Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Hostname kabelkycz.eu ISP Unknown
- Continent Unknown Flag
- US
- Country United States Country Code US
- Region Unknown Local time 14 May 2017 16:13 CDT
- City Unknown Latitude 37.751
- IP Address (IPv6) 2400:cb00:2048:1::681c:f60 Longitude -97.822
- ########################################################################################
- ;; OPT PSEUDOSECTION:
- ; EDNS: version: 0, flags:; udp: 4096
- ;; QUESTION SECTION:
- ;kabelkycz.eu. IN ANY
- ;; ANSWER SECTION:
- kabelkycz.eu. 3789 IN HINFO "ANY obsoleted" "See draft-ietf-dnsop-refuse-any"
- ;; Query time: 104 msec
- ;; SERVER: 192.168.1.254#53(192.168.1.254)
- ;; WHEN: Sun May 14 16:09:43 EDT 2017
- ;; MSG SIZE rcvd: 99
- ###########################################################################################
- ###########################################################################################
- dnstracer kabelkycz.eu
- Tracing to kabelkycz.eu[a] via 192.168.1.254, maximum of 3 retries
- 192.168.1.254 (192.168.1.254)
- kabelkycz.eu has address 104.28.15.96
- kabelkycz.eu has address 104.28.14.96
- Checking for HTTP-Loadbalancing [Date]: 20:10:02, 20:10:02, 20:10:02, 20:10:02, 20:10:02, 20:10:03, 20:10:03, 20:10:03, 20:10:03, 20:10:03, 20:10:03, 20:10:03, 20:10:03, 20:10:03, 20:10:03, 20:10:04, 20:10:04, 20:10:04, 20:10:04, 20:10:04, 20:10:04, 20:10:04, 20:10:04, 20:10:04, 20:10:05, 20:10:05, 20:10:05, 20:10:05, 20:10:05, 20:10:05, 20:10:05, 20:10:05, 20:10:05, 20:10:05, 20:10:06, 20:10:06, 20:10:06, 20:10:06, 20:10:06, 20:10:06, 20:10:06, 20:10:06, 20:10:06, 20:10:06, 20:10:07, 20:10:07, 20:10:07, 20:10:07, 20:10:07, 20:10:07, NOT FOUND
- Checking for HTTP-Loadbalancing [Diff]: FOUND
- < CF-RAY: 35f07fc620022192-EWR
- > CF-RAY: 35f07fc6f06c2192-EWR
- ###########################################################################################
- nmap -PN -n -F -T4 -sV -A -oG temp.txt kabelkycz.eu
- Starting Nmap 7.40 ( https://nmap.org ) at 2017-05-14 16:09 EDT
- Nmap scan report for kabelkycz.eu (104.28.15.96)
- Host is up (0.031s latency).
- Other addresses for kabelkycz.eu (not scanned): 2400:cb00:2048:1::681c:f60 2400:cb00:2048:1::681c:e60 104.28.14.96
- Not shown: 92 filtered ports
- PORT STATE SERVICE VERSION
- 25/tcp closed smtp
- 80/tcp open http Cloudflare nginx
- | http-robots.txt: 1 disallowed entry
- |_/go/
- |_http-server-header: cloudflare-nginx
- |_http-title: kabelka
- 135/tcp closed msrpc
- 139/tcp closed netbios-ssn
- 443/tcp open ssl/http Cloudflare nginx
- | http-robots.txt: 1 disallowed entry
- |_/go/
- |_http-server-header: cloudflare-nginx
- |_http-title: kabelka
- | ssl-cert: Subject: commonName=sni68889.cloudflaressl.com
