Scan OS information and Traceroute (nmap -A images.discovery-prod.axs.com)
Nmap scan report for images.discovery-prod.axs.com (18.154.144.25)
Host is up (0.00048s latency).
Other addresses for images.discovery-prod.axs.com (not scanned): 18.154.144.126 18.154.144.24 18.154.144.19
rDNS record for 18.154.144.25: server-18-154-144-25.lax50.r.cloudfront.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Amazon CloudFront httpd
|_http-server-header: CloudFront
|_http-title: Did not follow redirect to https://images.discovery-prod.axs.com/
443/tcp open ssl/http Amazon CloudFront httpd
|_http-cors: GET
| http-server-header:
| AmazonS3
|_ CloudFront
|_http-title: Site doesn't have a title (application/xml).
| ssl-cert: Subject: commonName=*.discovery-prod.axs.com
| Subject Alternative Name: DNS:*.discovery-prod.axs.com
| Not valid before: 2023-07-15T00:00:00
|_Not valid after: 2024-08-12T23:59:59
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|PBX
Running (JUST GUESSING): FreeBSD 11.X (88%), Vodavi embedded (87%)
OS CPE: cpe:/o:freebsd:freebsd:11.0 cpe:/h:vodavi:xts-ip
Aggressive OS guesses: FreeBSD 11.0-RELEASE (88%), FreeBSD 11.0-STABLE (88%), Vodavi XTS-IP PBX (87%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 18 hops
TRACEROUTE (using port 443/tcp)
HOP RTT ADDRESS
1 0.21 ms 208.76.251.177
2 0.56 ms gw.mcom-colocationamerica.com (208.64.231.81)
3 0.77 ms multacom.com (96.45.162.9)
4 0.56 ms 206.72.211.146.any2ix.coresite.com (206.72.211.146)
5 ... 6
7 24.54 ms 52.93.128.189
8 ... 16
17 0.55 ms 150.222.232.118
18 0.45 ms server-18-154-144-25.lax50.r.cloudfront.net (18.154.144.25)
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 50.15 seconds