13.110.56.238

As of: Feb 03, 2023 12:04am UTC | Latest
{
  "ip": "13.110.56.238",
  "services": [
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 301 Moved Permanently\r\nDate:  <REDACTED>\r\nSet-Cookie: CookieConsentPolicy=0:0; path=/; expires=Fri, 02-Feb-2024 01:22:51 GMT; Max-Age=31536000\r\nSet-Cookie: LSKey-c$CookieConsentPolicy=0:0; path=/; expires=Fri, 02-Feb-2024 01:22:51 GMT; Max-Age=31536000\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Security-Policy: upgrade-insecure-requests\r\nX-Robots-Tag: none\r\nLocation: https://13.110.56.238/\r\nCache-Control: no-cache,must-revalidate,max-age=0,no-store,private\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nTransfer-Encoding: chunked\r\n",
      "banner_hashes": [
        "sha256:5c4f1c6fcad2f666b931efbd6409553cb16756f12cc08094c445ab06ecfb1911"
      ],
      "banner_hex": "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",
      "extended_service_name": "HTTP",
      "http": {
        "request": {
          "method": "GET",
          "uri": "http://13.110.56.238/",
          "headers": {
            "Accept": [
              "*/*"
            ],
            "_encoding": {
              "Accept": "DISPLAY_UTF8",
              "User_Agent": "DISPLAY_UTF8"
            },
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 301,
          "status_reason": "Moved Permanently",
          "headers": {
            "X_Content_Type_Options": [
              "nosniff"
            ],
            "_encoding": {
              "X_Content_Type_Options": "DISPLAY_UTF8",
              "Expires": "DISPLAY_UTF8",
              "Content_Security_Policy": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Set_Cookie": "DISPLAY_UTF8",
              "X_Xss_Protection": "DISPLAY_UTF8",
              "Location": "DISPLAY_UTF8",
              "X_Robots_Tag": "DISPLAY_UTF8",
              "Cache_Control": "DISPLAY_UTF8"
            },
            "Expires": [
              "Thu, 01 Jan 1970 00:00:00 GMT"
            ],
            "Content_Security_Policy": [
              "upgrade-insecure-requests"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "Set_Cookie": [
              "CookieConsentPolicy=0:0; path=/; expires=Fri, 02-Feb-2024 01:22:51 GMT; Max-Age=31536000",
              "LSKey-c$CookieConsentPolicy=0:0; path=/; expires=Fri, 02-Feb-2024 01:22:51 GMT; Max-Age=31536000"
            ],
            "X_Xss_Protection": [
              "1; mode=block"
            ],
            "Location": [
              "https://13.110.56.238/"
            ],
            "X_Robots_Tag": [
              "none"
            ],
            "Cache_Control": [
              "no-cache,must-revalidate,max-age=0,no-store,private"
            ]
          },
          "body_size": 0
        },
        "supports_http2": false
      },
      "observed_at": "2023-02-02T01:22:51.414148207Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 80,
      "service_name": "HTTP",
      "source_ip": "162.142.125.210",
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.1 302 Moved Temporarily\r\nDate:  <REDACTED>\r\nSet-Cookie: CookieConsentPolicy=0:0; path=/; expires=Fri, 02-Feb-2024 01:22:51 GMT; Max-Age=31536000\r\nSet-Cookie: LSKey-c$CookieConsentPolicy=0:0; path=/; expires=Fri, 02-Feb-2024 01:22:51 GMT; Max-Age=31536000\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nContent-Security-Policy: upgrade-insecure-requests\r\nX-Robots-Tag: nofollow, noindex, noarchive, nosnippet\r\nCache-Control: no-cache,must-revalidate,max-age=0,no-store,private\r\nContent-Type: text/html; charset=UTF-8\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nLocation: https://login.salesforce.com\r\nContent-Length: 0\r\n",
      "banner_hashes": [
        "sha256:689ac5e733b591e3f23f407c3dc82f20fc29ba57def5ea6370fe287c4e6f534f"
      ],