- | Subject Alternative Name: DNS:sni68889.cloudflaressl.com, DNS:*.bagnetbook.ru, DNS:*.bgrdistribution.com, DNS:*.bouchardtrees.com, DNS:*.ceciliahooley.com, DNS:*.customengravingbyearl.com, DNS:*.espritlibre51.com, DNS:*.eurocraftinc.com, DNS:*.fitness-community.com, DNS:*.habboparty.com, DNS:*.haiderrealty.com, DNS:*.happy-buyer.com, DNS:*.harrydis.com, DNS:*.jornalemigrante.com, DNS:*.justcampinggear.com, DNS:*.kabelkycz.eu, DNS:*.kristienalley.com, DNS:*.labrieimperiale.com, DNS:*.lecorailbleu.com, DNS:*.lou-vesubian.com, DNS:*.milehausfarm.com, DNS:*.myfriendsvacationrentals.com, DNS:*.orthopayments.com, DNS:*.pink-donuts.com, DNS:*.radiopaddock.com, DNS:*.refluxremedies.info, DNS:*.robertackrich.com, DNS:*.rvmlabel.com, DNS:*.saltnessparks.com, DNS:*.tallersmateu.com, DNS:*.thekaseygroup.com, DNS:*.utbcentret.com, DNS:*.vanderbarrviolins.com, DNS:*.vanegdombv.com, DNS:*.xcartsolutions.com, DNS:*.xpixeles.nl, DNS:*.yana-chris.com, DNS:bagnetbook.ru, DNS:bgrdistribution.com, DNS:bouchardtrees.com, DNS:ceciliahooley.com, DNS:customengravingbyearl.com, DNS:espritlibre51.com, DNS:eurocraftinc.com, DNS:fitness-community.com, DNS:habboparty.com, DNS:haiderrealty.com, DNS:happy-buyer.com, DNS:harrydis.com, DNS:jornalemigrante.com, DNS:justcampinggear.com, DNS:kabelkycz.eu, DNS:kristienalley.com, DNS:labrieimperiale.com, DNS:lecorailbleu.com, DNS:lou-vesubian.com, DNS:milehausfarm.com, DNS:myfriendsvacationrentals.com, DNS:orthopayments.com, DNS:pink-donuts.com, DNS:radiopaddock.com, DNS:refluxremedies.info, DNS:robertackrich.com, DNS:rvmlabel.com, DNS:saltnessparks.com, DNS:tallersmateu.com, DNS:thekaseygroup.com, DNS:utbcentret.com, DNS:vanderbarrviolins.com, DNS:vanegdombv.com, DNS:xcartsolutions.com, DNS:xpixeles.nl, DNS:yana-chris.com
- | Not valid before: 2017-04-10T00:00:00
- |_Not valid after: 2017-10-17T23:59:59
- 445/tcp closed microsoft-ds
- 8080/tcp open http Cloudflare nginx
- |_http-server-header: cloudflare-nginx
- 8443/tcp open ssl/http Cloudflare nginx
- |_http-server-header: cloudflare-nginx
- |_http-title: 400 The plain HTTP request was sent to HTTPS port
- | ssl-cert: Subject: commonName=sni68889.cloudflaressl.com
- | Subject Alternative Name: DNS:sni68889.cloudflaressl.com, DNS:*.bagnetbook.ru, DNS:*.bgrdistribution.com, DNS:*.bouchardtrees.com, DNS:*.ceciliahooley.com, DNS:*.customengravingbyearl.com, DNS:*.espritlibre51.com, DNS:*.eurocraftinc.com, DNS:*.fitness-community.com, DNS:*.habboparty.com, DNS:*.haiderrealty.com, DNS:*.happy-buyer.com, DNS:*.harrydis.com, DNS:*.jornalemigrante.com, DNS:*.justcampinggear.com, DNS:*.kabelkycz.eu, DNS:*.kristienalley.com, DNS:*.labrieimperiale.com, DNS:*.