Domain construct.twinkle-dev.ru
Russia
Software information
nginx
tcp/443
-
Symfony developement panel enabled
The application has Symfony profiling enabled.
It enables an attacker to access the following sensitive content :
- System configuration
- Request log, including POST request with credentials and/or api keys
IP: 194.87.94.162
Domain: construct.twinkle-dev.ru
Port: 443
URL: https://construct.twinkle-dev.ru/_profiler/empty/search/resultsFirst seen 2023-12-31 12:26
Last seen 2024-05-12 21:02
Open for 133 days-
Fingerprint: 407cf4363b0e62fafca67e07ffefcc33ffefcc33ffefcc33ffefcc33ffefcc33
Symfony profiler enabled: https://construct.twinkle-dev.ru/_profiler/empty/search/results
Found on 2024-05-12 21:02
-
Open service 194.87.94.162:443 · construct.twinkle-dev.ru
2024-05-12 21:02
HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: origin, authorization, accept, Content-Type, X-AUTH-TOKEN Access-Control-Allow-Methods: GET, OPTIONS, POST, PUT, DELETE Access-Control-Allow-Origin: * Cache-Control: no-cache, private Content-Type: text/html; charset=UTF-8 Date: Sun, 12 May 2024 21:02:16 GMT Server: nginx X-Debug-Token: 324fd2 X-Debug-Token-Link: https://construct.twinkle-dev.ru/_profiler/324fd2 X-Powered-By: PHP/8.1.27 X-Robots-Tag: noindex Connection: close Transfer-Encoding: chunked
Found 2024-05-12 by HttpPluginCreate report
-
Open service 194.87.94.162:443 · construct.twinkle-dev.ru
2024-05-08 13:54
HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: origin, authorization, accept, Content-Type, X-AUTH-TOKEN Access-Control-Allow-Methods: GET, OPTIONS, POST, PUT, DELETE Access-Control-Allow-Origin: * Cache-Control: no-cache, private Content-Type: text/html; charset=UTF-8 Date: Wed, 08 May 2024 13:54:45 GMT Server: nginx X-Debug-Token: e288bc X-Debug-Token-Link: https://construct.twinkle-dev.ru/_profiler/e288bc X-Powered-By: PHP/8.1.27 X-Robots-Tag: noindex Connection: close Transfer-Encoding: chunked
Found 2024-05-08 by HttpPluginCreate report
-
Open service 194.87.94.162:443 · construct.twinkle-dev.ru
2024-05-01 03:16
HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: origin, authorization, accept, Content-Type, X-AUTH-TOKEN Access-Control-Allow-Methods: GET, OPTIONS, POST, PUT, DELETE Access-Control-Allow-Origin: * Cache-Control: no-cache, private Content-Type: text/html; charset=UTF-8 Date: Wed, 01 May 2024 03:16:39 GMT Server: nginx X-Debug-Token: 90ac61 X-Debug-Token-Link: https://construct.twinkle-dev.ru/_profiler/90ac61 X-Powered-By: PHP/8.1.27 X-Robots-Tag: noindex Connection: close Transfer-Encoding: chunked
Found 2024-05-01 by HttpPluginCreate report
-
Open service 194.87.94.162:443 · construct.twinkle-dev.ru
2024-04-30 14:08
HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: origin, authorization, accept, Content-Type, X-AUTH-TOKEN Access-Control-Allow-Methods: GET, OPTIONS, POST, PUT, DELETE Access-Control-Allow-Origin: * Cache-Control: no-cache, private Content-Type: text/html; charset=UTF-8 Date: Tue, 30 Apr 2024 14:08:32 GMT Server: nginx X-Debug-Token: cd4148 X-Debug-Token-Link: https://construct.twinkle-dev.ru/_profiler/cd4148 X-Powered-By: PHP/8.1.27 X-Robots-Tag: noindex Connection: close Transfer-Encoding: chunked
Found 2024-04-30 by HttpPluginCreate report
-
Open service 194.87.94.162:80 · construct.twinkle-dev.ru
2024-04-30 14:08
HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 30 Apr 2024 14:08:27 GMT Content-Length: 19 Connection: close 404 page not found
Found 2024-04-30 by HttpPluginCreate report
-
Open service 194.87.94.162:443 · construct.twinkle-dev.ru
2024-04-19 00:15
HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: origin, authorization, accept, Content-Type, X-AUTH-TOKEN Access-Control-Allow-Methods: GET, OPTIONS, POST, PUT, DELETE Access-Control-Allow-Origin: * Cache-Control: no-cache, private Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Apr 2024 00:16:22 GMT Server: nginx X-Debug-Token: f33ace X-Debug-Token-Link: https://construct.twinkle-dev.ru/_profiler/f33ace X-Powered-By: PHP/8.1.27 X-Robots-Tag: noindex Connection: close Transfer-Encoding: chunked
Found 2024-04-19 by HttpPluginCreate report