LeakIX - Host dev-pfizer-datapoint.ycalabs.com

Domain dev-pfizer-datapoint.ycalabs.com

CLOUDFLARENET

Software information

cloudflare

tcp/443

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 2a06:98c1:3121::3
Domain: dev-pfizer-datapoint.ycalabs.com
Port: 443
URL: https://dev-pfizer-datapoint.ycalabs.com/_profiler/empty/search/results

First seen 2024-11-28 12:41
Last seen 2024-12-30 19:29
Open for 32 days
- Fingerprint: 407cf4363b0e62fafca67e070be71fde0be71fde0be71fde0be71fde0be71fde
```
Symfony profiler enabled:
https://dev-pfizer-datapoint.ycalabs.com/_profiler/empty/search/results
```
  Found on 2024-12-30 19:29
Create report

Open service 2a06:98c1:3121::3:443 · dev-pfizer-datapoint.ycalabs.com

2025-01-08 11:24

HTTP/1.1 503 Service Unavailable
Date: Wed, 08 Jan 2025 11:24:10 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5aOTMPSRhbNLqIbz8%2BMR%2BQfC%2B0iwQNnoSXrPngC46ETzUALuH43O%2BCYA5la5xvDnPeVzAwpr%2BNLi4Bqej2MkKC%2BNXA8047Gi906FpDCmAaACkQKPRBKXHBnuSFHavjEPuxvv%2Fy%2BmRC9kGpJYSDeTx3z4%2B9KyUVccALaIa99UnA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8febd1d178112bb2-FRA
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=904&min_rtt=855&rtt_var=338&sent=6&recv=6&lost=0&retrans=0&sent_bytes=3097&recv_bytes=629&delivery_rate=4627002&cwnd=233&unsent_bytes=0&cid=8cc663de93147bf8&ts=540&x=0"

Page title: 503 Service Unavailable

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>503 Service Unavailable</title>
</head><body>
<h1>Service Unavailable</h1>
<p>The server is temporarily unable to service your
request due to maintenance downtime or capacity
problems. Please try again later.</p>
<hr>
<address>Apache/2.4.41 (Ubuntu) Server at dev-pfizer-datapoint.ycalabs.com Port 443</address>
</body></html>

Found 14 hours ago by HttpPlugin

Create report

Open service 2a06:98c1:3121::3:443 · dev-pfizer-datapoint.ycalabs.com

2025-01-04 12:56

HTTP/1.1 503 Service Unavailable
Date: Sat, 04 Jan 2025 12:56:13 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZG3pvmxdUIwMRM%2F5SYJAkwjqrPWczAyxGyY1Cu4T3DCqXXAlR%2BEFXtv9%2BQI7iUvqye%2BDVmOH3q1CXCzcX8N3gR5czHiOuPckHFxTIxyYRvOLey1rQ08NFSeoyUyKPH2uqH8nINsZ%2FFRPlP3KgQJDI4hQp9du5uJOJKoVjz68Hw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8fcb632aee1fcd6b-LHR
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2605&min_rtt=2561&rtt_var=790&sent=6&recv=6&lost=0&retrans=0&sent_bytes=3098&recv_bytes=629&delivery_rate=1414975&cwnd=253&unsent_bytes=0&cid=98fac2f5963f5823&ts=506&x=0"

Page title: 503 Service Unavailable

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>503 Service Unavailable</title>
</head><body>
<h1>Service Unavailable</h1>
<p>The server is temporarily unable to service your
request due to maintenance downtime or capacity
problems. Please try again later.</p>
<hr>
<address>Apache/2.4.41 (Ubuntu) Server at dev-pfizer-datapoint.ycalabs.com Port 443</address>
</body></html>

Found 2025-01-04 by HttpPlugin

Create report

Open service 2a06:98c1:3121::3:443 · dev-pfizer-datapoint.ycalabs.com

2025-01-02 15:33

HTTP/1.1 503 Service Unavailable
Date: Thu, 02 Jan 2025 15:33:16 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D0Aag99ThGPJuuv5EMQgoMz1e4CS2Z%2FRfYrlwt079VaaynHUSJE1MT2UhKHvMiVsxDFFwm%2B0A524nPjoAv1ZLdg6hmplgW5HJwYqKxpa0IQKxvD71wI6D%2F%2FMx%2Bw3Go6THj3Dv1L%2BbGiO6l6kCIuJVkpZY%2FG49tu2RmbZsg7ftw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8fbbce749d818ed9-FRA
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=865&min_rtt=846&rtt_var=277&sent=6&recv=6&lost=0&retrans=0&sent_bytes=3097&recv_bytes=629&delivery_rate=4780141&cwnd=253&unsent_bytes=0&cid=88e05ac6edfce057&ts=548&x=0"

