.il
55
56descr: Neopharm Medical Supplies
57descr: Merkazim house, Ha'Maskit street
58descr: Herselia
59descr: 46120
60descr: Israel
61phone: +972 9 557297
62admin-c: II-DK6170-IL
63tech-c: II-HB10390-IL
64zone-c: II-HB10390-IL
65nserver: ns1.bezeqint.net
66nserver: ns2.bezeqint.net
67nserver: ns3.bezeqint.net
68validity: N/A
69DNSSEC: unsigned
70status: Transfer Locked
71changed: registrar AT ns.il 19960716 (Assigned)
72changed: registrar AT ns.il 19980905 (Changed)
73changed: domain-registrar AT isoc.org.il 20020101 (Changed)
74changed: domain-registrar AT isoc.org.il 20020101 (Changed)
75changed: domain-registrar AT isoc.org.il 20020101 (Changed)
76changed: domain-registrar AT isoc.org.il 20020101 (Changed)
77changed: domain-registrar AT isoc.org.il 20020219 (Changed)
78changed: domain-registrar AT isoc.org.il 20YV@ChangF���Iedu)
79changed: domain-registrar AT isoc.org.il 20070208 (Changed)
80changed: domain-registrar AT isoc.org.il 20080101 (Transferred)
81changed: domain-registrar AT isoc.org.il 20080101 (Changed)
82changed: domain-registrar AT isoc.org.il 20080101 (Changed)
83changed: domain-registrar AT isoc.org.il 20�U@d)
84changed: domain-registrar AT isoc.org.il 20150420 (Changed)
85changed: domain-registrar AT isoc.org.il 20150831 (Changed)
86
87person: Dany Koren
88address: Neopharm Medical Supplies
89address: anafa 6 st.
90address: hod hasharon
91address: 45325
92address: Israel
93phone: +972 54 4508880
94e-mail: danykoren AT gmail.com
95nic-hdl: II-DK6170-IL
96changed: Managing Registrar 20080120
97
98person: Hostmaster Bezeqint
99address: Bezeq International Ltd.
100address: 40 Hashacham street, Ramat siv
101address: Petach-Tikva IL
102address: 49170
103address: Israel
104phone: +1 800 800110
105fax-no: +972 3 9257422
106e-mail: hostmaster AT bezeqint.net
107nic-hdl: II-HB10390-IL
108changed: Managing Registrar 20080120
109
110registrar name: Israel Internet Association ISOC-IL
111registrar info: www.isoc.org.il
112
113% Rights to the data above are restricted by copyright.
114
115Gathered Netcraft information for neopharm.co.il
116--------------------------------------------------------------------------------------------------------------------------------------
117
118Retrieving Netcraft.com information for neopharm.co.il
119Netcraft.com Information gathered
120
121Gathered Subdomain information for neopharm.co.il
122--------------------------------------------------------------------------------------------------------------------------------------
123Searching Google.com:80...
124HostName:www.neopharm.co.il
125HostIP:195.28.180.198
126Searching Altavista.com:80...
127Found 1 possible subdomain(s) for host neopharm.co.il, Searched 0 pages containing 0 results
128
129Gathered E-Mail information for neopharm.co.il
130--------------------------------------------------------------------------------------------------------------------------------------
131Searching Google.com:80...
132Searching Altavista.com:80...
133Found 0 E-Mail(s) for host neopharm.co.il, Searched 0 pages containing 0 results
134
135Gathered TCP Port information for 195.28.180.198
136--------------------------------------------------------------------------------------------------------------------------------------
137
138 Port State
139
140
141Portscan Finished: Scanned 150 ports, 0 ports were in state closed
142#######################################################################################################################################
143[i] Scanning Site: http://neopharm.co.il
144
145
146
147B A S I C I N F O
148=======================================================================================================================================
149
150
151[+] Site Title: Neo Pharm
152[+] IP address: 195.28.180.198
153[+] Web Server: nginx
154[+] CMS: Could Not Detect
155[+] Cloudflare: Not Detected
156[+] Robots File: Could NOT Find robots.txt!
157
158
159
160
161W H O I S L O O K U P
162=======================================================================================================================================
163
164
165% The data in the WHOIS database of the .il registry is provided
166% by ISOC-IL for information purposes, and to assist persons in
167% obtaining information about or related to a domain name
168% registration record. ISOC-IL does not guarantee its accuracy.