lecorailbleu.com, DNS:*.lou-vesubian.com, DNS:*.milehausfarm.com, DNS:*.myfriendsvacationrentals.com, DNS:*.orthopayments.com, DNS:*.pink-donuts.com, DNS:*.radiopaddock.com, DNS:*.refluxremedies.info, DNS:*.robertackrich.com, DNS:*.rvmlabel.com, DNS:*.saltnessparks.com, DNS:*.tallersmateu.com, DNS:*.thekaseygroup.com, DNS:*.utbcentret.com, DNS:*.vanderbarrviolins.com, DNS:*.vanegdombv.com, DNS:*.xcartsolutions.com, DNS:*.xpixeles.nl, DNS:*.yana-chris.com, DNS:bagnetbook.ru, DNS:bgrdistribution.com, DNS:bouchardtrees.com, DNS:ceciliahooley.com, DNS:customengravingbyearl.com, DNS:espritlibre51.com, DNS:eurocraftinc.com, DNS:fitness-community.com, DNS:habboparty.com, DNS:haiderrealty.com, DNS:happy-buyer.com, DNS:harrydis.com, DNS:jornalemigrante.com, DNS:justcampinggear.com, DNS:kabelkycz.eu, DNS:kristienalley.com, DNS:labrieimperiale.com, DNS:lecorailbleu.com, DNS:lou-vesubian.com, DNS:milehausfarm.com, DNS:myfriendsvacationrentals.com, DNS:orthopayments.com, DNS:pink-donuts.com, DNS:radiopaddock.com, DNS:refluxremedies.info, DNS:robertackrich.com, DNS:rvmlabel.com, DNS:saltnessparks.com, DNS:tallersmateu.com, DNS:thekaseygroup.com, DNS:utbcentret.com, DNS:vanderbarrviolins.com, DNS:vanegdombv.com, DNS:xcartsolutions.com, DNS:xpixeles.nl, DNS:yana-chris.com
- | Not valid before: 2017-04-10T00:00:00
- |_Not valid after: 2017-10-17T23:59:59
- Aggressive OS guesses: OpenWrt 0.9 - 7.09 (Linux 2.4.30 - 2.4.34) (91%), OpenWrt White Russian 0.9 (Linux 2.4.30) (91%), OpenWrt Kamikaze 7.09 (Linux 2.6.22) (91%), Linux 3.18 (91%), HP P2000 G3 NAS device (91%), Linux 2.6.32 (90%), ProVision-ISR security DVR (90%), Linux 3.0 (89%), Linux 3.12 - 3.18 (89%), Linux 2.4.18 (88%)
- No exact OS matches for host (test conditions non-ideal).
- Network Distance: 2 hops
- TRACEROUTE (using port 139/tcp)
- HOP RTT ADDRESS
- 1 31.25 ms 10.42.0.1
- 2 31.25 ms 104.28.15.96
- Protocol on 104.28.15.96:80/tcp matches http
- Protocol on 104.28.15.96:443/tcp matches http
- Protocol on 104.28.15.96:8443/tcp matches http
- Protocol on 104.28.15.96:8080/tcp matches http
- Protocol on 104.28.15.96:443/tcp matches ssl
- Protocol on 104.28.15.96:8443/tcp matches ssl
- ###########################################################################################
- NetRange: 104.16.0.0 - 104.31.255.255
- CIDR: 104.16.0.0/12
- NetName: CLOUDFLARENET
- NetHandle: NET-104-16-0-0-1
- Parent: NET104 (NET-104-0-0-0-0)
- NetType: Direct Assignment
- OriginAS: AS13335
- Organization: Cloudflare, Inc. (CLOUD14)
- RegDate: 2014-03-28
- Updated: 2017-02-17
- Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
- Ref: https://whois.arin.net/rest/net/NET-104-16-0-0-1
- OrgName: Cloudflare, Inc.
