· 8 years ago · Mar 11, 2018, 01:28 AM
1#######################################################################################################################################
2Hostname www.ishopy.co.il ISP Bezeq International (AS8551)
3Continent Asia Flag
4IL
5Country Israel Country Code IL (ISR)
6Region Unknown Local time 10 Mar 2018 05:32 IST
7City Unknown Latitude 31.5
8IP Address 81.218.229.174 Longitude 34.75
9######################################################################################################################################
10HostIP:81.218.229.174
11HostName:ishopy.co.il
12
13Gathered Inet-whois information for 81.218.229.174
14---------------------------------
15
16
17inetnum: 81.218.229.0 - 81.218.229.255
18netname: SECUREST-LTD
19descr: Securest LTD
20country: IL
21admin-c: BNT1-RIPE
22tech-c: se3315-ripe
23status: ASSIGNED PA
24mnt-by: AS8551-MNT
25mnt-lower: AS8551-MNT
26remarks: please send ABUSE complains to abuse@securest.biz
27created: 2009-08-26T11:21:55Z
28last-modified: 2010-06-21T00:33:20Z
29source: RIPE
30
31role: BEZEQINT NETWORKING TEAM
32address: Bezeq International
33address: 40 hashacham st.
34address: Petach Tikva 49170 Israel
35phone: +972 1 800014014
36fax-no: +972 3 9257674
37admin-c: MR916-RIPE
38tech-c: MR916-RIPE
39tech-c: RD1278-RIPE
40nic-hdl: BNT1-RIPE
41remarks: Please Send Spam and Abuse ONLY to abuse@bezeqint.net
42mnt-by: AS8551-MNT
43mnt-by: gp-44282
44created: 2005-09-27T12:31:29Z
45last-modified: 2017-11-30T13:25:20Z
46source: RIPE # Filtered
47
48person: Shlomi Elimeleh
49address: P.O.B 10
50address: 60250, Or Yehuda
51address: Israel
52mnt-by: MNT-NFORCE
53phone: +972 545688015
54fax-no: +972 (3)6050206
55nic-hdl: se3315-ripe
56created: 2007-06-26T14:29:02Z
57last-modified: 2017-10-30T21:55:39Z
58source: RIPE
59
60% Information related to '81.218.224.0/19AS8551'
61
62route: 81.218.224.0/19
63descr: BEZEQINT-ADSL
64origin: AS8551
65mnt-by: AS8551-MNT
66created: 2003-03-11T08:12:20Z
67last-modified: 2003-03-11T08:12:20Z
68source: RIPE # Filtered
69
70% This query was served by the RIPE Database Query Service version 1.90 (WAGYU)
71
72
73
74Gathered Inic-whois information for ishopy.co.il
75---------------------------------
76domain: ishopy.co.il
77
78descr: acumana LTD
79descr: Hatichon 33
80descr: Haifa
81descr: 32296
82descr: Israel
83e-mail: chenganel AT gmail.com
84admin-c: GI-CG5194-IL
85tech-c: GI-CG5194-IL
86zone-c: GI-CG5194-IL
87nserver: ns1.qwais.com
88nserver: ns2.qwais.com
89validity: 12-12-2019
90DNSSEC: unsigned
91status: Transfer Locked
92changed: domain-registrar AT isoc.org.il 20YV@ (AssF
93�(iguned)
94changed: domain-registrar AT isoc.org.il 20131218 (Changed)
95changed: domain-registrar AT isoc.org.il 20140309 (Changed)
96
97person: chen ganel
98address: Hatichon 33
99address: Haifa
100address: 32296
101address: Israel
102phone: +972 54 2333399
103e-mail: chenganel AT gmail.com
104nic-hdl: GI-CG5194-IL
105changed: Managing Registrar 20131117
106
107registrar name: Gorni Interactive Ltd
108registrar info: http://www.box.co.il/
109
110% Rights to the data above are restricted by coV@pyrigF
111�(ht.
112
113Gathered Netcraft information for ishopy.co.il
114---------------------------------
115
116Retrieving Netcraft.com information for ishopy.co.il
117Netcraft.com Information gathered
118
119Gathered Subdomain information for ishopy.co.il
120---------------------------------
121Searching Google.com:80...
122Searching Altavista.com:80...
123Found 0 possible subdomain(s) for host ishopy.co.il, Searched 0 pages containing 0 results
124
125Gathered E-Mail information for ishopy.co.il
126---------------------------------
127Searching Google.com:80...
128Searching Altavista.com:80...
