LeakIX - Host metro-vto.es

Domain metro-vto.es

Germany

MICROSOFT-CORP-MSN-AS-BLOCK

Open service 2a02:26f0:3500:14::1724:a248:80 · www.metro-vto.es

2026-02-05 01:08

HTTP/1.1 403 Forbidden
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 372
Expires: Thu, 05 Feb 2026 01:08:50 GMT
Date: Thu, 05 Feb 2026 01:08:50 GMT
Connection: close

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;www&#46;metro&#45;vto&#46;es&#47;" on this server.<P>
Reference&#32;&#35;18&#46;8a02417&#46;1770253730&#46;2d790708
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;8a02417&#46;1770253730&#46;2d790708</P>
</BODY>
</HTML>

Found 2 days ago by HttpPlugin

Create report

Open service 20.105.232.29:80 · authors-dev.metro-vto.es

2026-01-10 20:27

HTTP/1.1 301 Moved Permanently
Content-Length: 156
Connection: close
Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Jan 2026 20:28:05 GMT
Location: https://authors-dev.metro-vto.es/
Set-Cookie: ARRAffinity=614be8bd53a3d7e8e7e3bddd84b0c10caf88fb52dd6f417610ef45b7caacdfcb;Path=/;HttpOnly;Domain=authors-dev.metro-vto.es
Strict-Transport-Security: max-age=31536000
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval';               img-src 'self' data: https://login.microsoftonline.com https://adfs5.metro.info https://www.google-analytics.com *.qualtrics.com 1634.global.siteimproveanalytics.io ssl.siteimprove.com *.linkedin.com *.facebook.com csi.gstatic.com maps.googleapis.com maps.gstatic.com *.twimg.com *.twitter.com www.gstatic.com app.miag.com maintenance.metroag.de mfpembedcdnweu.azureedge.net *.metroag.de *.metroag.eu *.metrogroup.de *.miag.com *.metro-cc.com *.metronom.com *.metro-wholesale.de *.metro-wholesale.com *.metro-properties.de *.metro-gruenderstudie.de *.metro-startupstudy.com *.metrosystems.ro *.handel-erklaert.de *.metro-sourcing.hk *.metro-logistics.de *.metro-campus.de *.metro-campus-services.de *.metro-vto.es *.careers.metroag.de *.karriere.metroag.de *.careers.metro-gsc.in *.careers.metro-gsc.pl *.kariera.metro-gsc.pl *.company.metroag.de *.unternehmen.metroag.de *.tr.metro-properties.de *.metro-properties.com.tr *.metro-services.in *.metro-services.pl *.mpulse.de *.metro-unboxed.de *.metro-unboxed.com *.metro-potentials.com *.arbeitgeber-ahd.de *.metro-competencies.com *.metro-trainingcenter.de www.openpetition.de *.wirsindgekommenumzubleiben.de *.metro-global-solution-center.in *.metro.digital *.metro-gsc.in *.metro-gsc.pl *.metro-gsc.com px.ads.linkedin.com bscmiagbot.metro.de i.ytimg.com https://www.googletagmanager.com;        style-src 'self' 'unsafe-inline' https://fonts.googleapis.com cloud.typography.com *.metroag.de *.twitter.com www.gstatic.com d1azc1qln24ryf.cloudfront.net *.twimg.com;        font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com fonts.googleapis.com d1azc1qln24ryf.cloudfront.net www.openpetition.de;        frame-src 'self' *.googletagmanager.com *.facebook.com https://video.metro.de www.youtube.com *.walls.io plugins.flockler.com charts3.equitystory.com *.twitter.com www.google.com dev.dieproduktion.de *.own-business-day.com forms.office.com login.microsoftonline.com t.email.metro.de feedback.metro-cc.com metro.online-report.eu bscmiagbot.metro.de;        upgrade-insecure-requests;               block-all-mixed-content;        script-src 'self' 'unsafe-eval'  'unsafe-inline' *.google.com https://www.googletagmanager.com https://www.google-analytics.com *.qualtrics.com ssl.siteimprove.com siteimproveanalytics.com connect.facebook.net ajax.googleapis.com code.jquery.com  maps.googleapis.com www.youtube.com s.ytimg.com code.highcharts.com cdn.jsdelivr.net edge-cdn.net dl.videos.metrosystems.net *.twimg.com *.twitter.com www.gstatic.com  mfpembedcdnweu.azureedge.net app.mailjet.com www.openpetition.de bscmiagbot.metro.de snap.licdn.com;        connect-src 'self' *.google.com content-eu-discoveryengine.googleapis.com *.google-analytics.com *.qualtrics.com *.twitter.com *.ads.linkedin.com *.facebook.com bscmiagbot.metro.de 1634.global.siteimproveanalytics.io;        frame-ancestors 'self';                   worker-src blob:;        media-src 'self' data: https://video.metro.de; report-uri MagReport.csp?cspReport=true

Page title: Document Moved

<head><title>Document Moved</title></head>
<body><h1>Object Moved</h1>This document may be found <a HREF="https://authors-dev.metro-vto.es/">here</a></body>