- OrgId: CLOUD14
- Address: 101 Townsend Street
- City: San Francisco
- StateProv: CA
- PostalCode: 94107
- Country: US
- RegDate: 2010-07-09
- Updated: 2017-02-17
- Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
- Ref: https://whois.arin.net/rest/org/CLOUD14
- OrgTechHandle: ADMIN2521-ARIN
- OrgTechName: Admin
- OrgTechPhone: +1-650-319-8930
- OrgTechEmail: admin@cloudflare.com
- OrgTechRef: https://whois.arin.net/rest/poc/ADMIN2521-ARIN
- OrgAbuseHandle: ABUSE2916-ARIN
- OrgAbuseName: Abuse
- OrgAbusePhone: +1-650-319-8930
- OrgAbuseEmail: abuse@cloudflare.com
- OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE2916-ARIN
- OrgNOCHandle: NOC11962-ARIN
- OrgNOCName: NOC
- OrgNOCPhone: +1-650-319-8930
- OrgNOCEmail: noc@cloudflare.com
- OrgNOCRef: https://whois.arin.net/rest/poc/NOC11962-ARIN
- RNOCHandle: NOC11962-ARIN
- RNOCName: NOC
- RNOCPhone: +1-650-319-8930
- RNOCEmail: noc@cloudflare.com
- RNOCRef: https://whois.arin.net/rest/poc/NOC11962-ARIN
- RAbuseHandle: ABUSE2916-ARIN
- RAbuseName: Abuse
- RAbusePhone: +1-650-319-8930
- RAbuseEmail: abuse@cloudflare.com
- RAbuseRef: https://whois.arin.net/rest/poc/ABUSE2916-ARIN
- RTechHandle: ADMIN2521-ARIN
- RTechName: Admin
- RTechPhone: +1-650-319-8930
- RTechEmail: admin@cloudflare.com
- RTechRef: https://whois.arin.net/rest/poc/ADMIN2521-ARIN
- cz.kabelkycz.eu
- IPv6 address #1: 2400:cb00:2048:1::681c:e60
- IPv6 address #2: 2400:cb00:2048:1::681c:f60
- cz.kabelkycz.eu
- IP address #1: 104.28.15.96
- IP address #2: 104.28.14.96
- mail.kabelkycz.eu
- IPv6 address #1: 2400:cb00:2048:1::681c:e60
- IPv6 address #2: 2400:cb00:2048:1::681c:f60
- mail.kabelkycz.eu
- IP address #1: 104.28.14.96
- IP address #2: 104.28.15.96
- my.kabelkycz.eu
- IPv6 address #1: 2400:cb00:2048:1::681c:f60
- IPv6 address #2: 2400:cb00:2048:1::681c:e60
- my.kabelkycz.eu
- IP address #1: 104.28.14.96
- IP address #2: 104.28.15.96
- shop.kabelkycz.eu
- IPv6 address #1: 2400:cb00:2048:1::681c:f60
- IPv6 address #2: 2400:cb00:2048:1::681c:e60
- shop.kabelkycz.eu
- IP address #1: 104.28.15.96
- IP address #2: 104.28.14.96
- sk.kabelkycz.eu
- IPv6 address #1: 2400:cb00:2048:1::681c:f60
- IPv6 address #2: 2400:cb00:2048:1::681c:e60
- sk.kabelkycz.eu
- IP address #1: 104.28.15.96
- IP address #2: 104.28.14.96
- www.kabelkycz.eu
- IPv6 address #1: 2400:cb00:2048:1::681c:e60
- IPv6 address #2: 2400:cb00:2048:1::681c:f60
- www.kabelkycz.eu
- IP address #1: 104.28.14.96
- IP address #2: 104.28.15.96
- kabelkycz.eu has address 104.28.15.96
- kabelkycz.eu has address 104.28.14.96
- kabelkycz.eu has IPv6 address 2400:cb00:2048:1::681c:f60
- kabelkycz.eu has IPv6 address 2400:cb00:2048:1::681c:e60
- [+] 12 (sub)domains and 24 IP address(es) found
- [-] Resolving hostnames IPs...
- 104.28.15.96:2014.kabelkycz.eu
- 104.28.15.96:all.kabelkycz.eu
- 104.28.15.96:cz.kabelkycz.eu
- 104.28.14.96:mail.kabelkycz.eu
- 104.28.14.96:my.kabelkycz.eu
- 104.28.15.96:shop.kabelkycz.eu
- 104.28.15.96:sk.kabelkycz.eu
- 104.28.15.96:top.kabelkycz.eu
- 104.28.14.96:www.kabelkycz.eu
- PORT STATE SERVICE
- 25/tcp closed smtp
- 80/tcp open http
- 135/tcp closed msrpc
- 139/tcp closed netbios-ssn
- 161/tcp closed snmp
- 443/tcp open https
- 445/tcp closed microsoft-ds
- 8080/tcp open http-proxy
