LeakIX - Host harryhall.com

Domain harryhall.com

United Kingdom

CLOUDFLARENET

Software information

Apache Apache

tcp/443 tcp/80

Microsoft-IIS 10.0

tcp/80

cloudflare

tcp/443 tcp/80 tcp/8443

nginx nginx

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 77.68.120.146
Domain: app.harryhall.com
Port: 443
URL: https://app.harryhall.com

First seen 2024-04-14 10:47
Last seen 2026-01-02 07:09
Open for 627 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d8775e5ed002361f9edc16eb992294da2b
```
Found 8 files trough .DS_Store spidering:

/certs
/passTemplateData
/passTemplateData/apple
/passTemplateData/apple/test.pass
/src
/src/cms
/src/services
/test
```
  Found on 2026-01-02 07:09
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3af247253af24725daf14cd1ef6d8bfbf27126c3f7c6439e
```
Found 9 files trough .DS_Store spidering:

/certs
/certs/signerKey.pem
/passTemplateData
/passTemplateData/apple
/passTemplateData/apple/test.pass
/src
/src/cms
/src/services
/test
```
  Found on 2025-05-24 12:31
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d8775e5ed0c0cb662e5e2303443faa8704
```
Found 8 files trough .DS_Store spidering:

/certs
/certs/signerKey.pem
/passTemplateData
/passTemplateData/apple
/passTemplateData/apple/test.pass
/src
/src/services
/test
```
  Found on 2025-04-24 08:52
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3af247253af24725daf14cd1ef6d8bfbf27126c32e76a7a2
```
Found 9 files trough .DS_Store spidering:

/certs
/certs/signerKey.pem
/passTemplateData
/passTemplateData/apple
/passTemplateData/apple/test.pass
/src
/src/services
/StrapiCMS
/test
```
  Found on 2025-03-23 00:15
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 104.26.14.188
Domain: harryhall.com
Port: 443
URL: https://harryhall.com

First seen 2025-10-17 10:04
Last seen 2026-01-02 16:24
Open for 77 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d78e355dd012223f752912389959e6b099f31601

GraphQL introspection enabled at /graphql
Types: 457 (by kind: ENUM: 30, INPUT_OBJECT: 102, INTERFACE: 20, OBJECT: 300, SCALAR: 5)
Operations:
- Query: Query | fields: amBrandGetMoreFromThisBrandBlock, amGiftCardAccount, amGiftCardPreview, amGiftCardSetting, amUserGiftCardAccount
- Mutation: Mutation | fields: addAmGiftCardCodeToAccount, addAmGiftCardProductsToCart, addBundleProductsToCart, addCommentToPost, addConfigurableProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Detected: Magento

Found on 2026-01-02 16:24

855.3 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d78e355dd012223f752912389959e6b0ef1ae1a2

GraphQL introspection enabled at /graphql
Types: 457 (by kind: ENUM: 30, INPUT_OBJECT: 102, INTERFACE: 20, OBJECT: 300, SCALAR: 5)
Operations:
- Query: Query | fields: amBrandGetMoreFromThisBrandBlock, amGiftCardAccount, amGiftCardPreview, amGiftCardSetting, amUserGiftCardAccount
- Mutation: Mutation | fields: addAmGiftCardCodeToAccount, addAmGiftCardProductsToCart, addBundleProductsToCart, addCommentToPost, addConfigurableProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-12-11 13:44

855.3 kBytes

Create report

Open service 104.26.14.188:443 · harryhall.com

2026-01-09 21:57

HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 21:57:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
pragma: no-cache
Cache-Control: max-age=0, must-revalidate, no-cache, no-store
expires: Thu, 09 Jan 2025 21:57:12 GMT
x-built-with: Hyva Themes
x-magento-tags: FPC
strict-transport-security: max-age=31536000
content-security-policy: upgrade-insecure-requests;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-frame-options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=YLm1uKfn%2BQiZcARE7z4Rs2U%2FW6oqXvnviB4aUHMDjOC8btc85vH6bZNIStxVsAPJfgG6YgGb4fq4PuYQafosuj%2BWP9Jgvg4RjIte3w%3D%3D"}]}
vary: Accept-Encoding
Set-Cookie: PHPSESSID=qn7j78jss1epu4b3nt8ivuq9jd; expires=Sat, 10-Jan-2026 21:57:12 GMT; Max-Age=86400; path=/; domain=harryhall.com; secure; HttpOnly; SameSite=Lax
x-ua-compatible: IE=edge
Server: cloudflare
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=7,cfOrigin;dur=1783
CF-RAY: 9bb7305f5e83c63b-SIN
alt-svc: h3=":443"; ma=86400

