LeakIX - Host admin-fd.cep.qa.sa.pepsico.com

Domain admin-fd.cep.qa.sa.pepsico.com

United States

MICROSOFT-CORP-MSN-AS-BLOCK

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 13.107.237.44
Domain: admin-fd.cep.qa.sa.pepsico.com
Port: 80
URL: http://admin-fd.cep.qa.sa.pepsico.com/_profiler/empty/search/results

First seen 2023-03-01 16:20
Last seen 2023-03-07 12:27
Open for 5 days
- Fingerprint: 407cf4363b0e62fafca67e07fe80df5cfe80df5cfe80df5cfe80df5cfe80df5c
```
Symfony profiler enabled:
http://admin-fd.cep.qa.sa.pepsico.com/_profiler/empty/search/results
```
  Found on 2023-03-01 16:20
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 13.107.237.44
Domain: admin-fd.cep.qa.sa.pepsico.com
Port: 443
URL: https://admin-fd.cep.qa.sa.pepsico.com/_profiler/empty/search/results

First seen 2023-03-01 02:36
Last seen 2023-03-07 12:27
Open for 6 days
- Fingerprint: 407cf4363b0e62fafca67e07ed1d39f5ed1d39f5ed1d39f5ed1d39f5ed1d39f5
```
Symfony profiler enabled:
https://admin-fd.cep.qa.sa.pepsico.com/_profiler/empty/search/results
```
  Found on 2023-03-01 02:36
Create report

Open service 2620:1ec:46::44:443 · admin-fd.cep.qa.sa.pepsico.com

2026-01-30 12:48

HTTP/1.1 200 OK
Date: Fri, 30 Jan 2026 12:48:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
cache-control: no-store, private
startedon: 2026-01-30 12:48:29:000000
started-micro: 1769777309.3304
access-control-allow-methods: GET, POST
access-control-allow-headers: Content-Type, Authorization, X-Custom-Header
access-control-allow-credentials: true
ended-micro: 1769777309.3313
endedon: 2026-01-30 12:48:29:000000
app-version-latest: 1.1.6+23
charset: utf8mb4
content-language: en
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self';
x-xss-protection: 1; mode=block
x-envoy-upstream-service-time: 387
x-volterra-location: c-dc12-ash
Set-Cookie: visid_incap_3016954=l6PsFMnsSVygN/7b8zAwY5yofGkAAAAAQUIPAAAAAACncbCGaJU/MsrcQVXO/rRT; expires=Sat, 30 Jan 2027 09:43:10 GMT; HttpOnly; path=/; Domain=.cep.qa.sa.pepsico.com
Set-Cookie: nlbi_3016954=37/RXdHCLUzdu5ocCN6C1gAAAACUUrL5YPLtoJGCawsKQDLK; HttpOnly; path=/; Domain=.cep.qa.sa.pepsico.com
Set-Cookie: incap_ses_889_3016954=ylRBVT+Tl0O5sO2aU11WDJyofGkAAAAA8AiWFUakEfAMqkVk4zzfrA==; path=/; Domain=.cep.qa.sa.pepsico.com
X-CDN: Imperva
X-Iinfo: 13-45705462-45705463 NNNY CT(7 15 0) RT(1769777308957 4) q(0 0 0 1) r(4 4) U24
x-azure-ref: 20260130T124828Z-15865bd54cd427wqhC1ATL7m3n0000001mfg00000000ae9f
x-fd-int-roxy-purgeid: 0
X-Cache: PRIVATE_NOSTORE

Page title: Example

<!DOCTYPE html>
<html lang="en">
<head><script type="text/javascript" src="/src/lib/2578-min.js?single" ></script>
    <meta charset="UTF-8">
    <title>Example</title>
</head>

<body>

<style type="text/css">
    body {
        padding:0;
        margin: 0;
        font-family: "Lucida Sans Unicode", Arial, sans-serif;
        font-size: 14px;
    }

