Nmap scan report for workflow-lite.platform.intuit.com (52.26.254.193) Host is up (0.029s latency). Other addresses for workflow-lite.platform.intuit.com (not scanned): 35.81.148.48 54.149.52.170 54.212.211.93 44.239.221.9 44.240.38.104 rDNS record for 52.26.254.193: ec2-52-26-254-193.us-west-2.compute.amazonaws.com Not shown: 998 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 80/tcp open http awselb/2.0 | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 301 Moved Permanently | Server: awselb/2.0 | Date: Tue, 09 Sep 2025 08:22:53 GMT | Content-Type: text/html | Content-Length: 134 | Connection: close | Location: https://apigw-usw2-prd-cx03-468011519.us-west-2.elb.amazonaws.com:443/nice%20ports%2C/Tri%6Eity.txt%2ebak | | 301 Moved Permanently | |

301 Moved Permanently

| | | GetRequest, HTTPOptions: | HTTP/1.1 301 Moved Permanently | Server: awselb/2.0 | Date: Tue, 09 Sep 2025 08:22:53 GMT | Content-Type: text/html | Content-Length: 134 | Connection: close | Location: https://apigw-usw2-prd-cx03-468011519.us-west-2.elb.amazonaws.com:443/ | | 301 Moved Permanently | |

301 Moved Permanently

| | | RTSPRequest: | | 400 Bad Request | |

400 Bad Request

| | | X11Probe: | HTTP/1.1 400 Bad Request | Server: awselb/2.0 | Date: Tue, 09 Sep 2025 08:22:53 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | | 400 Bad Request | |

400 Bad Request

| |_ |_http-title: Did not follow redirect to https://workflow-lite.platform.intuit.com:443/ |_http-server-header: awselb/2.0 443/tcp open ssl/http-proxy (bad gateway) | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 502 Bad Gateway | Date: Tue, 09 Sep 2025 08:22:59 GMT | Content-Type: text/plain | Content-Length: 0 | Connection: close | x-envoy-upstream-service-time: 0 | strict-transport-security: max-age=31536000 | intuit_tid: 1-68bfe3e3-2d7fe47f6fbc67c375215600 | x-request-id: 1-68bfe3e3-2d7fe47f6fbc67c375215600 | server: istio-envoy | GetRequest: | HTTP/1.1 502 Bad Gateway | Date: Tue, 09 Sep 2025 08:22:59 GMT | Content-Type: text/plain | Content-Length: 0 | Connection: close | x-envoy-upstream-service-time: 0 | strict-transport-security: max-age=31536000 | intuit_tid: 1-68bfe3e3-4b559cf84a061f58169717de | x-request-id: 1-68bfe3e3-4b559cf84a061f58169717de | server: istio-envoy | HTTPOptions: | HTTP/1.1 502 Bad Gateway | Date: Tue, 09 Sep 2025 08:22:59 GMT | Content-Type: text/plain | Content-Length: 0 | Connection: close | x-envoy-upstream-service-time: 0 | strict-transport-security: max-age=31536000 | intuit_tid: 1-68bfe3e3-26de8b8978b5b6cd18645b78 | x-request-id: 1-68bfe3e3-26de8b8978b5b6cd18645b78 | server: istio-envoy | Help, SSLSessionReq: | HTTP/1.1 400 Bad Request | Server: awselb/2.0 | Date: Tue, 09 Sep 2025 08:23:05 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | | 400 Bad Request | |

