Nmap scan report for cetera.com (13.248.206.29) Host is up (0.0013s latency). Other addresses for cetera.com (not scanned): 76.223.90.250 rDNS record for 13.248.206.29: aabb0e83425307299.awsglobalaccelerator.com Not shown: 998 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 80/tcp open http awselb/2.0 |_http-server-header: awselb/2.0 | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 301 Moved Permanently | Server: awselb/2.0 | Date: Fri, 29 Aug 2025 17:44:51 GMT | Content-Type: text/html | Content-Length: 134 | Connection: close | Location: https://cetera-com-prod-847646633.us-west-2.elb.amazonaws.com:443/nice%20ports%2C/Tri%6Eity.txt%2ebak | | 301 Moved Permanently | |

301 Moved Permanently

| | | GetRequest, HTTPOptions: | HTTP/1.1 301 Moved Permanently | Server: awselb/2.0 | Date: Fri, 29 Aug 2025 17:44:51 GMT | Content-Type: text/html | Content-Length: 134 | Connection: close | Location: https://cetera-com-prod-847646633.us-west-2.elb.amazonaws.com:443/ | | 301 Moved Permanently | |

301 Moved Permanently

| | | RPCCheck: | HTTP/1.1 400 Bad Request | Server: awselb/2.0 | Date: Fri, 29 Aug 2025 17:44:56 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | | 400 Bad Request | |

400 Bad Request

| | | RTSPRequest: | | 400 Bad Request | |

400 Bad Request

| | | X11Probe: | HTTP/1.1 400 Bad Request | Server: awselb/2.0 | Date: Fri, 29 Aug 2025 17:44:51 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | | 400 Bad Request | |

400 Bad Request

| |_ |_http-title: Did not follow redirect to https://cetera.com:443/ 443/tcp open ssl/http Apache httpd |_http-generator: Drupal 10 (https://www.drupal.org) |_ssl-date: TLS randomness does not represent time | tls-nextprotoneg: | h2 |_ http/1.1 | tls-alpn: | h2 |_ http/1.1 | ssl-cert: Subject: commonName=cetera.com/organizationName=Cetera Financial Group, Inc/stateOrProvinceName=California/countryName=US | Subject Alternative Name: DNS:cetera.com, DNS:www.cetera.com | Not valid before: 2025-08-20T00:00:00 |_Not valid after: 2026-08-20T23:59:59 |_http-title: Cetera Financial Group | Home | Cetera | http-methods: |_ Potentially risky methods: DELETE PATCH |_http-server-header: Apache | http-robots.txt: 54 disallowed entries (15 shown) | /core/ /profiles/ /includes/ /misc/ /modules/ /scripts/ | /themes/ /README.txt /web.config /CHANGELOG.txt /cron.php |_/install.php /update.php /xmlrpc.php /README.md 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service : SF-Port80-TCP:V=7.92%I=7%D=8/29%Time=68B1E713%P=x86_64-redhat-linux-gnu%r( SF:GetRequest,170,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20 SF:awselb/2\.0\r\nDate:\x20Fri,\x2029\x20Aug\x202025\x2017:44:51\x20GMT\r\ SF:nContent-Type:\x20text/html\r\nContent-Length:\x20134\r\nConnection:\x2 SF:0close\r\nLocation:\x20https://cetera-com-prod-847646633\.us-west-2\.el SF:b\.amazonaws\.com:443/\r\n\r\n\r\n301\x20Moved\x20Pe SF:rmanently\r\n\r\n

301\x20Moved\x20Perma SF:nently

\r\n\r\n\r\n")%r(HTTPOptions,170,"HTT SF:P/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20awselb/2\.0\r\nDate SF::\x20Fri,\x2029\x20Aug\x202025\x2017:44:51\x20GMT\r\nContent-Type:\x20t SF:ext/html\r\nContent-Length:\x20134\r\nConnection:\x20close\r\nLocation: SF:\x20https://cetera-com-prod-847646633\.us-west-2\.elb\.amazonaws\.com:4 SF:43/\r\n\r\n\r\n301\x20Moved\x20Permanently\r\n\r\n

301\x20Moved\x20Permanently

\r\n\r\n\r\n")%r(RTSPRequest,7A,"\r\n SF:400\x20Bad\x20Request\r\n\r\n

400\x20Ba SF:d\x20Request

\r\n\r\n\r\n")%r(X11Probe,110," SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20awselb/2\.0\r\nDate:\x SF:20Fri,\x2029\x20Aug\x202025\x2017:44:51\x20GMT\r\nContent-Type:\x20text SF:/html\r\nContent-Length:\x20122\r\nConnection:\x20close\r\n\r\n\r SF:\n400\x20Bad\x20Request\r\n\r\n

400\x20Bad\x20Request

\r\n\r\n\r\n")%r SF:(FourOhFourRequest,193,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nSer SF:ver:\x20awselb/2\.0\r\nDate:\x20Fri,\x2029\x20Aug\x202025\x2017:44:51\x SF:20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20134\r\nConnec SF:tion:\x20close\r\nLocation:\x20https://cetera-com-prod-847646633\.us-we SF:st-2\.elb\.amazonaws\.com:443/nice%20ports%2C/Tri%6Eity\.txt%2ebak\r\n\ SF:r\n\r\n301\x20Moved\x20Permanently\r\ SF:n\r\n

301\x20Moved\x20Permanently

\r\n\r\n\r\n")%r(RPCCheck,110,"HTTP/1\.1\x20400\x20Bad\x20Reques SF:t\r\nServer:\x20awselb/2\.0\r\nDate:\x20Fri,\x2029\x20Aug\x202025\x2017 SF::44:56\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20122\r SF:\nConnection:\x20close\r\n\r\n\r\n400\x20Bad\x20Requ SF:est\r\n\r\n

400\x20Bad\x20Request

< SF:/center>\r\n\r\n\r\n"); Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: phone Running (JUST GUESSING): Google Android 5.X (90%) OS CPE: cpe:/o:google:android:5.0.1 Aggressive OS guesses: Android 5.0.1 (90%) No exact OS matches for host (test conditions non-ideal). Network Distance: 15 hops TRACEROUTE (using port 443/tcp) HOP RTT ADDRESS 1 0.20 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 0.59 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 1.03 ms r2b4.n1.p1401.lax.multacom.net (64.69.46.11) 4 2.64 ms 206.72.211.146.any2ix.coresite.com (206.72.211.146) 5 1.18 ms 52.93.92.40 6 ... 7 8 1.20 ms 52.93.92.25 9 ... 14 15 0.98 ms aabb0e83425307299.awsglobalaccelerator.com (13.248.206.29) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 36.50 seconds