Nmap scan report for www.prod.ipsy.com (54.225.138.65) Host is up (0.057s latency). Other addresses for www.prod.ipsy.com (not scanned): 52.4.14.97 54.84.181.170 rDNS record for 54.225.138.65: ec2-54-225-138-65.compute-1.amazonaws.com Not shown: 998 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 80/tcp open http awselb/2.0 | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 301 Moved Permanently | Server: awselb/2.0 | Date: Mon, 15 Sep 2025 11:36:54 GMT | Content-Type: text/html | Content-Length: 134 | Connection: close | Location: https://edge-gw-web-main-727055295.us-east-1.elb.amazonaws.com:443/nice%20ports%2C/Tri%6Eity.txt%2ebak | | 301 Moved Permanently | |

301 Moved Permanently

| | | GetRequest, HTTPOptions: | HTTP/1.1 301 Moved Permanently | Server: awselb/2.0 | Date: Mon, 15 Sep 2025 11:36:54 GMT | Content-Type: text/html | Content-Length: 134 | Connection: close | Location: https://edge-gw-web-main-727055295.us-east-1.elb.amazonaws.com:443/ | | 301 Moved Permanently | |

301 Moved Permanently

| | | RTSPRequest: | | 400 Bad Request | |

400 Bad Request

| | | X11Probe: | HTTP/1.1 400 Bad Request | Server: awselb/2.0 | Date: Mon, 15 Sep 2025 11:36:54 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | | 400 Bad Request | |

400 Bad Request

| |_ |_http-title: Did not follow redirect to https://www.prod.ipsy.com:443/ |_http-server-header: awselb/2.0 443/tcp open ssl/https envoy |_http-title: Did not follow redirect to https://www.ipsy.com/ | fingerprint-strings: | GetRequest: | HTTP/1.1 200 OK | Date: Mon, 15 Sep 2025 11:37:00 GMT | Content-Type: text/html; charset=utf-8 | Connection: close | content-security-policy: frame-ancestors 'self' https://app.contentful.com; | strict-transport-security: max-age=63072000; includeSubDomains; preload | referrer-policy: no-referrer-when-downgrade | expect-ct: max-age=86400 | x-content-type-options: nosniff | x-frame-options: SAMEORIGIN | x-xss-protection: 0 | x-ipsy-served-by: spa-nextjs | set-cookie: adobeTargetThirdPartyId=; Domain=.ipsy.com; Path=/; Secure | cache-control: private, no-cache, no-store, max-age=0, must-revalidate | vary: Accept-Encoding | ipsy-tracking-id: itr-0a5c39c6-eabc-4ee9-a2f4-8560c8aa3b92 | x-ipsy-tid: itr-0a5c39c6-eabc-4ee9-a2f4-8560c8aa3b92 | ipsy-request-id: 806f76f0-aaa7-4d72-9837-0b3dc6e2dec7 | x-ipsy-rid: 806f76f0-aaa7-4d72-9837-0b3dc6e2dec7 | set-cookie: x-ipsy-contentful-preview=false; Path=/; Secure; SameSi | HTTPOptions: | HTTP/1.1 500 Internal Server Error | Date: Mon, 15 Sep 2025 11:37:00 GMT | Content-Type: text/html; charset=utf-8 | Connection: close | content-security-policy: frame-ancestors 'self' https://app.contentful.com; | strict-transport-security: max-age=63072000; includeSubDomains; preload | referrer-policy: no-referrer-when-downgrade | expect-ct: max-age=86400 | x-content-type-options: nosniff | x-frame-options: SAMEORIGIN | x-xss-protection: 0 | x-ipsy-served-by: spa-nextjs | set-cookie: adobeTargetThirdPartyId=; Domain=.ipsy.com; Path=/; Secure | cache-control: private, no-cache, no-store, max-age=0, must-revalidate | vary: Accept-Encoding | set-cookie: adobeTargetThirdPartyId=; Domain=.ipsy.com; Path=/; Secure | set-cookie: x-ipsy-contentful-preview=false; Path=/; Secure; SameSite=Lax; Domain=.ipsy.com |_ set-cookie: x-ipsy-csrf=ee8dce47-69b0-4324-a620-3eb1e2a134b7; Max-Age=86400; Path=/; Secure; SameSite= | ssl-cert: Subject: commonName=prod.ipsy.com | Subject Alternative Name: DNS:prod.ipsy.com, DNS:*.api.ipsy.com, DNS:ipsy.com, DNS:*.api.prod.ipsy.com, DNS:*.api.prod.lockdown.ipsy.com, DNS:*.prod.ipsy.com, DNS:prod.lockdown.ipsy.com, DNS:*.ipsy.com, DNS:*.prod.lockdown.ipsy.com | Not valid before: 2025-06-20T00:00:00 |_Not valid after: 2026-07-18T23:59:59 |_http-server-header: envoy 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=7.92%I=7%D=9/15%Time=68C7FA55%P=x86_64-redhat-linux-gnu%r( SF:GetRequest,171,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20 SF:awselb/2\.0\r\nDate:\x20Mon,\x2015\x20Sep\x202025\x2011:36:54\x20GMT\r\ SF:nContent-Type:\x20text/html\r\nContent-Length:\x20134\r\nConnection:\x2 SF:0close\r\nLocation:\x20https://edge-gw-web-main-727055295\.us-east-1\.e SF:lb\.amazonaws\.com:443/\r\n\r\n\r\n301\x20Moved\x20P SF:ermanently\r\n\r\n

