LeakIX - Host 1win-nz.com

Domain 1win-nz.com

CLOUDFLARENET

Software information

cloudflare

tcp/443

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 2a06:98c1:3120::3
Domain: 1win-nz.com
Port: 443
URL: https://1win-nz.com/_profiler/empty/search/results

First seen 2025-12-08 23:40
- Fingerprint: 407cf4363b0e62fafca67e07fbd1c10afbd1c10afbd1c10afbd1c10afbd1c10a
```
Symfony profiler enabled:
https://1win-nz.com/_profiler/empty/search/results
```
  Found on 2025-12-08 23:40
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 188.114.97.3
Domain: 1win-nz.com
Port: 443
URL: https://1win-nz.com

First seen 2025-12-08 23:40
Last seen 2026-01-02 20:36
Open for 24 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea96ba46591629a2ee1cbb56ea163e836bb
```
Found 23 files trough .DS_Store spidering:

/admin
/admin/img
/admin/js
/build
/build/admin
/build/frontend
/bundles
/css
/flags
/frontend
/frontend/img
/img
/media
/media/cache
/media/cache/pb_block_image
/media/cache/pb_image
/nav-icons
/pagebuilder
/svg
/svg/games
/svg/socials
/uploads
/uploads/media
```
  Found on 2026-01-02 20:36
Create report

Open service 188.114.97.3:443 · 1win-nz.com

2026-01-10 00:10

HTTP/1.1 200 OK
Date: Sat, 10 Jan 2026 00:10:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rX6vasiIadE94HPu8b92uypar%2FW1L1lYkF3ax%2BTXFoZWd5qQBjG%2Fb%2FDslkpbO12jHCOBNdoojExJhecERkOgszcGSJlMGZVSmb%2FM"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Tue, 10 Feb 2026 00:10:57 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9bb7f4489b2366fd-AMS

Found 2 days ago by HttpPlugin

Create report

Open service 2a06:98c1:3120::3:443 · 1win-nz.com

2026-01-08 19:09

HTTP/1.1 200 OK
Date: Thu, 08 Jan 2026 19:09:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=0NaxJTMfU%2BOWgin8J%2FWf7%2B76189JXnC5OTGebOyi8mSsdfJ6G%2F7mcuiHkT3RqYbJRUHExKv4Dfpe4qVzz3Dwqhf6Gz697fxr39lv9rxnIW%2F0F7GPZm7e"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Sun, 08 Feb 2026 19:09:23 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=11,cfOrigin;dur=1085
CF-RAY: 9badfd267d7b8235-SIN

Found 2026-01-08 by HttpPlugin

Create report

Open service 188.114.97.3:443 · 1win-nz.com

2026-01-02 20:36

HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 20:36:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=88YCql2m9UeqMm8ApZA0XnU0mijQCK9777oKXfHNFUmBph%2BhRSzIB%2Bkpe8cTdTfGfNPaiBufoGCcvO4wM%2Bw6ZkmSCBKObj9AI%2FZr"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Mon, 02 Feb 2026 20:36:28 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b7d0c793d7fe1fe-AMS

Found 2026-01-02 by HttpPlugin

Create report

Open service 2a06:98c1:3120::3:443 · 1win-nz.com

2026-01-01 20:01

HTTP/1.1 200 OK
Date: Thu, 01 Jan 2026 20:01:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rLmxq17MrnSRs2Xw3%2FlINhcG%2BzJUy76RJ7QwwWqB%2FAHZjrwsgcihrV57TmIbD7qFqNmX8AvKVgNCelO1r5Y6DGUfH%2FP6iccYuNYPLtLZjdlh3D417%2Frq"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Sun, 01 Feb 2026 20:01:21 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=7,cfOrigin;dur=489
CF-RAY: 9b749ba7ffcdfa52-SJC

Found 2026-01-01 by HttpPlugin

Create report

Open service 2a06:98c1:3120::3:443 · 1win-nz.com

2025-12-30 04:08

HTTP/1.1 200 OK
Date: Tue, 30 Dec 2025 04:08:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=sgWlRQ%2FLpY9p82a7o3jrSfwSZGQa8ngpmJuv1wzYLIMDRYYLJ5pXEFDBktgVL%2B6194yFMRTYe8uIXx8FwDOU5pF%2FpZwgHMuaaY5hJAIrIGsQyjOldUCm"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Fri, 30 Jan 2026 04:08:41 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=7,cfOrigin;dur=770
CF-RAY: 9b5ead6878a28be8-EWR