      "banner_hex": "485454502f312e3120333032204d6f7665642054656d706f726172696c790d0a446174653a20203c52454441435445443e0d0a5365742d436f6f6b69653a20436f6f6b6965436f6e73656e74506f6c6963793d303a303b20706174683d2f3b20657870697265733d4672692c2030322d4665622d323032342030313a32323a353120474d543b204d61782d4167653d33313533363030300d0a5365742d436f6f6b69653a204c534b65792d6324436f6f6b6965436f6e73656e74506f6c6963793d303a303b20706174683d2f3b20657870697265733d4672692c2030322d4665622d323032342030313a32323a353120474d543b204d61782d4167653d33313533363030300d0a5374726963742d5472616e73706f72742d53656375726974793a206d61782d6167653d36333037323030303b20696e636c756465537562446f6d61696e730d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a436f6e74656e742d53656375726974792d506f6c6963793a20757067726164652d696e7365637572652d72657175657374730d0a582d526f626f74732d5461673a206e6f666f6c6c6f772c206e6f696e6465782c206e6f617263686976652c206e6f736e69707065740d0a43616368652d436f6e74726f6c3a206e6f2d63616368652c6d7573742d726576616c69646174652c6d61782d6167653d302c6e6f2d73746f72652c707269766174650d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d5554462d380d0a457870697265733a205468752c203031204a616e20313937302030303a30303a303020474d540d0a4c6f636174696f6e3a2068747470733a2f2f6c6f67696e2e73616c6573666f7263652e636f6d0d0a436f6e74656e742d4c656e6774683a20300d0a",
      "certificate": "34bf21b222ff56a1fa8f1e8e7f74df8ae04302ce49cdd19fb6f71ba0d973f0c5",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://13.110.56.238/",
          "headers": {
            "Accept": [
              "*/*"
            ],
            "_encoding": {
              "Accept": "DISPLAY_UTF8",
              "User_Agent": "DISPLAY_UTF8"
            },
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.1",
          "status_code": 302,
          "status_reason": "Moved Temporarily",
          "headers": {
            "Strict_Transport_Security": [
              "max-age=63072000; includeSubDomains"
            ],
            "_encoding": {
              "Strict_Transport_Security": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8",
              "X_Xss_Protection": "DISPLAY_UTF8",
              "Content_Type": "DISPLAY_UTF8",
              "Content_Security_Policy": "DISPLAY_UTF8",
              "X_Robots_Tag": "DISPLAY_UTF8",
              "Set_Cookie": "DISPLAY_UTF8",
              "Date": "DISPLAY_UTF8",
              "Location": "DISPLAY_UTF8",
              "X_Content_Type_Options": "DISPLAY_UTF8",
              "Cache_Control": "DISPLAY_UTF8",
              "Expires": "DISPLAY_UTF8"
            },
            "Content_Length": [
              "0"
            ],
            "X_Xss_Protection": [
              "1; mode=block"
            ],
            "Content_Type": [
              "text/html; charset=UTF-8"
            ],
            "Content_Security_Policy": [
              "upgrade-insecure-requests"
            ],
            "X_Robots_Tag": [
              "nofollow, noindex, noarchive, nosnippet"
            ],
            "Set_Cookie": [
              "CookieConsentPolicy=0:0; path=/; expires=Fri, 02-Feb-2024 01:22:51 GMT; Max-Age=31536000",
              "LSKey-c$CookieConsentPolicy=0:0; path=/; expires=Fri, 02-Feb-2024 01:22:51 GMT; Max-Age=31536000"
            ],
            "Date": [
              "<REDACTED>"
            ],
            "Location": [
              "https://login.salesforce.com"
            ],
            "X_Content_Type_Options": [
              "nosniff"
            ],
            "Cache_Control": [
              "no-cache,must-revalidate,max-age=0,no-store,private"
            ],
            "Expires": [
              "Thu, 01 Jan 1970 00:00:00 GMT"
            ]
          },
          "body_size": 0
        },
        "supports_http2": false
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "2ad2ad0002ad2ad0002ad2ad2ad2adcb09dd549309271837f87ac5dad15fa7",
        "cipher_and_version_fingerprint": "2ad2ad0002ad2ad0002ad2ad2ad2ad",
        "tls_extensions_sha256": "cb09dd549309271837f87ac5dad15fa7",
        "observed_at": "2023-01-25T15:56:22.032317851Z"
      },
      "observed_at": "2023-02-02T01:22:51.519260589Z",