301\x20Moved\x20Perm SF:anently

\r\n\r\n\r\n")%r(HTTPOptions,171,"HT SF:TP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20awselb/2\.0\r\nDat SF:e:\x20Mon,\x2015\x20Sep\x202025\x2011:36:54\x20GMT\r\nContent-Type:\x20 SF:text/html\r\nContent-Length:\x20134\r\nConnection:\x20close\r\nLocation SF::\x20https://edge-gw-web-main-727055295\.us-east-1\.elb\.amazonaws\.com SF::443/\r\n\r\n\r\n301\x20Moved\x20Permanently SF:\r\n\r\n

301\x20Moved\x20Permanently

\r\n\r\n\r\n")%r(RTSPRequest,7A,"\r\n400\x20Bad\x20Request\r\n\r\n

400\x20 SF:Bad\x20Request

\r\n\r\n\r\n")%r(X11Probe,110 SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20awselb/2\.0\r\nDate: SF:\x20Mon,\x2015\x20Sep\x202025\x2011:36:54\x20GMT\r\nContent-Type:\x20te SF:xt/html\r\nContent-Length:\x20122\r\nConnection:\x20close\r\n\r\n SF:\r\n400\x20Bad\x20Request\r\n\r\n

400\x20Bad\x20Request

\r\n\r\n\r\n") SF:%r(FourOhFourRequest,194,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nS SF:erver:\x20awselb/2\.0\r\nDate:\x20Mon,\x2015\x20Sep\x202025\x2011:36:54 SF:\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20134\r\nConn SF:ection:\x20close\r\nLocation:\x20https://edge-gw-web-main-727055295\.us SF:-east-1\.elb\.amazonaws\.com:443/nice%20ports%2C/Tri%6Eity\.txt%2ebak\r SF:\n\r\n\r\n301\x20Moved\x20Permanently SF:\r\n\r\n

