{
  "port": 44443,
  "protocol": "tcp",
  "service": "ColdFusion Advanced Security (coldfusion-auth)",
  "oneLiner": "The second coldfusion-auth port in Nmap's database, and otherwise an unregistered number that reads like an alternate HTTPS.",
  "whatItIs": "44443 has no IANA assignment; Nmap names it coldfusion-auth alongside 44442, from the Allaire/Netegrity Advanced Security component of old ColdFusion releases. Because the digits echo 443, it also gets picked by hand as an alternate HTTPS port, so a TLS handshake succeeding here does not make it ColdFusion. Open frequency in Nmap's data is about 0.02%.",
  "exposure": {
    "verdict": "careful",
    "note": "Two very different things answer on this number, so identify which before deciding — a legacy ColdFusion auth service should never be reachable, while a properly configured alternate HTTPS listener is a normal thing to expose."
  },
  "checkCommand": "openssl s_client -connect TARGET:44443 -brief </dev/null",
  "links": [
    {
      "title": "nmap/nmap — nmap-services (44443/tcp coldfusion-auth)",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 44443 (unassigned)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=44443",
      "kind": "iana"
    }
  ]
}