      "perspective_id": "PERSPECTIVE_HE",
      "port": 443,
      "service_name": "HTTP",
      "source_ip": "162.142.125.210",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "34bf21b222ff56a1fa8f1e8e7f74df8ae04302ce49cdd19fb6f71ba0d973f0c5",
          "chain_fps_sha_256": [
            "25768713d3b459f9382d2a594f85f34709fd2a8930731542a4146ffb246bec69"
          ],
          "leaf_data": {
            "names": [
              "*.a.forceusercontent.com",
              "*.builder.salesforce-communities.com",
              "*.c.forceusercontent.com",
              "*.cloudforce.com",
              "*.container.lightning.com",
              "*.d.forceusercontent.com",
              "*.database.com",
              "*.documentforce.com",
              "*.force.com",
              "*.lightning.force.com",
              "*.livepreview.salesforce-communities.com",
              "*.my.salesforce.com",
              "*.na209.content.force.com",
              "*.na209.force.com",
              "*.na209.visual.force.com",
              "*.preview.salesforce-communities.com",
              "*.secure.force.com",
              "*.visualforce.com",
              "cloudatlas.salesforce.com",
              "services.salesforce.com"
            ],
            "subject_dn": "C=US, ST=California, L=San Francisco, O=salesforce.com\\, inc., CN=*.na209.force.com",
            "issuer_dn": "C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "5b12755730e9805c8010aaf1410daff5200c8293711b0a7e7afaf3d92a970425",
            "fingerprint": "34bf21b222ff56a1fa8f1e8e7f74df8ae04302ce49cdd19fb6f71ba0d973f0c5",
            "issuer": {
              "common_name": [
                "DigiCert TLS RSA SHA256 2020 CA1"
              ],
              "organization": [
                "DigiCert Inc"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "*.na209.force.com"
              ],
              "locality": [
                "San Francisco"
              ],
              "organization": [
                "salesforce.com, inc."
              ],
              "province": [
                "California"
              ],
              "country": [
                "US"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "yT+NydOgWXon/1qOsHtrUvhzBHNpJTsyBJpnBYUjOW08YYFjFcxfGFspWQeEFcU0LqkduyCcIsTMy9w9hCjkN3mG74sxI8GvkfyCbq8CXZbcZy/motSmsbAoxVtFXf8zSmBS2sJ4U3sP7AONmPDBmcYTZ3yeJv4KuSK/oIBMeJlS63d5T4MX+PX+wE2JfxQppsYLk9jd6s8NXB//R/SV5OX1RSocTH50mcvkzgb8meiVkECvFh5b4A+ZynADhpal4zEDrNeSSR1+lZC7dhviePjavxyNl7NVlsOZmQkobiuZ5iAU8MQ/urxG9Ob0TnSpBc79h8f3cVEvHUNxhXyZew==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "30a1efdb76213c218eb1df614165bb0180943a09cd98fabe453d812dcf5a61a2"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "25768713d3b459f9382d2a594f85f34709fd2a8930731542a4146ffb246bec69",
              "subject_dn": "C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1",
              "issuer_dn": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA"
            }
          ]
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 23
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "0debd3853f330c574b05e0b6d882dc27"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.0 403 Forbidden\r\nServer: BigIP\r\nConnection: Keep-Alive\r\nContent-Length: 264\r\n",
      "banner_hashes": [
        "sha256:9196d5bb92140f71dacab084d29c32f385d8dd14e785e444cde31751f7a38773"
      ],
      "banner_hex": "485454502f312e302034303320466f7262696464656e0d0a5365727665723a2042696749500d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a436f6e74656e742d4c656e6774683a203236340d0a",
      "certificate": "34bf21b222ff56a1fa8f1e8e7f74df8ae04302ce49cdd19fb6f71ba0d973f0c5",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://13.110.56.238:8443/",
          "headers": {
            "Accept": [
              "*/*"
            ],
            "_encoding": {
              "Accept": "DISPLAY_UTF8",
              "User_Agent": "DISPLAY_UTF8"
            },
