Nmap scan report for appscan.com (13.248.186.113) Host is up (0.0064s latency). Other addresses for appscan.com (not scanned): 76.223.61.160 rDNS record for 13.248.186.113: a0f78cc3e4e3a6a3c.awsglobalaccelerator.com Not shown: 998 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 80/tcp open http awselb/2.0 |_http-title: Did not follow redirect to https://appscan.com:443/ | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 301 Moved Permanently | Server: awselb/2.0 | Date: Sat, 06 Sep 2025 22:56:53 GMT | Content-Type: text/html | Content-Length: 134 | Connection: close | Location: https://proda-hcl-software-com-302303168.us-east-1.elb.amazonaws.com:443/nice%20ports%2C/Tri%6Eity.txt%2ebak | | 301 Moved Permanently | |

301 Moved Permanently

| | | GetRequest, HTTPOptions: | HTTP/1.1 301 Moved Permanently | Server: awselb/2.0 | Date: Sat, 06 Sep 2025 22:56:52 GMT | Content-Type: text/html | Content-Length: 134 | Connection: close | Location: https://proda-hcl-software-com-302303168.us-east-1.elb.amazonaws.com:443/ | | 301 Moved Permanently | |

301 Moved Permanently

| | | RTSPRequest: | | 400 Bad Request | |

400 Bad Request

| | | X11Probe: | HTTP/1.1 400 Bad Request | Server: awselb/2.0 | Date: Sat, 06 Sep 2025 22:56:53 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | | 400 Bad Request | |

400 Bad Request

| |_ |_http-server-header: awselb/2.0 443/tcp open ssl/https awselb/2.0 |_http-server-header: awselb/2.0 |_ssl-date: TLS randomness does not represent time | fingerprint-strings: | GetRequest: | HTTP/1.1 200 OK | Date: Sat, 06 Sep 2025 22:56:59 GMT | Content-Type: text/html; charset=UTF-8 | Connection: close | Referrer-Policy: origin | Expires: Sat, 06 Sep 2025 23:56:59 GMT | Last-Modified: Tue, 29 Jul 2025 15:25:40 GMT | Content-Location: /wps/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zi_QO8nQ0MnQ0C3M3CDAwCHT1cDP19DI0tLE31wwkpiAJKG-AAjgZA_VFgJXATLByDXIAmeLpbBvu6GxmYmEIV4DGjIDfCINNRUREA-aS4rg!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ | Vary: Cookie,User-Agent,Accept-Encoding | Set-Cookie: JSESSIONID=0001YqCJIiZKCVWOmLcku4fwxUA:-17E1JN2; Path=/; HttpOnly | Cache-Control: public, max-age=43200 | X-Frame-Options: SAMEORIGIN | X-XSS-Protection: 1;mode=block | X-Content-Type-Options: nosniff | Referrer-Policy: strict-origin-when-cross-origin | Strict-Transport-Security: max-age=31536000; includeSubDomains; preload | Content-Security-Policy: frame-src http://*.hcl-software.com https://*.hcl-software.co | HTTPOptions: | HTTP/1.1 200 OK | Date: Sat, 06 Sep 2025 22:56:59 GMT | Content-Length: 0 | Connection: close | Referrer-Policy: origin | Allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS | X-Frame-Options: SAMEORIGIN | X-XSS-Protection: 1;mode=block | X-Content-Type-Options: nosniff | Referrer-Policy: strict-origin-when-cross-origin | Strict-Transport-Security: max-age=31536000; includeSubDomains; preload | Content-Security-Policy: frame-src http://*.hcl-software.com https://*.hcl-software.com https://*.hcltechsw.com https://*.googletagmanager.com https://*.youtube.com https://www.youtube-nocookie.com https://hclswaichatbot.eu.bigfixaex.ai https://*.terminus.services https://*.webexperiences.com https://*.vercel.app https://player.cloudinary.com https://*.arcade.software https://*.navattic.com | Permissions-Policy: fullscreen=self, geolocation=self, payment=self | Permissions-Policy: microphone=(*) |_ Access-Co | ssl-cert: Subject: commonName=www.appscan.com | Subject Alternative Name: DNS:www.appscan.com, DNS:appscan.com | Not valid before: 2025-01-25T00:00:00 |_Not valid after: 2026-02-22T23:59:59 |_http-title: Did not follow redirect to https://www.hcl-software.com:443/appscan/ 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=7.92%I=7%D=9/6%Time=68BCBC34%P=x86_64-redhat-linux-gnu%r(G SF:etRequest,177,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20a SF:wselb/2\.0\r\nDate:\x20Sat,\x2006\x20Sep\x202025\x2022:56:52\x20GMT\r\n SF:Content-Type:\x20text/html\r\nContent-Length:\x20134\r\nConnection:\x20 SF:close\r\nLocation:\x20https://proda-hcl-software-com-302303168\.us-east SF:-1\.elb\.amazonaws\.com:443/\r\n\r\n\r\n301\x20Moved SF:\x20Permanently\r\n\r\n

