LeakIX - Host app.mosey.com

Domain app.mosey.com

United States

AMAZON-02

Software information

AmazonS3

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.66.112.6
Domain: app.mosey.com
Port: 443
URL: https://app.mosey.com

First seen 2024-09-05 02:36
Last seen 2026-01-02 02:38
Open for 484 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d516b4a56516b4a56516b4a56516b4a56
```
Found 1 files trough .DS_Store spidering:

/fonts
```
  Found on 2026-01-02 02:38
Create report

Open service 18.66.112.6:443 · app.mosey.com

2026-01-09 12:12

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 623
Connection: close
Last-Modified: Tue, 06 Jan 2026 19:05:07 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 09 Jan 2026 12:12:56 GMT
Cache-Control: max-age=0
ETag: "3928c09c3a269e860617f10a3ba149cb"
X-Cache: Hit from cloudfront
Via: 1.1 1fd323b9134f7d940dac0d007036a604.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P5
X-Amz-Cf-Id: Ycf92qAdctIHxnpSr8kiFK8HRcKaSC9g-jfnE-Th-5FrndvUWJuEHQ==
Age: 2
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: no-referrer
Content-Security-Policy: frame-src 'self' https://mosey-notices.s3.amazonaws.com https://mosey-sandbox-notices.s3.amazonaws.com https://mosey-legal-entity-documents.s3.amazonaws.com https://mosey-sandbox-legal-entity-documents.s3.amazonaws.com blob: https://api.mosey.com https://sandbox-api.mosey.com; connect-src 'self' https://mosey-sandbox-mail.s3.amazonaws.com https://mosey-mail.s3.amazonaws.com https://mosey-legal-entity-documents.s3.amazonaws.com https://mosey-sandbox-legal-entity-documents.s3.amazonaws.com https://api.mosey.com https://sandbox-api.mosey.com https://o4505160160837632.ingest.sentry.io; media-src 'self' data:; img-src 'self' blob: data:; style-src 'self'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; object-src 'none'; script-src 'self' 'unsafe-eval'; frame-ancestors 'self' https://app.mosey.com https://sandbox-app.mosey.com https://admin.mosey.com https://sandbox-admin.mosey.com; worker-src 'self' blob:; report-uri https://o4505160160837632.ingest.sentry.io/api/4505364816461824/security/?sentry_key=e084098d8e80494689aff4517efb9c23
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Security-Policy-Report-Only: default-src 'self'; connect-src 'self' https://mosey-sandbox-mail.s3.amazonaws.com https://mosey-mail.s3.amazonaws.com https://mosey-legal-entity-documents.s3.amazonaws.com https://mosey-sandbox-legal-entity-documents.s3.amazonaws.com https://api.mosey.com https://sandbox-api.mosey.com https://o4505160160837632.ingest.sentry.io; frame-src 'self' blob: https://api.mosey.com https://sandbox-api.mosey.com; media-src 'self' data:; img-src 'self' blob: data:; style-src 'self'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; object-src 'none'; script-src 'self' 'unsafe-eval'; frame-ancestors 'self' https://app.mosey.com https://sandbox-app.mosey.com https://admin.mosey.com https://sandbox-admin.mosey.com; worker-src 'self' blob:; report-uri https://o4505160160837632.ingest.sentry.io/api/4505364816461824/security/?sentry_key=e084098d8e80494689aff4517efb9c23
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: geolocation=(), microphone=(), camera=(), payment=()

Page title: Mosey

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="theme-color" content="#000000" />
    <meta name="description" content="Mosey - Dashboard" />
    <title>Mosey</title>
    <script type="module" crossorigin src="/assets/main-COgFu0Jn.js"></script>
    <link rel="modulepreload" crossorigin href="/assets/500-dog-oLELLnZ2.js">
    <link rel="stylesheet" crossorigin href="/assets/500-dog-BnyAMXik.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 18.66.112.6:443 · app.mosey.com