129Found 0 E-Mail(s) for host ishopy.co.il, Searched 0 pages containing 0 results
130
131Gathered TCP Port information for 81.218.229.174
132---------------------------------
133
134 Port State
135
1361/tcp open
1372/tcp open
1383/tcp open
1394/tcp open
1405/tcp open
1416/tcp open
1427/tcp open
1438/tcp open
1449/tcp open
14510/tcp open
14611/tcp open
14712/tcp open
14813/tcp open
14914/tcp open
15015/tcp open
15116/tcp open
15217/tcp open
15318/tcp open
15419/tcp open
15520/tcp open
15621/tcp open
15722/tcp open
15823/tcp open
15924/tcp open
16026/tcp open
16127/tcp open
16228/tcp open
16329/tcp open
16430/tcp open
16531/tcp open
16632/tcp open
16733/tcp open
16834/tcp open
16935/tcp open
17036/tcp open
17137/tcp open
17238/tcp open
17339/tcp open
17440/tcp open
17541/tcp open
17642/tcp open
17743/tcp open
17844/tcp open
17945/tcp open
18046/tcp open
18147/tcp open
18248/tcp open
18349/tcp open
18450/tcp open
18551/tcp open
18652/tcp open
18753/tcp open
18854/tcp open
18955/tcp open
19056/tcp open
19157/tcp open
19258/tcp open
19359/tcp open
19460/tcp open
19561/tcp open
19662/tcp open
19763/tcp open
19864/tcp open
19965/tcp open
20066/tcp open
20167/tcp open
20268/tcp open
20369/tcp open
20470/tcp open
20571/tcp open
20672/tcp open
20773/tcp open
20874/tcp open
20975/tcp open
21076/tcp open
21177/tcp open
21278/tcp open
21379/tcp open
21480/tcp open
21581/tcp open
21682/tcp open
21783/tcp open
21884/tcp open
21985/tcp open
22086/tcp open
22187/tcp open
22288/tcp open
22389/tcp open
22490/tcp open
22591/tcp open
22692/tcp open
22793/tcp open
22894/tcp open
22995/tcp open
23096/tcp open
23197/tcp open
23298/tcp open
23399/tcp open
234100/tcp open
235101/tcp open
236102/tcp open
237103/tcp open
238104/tcp open
239105/tcp open
240106/tcp open
241107/tcp open
242108/tcp open
243109/tcp open
244110/tcp open
245111/tcp open
246112/tcp open
247113/tcp open
248114/tcp open
249115/tcp open
250116/tcp open
251117/tcp open
252118/tcp open
253119/tcp open
254120/tcp open
255121/tcp open
256122/tcp open
257123/tcp open
258124/tcp open
259125/tcp open
260126/tcp open
261127/tcp open
262128/tcp open
263129/tcp open
264130/tcp open
265131/tcp open
266132/tcp open
267133/tcp open
268134/tcp open
269140/tcp open
270141/tcp open
271142/tcp open
272143/tcp open
273144/tcp open
274145/tcp open
275146/tcp open
276147/tcp open
277148/tcp open
278149/tcp open
279
280Portscan Finished: Scanned 150 ports, 0 ports were in state closed
281
282#######################################################################################################################################
283[i] Scanning Site: http://ishopy.co.il
284
285
286
287B A S I C I N F O
288====================
289
290
291[+] Site Title: ×”×§× ×™×•×Ÿ של ×”×™×–×ž×™× ×”×—×“×©×™× - ISHOPY
292[+] IP address: 81.218.229.174
293[+] Web Server: Apache/2
294[+] CMS: Could Not Detect
295[+] Cloudflare: Not Detected
296[+] Robots File: Found
297
298-------------[ contents ]----------------
299User-agent: *
300Disallow: /wp-admin/
301
302-----------[end of contents]-------------
303
304
305
306W H O I S L O O K U P
307========================
308
309
310% The data in the WHOIS database of the .il registry is provided
311% by ISOC-IL for information purposes, and to assist persons in
312% obtaining information about or related to a domain name
313% registration record. ISOC-IL does not guarantee its accuracy.
314% By submitting a WHOIS query, you agree that you will use this
315% Data only for lawful purposes and that, under no circumstances
316% will you use this Data to: (1) allow, enable, or otherwise
317% support the transmission of mass unsolicited, commercial
318% advertising or solicitations via e-mail (spam);
319% or (2) enable high volume, automated, electronic processes that
320% apply to ISOC-IL (or its systems).
321% ISOC-IL reserves the right to modify these terms at any time.
322% By submitting this query, you agree to abide by this policy.
323
324query: ishopy.co.il
325
326reg-name: ishopy
327domain: ishopy.co.il
328
329descr: acumana LTD
330descr: Hatichon 33
331descr: Haifa
332descr: 32296
333descr: Israel
334e-mail: chenganel AT gmail.com
335admin-c: GI-CG5194-IL
336tech-c: GI-CG5194-IL
337zone-c: GI-CG5194-IL
338nserver: ns1.qwais.com
339nserver: ns2.qwais.com
340validity: 12-12-2019
341DNSSEC: unsigned
342status: Transfer Locked
343changed: domain-registrar AT isoc.org.il 20131212 (Assigned)
344changed: domain-registrar AT isoc.org.il 20131218 (Changed)
345changed: domain-registrar AT isoc.org.il 20140309 (Changed)
346
347person: chen ganel
348address: Hatichon 33
349address: Haifa
350address: 32296
351address: Israel
352phone: +972 54 2333399
353e-mail: chenganel AT gmail.com
354nic-hdl: GI-CG5194-IL
355changed: Managing Registrar 20131117
356
357registrar name: Gorni Interactive Ltd
358registrar info: http://www.box.co.il/
359
360% Rights to the data above are restricted by copyright.