301\x20Moved\x2 SF:0Permanently

\r\n\r\n\r\n")%r(HTTPOptions,17 SF:7,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20awselb/2\.0\r SF:\nDate:\x20Sat,\x2006\x20Sep\x202025\x2022:56:52\x20GMT\r\nContent-Type SF::\x20text/html\r\nContent-Length:\x20134\r\nConnection:\x20close\r\nLoc SF:ation:\x20https://proda-hcl-software-com-302303168\.us-east-1\.elb\.ama SF:zonaws\.com:443/\r\n\r\n\r\n301\x20Moved\x20Permanen SF:tly\r\n\r\n

301\x20Moved\x20Permanently SF:

\r\n\r\n\r\n")%r(RTSPRequest,7A,"\r\n SF:400\x20Bad\x20Request\r\n\r\n
SF:

400\x20Bad\x20Request

\r\n\r\n\r\n")%r(X SF:11Probe,110,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20awselb/2\ SF:.0\r\nDate:\x20Sat,\x2006\x20Sep\x202025\x2022:56:53\x20GMT\r\nContent- SF:Type:\x20text/html\r\nContent-Length:\x20122\r\nConnection:\x20close\r\ SF:n\r\n\r\n400\x20Bad\x20Request\r\n\r\n

400\x20Bad\x20Request

\r\n\r\n\r\n")%r(FourOhFourRequest,19A,"HTTP/1\.1\x20301\x20Moved\x20Perma SF:nently\r\nServer:\x20awselb/2\.0\r\nDate:\x20Sat,\x2006\x20Sep\x202025\ SF:x2022:56:53\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20 SF:134\r\nConnection:\x20close\r\nLocation:\x20https://proda-hcl-software- SF:com-302303168\.us-east-1\.elb\.amazonaws\.com:443/nice%20ports%2C/Tri%6 SF:Eity\.txt%2ebak\r\n\r\n\r\n301\x20Moved\x20Permanent SF:ly\r\n\r\n

