LeakIX - Host mdservices.gescoflex.com

Domain mdservices.gescoflex.com

France

Groupe LWS SARL

Software information

fastestcache

tcp/443

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 2a00:7ee0:9:3:48:1:0:26a
Domain: mdservices.gescoflex.com
Port: 80
URL: http://mdservices.gescoflex.com/_profiler/empty/search/results

First seen 2024-05-08 02:29
Last seen 2025-11-08 05:50
Open for 549 days
- Fingerprint: 407cf4363b0e62fafca67e07eb47dca2eb47dca2eb47dca2eb47dca2eb47dca2
```
Symfony profiler enabled:
http://mdservices.gescoflex.com/_profiler/empty/search/results
```
  Found on 2025-11-08 05:50
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 91.234.195.182
Domain: mdservices.gescoflex.com
Port: 443
URL: https://mdservices.gescoflex.com/_profiler/empty/search/results

First seen 2024-05-08 02:29
Last seen 2025-12-24 15:02
Open for 595 days
- Fingerprint: 407cf4363b0e62fafca67e07cd8e8febcd8e8febcd8e8febcd8e8febcd8e8feb
```
Symfony profiler enabled:
https://mdservices.gescoflex.com/_profiler/empty/search/results
```
  Found on 2025-12-24 15:02
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 91.234.195.182
Domain: www.mdservices.gescoflex.com
Port: 80
URL: http://www.mdservices.gescoflex.com/_profiler/empty/search/results

First seen 2024-05-08 02:29
Last seen 2025-07-12 21:59
Open for 430 days
- Fingerprint: 407cf4363b0e62fafca67e0785415dad85415dad85415dad85415dad85415dad
```
Symfony profiler enabled:
http://www.mdservices.gescoflex.com/_profiler/empty/search/results
```
  Found on 2025-07-12 21:59
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 91.234.195.182
Domain: www.mdservices.gescoflex.com
Port: 443
URL: https://www.mdservices.gescoflex.com/_profiler/empty/search/results

First seen 2024-05-08 02:29
Last seen 2026-01-09 19:13
Open for 611 days
- Fingerprint: 407cf4363b0e62fafca67e0725038ae825038ae825038ae825038ae825038ae8
```
Symfony profiler enabled:
https://www.mdservices.gescoflex.com/_profiler/empty/search/results
```
  Found on 2026-01-09 19:13
Create report

Open service 91.234.195.182:443 · www.mdservices.gescoflex.com

2026-01-09 19:13

HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 19:13:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
server: fastestcache
Edge-Cache-Engine: varnish
Edge-Request-Id: 202d7ce911788ce4eb506fb1aad326eb
Cache-Control: max-age=0, must-revalidate, private
X-Debug-Token: ff7682
X-Debug-Token-Link: https://www.mdservices.gescoflex.com/_profiler/ff7682
X-Robots-Tag: noindex
Expires: Fri, 09 Jan 2026 19:13:37 GMT
Set-Cookie: nom=DIGICOM; expires=Sun, 08 Feb 2026 19:13:37 GMT; Max-Age=2592000
Set-Cookie: numeros=78478742; expires=Sun, 08 Feb 2026 19:13:37 GMT; Max-Age=2592000
Set-Cookie: adresses=Sotuba%20ACI; expires=Sun, 08 Feb 2026 19:13:37 GMT; Max-Age=2592000
Set-Cookie: conditions=%2F; expires=Sun, 08 Feb 2026 19:13:37 GMT; Max-Age=2592000
Set-Cookie: PHPSESSID=fa9c468itvtdednqbtlf4nsqep; path=/; secure; httponly; samesite=lax
Vary: Accept-Encoding
Edge-Cache-Engine-Mode: ACTIVE
Age: 0
Accept-Ranges: bytes
Alt-Svc: h3=":443";ma=86400
X-Request-Id: 202d7ce911788ce4eb506fb1aad326eb
Edge-Cache-Engine-Hit: MISS

