Nmap scan report for importworkflow.tax.intuit.com (54.149.52.170)
Host is up (0.029s latency).
Other addresses for importworkflow.tax.intuit.com (not scanned): 54.212.211.93 52.25.130.122 44.240.38.104 52.26.254.193 44.239.221.9
rDNS record for 54.149.52.170: ec2-54-149-52-170.us-west-2.compute.amazonaws.com
Not shown: 998 filtered tcp ports (no-response)
PORT STATE SERVICE VERSION
80/tcp open http awselb/2.0
| fingerprint-strings:
| FourOhFourRequest:
| HTTP/1.1 301 Moved Permanently
| Server: awselb/2.0
| Date: Sat, 13 Sep 2025 19:04:54 GMT
| Content-Type: text/html
| Content-Length: 134
| Connection: close
| Location: https://apigw-usw2-prd-cx03-468011519.us-west-2.elb.amazonaws.com:443/nice%20ports%2C/Tri%6Eity.txt%2ebak
|
| 301 Moved Permanently
|
| 301 Moved Permanently
|
|
| GetRequest, HTTPOptions:
| HTTP/1.1 301 Moved Permanently
| Server: awselb/2.0
| Date: Sat, 13 Sep 2025 19:04:54 GMT
| Content-Type: text/html
| Content-Length: 134
| Connection: close
| Location: https://apigw-usw2-prd-cx03-468011519.us-west-2.elb.amazonaws.com:443/
|
| 301 Moved Permanently
|
| 301 Moved Permanently
|
|
| RTSPRequest:
|
| 400 Bad Request
|
| 400 Bad Request
|
|
| X11Probe:
| HTTP/1.1 400 Bad Request
| Server: awselb/2.0
| Date: Sat, 13 Sep 2025 19:04:54 GMT
| Content-Type: text/html
| Content-Length: 122
| Connection: close
|
| 400 Bad Request
|
| 400 Bad Request
|
|_
|_http-title: Did not follow redirect to https://importworkflow.tax.intuit.com:443/
|_http-server-header: awselb/2.0
443/tcp open ssl/http-proxy (bad gateway)
| fingerprint-strings:
| FourOhFourRequest:
| HTTP/1.1 502 Bad Gateway
| Date: Sat, 13 Sep 2025 19:05:00 GMT
| Content-Type: text/plain
| Content-Length: 0
| Connection: close
| x-envoy-upstream-service-time: 0
| strict-transport-security: max-age=31536000
| intuit_tid: 1-68c5c05c-020665d8282a22ea15176fa1
| x-request-id: 1-68c5c05c-020665d8282a22ea15176fa1
| server: istio-envoy
| GetRequest:
| HTTP/1.1 502 Bad Gateway
| Date: Sat, 13 Sep 2025 19:05:00 GMT
| Content-Type: text/plain
| Content-Length: 0
| Connection: close
| x-envoy-upstream-service-time: 0
| strict-transport-security: max-age=31536000
| intuit_tid: 1-68c5c05c-40710c407c02bf6224139688
| x-request-id: 1-68c5c05c-40710c407c02bf6224139688
| server: istio-envoy
| HTTPOptions:
| HTTP/1.1 502 Bad Gateway
| Date: Sat, 13 Sep 2025 19:05:00 GMT
| Content-Type: text/plain
| Content-Length: 0
| Connection: close
| x-envoy-upstream-service-time: 0
| strict-transport-security: max-age=31536000
| intuit_tid: 1-68c5c05c-081a26fd0f58b3505a24a802
| x-request-id: 1-68c5c05c-081a26fd0f58b3505a24a802
| server: istio-envoy
| Help, SSLSessionReq:
| HTTP/1.1 400 Bad Request
| Server: awselb/2.0
| Date: Sat, 13 Sep 2025 19:05:05 GMT
| Content-Type: text/html
| Content-Length: 122
| Connection: close
|
| 400 Bad Request
|
| 400 Bad Request
|
|
| RTSPRequest:
|
| 400 Bad Request
|
| 400 Bad Request
|
|_
|_http-title: Site doesn't have a title (text/plain).