Found 2026-01-10 by HttpPlugin

Create report

Open service 20.105.232.29:443 · authors-dev.metro-vto.es

2026-01-10 20:27

HTTP/1.1 302 Found
Content-Length: 511
Connection: close
Content-Type: text/html; charset=utf-8
Date: Sat, 10 Jan 2026 20:28:05 GMT
Location: https://login.microsoftonline.com:443/64322308-09a9-47a3-8c1c-b82871d60568/oauth2/v2.0/authorize?response_type=code+id_token&redirect_uri=https%3a%2f%2fauthors-dev.metro-vto.es%2f.auth%2flogin%2fmetro&client_id=f29f55d1-86da-4245-bac7-00fb66b58e84&scope=openid profile email&response_mode=form_post&nonce=fa3e81123c7a47139be5fa432c9bded7_20210113164622&state=redir%3d%2f
Set-Cookie: metro-vto-1#allowedusercookiecategories=preferences%3ai%7cstatistics%3ai%7cthird-party%3ai%2cyoutube%3ai; path=/; secure; SameSite=Lax
Set-Cookie: metro-vto-1#theme=default; path=/; secure; SameSite=Lax
Set-Cookie: shell#lang=en; path=/; secure; SameSite=Lax
Set-Cookie: sxa_site=metro-vto-1; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: ARRAffinity=614be8bd53a3d7e8e7e3bddd84b0c10caf88fb52dd6f417610ef45b7caacdfcb;Path=/;HttpOnly;Secure;Domain=authors-dev.metro-vto.es
Set-Cookie: ARRAffinitySameSite=614be8bd53a3d7e8e7e3bddd84b0c10caf88fb52dd6f417610ef45b7caacdfcb;Path=/;HttpOnly;SameSite=None;Secure;Domain=authors-dev.metro-vto.es
Strict-Transport-Security: max-age=31536000
Request-Context: appId=cid-v1:c1dfe3a1-829a-4980-a1af-dbe94299686b
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval';               img-src 'self' data: https://login.microsoftonline.com https://adfs5.metro.info https://www.google-analytics.com *.qualtrics.com 1634.global.siteimproveanalytics.io ssl.siteimprove.com *.linkedin.com *.facebook.com csi.gstatic.com maps.googleapis.com maps.gstatic.com *.twimg.com *.twitter.com www.gstatic.com app.miag.com maintenance.metroag.de mfpembedcdnweu.azureedge.net *.metroag.de *.metroag.eu *.metrogroup.de *.miag.com *.metro-cc.com *.metronom.com *.metro-wholesale.de *.metro-wholesale.com *.metro-properties.de *.metro-gruenderstudie.de *.metro-startupstudy.com *.metrosystems.ro *.handel-erklaert.de *.metro-sourcing.hk *.metro-logistics.de *.metro-campus.de *.metro-campus-services.de *.metro-vto.es *.careers.metroag.de *.karriere.metroag.de *.careers.metro-gsc.in *.careers.metro-gsc.pl *.kariera.metro-gsc.pl *.company.metroag.de *.unternehmen.metroag.de *.tr.metro-properties.de *.metro-properties.com.tr *.metro-services.in *.metro-services.pl *.mpulse.de *.metro-unboxed.de *.metro-unboxed.com *.metro-potentials.com *.arbeitgeber-ahd.de *.metro-competencies.com *.metro-trainingcenter.de www.openpetition.de *.wirsindgekommenumzubleiben.de *.metro-global-solution-center.in *.metro.digital *.metro-gsc.in *.metro-gsc.pl *.metro-gsc.com px.ads.linkedin.com bscmiagbot.metro.de i.ytimg.com https://www.googletagmanager.com;        style-src 'self' 'unsafe-inline' https://fonts.googleapis.com cloud.typography.com *.metroag.de *.twitter.com www.gstatic.com d1azc1qln24ryf.cloudfront.net *.twimg.com;        font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com fonts.googleapis.com d1azc1qln24ryf.cloudfront.net www.openpetition.de;        frame-src 'self' *.googletagmanager.com *.facebook.com https://video.metro.de www.youtube.com *.walls.io plugins.flockler.com charts3.equitystory.com *.twitter.com www.google.com dev.dieproduktion.de *.own-business-day.com forms.office.com login.microsoftonline.com t.email.metro.de feedback.metro-cc.com metro.online-report.eu bscmiagbot.metro.de;        upgrade-insecure-requests;               block-all-mixed-content;        script-src 'self' 'unsafe-eval'  'unsafe-inline' *.google.com https://www.googletagmanager.com https://www.google-analytics.com *.qualtrics.com ssl.siteimprove.com siteimproveanalytics.com connect.facebook.net ajax.googleapis.com code.jquery.com  maps.googleapis.com www.youtube.com s.ytimg.com code.highcharts.com cdn.jsdelivr.net edge-cdn.net dl.videos.metrosystems.net *.twimg.com *.twitter.com www.gstatic.com  mfpembedcdnweu.azureedge.net app.mailjet.com www.openpetition.de bscmiagbot.metro.de snap.licdn.com;        connect-src 'self' *.google.com content-eu-discoveryengine.googleapis.com *.google-analytics.com *.qualtrics.com *.twitter.com *.ads.linkedin.com *.facebook.com bscmiagbot.metro.de 1634.global.siteimproveanalytics.io;        frame-ancestors 'self';                   worker-src blob:;        media-src 'self' data: https://video.metro.de; report-uri MagReport.csp?cspReport=true