Found 2026-01-09 by HttpPlugin

Create report

Open service 91.234.195.182:443 · mdservices.gescoflex.com

2026-01-09 08:25

HTTP/1.1 403 Forbidden
Date: Fri, 09 Jan 2026 08:25:57 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
server: fastestcache
Edge-Cache-Engine: varnish
Edge-Request-Id: 12f389dfec36bd5a712194eb10ce2f56
Cache-Control: no-store
Set-Cookie: lwsprotect_challenge_token_-auth=; Path=/; Expires=Fri, 09 Jan 2026 08:24:57 GMT; Max-Age=0; Secure; SameSite=None
Set-Cookie: lwsprotect_challenge_token_-cookie-verification=019ba1dc-c1b9-7238-809d-0f21856ea45a; Path=/; Expires=Fri, 09 Jan 2026 08:55:57 GMT; Secure; SameSite=None

Page title: LWS Protection DDoS - Vérification en cours

<!DOCTYPE html>
<html lang="en">
    <head>
        <meta charset="UTF-8">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <title>LWS Protection DDoS - Vérification en cours</title>

        <script id="anubis_version" type="application/json">"1.24.0"
</script><script id="anubis_challenge" type="application/json">{"rules":{"algorithm":"fast","difficulty":2,"report_as":2},"challenge":{"issuedAt":"2026-01-09T09:25:57.945151521+01:00","metadata":{"User-Agent":"Mozilla/5.0 (l9scan/2.0.238313e2539313e2433323e21393; +https://leakix.net)","X-Real-Ip":"206.189.95.232"},"id":"019ba1dc-c1b9-7238-809d-0f21856ea45a","method":"fast","randomData":"2f3930e5a4be0efd57231dce32517c8d1a34e80724b5b3b04d8370244c7224833f469fc8e8d28cf265f7c2fb008e3c97886bb753a8e769e4f84b0464b672d061","policyRuleHash":"ac980f49c4d35fab","difficulty":2,"spent":false}}
</script><script id="anubis_base_prefix" type="application/json">""
</script><script id="anubis_public_url" type="application/json">""
</script>

        <link rel="stylesheet" href="/.within.website/x/cmd/anubis/static/css/custom_lws.css">
        <script defer src="/.within.website/x/cmd/anubis/static/js/tailwind.js"></script>
        <script defer src="/.within.website/x/cmd/anubis/static/js/feather.min.js"></script>
        <script defer src="/.within.website/x/cmd/anubis/static/js/lang_status.js"></script>
    </head>
    <body class="bg-gray-900 min-h-screen flex items-center justify-center p-4">
        <div class="max-w-md w-full bg-gray-800 rounded-xl shadow-lg overflow-hidden border border-gray-700" data-aos="fade-in">
            <header class="bg-gray-800 px-6 py-4 border-b border-gray-700 flex justify-between items-center">
                <div class="flex items-center">
                    
                    <div class="w-12 h-12 rounded-full bg-gradient-to-br from-blue-600 to-indigo-700 flex items-center justify-center mr-3 shadow-md">
                    <svg xmlns="http://www.w3.org/2000/svg" class="w-7 h-7 text-white" fill="none" viewBox="0 0 24 24" stroke="currentColor">
                        <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
                        d="M12 2l7 4v6c0 5-3 9-7 10-4-1-7-5-7-10V6l7-4z" />
                    </svg>
                    </div>
                    
                    <span class="text-white font-semibold">LWS Protection DDoS</span>
                </div>
                <div id="language-selector" class="relative"></div>
            </header>

            <main class="px-8 py-10 text-center">
            <div class="w-16 h-16 border-4 border-gray-600 border-t-orange-500 loader rounded-full mx-auto mb-6"></div>

            <h1 id="title" class="text-xl font-semibold text-white mb-3">Vérification échouée accès non authorisé</h1>
            <p id="message" class="text-gray-300 mb-8 leading-relaxed">
                Votre accès n'a pas pu être vérifié. Contactez l'administrateur du site.
            </p>

            <div class="centered-div"><p id="status">Loading...</p><script async type="module" src="/.within.website/x/cmd/anubis/static/js/main.mjs?cacheBuster=1.24.0"></script><div id="progress" role="progressbar" aria-labelledby="status"><div class="bar-inner"></div></div><div id="testarea"></div></div>

            <div class="bg-gray-700 rounded-lg p-4 border border-gray-600 mt-8">
                <p id="footerTxt" class="text-sm text-gray-200">
                <span class="font-medium text-white">LWS Protection DDoS</span> – LWS, hébergeur web N°1 en rapport qualité/prix et registrar de domaines
                </p>
            </div>
            </main>

