LeakIX - Host kasha.rw

Domain kasha.rw

United States

AMAZON-02

Ubuntu

Software information

AmazonS3

tcp/443

CloudFront

tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.66.122.22
Domain: kasha.rw
Port: 443
URL: https://kasha.rw

First seen 2023-12-14 10:37
Last seen 2026-02-09 22:51
Open for 788 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2026-02-09 22:51
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.86.4.77
Domain: cms.kasha.rw
Port: 443
URL: https://cms.kasha.rw

First seen 2024-02-29 02:46
Last seen 2025-12-31 02:48
Open for 671 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2025-12-31 02:48
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.66.122.22
Domain: www.kasha.rw
Port: 443
URL: https://www.kasha.rw

First seen 2024-02-29 06:40
Last seen 2026-02-02 02:17
Open for 703 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2026-02-02 02:17
Create report

Open service 18.66.122.22:443 · kasha.rw

2026-01-23 16:28

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 109203
Connection: close
Last-Modified: Tue, 30 Jul 2024 10:09:13 GMT
Server: AmazonS3
Date: Fri, 23 Jan 2026 12:37:03 GMT
ETag: "a501b7e5f5f1f33d2006f1c8aee33728"
X-Cache: Hit from cloudfront
Via: 1.1 2a6277094357eb47f8dbeacb06ed96c2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P2
X-Amz-Cf-Id: LUhgqO2icLa5GNs6fvr6qvBDdHhFipABIJhNVHUuKj7GtkDrc_2NDw==
Age: 13889


<!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><link rel="preload" as="image" href="https://s3.eu-central-1.amazonaws.com/kasha-cms-images/images/Q1WpFxsQ0Puky4Sso1PLM3FOIui9Fo67ZVLXnida.jpg"/><meta name="next-head-count" content="3"/><link rel="preconnect" href="https://fonts.googleapis.com"/><link rel="preconnect" href="https://fonts.gstatic.com"/><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin /><link rel="preload" href="/_next/static/css/c8f4df7fa5c366a9.css" as="style"/><link rel="stylesheet" href="/_next/static/css/c8f4df7fa5c366a9.css" data-n-g=""/><link rel="preload" href="/_next/static/css/5c5a45bc41f89f2b.css" as="style"/><link rel="stylesheet" href="/_next/static/css/5c5a45bc41f89f2b.css" data-n-p=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js"></script><script src="/_next/static/chunks/webpack-b4038d9b29f3412e.js" defer=""></script><script src="/_next/static/chunks/framework-3671d8951bf44e4e.js" defer=""></script><script src="/_next/static/chunks/main-43b26646d5d9423d.js" defer=""></script><script src="/_next/static/chunks/pages/_app-ca75008928f80960.js" defer=""></script><script src="/_next/static/chunks/6902-0623fc99a6b2dc42.js" defer=""></script><script src="/_next/static/chunks/6243-60dddbca500fc172.js" defer=""></script><script src="/_next/static/chunks/2975-dd348d91c3e379c9.js" defer=""></script><script src="/_next/static/chunks/9332-eb280c090c620273.js" defer=""></script><script src="/_next/static/chunks/5595-daf5adffe5495aaf.js" defer=""></script><script src="/_next/static/chunks/5488-c602e61eccb25fb9.js" defer=""></script><script src="/_next/static/chunks/6414-001e7879e56543e3.js" defer=""></script><script src="/_next/static/chunks/pages/index-7c747126a9de1362.js" defer=""></script><script src="/_next/static/J4MIHDo6vuwyg4wBJEKfT/_buildManifest.js" defer=""></script><script src="/_next/static/J4MIHDo6vuwyg4wBJEKfT/_ssgManifest.js" defer=""></script><style data-href="https://fonts.googleapis.com/css2?family=Assistant:wght@400;500;600;700&display=swap">@font-face{font-family:'Assistant';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/assistant/v19/2sDPZGJYnIjSi6H75xkZZE1I0yCmYzzQtuZnEGI.woff) format('woff')}@font-face{font-family:'Assistant';font-style:normal;font-weight:500;font-display:swap;src:url(https://fonts.gstatic.com/s/assistant/v19/2sDPZGJYnIjSi6H75xkZZE1I0yCmYzzQttRnEGI.woff) format('woff')}@font-face{font-family:'Assistant';font-style:normal;font-weight:600;font-display:swap;src:url(https://fonts.gstatic.com/s/assistant/v19/2sDPZGJYnIjSi6H75xkZZE1I0yCmYzzQtjhgEGI.woff) format('woff')}@font-face{font-family:'Assistant';font-style:normal;font-weight:700;font-display:swap;src:url(https://fonts.gstatic.com/s/assistant/v19/2sDPZGJYnIjSi6H75xkZZE1I0yCmYzzQtgFgEGI.woff) format('woff')}@font-face{font-family:'Assistant';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/assistant/v19/2sDcZGJYnIjSi6H75xkzamW5Kb8VZBHR.woff2) format('woff2');unicode-range:U+0590-05FF,U+200C-2010,U+20AA,U+25CC,U+FB1D-FB4F}@font-face{font-family:'Assistant';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/assistant/v19/2sDcZGJYnIjSi6H75xkzZmW5Kb8VZBHR.woff2) format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:'Assistant';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/assistant/v19/2sDcZGJYnIjSi6H75xkzaGW5Kb8VZA.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:'Assistant';font-style:normal;font-weight:500;font-display:swap;src:url(https://fonts.gstatic.com/s/assistant/v19/2sDcZGJYnIjSi6H75xkzamW5Kb8VZBHR.woff2) format('woff2');unico

