Nmap scan report for recvue.okta.com (13.248.165.67) Host is up (0.00055s latency). Other addresses for recvue.okta.com (not scanned): 76.223.42.213 rDNS record for 13.248.165.67: ae52e19d4a7095f43.awsglobalaccelerator.com Not shown: 996 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 80/tcp open http awselb/2.0 |_http-server-header: awselb/2.0 | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 302 Moved Temporarily | Server: awselb/2.0 | Date: Sun, 14 Sep 2025 14:00:53 GMT | Content-Type: text/html | Content-Length: 110 | Connection: close | Location: https://internal-ok6-crtr-tls12-int-alb-1511291124.us-east-2.elb.amazonaws.com:443/nice%20ports%2C/Tri%6Eity.txt%2ebak | | 302 Found | |

302 Found

302 Found

302 Found

400 Bad Request

400 Bad Request

400 Bad Request

| |_ |_http-title: Did not follow redirect to https://recvue.okta.com:443/ 389/tcp open ldap | ssl-cert: Subject: commonName=*.ldap.okta.com/organizationName=Okta, Inc./stateOrProvinceName=California/countryName=US | Subject Alternative Name: DNS:*.ldap.okta.com, DNS:ldap.okta.com | Not valid before: 2025-04-02T00:00:00 |_Not valid after: 2026-04-21T23:59:59 |_ssl-date: TLS randomness does not represent time | fingerprint-strings: | LDAPBindReq: | LDAPException(resultCode=53 (unwilling to perform), errorMessage='BindDN is invalid: must be of format 'uid=*,dc=yourOrg,dc=okta,dc=com'', ldapSDKVersion=7.0.2, revision=d3320e659d17d7b2f8ae0ec0a0b436314c49691a) | LDAPSearchReq: |_ secure connection cannot be established. To admin: This service requires TLS. 443/tcp open ssl/http nginx | ssl-cert: Subject: commonName=*.okta.com/organizationName=Okta, Inc./stateOrProvinceName=California/countryName=US | Subject Alternative Name: DNS:*.okta.com, DNS:okta.com | Not valid before: 2025-01-15T00:00:00 |_Not valid after: 2026-02-14T23:59:59 | tls-alpn: | h2 |_ http/1.1 | tls-nextprotoneg: | h2 |_ http/1.1 |_ssl-date: TLS randomness does not represent time |_http-title: recvue_default - Sign In | http-robots.txt: 1 disallowed entry |_/ 636/tcp open ssl/ldap |_ssl-date: TLS randomness does not represent time | ssl-cert: Subject: commonName=*.ldap.okta.com/organizationName=Okta, Inc./stateOrProvinceName=California/countryName=US | Subject Alternative Name: DNS:*.ldap.okta.com, DNS:ldap.okta.com | Not valid before: 2025-04-02T00:00:00 |_Not valid after: 2026-04-21T23:59:59 | fingerprint-strings: | LDAPBindReq: |_ LDAPException(resultCode=53 (unwilling to perform), errorMessage='BindDN is invalid: must be of format 'uid=*,dc=yourOrg,dc=okta,dc=com'', ldapSDKVersion=7.0.2, revision=d3320e659d17d7b2f8ae0ec0a0b436314c49691a) 3 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=7.92%I=7%D=9/14%Time=68C6CA94%P=x86_64-redhat-linux-gnu%r( SF:GetRequest,169,"HTTP/1\.1\x20302\x20Moved\x20Temporarily\r\nServer:\x20 SF:awselb/2\.0\r\nDate:\x20Sun,\x2014\x20Sep\x202025\x2014:00:52\x20GMT\r\ SF:nContent-Type:\x20text/html\r\nContent-Length:\x20110\r\nConnection:\x2 SF:0close\r\nLocation:\x20https://internal-ok6-crtr-tls12-int-alb-15112911 SF:24\.us-east-2\.elb\.amazonaws\.com:443/\r\n\r\n\r\n3 SF:02\x20Found\r\n\r\n

