LeakIX - Host app.staging.transipal.com

Domain app.staging.transipal.com

United States

AMAZON-02

Software information

Heroku

tcp/443

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 52.223.53.203
Domain: app.staging.transipal.com
Port: 443
URL: https://app.staging.transipal.com/_profiler/empty/search/results

First seen 2025-12-03 00:37
Last seen 2026-01-09 19:06
Open for 37 days
- Fingerprint: 407cf4363b0e62fafca67e07df7a0080df7a0080df7a0080df7a0080df7a0080
```
Symfony profiler enabled:
https://app.staging.transipal.com/_profiler/empty/search/results
```
  Found on 2026-01-09 19:06
Create report

Open service 52.223.53.203:443 · app.staging.transipal.com

2026-01-09 19:06

HTTP/1.1 302 Found
Cache-Control: max-age=0, must-revalidate, private
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 19:06:27 GMT
Expires: Fri, 09 Jan 2026 19:06:27 GMT
Location: //www.staging.transipal.com/en/login
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=zPAJV8JiTokUiUgDBrpWGeYWUcUqF1X5Ct29a4tA%2BzI%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767985587"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=zPAJV8JiTokUiUgDBrpWGeYWUcUqF1X5Ct29a4tA%2BzI%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767985587"
Server: Heroku
Set-Cookie: sf_redirect=%7B%22token%22%3A%22010372%22%2C%22route%22%3A%22app%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CApp%5C%5CDefaultController%22%2C%22method%22%3A%22index%22%2C%22file%22%3A%22%5C%2Fapp%5C%2Fsrc%5C%2FController%5C%2FApp%5C%2FDefaultController.php%22%2C%22line%22%3A34%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; secure; httponly; samesite=lax
Set-Cookie: main_deauth_profile_token=010372; path=/; httponly; samesite=lax
Set-Cookie: main_auth_profile_token=deleted; expires=Thu, 09 Jan 2025 19:06:26 GMT; Max-Age=0; path=/; httponly
Set-Cookie: cookie_session_staging=e1c290c4f23d9080f2fa700c7cd99b96; path=/; domain=staging.transipal.com; secure; httponly; samesite=none
Via: 1.1 heroku-router
X-Debug-Token: 010372
X-Debug-Token-Link: https://app.staging.transipal.com/_profiler/010372
X-Robots-Tag: noindex
Content-Length: 390
Connection: close

Page title: Redirecting to //www.staging.transipal.com/en/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='//www.staging.transipal.com/en/login'" />

        <title>Redirecting to //www.staging.transipal.com/en/login</title>
    </head>
    <body>
        Redirecting to <a href="//www.staging.transipal.com/en/login">//www.staging.transipal.com/en/login</a>.
    </body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 52.223.53.203:443 · app.staging.transipal.com

2026-01-02 03:59

HTTP/1.1 302 Found
Cache-Control: max-age=0, must-revalidate, private
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 03:59:40 GMT
Expires: Fri, 02 Jan 2026 03:59:40 GMT
Location: //www.staging.transipal.com/en/login
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=eTH9j9m7lDl8Q2pRZb45IIEAxRRZA6rFB5Osnopg9Ps%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767326380"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=eTH9j9m7lDl8Q2pRZb45IIEAxRRZA6rFB5Osnopg9Ps%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767326380"
Server: Heroku
Set-Cookie: sf_redirect=%7B%22token%22%3A%222d3efb%22%2C%22route%22%3A%22app%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CApp%5C%5CDefaultController%22%2C%22method%22%3A%22index%22%2C%22file%22%3A%22%5C%2Fapp%5C%2Fsrc%5C%2FController%5C%2FApp%5C%2FDefaultController.php%22%2C%22line%22%3A34%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; secure; httponly; samesite=lax
Set-Cookie: main_deauth_profile_token=2d3efb; path=/; httponly; samesite=lax
Set-Cookie: main_auth_profile_token=deleted; expires=Thu, 02 Jan 2025 03:59:39 GMT; Max-Age=0; path=/; httponly
Set-Cookie: cookie_session_staging=4c0742d990154a0b8099d39837cb76f9; path=/; domain=staging.transipal.com; secure; httponly; samesite=none
Via: 1.1 heroku-router
X-Debug-Token: 2d3efb
X-Debug-Token-Link: https://app.staging.transipal.com/_profiler/2d3efb
X-Robots-Tag: noindex
Content-Length: 390
Connection: close

Page title: Redirecting to //www.staging.transipal.com/en/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='//www.staging.transipal.com/en/login'" />