            <footer class="bg-gray-800 px-6 py-3 text-center border-t border-gray-700">
                <p class="text-xs text-gray-400">
                    <a href="https://www.lws.fr" class="text-blue-400 hover:text-blue-500">www.lws.fr</a>
                </p>
            </footer>
        </div>
    </body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 91.234.195.182:443 · www.mdservices.gescoflex.com

2026-01-02 03:49

HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 03:49:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
server: fastestcache
Edge-Cache-Engine: varnish
Edge-Request-Id: 5b186e20e9e9ff439601ec16ed1fd47d
Cache-Control: max-age=0, must-revalidate, private
X-Debug-Token: 2e047d
X-Debug-Token-Link: https://www.mdservices.gescoflex.com/_profiler/2e047d
X-Robots-Tag: noindex
Expires: Fri, 02 Jan 2026 03:49:50 GMT
Set-Cookie: nom=DIGICOM; expires=Sun, 01 Feb 2026 03:49:50 GMT; Max-Age=2592000
Set-Cookie: numeros=78478742; expires=Sun, 01 Feb 2026 03:49:50 GMT; Max-Age=2592000
Set-Cookie: adresses=Sotuba%20ACI; expires=Sun, 01 Feb 2026 03:49:50 GMT; Max-Age=2592000
Set-Cookie: conditions=%2F; expires=Sun, 01 Feb 2026 03:49:50 GMT; Max-Age=2592000
Set-Cookie: PHPSESSID=8gpbh91i6nc5jde3q29noh1b3v; path=/; secure; httponly; samesite=lax
Vary: Accept-Encoding
Edge-Cache-Engine-Mode: ACTIVE
Age: 0
Accept-Ranges: bytes
Alt-Svc: h3=":443";ma=86400
X-Request-Id: 5b186e20e9e9ff439601ec16ed1fd47d
Edge-Cache-Engine-Hit: MISS

Found 2026-01-02 by HttpPlugin

Create report

Open service 91.234.195.182:443 · www.mdservices.gescoflex.com

2025-12-30 10:00

HTTP/1.1 200 OK
Date: Tue, 30 Dec 2025 10:00:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
server: fastestcache
Edge-Cache-Engine: varnish
Edge-Request-Id: 8131c7f4128a6d9e478655360045b35a
Cache-Control: max-age=0, must-revalidate, private
X-Debug-Token: 1e4199
X-Debug-Token-Link: https://www.mdservices.gescoflex.com/_profiler/1e4199
X-Robots-Tag: noindex
Expires: Tue, 30 Dec 2025 10:00:05 GMT
Set-Cookie: nom=DIGICOM; expires=Thu, 29 Jan 2026 10:00:05 GMT; Max-Age=2592000
Set-Cookie: numeros=78478742; expires=Thu, 29 Jan 2026 10:00:05 GMT; Max-Age=2592000
Set-Cookie: adresses=Sotuba%20ACI; expires=Thu, 29 Jan 2026 10:00:05 GMT; Max-Age=2592000
Set-Cookie: conditions=%2F; expires=Thu, 29 Jan 2026 10:00:05 GMT; Max-Age=2592000
Set-Cookie: PHPSESSID=04sor083h0kpe4oeds0br18geo; path=/; secure; httponly; samesite=lax
Vary: Accept-Encoding
Edge-Cache-Engine-Mode: ACTIVE
Age: 0
Accept-Ranges: bytes
Alt-Svc: h3=":443";ma=86400
X-Request-Id: 8131c7f4128a6d9e478655360045b35a
Edge-Cache-Engine-Hit: MISS

Found 2025-12-30 by HttpPlugin

Create report

Open service 91.234.195.182:443 · mdservices.gescoflex.com

2025-12-22 15:29

HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 15:29:58 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
server: fastestcache
Edge-Cache-Engine: varnish
Edge-Request-Id: a913390e9b4a18e0cb27b162bfa42a03
Cache-Control: no-store
Set-Cookie: lwsprotect_challenge_token_-auth=; Path=/; Expires=Mon, 22 Dec 2025 15:28:58 GMT; Max-Age=0; Secure
Set-Cookie: lwsprotect_challenge_token_-cookie-verification=019b46ae-7a67-719f-8561-c6526f3b1133; Path=/; Expires=Mon, 22 Dec 2025 15:59:58 GMT; Secure
Alt-Svc: h3=":443";ma=86400
X-Request-Id: a913390e9b4a18e0cb27b162bfa42a03