2026-01-02 02:38

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 623
Connection: close
Last-Modified: Wed, 31 Dec 2025 16:19:04 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 02 Jan 2026 02:38:36 GMT
Cache-Control: max-age=0
ETag: "0be4101b23eafcd89e00f511dced7e17"
X-Cache: Hit from cloudfront
Via: 1.1 0a624670dff351af866d2f19bde4a312.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P5
X-Amz-Cf-Id: UrKyND1LGNU-Aotcg2w9dyKHFJbqXXphJUgQPJkUiN-KkFuJmhfi3w==
X-Frame-Options: SAMEORIGIN
Referrer-Policy: no-referrer
Content-Security-Policy: frame-src 'self' https://mosey-notices.s3.amazonaws.com https://mosey-sandbox-notices.s3.amazonaws.com https://mosey-legal-entity-documents.s3.amazonaws.com https://mosey-sandbox-legal-entity-documents.s3.amazonaws.com blob: https://api.mosey.com https://sandbox-api.mosey.com; connect-src 'self' https://mosey-sandbox-mail.s3.amazonaws.com https://mosey-mail.s3.amazonaws.com https://mosey-legal-entity-documents.s3.amazonaws.com https://mosey-sandbox-legal-entity-documents.s3.amazonaws.com https://api.mosey.com https://sandbox-api.mosey.com https://o4505160160837632.ingest.sentry.io; media-src 'self' data:; img-src 'self' blob: data:; style-src 'self'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; object-src 'none'; script-src 'self' 'unsafe-eval'; frame-ancestors 'self' https://app.mosey.com https://sandbox-app.mosey.com https://admin.mosey.com https://sandbox-admin.mosey.com; worker-src 'self' blob:; report-uri https://o4505160160837632.ingest.sentry.io/api/4505364816461824/security/?sentry_key=e084098d8e80494689aff4517efb9c23
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000
Content-Security-Policy-Report-Only: default-src 'self'; connect-src 'self' https://mosey-sandbox-mail.s3.amazonaws.com https://mosey-mail.s3.amazonaws.com https://mosey-legal-entity-documents.s3.amazonaws.com https://mosey-sandbox-legal-entity-documents.s3.amazonaws.com https://api.mosey.com https://sandbox-api.mosey.com https://o4505160160837632.ingest.sentry.io; frame-src 'self' blob: https://api.mosey.com https://sandbox-api.mosey.com; media-src 'self' data:; img-src 'self' blob: data:; style-src 'self'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; object-src 'none'; script-src 'self' 'unsafe-eval'; frame-ancestors 'self' https://app.mosey.com https://sandbox-app.mosey.com https://admin.mosey.com https://sandbox-admin.mosey.com; worker-src 'self' blob:; report-uri https://o4505160160837632.ingest.sentry.io/api/4505364816461824/security/?sentry_key=e084098d8e80494689aff4517efb9c23

Page title: Mosey

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="theme-color" content="#000000" />
    <meta name="description" content="Mosey - Dashboard" />
    <title>Mosey</title>
    <script type="module" crossorigin src="/assets/main-CHWgCG9v.js"></script>
    <link rel="modulepreload" crossorigin href="/assets/500-dog-u89QPFHv.js">
    <link rel="stylesheet" crossorigin href="/assets/500-dog-BTSBCHof.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 18.66.112.6:443 · app.mosey.com

2025-12-30 10:49

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 623
Connection: close
Last-Modified: Fri, 26 Dec 2025 17:30:43 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 30 Dec 2025 10:50:00 GMT
Cache-Control: max-age=0
ETag: "47db8eba82361c2e4447731dcd3fce3a"
X-Cache: Hit from cloudfront
Via: 1.1 3a21078459f955a33f79dacf082781c4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P5
X-Amz-Cf-Id: YXrlCn0jCHSExiQQZnM2hPG02JOwcQjTqjnD9ASXrwgH4U-5ZC8Msg==
X-Frame-Options: SAMEORIGIN
Referrer-Policy: no-referrer
Content-Security-Policy: frame-src 'self' https://mosey-notices.s3.amazonaws.com https://mosey-sandbox-notices.s3.amazonaws.com https://mosey-legal-entity-documents.s3.amazonaws.com https://mosey-sandbox-legal-entity-documents.s3.amazonaws.com blob: https://api.mosey.com https://sandbox-api.mosey.com; connect-src 'self' https://mosey-sandbox-mail.s3.amazonaws.com https://mosey-mail.s3.amazonaws.com https://mosey-legal-entity-documents.s3.amazonaws.com https://mosey-sandbox-legal-entity-documents.s3.amazonaws.com https://api.mosey.com https://sandbox-api.mosey.com https://o4505160160837632.ingest.sentry.io; media-src 'self' data:; img-src 'self' blob: data:; style-src 'self'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; object-src 'none'; script-src 'self' 'unsafe-eval'; frame-ancestors 'self' https://app.mosey.com https://sandbox-app.mosey.com https://admin.mosey.com https://sandbox-admin.mosey.com; worker-src 'self' blob:; report-uri https://o4505160160837632.ingest.sentry.io/api/4505364816461824/security/?sentry_key=e084098d8e80494689aff4517efb9c23
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000
Content-Security-Policy-Report-Only: default-src 'self'; connect-src 'self' https://mosey-sandbox-mail.s3.amazonaws.com https://mosey-mail.s3.amazonaws.com https://mosey-legal-entity-documents.s3.amazonaws.com https://mosey-sandbox-legal-entity-documents.s3.amazonaws.com https://api.mosey.com https://sandbox-api.mosey.com https://o4505160160837632.ingest.sentry.io; frame-src 'self' blob: https://api.mosey.com https://sandbox-api.mosey.com; media-src 'self' data:; img-src 'self' blob: data:; style-src 'self'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; object-src 'none'; script-src 'self' 'unsafe-eval'; frame-ancestors 'self' https://app.mosey.com https://sandbox-app.mosey.com https://admin.mosey.com https://sandbox-admin.mosey.com; worker-src 'self' blob:; report-uri https://o4505160160837632.ingest.sentry.io/api/4505364816461824/security/?sentry_key=e084098d8e80494689aff4517efb9c23