361
362
363
364
365G E O I P L O O K U P
366=========================
367
368[i] IP Address: 81.218.229.174
369[i] Country: IL
370[i] State: N/A
371[i] City: N/A
372[i] Latitude: 31.500000
373[i] Longitude: 34.750000
374
375
376
377
378H T T P H E A D E R S
379=======================
380
381
382[i] HTTP/1.1 301 Moved Permanently
383[i] Date: Sat, 10 Mar 2018 06:22:30 GMT
384[i] Server: Apache/2
385[i] Expires: Thu, 19 Nov 1981 08:52:00 GMT
386[i] Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
387[i] Pragma: no-cache
388[i] X-Pingback: http://www.ishopy.co.il/xmlrpc.php
389[i] Set-Cookie: PHPSESSID=1d15l1rn22be346397b0ge43m2; path=/
390[i] Location: http://www.ishopy.co.il/
391[i] Vary: Accept-Encoding,User-Agent
392[i] Content-Length: 0
393[i] Connection: close
394[i] Content-Type: text/html; charset=UTF-8
395[i] HTTP/1.1 200 OK
396[i] Date: Sat, 10 Mar 2018 06:22:32 GMT
397[i] Server: Apache/2
398[i] Expires: Thu, 19 Nov 1981 08:52:00 GMT
399[i] Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
400[i] Pragma: no-cache
401[i] X-Pingback: http://www.ishopy.co.il/xmlrpc.php
402[i] Set-Cookie: PHPSESSID=20pr2v0r0qtdvs1nbomd0rb4n3; path=/
403[i] Vary: Accept-Encoding,User-Agent
404[i] Connection: close
405[i] Content-Type: text/html; charset=UTF-8
406
407
408
409
410D N S L O O K U P
411===================
412
413;; Truncated, retrying in TCP mode.
414ishopy.co.il. 14400 IN MX 10 mail.ishopy.co.il.
415ishopy.co.il. 14400 IN TXT "v=spf1 a mx ip4:81.218.229.174 ~all"
416ishopy.co.il. 14400 IN A 81.218.229.174
417ishopy.co.il. 14400 IN SOA ns1.qwais.com. hostmaster.ishopy.co.il. 2015020101 14400 3600 1209600 86400
418ishopy.co.il. 14400 IN NS ns1.qwais.com.
419ishopy.co.il. 14400 IN NS ns2.qwais.com.
420
421
422
423
424S U B N E T C A L C U L A T I O N
425====================================
426
427Address = 81.218.229.174
428Network = 81.218.229.174 / 32
429Netmask = 255.255.255.255
430Broadcast = not needed on Point-to-Point links
431Wildcard Mask = 0.0.0.0
432Hosts Bits = 0
433Max. Hosts = 1 (2^0 - 0)
434Host Range = { 81.218.229.174 - 81.218.229.174 }
435
436
437
438N M A P P O R T S C A N
439============================
440
441
442Starting Nmap 7.01 ( https://nmap.org ) at 2018-03-10 03:35 UTC
443Nmap scan report for ishopy.co.il (81.218.229.174)
444Host is up (0.14s latency).
445rDNS record for 81.218.229.174: mail.qwais.com
446PORT STATE SERVICE VERSION
44721/tcp open ftp ProFTPD 1.3.4b
44822/tcp filtered ssh
44923/tcp filtered telnet
45025/tcp open smtp Exim smtpd 4.80.1
45180/tcp open http Apache httpd 2
452110/tcp open pop3 Dovecot DirectAdmin pop3d
453143/tcp open imap Dovecot imapd
454443/tcp open ssl/http Apache httpd 2
455445/tcp filtered microsoft-ds
4563389/tcp filtered ms-wbt-server
457Service Info: Hosts: il1.qwais.com, localhost; OS: Unix
458
459Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
460Nmap done: 1 IP address (1 host up) scanned in 15.80 seconds
461
462#######################################################################################################################################
463[!] IP Address : 81.218.229.174
464[!] CMS Detected : WordPress
465[?] Would you like to use WPScan? [Y/n] Y
466_______________________________________________________________
467 __ _______ _____
468 \ \ / / __ \ / ____|
469 \ \ /\ / /| |__) | (___ ___ __ _ _ __ ®
470 \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \
471 \ /\ / | | ____) | (__| (_| | | | |
472 \/ \/ |_| |_____/ \___|\__,_|_| |_|
473
474 WordPress Security Scanner by the WPScan Team
475 Version 2.9.3
476 Sponsored by Sucuri - https://sucuri.net
477 @_WPScan_, @ethicalhack3r, @erwan_lr, pvdl, @_FireFart_
478_______________________________________________________________
479
480[i] It seems like you have not updated the database for some time.