Found 2026-01-09 by HttpPlugin

Create report

Open service 194.164.23.41:80 · www.web01.harryhall.com

2026-01-09 19:00

HTTP/1.1 301 Moved Permanently
Date: Fri, 09 Jan 2026 19:01:26 GMT
Server: Apache
Location: https://www.web01.harryhall.com/
Content-Length: 240
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 301 Moved Permanently

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://www.web01.harryhall.com/">here</a>.</p>
</body></html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 194.164.23.41:443 · www.web01.harryhall.com

2026-01-09 19:00

HTTP/1.1 301 Moved Permanently
Date: Fri, 09 Jan 2026 19:00:48 GMT
Server: Apache
Location: https://web01.harryhall.com/
Content-Length: 236
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 301 Moved Permanently

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://web01.harryhall.com/">here</a>.</p>
</body></html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 194.164.23.41:80 · web01.harryhall.com

2026-01-09 19:00

HTTP/1.1 301 Moved Permanently
Date: Fri, 09 Jan 2026 19:01:26 GMT
Server: Apache
Location: https://web01.harryhall.com/
Content-Length: 236
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 301 Moved Permanently

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://web01.harryhall.com/">here</a>.</p>
</body></html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 194.164.23.41:443 · web01.harryhall.com

2026-01-09 19:00

HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 19:00:48 GMT
Server: Apache
Pragma: no-cache
Cache-Control: max-age=0, must-revalidate, no-cache, no-store
Expires: Thu, 09 Jan 2025 19:00:49 GMT
x-built-with: Hyva Themes
X-Magento-Tags: FPC
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: upgrade-insecure-requests;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Set-Cookie: PHPSESSID=cdo7c7p5ctutdhdvqepi7cppf8; expires=Sat, 10-Jan-2026 19:00:49 GMT; Max-Age=86400; path=/; domain=harryhall.com; secure; HttpOnly; SameSite=Lax
Upgrade: h2
Connection: Upgrade, close
Vary: Accept-Encoding
X-UA-Compatible: IE=edge
X-Frame-Options: SAMEORIGIN
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2026-01-09 by HttpPlugin

Create report

Open service 77.68.120.146:443 · app.harryhall.com

2026-01-09 06:00

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Jan 2026 06:00:38 GMT
Content-Type: text/html
Content-Length: 8746
Last-Modified: Mon, 29 Dec 2025 06:48:01 GMT
Connection: close
ETag: "69522421-222a"
X-Powered-By: PleskLin
Accept-Ranges: bytes

Page title: Harry Hall Mobile App

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Harry Hall Mobile App</title>
    <style>
        body {
            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, sans-serif;
            margin: 0;
            padding: 20px;
            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
            min-height: 100vh;
            display: flex;
            flex-direction: column;
            justify-content: center;
            align-items: center;
            text-align: center;
            color: white;
        }
        
        .container {
            max-width: 400px;
            background: rgba(255, 255, 255, 0.1);
            backdrop-filter: blur(10px);
            border-radius: 20px;
            padding: 40px 30px;
            box-shadow: 0 8px 32px rgba(0, 0, 0, 0.1);
        }
        
        .logo {
            width: 100px;
            height: 100px;
            background: white;
            border-radius: 20px;
            margin: 0 auto 20px;
            display: flex;
            align-items: center;
            justify-content: center;
            font-weight: bold;
            color: #667eea;
            font-size: 24px;
        }
        
        h1 {
            margin: 20px 0 10px;
            font-size: 28px;
            font-weight: 600;
        }
        
        p {
            margin: 10px 0 30px;
            font-size: 16px;
            opacity: 0.9;
            line-height: 1.5;
        }
        
