LeakIX - Host metro-properties.de

Domain metro-properties.de

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Symfony error leaking informations

The application has Symfony verbose mode enabled.

It enables an attacker to access the following sensitive content :

System configuration and/or credentials

IP: 194.156.56.26
Domain: emstest.metro-properties.de
Port: 443
URL: https://emstest.metro-properties.de/frontend_dev.php/$

First seen 2021-10-29 05:34

Fingerprint: 05ab011344cbe668caaf40ecbe4f02f66b6f364b786403ef50e499609857d563

app_mems_berichte_alias: /pdf/
app_mems_center_maps_alias: /images/center_maps
app_mems_center_maps_demo_de: DemoSo.gif
app_mems_center_maps_demo_en: DemoSoE.gif
app_mems_center_maps_dir: 'D:\metro_web\center_maps'
app_mems_cultures:
  cs_CZ: 'České (Czech)'
  de_DE: 'Deutsch (German)'
  en_US: English
  es_ES: 'Español (Spanish)'
  fr_FR: 'Français (French)'
  hu_HU: 'Magyar (Hungarian)'
  it_IT: 'Italiano (Italian)'
  ja_JP: '日本の (Japanese)'
  pl_PL: 'Polszczyzna (Polish)'
  ru_RU: 'Pусский (Russian)'
  ro_RO: 'Română (Romanian)'
  tr_TR: 'Türkçe (Turkish)'
  zh_CN: '中国的 (Chinese)'
app_mems_farben: '0000FF,000088,00FF00,008800,00FFFF,008888,FF00FF,880088,FFFF00,888800,00FF88,0088FF,FF0088,8800FF,FF8800,88FF00,000000,888888,FF0000,880000,00FF00,008800,0000FF,000088,00FFFF,008888,FF00FF,880088,FFFF00,888800,00FF88,0088FF,FF0088,8800FF,FF8800,88FF00,000000,888888,FF0000,880000'
app_mems_hilfe_link: /hilfe/index.htm
app_mems_udp_host: 10.56.7.26
app_mems_udp_port: 1961
app_mems_uploads_alias: /uploads
app_mems_uploads_dir: 'D:\metro_web\uploads'
app_symfony2_baseUrl: 'https://emstest2.metro-properties.de'
sf_admin_module_web_dir: /sfPropelPlugin
sf_admin_web_dir: /sf/sf_admin
sf_app: frontend
sf_app_base_cache_dir: 'D:\metro_web\mems\cache\frontend'
sf_app_cache_dir: 'D:\metro_web\mems\cache\frontend\dev'
sf_app_config_dir: 'D:\metro_web\mems\apps\frontend\config'
sf_app_dir: 'D:\metro_web\mems\apps\frontend'
sf_app_i18n_dir: 'D:\metro_web\mems\apps\frontend\i18n'
sf_app_lib_dir: 'D:\metro_web\mems\apps\frontend\lib'
sf_app_module_dir: 'D:\metro_web\mems\apps\frontend\modules'
sf_app_template_dir: 'D:\metro_web\mems\apps\frontend\templates'
sf_apps_dir: 'D:\metro_web\mems\apps'
sf_cache: false
sf_cache_dir: 'D:\metro_web\mems\cache'
sf_calendar_web_dir: /sf/calendar
sf_charset: utf-8
sf_check_lock: true
sf_compat_10: true
sf_compressed: false
sf_config_cache_dir: 'D:\metro_web\mems\cache\frontend\dev\config'
sf_config_dir: 'D:\metro_web\mems\config'
sf_csrf_secret: false
sf_data_dir: 'D:\metro_web\mems\data'
sf_debug: true
sf_default_culture: de
sf_enabled_modules:
  - default
sf_environment: dev
sf_error_404_action: error404
sf_error_404_module: default
sf_error_reporting: 341
sf_escaping_method: ESC_SPECIALCHARS
sf_escaping_strategy: false
sf_etag: true
sf_execution_filter:
  - sfValidationExecutionFilter
  - {  }
sf_file_link_format: null
sf_i18n: true
sf_i18n_cache_dir: 'D:\metro_web\mems\cache\frontend\dev\i18n'
sf_lazy_cache_key: true
sf_lib_dir: 'D:\metro_web\mems\lib'
sf_log_dir: 'D:\metro_web\mems\log'
sf_logging_enabled: true
sf_login_action: login
sf_login_module: auth
sf_module_cache_dir: 'D:\metro_web\mems\cache\frontend\dev\modules'
sf_module_disabled_action: disabled
sf_module_disabled_module: default
sf_no_script_name: false
sf_orm: propel
sf_plugins_dir: 'D:\metro_web\mems\plugins'
sf_prototype_web_dir: /sfProtoculousPlugin
sf_rich_text_js_dir: js/tiny_mce
sf_root_dir: 'D:\metro_web\mems'
sf_secure_action: secure
sf_secure_module: default
sf_standard_helpers:
  - Partial
  - Cache
  - Form
  - I18N
  - Object
  - Javascript
  - Url
  - Number
  - Validation
  - Date
  - DateForm
sf_symfony_lib_dir: 'D:\metro_web\mems\lib\vendor\symfony\lib'
sf_template_cache_dir: 'D:\metro_web\mems\cache\frontend\dev\template'
sf_test_cache_dir: 'D:\metro_web\mems\cache\frontend\dev\test'
sf_test_dir: 'D:\metro_web\mems\test'
sf_upload_dir: 'D:\metro_web\mems\web\uploads'
sf_use_database: true
sf_validation_error_class: form_error
sf_validation_error_id_prefix: error_for_
sf_validation_error_prefix: ' &darr;&nbsp;'
sf_validation_error_suffix: ' &nbsp;&darr;'
sf_web_debug: true
sf_web_debug_web_dir: /sf/sf_web_debug
sf_web_dir: 'D:\metro_web\mems\web'

