Nmap scan report for consumer-prd.plusgrade.com (98.85.47.3) Host is up (0.057s latency). Other addresses for consumer-prd.plusgrade.com (not scanned): 52.22.0.201 rDNS record for 98.85.47.3: ec2-98-85-47-3.compute-1.amazonaws.com Not shown: 998 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 80/tcp open http | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 403 Forbidden | Date: Sat, 13 Sep 2025 04:02:53 GMT | Content-Type: text/html | Content-Length: 118 | Connection: close | | 403 Forbidden | |

403 Forbidden

| | | GetRequest: | HTTP/1.1 301 Moved Permanently | Date: Sat, 13 Sep 2025 04:02:51 GMT | Content-Type: text/html | Content-Length: 134 | Connection: close | Location: https://prd-ecs-consumer-gateway-pub-1045657394.us-east-1.elb.amazonaws.com:443/ | | 301 Moved Permanently | |

301 Moved Permanently

| | | HTTPOptions: | HTTP/1.1 301 Moved Permanently | Date: Sat, 13 Sep 2025 04:02:52 GMT | Content-Type: text/html | Content-Length: 134 | Connection: close | Location: https://prd-ecs-consumer-gateway-pub-1045657394.us-east-1.elb.amazonaws.com:443/ | | 301 Moved Permanently | |

301 Moved Permanently

| | | RPCCheck: | HTTP/1.1 400 Bad Request | Date: Sat, 13 Sep 2025 04:02:58 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | | 400 Bad Request | |

400 Bad Request

| | | RTSPRequest: | | 400 Bad Request | |

400 Bad Request

| | | X11Probe: | HTTP/1.1 400 Bad Request | Date: Sat, 13 Sep 2025 04:02:53 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | | 400 Bad Request | |

400 Bad Request

| |_ |_http-title: 403 Forbidden 443/tcp open ssl/https | ssl-cert: Subject: commonName=*.plusgrade.com | Subject Alternative Name: DNS:*.plusgrade.com | Not valid before: 2024-11-19T00:00:00 |_Not valid after: 2025-12-18T23:59:59 |_ssl-date: TLS randomness does not represent time |_http-title: 403 Forbidden | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 403 Forbidden | Date: Sat, 13 Sep 2025 04:02:58 GMT | Content-Type: text/html | Content-Length: 118 | Connection: close | | 403 Forbidden | |

403 Forbidden

| | | GetRequest: | HTTP/1.1 302 Moved Temporarily | Date: Sat, 13 Sep 2025 04:02:57 GMT | Content-Type: text/html | Content-Length: 110 | Connection: close | Set-Cookie: AWSALB=rmSvMBJZlDh5bUIqDbWyewPuquH9WSbh6xczgLCCvKZQoIlggi5Q9ihyYgfGubzqSWoiBP/qlDV2ORBGdargzBirYzuNsKk223qrujK0uA4DLoBx8lNYMtIW1Lfu; Expires=Sat, 20 Sep 2025 04:02:57 GMT; Path=/ | Set-Cookie: AWSALBCORS=rmSvMBJZlDh5bUIqDbWyewPuquH9WSbh6xczgLCCvKZQoIlggi5Q9ihyYgfGubzqSWoiBP/qlDV2ORBGdargzBirYzuNsKk223qrujK0uA4DLoBx8lNYMtIW1Lfu; Expires=Sat, 20 Sep 2025 04:02:57 GMT; Path=/; SameSite=None; Secure | location: /offer | | 302 Found | |

302 Found

| | | HTTPOptions: | HTTP/1.1 302 Moved Temporarily | Date: Sat, 13 Sep 2025 04:02:58 GMT | Content-Type: text/html | Content-Length: 110 | Connection: close | Set-Cookie: AWSALB=2F1mcmAPUStIhiq08i5QnoeO59F7EZnga9jFRemJ/1WLETN5wvJyfNXjfB3JNHLiufJu9Ohp/lnBtOhUJayz5kK4IOWKYTSfIVi48vZiE/F7A8dGKS02RpIsUoSL; Expires=Sat, 20 Sep 2025 04:02:58 GMT; Path=/ | Set-Cookie: AWSALBCORS=2F1mcmAPUStIhiq08i5QnoeO59F7EZnga9jFRemJ/1WLETN5wvJyfNXjfB3JNHLiufJu9Ohp/lnBtOhUJayz5kK4IOWKYTSfIVi48vZiE/F7A8dGKS02RpIsUoSL; Expires=Sat, 20 Sep 2025 04:02:58 GMT; Path=/; SameSite=None; Secure | location: /offer | | 302 Found | |

