LeakIX - Host security.lacma.org

Domain security.lacma.org

United States

AMAZON-02

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 54.69.95.100
Domain: security.lacma.org
Port: 443
URL: https://security.lacma.org

First seen 2025-11-28 09:37
Last seen 2025-11-30 08:35
Open for 1 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2025-11-30 08:35
Create report

Open service 54.69.95.100:443 · security.lacma.org

2026-01-22 20:13

HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Length: 9931
Content-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; img-src * data: blob:; media-src * data: blob:; font-src *; connect-src *; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.ckeditor.com; style-src 'self' 'unsafe-inline'; frame-ancestors *; frame-src 'self' https://*.mojohelpdesk.com https://app.bamzooka.com https://*.youtube.com https://*.youtube-nocookie.com https://fast.wistia.net https://*.wistia.com
Content-Type: text/html; charset=utf-8
Date: Thu, 22 Jan 2026 20:14:22 GMT
Etag: W/"c08d2695eb0d3c9ad1d5f6474902b61b"
Link: </assets/application-f5125179dad257f1def2a39f3bfc0b2cf8e14f3ad478051261ae5627993c6a02.css>; rel=preload; as=style; nopush,</assets/application-31e596ff1d720a45ee47c7464e2ca5b1a73c501d4cb6599c39354d71ee13cb32.js>; rel=preload; as=script; nopush,</assets/custom-679964687316e34269274d14d99f238b0f03d7fd67e42c71e18273d779e8781e.css>; rel=preload; as=style; nopush,</assets/mojo-cooked-content-0158ceae484649b4a6aa0c8d2ab6f78d3f7d72d3198b0e0470299f83ebcbf347.css>; rel=preload; as=style; nopush,</assets/google-roboto-font-family-e9a2961f2e0e8e9525cc1a32ec66282668222752b3fe15ed59bca7e90be44046.css>; rel=preload; as=style; nopush,</assets/1-c0d45f470a22138d64d361c5a10cf40af74a21b00d04d3d24f03979f76b8244d.js>; rel=preload; as=script; nopush
Referrer-Policy: strict-origin-when-cross-origin
Set-Cookie: XSRF-TOKEN=3bTYHZMGoGu5k2FLyb6TgFtChRMJIUMHDivkQPHXUZ5-0UuUz1YXBjWB1h0cBjsGC2vRxpff03V7xth3v18row; path=/; SameSite=Lax
Set-Cookie: _user_session=wEXABoVe1plT7%2Bu811CgDG6hYe6dS6Cbatr0wXduvCVsIUDTYAQDPruRt2J74UOiAzHsB%2Bu0gN41J%2BJYf0QYLf04uMUPIsSpGJECA9aajiG9A%2FQNiAmHytzGx5jLs%2FjEJ31P6hW8KrEbjKQh3scAgK5M5nEttAB6np5TKQ34820PI%2BaaS%2FhnPOVTkJ6FM4glbZPqzl8YYLeyDVrps7oxRt8mkAyiPsgxYjoM69thUIUexQZFDL4mqM7GetiSZw7L5r7J7XZPfixppbKGNtKZVJ3aGNo71WmgYS%2B4X2eS77oUBGcYqtsEPakKwQ%3D%3D--zU9sc9FOFbfF6QPP--PdNIoR2PQ2nA88yBft3nvw%3D%3D; path=/; expires=Fri, 26 Feb 2027 20:14:22 GMT; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 6c38fdcc-a4b8-4cff-839f-12b1b03decda
X-Runtime: 0.016348
X-Ua-Compatible: IE=edge,chrome=1
Connection: close