481[?] Do you want to update now? [Y]es [N]o [A]bort, default: [N]Y
482[i] Updating the Database ...
483[i] Update completed.
484[+] URL: http://www.ishopy.co.il/
485[+] Started: Fri Mar 9 22:42:43 2018
486
487
488[!] The target seems to be down
489[+] Honeypot Probabilty: 30%
490----------------------------------------
491[~] Trying to gather whois information for www.ishopy.co.il
492[+] Whois information found
493Registrant Name : None
494Status : None
495Dnssec : None
496Expiration Date : None
497Domain Name : None
498Phone : None
499Registrar : None
500Referral Url : None
501Name Servers : None
502Emails : None
503----------------------------------------
504[+] Robots.txt retrieved
505User-agent: *
506Disallow: /wp-admin/
507
508----------------------------------------
509PORT STATE SERVICE VERSION
51021/tcp open ftp ProFTPD 1.3.4b
51122/tcp filtered ssh
51223/tcp filtered telnet
51325/tcp open smtp Exim smtpd 4.80.1
51480/tcp open http Apache httpd 2
515110/tcp open pop3 Dovecot DirectAdmin pop3d
516143/tcp open imap Dovecot imapd
517443/tcp open ssl/http Apache httpd 2
518445/tcp filtered microsoft-ds
5193389/tcp filtered ms-wbt-server
520----------------------------------------
521
522[+] DNS Records
523
524[+] Host Records (A)
525www.ishopy.co.ilHTTP: (mail.qwais.com) (81.218.229.174) AS8551 Bezeq International Israel
526
527[+] TXT Records
528
529[+] DNS Map: https://dnsdumpster.com/static/map/ishopy.co.il.png
530
531[>] Initiating 3 intel modules
532[>] Loading Alpha module (1/3)
533[>] Beta module deployed (2/3)
534[>] Gamma module initiated (3/3)
535No emails found
536No hosts found
537[+] Virtual hosts:
538-----------------
539#######################################################################################################################################
540Original* ishopy.co.il 81.218.229.174 NS:ns1.qwais.com MX:mail.ishopy.co.il
541Omission shopy.co.il 82.166.0.156 NS:dns.adamnet.co.il MX:alt1.aspmx.l.google.com
542Omission ihopy.co.il NS:ns1.sitesdepot.com
543Subdomain i.shopy.co.il 82.166.0.156 NS:dns.adamnet.co.il MX:alt1.aspmx.l.google.com
544Various ishopy.co-il.com 209.15.13.134 NS:ns1.dnslink.com
545#####################################################################################################################################
546Ip Address Status Type Domain Name Server
547---------- ------ ---- ----------- ------
54881.218.229.174 200 host ftp.ishopy.co.il Apache/2
549127.0.0.1 host localhost.ishopy.co.il
55081.218.229.174 host mail.ishopy.co.il
55181.218.229.174 500 host old.ishopy.co.il Apache/2
55281.218.229.174 200 host pop.ishopy.co.il Apache/2
55381.218.229.174 host smtp.ishopy.co.il
55481.218.229.174 host www.ishopy.co.il
55581.218.229.174 host www.old.ishopy.co.il
556######################################################################################################################################
557Scan date: 9-3-2018 23:31:17
558=====================================================================================================================================
559| Domain: http://ishopy.co.il/
560| IP: 81.218.229.174
561======================================================================================================================================
562|
563| Directory check:
564| Skipped because http://ishopy.co.il/uniscan834/ did not return the code 404
565=====================================================================================================================================
566|
567| File check:
568| Skipped because http://ishopy.co.il/uniscan697/ did not return the code 404
569======================================================================================================================================
570|
571| Check robots.txt:
572|
573| Check sitemap.xml:
574========================================================================================================================================
575|
576| Crawler Started:
577| Plugin name: FCKeditor upload test v.1 Loaded.
578| Plugin name: Code Disclosure v.1.1 Loaded.
579| Plugin name: External Host Detect v.1.2 Loaded.
580| Plugin name: Web Backdoor Disclosure v.1.1 Loaded.
581| Plugin name: E-mail Detection v.1.1 Loaded.
582| Plugin name: Timthumb <= 1.32 vulnerability v.1 Loaded.
583| Plugin name: phpinfo() Disclosure v.1 Loaded.
584| Plugin name: Upload Form Detect v.1.1 Loaded.
585| [+] Crawling finished, 1 URL's found!
586|
587| FCKeditor File Upload:
588|
589| Source Code Disclosure:
590|
591| External hosts:
592|
593| Web Backdoors:
594|
595| E-mails:
596|
597| Timthumb:
598|
599| PHPinfo() Disclosure:
600|
601| File Upload Forms:
602|
603| Ignored Files:
604=======================================================================================================================================
605| Dynamic tests:
606| Plugin name: Learning New Directories v.1.2 Loaded.
607| Plugin name: FCKedior tests v.1.1 Loaded.
608| Plugin name: Timthumb <= 1.32 vulnerability v.1 Loaded.
