LeakIX - Host archeasy.com

Domain archeasy.com

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/8443

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 2606:4700:3031::6815:4199
Domain: dev.archeasy.com
Port: 443
URL: https://dev.archeasy.com/_profiler/empty/search/results

First seen 2025-07-25 09:00
Last seen 2025-08-24 11:36
Open for 30 days
- Fingerprint: 407cf4363b0e62fafca67e07eab3a02deab3a02deab3a02deab3a02deab3a02d
```
Symfony profiler enabled:
https://dev.archeasy.com/_profiler/empty/search/results
```
  Found on 2025-08-24 11:36
Create report

Open service 104.21.65.153:443 · dev.archeasy.com

2026-01-22 13:52
Found 2026-01-22 by HttpPlugin
Create report

Open service 2606:4700:3031::6815:4199:443 · dev.archeasy.com

2026-01-22 13:52

HTTP/1.1 308 Permanent Redirect
Date: Thu, 22 Jan 2026 13:52:16 GMT
Content-Length: 0
Connection: close
location: https://dev.archeasy.com/
Server: cloudflare
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=mKzQ2hpGLmWfoWqzm0%2Fhv66nSq7%2F7nVUIwmk0vh8AVjDsBXUXwIgnmG6Z6WzsHPpvBrfcqGlruTeorT3yFw%2FwyococElOdPGv4gpVve6xqKBcu7xgNJE3WRm"}]}
CF-RAY: 9c1f87e5dc8f3d3e-EWR
alt-svc: h3=":443"; ma=86400

Found 2026-01-22 by HttpPlugin

Create report

Open service 2606:4700:3031::6815:4199:8443 · dev.archeasy.com

2026-01-22 13:52
Found 2026-01-22 by HttpPlugin
Create report
Open service 2606:4700:3030::ac43:92af:443 · dev.archeasy.com

2026-01-22 13:52
Found 2026-01-22 by HttpPlugin
Create report
Open service 2606:4700:3030::ac43:92af:8443 · dev.archeasy.com

2026-01-22 13:52
Found 2026-01-22 by HttpPlugin
Create report
Open service 172.67.146.175:8443 · dev.archeasy.com

2026-01-22 13:52
Found 2026-01-22 by HttpPlugin
Create report
Open service 172.67.146.175:443 · dev.archeasy.com

2026-01-22 13:52
Found 2026-01-22 by HttpPlugin
Create report

Open service 104.21.65.153:8443 · dev.archeasy.com

2026-01-22 13:52

HTTP/1.1 200 OK
Date: Thu, 22 Jan 2026 13:52:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: PHPSESSID=509f6d40b9aa454cc872ef3f4be5de51; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: PHPSESSID=509f6d40b9aa454cc872ef3f4be5de51; path=/; secure; HttpOnly
Set-Cookie: cookie_test=4b601dc2f98b36db5a5b380ef76d2cef; expires=Thu, 22 Jan 2026 14:52:17 GMT; Max-Age=3600; path=/; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
pragma: no-cache
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' 'unsafe-eval';
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
Accept-Ranges: bytes
Server: cloudflare
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=tmDDe5kczmYv28LHAc3XKmhtfqmNWX4Y7s%2Flty1zzgdCCQOAd3rXnsDn5ljLy%2FEX2n7O5uqVfl2N3fuEoPAEoyZGxVUtds%2ByfpV46bzA7jw%3D"}]}
CF-RAY: 9c1f87e94c07fde3-SIN
alt-svc: h3=":8443"; ma=86400

Page title: Anmelden | OPNsense

<!doctype html>
<html lang="de-DE" class="no-js">
  <head>
    <meta charset="UTF-8" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge">

    <meta name="robots" content="noindex, nofollow" />
    <meta name="keywords" content="" />
    <meta name="description" content="" />
    <meta name="copyright" content="" />
    <meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1" />
    <meta name="mobile-web-app-capable" content="yes">
    <meta name="apple-mobile-web-app-capable" content="yes">

    <title>Anmelden | OPNsense</title>

    <link href="/ui/themes/cicada/build/css/main.css?v=4a6562a426d955e8" rel="stylesheet">
    <link href="/ui/themes/cicada/build/images/favicon.png?v=4a6562a426d955e8" rel="shortcut icon">

    <script src="/ui/js/jquery-3.5.1.min.js"></script>

        <script src="/ui/js/theme.js?v=4a6562a426d955e8"></script>
    
  
            <script>
              $( document ).ready(function() {
                  $.ajaxSetup({
                  'beforeSend': function(xhr) {
                      xhr.setRequestHeader("X-CSRFToken", "nNr0TuBcThezgDv-zGly-Q" );
                  }
                });
              });
            </script>
            </head>
  <body class="page-login">

  <div class="container">
    <main class="login-modal-container">
      <header class="login-modal-head" style="height:50px;">
        <div class="navbar-brand">
              <img src="/ui/themes/cicada/build/images/default-logo.png?v=4a6562a426d955e8" height="30" alt="logo" />
            </div>
      </header>

      <div class="login-modal-content">
        <div id="inputerrors" class="text-danger">&nbsp;</div><br />

            <form class="clearfix" id="iform" name="iform" method="post" autocomplete="off"><input type="hidden" name="mMliFTzjPCoCmWJbBZj2bg" value="nNr0TuBcThezgDv-zGly-Q" autocomplete="new-password" />