Page title: Mosey

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="theme-color" content="#000000" />
    <meta name="description" content="Mosey - Dashboard" />
    <title>Mosey</title>
    <script type="module" crossorigin src="/assets/main-BfwqRqN8.js"></script>
    <link rel="modulepreload" crossorigin href="/assets/500-dog-u89QPFHv.js">
    <link rel="stylesheet" crossorigin href="/assets/500-dog-BTSBCHof.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 18.66.112.6:443 · app.mosey.com

2025-12-23 00:44

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 623
Connection: close
Last-Modified: Fri, 19 Dec 2025 21:11:45 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 23 Dec 2025 00:44:51 GMT
Cache-Control: max-age=0
ETag: "fcb2f63731640f93235a32c67c0c37a5"
X-Cache: Hit from cloudfront
Via: 1.1 91dc0292eef4e22508a3ae73fe64bbf4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P5
X-Amz-Cf-Id: tb1XnxQkrwpsrCNvkOVkc_UjllXpEeHn3SF29P4rUlMRy9O9cUrtPw==
Age: 1
X-Frame-Options: SAMEORIGIN
Referrer-Policy: no-referrer
Content-Security-Policy: frame-src 'self' https://mosey-notices.s3.amazonaws.com https://mosey-sandbox-notices.s3.amazonaws.com https://mosey-legal-entity-documents.s3.amazonaws.com https://mosey-sandbox-legal-entity-documents.s3.amazonaws.com blob: https://api.mosey.com https://sandbox-api.mosey.com; connect-src 'self' https://mosey-sandbox-mail.s3.amazonaws.com https://mosey-mail.s3.amazonaws.com https://mosey-legal-entity-documents.s3.amazonaws.com https://mosey-sandbox-legal-entity-documents.s3.amazonaws.com https://api.mosey.com https://sandbox-api.mosey.com https://o4505160160837632.ingest.sentry.io; media-src 'self' data:; img-src 'self' blob: data:; style-src 'self'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; object-src 'none'; script-src 'self' 'unsafe-eval'; frame-ancestors 'self' https://app.mosey.com https://sandbox-app.mosey.com https://admin.mosey.com https://sandbox-admin.mosey.com; worker-src 'self' blob:; report-uri https://o4505160160837632.ingest.sentry.io/api/4505364816461824/security/?sentry_key=e084098d8e80494689aff4517efb9c23
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000
Content-Security-Policy-Report-Only: default-src 'self'; connect-src 'self' https://mosey-sandbox-mail.s3.amazonaws.com https://mosey-mail.s3.amazonaws.com https://mosey-legal-entity-documents.s3.amazonaws.com https://mosey-sandbox-legal-entity-documents.s3.amazonaws.com https://api.mosey.com https://sandbox-api.mosey.com https://o4505160160837632.ingest.sentry.io; frame-src 'self' blob: https://api.mosey.com https://sandbox-api.mosey.com; media-src 'self' data:; img-src 'self' blob: data:; style-src 'self'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; object-src 'none'; script-src 'self' 'unsafe-eval'; frame-ancestors 'self' https://app.mosey.com https://sandbox-app.mosey.com https://admin.mosey.com https://sandbox-admin.mosey.com; worker-src 'self' blob:; report-uri https://o4505160160837632.ingest.sentry.io/api/4505364816461824/security/?sentry_key=e084098d8e80494689aff4517efb9c23