        .download-btn {
            display: inline-block;
            background: rgba(255, 255, 255, 0.2);
            color: white;
            text-decoration: none;
            padding: 15px 30px;
            border-radius: 50px;
            font-size: 16px;
            font-weight: 600;
            margin: 10px;
            transition: all 0.3s ease;
            border: 2px solid rgba(255, 255, 255, 0.3);
        }
        
        .download-btn:hover {
            background: rgba(255, 255, 255, 0.3);
            transform: translateY(-2px);
        }
        
        .primary-btn {
            background: white;
            color: #667eea;
        }
        
        .primary-btn:hover {
            background: rgba(255, 255, 255, 0.9);
        }
        
        .device-info {
            margin-top: 30px;
            font-size: 14px;
            opacity: 0.7;
        }
        
        .spinner {
            width: 30px;
            height: 30px;
            border: 3px solid rgba(255, 255, 255, 0.3);
            border-top: 3px solid white;
            border-radius: 50%;
            animation: spin 1s linear infinite;
            margin: 20px auto;
        }
        
        @keyframes spin {
            0% { transform: rotate(0deg); }
            100% { transform: rotate(360deg); }
        }
        
        .hidden {
            display: none;
        }
    </style>
</head>
<body>
    <div class="container">
        <div class="logo">HH</div>
        <h1>Harry Hall Mobile App</h1>
        <p>Get the official Harry Hall app for the best shopping experience!</p>
        
        <div id="loading" class="loading">
            <div class="spinner"></div>
            <p>Detecting your device...</p>
        </div>
        
        <div id="download-section" class="hidden">
            <a href="#" id="primary-download" class="download-btn primary-btn">Download App</a>
            <br>
            <a href="#" id="secondary-download" class="download-btn">Alternative Download</a>
        </div>
        
        <div class="device-info">
            <p id="device-detected"></p>
        </div>
    </div>

    <script>
        // App store URLs
        const APP_STORE_URL = 'https://apps.apple.com/app/harry-hall/id6478523277'; // Replace with actual iOS App Store URL
        const PLAY_STORE_URL = 'https://play.google.com/store/apps/details?id=com.harryhall.harry_hall_mobile';
        const WEBSITE_URL = 'https://harryhall.com/'; //

Found 2026-01-09 by HttpPlugin

Create report

Open service 104.26.14.188:443 · harryhall.com

2026-01-02 16:24

HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 16:24:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
pragma: no-cache
Cache-Control: max-age=0, must-revalidate, no-cache, no-store
expires: Thu, 02 Jan 2025 16:24:29 GMT
x-built-with: Hyva Themes
x-magento-tags: FPC
strict-transport-security: max-age=31536000
content-security-policy: upgrade-insecure-requests;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-frame-options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=TsOHZdXN6SMEjEoB6NEyCFscgFhNJ%2BP7Y6Qks%2Fl0wcPagaOIBAjN8vhFCGWXHflnF4xGy7l9tLh7%2BiHGVvIKrX68j8cOvjflaxd2ng%3D%3D"}]}
vary: Accept-Encoding
Set-Cookie: PHPSESSID=fh4ir7ma1jrtuh9p1g7eoeq7cp; expires=Sat, 03-Jan-2026 16:24:29 GMT; Max-Age=86400; path=/; domain=harryhall.com; secure; HttpOnly; SameSite=Lax
x-ua-compatible: IE=edge
Server: cloudflare
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=16,cfOrigin;dur=1912
CF-RAY: 9b7b9b59fc896bdc-SIN
alt-svc: h3=":443"; ma=86400

Found 2026-01-02 by HttpPlugin

Create report

Open service 77.68.120.146:443 · app.harryhall.com

2026-01-02 07:09

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Jan 2026 07:09:16 GMT
Content-Type: text/html
Content-Length: 8746
Last-Modified: Mon, 29 Dec 2025 06:48:01 GMT
Connection: close
ETag: "69522421-222a"
X-Powered-By: PleskLin
Accept-Ranges: bytes

Page title: Harry Hall Mobile App

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Harry Hall Mobile App</title>
    <style>
        body {
            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, sans-serif;
            margin: 0;
            padding: 20px;
            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
            min-height: 100vh;
            display: flex;
            flex-direction: column;
            justify-content: center;
            align-items: center;
            text-align: center;
            color: white;
        }
        