609| Plugin name: Find Backup Files v.1.2 Loaded.
610| Plugin name: Blind SQL-injection tests v.1.3 Loaded.
611| Plugin name: Local File Include tests v.1.1 Loaded.
612| Plugin name: PHP CGI Argument Injection v.1.1 Loaded.
613| Plugin name: Remote Command Execution tests v.1.1 Loaded.
614| Plugin name: Remote File Include tests v.1.2 Loaded.
615| Plugin name: SQL-injection tests v.1.2 Loaded.
616| Plugin name: Cross-Site Scripting tests v.1.2 Loaded.
617| Plugin name: Web Shell Finder v.1.3 Loaded.
618| [+] 0 New directories added
619|
620|
621| FCKeditor tests:
622| Skipped because http://ishopy.co.il/testing123 did not return the code 404
623|
624|
625| Timthumb < 1.33 vulnerability:
626|
627|
628| Backup Files:
629| Skipped because http://ishopy.co.il/testing123 did not return the code 404
630|
631|
632| Blind SQL Injection:
633|
634|
635| Local File Include:
636|
637|
638| PHP CGI Argument Injection:
639|
640|
641| Remote Command Execution:
642|
643|
644| Remote File Include:
645|
646|
647| SQL Injection:
648|
649|
650| Cross-Site Scripting (XSS):
651|
652|
653| Web Shell Finder:
654=======================================================================================================================================
655| Static tests:
656| Plugin name: Local File Include tests v.1.1 Loaded.
657| Plugin name: Remote Command Execution tests v.1.1 Loaded.
658| Plugin name: Remote File Include tests v.1.1 Loaded.
659|
660|
661| Local File Include:
662|
663|
664| Remote Command Execution:
665|
666|
667| Remote File Include:
668=======================================================================================================================================
669#######################################################################################################################################
670[92m====================================================================================[0m
671[91m RUNNING NSLOOKUP [0m
672[92m====================================================================================[0m
673Server: 10.211.254.254
674Address: 10.211.254.254#53
675
676Non-authoritative answer:
677Name: ishopy.co.il
678Address: 81.218.229.174
679
680ishopy.co.il has address 81.218.229.174
681ishopy.co.il mail is handled by 10 mail.ishopy.co.il.
682[92m====================================================================================[0m
683[91m CHECKING OS FINGERPRINT [0m
684[92m====================================================================================[0m
685
686Xprobe2 v.0.3 Copyright (c) 2002-2005 fyodor@o0o.nu, ofir@sys-security.com, meder@o0o.nu
687
688[+] Target is ishopy.co.il
689[+] Loading modules.
690[+] Following modules are loaded:
691[x] [1] ping:icmp_ping - ICMP echo discovery module
692[x] [2] ping:tcp_ping - TCP-based ping discovery module
693[x] [3] ping:udp_ping - UDP-based ping discovery module
694[x] [4] infogather:ttl_calc - TCP and UDP based TTL distance calculation
695[x] [5] infogather:portscan - TCP and UDP PortScanner
696[x] [6] fingerprint:icmp_echo - ICMP Echo request fingerprinting module
697[x] [7] fingerprint:icmp_tstamp - ICMP Timestamp request fingerprinting module
698[x] [8] fingerprint:icmp_amask - ICMP Address mask request fingerprinting module
699[x] [9] fingerprint:icmp_port_unreach - ICMP port unreachable fingerprinting module
700[x] [10] fingerprint:tcp_hshake - TCP Handshake fingerprinting module
701[x] [11] fingerprint:tcp_rst - TCP RST fingerprinting module
702[x] [12] fingerprint:smb - SMB fingerprinting module
703[x] [13] fingerprint:snmp - SNMPv2c fingerprinting module
704[+] 13 modules registered
705[+] Initializing scan engine
706[+] Running scan engine
707[-] ping:tcp_ping module: no closed/open TCP ports known on 81.218.229.174. Module test failed
708[-] ping:udp_ping module: no closed/open UDP ports known on 81.218.229.174. Module test failed
709[-] No distance calculation. 81.218.229.174 appears to be dead or no ports known
710[+] Host: 81.218.229.174 is down (Guess probability: 0%)
711[+] Cleaning up scan engine
712[+] Modules deinitialized
713[+] Execution completed.
714[92m====================================================================================[0m
715[91m GATHERING WHOIS INFO [0m
716[92m====================================================================================[0m
717
718% The data in the WHOIS database of the .il registry is provided
719% by ISOC-IL for information purposes, and to assist persons in
720% obtaining information about or related to a domain name
721% registration record. ISOC-IL does not guarantee its accuracy.
722% By submitting a WHOIS query, you agree that you will use this
723% Data only for lawful purposes and that, under no circumstances
724% will you use this Data to: (1) allow, enable, or otherwise
725% support the transmission of mass unsolicited, commercial
726% advertising or solicitations via e-mail (spam);
727% or (2) enable high volume, automated, electronic processes that
728% apply to ISOC-IL (or its systems).
729% ISOC-IL reserves the right to modify these terms at any time.