Page title: Mosey

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="theme-color" content="#000000" />
    <meta name="description" content="Mosey - Dashboard" />
    <title>Mosey</title>
    <script type="module" crossorigin src="/assets/main-BsBiMBOF.js"></script>
    <link rel="modulepreload" crossorigin href="/assets/500-dog-D78UkMm7.js">
    <link rel="stylesheet" crossorigin href="/assets/500-dog-DfqfGOhe.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 18.66.112.6:443 · app.mosey.com

2025-12-20 23:03

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 623
Connection: close
Last-Modified: Fri, 19 Dec 2025 21:11:45 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 20 Dec 2025 23:03:27 GMT
Cache-Control: max-age=0
ETag: "fcb2f63731640f93235a32c67c0c37a5"
X-Cache: Hit from cloudfront
Via: 1.1 0162e02b2d0212054988a68716227daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P5
X-Amz-Cf-Id: rZcVsk7NNyRxlgDIuTZRGbTZ-43JgKR_ifYr3wUQcwW4gv2WfYL3Ww==
Age: 1
X-Frame-Options: SAMEORIGIN
Referrer-Policy: no-referrer
Content-Security-Policy: frame-src 'self' https://mosey-notices.s3.amazonaws.com https://mosey-sandbox-notices.s3.amazonaws.com https://mosey-legal-entity-documents.s3.amazonaws.com https://mosey-sandbox-legal-entity-documents.s3.amazonaws.com blob: https://api.mosey.com https://sandbox-api.mosey.com; connect-src 'self' https://mosey-sandbox-mail.s3.amazonaws.com https://mosey-mail.s3.amazonaws.com https://mosey-legal-entity-documents.s3.amazonaws.com https://mosey-sandbox-legal-entity-documents.s3.amazonaws.com https://api.mosey.com https://sandbox-api.mosey.com https://o4505160160837632.ingest.sentry.io; media-src 'self' data:; img-src 'self' blob: data:; style-src 'self'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; object-src 'none'; script-src 'self' 'unsafe-eval'; frame-ancestors 'self' https://app.mosey.com https://sandbox-app.mosey.com https://admin.mosey.com https://sandbox-admin.mosey.com; worker-src 'self' blob:; report-uri https://o4505160160837632.ingest.sentry.io/api/4505364816461824/security/?sentry_key=e084098d8e80494689aff4517efb9c23
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000
Content-Security-Policy-Report-Only: default-src 'self'; connect-src 'self' https://mosey-sandbox-mail.s3.amazonaws.com https://mosey-mail.s3.amazonaws.com https://mosey-legal-entity-documents.s3.amazonaws.com https://mosey-sandbox-legal-entity-documents.s3.amazonaws.com https://api.mosey.com https://sandbox-api.mosey.com https://o4505160160837632.ingest.sentry.io; frame-src 'self' blob: https://api.mosey.com https://sandbox-api.mosey.com; media-src 'self' data:; img-src 'self' blob: data:; style-src 'self'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; object-src 'none'; script-src 'self' 'unsafe-eval'; frame-ancestors 'self' https://app.mosey.com https://sandbox-app.mosey.com https://admin.mosey.com https://sandbox-admin.mosey.com; worker-src 'self' blob:; report-uri https://o4505160160837632.ingest.sentry.io/api/4505364816461824/security/?sentry_key=e084098d8e80494689aff4517efb9c23

Page title: Mosey

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="theme-color" content="#000000" />
    <meta name="description" content="Mosey - Dashboard" />
    <title>Mosey</title>
    <script type="module" crossorigin src="/assets/main-BsBiMBOF.js"></script>
    <link rel="modulepreload" crossorigin href="/assets/500-dog-D78UkMm7.js">
    <link rel="stylesheet" crossorigin href="/assets/500-dog-DfqfGOhe.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

sandbox-app.mosey.comapp.mosey.com

Fingerprint:

8a4c5fd7fb174bd3f5f42d95fd9cd98aa752b99571cd4470a477373045f6d198

CN:

app.mosey.com

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M04

Not before:

2025-08-07 00:00

Not after:

2026-09-05 23:59

Domain summary

app.mosey.com 5

1 recorded

IP summary

18.66.112.6 2

1 recorded

Domain app.mosey.com

United States

Software information

MacOS file listing through .DS_Store file

Create report

Create report

Create report

Create report

Create report

sandbox-app.mosey.comapp.mosey.com

Domain summary

IP summary