Page title: LWS Protection DDoS - Vérification en cours

<!DOCTYPE html>
<html lang="en">
    <head>
        <meta charset="UTF-8">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <title>LWS Protection DDoS - Vérification en cours</title>

        <script id="anubis_version" type="application/json">"1.23.2"
</script><script id="anubis_challenge" type="application/json">{"rules":{"algorithm":"fast","difficulty":2,"report_as":2},"challenge":{"id":"019b46ae-7a67-719f-8561-c6526f3b1133","method":"fast","randomData":"b83542c2eaeefafd304b0f7e18205fd0dbe80aebbd8ff32598f077d083a1aa38d212320b7241a347f63aced7472add6d407f1611c5282e3fcd27811d9581ee4f","issuedAt":"2025-12-22T16:29:58.375113744+01:00","metadata":{"User-Agent":"Mozilla/5.0 (l9scan/2.0.238313e2539313e2433323e21393; +https://leakix.net)","X-Real-Ip":"128.199.182.55"},"spent":false}}
</script><script id="anubis_base_prefix" type="application/json">""
</script><script id="anubis_public_url" type="application/json">""
</script>

        <link rel="stylesheet" href="/.within.website/x/cmd/anubis/static/css/custom_lws.css">
        <script defer src="/.within.website/x/cmd/anubis/static/js/tailwind.js"></script>
        <script defer src="/.within.website/x/cmd/anubis/static/js/feather.min.js"></script>
        <script defer src="/.within.website/x/cmd/anubis/static/js/lang_status.js"></script>
    </head>
    <body class="bg-gray-900 min-h-screen flex items-center justify-center p-4">
        <div class="max-w-md w-full bg-gray-800 rounded-xl shadow-lg overflow-hidden border border-gray-700" data-aos="fade-in">
            <header class="bg-gray-800 px-6 py-4 border-b border-gray-700 flex justify-between items-center">
                <div class="flex items-center">
                    
                    <div class="w-12 h-12 rounded-full bg-gradient-to-br from-blue-600 to-indigo-700 flex items-center justify-center mr-3 shadow-md">
                    <svg xmlns="http://www.w3.org/2000/svg" class="w-7 h-7 text-white" fill="none" viewBox="0 0 24 24" stroke="currentColor">
                        <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
                        d="M12 2l7 4v6c0 5-3 9-7 10-4-1-7-5-7-10V6l7-4z" />
                    </svg>
                    </div>
                    
                    <span class="text-white font-semibold">LWS Protection DDoS</span>
                </div>
                <div id="language-selector" class="relative"></div>
            </header>

            <main class="px-8 py-10 text-center">
            <div class="w-16 h-16 border-4 border-gray-600 border-t-orange-500 loader rounded-full mx-auto mb-6"></div>

            <h1 id="title" class="text-xl font-semibold text-white mb-3">Vérification échouée accès non authorisé</h1>
            <p id="message" class="text-gray-300 mb-8 leading-relaxed">
                Votre accès n'a pas pu être vérifié. Contactez l'administrateur du site.
            </p>

            <div class="centered-div"><p id="status">Loading...</p><script async type="module" src="/.within.website/x/cmd/anubis/static/js/main.mjs?cacheBuster=1.23.2"></script><div id="progress" role="progressbar" aria-labelledby="status"><div class="bar-inner"></div></div><style>#progress{ display: none; }#status{ display: none; }</style><div id="testarea"></div></div>

            <div class="bg-gray-700 rounded-lg p-4 border border-gray-600 mt-8">
                <p id="footerTxt" class="text-sm text-gray-200">
                <span class="font-medium text-white">LWS Protection DDoS</span> – LWS, hébergeur web N°1 en rapport qualité/prix et registrar de domaines
                </p>
            </div>
            </main>

