LeakIX - Host de.whatsthatcharge.com

Domain de.whatsthatcharge.com

United States

AMAZON-AES

Software information

Heroku

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 54.204.238.15
Domain: de.whatsthatcharge.com
Port: 443
URL: https://de.whatsthatcharge.com

First seen 2022-09-18 01:47
Last seen 2026-01-02 15:57
Open for 1202 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d325beceb325beceb325beceb325beceb
```
Found 1 files trough .DS_Store spidering:

/assets
```
  Found on 2026-01-02 15:57
Create report

Open service 54.204.238.15:443 · de.whatsthatcharge.com

2026-01-09 17:42

HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Type: text/html; charset=utf-8
Etag: W/"2df2a0ec331d16287ebf21023a851a46"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=dpf9p2KA5oyp6L7RZgkUwqsMMolUbqbn8OxRX35cmZY%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767980550"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=dpf9p2KA5oyp6L7RZgkUwqsMMolUbqbn8OxRX35cmZY%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767980550"
Server: Heroku
Set-Cookie: _WhatsThatCharge_session=dVl2emJ5WWo0VXpNdzlzSzR6d3FNY0R0cjk5eGJJR1dwY2xsK0JYb3hVaHhwN1RKbkE0U1dobWI2eHZLRmNxNElDZ25ITFRyUlNqS0owUThBNHhUSFBPKzhodkc3TFhSdUMxTzI2VWpCYXEyVjR3UmZNNnV4bW5BS0FMRTl2UDl4NEQ2Y3M5SXBWcU1BVExBdFZRd3Jhb0RmeFlJRG9VYUJDRzF6UktsWCtZZlNzSkVLVkZPZXNQMjQrZjczV2RnLS1aZi9RTUNUZVZ4Z0loMHc1czdpM0dnPT0%3D--ea96efa8cb0c84faeffaf2832b8de7b1ee714e61; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 3a0df817-634a-5bd3-a494-3d14ffc49bb8
X-Runtime: 0.044377
X-Xss-Protection: 1; mode=block
Date: Fri, 09 Jan 2026 17:42:31 GMT
Connection: close
Transfer-Encoding: chunked

Found 2 days ago by HttpPlugin

Create report

Open service 54.204.238.15:443 · de.whatsthatcharge.com

2026-01-02 15:57

HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Type: text/html; charset=utf-8
Etag: W/"f727efbe91ecb5d42df2add2cc1052f6"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=5COkTfhSXkMyhkQQzbifcCLHb3AyEJWqiwc04rwyj%2FM%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767369471"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=5COkTfhSXkMyhkQQzbifcCLHb3AyEJWqiwc04rwyj%2FM%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767369471"
Server: Heroku
Set-Cookie: _WhatsThatCharge_session=MkFHK0V6dGVqRnNwOTZwVUF5R1ZUcGVaMEFpMXN6TDNzYUhpTTR0VkgvMFNYT2Z1amY1WEgzY1BwL1BKUHhFQUtQQ3llanBjZkFFOW05Smc1blpKQ1o0WlNBWGUweklsam5yVGVUNTJaMHpKOG9uaDU5aDlzRGVtN0I5L2s1RmJZamEySGZIQjA2UTlXYlRqOTB5YXRXQjlQN3hNeE9Gb3BFUzlhQ3Jqc0c4TERiOFRyb2kvSVU3Tnh4UHZtVEVNLS1ySWxFb01aVDdoRC9PN3JnQlZFSVdBPT0%3D--11229c9a911ff17924d0e25dd1dc9c144eff95f8; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 1cd12644-4688-d6a4-cc99-885660c448f6
X-Runtime: 0.015789
X-Xss-Protection: 1; mode=block
Date: Fri, 02 Jan 2026 15:57:51 GMT
Connection: close
Transfer-Encoding: chunked

Found 2026-01-02 by HttpPlugin

Create report

Open service 54.204.238.15:443 · de.whatsthatcharge.com

2025-12-22 22:07

HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Type: text/html; charset=utf-8
Etag: W/"b46fdcd1a6cc1fdfd6b7aefadfc1d91d"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=gRx1ZtLM6hFl7LxjbD6Od%2BHWvX2IddIFhvhUpDHXvqc%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766441276"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=gRx1ZtLM6hFl7LxjbD6Od%2BHWvX2IddIFhvhUpDHXvqc%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766441276"
Server: Heroku
Set-Cookie: _WhatsThatCharge_session=RE80ZytUbUtqbFhUYktva2wrd016bjZJdjA3VWFEWmNjbVJOSUVZSHF6U1VncStUN2FrL1RmSmhKUlBOWlFYYzBlalpyMWxPakVqeW5BRWlnd0JpY3ordDJPMExNNEMrbE4vTDBCOEp5OGlNL1dPczlFTU5FMkx5Z0FVMW1melh3OHdoaDh4azcrQnhpazlGOVh5eXRzOWtmOWVqY0RiaHRFUGVjVjg0VjVDZEhPY0cyNllHc0R0eGFYNkQ4UXptLS1QcHF6cDBDd1NIdmVERExWT3U4aE1BPT0%3D--e601791796beef3b77be076787587b3f652ef6e7; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: fecf7d47-8d2b-cd5c-e2ee-908de439b75d
X-Runtime: 0.012783
X-Xss-Protection: 1; mode=block
Date: Mon, 22 Dec 2025 22:07:56 GMT
Connection: close
Transfer-Encoding: chunked