        .container {
            max-width: 400px;
            background: rgba(255, 255, 255, 0.1);
            backdrop-filter: blur(10px);
            border-radius: 20px;
            padding: 40px 30px;
            box-shadow: 0 8px 32px rgba(0, 0, 0, 0.1);
        }
        
        .logo {
            width: 100px;
            height: 100px;
            background: white;
            border-radius: 20px;
            margin: 0 auto 20px;
            display: flex;
            align-items: center;
            justify-content: center;
            font-weight: bold;
            color: #667eea;
            font-size: 24px;
        }
        
        h1 {
            margin: 20px 0 10px;
            font-size: 28px;
            font-weight: 600;
        }
        
        p {
            margin: 10px 0 30px;
            font-size: 16px;
            opacity: 0.9;
            line-height: 1.5;
        }
        
        .download-btn {
            display: inline-block;
            background: rgba(255, 255, 255, 0.2);
            color: white;
            text-decoration: none;
            padding: 15px 30px;
            border-radius: 50px;
            font-size: 16px;
            font-weight: 600;
            margin: 10px;
            transition: all 0.3s ease;
            border: 2px solid rgba(255, 255, 255, 0.3);
        }
        
        .download-btn:hover {
            background: rgba(255, 255, 255, 0.3);
            transform: translateY(-2px);
        }
        
        .primary-btn {
            background: white;
            color: #667eea;
        }
        
        .primary-btn:hover {
            background: rgba(255, 255, 255, 0.9);
        }
        
        .device-info {
            margin-top: 30px;
            font-size: 14px;
            opacity: 0.7;
        }
        
        .spinner {
            width: 30px;
            height: 30px;
            border: 3px solid rgba(255, 255, 255, 0.3);
            border-top: 3px solid white;
            border-radius: 50%;
            animation: spin 1s linear infinite;
            margin: 20px auto;
        }
        
        @keyframes spin {
            0% { transform: rotate(0deg); }
            100% { transform: rotate(360deg); }
        }
        
        .hidden {
            display: none;
        }
    </style>
</head>
<body>
    <div class="container">
        <div class="logo">HH</div>
        <h1>Harry Hall Mobile App</h1>
        <p>Get the official Harry Hall app for the best shopping experience!</p>
        
        <div id="loading" class="loading">
            <div class="spinner"></div>
            <p>Detecting your device...</p>
        </div>
        
        <div id="download-section" class="hidden">
            <a href="#" id="primary-download" class="download-btn primary-btn">Download App</a>
            <br>
            <a href="#" id="secondary-download" class="download-btn">Alternative Download</a>
        </div>
        
        <div class="device-info">
            <p id="device-detected"></p>
        </div>
    </div>

    <script>
        // App store URLs
        const APP_STORE_URL = 'https://apps.apple.com/app/harry-hall/id6478523277'; // Replace with actual iOS App Store URL
        const PLAY_STORE_URL = 'https://play.google.com/store/apps/details?id=com.harryhall.harry_hall_mobile';
        const WEBSITE_URL = 'https://harryhall.com/'; //

Found 2026-01-02 by HttpPlugin

Create report

Open service 157.96.23.196:80 · authenticator.harryhall.com

2026-01-01 15:48

HTTP/1.1 403 Forbidden
Content-Type: text/html
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 01 Jan 2026 15:48:27 GMT
Connection: close
Content-Length: 1233

Page title: 403 - Forbidden: Access is denied.

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>403 - Forbidden: Access is denied.</title>
<style type="text/css">
<!--
body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}
fieldset{padding:0 15px 10px 15px;} 
h1{font-size:2.4em;margin:0;color:#FFF;}
h2{font-size:1.7em;margin:0;color:#CC0000;} 
h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} 
#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;
background-color:#555555;}
#content{margin:0 0 0 2%;position:relative;}
.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}
-->
</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
 <div class="content-container"><fieldset>
  <h2>403 - Forbidden: Access is denied.</h2>
  <h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>
 </fieldset></div>
</div>
</body>
</html>

Found 2026-01-01 by HttpPlugin