    #site {
        margin: 0 auto;
        width: 600px;
        padding: 30px 0 0 0;
        color:#65615E;
    }

    h1, h2, h3 {
        font-size: 18px;
        padding: 0 0 5px 0;
        border-bottom: 1px solid #001428;
        margin-bottom: 5px;
    }

    h3 {
        font-size: 14px;
        padding: 15px 0 5px 0;
        margin-bottom: 5px;
        border-color: #cccccc;
    }

    img {
        border: 0;
    }

    p {
        padding: 0 0 5px 0;
    }

    a {
        color: #000;
    }

    #logo {
        text-align: center;
        padding: 50px 0;
    }

    #logo hr {
        display: block;
        height: 1px;
        overflow: hidden;
        background: #BBB;
        border: 0;
        padding:0;
        margin:30px 0 20px 0;
    }

    .claim {
        text-transform: uppercase;
        color:#BBB;
    }

    #site ul {
        padding: 10px 0 10px 20px;
        list-style: circle;
    }

    .buttons {
        margin-bottom: 100px;
        text-align: center;
    }

    .buttons a {
        display: inline-block;
        background: #6428b4;
        color:#fff;
        padding: 5px 10px;
        margin-right: 10px;
        width:40%;
        border-radius: 2px;
        text-decoration: none;
    }

    .buttons a:hover {
        background: #1C8BC1;
    }

    .buttons a:last-child {
        margin: 0;
    }

</style>


<div id="site">
    <div id="logo">
        <a href="http://www.pimcore.com/"><img src="/bundles/pimcoreadmin/img/logo-claim-gray.svg" alt="Logo claim grey" style="width: 400px;" /></a>
        <hr />
    </div>

    </div>

<script type="text/javascript" src="/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=398728640" async></script></body>
</html>

Found 2026-01-30 by HttpPlugin

Create report

admin.snackback.au.cep.qa.pepsico.comadmin.cep.qa.es.pepsico.comwww.admin.cep.ro.qa.pepsico.comadmin-fd.cep.qa.sa.pepsico.comadmin.cep.ro.qa.pepsico.comadmin-eu-fd.cep.sit.pepsico.comadmin-fd.cep.qa.nz.pepsico.comwww.admin.snackback-fd.au.cep.qa.pepsico.comadmin-eu.d2c.cep.dev.pepsico.comadmin-fd.cep.qa.ksa.pepsico.comadmin-fd.cep.qa.es.pepsico.comadmin-fd.cep.ro.qa.pepsico.comadmin-eu.cep.sit.pepsico.comadmin.cep.qa.tr.pepsico.comadmin.cep.qa.sa.pepsico.comwww.admin-fd.cep.ro.qa.pepsico.comadmin.cep.pt.qa.pepsico.comadmin.cep.qa.nz.pepsico.comwww.admin.snackback.au.cep.qa.pepsico.comadmin-fd.cep.qa.tr.pepsico.comadmin-fd.cep.qa.ru.pepsico.comadmin.cep.qa.ksa.pepsico.comadmin-fd.cep.pt.qa.pepsico.comadmin-eu-fd.d2c.cep.dev.pepsico.comadmin.snackback-fd.au.cep.qa.pepsico.comwww.admin.cep.pt.qa.pepsico.comwww.admin-fd.cep.pt.qa.pepsico.comadmin.cep.qa.ru.pepsico.comadmin-eu.cep.dev.pepsico.comadmin-eu-fd.cep.dev.pepsico.com

Fingerprint:

25ccb672f870fd2901cab48d94b7b6cb9c2683f5b96a5556a28c40346bd9159d

CN:

admin.snackback.au.cep.qa.pepsico.com

Key:

RSA-2048

Issuer:

DigiCert Global G2 TLS RSA SHA256 2020 CA1

Not before:

2025-02-28 00:00

Not after:

2026-02-27 23:59

Domain summary

admin-fd.cep.qa.sa.pepsico.com 2

1 recorded

IP summary

2620:1ec:46::44 1 13.107.237.44 1

2 recorded