| tls-nextprotoneg:
| h2
|_ http/1.1
| ssl-cert: Subject: commonName=*.intuit.com/organizationName=INTUIT INC./stateOrProvinceName=California/countryName=US
| Subject Alternative Name: DNS:*.intuit.com, DNS:*.sbfinance.intuit.com, DNS:*.iep.intuit.com, DNS:*.prd.platform.intuit.com, DNS:*.api.intuit.ae, DNS:*.api.intuit.com.au, DNS:*.prd.api.a.intuit.com, DNS:*.api.intuit.mx, DNS:*.sbfinance.stage.intuit.com, DNS:*.intuit.ca, DNS:*.workforce.intuit.com, DNS:*.appfabric.intuit.com, DNS:*.platform.intuit.ca, DNS:*.experimentation.intuit.com, DNS:*.stgl.intuit.com, DNS:*.finance.intuit.com, DNS:*.app.intuit.com, DNS:*.mint.intuit.com, DNS:*.api.intuit.com, DNS:*.contributedreports.intuit.com, DNS:*.qbo.intuit.com, DNS:*.prf.api.a.intuit.com, DNS:*.api.intuit.fr, DNS:*.payments.intuit.com, DNS:*.qa.api.a.intuit.com, DNS:help.mint.com, DNS:*.turbotaxonline.intuit.com, DNS:*.banking.intuit.com, DNS:*.api.intuit.sg, DNS:*.turbotax.intuit.com, DNS:*.quickbooks.intuit.com, DNS:*.e2e.api.a.intuit.com, DNS:*.api.intuit.net, DNS:*.api.intuit.ca, DNS:*.accountant.intuit.com, DNS:*.tax.intuit.com, DNS:*.hosting.intuit.com, DNS:*.a.intuit.com, DNS:*.camps.intuit.com, DNS:*.msg.intuit.com, DNS:*.prod.location.a.intuit.com, DNS:*.aws.api.intuit.com, DNS:*.api.intuit.co.za, DNS:*.api.intuit.ph, DNS:*.statefillableforms.com, DNS:*.api.quickbooks.com.br, DNS:*.business.intuit.com, DNS:*.api.intuit.hk, DNS:*.platform.intuit.com, DNS:*.qb.intuit.com, DNS:*.mint.com, DNS:*.api.quickbooks.co.uk, DNS:*.location.intuit.com, DNS:*.quickbooks.com
| Not valid before: 2025-03-21T00:00:00
|_Not valid after: 2026-04-21T23:59:59
| tls-alpn:
| h2
|_ http/1.1
| http-server-header:
| awselb/2.0
|_ istio-envoy
|_ssl-date: TLS randomness does not represent time
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.92%I=7%D=9/13%Time=68C5C055%P=x86_64-redhat-linux-gnu%r(
SF:GetRequest,174,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20
SF:awselb/2\.0\r\nDate:\x20Sat,\x2013\x20Sep\x202025\x2019:04:54\x20GMT\r\
SF:nContent-Type:\x20text/html\r\nContent-Length:\x20134\r\nConnection:\x2
SF:0close\r\nLocation:\x20https://apigw-usw2-prd-cx03-468011519\.us-west-2
SF:\.elb\.amazonaws\.com:443/\r\n\r\n\r\n301\x20Moved\x
SF:20Permanently\r\n\r\n301\x20Moved\x20P
SF:ermanently
\r\n\r\n\r\n")%r(HTTPOptions,174,
SF:"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20awselb/2\.0\r\n
SF:Date:\x20Sat,\x2013\x20Sep\x202025\x2019:04:54\x20GMT\r\nContent-Type:\
SF:x20text/html\r\nContent-Length:\x20134\r\nConnection:\x20close\r\nLocat
SF:ion:\x20https://apigw-usw2-prd-cx03-468011519\.us-west-2\.elb\.amazonaw
SF:s\.com:443/\r\n\r\n\r\n301\x20Moved\x20Permanently</
SF:title></head>\r\n<body>\r\n<center><h1>301\x20Moved\x20Permanently</h1>
SF:</center>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,7A,"<html>\r\n<head
SF:><title>400\x20Bad\x20Request\r\n\r\n4
SF:00\x20Bad\x20Request
\r\n\r\n\r\n")%r(X11Pro
SF:be,110,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20awselb/2\.0\r\
SF:nDate:\x20Sat,\x2013\x20Sep\x202025\x2019:04:54\x20GMT\r\nContent-Type:
SF:\x20text/html\r\nContent-Length:\x20122\r\nConnection:\x20close\r\n\r\n
SF:\r\n400\x20Bad\x20Request\r\n\r
SF:\n400\x20Bad\x20Request
\r\n\r\n
SF:\r\n")%r(FourOhFourRequest,197,"HTTP/1\.1\x20301\x20Moved\x20Permanentl
SF:y\r\nServer:\x20awselb/2\.0\r\nDate:\x20Sat,\x2013\x20Sep\x202025\x2019