400 Bad Request

| | | RTSPRequest: | | 400 Bad Request | |

400 Bad Request

| |_ |_ssl-date: TLS randomness does not represent time |_http-title: Site doesn't have a title (text/plain). | tls-nextprotoneg: | h2 |_ http/1.1 | http-server-header: | awselb/2.0 |_ istio-envoy | tls-alpn: | h2 |_ http/1.1 | ssl-cert: Subject: commonName=*.intuit.com/organizationName=INTUIT INC./stateOrProvinceName=California/countryName=US | Subject Alternative Name: DNS:*.intuit.com, DNS:*.sbfinance.intuit.com, DNS:*.iep.intuit.com, DNS:*.prd.platform.intuit.com, DNS:*.api.intuit.ae, DNS:*.api.intuit.com.au, DNS:*.prd.api.a.intuit.com, DNS:*.api.intuit.mx, DNS:*.sbfinance.stage.intuit.com, DNS:*.intuit.ca, DNS:*.workforce.intuit.com, DNS:*.appfabric.intuit.com, DNS:*.platform.intuit.ca, DNS:*.experimentation.intuit.com, DNS:*.stgl.intuit.com, DNS:*.finance.intuit.com, DNS:*.app.intuit.com, DNS:*.mint.intuit.com, DNS:*.api.intuit.com, DNS:*.contributedreports.intuit.com, DNS:*.qbo.intuit.com, DNS:*.prf.api.a.intuit.com, DNS:*.api.intuit.fr, DNS:*.payments.intuit.com, DNS:*.qa.api.a.intuit.com, DNS:help.mint.com, DNS:*.turbotaxonline.intuit.com, DNS:*.banking.intuit.com, DNS:*.api.intuit.sg, DNS:*.turbotax.intuit.com, DNS:*.quickbooks.intuit.com, DNS:*.e2e.api.a.intuit.com, DNS:*.api.intuit.net, DNS:*.api.intuit.ca, DNS:*.accountant.intuit.com, DNS:*.tax.intuit.com, DNS:*.hosting.intuit.com, DNS:*.a.intuit.com, DNS:*.camps.intuit.com, DNS:*.msg.intuit.com, DNS:*.prod.location.a.intuit.com, DNS:*.aws.api.intuit.com, DNS:*.api.intuit.co.za, DNS:*.api.intuit.ph, DNS:*.statefillableforms.com, DNS:*.api.quickbooks.com.br, DNS:*.business.intuit.com, DNS:*.api.intuit.hk, DNS:*.platform.intuit.com, DNS:*.qb.intuit.com, DNS:*.mint.com, DNS:*.api.quickbooks.co.uk, DNS:*.location.intuit.com, DNS:*.quickbooks.com | Not valid before: 2025-03-21T00:00:00 |_Not valid after: 2026-04-21T23:59:59 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=7.92%I=7%D=9/9%Time=68BFE3DC%P=x86_64-redhat-linux-gnu%r(G SF:etRequest,174,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20a SF:wselb/2\.0\r\nDate:\x20Tue,\x2009\x20Sep\x202025\x2008:22:53\x20GMT\r\n SF:Content-Type:\x20text/html\r\nContent-Length:\x20134\r\nConnection:\x20 SF:close\r\nLocation:\x20https://apigw-usw2-prd-cx03-468011519\.us-west-2\ SF:.elb\.amazonaws\.com:443/\r\n\r\n\r\n301\x20Moved\x2 SF:0Permanently\r\n\r\n

301\x20Moved\x20Pe SF:rmanently

\r\n\r\n\r\n")%r(HTTPOptions,174," SF:HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20awselb/2\.0\r\nD SF:ate:\x20Tue,\x2009\x20Sep\x202025\x2008:22:53\x20GMT\r\nContent-Type:\x SF:20text/html\r\nContent-Length:\x20134\r\nConnection:\x20close\r\nLocati SF:on:\x20https://apigw-usw2-prd-cx03-468011519\.us-west-2\.elb\.amazonaws SF:\.com:443/\r\n\r\n\r\n301\x20Moved\x20Permanently</t SF:itle></head>\r\n<body>\r\n<center><h1>301\x20Moved\x20Permanently</h1>< SF:/center>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,7A,"<html>\r\n<head> SF:<title>400\x20Bad\x20Request\r\n\r\n

40 SF:0\x20Bad\x20Request

\r\n\r\n\r\n")%r(X11Prob SF:e,110,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20awselb/2\.0\r\n SF:Date:\x20Tue,\x2009\x20Sep\x202025\x2008:22:53\x20GMT\r\nContent-Type:\ SF:x20text/html\r\nContent-Length:\x20122\r\nConnection:\x20close\r\n\r\n< SF:html>\r\n400\x20Bad\x20Request\r\n\r\ SF:n

400\x20Bad\x20Request

\r\n\r\n\ SF:r\n")%r(FourOhFourRequest,197,"HTTP/1\.1\x20301\x20Moved\x20Permanently SF:\r\nServer:\x20awselb/2\.0\r\nDate:\x20Tue,\x2009\x20Sep\x202025\x2008: SF:22:53\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20134\r\ SF:nConnection:\x20close\r\nLocation:\x20https://apigw-usw2-prd-cx03-46801 SF:1519\.us-west-2\.elb\.amazonaws\.com:443/nice%20ports%2C/Tri%6Eity\.txt SF:%2ebak\r\n\r\n\r\n301\x20Moved\x20Permanently\r\n\r\n

