Domain stats.dev.realitymax.com
United States
-
Symfony developement panel enabled
The application has Symfony profiling enabled.
It enables an attacker to access the following sensitive content :
- System configuration
- Request log, including POST request with credentials and/or api keys
IP: 3.91.110.64
Domain: stats.dev.realitymax.com
Port: 443
URL: https://stats.dev.realitymax.com/_profiler/empty/search/resultsFirst seen 2024-09-15 08:43
Last seen 2024-11-12 06:37
Open for 57 days-
Fingerprint: 407cf4363b0e62fafca67e07e1e2fc72e1e2fc72e1e2fc72e1e2fc72e1e2fc72
Symfony profiler enabled: https://stats.dev.realitymax.com/_profiler/empty/search/results
Found on 2024-11-12 06:37
-
Open service 3.91.110.64:443 · stats.dev.realitymax.com
2024-11-02 20:58
HTTP/1.1 200 OK Date: Sat, 02 Nov 2024 20:58:27 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept X-Content-Type-Options: nosniff X-Frame-Options: deny Cache-Control: no-cache, private X-Debug-Token: c99116 X-Debug-Token-Link: https://stats.dev.realitymax.com/_profiler/c99116 X-Robots-Tag: noindex Strict-Transport-Security: max-age=15724800; includeSubDomains {"resourceNameCollection":["App\\Entity\\Event","App\\Entity\\EventReport","App\\Model\\Entry","App\\Model\\Pinpoint","App\\Model\\Report"]}Found 2024-11-02 by HttpPluginCreate report
-
Open service 3.91.110.64:443 · stats.dev.realitymax.com
2024-11-01 15:00
HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 15:00:11 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept X-Content-Type-Options: nosniff X-Frame-Options: deny Cache-Control: no-cache, private X-Debug-Token: 34a8dd X-Debug-Token-Link: https://stats.dev.realitymax.com/_profiler/34a8dd X-Robots-Tag: noindex Strict-Transport-Security: max-age=15724800; includeSubDomains {"resourceNameCollection":["App\\Entity\\Event","App\\Entity\\EventReport","App\\Model\\Entry","App\\Model\\Pinpoint","App\\Model\\Report"]}Found 2024-11-01 by HttpPluginCreate report
-
Open service 3.91.110.64:443 · stats.dev.realitymax.com
2024-10-30 14:37
HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:37:22 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept X-Content-Type-Options: nosniff X-Frame-Options: deny Cache-Control: no-cache, private X-Debug-Token: 38bd0e X-Debug-Token-Link: https://stats.dev.realitymax.com/_profiler/38bd0e X-Robots-Tag: noindex Strict-Transport-Security: max-age=15724800; includeSubDomains {"resourceNameCollection":["App\\Entity\\Event","App\\Entity\\EventReport","App\\Model\\Entry","App\\Model\\Pinpoint","App\\Model\\Report"]}Found 2024-10-30 by HttpPluginCreate report
-
Open service 3.91.110.64:443 · stats.dev.realitymax.com
2024-10-22 13:05
HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 13:05:13 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept X-Content-Type-Options: nosniff X-Frame-Options: deny Cache-Control: no-cache, private X-Debug-Token: 48cd68 X-Debug-Token-Link: https://stats.dev.realitymax.com/_profiler/48cd68 X-Robots-Tag: noindex Strict-Transport-Security: max-age=15724800; includeSubDomains {"resourceNameCollection":["App\\Entity\\Event","App\\Entity\\EventReport","App\\Model\\Entry","App\\Model\\Pinpoint","App\\Model\\Report"]}Found 2024-10-22 by HttpPluginCreate report
-
Open service 3.91.110.64:443 · stats.dev.realitymax.com
2024-10-20 09:30
HTTP/1.1 200 OK Date: Sun, 20 Oct 2024 09:30:47 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept X-Content-Type-Options: nosniff X-Frame-Options: deny Cache-Control: no-cache, private X-Debug-Token: 2d5fce X-Debug-Token-Link: https://stats.dev.realitymax.com/_profiler/2d5fce X-Robots-Tag: noindex Strict-Transport-Security: max-age=15724800; includeSubDomains {"resourceNameCollection":["App\\Entity\\Event","App\\Entity\\EventReport","App\\Model\\Entry","App\\Model\\Pinpoint","App\\Model\\Report"]}Found 2024-10-20 by HttpPluginCreate report
-
Open service 3.91.110.64:443 · stats.dev.realitymax.com
2024-10-18 08:17
HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 08:17:59 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept X-Content-Type-Options: nosniff X-Frame-Options: deny Cache-Control: no-cache, private X-Debug-Token: fde737 X-Debug-Token-Link: https://stats.dev.realitymax.com/_profiler/fde737 X-Robots-Tag: noindex Strict-Transport-Security: max-age=15724800; includeSubDomains {"resourceNameCollection":["App\\Entity\\Event","App\\Entity\\EventReport","App\\Model\\Entry","App\\Model\\Pinpoint","App\\Model\\Report"]}Found 2024-10-18 by HttpPluginCreate report
-
Open service 3.91.110.64:443 · stats.dev.realitymax.com
2024-10-16 06:54
HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 06:54:57 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept X-Content-Type-Options: nosniff X-Frame-Options: deny Cache-Control: no-cache, private X-Debug-Token: 6fa77b X-Debug-Token-Link: https://stats.dev.realitymax.com/_profiler/6fa77b X-Robots-Tag: noindex Strict-Transport-Security: max-age=15724800; includeSubDomains {"resourceNameCollection":["App\\Entity\\Event","App\\Entity\\EventReport","App\\Model\\Entry","App\\Model\\Pinpoint","App\\Model\\Report"]}Found 2024-10-16 by HttpPluginCreate report
-
Open service 3.91.110.64:443 · stats.dev.realitymax.com
2024-09-30 16:28
HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 16:28:05 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept X-Content-Type-Options: nosniff X-Frame-Options: deny Cache-Control: no-cache, private X-Debug-Token: 1619a5 X-Debug-Token-Link: https://stats.dev.realitymax.com/_profiler/1619a5 X-Robots-Tag: noindex Strict-Transport-Security: max-age=15724800; includeSubDomains {"resourceNameCollection":["App\\Entity\\Event","App\\Entity\\EventReport","App\\Model\\Entry","App\\Model\\Pinpoint","App\\Model\\Report"]}Found 2024-09-30 by HttpPluginCreate report
-
Open service 3.91.110.64:443 · stats.dev.realitymax.com
2024-09-28 19:28
HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 19:28:23 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept X-Content-Type-Options: nosniff X-Frame-Options: deny Cache-Control: no-cache, private X-Debug-Token: 9e10ad X-Debug-Token-Link: https://stats.dev.realitymax.com/_profiler/9e10ad X-Robots-Tag: noindex Strict-Transport-Security: max-age=15724800; includeSubDomains {"resourceNameCollection":["App\\Entity\\Event","App\\Entity\\EventReport","App\\Model\\Entry","App\\Model\\Pinpoint","App\\Model\\Report"]}Found 2024-09-28 by HttpPluginCreate report