Page title: 503 Service Unavailable

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>503 Service Unavailable</title>
</head><body>
<h1>Service Unavailable</h1>
<p>The server is temporarily unable to service your
request due to maintenance downtime or capacity
problems. Please try again later.</p>
<hr>
<address>Apache/2.4.41 (Ubuntu) Server at dev-pfizer-datapoint.ycalabs.com Port 443</address>
</body></html>

Found 2025-01-02 by HttpPlugin

Create report

Open service 2a06:98c1:3121::3:443 · dev-pfizer-datapoint.ycalabs.com

2025-01-01 13:55

HTTP/1.1 503 Service Unavailable
Date: Wed, 01 Jan 2025 13:55:13 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B16iTSstY8VnHDm1yx9ecybzEWtb0c7wkieDD3uszKOzk8gBOTDOENBuy%2BAEHpe1q%2F4OiPO34X0v3g10q31DHeVK0u3I7pzW8jt7CuJtv%2B8C2TqUpb5PWdbbucdW6BupwJXJ3wSx8nUy4KRZ%2F7p5ssJR1%2FXHhK7fOeg1L%2BnXPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8fb30178dae89752-FRA
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1629&min_rtt=1163&rtt_var=1241&sent=6&recv=6&lost=0&retrans=0&sent_bytes=3098&recv_bytes=629&delivery_rate=3477214&cwnd=253&unsent_bytes=0&cid=926ed9caa4548345&ts=515&x=0"

Page title: 503 Service Unavailable

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>503 Service Unavailable</title>
</head><body>
<h1>Service Unavailable</h1>
<p>The server is temporarily unable to service your
request due to maintenance downtime or capacity
problems. Please try again later.</p>
<hr>
<address>Apache/2.4.41 (Ubuntu) Server at dev-pfizer-datapoint.ycalabs.com Port 443</address>
</body></html>

Found 2025-01-01 by HttpPlugin

Create report

Open service 2a06:98c1:3121::3:443 · dev-pfizer-datapoint.ycalabs.com

2024-12-30 19:29

HTTP/1.1 200 OK
Date: Mon, 30 Dec 2024 19:29:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/8.2.26
Cache-Control: max-age=0, must-revalidate, private
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer, strict-origin-when-cross-origin
Content-Security-Policy-Report-Only: script-src 'self' 'unsafe-eval' cdnjs.cloudflare.com 'unsafe-inline' 'nonce-1pu4f/Xvfg1JKBZszX8qpQ==' 'nonce-1d0fa5a5ef8a73315e15afb98d5e42a0'; report-uri /nelmio/csp/report
X-Content-Security-Policy-Report-Only: script-src 'self' 'unsafe-eval' cdnjs.cloudflare.com 'unsafe-inline' 'nonce-1pu4f/Xvfg1JKBZszX8qpQ=='; report-uri /nelmio/csp/report
Content-Security-Policy: default-src 'self' data:; block-all-mixed-content ; connect-src 'self' localhost:1337 blob: blob: https://myawsbucketlts.s3.ap-south-1.amazonaws.com; font-src 'self' fonts.gstatic.com icons.getbootstrap.com cdnjs.cloudflare.com data:; img-src 'self' data: blob: cdn.jsdelivr.net; media-src 'self'; script-src 'self' 'unsafe-eval' cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'nonce-1pu4f/Xvfg1JKBZszX8qpQ==' 'nonce-1d0fa5a5ef8a73315e15afb98d5e42a0'; style-src 'self' 'unsafe-inline' fonts.googleapis.com icons.getbootstrap.com cdnjs.cloudflare.com cdn.datatables.net cdn.jsdelivr.net; report-uri /nelmio/csp/report
X-Content-Security-Policy: default-src 'self' data:; block-all-mixed-content ; connect-src 'self' localhost:1337 blob: blob: https://myawsbucketlts.s3.ap-south-1.amazonaws.com; font-src 'self' fonts.gstatic.com icons.getbootstrap.com cdnjs.cloudflare.com data:; img-src 'self' data: blob: cdn.jsdelivr.net; media-src 'self'; script-src 'self' 'unsafe-eval' cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'nonce-1pu4f/Xvfg1JKBZszX8qpQ==' 'nonce-1d0fa5a5ef8a73315e15afb98d5e42a0'; style-src 'self' 'unsafe-inline' fonts.googleapis.com icons.getbootstrap.com cdnjs.cloudflare.com cdn.datatables.net cdn.jsdelivr.net; report-uri /nelmio/csp/report
X-Debug-Token: 775c48
X-Debug-Token-Link: http://dev-pfizer-datapoint.ycalabs.com/_profiler/775c48
X-Robots-Tag: noindex
Expires: Mon, 30 Dec 2024 19:29:57 GMT
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=5f9052ec62abd3303ba2b451cd6b5ac5; expires=Wed, 01 Jan 2025 19:29:57 GMT; Max-Age=172800; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GEAtt%2BQ0PlPmyfSFMgcaq%2BfA1hv7w7hKML11cBsdQhZDgScZHS2yFyRe77Y8xN%2BvMegmktcDhqsvOM3n5QcHfpxboUOxovAVIT5RsMxo1f0at%2B9eA8QsGxsVkCi8q5iZKnVvOPuzUBJxgWqIRFfbZRyEzByyozn2%2BHlfciKT1w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8fa4710e383fdbd8-FRA
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=872&min_rtt=845&rtt_var=288&sent=6&recv=7&lost=0&retrans=0&sent_bytes=3097&recv_bytes=629&delivery_rate=4419672&cwnd=253&unsent_bytes=0&cid=394c8b4b2d118353&ts=630&x=0"