Page title: LACMA | Mojo Helpdesk

<!DOCTYPE html>
<html lang="en">
  <head>
    <title>LACMA | Mojo Helpdesk</title>
    <meta property="og:title" content="LACMA | Mojo Helpdesk">
      <meta property="og:description" content="LACMA generated by Mojo Helpdesk.">
    <meta name="csrf-param" content="authenticity_token" />
<meta name="csrf-token" content="vCiphZWwuNoaEHvl2c-oigDrrL7BwqeYkTsVWcDxRpUfTToMyeAPt5YCzLMMdwAMUML4a188N-rk1ilujnk8qA" />
    <meta name="csp-nonce" />
    <link rel="stylesheet" href="/assets/application-f5125179dad257f1def2a39f3bfc0b2cf8e14f3ad478051261ae5627993c6a02.css" data-turbo-track="reload" />
    <script src="/assets/application-31e596ff1d720a45ee47c7464e2ca5b1a73c501d4cb6599c39354d71ee13cb32.js" data-turbo-track="reload"></script>
    <!--responsive viewport meta tag-->
    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
    <link rel="stylesheet" href="/assets/custom-679964687316e34269274d14d99f238b0f03d7fd67e42c71e18273d779e8781e.css" data-turbo-track="reload" />
    <link rel="stylesheet" href="/assets/mojo-cooked-content-0158ceae484649b4a6aa0c8d2ab6f78d3f7d72d3198b0e0470299f83ebcbf347.css" data-turbo-track="reload" />
    <link rel="stylesheet" href="/assets/google-roboto-font-family-e9a2961f2e0e8e9525cc1a32ec66282668222752b3fe15ed59bca7e90be44046.css" data-turbo-track="reload" />
    <script src="/assets/1-c0d45f470a22138d64d361c5a10cf40af74a21b00d04d3d24f03979f76b8244d.js" data-turbolinks-track="reload"></script>
    <!-- Notifications -->
    <!-- Enhanced Flash Messages for Admin Interface -->

<style>
.flash-messages-container {
  position: fixed;
  top: 20px;
  right: 20px;
  z-index: 1050;
  max-width: 400px;
  width: 100%;
}

.flash-message {
  border-radius: 0.5rem;
  border: none;
  box-shadow: 0 0.5rem 1rem rgba(0, 0, 0, 0.15);
  margin-bottom: 1rem;
  animation: slideInRight 0.3s ease-out;
}

.flash-message.alert-success {
  background-color: #d4edda;
  color: #155724;
  border-left: 4px solid #28a745;
}

.flash-message.alert-danger {
  background-color: #f8d7da;
  color: #721c24;
  border-left: 4px solid #dc3545;
}

.flash-message.alert-warning {
  background-color: #fff3cd;
  color: #856404;
  border-left: 4px solid #ffc107;
}

.flash-message.alert-info {
  background-color: #d1ecf1;
  color: #0c5460;
  border-left: 4px solid #17a2b8;
}

.flash-message .alert-heading {
  font-weight: 600;
  margin-bottom: 0.5rem;
}

.flash-message ul {
  margin-bottom: 0;
  padding-left: 1.2rem;
}

.flash-message .btn-close {
  opacity: 0.7;
  transition: opacity 0.2s;
}

.flash-message .btn-close:hover {
  opacity: 1;
}

@keyframes slideInRight {
  from {
    transform: translateX(100%);
    opacity: 0;
  }
  to {
    transform: translateX(0);
    opacity: 1;
  }
}

/* Auto-hide flash messages after 5 seconds */
.flash-message {
  animation: slideInRight 0.3s ease-out, fadeOut 0.3s ease-in 4.7s forwards;
}

@keyframes fadeOut {
  to {
    opacity: 0;
    transform: translateX(100%);
  }
}

/* Responsive adjustments */
@media (max-width: 768px) {
  .flash-messages-container {
    top: 10px;
    right: 10px;
    left: 10px;
    max-width: none;
  }
}
</style>

<script>
document.addEventListener('DOMContentLoaded', function() {
  // Auto-hide flash messages after 5 seconds
  const flashMessages = document.querySelectorAll('.flash-message');
  flashMessages.forEach(function(message) {
    setTimeout(function() {
      message.style.animation = 'fadeOut 0.3s ease-in forwards';
      setTimeout(function() {
        message.remove();
      }, 300);
    }, 5000);
  });

  // Manual close functionality
  const closeButtons = document.querySelectorAll('.flash-message .btn-close');
  closeButtons.forEach(function(button) {
    button.addEventListener('click', function() {
      const message = this.closest('.flash-message');
      message.style.animation = 'fadeOut 0.3s ease-in forwards';
      setTimeout(function() {
        message.remove();
      }, 300);
    });
  });
});
</script>


    <!-- Favicon -->
    <link rel="icon" type="image/x-icon" href="/assets/mojofavicon-ae1ad6f82ccb28dc5fcb9

Found 2026-01-22 by HttpPlugin

Create report

Open service 54.69.95.100:80 · security.lacma.org

2026-01-11 17:49

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Sun, 11 Jan 2026 17:50:15 GMT
Content-Length: 19
Connection: close


