LeakIX - Host offers.uwinit.com

Domain offers.uwinit.com

United States

AMAZON-AES

Software information

Heroku

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 54.157.4.65
Domain: offers.uwinit.com
Port: 443
URL: https://offers.uwinit.com

First seen 2022-09-11 05:09
Last seen 2025-11-21 06:13
Open for 1167 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c8329733f8329733f3e36522c684d955af4f41c6beee0098e
```
Found 10 files trough .DS_Store spidering:

/404.html.erb
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/icons.svg
/lhr_tips
/robots.txt
/sweepspet_tips
```
  Found on 2025-11-21 06:13
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d8087a996d8cd782ada8580c3ab9caff75
```
Found 8 files trough .DS_Store spidering:

/404.html.erb
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/icons.svg
/robots.txt
```
  Found on 2025-06-13 00:35
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3af247253af24725ac0182dace83d05cab3969e92886ab5b
```
Found 9 files trough .DS_Store spidering:

/404.html.erb
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/GeoLite2-Country.mmdb
/icons.svg
/robots.txt
```
  Found on 2022-09-11 05:09
Create report

Open service 54.157.4.65:443 · offers.uwinit.com

2026-01-08 18:46

HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Type: text/html; charset=utf-8
Etag: W/"e6f5f48ad0e556dec6ec9058740a39e7"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=cMSaKfMSevrOETsvUkk%2FiYpGRhHT3s3Hhf%2FygZIPUUA%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767897968"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=cMSaKfMSevrOETsvUkk%2FiYpGRhHT3s3Hhf%2FygZIPUUA%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767897968"
Server: Heroku
Set-Cookie: _syndi_session=NEhEZGk0ZlVyYzdCUVYyamhWNlFoYW13L1kvak9ETmM4M1FFYVRpMVRMbXVoaGhSV3Y0ZFhiVVVQOEs2VE9jaE1KMUFBMTUva21vWGxmQzROelA1d0pFU3ZYVkp0RkF6UjU5eExXK2hSYmU3L3A2QmF1cXZ5a05IMjExMk5zZVNzVUdCaVA5ZjdBSlYrRjczd3pjUWkyRVBLK3hkNjhpUkFCUTYyaUx2TjZJd0xrMHZrUnBPRmZZeWd1dzl3N2xNdTlNdS9XZitpZjZSdEZ5WkdRbEdzQT09LS1jN0s4TFRXem1uWGVKZUNDZjdKbjBBPT0%3D--52470c3d7b192cab454c3ac243f56e49cd911f0f; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 7c61a8be-a57d-3e7c-b2d6-5bc70c0d4595
X-Runtime: 0.013100
X-Xss-Protection: 1; mode=block
Date: Thu, 08 Jan 2026 18:46:08 GMT
Connection: close
Transfer-Encoding: chunked

Found 2026-01-08 by HttpPlugin

Create report

Open service 35.71.150.51:80 · offers.uwinit.com

2026-01-07 01:42

HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Location: https://offers.uwinit.com/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=SVvdnYVfzqJBDh4xYrQfV4%2BOCmcyGaCh9oLrROvO9LY%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767750224"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=SVvdnYVfzqJBDh4xYrQfV4%2BOCmcyGaCh9oLrROvO9LY%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767750224"
Server: Heroku
Via: 1.1 heroku-router
Date: Wed, 07 Jan 2026 01:43:44 GMT
Content-Length: 0
Connection: close