Found 2026-01-23 by HttpPlugin

Create report

Open service 18.66.122.22:443 · www.kasha.rw

2026-01-22 20:57

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 109203
Connection: close
Last-Modified: Tue, 30 Jul 2024 10:09:13 GMT
Server: AmazonS3
Date: Thu, 22 Jan 2026 20:57:44 GMT
ETag: "a501b7e5f5f1f33d2006f1c8aee33728"
X-Cache: Hit from cloudfront
Via: 1.1 615f944336054ae07b8e7c415ddbad44.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P2
X-Amz-Cf-Id: WirJ06tJ8dXgQDQ0JVSo3-VsCmtrWanMFtU-k7r3biwSj8IJDiLYEw==
Age: 31541


<!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><link rel="preload" as="image" href="https://s3.eu-central-1.amazonaws.com/kasha-cms-images/images/Q1WpFxsQ0Puky4Sso1PLM3FOIui9Fo67ZVLXnida.jpg"/><meta name="next-head-count" content="3"/><link rel="preconnect" href="https://fonts.googleapis.com"/><link rel="preconnect" href="https://fonts.gstatic.com"/><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin /><link rel="preload" href="/_next/static/css/c8f4df7fa5c366a9.css" as="style"/><link rel="stylesheet" href="/_next/static/css/c8f4df7fa5c366a9.css" data-n-g=""/><link rel="preload" href="/_next/static/css/5c5a45bc41f89f2b.css" as="style"/><link rel="stylesheet" href="/_next/static/css/5c5a45bc41f89f2b.css" data-n-p=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js"></script><script src="/_next/static/chunks/webpack-b4038d9b29f3412e.js" defer=""></script><script src="/_next/static/chunks/framework-3671d8951bf44e4e.js" defer=""></script><script src="/_next/static/chunks/main-43b26646d5d9423d.js" defer=""></script><script src="/_next/static/chunks/pages/_app-ca75008928f80960.js" defer=""></script><script src="/_next/static/chunks/6902-0623fc99a6b2dc42.js" defer=""></script><script src="/_next/static/chunks/6243-60dddbca500fc172.js" defer=""></script><script src="/_next/static/chunks/2975-dd348d91c3e379c9.js" defer=""></script><script src="/_next/static/chunks/9332-eb280c090c620273.js" defer=""></script><script src="/_next/static/chunks/5595-daf5adffe5495aaf.js" defer=""></script><script src="/_next/static/chunks/5488-c602e61eccb25fb9.js" defer=""></script><script src="/_next/static/chunks/6414-001e7879e56543e3.js" defer=""></script><script src="/_next/static/chunks/pages/index-7c747126a9de1362.js" defer=""></script><script src="/_next/static/J4MIHDo6vuwyg4wBJEKfT/_buildManifest.js" defer=""></script><script src="/_next/static/J4MIHDo6vuwyg4wBJEKfT/_ssgManifest.js" defer=""></script><style data-href="https://fonts.googleapis.com/css2?family=Assistant:wght@400;500;600;700&display=swap">@font-face{font-family:'Assistant';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/assistant/v19/2sDPZGJYnIjSi6H75xkZZE1I0yCmYzzQtuZnEGI.woff) format('woff')}@font-face{font-family:'Assistant';font-style:normal;font-weight:500;font-display:swap;src:url(https://fonts.gstatic.com/s/assistant/v19/2sDPZGJYnIjSi6H75xkZZE1I0yCmYzzQttRnEGI.woff) format('woff')}@font-face{font-family:'Assistant';font-style:normal;font-weight:600;font-display:swap;src:url(https://fonts.gstatic.com/s/assistant/v19/2sDPZGJYnIjSi6H75xkZZE1I0yCmYzzQtjhgEGI.woff) format('woff')}@font-face{font-family:'Assistant';font-style:normal;font-weight:700;font-display:swap;src:url(https://fonts.gstatic.com/s/assistant/v19/2sDPZGJYnIjSi6H75xkZZE1I0yCmYzzQtgFgEGI.woff) format('woff')}@font-face{font-family:'Assistant';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/assistant/v19/2sDcZGJYnIjSi6H75xkzamW5Kb8VZBHR.woff2) format('woff2');unicode-range:U+0590-05FF,U+200C-2010,U+20AA,U+25CC,U+FB1D-FB4F}@font-face{font-family:'Assistant';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/assistant/v19/2sDcZGJYnIjSi6H75xkzZmW5Kb8VZBHR.woff2) format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:'Assistant';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/assistant/v19/2sDcZGJYnIjSi6H75xkzaGW5Kb8VZA.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:'Assistant';font-style:normal;font-weight:500;font-display:swap;src:url(https://fonts.gstatic.com/s/assistant/v19/2sDcZGJYnIjSi6H75xkzamW5Kb8VZBHR.woff2) format('woff2');unico