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.0",
          "status_code": 403,
          "status_reason": "Forbidden",
          "headers": {
            "Content_Length": [
              "264"
            ],
            "_encoding": {
              "Content_Length": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8",
              "Server": "DISPLAY_UTF8"
            },
            "Connection": [
              "Keep-Alive"
            ],
            "Server": [
              "BigIP"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>Certificate Error</title>"
          ],
          "body_size": 264,
          "body": "<html><head><title>Certificate Error</title></head><body bgcolor=#ffffff text=#3198d8><center><img src=\"http://www.sfdcstatic.com/common/assets/img/logo-company.png\"><p><h3>Client certificate error:<i>No client certificate provided.</i></h3></center></body></html>",
          "body_hashes": [
            "sha256:1d1429ac1c051b13c885df76f330a5a5734bffbe5a4a3b3f6482030734870989",
            "sha1:c9a6404d4cd6c0533a54b4cf41213e0b76eccba2"
          ],
          "body_hash": "sha1:c9a6404d4cd6c0533a54b4cf41213e0b76eccba2",
          "html_title": "Certificate Error"
        },
        "supports_http2": false
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "2ad2ad0002ad2ad0002ad2ad2ad2adcb09dd549309271837f87ac5dad15fa7",
        "cipher_and_version_fingerprint": "2ad2ad0002ad2ad0002ad2ad2ad2ad",
        "tls_extensions_sha256": "cb09dd549309271837f87ac5dad15fa7",
        "observed_at": "2023-01-20T16:49:02.437100172Z"
      },
      "observed_at": "2023-02-02T17:55:29.856314903Z",
      "perspective_id": "PERSPECTIVE_TELIA",
      "port": 8443,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "Linux",
          "other": {
            "family": "Linux"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:f5:big\\-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "F5",
          "product": "BIG-IP LTM",
          "other": {
            "family": "BIG-IP"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.146.59",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "34bf21b222ff56a1fa8f1e8e7f74df8ae04302ce49cdd19fb6f71ba0d973f0c5",
          "chain_fps_sha_256": [
            "25768713d3b459f9382d2a594f85f34709fd2a8930731542a4146ffb246bec69"
          ],
          "leaf_data": {
            "names": [
              "*.a.forceusercontent.com",
              "*.builder.salesforce-communities.com",
              "*.c.forceusercontent.com",
              "*.cloudforce.com",
              "*.container.lightning.com",
              "*.d.forceusercontent.com",
              "*.database.com",
              "*.documentforce.com",
              "*.force.com",
              "*.lightning.force.com",
              "*.livepreview.salesforce-communities.com",
              "*.my.salesforce.com",
              "*.na209.content.force.com",
              "*.na209.force.com",
              "*.na209.visual.force.com",
              "*.preview.salesforce-communities.com",
              "*.secure.force.com",
              "*.visualforce.com",
              "cloudatlas.salesforce.com",
              "services.salesforce.com"
            ],
            "subject_dn": "C=US, ST=California, L=San Francisco, O=salesforce.com\\, inc., CN=*.na209.force.com",
            "issuer_dn": "C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "5b12755730e9805c8010aaf1410daff5200c8293711b0a7e7afaf3d92a970425",
            "fingerprint": "34bf21b222ff56a1fa8f1e8e7f74df8ae04302ce49cdd19fb6f71ba0d973f0c5",
            "issuer": {
              "common_name": [
                "DigiCert TLS RSA SHA256 2020 CA1"
              ],
              "organization": [
                "DigiCert Inc"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "*.na209.force.com"
              ],
              "locality": [
                "San Francisco"
              ],
              "organization": [
                "salesforce.com, inc."