301\x20Moved\x20Permanently

\r\n\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=7.92%T=SSL%I=7%D=9/9%Time=68BFE3E2%P=x86_64-redhat-linux- SF:gnu%r(GetRequest,149,"HTTP/1\.1\x20502\x20Bad\x20Gateway\r\nDate:\x20Tu SF:e,\x2009\x20Sep\x202025\x2008:22:59\x20GMT\r\nContent-Type:\x20text/pla SF:in\r\nContent-Length:\x200\r\nConnection:\x20close\r\nx-envoy-upstream- SF:service-time:\x200\r\nstrict-transport-security:\x20max-age=31536000\r\ SF:nintuit_tid:\x201-68bfe3e3-4b559cf84a061f58169717de\r\nx-request-id:\x2 SF:01-68bfe3e3-4b559cf84a061f58169717de\r\nserver:\x20istio-envoy\r\n\r\n" SF:)%r(HTTPOptions,149,"HTTP/1\.1\x20502\x20Bad\x20Gateway\r\nDate:\x20Tue SF:,\x2009\x20Sep\x202025\x2008:22:59\x20GMT\r\nContent-Type:\x20text/plai SF:n\r\nContent-Length:\x200\r\nConnection:\x20close\r\nx-envoy-upstream-s SF:ervice-time:\x200\r\nstrict-transport-security:\x20max-age=31536000\r\n SF:intuit_tid:\x201-68bfe3e3-26de8b8978b5b6cd18645b78\r\nx-request-id:\x20 SF:1-68bfe3e3-26de8b8978b5b6cd18645b78\r\nserver:\x20istio-envoy\r\n\r\n") SF:%r(FourOhFourRequest,149,"HTTP/1\.1\x20502\x20Bad\x20Gateway\r\nDate:\x SF:20Tue,\x2009\x20Sep\x202025\x2008:22:59\x20GMT\r\nContent-Type:\x20text SF:/plain\r\nContent-Length:\x200\r\nConnection:\x20close\r\nx-envoy-upstr SF:eam-service-time:\x200\r\nstrict-transport-security:\x20max-age=3153600 SF:0\r\nintuit_tid:\x201-68bfe3e3-2d7fe47f6fbc67c375215600\r\nx-request-id SF::\x201-68bfe3e3-2d7fe47f6fbc67c375215600\r\nserver:\x20istio-envoy\r\n\ SF:r\n")%r(RTSPRequest,7A,"\r\n400\x20Bad\x20Request</t SF:itle></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></cente SF:r>\r\n</body>\r\n</html>\r\n")%r(Help,110,"HTTP/1\.1\x20400\x20Bad\x20R SF:equest\r\nServer:\x20awselb/2\.0\r\nDate:\x20Tue,\x2009\x20Sep\x202025\ SF:x2008:23:05\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20 SF:122\r\nConnection:\x20close\r\n\r\n<html>\r\n<head><title>400\x20Bad\x2 SF:0Request\r\n\r\n

400\x20Bad\x20Request< SF:/h1>

\r\n\r\n\r\n")%r(SSLSessionReq,110,"HTTP/1\. SF:1\x20400\x20Bad\x20Request\r\nServer:\x20awselb/2\.0\r\nDate:\x20Tue,\x SF:2009\x20Sep\x202025\x2008:23:05\x20GMT\r\nContent-Type:\x20text/html\r\ SF:nContent-Length:\x20122\r\nConnection:\x20close\r\n\r\n\r\n SF:400\x20Bad\x20Request\r\n\r\n

40 SF:0\x20Bad\x20Request

\r\n\r\n\r\n"); Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (90%) OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4 Aggressive OS guesses: Linux 2.6.32 (90%), Linux 3.2 - 4.9 (90%), Linux 2.6.32 - 3.10 (89%), Linux 2.6.32 - 3.13 (89%), Linux 3.10 - 3.13 (88%) No exact OS matches for host (test conditions non-ideal). Network Distance: 11 hops TRACEROUTE (using port 80/tcp) HOP RTT ADDRESS 1 0.19 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 0.69 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 0.62 ms r2b4.n1.p1401.lax.multacom.net (64.69.46.11) 4 0.84 ms 206.72.211.146.any2ix.coresite.com (206.72.211.146) 5 ... 10 11 28.78 ms ec2-52-26-254-193.us-west-2.compute.amazonaws.com (52.26.254.193) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 33.15 seconds