Found 2026-01-07 by HttpPlugin

Create report

Open service 15.197.152.254:443 · offers.uwinit.com

2026-01-07 01:42

HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Type: text/html; charset=utf-8
Etag: W/"2063cfafbc8a8a866ca6c6910fad5e1e"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=LtTHRDVqQmSBFz51et1ZHBioYEi7jJQ32hp1xbq0OnQ%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767750162"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=LtTHRDVqQmSBFz51et1ZHBioYEi7jJQ32hp1xbq0OnQ%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767750162"
Server: Heroku
Set-Cookie: _syndi_session=SWpwSzV1aWhoQXFFR2JpdGwrbDdDVXpXeGtqRkw5dzdIaUNsMmlFcGQwMEpGMVgram5mTTlHRjc4b0pMWEV6OXRBVUk4bGRhc0d2cVZiM1orelkreml4VFl6b0p6M1V0WFZMdmlQY0tMbDM4bmYxbVRxdnJHRk41ZHJnMThOaWE2MkJ3b0VuL095YmpUdkdYMFNVZ0V5TzNMcFF5K2lqbXF0Tmp2OWt2cm1sZmUwU3dQbC9qQW9YMVVUc01UeG9GTnFyZWoyekM2bVRFcTNhUkFqZFZuQT09LS1aNG9BcGF1MEZMMFNNTEdudmJBTFhnPT0%3D--d9db284995617252f1ed713243e431547cad8091; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: b5ace7b1-05e1-becb-8514-2ff9ddee0ef2
X-Runtime: 0.011406
X-Xss-Protection: 1; mode=block
Date: Wed, 07 Jan 2026 01:42:42 GMT
Connection: close
Transfer-Encoding: chunked

Found 2026-01-07 by HttpPlugin

Create report

Open service 13.248.131.213:80 · offers.uwinit.com

2026-01-07 01:42

HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Location: https://offers.uwinit.com/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=GPQBMgvpyu%2ByTT2FLVwvRIQ5Iy95kZ5MGn77UZI1vzU%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767750223"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=GPQBMgvpyu%2ByTT2FLVwvRIQ5Iy95kZ5MGn77UZI1vzU%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767750223"
Server: Heroku
Via: 1.1 heroku-router
Date: Wed, 07 Jan 2026 01:43:43 GMT
Content-Length: 0
Connection: close

Found 2026-01-07 by HttpPlugin

Create report

Open service 3.33.161.45:80 · offers.uwinit.com

2026-01-07 01:42

HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Location: https://offers.uwinit.com/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=GPQBMgvpyu%2ByTT2FLVwvRIQ5Iy95kZ5MGn77UZI1vzU%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767750223"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=GPQBMgvpyu%2ByTT2FLVwvRIQ5Iy95kZ5MGn77UZI1vzU%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767750223"
Server: Heroku
Via: 1.1 heroku-router
Date: Wed, 07 Jan 2026 01:43:43 GMT
Content-Length: 0
Connection: close

Found 2026-01-07 by HttpPlugin

Create report

Open service 13.248.131.213:443 · offers.uwinit.com

2026-01-07 01:42

HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Type: text/html; charset=utf-8
Etag: W/"1a3e48ed3dcc64a8c8dba54da998fa59"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=LtTHRDVqQmSBFz51et1ZHBioYEi7jJQ32hp1xbq0OnQ%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767750162"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=LtTHRDVqQmSBFz51et1ZHBioYEi7jJQ32hp1xbq0OnQ%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767750162"
Server: Heroku
Set-Cookie: _syndi_session=bmZwZVRmQkFVUUlXQUpIN0VoZjhOT0laM3VIalpjSUlHR0N5NGRsK1JNcE9CbU84blQ1QlhSK0RDQ1RwZ0RmUTNQL3V4RVRyWHhFQ0duczBERitxMVBUSEhyOHc1alg3YWQvcHZFRzN5Y1FhWUNMdFRXT3o0SjlUTFBoWkQyWDhCMUw1TWsrMmJsWEhXQm1LTXJKU2FvMGswU0dWc3JZc3NvZmg0R1JtOC9RTWVHWmhES2hnRmZaQi9pMGQxVjdJdzRIQzRhemd1OGhzbTVwOHNFc0pUUT09LS00TDR6VXpZK1pQL3JVWG95MFBvMmZ3PT0%3D--fcb38be5bdc5a20e6720d392a9c6f14c421dc54e; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: a3985c39-6a6a-47d6-574c-218fcb9c168f
X-Runtime: 0.014553
X-Xss-Protection: 1; mode=block
Date: Wed, 07 Jan 2026 01:42:42 GMT
Connection: close
Transfer-Encoding: chunked