Page title: Object moved

<html><head><title>Object moved</title></head><body>
<h2>Object moved to <a href="https://login.microsoftonline.com:443/64322308-09a9-47a3-8c1c-b82871d60568/oauth2/v2.0/authorize?response_type=code+id_token&amp;redirect_uri=https%3a%2f%2fauthors-dev.metro-vto.es%2f.auth%2flogin%2fmetro&amp;client_id=f29f55d1-86da-4245-bac7-00fb66b58e84&amp;scope=openid profile email&amp;response_mode=form_post&amp;nonce=fa3e81123c7a47139be5fa432c9bded7_20210113164622&amp;state=redir%3d%2f">here</a>.</h2>
</body></html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 20.105.232.29:443 · www-dev.metro-vto.es

2026-01-10 20:20

HTTP/1.1 403 Ip Forbidden
Content-Length: 1892
Connection: close
Content-Type: text/html
Date: Sat, 10 Jan 2026 20:21:41 GMT
x-ms-forbidden-ip: 167.99.181.249

Page title: Web App - Unavailable

<!DOCTYPE html>
<html>
<head>
    <title>Web App - Unavailable</title>
    <style type="text/css">
        html {
            height: 100%;
            width: 100%;
        }

        #feature {
            width: 960px;
            margin: 95px auto 0 auto;
            overflow: auto;
        }

        #content {
            font-family: "Segoe UI";
            font-weight: normal;
            font-size: 22px;
            color: #ffffff;
            float: left;
            width: 460px;
            margin-top: 68px;
            margin-left: 0px;
            vertical-align: middle;
        }

            #content h1 {
                font-family: "Segoe UI Light";
                color: #ffffff;
                font-weight: normal;
                font-size: 60px;
                line-height: 48pt;
                width: 800px;
            }

        p a, p a:visited, p a:active, p a:hover {
            color: #ffffff;
        }

        #content a.button {
            background: #0DBCF2;
            border: 1px solid #FFFFFF;
            color: #FFFFFF;
            display: inline-block;
            font-family: Segoe UI;
            font-size: 24px;
            line-height: 46px;
            margin-top: 10px;
            padding: 0 15px 3px;
            text-decoration: none;
        }

            #content a.button img {
                float: right;
                padding: 10px 0 0 15px;
            }

            #content a.button:hover {
                background: #1C75BC;
            }
    </style>
</head>
<body bgcolor="#00abec">
    <div id="feature">
        <div id="content">
            <h1 id="unavailable">Error 403 - Forbidden</h1>
            <p id="tryAgain">The web app you have attempted to reach has blocked your access.</p>
        </div>
    </div>
</body>
</html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 20.105.232.29:80 · www-dev.metro-vto.es

2026-01-10 20:20

HTTP/1.1 403 Ip Forbidden
Content-Length: 1892
Connection: close
Content-Type: text/html
Date: Sat, 10 Jan 2026 20:21:41 GMT
x-ms-forbidden-ip: 167.99.182.39

Page title: Web App - Unavailable

<!DOCTYPE html>
<html>
<head>
    <title>Web App - Unavailable</title>
    <style type="text/css">
        html {
            height: 100%;
            width: 100%;
        }

        #feature {
            width: 960px;
            margin: 95px auto 0 auto;
            overflow: auto;
        }

        #content {
            font-family: "Segoe UI";
            font-weight: normal;
            font-size: 22px;
            color: #ffffff;
            float: left;
            width: 460px;
            margin-top: 68px;
            margin-left: 0px;
            vertical-align: middle;
        }

            #content h1 {
                font-family: "Segoe UI Light";
                color: #ffffff;
                font-weight: normal;
                font-size: 60px;
                line-height: 48pt;
                width: 800px;
            }

        p a, p a:visited, p a:active, p a:hover {
            color: #ffffff;
        }

        #content a.button {
            background: #0DBCF2;
            border: 1px solid #FFFFFF;
            color: #FFFFFF;
            display: inline-block;
            font-family: Segoe UI;
            font-size: 24px;
            line-height: 46px;
            margin-top: 10px;
            padding: 0 15px 3px;
            text-decoration: none;
        }

            #content a.button img {
                float: right;
                padding: 10px 0 0 15px;
            }

            #content a.button:hover {
                background: #1C75BC;
            }
    </style>
</head>
<body bgcolor="#00abec">
    <div id="feature">
        <div id="content">
            <h1 id="unavailable">Error 403 - Forbidden</h1>
            <p id="tryAgain">The web app you have attempted to reach has blocked your access.</p>
        </div>
    </div>
</body>
</html>

Found 2026-01-10 by HttpPlugin