              ],
              "province": [
                "California"
              ],
              "country": [
                "US"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "yT+NydOgWXon/1qOsHtrUvhzBHNpJTsyBJpnBYUjOW08YYFjFcxfGFspWQeEFcU0LqkduyCcIsTMy9w9hCjkN3mG74sxI8GvkfyCbq8CXZbcZy/motSmsbAoxVtFXf8zSmBS2sJ4U3sP7AONmPDBmcYTZ3yeJv4KuSK/oIBMeJlS63d5T4MX+PX+wE2JfxQppsYLk9jd6s8NXB//R/SV5OX1RSocTH50mcvkzgb8meiVkECvFh5b4A+ZynADhpal4zEDrNeSSR1+lZC7dhviePjavxyNl7NVlsOZmQkobiuZ5iAU8MQ/urxG9Ob0TnSpBc79h8f3cVEvHUNxhXyZew==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "30a1efdb76213c218eb1df614165bb0180943a09cd98fabe453d812dcf5a61a2"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "25768713d3b459f9382d2a594f85f34709fd2a8930731542a4146ffb246bec69",
              "subject_dn": "C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1",
              "issuer_dn": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA"
            }
          ]
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 23
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "0debd3853f330c574b05e0b6d882dc27"
      },
      "transport_protocol": "TCP",
      "truncated": false
    },
    {
      "_decoded": "http",
      "_encoding": {
        "banner": "DISPLAY_UTF8",
        "certificate": "DISPLAY_HEX",
        "banner_hex": "DISPLAY_HEX"
      },
      "banner": "HTTP/1.0 403 Forbidden\r\nServer: BigIP\r\nConnection: Keep-Alive\r\nContent-Length: 264\r\n",
      "banner_hashes": [
        "sha256:9196d5bb92140f71dacab084d29c32f385d8dd14e785e444cde31751f7a38773"
      ],
      "banner_hex": "485454502f312e302034303320466f7262696464656e0d0a5365727665723a2042696749500d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a436f6e74656e742d4c656e6774683a203236340d0a",
      "certificate": "34bf21b222ff56a1fa8f1e8e7f74df8ae04302ce49cdd19fb6f71ba0d973f0c5",
      "extended_service_name": "HTTPS",
      "http": {
        "request": {
          "method": "GET",
          "uri": "https://13.110.56.238:9443/",
          "headers": {
            "Accept": [
              "*/*"
            ],
            "_encoding": {
              "Accept": "DISPLAY_UTF8",
              "User_Agent": "DISPLAY_UTF8"
            },
            "User_Agent": [
              "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
            ]
          }
        },
        "response": {
          "protocol": "HTTP/1.0",
          "status_code": 403,
          "status_reason": "Forbidden",
          "headers": {
            "Server": [
              "BigIP"
            ],
            "_encoding": {
              "Server": "DISPLAY_UTF8",
              "Connection": "DISPLAY_UTF8",
              "Content_Length": "DISPLAY_UTF8"
            },
            "Connection": [
              "Keep-Alive"
            ],
            "Content_Length": [
              "264"
            ]
          },
          "_encoding": {
            "html_tags": "DISPLAY_UTF8",
            "body": "DISPLAY_UTF8",
            "body_hash": "DISPLAY_UTF8",
            "html_title": "DISPLAY_UTF8"
          },
          "html_tags": [
            "<title>Certificate Error</title>"
          ],
          "body_size": 264,
          "body": "<html><head><title>Certificate Error</title></head><body bgcolor=#ffffff text=#3198d8><center><img src=\"http://www.sfdcstatic.com/common/assets/img/logo-company.png\"><p><h3>Client certificate error:<i>No client certificate provided.</i></h3></center></body></html>",
          "body_hashes": [