169% By submitting a WHOIS query, you agree that you will use this
170% Data only for lawful purposes and that, under no circumstances
171% will you use this Data to: (1) allow, enable, or otherwise
172% support the transmission of mass unsolicited, commercial
173% advertising or solicitations via e-mail (spam);
174% or (2) enable high volume, automated, electronic processes that
175% apply to ISOC-IL (or its systems).
176% ISOC-IL reserves the right to modify these terms at any time.
177% By submitting this query, you agree to abide by this policy.
178
179query: neopharm.co.il
180
181reg-name: neopharm
182domain: neopharm.co.il
183
184descr: Neopharm Medical Supplies
185descr: Merkazim house, Ha'Maskit street
186descr: Herselia
187descr: 46120
188descr: Israel
189phone: +972 9 557297
190admin-c: II-DK6170-IL
191tech-c: II-HB10390-IL
192zone-c: II-HB10390-IL
193nserver: ns1.bezeqint.net
194nserver: ns2.bezeqint.net
195nserver: ns3.bezeqint.net
196validity: N/A
197DNSSEC: unsigned
198status: Transfer Locked
199changed: registrar AT ns.il 19960716 (Assigned)
200changed: registrar AT ns.il 19980905 (Changed)
201changed: domain-registrar AT isoc.org.il 20020101 (Changed)
202changed: domain-registrar AT isoc.org.il 20020101 (Changed)
203changed: domain-registrar AT isoc.org.il 20020101 (Changed)
204changed: domain-registrar AT isoc.org.il 20020101 (Changed)
205changed: domain-registrar AT isoc.org.il 20020219 (Changed)
206changed: domain-registrar AT isoc.org.il 20070208 (Changed)
207changed: domain-registrar AT isoc.org.il 20070208 (Changed)
208changed: domain-registrar AT isoc.org.il 20080101 (Transferred)
209changed: domain-registrar AT isoc.org.il 20080101 (Changed)
210changed: domain-registrar AT isoc.org.il 20080101 (Changed)
211changed: domain-registrar AT isoc.org.il 20080120 (Transferred)
212changed: domain-registrar AT isoc.org.il 20150420 (Changed)
213changed: domain-registrar AT isoc.org.il 20150831 (Changed)
214
215person: Dany Koren
216address: Neopharm Medical Supplies
217address: anafa 6 st.
218address: hod hasharon
219address: 45325
220address: Israel
221phone: +972 54 4508880
222e-mail: danykoren AT gmail.com
223nic-hdl: II-DK6170-IL
224changed: Managing Registrar 20080120
225
226person: Hostmaster Bezeqint
227address: Bezeq International Ltd.
228address: 40 Hashacham street, Ramat siv
229address: Petach-Tikva IL
230address: 49170
231address: Israel
232phone: +1 800 800110
233fax-no: +972 3 9257422
234e-mail: hostmaster AT bezeqint.net
235nic-hdl: II-HB10390-IL
236changed: Managing Registrar 20080120
237
238registrar name: Israel Internet Association ISOC-IL
239registrar info: www.isoc.org.il
240
241% Rights to the data above are restricted by copyright.
242
243
244
245
246G E O I P L O O K U P
247=======================================================================================================================================
248
249[i] IP Address: 195.28.180.198
250[i] Country: IL
251[i] State: N/A
252[i] City: N/A
253[i] Latitude: 31.500000
254[i] Longitude: 34.750000
255
256
257
258
259H T T P H E A D E R S
260=======================================================================================================================================
261
262
263[i] HTTP/1.1 301 Moved Permanently
264[i] Server: nginx
265[i] Date: Thu, 29 Mar 2018 08:34:27 GMT
266[i] Content-Type: text/html; charset=iso-8859-1
267[i] Content-Length: 234
268[i] Connection: close
269[i] Location: http://www.neopharm.co.il/
270[i] Cache-Control: max-age=172800
271[i] Expires: Sat, 31 Mar 2018 08:34:27 GMT
272[i] X-XSS-Protection: 1; mode=block
273[i] X-Nginx-Cache-Status: MISS
274[i] X-Server-Powered-By: Engintron
275[i] HTTP/1.1 200 OK
276[i] Server: nginx
277[i] Date: Thu, 29 Mar 2018 08:34:29 GMT
278[i] Content-Type: text/html
279[i] Connection: close
280[i] Vary: Accept-Encoding
281[i] Set-Cookie: PHPSESSID=25ab33d9b1c0351a97e1d4124345d62b; path=/
282[i] Expires: Thu, 19 Nov 1981 08:52:00 GMT
283[i] Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
284[i] Pragma: no-cache
285[i] X-XSS-Protection: 0
286[i] Set-Cookie: neopharm_cookie_currency=ILS; expires=Fri, 29-Mar-2019 08:34:28 GMT; path=/
287[i] Vary: Accept-Encoding
288[i] X-UA-Compatible: IE=edge
289[i] X-XSS-Protection: 1; mode=block
290[i] X-Nginx-Cache-Status: EXPIRED
291[i] X-Server-Powered-By: Engintron
292
293
294
295
296D N S L O O K U P
297=====================================================================================================================================
298
299;; Truncated, retrying in TCP mode.