404 page not found

Found 2026-01-11 by HttpPlugin

Create report

Open service 54.69.95.100:443 · security.lacma.org

2026-01-11 17:49

HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Length: 9869
Content-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; img-src * data: blob:; media-src * data: blob:; font-src *; connect-src *; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.ckeditor.com; style-src 'self' 'unsafe-inline'; frame-ancestors *; frame-src 'self' https://*.mojohelpdesk.com https://app.bamzooka.com https://*.youtube.com https://*.youtube-nocookie.com https://fast.wistia.net https://*.wistia.com
Content-Type: text/html; charset=utf-8
Date: Sun, 11 Jan 2026 17:50:15 GMT
Etag: W/"e46fd1095b4a22788f284f83f62f4594"
Link: </assets/application-f5125179dad257f1def2a39f3bfc0b2cf8e14f3ad478051261ae5627993c6a02.css>; rel=preload; as=style; nopush,</assets/application-31e596ff1d720a45ee47c7464e2ca5b1a73c501d4cb6599c39354d71ee13cb32.js>; rel=preload; as=script; nopush,</assets/custom-29ffdb46c7eba2cbf17558e631b2a16e3b698ce09aa79c6e1e13a6064cdf9c38.css>; rel=preload; as=style; nopush,</assets/mojo-cooked-content-0158ceae484649b4a6aa0c8d2ab6f78d3f7d72d3198b0e0470299f83ebcbf347.css>; rel=preload; as=style; nopush,</assets/google-roboto-font-family-e9a2961f2e0e8e9525cc1a32ec66282668222752b3fe15ed59bca7e90be44046.css>; rel=preload; as=style; nopush,</assets/1-c0d45f470a22138d64d361c5a10cf40af74a21b00d04d3d24f03979f76b8244d.js>; rel=preload; as=script; nopush
Referrer-Policy: strict-origin-when-cross-origin
Set-Cookie: XSRF-TOKEN=D3MUyA06-GeCuEH6BNqWM1tDctpJrOZOwduG_5aMu_4vFiTKMOCMmpbbjacWOUUxo6Vi__HWr6Jnj8mRXri7mg; path=/; SameSite=Lax
Set-Cookie: _user_session=djropCiBB%2F37EY5EkA61X00oQekZTvbkoE0nsQv9EwMCTkLhinVSbIULqSs%2BtgxLHhkpfRq%2B7Q0Cxur8rF3YwC00zH4wOe8fR9d0yaU5WB3%2BtM%2BwK1RsiStbqGmZzUw3sgQglPEf%2B9IQH1z0TvEcEZ8kWc7ncRTEWSRH4fejdlJ3SSqYOqJ7yIGZsOAtP0SUcsXWTEvzuJjfA%2BivPMKJfaasszGH6mEvJRhZofDR%2FAUfQ9t7iQixwawABxRWgpedbS62nKamaDqoFBZ%2B8VKUMcgVi26oqly5iP3O551kyBgFpKVb7flIZUlqYQ%3D%3D--3prR6qWMNIT1xSFj--pkDFdNCdcNmY%2F%2BCrvftr1w%3D%3D; path=/; expires=Mon, 15 Feb 2027 17:50:15 GMT; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: f0eae172-0c6c-49e9-90eb-edef9a4f2689
X-Runtime: 0.018288
X-Ua-Compatible: IE=edge,chrome=1
Connection: close

Page title: LACMA | Mojo Helpdesk

<!DOCTYPE html>
<html>
  <head>
    <title>LACMA | Mojo Helpdesk</title>
    <meta property="og:title" content="LACMA | Mojo Helpdesk">
      <meta property="og:description" content="LACMA generated by Mojo Helpdesk.">
    <meta name="csrf-param" content="authenticity_token" />
<meta name="csrf-token" content="jCP5ONmXRdMDtzL4YoWrGP7Bi54yhkn8uBKl1_KZ5FysRsk65E0xLhfU_qVwZngaBiebu4r8ABAeRuq5Oq3kOA" />
    <meta name="csp-nonce" />
    <link rel="stylesheet" href="/assets/application-f5125179dad257f1def2a39f3bfc0b2cf8e14f3ad478051261ae5627993c6a02.css" data-turbo-track="reload" />
    <script src="/assets/application-31e596ff1d720a45ee47c7464e2ca5b1a73c501d4cb6599c39354d71ee13cb32.js" data-turbo-track="reload"></script>
    <!--responsive viewport meta tag-->
    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
    <link rel="stylesheet" href="/assets/custom-29ffdb46c7eba2cbf17558e631b2a16e3b698ce09aa79c6e1e13a6064cdf9c38.css" data-turbo-track="reload" />
    <link rel="stylesheet" href="/assets/mojo-cooked-content-0158ceae484649b4a6aa0c8d2ab6f78d3f7d72d3198b0e0470299f83ebcbf347.css" data-turbo-track="reload" />
    <link rel="stylesheet" href="/assets/google-roboto-font-family-e9a2961f2e0e8e9525cc1a32ec66282668222752b3fe15ed59bca7e90be44046.css" data-turbo-track="reload" />
    <script src="/assets/1-c0d45f470a22138d64d361c5a10cf40af74a21b00d04d3d24f03979f76b8244d.js" data-turbolinks-track="reload"></script>
    <!-- Notifications -->
    <!-- Enhanced Flash Messages for Admin Interface -->