        <div class="form-group">
          <label for="usernamefld">Benutzername:</label>
          <input id="usernamefld" type="text" name="usernamefld" class="form-control user" tabindex="1" autofocus="autofocus" autocapitalize="off" autocorrect="off" />
        </div>

        <div class="form-group">
          <label for="passwordfld">Passwort:</label>
          <input id="passwordfld" type="password" name="passwordfld" class="form-control pwd" tabindex="2" />
        </div>

        <button type="submit" name="login" value="1" class="btn btn-primary pull-right">Anmelden</button>

      </form>



      
          </div>

      </main>
      <div class="login-foot text-center">
        <a target="_blank" href="https://opnsense.org/">OPNsense</a> (c) 2014-2026        <a target="_blank" href="https://www.deciso.com/">Deciso B.V.</a>
      </div>

    </div>

    </body>
  </html>

Found 2026-01-22 by HttpPlugin

Create report

Open service 104.21.65.153:8443 · archeasy.com

2026-01-10 12:42

HTTP/1.1 200 OK
Date: Sat, 10 Jan 2026 12:42:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: PHPSESSID=4a1bdd72e186388149efebc4d2c8f615; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: PHPSESSID=4a1bdd72e186388149efebc4d2c8f615; path=/; secure; HttpOnly
Set-Cookie: cookie_test=fdb88c190a0a954b3f9d3f92dbf77dc7; expires=Sat, 10 Jan 2026 13:42:42 GMT; Max-Age=3600; path=/; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
pragma: no-cache
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' 'unsafe-eval';
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
Accept-Ranges: bytes
Server: cloudflare
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=gM%2FpdfbAfUfPhd6JO9RVDWimBeZn1aWpor0odCXcnjxUTBzrIF48DgQXTar8O2dpElYMaFLmQVxtf%2BZFig3NMXc5YVOJ1jhATHBIRQ%3D%3D"}]}
CF-RAY: 9bbc418038e637b0-AMS
alt-svc: h3=":8443"; ma=86400

Page title: Anmelden | OPNsense

<!doctype html>
<html lang="de-DE" class="no-js">
  <head>
    <meta charset="UTF-8" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge">

    <meta name="robots" content="noindex, nofollow" />
    <meta name="keywords" content="" />
    <meta name="description" content="" />
    <meta name="copyright" content="" />
    <meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1" />
    <meta name="mobile-web-app-capable" content="yes">
    <meta name="apple-mobile-web-app-capable" content="yes">

    <title>Anmelden | OPNsense</title>

    <link href="/ui/themes/cicada/build/css/main.css?v=31487d1f38f3aa4b" rel="stylesheet">
    <link href="/ui/themes/cicada/build/images/favicon.png?v=31487d1f38f3aa4b" rel="shortcut icon">

    <script src="/ui/js/jquery-3.5.1.min.js"></script>

        <script src="/ui/js/theme.js?v=31487d1f38f3aa4b"></script>
    
  
            <script>
              $( document ).ready(function() {
                  $.ajaxSetup({
                  'beforeSend': function(xhr) {
                      xhr.setRequestHeader("X-CSRFToken", "B0hk24jwU72yMzuyaYlZWA" );
                  }
                });
              });
            </script>
            </head>
  <body class="page-login">

  <div class="container">
    <main class="login-modal-container">
      <header class="login-modal-head" style="height:50px;">
        <div class="navbar-brand">
              <img src="/ui/themes/cicada/build/images/default-logo.png?v=31487d1f38f3aa4b" height="30" alt="logo" />
            </div>
      </header>

      <div class="login-modal-content">
        <div id="inputerrors" class="text-danger">&nbsp;</div><br />

            <form class="clearfix" id="iform" name="iform" method="post" autocomplete="off"><input type="hidden" name="XLh9WKe6N7n3sbtFp3U_1Q" value="B0hk24jwU72yMzuyaYlZWA" autocomplete="new-password" />

        <div class="form-group">
          <label for="usernamefld">Benutzername:</label>
          <input id="usernamefld" type="text" name="usernamefld" class="form-control user" tabindex="1" autofocus="autofocus" autocapitalize="off" autocorrect="off" />
        </div>

        <div class="form-group">
          <label for="passwordfld">Passwort:</label>
          <input id="passwordfld" type="password" name="passwordfld" class="form-control pwd" tabindex="2" />
        </div>

        <button type="submit" name="login" value="1" class="btn btn-primary pull-right">Anmelden</button>

      </form>



      
          </div>

      </main>
      <div class="login-foot text-center">
        <a target="_blank" href="https://opnsense.org/">OPNsense</a> (c) 2014-2025        <a target="_blank" href="https://www.deciso.com/">Deciso B.V.</a>
      </div>

    </div>

    </body>
  </html>

Found 2026-01-10 by HttpPlugin

Create report

archeasy.com*.archeasy.com

Fingerprint:

c48cf6bb30ed3472042c8e582361f36025f8f2a6e7f9b23af712ba34beed55eb

CN:

archeasy.com

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-12-20 14:31

Not after:

2026-03-20 15:29

Domain summary

dev.archeasy.com 8 archeasy.com 0

2 recorded

IP summary

104.21.65.153 2 2606:4700:3031::6815:4199 1 2606:4700:3030::ac43:92af 1 172.67.146.175 1

4 recorded

Domain archeasy.com

Software information

Symfony developement panel enabled

archeasy.com*.archeasy.com

Domain summary

IP summary