            <footer class="bg-gray-800 px-6 py-3 text-center border-t border-gray-700">
                <p class="text-xs text-gray-400">
                    <a href="https://www.lws.fr" class="text-blue-400 hover:text-blue-500">www.lws.fr</a>
                </p>
            </footer>
        </div>
    </body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 91.234.195.182:443 · www.mdservices.gescoflex.com

2025-12-22 08:52

HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 08:52:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
server: fastestcache
Edge-Cache-Engine: varnish
Edge-Request-Id: b7c830a7f2f4ba07d1708bb5f8e223d8
Cache-Control: max-age=0, must-revalidate, private
X-Debug-Token: ab084f
X-Debug-Token-Link: https://www.mdservices.gescoflex.com/_profiler/ab084f
X-Robots-Tag: noindex
Expires: Mon, 22 Dec 2025 08:52:39 GMT
Set-Cookie: nom=DIGICOM; expires=Wed, 21 Jan 2026 08:52:39 GMT; Max-Age=2592000
Set-Cookie: numeros=78478742; expires=Wed, 21 Jan 2026 08:52:39 GMT; Max-Age=2592000
Set-Cookie: adresses=Sotuba%20ACI; expires=Wed, 21 Jan 2026 08:52:39 GMT; Max-Age=2592000
Set-Cookie: conditions=%2F; expires=Wed, 21 Jan 2026 08:52:39 GMT; Max-Age=2592000
Set-Cookie: PHPSESSID=nel42ifalnhevb9bgmdfgqpcrt; path=/; secure; httponly; samesite=lax
Vary: Accept-Encoding
Edge-Cache-Engine-Mode: ACTIVE
Age: 0
Accept-Ranges: bytes
Alt-Svc: h3=":443";ma=86400
X-Request-Id: b7c830a7f2f4ba07d1708bb5f8e223d8
Edge-Cache-Engine-Hit: MISS

Found 2025-12-22 by HttpPlugin

Create report

Open service 91.234.195.182:443 · mdservices.gescoflex.com

2025-12-20 16:46

HTTP/1.1 200 OK
Date: Sat, 20 Dec 2025 16:46:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
server: fastestcache
Edge-Cache-Engine: varnish
Edge-Request-Id: 9c182e78d92a9ea32502c2243df6ee52
Cache-Control: max-age=0, must-revalidate, private
X-Debug-Token: 3671fe
X-Debug-Token-Link: https://mdservices.gescoflex.com/_profiler/3671fe
X-Robots-Tag: noindex
Expires: Sat, 20 Dec 2025 16:46:09 GMT
Set-Cookie: nom=DIGICOM; expires=Mon, 19 Jan 2026 16:46:09 GMT; Max-Age=2592000
Set-Cookie: numeros=78478742; expires=Mon, 19 Jan 2026 16:46:09 GMT; Max-Age=2592000
Set-Cookie: adresses=Sotuba%20ACI; expires=Mon, 19 Jan 2026 16:46:09 GMT; Max-Age=2592000
Set-Cookie: conditions=%2F; expires=Mon, 19 Jan 2026 16:46:09 GMT; Max-Age=2592000
Set-Cookie: PHPSESSID=9nt71bfche0va30ksrfk0j6ffq; path=/; secure; httponly; samesite=lax
Vary: Accept-Encoding
Edge-Cache-Engine-Mode: ACTIVE
Age: 0
Accept-Ranges: bytes
Alt-Svc: h3=":443";ma=86400
X-Request-Id: 9c182e78d92a9ea32502c2243df6ee52
Edge-Cache-Engine-Hit: MISS

Found 2025-12-20 by HttpPlugin

Create report

mdservices.gescoflex.comwww.mdservices.gescoflex.com

Fingerprint:

e9873e56894262c20eec3b2d1aa55803d5e1b16fe3d4ca1603ae393680b5afd0

CN:

mdservices.gescoflex.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-08 04:52

Not after:

2026-02-06 04:52

Domain summary

www.mdservices.gescoflex.com 5 mdservices.gescoflex.com 4

2 recorded

IP summary

91.234.195.182 4 2a00:7ee0:9:3:48:1:0:26a 1

2 recorded

Domain mdservices.gescoflex.com

France

Software information

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Create report

Create report

Create report

Create report

Create report

Create report

Create report

mdservices.gescoflex.comwww.mdservices.gescoflex.com

Domain summary

IP summary