301\x20Moved\x20Permanently

\r\n SF:\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=7.92%T=SSL%I=7%D=9/15%Time=68C7FA5C%P=x86_64-redhat-linux SF:-gnu%r(GetRequest,4872,"HTTP/1\.1\x20200\x20OK\r\nDate:\x20Mon,\x2015\x SF:20Sep\x202025\x2011:37:00\x20GMT\r\nContent-Type:\x20text/html;\x20char SF:set=utf-8\r\nConnection:\x20close\r\ncontent-security-policy:\x20frame- SF:ancestors\x20'self'\x20https://app\.contentful\.com;\r\nstrict-transpor SF:t-security:\x20max-age=63072000;\x20includeSubDomains;\x20preload\r\nre SF:ferrer-policy:\x20no-referrer-when-downgrade\r\nexpect-ct:\x20max-age=8 SF:6400\r\nx-content-type-options:\x20nosniff\r\nx-frame-options:\x20SAMEO SF:RIGIN\r\nx-xss-protection:\x200\r\nx-ipsy-served-by:\x20spa-nextjs\r\ns SF:et-cookie:\x20adobeTargetThirdPartyId=;\x20Domain=\.ipsy\.com;\x20Path= SF:/;\x20Secure\r\ncache-control:\x20private,\x20no-cache,\x20no-store,\x2 SF:0max-age=0,\x20must-revalidate\r\nvary:\x20Accept-Encoding\r\nipsy-trac SF:king-id:\x20itr-0a5c39c6-eabc-4ee9-a2f4-8560c8aa3b92\r\nx-ipsy-tid:\x20 SF:itr-0a5c39c6-eabc-4ee9-a2f4-8560c8aa3b92\r\nipsy-request-id:\x20806f76f SF:0-aaa7-4d72-9837-0b3dc6e2dec7\r\nx-ipsy-rid:\x20806f76f0-aaa7-4d72-9837 SF:-0b3dc6e2dec7\r\nset-cookie:\x20x-ipsy-contentful-preview=false;\x20Pat SF:h=/;\x20Secure;\x20SameSi")%r(HTTPOptions,7FF1,"HTTP/1\.1\x20500\x20Int SF:ernal\x20Server\x20Error\r\nDate:\x20Mon,\x2015\x20Sep\x202025\x2011:37 SF::00\x20GMT\r\nContent-Type:\x20text/html;\x20charset=utf-8\r\nConnectio SF:n:\x20close\r\ncontent-security-policy:\x20frame-ancestors\x20'self'\x2 SF:0https://app\.contentful\.com;\r\nstrict-transport-security:\x20max-age SF:=63072000;\x20includeSubDomains;\x20preload\r\nreferrer-policy:\x20no-r SF:eferrer-when-downgrade\r\nexpect-ct:\x20max-age=86400\r\nx-content-type SF:-options:\x20nosniff\r\nx-frame-options:\x20SAMEORIGIN\r\nx-xss-protect SF:ion:\x200\r\nx-ipsy-served-by:\x20spa-nextjs\r\nset-cookie:\x20adobeTar SF:getThirdPartyId=;\x20Domain=\.ipsy\.com;\x20Path=/;\x20Secure\r\ncache- SF:control:\x20private,\x20no-cache,\x20no-store,\x20max-age=0,\x20must-re SF:validate\r\nvary:\x20Accept-Encoding\r\nset-cookie:\x20adobeTargetThird SF:PartyId=;\x20Domain=\.ipsy\.com;\x20Path=/;\x20Secure\r\nset-cookie:\x2 SF:0x-ipsy-contentful-preview=false;\x20Path=/;\x20Secure;\x20SameSite=Lax SF:;\x20Domain=\.ipsy\.com\r\nset-cookie:\x20x-ipsy-csrf=ee8dce47-69b0-432 SF:4-a620-3eb1e2a134b7;\x20Max-Age=86400;\x20Path=/;\x20Secure;\x20SameSit SF:e="); Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running (JUST GUESSING): Linux 4.X (85%) OS CPE: cpe:/o:linux:linux_kernel:4.2 Aggressive OS guesses: Linux 4.2 (85%) No exact OS matches for host (test conditions non-ideal). Network Distance: 14 hops TRACEROUTE (using port 443/tcp) HOP RTT ADDRESS 1 0.20 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 0.61 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 0.73 ms r1b4.n1p1400.lax.multacom.net (64.69.46.9) 4 ... 5 11.19 ms be2931.ccr31.phx01.atlas.cogentco.com (154.54.44.85) 6 19.75 ms be5471.ccr21.elp02.atlas.cogentco.com (154.54.166.57) 7 31.34 ms be3821.ccr31.dfw01.atlas.cogentco.com (154.54.165.25) 8 31.24 ms be2763.ccr41.dfw03.atlas.cogentco.com (154.54.28.74) 9 ... 13 14 57.01 ms ec2-54-225-138-65.compute-1.amazonaws.com (54.225.138.65) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 41.62 seconds