Found 2025-12-30 by HttpPlugin

Create report

Open service 188.114.97.3:443 · 1win-nz.com

2025-12-23 02:34

HTTP/1.1 200 OK
Date: Tue, 23 Dec 2025 02:34:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qPDqC50RRLyglFt9sDyJHEFG9Vadhk%2F9ONsdVjan4G%2BfbmATTJu%2Fs3cfnAMC1OzaIgQhlDT4axfPqq4RkK0%2BfHqwOQ5hgY4NRq%2Bw"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Fri, 23 Jan 2026 02:34:48 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=14,cfOrigin;dur=829
CF-RAY: 9b247642898536d8-YYZ

Found 2025-12-23 by HttpPlugin

Create report

Open service 2a06:98c1:3120::3:443 · 1win-nz.com

2025-12-22 04:54

HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 04:54:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=zz71HdS0UL%2Fv863NNH%2FLGAMv9YKg60jUdzhUiGcZDEKE8C4mnGnPTXiAJ9xXEsn5ZY9uoj5CqPP9Wg4%2BKUuE62tHT21RUnxuUiN0UzDiihYsi8YQ9oMn"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Thu, 22 Jan 2026 04:54:08 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=9,cfOrigin;dur=1056
CF-RAY: 9b1d04fabe005e56-SJC

Found 2025-12-22 by HttpPlugin

Create report

Open service 188.114.97.3:443 · 1win-nz.com

2025-12-21 08:18

HTTP/1.1 200 OK
Date: Sun, 21 Dec 2025 08:18:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=pNAt5QzTcUXTpGZ7Q4%2FWerkxtXlaGLpav4yLx1F5%2F88lS2LrPB16oSz3VgQtxm9dt8giJW4qu7VSfZI1fFWGU5q%2FLhBoWWDjG4KE"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Wed, 21 Jan 2026 08:18:29 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b15f2f56f07dc4a-FRA

Found 2025-12-21 by HttpPlugin

Create report

Open service 2a06:98c1:3120::3:443 · 1win-nz.com

2025-12-20 04:53

HTTP/1.1 200 OK
Date: Sat, 20 Dec 2025 04:53:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Xy33%2FTEXNAw5DDDGGUwJ%2BlWimx2fJu%2BIKI1xJ6zlUI9NfZo5yW4VLxboWs5EDyjRrROzORSXK5cvUo0oPdf1EErCGoNZ3H9dLkfNDtsez27pAr1UlEoO"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Tue, 20 Jan 2026 04:53:11 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b0c88d5eb499737-FRA

Found 2025-12-20 by HttpPlugin

Create report

Open service 188.114.97.3:443 · 1win-nz.com

2025-12-19 05:54

HTTP/1.1 200 OK
Date: Fri, 19 Dec 2025 05:54:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=BX6pPVhpq90zC6C7mIloQ45VC2R2rjLuPvY45p5khNoWoakmRiNCyr%2FFiOqCXIXq8Za9QWKdRFVFsIBkIHNR%2Beq%2BrqPGoEjHDB7g"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Mon, 19 Jan 2026 05:54:25 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=11,cfOrigin;dur=829
CF-RAY: 9b04a5278cc5ab33-YYZ

Found 2025-12-19 by HttpPlugin

Create report

1win-nz.com*.1win-nz.com

Fingerprint:

d421c618b4ac1a0d862bc43cb40eb5e3f059ba15614419494a55d0efd17966e1

CN:

1win-nz.com

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-12-03 17:04

Not after:

2026-03-03 17:59

Domain summary

1win-nz.com 11

1 recorded

IP summary

188.114.97.3 1 2a06:98c1:3120::3 1

2 recorded

Domain 1win-nz.com

Software information

Symfony developement panel enabled

MacOS file listing through .DS_Store file

1win-nz.com*.1win-nz.com

Domain summary

IP summary