Found 2026-01-07 by HttpPlugin

Create report

Open service 3.33.161.45:443 · offers.uwinit.com

2026-01-07 01:42

HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Type: text/html; charset=utf-8
Etag: W/"4246392987c7dd5864338dd95c567279"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=LtTHRDVqQmSBFz51et1ZHBioYEi7jJQ32hp1xbq0OnQ%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767750162"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=LtTHRDVqQmSBFz51et1ZHBioYEi7jJQ32hp1xbq0OnQ%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767750162"
Server: Heroku
Set-Cookie: _syndi_session=REMyN3d2aEVhTkNnR0lKcXhsMVp4ZERGR3RERUxseHFrcERkSG9sMnhGZng0T0JZZWxPZ0NHenFReUVaSFBwaDFKcjZGYitFZ3hlSWgvVkNVajR5SEpjWXI0TFVoYXIydFMraVhQTTJySS9EN1FXRzJZV21MRVVwSlY3Um1sMVdtVHZZb2d6WHY1TFYyTWpCUjk0MHNqUUs2MDJLVjNSVkVjcWl5Y0VER0QyRDJRNGwyaWNOUjJIdVhlRGFPSXZVWDVNL09NRXB3MGlyd0VuQ2hxelAwdz09LS1MYTNwdmtRdDhKeGxrcng3ZVJFWk93PT0%3D--de7ca4cba203f0bf71cf6c068326c117587f3bbe; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: e8f91850-7949-cc2b-ae1c-d3e0718e2535
X-Runtime: 0.013450
X-Xss-Protection: 1; mode=block
Date: Wed, 07 Jan 2026 01:42:42 GMT
Connection: close
Transfer-Encoding: chunked

Found 2026-01-07 by HttpPlugin

Create report

Open service 35.71.150.51:443 · offers.uwinit.com

2026-01-07 01:42

HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Type: text/html; charset=utf-8
Etag: W/"478c1aeea811e4634508cd00059ed083"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=LtTHRDVqQmSBFz51et1ZHBioYEi7jJQ32hp1xbq0OnQ%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767750162"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=LtTHRDVqQmSBFz51et1ZHBioYEi7jJQ32hp1xbq0OnQ%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767750162"
Server: Heroku
Set-Cookie: _syndi_session=NnVJUjNhTzJ3VUlFWitKQ2VHM005cEt1dTJnQkE5QkNDanZJaEpyQzd2R2hDUll2VitkbHV1N05ULy9jQVVIdzRkVzZ4ZWZiTzlQUWwzSkR6NmdRc1lCNk5JcE84b3MwS082NG1nd1p4SERwNGl2a2owakw2aDJrSFczRTBXeENSMXFRaHNURWkvemZLNU5lY0lkbC81QkZ1TVZ0cXhOYzdnVlpla0IwVkZCcHJqZk96cXZQaU9uR3hBaXdZMVQvenBHVjN1NEdabHBIQ3p0VUZZMlJ2Zz09LS1YcFVvOGl6aXJ6UmJrVHpncldLcnVBPT0%3D--dad8579da73fd9d8f3a88b4a0f9aeef543623c7f; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 9b644b21-bd27-873c-762b-d9c967f5dc81
X-Runtime: 0.012097
X-Xss-Protection: 1; mode=block
Date: Wed, 07 Jan 2026 01:42:42 GMT
Connection: close
Transfer-Encoding: chunked

Found 2026-01-07 by HttpPlugin

Create report

Open service 15.197.152.254:80 · offers.uwinit.com

2026-01-07 01:42

HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Location: https://offers.uwinit.com/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=SVvdnYVfzqJBDh4xYrQfV4%2BOCmcyGaCh9oLrROvO9LY%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767750224"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=SVvdnYVfzqJBDh4xYrQfV4%2BOCmcyGaCh9oLrROvO9LY%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767750224"
Server: Heroku
Via: 1.1 heroku-router
Date: Wed, 07 Jan 2026 01:43:44 GMT
Content-Length: 0
Connection: close

Found 2026-01-07 by HttpPlugin

Create report

offers.uwinit.com

Fingerprint:

b7de87dc4855e5ff7a572bbfd332d75dacc12b7c7f930ab2091da92ebcb8e9be

CN:

offers.uwinit.com

Key:

RSA-2048

Issuer:

R13

Not before:

2026-01-07 00:44

Not after:

2026-04-07 00:44

Domain summary

offers.uwinit.com 11

1 recorded

IP summary

54.157.4.65 1 35.71.150.51 1 15.197.152.254 1 13.248.131.213 1 3.33.161.45 1

5 recorded

Domain offers.uwinit.com

United States

Software information

MacOS file listing through .DS_Store file

offers.uwinit.com

Domain summary

IP summary