Found on 2021-10-29 05:34

Create report

Open service 20.105.216.40:80 · authors.tr.metro-properties.de

2026-01-10 20:01

HTTP/1.1 301 Moved Permanently
Content-Length: 162
Connection: close
Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Jan 2026 20:02:42 GMT
Location: https://authors.tr.metro-properties.de/
Strict-Transport-Security: max-age=31536000
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval';               img-src 'self' data: https://login.microsoftonline.com https://adfs5.metro.info https://www.google-analytics.com *.qualtrics.com 1634.global.siteimproveanalytics.io ssl.siteimprove.com *.linkedin.com *.facebook.com csi.gstatic.com maps.googleapis.com maps.gstatic.com *.twimg.com *.twitter.com www.gstatic.com app.miag.com maintenance.metroag.de mfpembedcdnweu.azureedge.net *.metroag.de *.metroag.eu *.metrogroup.de *.miag.com *.metro-cc.com *.metronom.com *.metro-wholesale.de *.metro-wholesale.com *.metro-properties.de *.metro-gruenderstudie.de *.metro-startupstudy.com *.metrosystems.ro *.handel-erklaert.de *.metro-sourcing.hk *.metro-logistics.de *.metro-campus.de *.metro-campus-services.de *.metro-vto.es *.careers.metroag.de *.karriere.metroag.de *.careers.metro-gsc.in *.careers.metro-gsc.pl *.kariera.metro-gsc.pl *.company.metroag.de *.unternehmen.metroag.de *.tr.metro-properties.de *.metro-properties.com.tr *.metro-services.in *.metro-services.pl *.mpulse.de *.metro-unboxed.de *.metro-unboxed.com *.metro-potentials.com *.arbeitgeber-ahd.de *.metro-competencies.com *.metro-trainingcenter.de www.openpetition.de *.wirsindgekommenumzubleiben.de *.metro-global-solution-center.in *.metro.digital *.metro-gsc.in *.metro-gsc.pl *.metro-gsc.com px.ads.linkedin.com bscmiagbot.metro.de i.ytimg.com https://www.googletagmanager.com;        style-src 'self' 'unsafe-inline' https://fonts.googleapis.com cloud.typography.com *.metroag.de *.twitter.com www.gstatic.com d1azc1qln24ryf.cloudfront.net *.twimg.com;        font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com fonts.googleapis.com d1azc1qln24ryf.cloudfront.net www.openpetition.de;        frame-src 'self' *.googletagmanager.com *.facebook.com https://video.metro.de www.youtube.com *.walls.io plugins.flockler.com charts3.equitystory.com *.twitter.com www.google.com dev.dieproduktion.de *.own-business-day.com forms.office.com login.microsoftonline.com t.email.metro.de feedback.metro-cc.com metro.online-report.eu bscmiagbot.metro.de;        upgrade-insecure-requests;               block-all-mixed-content;        script-src 'self' 'unsafe-eval'  'unsafe-inline' *.google.com https://www.googletagmanager.com https://www.google-analytics.com *.qualtrics.com ssl.siteimprove.com siteimproveanalytics.com connect.facebook.net ajax.googleapis.com code.jquery.com  maps.googleapis.com www.youtube.com s.ytimg.com code.highcharts.com cdn.jsdelivr.net edge-cdn.net dl.videos.metrosystems.net *.twimg.com *.twitter.com www.gstatic.com  mfpembedcdnweu.azureedge.net app.mailjet.com www.openpetition.de bscmiagbot.metro.de snap.licdn.com;        connect-src 'self' *.google.com content-eu-discoveryengine.googleapis.com *.google-analytics.com *.qualtrics.com *.twitter.com *.ads.linkedin.com *.facebook.com bscmiagbot.metro.de 1634.global.siteimproveanalytics.io;        frame-ancestors 'self';                   worker-src blob:;        media-src 'self' data: https://video.metro.de; report-uri MagReport.csp?cspReport=true

