ATLANTIC RECORDS

http://www.atlanticrecords.com/ INTEL REPORT BY *HACKTIVIST_15 . ANONYMOUS FAMILIA <3 <3 <3 <3 <3 <3

IP Address 	23.0.160.19 < deploy.static.akamaitechnologies.com >

Starting Nmap 6.01 ( http://nmap.org ) at 2014-10-16 04:37 EDT
Nmap scan report for a23-0-160-19.deploy.static.akamaitechnologies.com (23.0.160.19)
Host is up (0.0089s latency).
Not shown: 998 filtered ports
PORT    STATE SERVICE  VERSION
80/tcp  open  http     AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp open  ssl/http AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)


HTTP Server Header: nginx

Server Type 	nginx

DNS resolves 'www.atlanticrecords.com' to 64.78.224.186

DNS resolves 'www.atlanticrecords.com' to 64.78.224.184

TLS 1.2, TLS 1.1, TLS 1.0, SSL 3.0

SSL 3.0 is an outdated protocol version with known vulnerabilities

-----------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------------------------

    server                                                    domain

1.    162.249.107.229 www.atlanticrecords.com                   assets.atlanticrecords.co.uk

SSL Configuration

.SSL 3.0   Disabled:Fail
.Certificates configured correctly:Fail
.BEAST Vulnerability:Fail
.OCSP Stapling:Fail
.FIPS Compliant:Fail

 HTTP Tests:

.Strict Transport Security:Fail
.Mixed Content (HTTP and HTTPS):Timed Out
.Domain name resolves to IPv6 address:Fail

Server Details Icon
Server:Apache
IP Address:162.249.107.229
Port:443
Hostname:www.atlanticrecords.com


EXPLOITS: Sessions may be vulnerable to BEAST attack
Attackers may be able to decrypt the encrypted SSL traffic

Hostname in certificate and DNS name do not match
Users will receive strong browser warnings

Server has not enabled HTTP Strict-Transport-Security
Users may be exposed to man-in-the-middle attacks

=====================================================================================================


2.    184.28.16.67 www.atlanticrecords.com                     a248.e.akamai.net
                                                             *.akamaihd.net
                                                              *.akamaihd-staging.net
                                                             *.akamaized.net
                                                             *.akamaized-staging.net
Server:nginx
IP Address:184.28.16.67
Port:443
Hostname:www.atlanticrecords.com


EXPLOITS:Server does not use secure renegotiation settings
Site is more vulnerable to Denial of Service (DOS) attacks

Hostname in certificate and DNS name do not match
Users will receive strong browser warnings

Server has not enabled HTTP Strict-Transport-Security
Users may be exposed to man-in-the-middle attacks

Server uses RC4 cipher with modern browsers
More secure ciphers are available for TLS 1.1 and newer

Server is using RC4-based ciphersuites which have known vulnerabilities
Evaluate your client compatibility requirements to determine if you can disable RC4-based ciphersuites

======================================================================================================

3.    184.28.16.106 www.atlanticrecords.com                  a248.e.akamai.net
                                                           *.akamaihd.net
                                                           *.akamaihd-staging.net
                                                           *.akamaized.net
                                                           *.akamaized-staging.net

EXPLOITS:
Server does not use secure renegotiation settings
Site is more vulnerable to Denial of Service (DOS) attacks

Hostname in certificate and DNS name do not match
Users will receive strong browser warnings

Server uses RC4 cipher with modern browsers
More secure ciphers are available for TLS 1.1 and newer

Server has not enabled HTTP Strict-Transport-Security
Users may be exposed to man-in-the-middle attacks

Site is using certificate from CA that doesn’t support IPv4
IPv4-only users may experience errors when visiting your site.

Server doesn’t prefer ciphers that enable forward secrecy.
Encrypted communications captured today are at risk of being decrypted by an attacker in the future.

Server is using RC4-based ciphersuites which have known vulnerabilities
Evaluate your client compatibility requirements to determine if you can disable RC4-based ciphersuites

Server has SSL v3 enabled
SSL v3 should be disabled if compatibility with older mobile clients is not required


=====================================================================================================