302 Found

| | | tor-versions: | HTTP/1.1 400 Bad Request | Date: Sat, 13 Sep 2025 04:02:58 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | | 400 Bad Request | |

400 Bad Request

| |_ 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=7.92%I=7%D=9/12%Time=68C4ECEB%P=x86_64-redhat-linux-gnu%r( SF:GetRequest,16A,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nDate:\x20Sa SF:t,\x2013\x20Sep\x202025\x2004:02:51\x20GMT\r\nContent-Type:\x20text/htm SF:l\r\nContent-Length:\x20134\r\nConnection:\x20close\r\nLocation:\x20htt SF:ps://prd-ecs-consumer-gateway-pub-1045657394\.us-east-1\.elb\.amazonaws SF:\.com:443/\r\n\r\n\r\n301\x20Moved\x20Permanently</t SF:itle></head>\r\n<body>\r\n<center><h1>301\x20Moved\x20Permanently</h1>< SF:/center>\r\n</body>\r\n</html>\r\n")%r(HTTPOptions,16A,"HTTP/1\.1\x2030 SF:1\x20Moved\x20Permanently\r\nDate:\x20Sat,\x2013\x20Sep\x202025\x2004:0 SF:2:52\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20134\r\n SF:Connection:\x20close\r\nLocation:\x20https://prd-ecs-consumer-gateway-p SF:ub-1045657394\.us-east-1\.elb\.amazonaws\.com:443/\r\n\r\n<html>\r\n<he SF:ad><title>301\x20Moved\x20Permanently\r\n\r\n

301\x20Moved\x20Permanently

\r\n\r\n\ SF:r\n")%r(RTSPRequest,7A,"\r\n400\x20Bad\x20Request</t SF:itle></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></cente SF:r>\r\n</body>\r\n</html>\r\n")%r(X11Probe,FC,"HTTP/1\.1\x20400\x20Bad\x SF:20Request\r\nDate:\x20Sat,\x2013\x20Sep\x202025\x2004:02:53\x20GMT\r\nC SF:ontent-Type:\x20text/html\r\nContent-Length:\x20122\r\nConnection:\x20c SF:lose\r\n\r\n<html>\r\n<head><title>400\x20Bad\x20Request SF:\r\n\r\n

400\x20Bad\x20Request

\r\n\r\n\r\n")%r(FourOhFourRequest,F6,"HTTP/1\.1\x20403\x20Forbidde SF:n\r\nDate:\x20Sat,\x2013\x20Sep\x202025\x2004:02:53\x20GMT\r\nContent-T SF:ype:\x20text/html\r\nContent-Length:\x20118\r\nConnection:\x20close\r\n SF:\r\n\r\n403\x20Forbidden\r\n\r\ SF:n

403\x20Forbidden

\r\n\r\n\r\n") SF:%r(RPCCheck,FC,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Sat,\x20 SF:13\x20Sep\x202025\x2004:02:58\x20GMT\r\nContent-Type:\x20text/html\r\nC SF:ontent-Length:\x20122\r\nConnection:\x20close\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n

400\ SF:x20Bad\x20Request

\r\n\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=7.92%T=SSL%I=7%D=9/12%Time=68C4ECF1%P=x86_64-redhat-linux SF:-gnu%r(GetRequest,2A3,"HTTP/1\.1\x20302\x20Moved\x20Temporarily\r\nDate SF::\x20Sat,\x2013\x20Sep\x202025\x2004:02:57\x20GMT\r\nContent-Type:\x20t SF:ext/html\r\nContent-Length:\x20110\r\nConnection:\x20close\r\nSet-Cooki SF:e:\x20AWSALB=rmSvMBJZlDh5bUIqDbWyewPuquH9WSbh6xczgLCCvKZQoIlggi5Q9ihyYg SF:fGubzqSWoiBP/qlDV2ORBGdargzBirYzuNsKk223qrujK0uA4DLoBx8lNYMtIW1Lfu;\x20 SF:Expires=Sat,\x2020\x20Sep\x202025\x2004:02:57\x20GMT;\x20Path=/\r\nSet- SF:Cookie:\x20AWSALBCORS=rmSvMBJZlDh5bUIqDbWyewPuquH9WSbh6xczgLCCvKZQoIlgg SF:i5Q9ihyYgfGubzqSWoiBP/qlDV2ORBGdargzBirYzuNsKk223qrujK0uA4DLoBx8lNYMtIW SF:1Lfu;\x20Expires=Sat,\x2020\x20Sep\x202025\x2004:02:57\x20GMT;\x20Path= SF:/;\x20SameSite=None;\x20Secure\r\nlocation:\x20/offer\r\n\r\n\r\n SF:302\x20Found\r\n\r\n