Page title: Document Moved

<head><title>Document Moved</title></head>
<body><h1>Object Moved</h1>This document may be found <a HREF="https://authors.tr.metro-properties.de/">here</a></body>

Found 2026-01-10 by HttpPlugin

Create report

Open service 20.105.216.40:443 · authors.tr.metro-properties.de

2026-01-10 20:01

HTTP/1.1 200 OK
Content-Length: 165490
Connection: close
Content-Type: text/html
Date: Sat, 10 Jan 2026 20:02:42 GMT
Accept-Ranges: bytes
ETag: "0cdc4805c80dc1:0"
Last-Modified: Thu, 08 Jan 2026 05:06:10 GMT
Set-Cookie: website#theme=default; path=/; secure; SameSite=Lax
Set-Cookie: shell#lang=en; path=/; secure; SameSite=Lax
Set-Cookie: sxa_site=website; path=/; secure; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=31536000
Request-Context: appId=cid-v1:f8722125-6015-4076-a743-feb7da218d7d
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval';               img-src 'self' data: https://login.microsoftonline.com https://adfs5.metro.info https://www.google-analytics.com *.qualtrics.com 1634.global.siteimproveanalytics.io ssl.siteimprove.com *.linkedin.com *.facebook.com csi.gstatic.com maps.googleapis.com maps.gstatic.com *.twimg.com *.twitter.com www.gstatic.com app.miag.com maintenance.metroag.de mfpembedcdnweu.azureedge.net *.metroag.de *.metroag.eu *.metrogroup.de *.miag.com *.metro-cc.com *.metronom.com *.metro-wholesale.de *.metro-wholesale.com *.metro-properties.de *.metro-gruenderstudie.de *.metro-startupstudy.com *.metrosystems.ro *.handel-erklaert.de *.metro-sourcing.hk *.metro-logistics.de *.metro-campus.de *.metro-campus-services.de *.metro-vto.es *.careers.metroag.de *.karriere.metroag.de *.careers.metro-gsc.in *.careers.metro-gsc.pl *.kariera.metro-gsc.pl *.company.metroag.de *.unternehmen.metroag.de *.tr.metro-properties.de *.metro-properties.com.tr *.metro-services.in *.metro-services.pl *.mpulse.de *.metro-unboxed.de *.metro-unboxed.com *.metro-potentials.com *.arbeitgeber-ahd.de *.metro-competencies.com *.metro-trainingcenter.de www.openpetition.de *.wirsindgekommenumzubleiben.de *.metro-global-solution-center.in *.metro.digital *.metro-gsc.in *.metro-gsc.pl *.metro-gsc.com px.ads.linkedin.com bscmiagbot.metro.de i.ytimg.com https://www.googletagmanager.com;        style-src 'self' 'unsafe-inline' https://fonts.googleapis.com cloud.typography.com *.metroag.de *.twitter.com www.gstatic.com d1azc1qln24ryf.cloudfront.net *.twimg.com;        font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com fonts.googleapis.com d1azc1qln24ryf.cloudfront.net www.openpetition.de;        frame-src 'self' *.googletagmanager.com *.facebook.com https://video.metro.de www.youtube.com *.walls.io plugins.flockler.com charts3.equitystory.com *.twitter.com www.google.com dev.dieproduktion.de *.own-business-day.com forms.office.com login.microsoftonline.com t.email.metro.de feedback.metro-cc.com metro.online-report.eu bscmiagbot.metro.de;        upgrade-insecure-requests;               block-all-mixed-content;        script-src 'self' 'unsafe-eval'  'unsafe-inline' *.google.com https://www.googletagmanager.com https://www.google-analytics.com *.qualtrics.com ssl.siteimprove.com siteimproveanalytics.com connect.facebook.net ajax.googleapis.com code.jquery.com  maps.googleapis.com www.youtube.com s.ytimg.com code.highcharts.com cdn.jsdelivr.net edge-cdn.net dl.videos.metrosystems.net *.twimg.com *.twitter.com www.gstatic.com  mfpembedcdnweu.azureedge.net app.mailjet.com www.openpetition.de bscmiagbot.metro.de snap.licdn.com;        connect-src 'self' *.google.com content-eu-discoveryengine.googleapis.com *.google-analytics.com *.qualtrics.com *.twitter.com *.ads.linkedin.com *.facebook.com bscmiagbot.metro.de 1634.global.siteimproveanalytics.io;        frame-ancestors 'self';                   worker-src blob:;        media-src 'self' data: https://video.metro.de; report-uri MagReport.csp?cspReport=true