Found 2025-12-22 by HttpPlugin

Create report

Open service 54.204.238.15:443 · de.whatsthatcharge.com

2025-12-21 09:36

HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Type: text/html; charset=utf-8
Etag: W/"cc741c8c6d50b1cff82236b877aa894c"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ymNPRUleShGFo4iVWWcqebD1Qvv2XmmF5YpX%2BzziyV4%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766309814"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ymNPRUleShGFo4iVWWcqebD1Qvv2XmmF5YpX%2BzziyV4%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766309814"
Server: Heroku
Set-Cookie: _WhatsThatCharge_session=WEZiVHBmUmhLQzZkb28xaWtGd1U5czFCQXdWcE4rZ2ppaUdZdHczV3ZpL0htUytBQ29wUmJLUzFFVGZydWxQNnh4SHV2RDNQamtERjVsd29RdW9kemlRSk95eFVnM3ByeW5WVW1kclRvZkFOQjZudldGN1FJWm4vSUpJZXhKbTY0VmoyYnRJT0xmeFdMUnRwS1A2ZndsOWgrT0NJRHhLUDJOSVdmK0FlWm5DYTRDb0JnMml5b3g0N0VYMUhqVW0vLS1TSUswbXVxZkJNczRDcExDNjZ2L0xnPT0%3D--4d1bb4c9cb280362588dc063776b1bf44aba44f3; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: aacc58d5-eff9-01f1-5d4e-8fb749bed2e2
X-Runtime: 0.013635
X-Xss-Protection: 1; mode=block
Date: Sun, 21 Dec 2025 09:36:54 GMT
Connection: close
Transfer-Encoding: chunked

Found 2025-12-21 by HttpPlugin

Create report

Open service 54.204.238.15:443 · de.whatsthatcharge.com

2025-12-19 11:14

HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Type: text/html; charset=utf-8
Etag: W/"93ff057e23330f9d2766a5fa311cff8c"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=IgSvN7A91w%2BO3ZP5%2BDk7f0MZLgQR8n%2FNBSMIYX0jf2g%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766142880"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=IgSvN7A91w%2BO3ZP5%2BDk7f0MZLgQR8n%2FNBSMIYX0jf2g%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766142880"
Server: Heroku
Set-Cookie: _WhatsThatCharge_session=dVVTY3E1bkhOSDdkNyswd2FVM2xkUXg3UVlYbGJ2blZ4Si9VUlB5bXBaZkhweUQxZDFOOUVFOGZFeXFhQnZMZmpZNnBhZTBxOHdsWkcvOGpCY3lGN0YyZS82YVQvS3RIbmdZcTBlMTM3dWdHcE00SGg1bVM5LzRaaXprZmV4WXN1RjBkS3JWWHZuVG9hNE9GTWdqTGFqTGtXa2NYdGJndDV6YjZ0WFRZUWVFalZNZFBHOUtXaVBvNkdmQ2hpVTRtLS0wYnlhM1VPVllwNDM2dGdzZ05lWGJ3PT0%3D--a449af3258c355ad0d6ddaada8fa05a578ff26ee; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 6fb0860f-4e29-7987-c268-2f8ed79e13b6
X-Runtime: 0.017200
X-Xss-Protection: 1; mode=block
Date: Fri, 19 Dec 2025 11:14:40 GMT
Connection: close
Transfer-Encoding: chunked

Found 2025-12-19 by HttpPlugin

Create report

de.whatsthatcharge.com

Fingerprint:

821ac458690391cee0dae5fb4454d6f52af4f82c62809c87b0f77efdfe8aebac

CN:

de.whatsthatcharge.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-11-14 00:54

Not after:

2026-02-12 00:54

Domain summary

de.whatsthatcharge.com 5

1 recorded

IP summary

54.204.238.15 2

1 recorded

Domain de.whatsthatcharge.com

United States

Software information

MacOS file listing through .DS_Store file

Create report

Create report

Create report

Create report

Create report

de.whatsthatcharge.com

Domain summary

IP summary