- 8443/tcp open https-alt
- [+] Virtual hosts:
- ==================
- 104.28.15.96 c3empower.com
- 104.28.15.96 forecastcity
- 104.28.15.96 www.flwildliferemoval
- 104.28.15.96 www.allamericanlabel
- 104.28.15.96 www.portabletoiletrentalsclinton.com
- 104.28.15.96 barproductsandservices.com
- 104.28.15.96 www.waterproofbasementhudson.com
- 104.28.15.96 blouinbrothers
- 104.28.15.96 buaepi.com
- 104.28.15.96 bosoxinjection.com
- 104.28.15.96 palladiobanquethall.com
- 104.28.15.96 simondesign
- 104.28.15.96 healthforallcoalition
- 104.28.15.96 www.rainbowvacuumsatlanta.com
- 104.28.15.96 www.joevenusartist
- 104.28.15.96 scandria
- 104.28.15.96 nationalmarketinggroup.com
- 104.28.15.96 www.executivetransportations.com
- 104.28.15.96 www.rhodesfirm.com
- 104.28.15.96 deopujari.com
- 104.28.15.96 www.businessmalawi
- 104.28.15.96 haldimandll.ca
- 104.28.15.96 www.manchester
- 104.28.15.96 swastanimasta
- 104.28.15.96 www.fajarutama
- 104.28.15.96 www.niekvandermeer
- 104.28.15.96 forecastcity.com
- 104.28.15.96 www.527group
- 104.28.15.96 allamericanlabel
- 104.28.15.96 relationshipcoachingaustralia.com.au
- 104.28.15.96 atthecoffeegallery.com
- 104.28.15.96 www.bienvenue-au-quebec.com
- 104.28.15.96 custommailorder.com
- 104.28.15.96 agapimu.altervista.org
- 104.28.15.96 ppv888.com
- 104.28.15.96 prescriptionwriting
- 104.28.15.96 www.clubsanook.com
- 104.28.15.96 statvoo.com
- 104.28.15.96 gkdv.net
- 104.28.15.96 lynnkwagner.com
- 104.28.15.96 filmi7.com
- 104.28.15.96 mmmoc.thoorium.com
- 104.28.15.96 edd777.com
- 104.28.15.96 aziendalearond.altervista.org
- 104.28.15.96 zolute
- 104.28.15.96 noellesgift.ca
- 104.28.15.96 sitevaluefree.com
- 104.28.15.96 www.casapadrepio.altervista.org
- 104.28.15.96 all.kabelkycz.eu
- 104.28.15.96 www.aresantemnae.altervista.org
- 104.28.15.96 www.civa-x.ru
- 104.28.15.96 bmscience.altervista.org
- 104.28.15.96 vaiper.altervista.org
- 104.28.14.96 www.social442
- 104.28.14.96 lynnkwagner.com
- 104.28.14.96 forecastcity
- 104.28.14.96 www.allamericanlabel.net
- 104.28.14.96 allamericanlabel
- 104.28.14.96 buaepi.com
- 104.28.14.96 palladiobanquethall.com
- 104.28.14.96 theruralchannel
- 104.28.14.96 transportationstudies
- 104.28.14.96 nationalmarketinggroup
- 104.28.14.96 www.rainbowvacuumsatlanta.com
- 104.28.14.96 www.waterproofbasementhudson.com
- 104.28.14.96 barproductsandservices
- 104.28.14.96 aplswd.com
- 104.28.14.96 www.garagedoorsnewbedford.com
- 104.28.14.96 streamindustry
- 104.28.14.96 filmi7.com
- 104.28.14.96 theruralchannel.com
- 104.28.14.96 www.mchalecontracting
- 104.28.14.96 bosoxinjection.com
- 104.28.14.96 www.joevenusartist.com
- 104.28.14.96 drawingpads
- 104.28.14.96 wafflepanda.com
- 104.28.14.96 wetgirlswild.xyz
- 104.28.14.96 www.deanwilsonart
- 104.28.14.96 healthforallcoalition.org
- 104.28.14.96 www.social442.com
- 104.28.14.96 www.businessmalawi
- 104.28.14.96 nationalmarketinggroup.com
- 104.28.14.96 content.vitreks.com
- 104.28.14.96 kabelkycz.eu
- 104.28.14.96 www.premiumfinanciere.com
- 104.28.14.96 www.penarthplastering
- 104.28.14.96 statvoo.com
- 104.28.14.96 www.desertdigital
- 104.28.14.96 bursa303.com
- 104.28.14.96 www.chopachop.info
- 104.28.14.96 rabbweb.com
- 104.28.14.96 www.avolition