<style>
.flash-messages-container {
  position: fixed;
  top: 20px;
  right: 20px;
  z-index: 1050;
  max-width: 400px;
  width: 100%;
}

.flash-message {
  border-radius: 0.5rem;
  border: none;
  box-shadow: 0 0.5rem 1rem rgba(0, 0, 0, 0.15);
  margin-bottom: 1rem;
  animation: slideInRight 0.3s ease-out;
}

.flash-message.alert-success {
  background-color: #d4edda;
  color: #155724;
  border-left: 4px solid #28a745;
}

.flash-message.alert-danger {
  background-color: #f8d7da;
  color: #721c24;
  border-left: 4px solid #dc3545;
}

.flash-message.alert-warning {
  background-color: #fff3cd;
  color: #856404;
  border-left: 4px solid #ffc107;
}

.flash-message.alert-info {
  background-color: #d1ecf1;
  color: #0c5460;
  border-left: 4px solid #17a2b8;
}

.flash-message .alert-heading {
  font-weight: 600;
  margin-bottom: 0.5rem;
}

.flash-message ul {
  margin-bottom: 0;
  padding-left: 1.2rem;
}

.flash-message .btn-close {
  opacity: 0.7;
  transition: opacity 0.2s;
}

.flash-message .btn-close:hover {
  opacity: 1;
}

@keyframes slideInRight {
  from {
    transform: translateX(100%);
    opacity: 0;
  }
  to {
    transform: translateX(0);
    opacity: 1;
  }
}

/* Auto-hide flash messages after 5 seconds */
.flash-message {
  animation: slideInRight 0.3s ease-out, fadeOut 0.3s ease-in 4.7s forwards;
}

@keyframes fadeOut {
  to {
    opacity: 0;
    transform: translateX(100%);
  }
}

/* Responsive adjustments */
@media (max-width: 768px) {
  .flash-messages-container {
    top: 10px;
    right: 10px;
    left: 10px;
    max-width: none;
  }
}
</style>

<script>
document.addEventListener('DOMContentLoaded', function() {
  // Auto-hide flash messages after 5 seconds
  const flashMessages = document.querySelectorAll('.flash-message');
  flashMessages.forEach(function(message) {
    setTimeout(function() {
      message.style.animation = 'fadeOut 0.3s ease-in forwards';
      setTimeout(function() {
        message.remove();
      }, 300);
    }, 5000);
  });

  // Manual close functionality
  const closeButtons = document.querySelectorAll('.flash-message .btn-close');
  closeButtons.forEach(function(button) {
    button.addEventListener('click', function() {
      const message = this.closest('.flash-message');
      message.style.animation = 'fadeOut 0.3s ease-in forwards';
      setTimeout(function() {
        message.remove();
      }, 300);
    });
  });
});
</script>


    <!-- Favicon -->
    <link rel="icon" type="image/x-icon" href="/assets/mojofavicon-ae1ad6f82ccb28dc5fcb955475da69c

Found 2026-01-11 by HttpPlugin

Create report

security.lacma.org

Fingerprint:

0cb7c96c2e8135c2cc64b7ff1e5faabb42ac9ec15115469c1072527490a3e84a

CN:

security.lacma.org

Key:

RSA-4096

Issuer:

R13

Not before:

2026-01-11 16:50

Not after:

2026-04-11 16:50

Domain summary

security.lacma.org 3

1 recorded

IP summary

54.69.95.100 2

1 recorded

Domain security.lacma.org

United States

MacOS file listing through .DS_Store file

Create report

Create report

Create report

security.lacma.org

Domain summary

IP summary