Page title: 
	Domain in possession of METRO AG - METRO AG


<!DOCTYPE html>
<html lang="en"><!--<![endif]--><head>
<title>
	Domain in possession of METRO AG - METRO AG
</title><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />
<link href="./domain page/asset/favicon.ico" rel="shortcut icon" />
<link href="./domain page/asset/apple-touch-metro-icon-144x144-precomposed.png" rel="apple-touch-icon" />
<meta http-equiv="Reply-To" content="kontakt@metro.de" />
<meta http-equiv="content-language" content="en" />
<meta name="robots" content="noindex, nofollow" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<link href="./domain page/asset/optimized-min.css" rel="stylesheet"><link href="./domain page/asset/optimized-min(1).css" rel="stylesheet"><link href="./domain page/asset/optimized-min(2).css" rel="stylesheet"><link href="./domain page/asset/pre-optimized-min.css" rel="stylesheet"><link href="./domain page/asset/pre-optimized-min(1).css" rel="stylesheet"><link href="./domain page/asset/pre-optimized-min(2).css" rel="stylesheet">    
    
</head>
<body class="default-device bodyclass">
    
    
<!-- #wrapper -->
<div id="wrapper">
    <!-- #header -->
    <header>
        <div id="header" class="">
           <nav class="main_nav ready">

    <div class="container">
        <div class="main_nav__container">
            <div class="main_nav__logo">

                <a href="https://www.metroag.de/" title="METRO">
                    <img src="./domain page/asset/metro-logo-full.svg" alt="METRO" class="li">
                   
                </a>

            </div>
            <div class="main_nav__navi" id="mainNav">

                

<ul class="main_nav__navi__tree tree_page_1 hide-tree-switch">
</ul>
<ul class="main_nav__navi__tree tree_page_2 hide-tree-switch">
</ul>






                <aside class="main_nav__navi__helper">
                    <ul class="main_nav__navi__helper__tree">
                            <li class="main_nav__navi__helper__tree__item">
                                
                                <div>
                                    <a data-contact="true" class="" href="https://www.metroag.de/kontakt">
                                        <span>Contact</span>
                                    </a>
                                </div>
                            </li>
                        
                        
                        <li class="main_nav__navi__helper__tree__item">
                            




        <div class="language-selector-select-item" data-language-code="de" data-country-code="de">

            <a class="language-selector-select-link btn-plain" href="/index_de.html" >
                <span>
                    DEU
                </span>
            </a>
        </div>



                        </li>
                    </ul>
                </aside>

            </div>
            <button class="main_nav__toggler btn btn-secondary btn-square" aria-expanded="false" aria-label="Toggle navigation" aria-controls="mainNav">
                <span></span>
            </button>
        </div>
    </div>
</nav>
        </div>
    </header>
    <!-- /#header -->
    <!-- #content -->
    <main>
        <div id="content" class="">
            
    <div class="component content-container">
        <div class="component-content">
<div class="component pagehead main_header main_wrapper">
        <div class="component-content">
<div class="main_header__content"><div class="container"><h1>
                Domain in possession of METRO AG
            </h1>
			</div></div>        </div>
    </div>


    <div class="component container container--small sec-mt  " id="">
        <div class="row position-relative">

                <div class="component col-md-12 g-4">
                    <div class=" component-content floating-grid">


<div class="headline-with-more">
    <h2 class="font-normal"></h2>
    <div class="seclink my-b

Found 2026-01-10 by HttpPlugin