Found 2024-12-30 by HttpPlugin

Create report

Open service 2a06:98c1:3121::3:443 · dev-pfizer-datapoint.ycalabs.com

2024-12-20 19:28

HTTP/1.1 200 OK
Date: Fri, 20 Dec 2024 19:28:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/8.2.26
Cache-Control: max-age=0, must-revalidate, private
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer, strict-origin-when-cross-origin
Content-Security-Policy-Report-Only: script-src 'self' 'unsafe-eval' cdnjs.cloudflare.com 'unsafe-inline' 'nonce-gcU7HF7pwh31mxe0lveOjg==' 'nonce-71b7cb9c5bacec0ce8327ca796d34f88'; report-uri /nelmio/csp/report
X-Content-Security-Policy-Report-Only: script-src 'self' 'unsafe-eval' cdnjs.cloudflare.com 'unsafe-inline' 'nonce-gcU7HF7pwh31mxe0lveOjg=='; report-uri /nelmio/csp/report
Content-Security-Policy: default-src 'self' data:; block-all-mixed-content ; connect-src 'self' localhost:1337 blob: blob: https://myawsbucketlts.s3.ap-south-1.amazonaws.com; font-src 'self' fonts.gstatic.com icons.getbootstrap.com cdnjs.cloudflare.com data:; img-src 'self' data: blob: cdn.jsdelivr.net; media-src 'self'; script-src 'self' 'unsafe-eval' cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'nonce-gcU7HF7pwh31mxe0lveOjg==' 'nonce-71b7cb9c5bacec0ce8327ca796d34f88'; style-src 'self' 'unsafe-inline' fonts.googleapis.com icons.getbootstrap.com cdnjs.cloudflare.com cdn.datatables.net cdn.jsdelivr.net; report-uri /nelmio/csp/report
X-Content-Security-Policy: default-src 'self' data:; block-all-mixed-content ; connect-src 'self' localhost:1337 blob: blob: https://myawsbucketlts.s3.ap-south-1.amazonaws.com; font-src 'self' fonts.gstatic.com icons.getbootstrap.com cdnjs.cloudflare.com data:; img-src 'self' data: blob: cdn.jsdelivr.net; media-src 'self'; script-src 'self' 'unsafe-eval' cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'nonce-gcU7HF7pwh31mxe0lveOjg==' 'nonce-71b7cb9c5bacec0ce8327ca796d34f88'; style-src 'self' 'unsafe-inline' fonts.googleapis.com icons.getbootstrap.com cdnjs.cloudflare.com cdn.datatables.net cdn.jsdelivr.net; report-uri /nelmio/csp/report
X-Debug-Token: 7f8711
X-Debug-Token-Link: http://dev-pfizer-datapoint.ycalabs.com/_profiler/7f8711
X-Robots-Tag: noindex
Expires: Fri, 20 Dec 2024 19:28:42 GMT
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=41f07de04e461ec1841fd7057ab99f42; expires=Sun, 22 Dec 2024 19:28:42 GMT; Max-Age=172800; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r3luYsk68yEQcJHylIjNwlDn622jkjLcfU3tn5%2BMqtbfmrYk9qrxb7AxxGGBoHrvkb1XOukfE3AUyUM6VK5PdV1aqlQWDHBcBSEBOw%2BBrqsQL7YSfJwvJXwJQ2DlwSpvfx6xQ04rryV%2BwJ%2BUpzt2949kckffb98mYJIYODRpcw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8f5209743da565b2-FRA
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=872&min_rtt=858&rtt_var=268&sent=6&recv=6&lost=0&retrans=0&sent_bytes=3099&recv_bytes=629&delivery_rate=4528555&cwnd=253&unsent_bytes=0&cid=0b5a63a9c792cceb&ts=570&x=0"