        <title>Redirecting to //www.staging.transipal.com/en/login</title>
    </head>
    <body>
        Redirecting to <a href="//www.staging.transipal.com/en/login">//www.staging.transipal.com/en/login</a>.
    </body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 52.223.53.203:443 · app.staging.transipal.com

2025-12-30 09:20

HTTP/1.1 302 Found
Cache-Control: max-age=0, must-revalidate, private
Content-Type: text/html; charset=utf-8
Date: Tue, 30 Dec 2025 09:20:17 GMT
Expires: Tue, 30 Dec 2025 09:20:17 GMT
Location: //www.staging.transipal.com/en/login
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=hxsKJJw%2FRr4q1GQmLcl5g8X0q6YSJj9InpJotuCmNgs%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767086417"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=hxsKJJw%2FRr4q1GQmLcl5g8X0q6YSJj9InpJotuCmNgs%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767086417"
Server: Heroku
Set-Cookie: sf_redirect=%7B%22token%22%3A%22d001ed%22%2C%22route%22%3A%22app%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CApp%5C%5CDefaultController%22%2C%22method%22%3A%22index%22%2C%22file%22%3A%22%5C%2Fapp%5C%2Fsrc%5C%2FController%5C%2FApp%5C%2FDefaultController.php%22%2C%22line%22%3A34%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; secure; httponly; samesite=lax
Set-Cookie: main_deauth_profile_token=d001ed; path=/; httponly; samesite=lax
Set-Cookie: main_auth_profile_token=deleted; expires=Mon, 30 Dec 2024 09:20:16 GMT; Max-Age=0; path=/; httponly
Set-Cookie: cookie_session_staging=1dfceb6ae5f3e81902ad27479274d3e7; path=/; domain=staging.transipal.com; secure; httponly; samesite=none
Via: 1.1 heroku-router
X-Debug-Token: d001ed
X-Debug-Token-Link: https://app.staging.transipal.com/_profiler/d001ed
X-Robots-Tag: noindex
Content-Length: 390
Connection: close

Page title: Redirecting to //www.staging.transipal.com/en/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='//www.staging.transipal.com/en/login'" />

        <title>Redirecting to //www.staging.transipal.com/en/login</title>
    </head>
    <body>
        Redirecting to <a href="//www.staging.transipal.com/en/login">//www.staging.transipal.com/en/login</a>.
    </body>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 52.223.53.203:443 · app.staging.transipal.com

2025-12-22 10:29

HTTP/1.1 302 Found
Cache-Control: max-age=0, must-revalidate, private
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 10:29:13 GMT
Expires: Mon, 22 Dec 2025 10:29:13 GMT
Location: //www.staging.transipal.com/en/login
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=yCavuTFHoldmkt1gUc13vAIA1aBWbo5nxeSlTh7G4FE%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766399353"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=yCavuTFHoldmkt1gUc13vAIA1aBWbo5nxeSlTh7G4FE%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766399353"
Server: Heroku
Set-Cookie: sf_redirect=%7B%22token%22%3A%222ffb5d%22%2C%22route%22%3A%22app%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CApp%5C%5CDefaultController%22%2C%22method%22%3A%22index%22%2C%22file%22%3A%22%5C%2Fapp%5C%2Fsrc%5C%2FController%5C%2FApp%5C%2FDefaultController.php%22%2C%22line%22%3A34%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; secure; httponly; samesite=lax
Set-Cookie: main_deauth_profile_token=2ffb5d; path=/; httponly; samesite=lax
Set-Cookie: main_auth_profile_token=deleted; expires=Sun, 22 Dec 2024 10:29:12 GMT; Max-Age=0; path=/; httponly
Set-Cookie: cookie_session_staging=7f3a9dfef52aedce126af17b1e71d3e5; path=/; domain=staging.transipal.com; secure; httponly; samesite=none
Via: 1.1 heroku-router
X-Debug-Token: 2ffb5d
X-Debug-Token-Link: https://app.staging.transipal.com/_profiler/2ffb5d
X-Robots-Tag: noindex
Content-Length: 390
Connection: close

Page title: Redirecting to //www.staging.transipal.com/en/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='//www.staging.transipal.com/en/login'" />

        <title>Redirecting to //www.staging.transipal.com/en/login</title>
    </head>
    <body>
        Redirecting to <a href="//www.staging.transipal.com/en/login">//www.staging.transipal.com/en/login</a>.
    </body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 52.223.53.203:443 · app.staging.transipal.com