            "sha256:1d1429ac1c051b13c885df76f330a5a5734bffbe5a4a3b3f6482030734870989",
            "sha1:c9a6404d4cd6c0533a54b4cf41213e0b76eccba2"
          ],
          "body_hash": "sha1:c9a6404d4cd6c0533a54b4cf41213e0b76eccba2",
          "html_title": "Certificate Error"
        },
        "supports_http2": false
      },
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "2ad2ad0002ad2ad0002ad2ad2ad2adcb09dd549309271837f87ac5dad15fa7",
        "cipher_and_version_fingerprint": "2ad2ad0002ad2ad0002ad2ad2ad2ad",
        "tls_extensions_sha256": "cb09dd549309271837f87ac5dad15fa7",
        "observed_at": "2023-01-26T16:36:58.483321976Z"
      },
      "observed_at": "2023-02-01T18:35:03.676188321Z",
      "perspective_id": "PERSPECTIVE_TATA",
      "port": 9443,
      "service_name": "HTTP",
      "software": [
        {
          "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
          "part": "o",
          "product": "Linux",
          "other": {
            "family": "Linux"
          },
          "source": "OSI_APPLICATION_LAYER"
        },
        {
          "uniform_resource_identifier": "cpe:2.3:a:f5:big\\-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
          "part": "a",
          "vendor": "F5",
          "product": "BIG-IP LTM",
          "other": {
            "family": "BIG-IP"
          },
          "source": "OSI_APPLICATION_LAYER"
        }
      ],
      "source_ip": "167.94.138.47",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX",
            "chain_fps_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "34bf21b222ff56a1fa8f1e8e7f74df8ae04302ce49cdd19fb6f71ba0d973f0c5",
          "chain_fps_sha_256": [
            "25768713d3b459f9382d2a594f85f34709fd2a8930731542a4146ffb246bec69"
          ],
          "leaf_data": {
            "names": [
              "*.a.forceusercontent.com",
              "*.builder.salesforce-communities.com",
              "*.c.forceusercontent.com",
              "*.cloudforce.com",
              "*.container.lightning.com",
              "*.d.forceusercontent.com",
              "*.database.com",
              "*.documentforce.com",
              "*.force.com",
              "*.lightning.force.com",
              "*.livepreview.salesforce-communities.com",
              "*.my.salesforce.com",
              "*.na209.content.force.com",
              "*.na209.force.com",
              "*.na209.visual.force.com",
              "*.preview.salesforce-communities.com",
              "*.secure.force.com",
              "*.visualforce.com",
              "cloudatlas.salesforce.com",
              "services.salesforce.com"
            ],
            "subject_dn": "C=US, ST=California, L=San Francisco, O=salesforce.com\\, inc., CN=*.na209.force.com",
            "issuer_dn": "C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "5b12755730e9805c8010aaf1410daff5200c8293711b0a7e7afaf3d92a970425",
            "fingerprint": "34bf21b222ff56a1fa8f1e8e7f74df8ae04302ce49cdd19fb6f71ba0d973f0c5",
            "issuer": {
              "common_name": [
                "DigiCert TLS RSA SHA256 2020 CA1"
              ],
              "organization": [
                "DigiCert Inc"
              ],
              "country": [
                "US"
              ]
            },
            "subject": {
              "common_name": [
                "*.na209.force.com"
              ],
              "locality": [
                "San Francisco"
              ],
              "organization": [
                "salesforce.com, inc."