- 104.28.14.96 www.australianopentennis
- 104.28.14.96 tashmorton.com.au
- 104.28.14.96 shop.kabelkycz.eu
- 104.28.14.96 www.webfabrika.ba
- 104.28.14.96 www.ofunnygames
- 104.28.14.96 www.clubwembleyprivatebox
- 104.28.14.96 www.vitreks.com
- 104.28.14.96 www.mybaby.lv
- 104.28.14.96 dhad.sa
- 104.28.14.96 uztest.ru
- 104.28.14.96 www.ulsterweddings
- 104.28.14.96 www.ulsterweddingsonline.co.uk
- 104.28.14.96 coquetavie.fr
- 104.28.14.96 www.svroterturm.de
- 104.28.14.96 laddpunkten.se
- 104.28.14.96 www.amolamatematica.it
- ---------------------------------------------------------------------------
- + Target IP: 104.28.15.96
- + Target Hostname: kabelkycz.eu
- + Target Port: 80
- + Start Time: 2017-05-14 16:10:29 (GMT-4)
- ---------------------------------------------------------------------------
- + Server: cloudflare-nginx
- + The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS
- + Uncommon header 'cf-ray' found, with contents: 35f0809e33f518a0-EWR
- + The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type
- + All CGI directories 'found', use '-C none' to test none
- + Server banner has changed from 'cloudflare-nginx' to '-nginx' which may suggest a WAF, load balancer or proxy is in place
- + 26097 requests: 0 error(s) and 3 item(s) reported on remote host
- + End Time: 2017-05-14 16:31:30 (GMT-4) (1261 seconds)
- ---------------------------------------------------------------------------
- ----- kabelkycz.eu -----
- Host's addresses:
- __________________
- kabelkycz.eu. 300 IN A 104.28.15.96
- kabelkycz.eu. 300 IN A 104.28.14.96
- Name Servers:
- ______________
- dana.ns.cloudflare.com. 86399 IN A 173.245.58.105
- rob.ns.cloudflare.com. 86399 IN A 173.245.59.140
- perhaps Google is blocking our queries.
- Check manually.
- DNS Servers for kabelkycz.eu:
- dana.ns.cloudflare.com
- rob.ns.cloudflare.com
- Trying zone transfer first...
- Testing dana.ns.cloudflare.com
- Request timed out or transfer not allowed.
- Testing rob.ns.cloudflare.com
- Request timed out or transfer not allowed.
- Unsuccessful in zone transfer (it was worth a shot)
- Okay, trying the good old fashioned way... brute force
- Checking for wildcard DNS...
- Nope. Good.
- Now performing 2280 test(s)...
- 104.28.15.96 cz.kabelkycz.eu
- 104.28.14.96 cz.kabelkycz.eu
- 104.28.15.96 mail.kabelkycz.eu
- 104.28.14.96 mail.kabelkycz.eu
- 104.28.14.96 my.kabelkycz.eu
- 104.28.15.96 my.kabelkycz.eu
- 104.28.15.96 shop.kabelkycz.eu
- 104.28.14.96 shop.kabelkycz.eu
- 104.28.15.96 sk.kabelkycz.eu
- 104.28.14.96 sk.kabelkycz.eu
- 104.28.14.96 www.kabelkycz.eu
- 104.28.15.96 www.kabelkycz.eu
- Subnets found (may want to probe here using nmap or unicornscan):
- 104.28.14.0-255 : 6 hostnames found.
- 104.28.15.0-255 : 6 hostnames found.
- traceroute -T -O info 104.28.15.96
- traceroute to 104.28.15.96 (104.28.15.96), 30 hops max, 60 byte packets
- 1 10.42.0.1 (10.42.0.1) 30.864 ms 32.276 ms 32.275 ms
- 2 gw2-carp2.calyxinstitute.org (162.247.73.3) 32.270 ms 32.265 ms 32.262 ms
- 3 de-cix-new-york.as13335.net (206.130.10.31) 32.451 ms 32.256 ms nyiix.as13335.net (198.32.160.195) 32.244 ms
- 4 104.28.15.96 (104.28.15.96) <syn,ack> 32.946 ms 32.945 ms 32.923 ms
- -Anonymous- -JTSEC-
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement