LeakIX - Host espace.kw-engineering.lu

Domain espace.kw-engineering.lu

Germany

23M GmbH

Software information

openresty

tcp/443

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 2a00:f48:2000:affe:fe00::10
Domain: espace.kw-engineering.lu
Port: 443
URL: https://espace.kw-engineering.lu/_profiler/empty/search/results

First seen 2024-12-14 10:29
Last seen 2026-01-09 20:33
Open for 391 days
- Fingerprint: 407cf4363b0e62fafca67e073e1280eb3e1280eb3e1280eb3e1280eb3e1280eb
```
Symfony profiler enabled:
https://espace.kw-engineering.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 20:33
Create report

Open service 2a00:f48:2000:affe:fe00::10:443 · espace.kw-engineering.lu

2026-01-09 20:33

HTTP/1.1 200 OK
Server: openresty
Date: Fri, 09 Jan 2026 20:33:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Lima-Id: gacmpH8Zz9XckfHtj1
Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly
cache-control: no-cache, no-store, private
x-powered-by: PHP/8.2.29
x-cache-debug: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade, strict-origin-when-cross-origin
strict-transport-security: max-age=31536000
pragma: no-cache
expires: -1
x-cache-tags: contao.db.tl_module.68,contao.db.tl_module.126,contao.db.tl_article.345,contao.db.tl_content.1779,contao.db.tl_content.1782,contao.db.tl_content.1780,contao.db.tl_content.1781,contao.db.tl_content.1696,contao.db.tl_content.1702,contao.db.tl_news_archive.2,contao.db.tl_news.41,contao.db.tl_news.40,contao.db.tl_news.24,contao.db.tl_module.119,contao.db.tl_content.1701,contao.db.tl_form_field.47,contao.db.tl_form_field.43,contao.db.tl_form_field.44,contao.db.tl_form_field.16,contao.db.tl_form_field.18,contao.db.tl_form_field.42,contao.db.tl_form_field.39,contao.db.tl_form_field.20,contao.db.tl_form_field.21,contao.db.tl_form_field.45,contao.db.tl_form_field.48,contao.db.tl_module.92,contao.db.tl_form.5,contao.db.tl_module.123,contao.db.tl_module.69,contao.db.tl_page.73,contao.db.tl_page.226
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-debug-token: 4e1976
x-debug-token-link: https://espace.kw-engineering.lu/_profiler/4e1976
x-robots-tag: noindex
vary: Accept-Encoding
Content-Security-Policy: upgrade-insecure-requests

Found 3 days ago by HttpPlugin

Create report

Open service 2a00:f48:2000:affe:fe00::10:443 · espace.kw-engineering.lu

2026-01-02 17:12

HTTP/1.1 200 OK
Server: openresty
Date: Fri, 02 Jan 2026 17:12:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Lima-Id: gaOp95SRVz5Q4OOiH0
Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly
cache-control: no-cache, no-store, private
x-powered-by: PHP/8.2.29
x-cache-debug: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade, strict-origin-when-cross-origin
strict-transport-security: max-age=31536000
pragma: no-cache
expires: -1
x-cache-tags: contao.db.tl_module.68,contao.db.tl_module.126,contao.db.tl_article.345,contao.db.tl_content.1779,contao.db.tl_content.1782,contao.db.tl_content.1780,contao.db.tl_content.1781,contao.db.tl_content.1696,contao.db.tl_content.1702,contao.db.tl_news_archive.2,contao.db.tl_news.41,contao.db.tl_news.40,contao.db.tl_news.24,contao.db.tl_module.119,contao.db.tl_content.1701,contao.db.tl_form_field.47,contao.db.tl_form_field.43,contao.db.tl_form_field.44,contao.db.tl_form_field.16,contao.db.tl_form_field.18,contao.db.tl_form_field.42,contao.db.tl_form_field.39,contao.db.tl_form_field.20,contao.db.tl_form_field.21,contao.db.tl_form_field.45,contao.db.tl_form_field.48,contao.db.tl_module.92,contao.db.tl_form.5,contao.db.tl_module.123,contao.db.tl_module.69,contao.db.tl_page.73,contao.db.tl_page.226
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-debug-token: a54e79
x-debug-token-link: https://espace.kw-engineering.lu/_profiler/a54e79
x-robots-tag: noindex
vary: Accept-Encoding
Content-Security-Policy: upgrade-insecure-requests

Found 2026-01-02 by HttpPlugin

Create report

Open service 2a00:f48:2000:affe:fe00::10:443 · espace.kw-engineering.lu

2025-12-23 01:47

HTTP/1.1 200 OK
Server: openresty
Date: Tue, 23 Dec 2025 01:47:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Lima-Id: gasicjNTeK4NkzrePa
Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly
cache-control: no-cache, no-store, private
x-powered-by: PHP/8.2.29
x-cache-debug: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade, strict-origin-when-cross-origin
strict-transport-security: max-age=31536000
pragma: no-cache
expires: -1
x-cache-tags: contao.db.tl_module.68,contao.db.tl_module.126,contao.db.tl_article.345,contao.db.tl_content.1779,contao.db.tl_content.1782,contao.db.tl_content.1780,contao.db.tl_content.1781,contao.db.tl_content.1696,contao.db.tl_content.1702,contao.db.tl_news_archive.2,contao.db.tl_news.41,contao.db.tl_news.40,contao.db.tl_news.24,contao.db.tl_module.119,contao.db.tl_content.1701,contao.db.tl_form_field.47,contao.db.tl_form_field.43,contao.db.tl_form_field.44,contao.db.tl_form_field.16,contao.db.tl_form_field.18,contao.db.tl_form_field.42,contao.db.tl_form_field.39,contao.db.tl_form_field.20,contao.db.tl_form_field.21,contao.db.tl_form_field.45,contao.db.tl_form_field.48,contao.db.tl_module.92,contao.db.tl_form.5,contao.db.tl_module.123,contao.db.tl_module.69,contao.db.tl_page.73,contao.db.tl_page.226
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-debug-token: 2170d2
x-debug-token-link: https://espace.kw-engineering.lu/_profiler/2170d2
x-robots-tag: noindex
vary: Accept-Encoding
Content-Security-Policy: upgrade-insecure-requests

Found 2025-12-23 by HttpPlugin

Create report

Open service 2a00:f48:2000:affe:fe00::10:443 · espace.kw-engineering.lu

2025-12-20 14:47

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 20 Dec 2025 14:47:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Lima-Id: gaUoBtQNFr5yv12NTL
Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly
cache-control: no-cache, no-store, private
x-powered-by: PHP/8.2.29
x-cache-debug: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade, strict-origin-when-cross-origin
strict-transport-security: max-age=31536000
pragma: no-cache
expires: -1
x-cache-tags: contao.db.tl_module.68,contao.db.tl_module.126,contao.db.tl_article.345,contao.db.tl_content.1779,contao.db.tl_content.1782,contao.db.tl_content.1780,contao.db.tl_content.1781,contao.db.tl_content.1696,contao.db.tl_content.1702,contao.db.tl_news_archive.2,contao.db.tl_news.41,contao.db.tl_news.40,contao.db.tl_news.24,contao.db.tl_module.119,contao.db.tl_content.1701,contao.db.tl_form_field.47,contao.db.tl_form_field.43,contao.db.tl_form_field.44,contao.db.tl_form_field.16,contao.db.tl_form_field.18,contao.db.tl_form_field.42,contao.db.tl_form_field.39,contao.db.tl_form_field.20,contao.db.tl_form_field.21,contao.db.tl_form_field.45,contao.db.tl_form_field.48,contao.db.tl_module.92,contao.db.tl_form.5,contao.db.tl_module.123,contao.db.tl_module.69,contao.db.tl_page.73,contao.db.tl_page.226
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-debug-token: 0cc68e
x-debug-token-link: https://espace.kw-engineering.lu/_profiler/0cc68e
x-robots-tag: noindex
vary: Accept-Encoding
Content-Security-Policy: upgrade-insecure-requests

Found 2025-12-20 by HttpPlugin

Create report

espace.kw-engineering.lu

Fingerprint:

378177cb88d9c5107ffe8417dfb1f008b51a8a3a9dfa89bf32dc8a7cec52f5be

CN:

espace.kw-engineering.lu

Key:

ECDSA-256

Issuer:

Not before:

2025-10-25 12:08

Not after:

2026-01-23 12:08

Domain summary

espace.kw-engineering.lu 4

1 recorded

IP summary

2a00:f48:2000:affe:fe00::10 2

1 recorded

Domain espace.kw-engineering.lu

Germany

Software information

Symfony developement panel enabled

Create report

Create report

Create report

Create report

espace.kw-engineering.lu

Domain summary

IP summary