2025-12-21 05:45

HTTP/1.1 302 Found
Cache-Control: max-age=0, must-revalidate, private
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 05:45:41 GMT
Expires: Sun, 21 Dec 2025 05:45:41 GMT
Location: //www.staging.transipal.com/en/login
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=vfdchAykRJWVnHmBnvqAju3Kj9jwMsBaC4qUJqpWikg%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766295941"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=vfdchAykRJWVnHmBnvqAju3Kj9jwMsBaC4qUJqpWikg%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766295941"
Server: Heroku
Set-Cookie: sf_redirect=%7B%22token%22%3A%2217ccd5%22%2C%22route%22%3A%22app%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CApp%5C%5CDefaultController%22%2C%22method%22%3A%22index%22%2C%22file%22%3A%22%5C%2Fapp%5C%2Fsrc%5C%2FController%5C%2FApp%5C%2FDefaultController.php%22%2C%22line%22%3A34%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; secure; httponly; samesite=lax
Set-Cookie: main_deauth_profile_token=17ccd5; path=/; httponly; samesite=lax
Set-Cookie: main_auth_profile_token=deleted; expires=Sat, 21 Dec 2024 05:45:40 GMT; Max-Age=0; path=/; httponly
Set-Cookie: cookie_session_staging=a9c074e1a861c7539f301ba9dd9db83b; path=/; domain=staging.transipal.com; secure; httponly; samesite=none
Via: 1.1 heroku-router
X-Debug-Token: 17ccd5
X-Debug-Token-Link: https://app.staging.transipal.com/_profiler/17ccd5
X-Robots-Tag: noindex
Content-Length: 390
Connection: close

Page title: Redirecting to //www.staging.transipal.com/en/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='//www.staging.transipal.com/en/login'" />

        <title>Redirecting to //www.staging.transipal.com/en/login</title>
    </head>
    <body>
        Redirecting to <a href="//www.staging.transipal.com/en/login">//www.staging.transipal.com/en/login</a>.
    </body>
</html>

Found 2025-12-21 by HttpPlugin

Create report

Open service 52.223.53.203:443 · app.staging.transipal.com

2025-12-19 07:22

HTTP/1.1 302 Found
Cache-Control: max-age=0, must-revalidate, private
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 07:22:54 GMT
Expires: Fri, 19 Dec 2025 07:22:54 GMT
Location: //www.staging.transipal.com/en/login
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=4bkv%2FH%2BXypOBlZvGtIXvJuRIhhONXHzHLidfVzJCsi4%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766128974"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=4bkv%2FH%2BXypOBlZvGtIXvJuRIhhONXHzHLidfVzJCsi4%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766128974"
Server: Heroku
Set-Cookie: sf_redirect=%7B%22token%22%3A%22fa47ca%22%2C%22route%22%3A%22app%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CApp%5C%5CDefaultController%22%2C%22method%22%3A%22index%22%2C%22file%22%3A%22%5C%2Fapp%5C%2Fsrc%5C%2FController%5C%2FApp%5C%2FDefaultController.php%22%2C%22line%22%3A34%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; secure; httponly; samesite=lax
Set-Cookie: main_deauth_profile_token=fa47ca; path=/; httponly; samesite=lax
Set-Cookie: main_auth_profile_token=deleted; expires=Thu, 19 Dec 2024 07:22:53 GMT; Max-Age=0; path=/; httponly
Set-Cookie: cookie_session_staging=512a75e251a779244323687881d801e2; path=/; domain=staging.transipal.com; secure; httponly; samesite=none
Via: 1.1 heroku-router
X-Debug-Token: fa47ca
X-Debug-Token-Link: https://app.staging.transipal.com/_profiler/fa47ca
X-Robots-Tag: noindex
Content-Length: 390
Connection: close

Page title: Redirecting to //www.staging.transipal.com/en/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='//www.staging.transipal.com/en/login'" />

        <title>Redirecting to //www.staging.transipal.com/en/login</title>
    </head>
    <body>
        Redirecting to <a href="//www.staging.transipal.com/en/login">//www.staging.transipal.com/en/login</a>.
    </body>
</html>

Found 2025-12-19 by HttpPlugin

Create report

app.staging.transipal.com

Fingerprint:

ef8ac489d6eb3b967804caa8c9877248a78595e30fa3d3dd94637cda738433cf

CN:

app.staging.transipal.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-12-02 23:37

Not after:

2026-03-02 23:37

Domain summary

app.staging.transipal.com 6

1 recorded

IP summary

52.223.53.203 2

1 recorded

Domain app.staging.transipal.com

United States

Software information

Symfony developement panel enabled

Create report

Create report

Create report

Create report

Create report

Create report

app.staging.transipal.com

Domain summary

IP summary