              ],
              "province": [
                "California"
              ],
              "country": [
                "US"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "yT+NydOgWXon/1qOsHtrUvhzBHNpJTsyBJpnBYUjOW08YYFjFcxfGFspWQeEFcU0LqkduyCcIsTMy9w9hCjkN3mG74sxI8GvkfyCbq8CXZbcZy/motSmsbAoxVtFXf8zSmBS2sJ4U3sP7AONmPDBmcYTZ3yeJv4KuSK/oIBMeJlS63d5T4MX+PX+wE2JfxQppsYLk9jd6s8NXB//R/SV5OX1RSocTH50mcvkzgb8meiVkECvFh5b4A+ZynADhpal4zEDrNeSSR1+lZC7dhviePjavxyNl7NVlsOZmQkobiuZ5iAU8MQ/urxG9Ob0TnSpBc79h8f3cVEvHUNxhXyZew==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "30a1efdb76213c218eb1df614165bb0180943a09cd98fabe453d812dcf5a61a2"
            },
            "signature": {
              "signature_algorithm": "SHA256-RSA",
              "self_signed": false
            }
          },
          "chain": [
            {
              "fingerprint": "25768713d3b459f9382d2a594f85f34709fd2a8930731542a4146ffb246bec69",
              "subject_dn": "C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1",
              "issuer_dn": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA"
            }
          ]
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 23
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "0debd3853f330c574b05e0b6d882dc27"
      },
      "transport_fingerprint": {
        "raw": "23360,255,true,MNWST,1360,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "North America",
    "country": "United States",
    "country_code": "US",
    "postal_code": "",
    "timezone": "America/Los_Angeles",
    "province": "California",
    "coordinates": {
      "latitude": 34.0544,
      "longitude": -118.244
    },
    "registered_country": "United States",
    "registered_country_code": "US"
  },
  "location_updated_at": "2023-01-31T03:15:33.624509Z",
  "autonomous_system": {
    "asn": 14340,
    "description": "SALESFORCE",
    "bgp_prefix": "13.110.0.0/16",
    "name": "SALESFORCE",
    "country_code": "US"
  },
  "autonomous_system_updated_at": "2023-01-31T03:15:33.626894Z",
  "operating_system": {
    "uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
    "part": "o",
    "product": "Linux",
    "other": {
      "family": "Linux"
    }
  },
  "dns": {
    "names": [
      "k2konnect.force.com",
      "umassp.force.com",
      "marketingportal-cat.zellepay.com.00d41000000cykueae.live.siteforce.com",
      "commercial.tcfbank.com.00dg0000000clinmao.live.siteforce.com",
      "solicitudes.rayo.cr.00do0000000ylkzeag.live.siteforce.com",
      "qgendaprojects.secure.force.com",
      "pacifica-df18-176b396bc56.force.com",
      "commercial.tcfbank.com",
      "help.vidalung.ai.00da0000000jmdsmac.live.siteforce.com",
      "locktongbn.force.com",
      "mascocabinetry.secure.force.com",
      "marketingportal-cat.zellepay.com",
      "investor-beta.kaynecapital.com.00dg0000000kawtmaa.live.siteforce.com",
      "help.vidalung.ai",
      "fortefoundation.force.com",
      "it.umassp.edu.00d6a000001wo9suac.live.siteforce.com",
      "subsplash.force.com",
      "portal.rayo.cr.00do0000000ylkzeag.live.siteforce.com",
      "baca.force.com",
      "my-qa.earlywarning.com",
      "vidapartners.force.com",
      "morrisgroup.force.com",
      "partner.bacasystems.com",
      "philly.force.com",
      "qumulo.force.com",
      "kayneanderson.force.com",
      "na209.cloudforce.com",
      "investor-beta.kaynecapital.com",
      "servicecloudtrial-155c0807bf-159e2c19f6f.force.com",
      "dcl1-ncg1-c5-iad4.na209-ia4.force.com",
      "navigator.lockton.com",
      "jumpstart-176d8bffbab.force.com",
      "solicitudes.rayo.cr",
      "na209.force.com",
      "na209.database.com",
      "www.mymasshealthltss.com",
      "na209-ia4.force.com",
      "na209-ia4.ia4.r.force.com",
      "uncfportal.force.com",
      "myvital.vitalimages.com.00da0000000i9sjmas.live.siteforce.com",
      "sayvero.force.com"
    ],
    "records": {
      "jumpstart-176d8bffbab.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2023-02-01T13:15:58.764167771Z"
      },
      "marketingportal-cat.zellepay.com.00d41000000cykueae.live.siteforce.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-12-21T13:59:49.700705536Z"
      },
      "servicecloudtrial-155c0807bf-159e2c19f6f.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2023-01-14T13:19:51.671162003Z"
      },
      "investor-beta.kaynecapital.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-09-28T13:53:55.696980437Z"
      },
      "fortefoundation.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2023-01-23T13:17:02.395477328Z"
      },
      "commercial.tcfbank.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-11-30T14:10:28.723657985Z"