300neopharm.co.il. 28800 IN NS ns1.bezeqint.net.
301neopharm.co.il. 28800 IN NS ns3.bezeqint.net.
302neopharm.co.il. 28800 IN NS ns2.bezeqint.net.
303neopharm.co.il. 28800 IN TXT "v=spf1 a mx ip4:207.232.21.240/32 a:mailin.erg.co.il include:mecloud.co.il -all"
304neopharm.co.il. 28800 IN MX 0 fmg1.meteorit.co.il.
305neopharm.co.il. 28800 IN A 195.28.180.198
306neopharm.co.il. 28800 IN SOA ns1.bezeqint.net. postmaster.bezeqint.net. 51 2 3600 2419200 900
307
308
309
310
311S U B N E T C A L C U L A T I O N
312=======================================================================================================================================
313
314Address = 195.28.180.198
315Network = 195.28.180.198 / 32
316Netmask = 255.255.255.255
317Broadcast = not needed on Point-to-Point links
318Wildcard Mask = 0.0.0.0
319Hosts Bits = 0
320Max. Hosts = 1 (2^0 - 0)
321Host Range = { 195.28.180.198 - 195.28.180.198 }
322
323
324
325N M A P P O R T S C A N
326=======================================================================================================================================
327
328
329Starting Nmap 7.01 ( https://nmap.org ) at 2018-03-29 08:34 UTC
330Nmap scan report for neopharm.co.il (195.28.180.198)
331Host is up (0.15s latency).
332rDNS record for 195.28.180.198: mail.stick.tyco.co.il
333PORT STATE SERVICE VERSION
33421/tcp filtered ftp
33522/tcp filtered ssh
33623/tcp filtered telnet
33725/tcp open smtp Exim smtpd 4.87
33880/tcp open http nginx
339110/tcp open pop3 Dovecot pop3d
340143/tcp open imap Dovecot imapd
341443/tcp open ssl/ssl Apache httpd (SSL-only mode)
342445/tcp filtered microsoft-ds
3433389/tcp filtered ms-wbt-server
344Service Info: Host: stick.tyco.co.il
345
346Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
347Nmap done: 1 IP address (1 host up) scanned in 16.34 seconds
348
349
350
351S U B - D O M A I N F I N D E R
352=======================================================================================================================================
353
354
355[i] Total Subdomains Found : 1
356
357[+] Subdomain: mail.neopharm.co.il
358[-] IP: 62.219.161.123
359######################################################################################################################################
360[!] IP Address : 195.28.180.198
361[!] 195.28.180.198 doesn't seem to use a CMS
362[+] Honeypot Probabilty: 30%
363----------------------------------------
364[~] Trying to gather whois information for 195.28.180.198
365[+] Whois information found
366[-] Unable to build response, visit https://who.is/whois/195.28.180.198
367----------------------------------------
368PORT STATE SERVICE VERSION
36921/tcp filtered ftp
37022/tcp filtered ssh
37123/tcp filtered telnet
37225/tcp open smtp Exim smtpd 4.87
37380/tcp open http nginx
374110/tcp open pop3 Dovecot pop3d
375143/tcp open imap Dovecot imapd
376443/tcp open ssl/http Apache httpd
377445/tcp filtered microsoft-ds
3783389/tcp filtered ms-wbt-server
379----------------------------------------
380There was an error getting results
381#######################################################################################################################################
382Original* neopharm.co.il 195.28.180.198 NS:ns1.bezeqint.net MX:fmg1.meteorit.co.il
383Various neopharm.co-il.com 209.15.13.134 NS:ns1.dnslink.com MX:mail.b-io.co
384#######################################################################################################################################
385[+] Getting nameservers
386192.115.132.132 - ns3.bezeqint.net
38762.219.128.128 - ns1.bezeqint.net
388212.179.7.7 - ns2.bezeqint.net
389[-] Zone transfer failed
390
391[+] TXT records found
392"v=spf1 a mx ip4:207.232.21.240/32 a:mailin.erg.co.il include:mecloud.co.il -all"
393
394[+] MX records found, added to target list
3950 fmg1.meteorit.co.il.