SF::04:54\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20134\r
SF:\nConnection:\x20close\r\nLocation:\x20https://apigw-usw2-prd-cx03-4680
SF:11519\.us-west-2\.elb\.amazonaws\.com:443/nice%20ports%2C/Tri%6Eity\.tx
SF:t%2ebak\r\n\r\n\r\n301\x20Moved\x20Permanently</titl
SF:e></head>\r\n<body>\r\n<center><h1>301\x20Moved\x20Permanently</h1></ce
SF:nter>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.92%T=SSL%I=7%D=9/13%Time=68C5C05B%P=x86_64-redhat-linux
SF:-gnu%r(GetRequest,149,"HTTP/1\.1\x20502\x20Bad\x20Gateway\r\nDate:\x20S
SF:at,\x2013\x20Sep\x202025\x2019:05:00\x20GMT\r\nContent-Type:\x20text/pl
SF:ain\r\nContent-Length:\x200\r\nConnection:\x20close\r\nx-envoy-upstream
SF:-service-time:\x200\r\nstrict-transport-security:\x20max-age=31536000\r
SF:\nintuit_tid:\x201-68c5c05c-40710c407c02bf6224139688\r\nx-request-id:\x
SF:201-68c5c05c-40710c407c02bf6224139688\r\nserver:\x20istio-envoy\r\n\r\n
SF:")%r(HTTPOptions,149,"HTTP/1\.1\x20502\x20Bad\x20Gateway\r\nDate:\x20Sa
SF:t,\x2013\x20Sep\x202025\x2019:05:00\x20GMT\r\nContent-Type:\x20text/pla
SF:in\r\nContent-Length:\x200\r\nConnection:\x20close\r\nx-envoy-upstream-
SF:service-time:\x200\r\nstrict-transport-security:\x20max-age=31536000\r\
SF:nintuit_tid:\x201-68c5c05c-081a26fd0f58b3505a24a802\r\nx-request-id:\x2
SF:01-68c5c05c-081a26fd0f58b3505a24a802\r\nserver:\x20istio-envoy\r\n\r\n"
SF:)%r(FourOhFourRequest,149,"HTTP/1\.1\x20502\x20Bad\x20Gateway\r\nDate:\
SF:x20Sat,\x2013\x20Sep\x202025\x2019:05:00\x20GMT\r\nContent-Type:\x20tex
SF:t/plain\r\nContent-Length:\x200\r\nConnection:\x20close\r\nx-envoy-upst
SF:ream-service-time:\x200\r\nstrict-transport-security:\x20max-age=315360
SF:00\r\nintuit_tid:\x201-68c5c05c-020665d8282a22ea15176fa1\r\nx-request-i
SF:d:\x201-68c5c05c-020665d8282a22ea15176fa1\r\nserver:\x20istio-envoy\r\n
SF:\r\n")%r(RTSPRequest,7A,"<html>\r\n<head><title>400\x20Bad\x20Request</
SF:title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></cent
SF:er>\r\n</body>\r\n</html>\r\n")%r(Help,110,"HTTP/1\.1\x20400\x20Bad\x20
SF:Request\r\nServer:\x20awselb/2\.0\r\nDate:\x20Sat,\x2013\x20Sep\x202025
SF:\x2019:05:05\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x2
SF:0122\r\nConnection:\x20close\r\n\r\n<html>\r\n<head><title>400\x20Bad\x
SF:20Request\r\n\r\n400\x20Bad\x20Request
SF:
\r\n\r\n\r\n")%r(SSLSessionReq,110,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nServer:\x20awselb/2\.0\r\nDate:\x20Sat,\
SF:x2013\x20Sep\x202025\x2019:05:05\x20GMT\r\nContent-Type:\x20text/html\r
SF:\nContent-Length:\x20122\r\nConnection:\x20close\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n4
SF:00\x20Bad\x20Request
\r\n\r\n\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (90%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4
Aggressive OS guesses: Linux 2.6.32 (90%), Linux 3.2 - 4.9 (90%), Linux 2.6.32 - 3.10 (89%), Linux 2.6.32 - 3.13 (89%), Linux 3.10 - 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 11 hops
TRACEROUTE (using port 443/tcp)
HOP RTT ADDRESS
1 0.42 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177)
2 0.61 ms gw.mcom-colocationamerica.com (208.64.231.81)
3 0.73 ms r2b4.n1.p1401.lax.multacom.net (64.69.46.11)
4 0.67 ms 206.72.211.146.any2ix.coresite.com (206.72.211.146)
5 ... 10
11 27.12 ms ec2-54-149-52-170.us-west-2.compute.amazonaws.com (54.149.52.170)
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 33.30 seconds