302\x SF:20Found

\r\n\r\n\r\n")%r(HTTPOptions,2A3,"HT SF:TP/1\.1\x20302\x20Moved\x20Temporarily\r\nDate:\x20Sat,\x2013\x20Sep\x2 SF:02025\x2004:02:58\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Lengt SF:h:\x20110\r\nConnection:\x20close\r\nSet-Cookie:\x20AWSALB=2F1mcmAPUStI SF:hiq08i5QnoeO59F7EZnga9jFRemJ/1WLETN5wvJyfNXjfB3JNHLiufJu9Ohp/lnBtOhUJay SF:z5kK4IOWKYTSfIVi48vZiE/F7A8dGKS02RpIsUoSL;\x20Expires=Sat,\x2020\x20Sep SF:\x202025\x2004:02:58\x20GMT;\x20Path=/\r\nSet-Cookie:\x20AWSALBCORS=2F1 SF:mcmAPUStIhiq08i5QnoeO59F7EZnga9jFRemJ/1WLETN5wvJyfNXjfB3JNHLiufJu9Ohp/l SF:nBtOhUJayz5kK4IOWKYTSfIVi48vZiE/F7A8dGKS02RpIsUoSL;\x20Expires=Sat,\x20 SF:20\x20Sep\x202025\x2004:02:58\x20GMT;\x20Path=/;\x20SameSite=None;\x20S SF:ecure\r\nlocation:\x20/offer\r\n\r\n\r\n302\x20Found SF:\r\n\r\n

302\x20Found

\r\n SF:\r\n\r\n")%r(FourOhFourRequest,F6,"HTTP/1\.1\x20403\x20Fo SF:rbidden\r\nDate:\x20Sat,\x2013\x20Sep\x202025\x2004:02:58\x20GMT\r\nCon SF:tent-Type:\x20text/html\r\nContent-Length:\x20118\r\nConnection:\x20clo SF:se\r\n\r\n\r\n403\x20Forbidden\r\n\r\n

403\x20Forbidden

\r\n\r\n SF:\r\n")%r(tor-versions,FC,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x SF:20Sat,\x2013\x20Sep\x202025\x2004:02:58\x20GMT\r\nContent-Type:\x20text SF:/html\r\nContent-Length:\x20122\r\nConnection:\x20close\r\n\r\n\r SF:\n400\x20Bad\x20Request\r\n\r\n

400\x20Bad\x20Request

\r\n\r\n\r\n"); Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (90%) OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4 Aggressive OS guesses: Linux 2.6.32 (90%), Linux 3.2 - 4.9 (90%), Linux 2.6.32 - 3.10 (89%), Linux 2.6.32 - 3.13 (89%), Linux 3.10 - 3.13 (88%) No exact OS matches for host (test conditions non-ideal). Network Distance: 14 hops TRACEROUTE (using port 443/tcp) HOP RTT ADDRESS 1 0.20 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 0.61 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 0.62 ms r1b4.n1p1400.lax.multacom.net (64.69.46.9) 4 ... 5 10.87 ms be2931.ccr31.phx01.atlas.cogentco.com (154.54.44.85) 6 19.85 ms be5471.ccr21.elp02.atlas.cogentco.com (154.54.166.57) 7 31.88 ms be3821.ccr31.dfw01.atlas.cogentco.com (154.54.165.25) 8 31.04 ms be2763.ccr41.dfw03.atlas.cogentco.com (154.54.28.74) 9 ... 13 14 57.21 ms ec2-98-85-47-3.compute-1.amazonaws.com (98.85.47.3) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 41.48 seconds