396
397[*] Scanning neopharm.co.il for A records
398195.28.180.198 - neopharm.co.il
399195.28.180.198 - ftp.neopharm.co.il
40062.219.161.123 - mail.neopharm.co.il
40162.219.161.123 - owa.neopharm.co.il
402195.28.180.198 - www.neopharm.co.il
403#######################################################################################################################################
404Ip Address Status Type Domain Name Server
405---------- ------ ---- ----------- ------
406195.28.180.198 alias ftp.neopharm.co.il
407195.28.180.198 host neopharm.co.il
40862.219.161.123 302 host mail.neopharm.co.il Microsoft-IIS/7.5
40962.219.161.123 302 host owa.neopharm.co.il Microsoft-IIS/7.5
410195.28.180.198 host www.neopharm.co.il
411#######################################################################################################################################
412
413Server: 10.211.254.254
414Address: 10.211.254.254#53
415
416Non-authoritative answer:
417Name: neopharm.co.il
418Address: 195.28.180.198
419
420neopharm.co.il has address 195.28.180.198
421neopharm.co.il mail is handled by 0 fmg1.meteorit.co.il.
422#######################################################################################################################################
423Xprobe2 v.0.3 Copyright (c) 2002-2005 fyodor@o0o.nu, ofir@sys-security.com, meder@o0o.nu
424
425[+] Target is neopharm.co.il
426[+] Loading modules.
427[+] Following modules are loaded:
428[x] [1] ping:icmp_ping - ICMP echo discovery module
429[x] [2] ping:tcp_ping - TCP-based ping discovery module
430[x] [3] ping:udp_ping - UDP-based ping discovery module
431[x] [4] infogather:ttl_calc - TCP and UDP based TTL distance calculation
432[x] [5] infogather:portscan - TCP and UDP PortScanner
433[x] [6] fingerprint:icmp_echo - ICMP Echo request fingerprinting module
434[x] [7] fingerprint:icmp_tstamp - ICMP Timestamp request fingerprinting module
435[x] [8] fingerprint:icmp_amask - ICMP Address mask request fingerprinting module
436[x] [9] fingerprint:icmp_port_unreach - ICMP port unreachable fingerprinting module
437[x] [10] fingerprint:tcp_hshake - TCP Handshake fingerprinting module
438[x] [11] fingerprint:tcp_rst - TCP RST fingerprinting module
439[x] [12] fingerprint:smb - SMB fingerprinting module
440[x] [13] fingerprint:snmp - SNMPv2c fingerprinting module
441[+] 13 modules registered
442[+] Initializing scan engine
443[+] Running scan engine
444[-] ping:tcp_ping module: no closed/open TCP ports known on 195.28.180.198. Module test failed
445[-] ping:udp_ping module: no closed/open UDP ports known on 195.28.180.198. Module test failed
446[-] No distance calculation. 195.28.180.198 appears to be dead or no ports known
447[+] Host: 195.28.180.198 is down (Guess probability: 0%)
448[+] Cleaning up scan engine
449[+] Modules deinitialized
450[+] Execution completed.
451#######################################################################################################################################
452% The data in the WHOIS database of the .il registry is provided
453% by ISOC-IL for information purposes, and to assist persons in
454% obtaining information about or related to a domain name
455% registration record. ISOC-IL does not guarantee its accuracy.
456% By submitting a WHOIS query, you agree that you will use this
457% Data only for lawful purposes and that, under no circumstances
458% will you use this Data to: (1) allow, enable, or otherwise
459% support the transmission of mass unsolicited, commercial
460% advertising or solicitations via e-mail (spam);
461% or (2) enable high volume, automated, electronic processes that
462% apply to ISOC-IL (or its systems).
463% ISOC-IL reserves the right to modify these terms at any time.
464% By submitting this query, you agree to abide by this policy.
465
466query: neopharm.co.il
467
468reg-name: neopharm
469domain: neopharm.co.il
470
471descr: Neopharm Medical Supplies
472descr: Merkazim house, Ha'Maskit street
473descr: Herselia
474descr: 46120
475descr: Israel
476phone: +972 9 557297
477admin-c: II-DK6170-IL
478tech-c: II-HB10390-IL
479zone-c: II-HB10390-IL
480nserver: ns1.bezeqint.net
481nserver: ns2.bezeqint.net
482nserver: ns3.bezeqint.net
483validity: N/A
484DNSSEC: unsigned
485status: Transfer Locked
486changed: registrar AT ns.il 19960716 (Assigned)
487changed: registrar AT ns.il 19980905 (Changed)
488changed: domain-registrar AT isoc.org.il 20020101 (Changed)
489changed: domain-registrar AT isoc.org.il 20020101 (Changed)
490changed: domain-registrar AT isoc.org.il 20020101 (Changed)
491changed: domain-registrar AT isoc.org.il 20020101 (Changed)
492changed: domain-registrar AT isoc.org.il 20020219 (Changed)
493changed: domain-registrar AT isoc.org.il 20070208 (Changed)
494changed: domain-registrar AT isoc.org.il 20070208 (Changed)
495changed: domain-registrar AT isoc.org.il 20080101 (Transferred)
496changed: domain-registrar AT isoc.org.il 20080101 (Changed)
497changed: domain-registrar AT isoc.org.il 20080101 (Changed)
498changed: domain-registrar AT isoc.org.il 20080120 (Transferred)
499changed: domain-registrar AT isoc.org.il 20150420 (Changed)
500changed: domain-registrar AT isoc.org.il 20150831 (Changed)
501
502person: Dany Koren
503address: Neopharm Medical Supplies
504address: anafa 6 st.
505address: hod hasharon
506address: 45325
507address: Israel
508phone: +972 54 4508880
509e-mail: danykoren AT gmail.com
510nic-hdl: II-DK6170-IL
511changed: Managing Registrar 20080120
512
513person: Hostmaster Bezeqint
514address: Bezeq International Ltd.
515address: 40 Hashacham street, Ramat siv
516address: Petach-Tikva IL
517address: 49170
518address: Israel
519phone: +1 800 800110
520fax-no: +972 3 9257422
521e-mail: hostmaster AT bezeqint.net
522nic-hdl: II-HB10390-IL
523changed: Managing Registrar 20080120
524
525registrar name: Israel Internet Association ISOC-IL
526registrar info: www.isoc.org.il
527
528% Rights to the data above are restricted by copyright.
529#######################################################################################################################################
530; <<>> DiG 9.11.3-1-Debian <<>> -x neopharm.co.il
531;; global options: +cmd
532;; Got answer:
533;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48465
534;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
535
536;; OPT PSEUDOSECTION:
537; EDNS: version: 0, flags:; udp: 512
538;; QUESTION SECTION:
539;il.co.neopharm.in-addr.arpa. IN PTR
540
541;; AUTHORITY SECTION:
542in-addr.arpa. 3600 IN SOA b.in-addr-servers.arpa. nstld.iana.org. 2018013295 1800 900 604800 3600
543
544;; Query time: 243 msec
545;; SERVER: 10.211.254.254#53(10.211.254.254)
546;; WHEN: Thu Mar 29 05:00:50 EDT 2018
547;; MSG SIZE rcvd: 124
548
549dnsenum VERSION:1.2.4
550
551----- neopharm.co.il -----
552
553
554Host's addresses:
555__________________
556
557neopharm.co.il. 28800 IN A 195.28.180.198
558
559
560Name Servers:
561______________
562
563ns1.bezeqint.net. 14419 IN A 62.219.128.128
564ns2.bezeqint.net. 22223 IN A 212.179.7.7
565ns3.bezeqint.net. 17465 IN A 192.115.132.132
566
567
568Mail (MX) Servers:
569___________________
570
571fmg1.meteorit.co.il. 7200 IN A 212.29.208.34
572
573
574Trying Zone Transfers and getting Bind Versions:
575_________________________________________________
576
577
578Trying Zone Transfer for neopharm.co.il on ns2.bezeqint.net ...
579
580Trying Zone Transfer for neopharm.co.il on ns3.bezeqint.net ...
581
582Trying Zone Transfer for neopharm.co.il on ns1.bezeqint.net ...
583
584brute force file not specified, bay.
585#######################################################################################################################################
586 # Coded By Ahmed Aboul-Ela - @aboul3la
587
588[-] Enumerating subdomains now for neopharm.co.il
589[-] verbosity is enabled, will show the subdomains results in realtime
590[-] Searching now in Baidu..
591[-] Searching now in Yahoo..
592[-] Searching now in Google..
593[-] Searching now in Bing..
594[-] Searching now in Ask..
595[-] Searching now in Netcraft..
596[-] Searching now in DNSdumpster..
597[-] Searching now in Virustotal..
598[-] Searching now in ThreatCrowd..
599[-] Searching now in SSL Certificates..
600[-] Searching now in PassiveDNS..
601SSL Certificates: mail.neopharm.co.il
602SSL Certificates: www.neopharm.co.il
603SSL Certificates: owa.neopharm.co.il
604SSL Certificates: www.owa.neopharm.co.il
605SSL Certificates: www.mail.neopharm.co.il
606SSL Certificates: autodiscover.neopharm.co.il
607Virustotal: www.neopharm.co.il
608PassiveDNS: mail.neopharm.co.il
609Bing: www.neopharm.co.il
610Yahoo: www.neopharm.co.il
611DNSdumpster: mail.neopharm.co.il
612[-] Saving results to file: /usr/share/sniper/loot/neopharm.co.il/domains/domains-neopharm.co.il.txt
613[-] Total Unique Subdomains Found: 6
614www.neopharm.co.il
615autodiscover.neopharm.co.il
616mail.neopharm.co.il
617www.mail.neopharm.co.il
618owa.neopharm.co.il
619www.owa.neopharm.co.il
620#######################################################################################################################################
621autodiscover.neopharm.co.il
622mail.neopharm.co.il
623owa.neopharm.co.il
624www.mail.neopharm.co.il
625www.neopharm.co.il
626www.owa.neopharm.co.il
627
628[+] Domains saved to: /usr/share/sniper/loot/neopharm.co.il/domains/domains-neopharm.co.il-full.txt
629
630#######################################################################################################################################
631 __
632 ____ _____ ___ ______ _/ /_____ ____ ___
633 / __ `/ __ `/ / / / __ `/ __/ __ \/ __ \/ _ \
634/ /_/ / /_/ / /_/ / /_/ / /_/ /_/ / / / / __/
635\__,_/\__, /\__,_/\__,_/\__/\____/_/ /_/\___/
636 /_/ discover v0.5.0 - by @michenriksen
637
638Identifying nameservers for neopharm.co.il... Done
639Using nameservers:
640
641 - 212.179.7.7
642 - 62.219.128.128
643 - 192.115.132.132
644
645Checking for wildcard DNS... Done
646
647Running collector: Certificate Search... Done (6 hosts)
648Running collector: Google Transparency Report... Done (2 hosts)
649Running collector: Shodan... Skipped
650 -> Key 'shodan' has not been set
651Running collector: DNSDB... Done (0 hosts)
652Running collector: Dictionary... Done (27 hosts)
653Running collector: PassiveTotal... Skipped
654 -> Key 'passivetotal_key' has not been set
655Running collector: Threat Crowd... Done (0 hosts)
656Running collector: VirusTotal... Skipped
657 -> Key 'virustotal' has not been set
658Running collector: Netcraft... Done (0 hosts)
659Running collector: Riddler... Skipped
660 -> Key 'riddler_username' has not been set
661Running collector: PTRArchive... Error
662 -> PTRArchive returned unexpected response code: 502
663Running collector: Wayback Machine... Timed out
664Running collector: PublicWWW... Done (1 host)
665Running collector: HackerTarget... Done (2 hosts)
666Running collector: Censys... Skipped
667 -> Key 'censys_secret' has not been set
668
669Resolving 35 unique hosts...
670195.28.180.198 .neopharm.co.il
67162.219.161.123 mail.neopharm.co.il
672195.28.180.198 neopharm.co.il
67362.219.161.123 owa.neopharm.co.il
674195.28.180.198 www.neopharm.co.il
675
676Found subnets:
677
678 - 195.28.180.0-255 : 3 hosts
679 - 62.219.161.0-255 : 2 hosts
680
681Wrote 5 hosts to:
682
683 - file:///root/aquatone/neopharm.co.il/hosts.txt
684 - file:///root/aquatone/neopharm.co.il/hosts.json
685 __
686 ____ _____ ___ ______ _/ /_____ ____ ___
687 / __ `/ __ `/ / / / __ `/ __/ __ \/ __ \/ _ \
688/ /_/ / /_/ / /_/ / /_/ / /_/ /_/ / / / / __/
689\__,_/\__, /\__,_/\__,_/\__/\____/_/ /_/\___/
690 /_/ takeover v0.5.0 - by @michenriksen
691
692Loaded 5 hosts from /root/aquatone/neopharm.co.il/hosts.json
693Loaded 25 domain takeover detectors
694
695Identifying nameservers for neopharm.co.il... Done
696Using nameservers:
697
698 - 192.115.132.132
699 - 62.219.128.128
700 - 212.179.7.7
701
702Checking hosts for domain takeover vulnerabilities...
703
704Finished checking hosts:
705
706 - Vulnerable : 0
707 - Not Vulnerable : 5
708
709Wrote 0 potential subdomain takeovers to:
710
711 - file:///root/aquatone/neopharm.co.il/takeovers.json
712
713 __
714 ____ _____ ___ ______ _/ /_____ ____ ___
715 / __ `/ __ `/ / / / __ `/ __/ __ \/ __ \/ _ \
716/ /_/ / /_/ / /_/ / /_/ / /_/ /_/ / / / / __/
717\__,_/\__, /\__,_/\__,_/\__/\____/_/ /_/\___/
718 /_/ scan v0.5.0 - by @michenriksen
719
720Loaded 5 hosts from /root/aquatone/neopharm.co.il/hosts.json
721
722Probing 4 ports...
723443/tcp 62.219.161.123 mail.neopharm.co.il, owa.neopharm.co.il
724
725Wrote open ports to file:///root/aquatone/neopharm.co.il/open_ports.txt
726Wrote URLs to file:///root/aquatone/neopharm.co.il/urls.txt
727 __
728 ____ _____ ___ ______ _/ /_____ ____ ___
729 / __ `/ __ `/ / / / __ `/ __/ __ \/ __ \/ _ \
730/ /_/ / /_/ / /_/ / /_/ / /_/ /_/ / / / / __/
731\__,_/\__, /\__,_/\__,_/\__/\____/_/ /_/\___/
732 /_/ gather v0.5.0 - by @michenriksen
733
734Processing 2 pages...
735Processed: https://62.219.161.123/ (owa.neopharm.co.il) - 200 OK
736Processed: https://62.219.161.123/ (mail.neopharm.co.il) - 200 OK
737
738Finished processing pages:
739
740 - Successful : 2
741 - Failed : 0
742
743Generating report...done
744Report pages generated:
745#######################################################################################################################################
746[+] Emails found:
747------------------
748sargaman@neopharm.co.il
749tali@neopharm.co.il
750
751[+] Hosts found in search engines:
752------------------------------------
753[-] Resolving hostnames IPs...
754195.28.180.198:www.neopharm.co.il
755[+] Virtual hosts:
756==================
757195.28.180.198 www.synergycables
758195.28.180.198 www.stybel.co.il
759195.28.180.198 www.carmex
760195.28.180.198 www.carmex.com
761195.28.180.198 www.synergycables.com
762195.28.180.198 www.silbermnn.com
763195.28.180.198 www.polymer
764195.28.180.198 www.geosoft-sys.com
765195.28.180.198 www.home-r.co.il
766195.28.180.198 www.eyar.co.il
767195.28.180.198 www.akim.org.il
768
769######################################################################################################################################
770rDNS record for 195.28.180.198: mail.stick.tyco.co.il
771
772PORT STATE SERVICE
77353/udp open|filtered domain
77467/udp open|filtered dhcps
77568/udp open|filtered dhcpc
77669/udp open|filtered tftp
77788/udp open|filtered kerberos-sec
778123/udp open|filtered ntp
779137/udp open|filtered netbios-ns
780138/udp open|filtered netbios-dgm
781139/udp open|filtered netbios-ssn
782161/udp open|filtered snmp
783162/udp open|filtered snmptrap
784389/udp open|filtered ldap
785520/udp open|filtered route
7862049/udp open|filtered nfs
787#######################################################################################################################################
788 Anonymous Operation Israel USA JTSEC full recon 2018 #14