Found 2024-12-20 by HttpPlugin

Create report

Open service 2a06:98c1:3121::3:443 · dev-pfizer-datapoint.ycalabs.com

2024-12-18 19:46

HTTP/1.1 200 OK
Date: Wed, 18 Dec 2024 19:46:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/8.2.26
Cache-Control: max-age=0, must-revalidate, private
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer, strict-origin-when-cross-origin
Content-Security-Policy-Report-Only: script-src 'self' 'unsafe-eval' cdnjs.cloudflare.com 'unsafe-inline' 'nonce-MKIuYDFU+UlhQXXumKDU4g==' 'nonce-778836c4e22b3448686ef6c54dd848ee'; report-uri /nelmio/csp/report
X-Content-Security-Policy-Report-Only: script-src 'self' 'unsafe-eval' cdnjs.cloudflare.com 'unsafe-inline' 'nonce-MKIuYDFU+UlhQXXumKDU4g=='; report-uri /nelmio/csp/report
Content-Security-Policy: default-src 'self' data:; block-all-mixed-content ; connect-src 'self' localhost:1337 blob: blob: https://myawsbucketlts.s3.ap-south-1.amazonaws.com; font-src 'self' fonts.gstatic.com icons.getbootstrap.com cdnjs.cloudflare.com data:; img-src 'self' data: blob: cdn.jsdelivr.net; media-src 'self'; script-src 'self' 'unsafe-eval' cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'nonce-MKIuYDFU+UlhQXXumKDU4g==' 'nonce-778836c4e22b3448686ef6c54dd848ee'; style-src 'self' 'unsafe-inline' fonts.googleapis.com icons.getbootstrap.com cdnjs.cloudflare.com cdn.datatables.net cdn.jsdelivr.net; report-uri /nelmio/csp/report
X-Content-Security-Policy: default-src 'self' data:; block-all-mixed-content ; connect-src 'self' localhost:1337 blob: blob: https://myawsbucketlts.s3.ap-south-1.amazonaws.com; font-src 'self' fonts.gstatic.com icons.getbootstrap.com cdnjs.cloudflare.com data:; img-src 'self' data: blob: cdn.jsdelivr.net; media-src 'self'; script-src 'self' 'unsafe-eval' cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'nonce-MKIuYDFU+UlhQXXumKDU4g==' 'nonce-778836c4e22b3448686ef6c54dd848ee'; style-src 'self' 'unsafe-inline' fonts.googleapis.com icons.getbootstrap.com cdnjs.cloudflare.com cdn.datatables.net cdn.jsdelivr.net; report-uri /nelmio/csp/report
X-Debug-Token: 8562c1
X-Debug-Token-Link: http://dev-pfizer-datapoint.ycalabs.com/_profiler/8562c1
X-Robots-Tag: noindex
Expires: Wed, 18 Dec 2024 19:46:16 GMT
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=d8f2cd0c972785b99a10df0661242546; expires=Fri, 20 Dec 2024 19:46:16 GMT; Max-Age=172800; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rS%2BjjLi1jD4z0H2DUDLKrhbyDEB%2FGJA5Qb6LXX4FKaPH0hMmwXAWZ2YR7KxK6adbHbmaEjcZHwtMyUn6lPSRKyHsq2Ucg7XR1i2g3Ms3mhnFQC%2F9Nh973%2B2LgD9FYwfdIF9C86dI8Yz8DmPFTHY8HIcSpgGA0Y4x3iy7TI1SLA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8f41a86f0a2a1889-EWR
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1077&min_rtt=852&rtt_var=437&sent=6&recv=6&lost=0&retrans=0&sent_bytes=3097&recv_bytes=629&delivery_rate=4637614&cwnd=253&unsent_bytes=0&cid=a85ab79752ae72f9&ts=1590&x=0"

Found 2024-12-18 by HttpPlugin

Create report

ycalabs.com*.ycalabs.com

Fingerprint:

ea76e4ef615a81ced9492263e850590b12a8865b56c9da8aeff18b944ebec056

CN:

ycalabs.com

Key:

ECDSA-256

Issuer:

WE1

Not before:

2024-12-08 12:27

Not after:

2025-03-08 12:27

Domain summary

dev-pfizer-datapoint.ycalabs.com 7

1 recorded

IP summary

2a06:98c1:3121::3 2

1 recorded

Domain dev-pfizer-datapoint.ycalabs.com

Software information

Symfony developement panel enabled

Create report

Create report

Create report

Create report

Create report

Create report

Create report

ycalabs.com*.ycalabs.com

Domain summary

IP summary