Found 2026-01-22 by HttpPlugin

Create report

Open service 18.173.154.4:80 · staging.evatapi.kasha.rw

2026-01-05 03:38

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 05 Jan 2026 03:38:02 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://staging.evatapi.kasha.rw/
X-Cache: Redirect from cloudfront
Via: 1.1 bc5539655ffc88be2596a0239ddfae52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: YGbdWfGAHD22UhA0-zJbDtneKv4QFn-jtRRVqnLiGBv5jU6c_Khn5w==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-05 by HttpPlugin

Create report

Open service 18.173.154.4:443 · staging.evatapi.kasha.rw

2026-01-05 03:38
Found 2026-01-05 by HttpPlugin
Create report
Open service 18.173.154.56:443 · staging.evatapi.kasha.rw

2026-01-05 03:38
Found 2026-01-05 by HttpPlugin
Create report

Open service 18.173.154.56:80 · staging.evatapi.kasha.rw

2026-01-05 03:38

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 05 Jan 2026 03:38:02 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://staging.evatapi.kasha.rw/
X-Cache: Redirect from cloudfront
Via: 1.1 ca623c10f2a669c8a9af30362937ebac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: fk5SgXUmSegyM6wk7-mgWJ6R3w8XxjV5rYR8dIEmz7DuCyKyTrjl3g==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-05 by HttpPlugin

Create report

Open service 18.173.154.28:80 · staging.evatapi.kasha.rw

2026-01-05 03:38

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 05 Jan 2026 03:38:02 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://staging.evatapi.kasha.rw/
X-Cache: Redirect from cloudfront
Via: 1.1 3721bbb571fa1179150d81f8194461ae.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: jyHe-gsrXh9IH5NVrsJ3Ako9TRMK-A_AnXNOsMv8QSuc_qYLIqWh1w==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-05 by HttpPlugin

Create report

Open service 18.173.154.48:80 · staging.evatapi.kasha.rw

2026-01-05 03:38

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 05 Jan 2026 03:38:02 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://staging.evatapi.kasha.rw/
X-Cache: Redirect from cloudfront
Via: 1.1 918459d66ab0cca4258acacb6d3f6edc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: 5ap-_wyhDerxYLXR-DCgPXDwQTrTmpR1gOtwhJvE0MJdUaLMUQ63UA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-05 by HttpPlugin

Create report

Open service 18.173.154.48:443 · staging.evatapi.kasha.rw

2026-01-05 03:38
Found 2026-01-05 by HttpPlugin
Create report
Open service 18.173.154.28:443 · staging.evatapi.kasha.rw

2026-01-05 03:38
Found 2026-01-05 by HttpPlugin
Create report

kasha.rwweb.kasha.rwwww.kasha.rw

Fingerprint:

85e2a73d818e08594b6a654aa255d18b622a1e5fe030f0a3dafd2177c421bbf7

CN:

kasha.rw

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M04

Not before:

2025-12-31 00:00

Not after:

2027-01-29 23:59

staging.evatapi.kasha.rwwww.staging.evatapi.kasha.rw

Fingerprint:

5c768952245a84efefc9a9f58a34bf2a28d60efea4ceab2be4c60a1ff06a458b

CN:

staging.evatapi.kasha.rw

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M02

Not before:

2025-02-04 00:00

Not after:

2026-03-05 23:59

Domain summary

kasha.rw 1 www.kasha.rw 1 cms.kasha.rw 1 staging.evatapi.kasha.rw 7

4 recorded

IP summary

18.66.122.22 4 18.173.154.4 2 18.173.154.56 1 18.173.154.28 1 18.173.154.48 1 99.86.4.77 1

6 recorded

Domain kasha.rw

United States

Software information

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

kasha.rwweb.kasha.rwwww.kasha.rw

staging.evatapi.kasha.rwwww.staging.evatapi.kasha.rw

Domain summary

IP summary