      },
      "baca.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-10-06T13:25:37.540103473Z"
      },
      "marketingportal-cat.zellepay.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-12-05T14:21:45.153029444Z"
      },
      "morrisgroup.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-12-07T13:32:30.276475129Z"
      },
      "solicitudes.rayo.cr": {
        "record_type": "CNAME",
        "resolved_at": "2022-11-15T14:10:30.233093198Z"
      },
      "navigator.lockton.com": {
        "record_type": "CNAME",
        "resolved_at": "2023-01-26T13:49:11.544131972Z"
      },
      "pacifica-df18-176b396bc56.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-12-21T13:23:00.607807241Z"
      },
      "myvital.vitalimages.com.00da0000000i9sjmas.live.siteforce.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-12-22T13:55:20.860125550Z"
      },
      "partner.bacasystems.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-10-21T12:59:58.601169559Z"
      },
      "portal.rayo.cr.00do0000000ylkzeag.live.siteforce.com": {
        "record_type": "CNAME",
        "resolved_at": "2023-01-14T13:59:42.653963850Z"
      },
      "qgendaprojects.secure.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2023-01-23T13:17:03.724131592Z"
      },
      "na209.database.com": {
        "record_type": "CNAME",
        "resolved_at": "2023-01-07T13:19:28.145526697Z"
      },
      "qumulo.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-12-30T13:16:08.965163475Z"
      },
      "vidapartners.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2023-02-01T13:15:57.919522347Z"
      },
      "na209-ia4.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-10-03T13:30:35.931539645Z"
      },
      "dcl1-ncg1-c5-iad4.na209-ia4.force.com": {
        "record_type": "A",
        "resolved_at": "2023-01-28T13:22:14.040270237Z"
      },
      "k2konnect.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2023-01-06T13:20:57.546936009Z"
      },
      "my-qa.earlywarning.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-11-21T13:11:00.491626466Z"
      },
      "sayvero.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2023-01-23T13:17:00.913570530Z"
      },
      "subsplash.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2023-01-14T13:19:50.266665701Z"
      },
      "na209.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-12-30T13:16:11.810249933Z"
      },
      "na209.cloudforce.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-12-29T13:13:25.888516734Z"
      },
      "www.mymasshealthltss.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-12-23T13:32:19.896984182Z"
      },
      "na209-ia4.ia4.r.force.com": {
        "record_type": "A",
        "resolved_at": "2022-12-16T13:16:51.204107917Z"
      },
      "kayneanderson.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2023-01-06T13:20:58.028572753Z"
      },
      "investor-beta.kaynecapital.com.00dg0000000kawtmaa.live.siteforce.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-11-22T14:21:47.328200480Z"
      },
      "mascocabinetry.secure.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-12-07T13:32:25.165449533Z"
      },
      "uncfportal.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-12-21T13:23:03.011723854Z"
      },
      "help.vidalung.ai": {
        "record_type": "CNAME",
        "resolved_at": "2022-11-25T12:05:34.935464780Z"
      },
      "it.umassp.edu.00d6a000001wo9suac.live.siteforce.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-09-21T14:44:14.261729813Z"
      },
      "philly.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2023-01-23T13:17:06.097597295Z"
      },
      "commercial.tcfbank.com.00dg0000000clinmao.live.siteforce.com": {
        "record_type": "CNAME",
        "resolved_at": "2023-02-02T14:16:35.650806380Z"
      },
      "umassp.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-12-21T13:23:02.810277729Z"
      },
      "help.vidalung.ai.00da0000000jmdsmac.live.siteforce.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-10-08T14:07:54.062116670Z"
      },
      "solicitudes.rayo.cr.00do0000000ylkzeag.live.siteforce.com": {
        "record_type": "CNAME",
        "resolved_at": "2022-10-08T14:07:53.089807640Z"
      },
      "locktongbn.force.com": {
        "record_type": "CNAME",
        "resolved_at": "2023-01-14T13:19:52.165610740Z"
      }
    },
    "reverse_dns": {
      "names": [
        "dcl1-ncg1-c5-iad4.na209-ia4.force.com"
      ],
      "resolved_at": "2023-01-23T00:43:29.287656322Z"
    }
  },
  "last_updated_at": "2023-02-03T00:04:26.520Z"
}