730% By submitting this query, you agree to abide by this policy.
731
732query: ishopy.co.il
733
734reg-name: ishopy
735domain: ishopy.co.il
736
737descr: acumana LTD
738descr: Hatichon 33
739descr: Haifa
740descr: 32296
741descr: Israel
742e-mail: chenganel AT gmail.com
743admin-c: GI-CG5194-IL
744tech-c: GI-CG5194-IL
745zone-c: GI-CG5194-IL
746nserver: ns1.qwais.com
747nserver: ns2.qwais.com
748validity: 12-12-2019
749DNSSEC: unsigned
750status: Transfer Locked
751changed: domain-registrar AT isoc.org.il 20131212 (Assigned)
752changed: domain-registrar AT isoc.org.il 20131218 (Changed)
753changed: domain-registrar AT isoc.org.il 20140309 (Changed)
754
755person: chen ganel
756address: Hatichon 33
757address: Haifa
758address: 32296
759address: Israel
760phone: +972 54 2333399
761e-mail: chenganel AT gmail.com
762nic-hdl: GI-CG5194-IL
763changed: Managing Registrar 20131117
764
765registrar name: Gorni Interactive Ltd
766registrar info: http://www.box.co.il/
767
768% Rights to the data above are restricted by copyright.
769[92m====================================================================================[0m
770[91m GATHERING OSINT INFO [0m
771[92m====================================================================================[0m
772
773*******************************************************************
774* *
775* | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ *
776* | __| '_ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| *
777* | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | *
778* \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| *
779* *
780* TheHarvester Ver. 2.7 *
781* Coded by Christian Martorella *
782* Edge-Security Research *
783* cmartorella@edge-security.com *
784*******************************************************************
785
786
787Full harvest..
788[-] Searching in Google..
789 Searching 0 results...
790[-] Searching in PGP Key server..
791[-] Searching in Bing..
792 Searching 50 results...
793[-] Searching in Exalead..
794 Searching 50 results...
795
796
797[+] Emails found:
798------------------
799pixel-152072724967286-web-@ishopy.co.il
800
801[+] Hosts found in search engines:
802------------------------------------
803[-] Resolving hostnames IPs...
80481.218.229.174:www.ishopy.co.il
805[+] Virtual hosts:
806==================
80781.218.229.174 www.vipri.co.il
80881.218.229.174 www.playmagnet.co.il
80981.218.229.174 www.zohara-klein.co.il
810#######################################################################################################################################
811
812; <<>> DiG 9.11.2-P1-1-Debian <<>> -x ishopy.co.il
813;; global options: +cmd
814;; Got answer:
815;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 764
816;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
817
818;; OPT PSEUDOSECTION:
819; EDNS: version: 0, flags:; udp: 4096
820;; QUESTION SECTION:
821;il.co.ishopy.in-addr.arpa. IN PTR
822
823;; AUTHORITY SECTION:
824in-addr.arpa. 3600 IN SOA b.in-addr-servers.arpa. nstld.iana.org. 2018013208 1800 900 604800 3600
825
826;; Query time: 549 msec
827;; SERVER: 10.211.254.254#53(10.211.254.254)
828;; WHEN: Sat Mar 10 19:14:30 EST 2018
829;; MSG SIZE rcvd: 122
830
831dnsenum VERSION:1.2.4
832[1;34m
833----- ishopy.co.il -----
834[0m[1;31m
835
836Host's addresses:
837__________________
838
839[0mishopy.co.il. 7642 IN A 81.218.229.174
840[1;31m
841
842Name Servers:
843______________
844
845[0mns2.qwais.com. 7640 IN A 81.218.229.192
846ns1.qwais.com. 7640 IN A 81.218.229.174
847[1;31m
848
849Mail (MX) Servers:
850___________________
851
852[0mmail.ishopy.co.il. 7643 IN A 81.218.229.174
853[1;31m
854
855Trying Zone Transfers and getting Bind Versions:
856_________________________________________________
857
858[0m
859Trying Zone Transfer for ishopy.co.il on ns1.qwais.com ...
860ishopy.co.il. 14400 IN SOA (
861ishopy.co.il. 14400 IN MX 10
862ishopy.co.il. 14400 IN TXT "v=spf1
863ishopy.co.il. 14400 IN A 81.218.229.174
864ishopy.co.il. 14400 IN NS ns1.qwais.com.
865ishopy.co.il. 14400 IN NS ns2.qwais.com.
866ftp.ishopy.co.il. 14400 IN A 81.218.229.174
867localhost.ishopy.co.il. 14400 IN AAAA ::1
868localhost.ishopy.co.il. 14400 IN A 127.0.0.1
869mail.ishopy.co.il. 14400 IN A 81.218.229.174
870old.ishopy.co.il. 14400 IN A 81.218.229.174
871www.old.ishopy.co.il. 14400 IN A 81.218.229.174
872pop.ishopy.co.il. 14400 IN A 81.218.229.174
873smtp.ishopy.co.il. 14400 IN A 81.218.229.174
874www.ishopy.co.il. 14400 IN A 81.218.229.174
875
876Trying Zone Transfer for ishopy.co.il on ns2.qwais.com ...
877ishopy.co.il. 14400 IN SOA (
878ishopy.co.il. 14400 IN MX 10
879ishopy.co.il. 14400 IN TXT "v=spf1
880ishopy.co.il. 14400 IN A 81.218.229.174
881ishopy.co.il. 14400 IN NS ns1.qwais.com.
882ishopy.co.il. 14400 IN NS ns2.qwais.com.
883ftp.ishopy.co.il. 14400 IN A 81.218.229.174
884localhost.ishopy.co.il. 14400 IN AAAA ::1
885localhost.ishopy.co.il. 14400 IN A 127.0.0.1
886mail.ishopy.co.il. 14400 IN A 81.218.229.174
887old.ishopy.co.il. 14400 IN A 81.218.229.174
888www.old.ishopy.co.il. 14400 IN A 81.218.229.174
889pop.ishopy.co.il. 14400 IN A 81.218.229.174
890smtp.ishopy.co.il. 14400 IN A 81.218.229.174
891www.ishopy.co.il. 14400 IN A 81.218.229.174
892
893brute force file not specified, bay.
894[92m====================================================================================[0m
895[91m GATHERING DNS SUBDOMAINS [0m
896[92m====================================================================================[0m
897[91m
898 ____ _ _ _ _ _____
899 / ___| _ _| |__ | (_)___| |_|___ / _ __
900 \___ \| | | | '_ \| | / __| __| |_ \| '__|
901 ___) | |_| | |_) | | \__ \ |_ ___) | |
902 |____/ \__,_|_.__/|_|_|___/\__|____/|_|[0m[93m
903
904 # Coded By Ahmed Aboul-Ela - @aboul3la
905
906[94m[-] Enumerating subdomains now for ishopy.co.il[0m
907[93m[-] verbosity is enabled, will show the subdomains results in realtime[0m
908[92m[-] Searching now in Baidu..[0m
909[92m[-] Searching now in Yahoo..[0m
910[92m[-] Searching now in Google..[0m
911[92m[-] Searching now in Bing..[0m
912[92m[-] Searching now in Ask..[0m
913[92m[-] Searching now in Netcraft..[0m
914[92m[-] Searching now in DNSdumpster..[0m
915[92m[-] Searching now in Virustotal..[0m
916[92m[-] Searching now in ThreatCrowd..[0m
917[92m[-] Searching now in SSL Certificates..[0m
918[92m[-] Searching now in PassiveDNS..[0m
919[91mYahoo: [0mwww.ishopy.co.il
920[91mVirustotal: [0mmail.ishopy.co.il
921[93m[-] Saving results to file: [0m[91m/usr/share/sniper/loot/domains/domains-ishopy.co.il.txt[0m
922[93m[-] Total Unique Subdomains Found: 2[0m
923[92mwww.ishopy.co.il[0m
924[92mmail.ishopy.co.il[0m
925
926[91m â•”â•â•—╦â•â•—╔╦╗╔â•â•—╦ ╦[0m
927[91m â•‘ ╠╦╠║ â•šâ•â•—â• â•â•£[0m
928[91m â•šâ•â•â•©â•šâ• â•©oâ•šâ•â•â•© â•©[0m
929[92m====================================================================================[0m
930[91m GATHERING CERTIFICATE SUBDOMAINS [0m
931[92m====================================================================================[0m
932[94m
933
934[91m[+] Domains saved to: /usr/share/sniper/loot/domains/domains-ishopy.co.il-full.txt
935[0m
936[92m====================================================================================[0m
937[91m CHECKING FOR SUBDOMAIN HIJACKING [0m
938[92m====================================================================================[0m
939[92m====================================================================================[0m
940[91m CHECKING EMAIL SECURITY [0m
941[92m====================================================================================[0m
942
943[92m====================================================================================[0m
944[91m STARTING DOMAIN FLYOVER [0m
945[92m====================================================================================[0m
946 __
947 ____ _____ ___ ______ _/ /_____ ____ ___
948 / __ `/ __ `/ / / / __ `/ __/ __ \/ __ \/ _ \
949/ /_/ / /_/ / /_/ / /_/ / /_/ /_/ / / / / __/
950\__,_/\__, /\__,_/\__,_/\__/\____/_/ /_/\___/
951 /_/ discover v0.5.0 - by @michenriksen
952
953Identifying nameservers for ishopy.co.il... Done
954Using nameservers:
955
956 - 81.218.229.174
957 - 81.218.229.192
958
959Checking for wildcard DNS... Done
960
961Running collector: [1m[1mCertificate Search[0m... Done (0 hosts)
962Running collector: [1m[1mVirusTotal[0m... [1m[33mSkipped
963[0m[1m[33m -> Key 'virustotal' has not been set
964[0mRunning collector: [1m[1mDictionary[0m... Done (27 hosts)
965Running collector: [1m[1mGoogle Transparency Report[0m... Done (0 hosts)
966Running collector: [1m[1mCensys[0m... [1m[33mSkipped
967[0m[1m[33m -> Key 'censys_secret' has not been set
968[0mRunning collector: [1m[1mWayback Machine[0m... Done (2 hosts)
969Running collector: [1m[1mRiddler[0m... [1m[33mSkipped
970[0m[1m[33m -> Key 'riddler_username' has not been set
971[0mRunning collector: [1m[1mPTRArchive[0m... [1m[31mError
972[0m[1m[31m -> PTRArchive returned unexpected response code: 502
973[0mRunning collector: [1m[1mThreat Crowd[0m... Done (0 hosts)
974Running collector: [1m[1mHackerTarget[0m... Done (1 host)
975Running collector: [1m[1mPassiveTotal[0m... [1m[33mSkipped
976[0m[1m[33m -> Key 'passivetotal_key' has not been set
977[0mRunning collector: [1m[1mNetcraft[0m... Done (0 hosts)
978Running collector: [1m[1mShodan[0m... [1m[33mSkipped
979[0m[1m[33m -> Key 'shodan' has not been set
980[0mRunning collector: [1m[1mDNSDB[0m... Done (1 host)
981Running collector: [1m[1mPublicWWW[0m... Done (1 host)
982
983Resolving [1m[1m31[0m unique hosts...
98481.218.229.174 [1m[1m.ishopy.co.il[0m
98581.218.229.174 [1m[1mishopy.co.il[0m
98681.218.229.174 [1m[1mmail.ishopy.co.il[0m
98781.218.229.174 [1m[1mwww.ishopy.co.il[0m
988
989[0K
990Found subnets:
991
992 - 81.218.229.0-255 : 4 hosts
993
994Wrote [1m[1m4[0m hosts to:
995
996 - [1m[1mfile:///root/aquatone/ishopy.co.il/hosts.txt[0m
997 - [1m[1mfile:///root/aquatone/ishopy.co.il/hosts.json[0m
998 __
999 ____ _____ ___ ______ _/ /_____ ____ ___
1000 / __ `/ __ `/ / / / __ `/ __/ __ \/ __ \/ _ \
1001/ /_/ / /_/ / /_/ / /_/ / /_/ /_/ / / / / __/
1002\__,_/\__, /\__,_/\__,_/\__/\____/_/ /_/\___/
1003 /_/ takeover v0.5.0 - by @michenriksen
1004
1005Loaded [1m[1m4[0m hosts from [1m[1m/root/aquatone/ishopy.co.il/hosts.json[0m
1006Loaded [1m[1m25[0m domain takeover detectors
1007
1008Identifying nameservers for ishopy.co.il... Done
1009Using nameservers:
1010
1011 - 81.218.229.192
1012 - 81.218.229.174
1013
1014Checking hosts for domain takeover vulnerabilities...
1015
1016Finished checking hosts:
1017
1018 - Vulnerable : [1m[1m[1m[31m0[0m[0m
1019 - Not Vulnerable : [1m[1m[1m[32m4[0m[0m
1020
1021Wrote [1m[1m0[0m potential subdomain takeovers to:
1022
1023 - [1m[1mfile:///root/aquatone/ishopy.co.il/takeovers.json[0m
1024
1025 __
1026 ____ _____ ___ ______ _/ /_____ ____ ___
1027 / __ `/ __ `/ / / / __ `/ __/ __ \/ __ \/ _ \
1028/ /_/ / /_/ / /_/ / /_/ / /_/ /_/ / / / / __/
1029\__,_/\__, /\__,_/\__,_/\__/\____/_/ /_/\___/
1030 /_/ scan v0.5.0 - by @michenriksen
1031
1032Loaded [1m[1m4[0m hosts from [1m[1m/root/aquatone/ishopy.co.il/hosts.json[0m
1033
1034Probing [1m[1m2[0m ports...
1035
1036Wrote open ports to [1m[1mfile:///root/aquatone/ishopy.co.il/open_ports.txt[0m
1037Wrote URLs to [1m[1mfile:///root/aquatone/ishopy.co.il/urls.txt[0m
1038 __
1039 ____ _____ ___ ______ _/ /_____ ____ ___
1040 / __ `/ __ `/ / / / __ `/ __/ __ \/ __ \/ _ \
1041/ /_/ / /_/ / /_/ / /_/ / /_/ /_/ / / / / __/
1042\__,_/\__, /\__,_/\__,_/\__/\____/_/ /_/\___/
1043 /_/ gather v0.5.0 - by @michenriksen
1044
1045Processing [1m[1m0[0m pages...
1046
1047Finished processing pages:
1048
1049 - Successful : [1m[1m[1m[32m0[0m[0m
1050 - Failed : [1m[1m[1m[31m0[0m[0m
1051
1052Generating report...done
1053Report pages generated:
1054
1055#######################################################################################################################################
1056 Anonymous Operation Izsrael USA JTSEC full recon 2018 #2