302\x20Found

\r\n\r\n\r\n")%r(HTTPOptions,169,"HTTP/1\.1\x20302 SF:\x20Moved\x20Temporarily\r\nServer:\x20awselb/2\.0\r\nDate:\x20Sun,\x20 SF:14\x20Sep\x202025\x2014:00:53\x20GMT\r\nContent-Type:\x20text/html\r\nC SF:ontent-Length:\x20110\r\nConnection:\x20close\r\nLocation:\x20https://i SF:nternal-ok6-crtr-tls12-int-alb-1511291124\.us-east-2\.elb\.amazonaws\.c SF:om:443/\r\n\r\n\r\n302\x20Found\r\n\r\n
302\x20Found
\r\n\r\n\r\ SF:n")%r(RTSPRequest,7A,"\r\n400\x20Bad\x20Request</tit SF:le></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></center> SF:\r\n</body>\r\n</html>\r\n")%r(X11Probe,110,"HTTP/1\.1\x20400\x20Bad\x2 SF:0Request\r\nServer:\x20awselb/2\.0\r\nDate:\x20Sun,\x2014\x20Sep\x20202 SF:5\x2014:00:53\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x SF:20122\r\nConnection:\x20close\r\n\r\n<html>\r\n<head><title>400\x20Bad\ SF:x20Request\r\n\r\n
400\x20Bad\x20Reques SF:t
\r\n\r\n\r\n")%r(FourOhFourRequest,18C,"HT SF:TP/1\.1\x20302\x20Moved\x20Temporarily\r\nServer:\x20awselb/2\.0\r\nDat SF:e:\x20Sun,\x2014\x20Sep\x202025\x2014:00:53\x20GMT\r\nContent-Type:\x20 SF:text/html\r\nContent-Length:\x20110\r\nConnection:\x20close\r\nLocation SF::\x20https://internal-ok6-crtr-tls12-int-alb-1511291124\.us-east-2\.elb SF:\.amazonaws\.com:443/nice%20ports%2C/Tri%6Eity\.txt%2ebak\r\n\r\n SF:\r\n302\x20Found\r\n\r\n
3 SF:02\x20Found
\r\n\r\n\r\n")%r(RPCCheck,110,"H SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20awselb/2\.0\r\nDate:\x2 SF:0Sun,\x2014\x20Sep\x202025\x2014:00:58\x20GMT\r\nContent-Type:\x20text/ SF:html\r\nContent-Length:\x20122\r\nConnection:\x20close\r\n\r\n\r\ SF:n400\x20Bad\x20Request\r\n\r\n
400\x20Bad\x20Request
\r\n\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port389-TCP:V=7.92%I=7%D=9/14%Time=68C6CA99%P=x86_64-redhat-linux-gnu%r SF:(LDAPSearchReq,5D,"0\[\x02\x01\x07eV\n\x015\x04\0\x04OA\x20secure\x20co SF:nnection\x20cannot\x20be\x20established\.\x20To\x20admin:\x20This\x20se SF:rvice\x20requires\x20TLS\.")%r(LDAPBindReq,E4,"0\x81\xe1\x02\x01\x01a\x SF:81\xdb\n\x015\x04\0\x04\x81\xd3LDAPException\(resultCode=53\x20\(unwill SF:ing\x20to\x20perform\),\x20errorMessage='BindDN\x20is\x20invalid:\x20mu SF:st\x20be\x20of\x20format\x20'uid=\*,dc=yourOrg,dc=okta,dc=com'',\x20lda SF:pSDKVersion=7\.0\.2,\x20revision=d3320e659d17d7b2f8ae0ec0a0b436314c4969 SF:1a\)"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port636-TCP:V=7.92%T=SSL%I=7%D=9/14%Time=68C6CA9F%P=x86_64-redhat-linux SF:-gnu%r(LDAPSearchReq,E,"0\x0c\x02\x01\x07e\x07\n\x012\x04\0\x04\0")%r(L SF:DAPBindReq,E4,"0\x81\xe1\x02\x01\x01a\x81\xdb\n\x015\x04\0\x04\x81\xd3L SF:DAPException\(resultCode=53\x20\(unwilling\x20to\x20perform\),\x20error SF:Message='BindDN\x20is\x20invalid:\x20must\x20be\x20of\x20format\x20'uid SF:=\*,dc=yourOrg,dc=okta,dc=com'',\x20ldapSDKVersion=7\.0\.2,\x20revision SF:=d3320e659d17d7b2f8ae0ec0a0b436314c49691a\)"); Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: phone Running (JUST GUESSING): Google Android 5.X (90%) OS CPE: cpe:/o:google:android:5.0.1 Aggressive OS guesses: Android 5.0.1 (90%) No exact OS matches for host (test conditions non-ideal). Network Distance: 15 hops TRACEROUTE (using port 443/tcp) HOP RTT ADDRESS 1 0.20 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 0.96 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 0.95 ms r2b4.n1.p1401.lax.multacom.net (64.69.46.11) 4 0.62 ms 206.72.211.146.any2ix.coresite.com (206.72.211.146) 5 0.53 ms 52.93.92.44 6 ... 7 8 2.38 ms 52.93.92.27 9 ... 14 15 0.55 ms ae52e19d4a7095f43.awsglobalaccelerator.com (13.248.165.67) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 40.99 seconds