LeakIX - Host mail.personaltransfer-gmbh.de

Domain mail.personaltransfer-gmbh.de

Germany

myLoc managed IT AG

Software information

nginx nginx

tcp/443 tcp/8443

nginx nginx 1.21.5

tcp/80

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 45.133.156.209
Domain: mail.personaltransfer-gmbh.de
Port: 8443
URL: https://mail.personaltransfer-gmbh.de:8443

First seen 2023-01-30 14:24
Last seen 2024-05-06 15:07
Open for 462 days
- Fingerprint: b18befd9dd6536aa30550de54cfc02e0bf71bc3d9d0b547a9d0b547a9d0b547a
```
{
  "mailWebAddress": "https://mail.personaltransfer-gmbh.de/web",
  "rspamdWebAddress": "https://mail.personaltransfer-gmbh.de/antispam/"
}
```
  Found on 2024-05-06 15:07
Create report

Open service 77.1.2.198:443 · mail.personaltransfer-gmbh.de

2024-05-12 22:08

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 12 May 2024 22:08:08 GMT
Content-Type: text/html
Content-Length: 162
Location: https://mail.personaltransfer-gmbh.de/web/
Content-Security-Policy: default-src 'self' data:; frame-src * blob:; connect-src * data: blob:; font-src * data:; img-src * data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; object-src 'self'; base-uri 'self'; frame-ancestors 'self';
Permissions-Policy: accelerometer=(), autoplay=(self), camera=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), keyboard-map=(self), magnetometer=(), microphone=(self), midi=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(), usb=(), web-share=(self), xr-spatial-tracking=(self)
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: none
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer
X-Cache: MISS from firewall.ctd.local
Via: 1.1 firewall.ctd.local (squid)
Connection: close

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 9 hours ago by HttpPlugin

Create report

Open service 77.1.2.198:80 · mail.personaltransfer-gmbh.de

2024-05-12 22:08

HTTP/1.1 301 Moved Permanently
Server: nginx/1.21.5
Date: Sun, 12 May 2024 22:08:05 GMT
Content-Type: text/html
Content-Length: 169
Connection: close
Location: https://mail.personaltransfer-gmbh.de/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.21.5</center>
</body>
</html>

Found 9 hours ago by HttpPlugin

Create report

Open service 77.1.139.103:443 · mail.personaltransfer-gmbh.de

2024-05-06 15:07

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 06 May 2024 15:07:49 GMT
Content-Type: text/html
Content-Length: 162
Location: https://mail.personaltransfer-gmbh.de/web/
Content-Security-Policy: default-src 'self' data:; frame-src * blob:; connect-src * data: blob:; font-src * data:; img-src * data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; object-src 'self'; base-uri 'self'; frame-ancestors 'self';
Permissions-Policy: accelerometer=(), autoplay=(self), camera=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), keyboard-map=(self), magnetometer=(), microphone=(self), midi=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(), usb=(), web-share=(self), xr-spatial-tracking=(self)
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: none
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer
X-Cache: MISS from firewall.ctd.local
Via: 1.1 firewall.ctd.local (squid)
Connection: close

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 2024-05-06 by HttpPlugin

Create report

Open service 77.1.139.103:80 · mail.personaltransfer-gmbh.de

2024-05-06 15:07

HTTP/1.1 301 Moved Permanently
Server: nginx/1.21.5
Date: Mon, 06 May 2024 15:07:44 GMT
Content-Type: text/html
Content-Length: 169
Connection: close
Location: https://mail.personaltransfer-gmbh.de/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.21.5</center>
</body>
</html>

Found 2024-05-06 by HttpPlugin

Create report

Open service 77.1.139.103:8443 · mail.personaltransfer-gmbh.de

2024-05-06 15:07

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 May 2024 15:07:47 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 624
Last-Modified: Fri, 23 Feb 2024 09:36:57 GMT
Connection: close
ETag: "65d86739-270"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' data:; font-src *; img-src * data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; object-src 'self'; base-uri 'self';
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=(),autoplay=()
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: none
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer
Accept-Ranges: bytes

Page title: grommunio

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="grommunio admin-web"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>grommunio</title><script defer="defer" src="/static/js/main.2263ef5b.js"></script><link href="/static/css/main.f2be431c.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Found 2024-05-06 by HttpPlugin

Create report

Open service 95.116.149.183:80 · mail.personaltransfer-gmbh.de

2024-04-28 11:51

HTTP/1.1 301 Moved Permanently
Server: nginx/1.21.5
Date: Sun, 28 Apr 2024 11:51:45 GMT
Content-Type: text/html
Content-Length: 169
Connection: close
Location: https://mail.personaltransfer-gmbh.de/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.21.5</center>
</body>
</html>

Found 2024-04-28 by HttpPlugin

Create report

Open service 95.116.149.183:8443 · mail.personaltransfer-gmbh.de

2024-04-28 11:51

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 Apr 2024 11:51:45 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 624
Last-Modified: Fri, 23 Feb 2024 09:36:57 GMT
Connection: close
ETag: "65d86739-270"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' data:; font-src *; img-src * data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; object-src 'self'; base-uri 'self';
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=(),autoplay=()
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: none
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer
Accept-Ranges: bytes

Page title: grommunio

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="grommunio admin-web"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>grommunio</title><script defer="defer" src="/static/js/main.2263ef5b.js"></script><link href="/static/css/main.f2be431c.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Found 2024-04-28 by HttpPlugin

Create report

autodiscover.c-t-d.netautodiscover.ctd-gmbh.netautodiscover.enerix-diepholz.deautodiscover.personaltransfer-gmbh.deautodiscover.quotac-personalberatung.dectd-gmbh.netctd.spdns.eudasi.c-t-d.netmail.c-t-d.netmail.ctd-gmbh.netmail.enerix-diepholz.demail.personaltransfer-gmbh.demail.quotac-personalberatung.deown.c-t-d.netown.c-t-d.workown.mein-dsgvo-datenschutzbeauftragter.depersonaltransfer-gmbh.dett.c-t-d.work

Fingerprint:

d080c8a3ae66e46c42af007bdde4dea4cf8c7b667c8685a8f73902ffcf502a47

CN:

autodiscover.c-t-d.net

Key:

RSA-2048

Issuer:

Not before:

2024-04-28 10:51

Not after:

2024-07-27 10:51

autodiscover.personaltransfer-gmbh.demail.personaltransfer-gmbh.demail.quotac-personalberatung.de

Fingerprint:

d4673b78dee729a5fa3a790b379465830f89babe08dc149901f52e4074c86bee

CN:

mail.personaltransfer-gmbh.de

Key:

RSA-2048

Issuer:

Not before:

2024-03-07 18:32

Not after:

2024-06-05 18:32

Domain summary

mail.personaltransfer-gmbh.de 7

1 recorded

IP summary

77.1.2.198 2 77.1.139.103 1 95.116.149.183 1 45.133.156.209 1

4 recorded

Domain mail.personaltransfer-gmbh.de

Germany

Software information

A JSON configuration file has been found

Create report

Create report

Create report

Create report

Create report

Create report

Create report

autodiscover.personaltransfer-gmbh.demail.personaltransfer-gmbh.demail.quotac-personalberatung.de

Domain summary

IP summary