301\x20Moved\x20Permanently< SF:/h1>

\r\n\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=7.92%T=SSL%I=7%D=9/6%Time=68BCBC3B%P=x86_64-redhat-linux- SF:gnu%r(GetRequest,859F,"HTTP/1\.1\x20200\x20OK\r\nDate:\x20Sat,\x2006\x2 SF:0Sep\x202025\x2022:56:59\x20GMT\r\nContent-Type:\x20text/html;\x20chars SF:et=UTF-8\r\nConnection:\x20close\r\nReferrer-Policy:\x20origin\r\nExpir SF:es:\x20Sat,\x2006\x20Sep\x202025\x2023:56:59\x20GMT\r\nLast-Modified:\x SF:20Tue,\x2029\x20Jul\x202025\x2015:25:40\x20GMT\r\nContent-Location:\x20 SF:/wps/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zi_QO8nQ0MnQ0C3 SF:M3CDAwCHT1cDP19DI0tLE31wwkpiAJKG-AAjgZA_VFgJXATLByDXIAmeLpbBvu6GxmYmEIV SF:4DGjIDfCINNRUREA-aS4rg!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/\r\nVary:\x20Cookie SF:,User-Agent,Accept-Encoding\r\nSet-Cookie:\x20JSESSIONID=0001YqCJIiZKCV SF:WOmLcku4fwxUA:-17E1JN2;\x20Path=/;\x20HttpOnly\r\nCache-Control:\x20pub SF:lic,\x20max-age=43200\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-XSS-Protec SF:tion:\x201;mode=block\r\nX-Content-Type-Options:\x20nosniff\r\nReferrer SF:-Policy:\x20strict-origin-when-cross-origin\r\nStrict-Transport-Securit SF:y:\x20max-age=31536000;\x20includeSubDomains;\x20preload\r\nContent-Sec SF:urity-Policy:\x20frame-src\x20http://\*\.hcl-software\.com\x20\x20https SF:://\*\.hcl-software\.co")%r(HTTPOptions,41E,"HTTP/1\.1\x20200\x20OK\r\n SF:Date:\x20Sat,\x2006\x20Sep\x202025\x2022:56:59\x20GMT\r\nContent-Length SF::\x200\r\nConnection:\x20close\r\nReferrer-Policy:\x20origin\r\nAllow:\ SF:x20GET,\x20HEAD,\x20POST,\x20PUT,\x20DELETE,\x20TRACE,\x20OPTIONS\r\nX- SF:Frame-Options:\x20SAMEORIGIN\r\nX-XSS-Protection:\x201;mode=block\r\nX- SF:Content-Type-Options:\x20nosniff\r\nReferrer-Policy:\x20strict-origin-w SF:hen-cross-origin\r\nStrict-Transport-Security:\x20max-age=31536000;\x20 SF:includeSubDomains;\x20preload\r\nContent-Security-Policy:\x20frame-src\ SF:x20http://\*\.hcl-software\.com\x20\x20https://\*\.hcl-software\.com\x2 SF:0https://\*\.hcltechsw\.com\x20https://\*\.googletagmanager\.com\x20htt SF:ps://\*\.youtube\.com\x20\x20https://www\.youtube-nocookie\.com\x20\x20 SF:https://hclswaichatbot\.eu\.bigfixaex\.ai\x20https://\*\.terminus\.serv SF:ices\x20https://\*\.webexperiences\.com\x20https://\*\.vercel\.app\x20\ SF:x20https://player\.cloudinary\.com\x20https://\*\.arcade\.software\x20h SF:ttps://\*\.navattic\.com\r\nPermissions-Policy:\x20fullscreen=self,\x20 SF:geolocation=self,\x20payment=self\r\nPermissions-Policy:\x20microphone= SF:\(\*\)\r\nAccess-Co"); Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: phone Running (JUST GUESSING): Google Android 5.X (90%) OS CPE: cpe:/o:google:android:5.0.1 Aggressive OS guesses: Android 5.0.1 (90%) No exact OS matches for host (test conditions non-ideal). Network Distance: 15 hops TRACEROUTE (using port 443/tcp) HOP RTT ADDRESS 1 0.20 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 1.95 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 0.77 ms r2b4.n1.p1401.lax.multacom.net (64.69.46.11) 4 1.30 ms 206.72.211.146.any2ix.coresite.com (206.72.211.146) 5 12.91 ms 52.93.92.40 6 ... 7 8 0.93 ms 52.93.92.23 9 ... 14 15 45.39 ms a0f78cc3e4e3a6a3c.awsglobalaccelerator.com (13.248.186.113) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 44.84 seconds