LeakIX - Host tehransub.website

Domain tehransub.website

The Netherlands

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 188.114.97.3
Domain: tehransub.website
Port: 80
URL: http://tehransub.website

First seen 2024-03-09 09:29
Last seen 2025-01-08 04:01
Open for 304 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c910c508a910c508a815356e1219d887c645bc618f28c1ecb

Found 55 files trough .DS_Store spidering:

/apple-touch-icon-120x120-precomposed.png
/apple-touch-icon-120x120.png
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/auth
/build
/bundles
/clipboard-polyfill.js
/favicon.ico
/fonts
/index.php
/landing
/panel
/panel/css
/panel/images
/panel/js
/panel/json
/robot.txt
/site
/site/ahoo.png
/site/bootstrap.bundle.min.js
/site/bootstrap.min.js
/site/bootstrap.rtl.min.css
/site/css
/site/emad.png
/site/fa
/site/fonts
/site/header-tablet.png
/site/images
/site/img
/site/img/about
/site/img/footer
/site/img/header
/site/img/icons
/site/instagram.png
/site/js
/site/koorosh.png
/site/logo-tehran.png
/site/logo.png
/site/online-sell
/site/perfect.png
/site/popper.min.js
/site/pornhub.png
/site/seo
/site/social
/site/speed.mp4
/site/techs.png
/site/techs.webp
/site/tehran.png
/site/telegram.png
/site/wzb
/site.webmanifest
/subagent.png
/uploads
/voucher.mp4

Found on 2025-01-08 04:01

Severity: medium
Fingerprint: 5f32cf5d6962f09c75d69a7675d69a76f3e5f90d95d78e40adeac7a4140f7342

Found 51 files trough .DS_Store spidering:

/apple-touch-icon-120x120-precomposed.png
/apple-touch-icon-120x120.png
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/auth
/build
/bundles
/clipboard-polyfill.js
/favicon.ico
/fonts
/index.php
/landing
/panel
/panel/css
/panel/images
/panel/js
/panel/json
/robot.txt
/site
/site/ahoo.png
/site/bootstrap.bundle.min.js
/site/bootstrap.min.js
/site/bootstrap.rtl.min.css
/site/css
/site/emad.png
/site/fa
/site/fonts
/site/header-tablet.png
/site/images
/site/img
/site/instagram.png
/site/js
/site/koorosh.png
/site/logo-tehran.png
/site/logo.png
/site/online-sell
/site/perfect.png
/site/popper.min.js
/site/pornhub.png
/site/seo
/site/social
/site/speed.mp4
/site/techs.png
/site/techs.webp
/site/tehran.png
/site/telegram.png
/site/wzb
/site.webmanifest
/subagent.png
/uploads
/voucher.mp4

Found on 2024-10-12 20:11

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 188.114.97.3
Domain: tehransub.website
Port: 443
URL: https://tehransub.website

First seen 2024-03-09 09:29
Last seen 2025-01-08 13:21
Open for 305 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c910c508a910c508a815356e1219d887c645bc618f28c1ecb

Found 55 files trough .DS_Store spidering:

/apple-touch-icon-120x120-precomposed.png
/apple-touch-icon-120x120.png
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/auth
/build
/bundles
/clipboard-polyfill.js
/favicon.ico
/fonts
/index.php
/landing
/panel
/panel/css
/panel/images
/panel/js
/panel/json
/robot.txt
/site
/site/ahoo.png
/site/bootstrap.bundle.min.js
/site/bootstrap.min.js
/site/bootstrap.rtl.min.css
/site/css
/site/emad.png
/site/fa
/site/fonts
/site/header-tablet.png
/site/images
/site/img
/site/img/about
/site/img/footer
/site/img/header
/site/img/icons
/site/instagram.png
/site/js
/site/koorosh.png
/site/logo-tehran.png
/site/logo.png
/site/online-sell
/site/perfect.png
/site/popper.min.js
/site/pornhub.png
/site/seo
/site/social
/site/speed.mp4
/site/techs.png
/site/techs.webp
/site/tehran.png
/site/telegram.png
/site/wzb
/site.webmanifest
/subagent.png
/uploads
/voucher.mp4

Found on 2025-01-08 13:21

Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a97a500b1ffb073ec149f238801553311

Found 19 files trough .DS_Store spidering:

/apple-touch-icon-120x120-precomposed.png
/apple-touch-icon-120x120.png
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/auth
/build
/bundles
/clipboard-polyfill.js
/favicon.ico
/fonts
/index.php
/landing
/panel
/robot.txt
/site
/site.webmanifest
/subagent.png
/uploads
/voucher.mp4

Found on 2024-11-22 02:30

Severity: medium
Fingerprint: 5f32cf5d6962f09c75d69a7675d69a76f3e5f90d95d78e40adeac7a4140f7342

Found 51 files trough .DS_Store spidering:

/apple-touch-icon-120x120-precomposed.png
/apple-touch-icon-120x120.png
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/auth
/build
/bundles
/clipboard-polyfill.js
/favicon.ico
/fonts
/index.php
/landing
/panel
/panel/css
/panel/images
/panel/js
/panel/json
/robot.txt
/site
/site/ahoo.png
/site/bootstrap.bundle.min.js
/site/bootstrap.min.js
/site/bootstrap.rtl.min.css
/site/css
/site/emad.png
/site/fa
/site/fonts
/site/header-tablet.png
/site/images
/site/img
/site/instagram.png
/site/js
/site/koorosh.png
/site/logo-tehran.png
/site/logo.png
/site/online-sell
/site/perfect.png
/site/popper.min.js
/site/pornhub.png
/site/seo
/site/social
/site/speed.mp4
/site/techs.png
/site/techs.webp
/site/tehran.png
/site/telegram.png
/site/wzb
/site.webmanifest
/subagent.png
/uploads
/voucher.mp4

Found on 2024-10-22 10:55

Severity: low
Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea9403b8f70259fa143efd7921533f4e0de

Found 23 files trough .DS_Store spidering:

/apple-touch-icon-120x120-precomposed.png
/apple-touch-icon-120x120.png
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/auth
/build
/bundles
/clipboard-polyfill.js
/favicon.ico
/fonts
/index.php
/landing
/panel
/panel/css
/panel/images
/panel/js
/panel/json
/robot.txt
/site
/site.webmanifest
/subagent.png
/uploads
/voucher.mp4

Found on 2024-10-16 14:21

Create report

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 2a06:98c1:3121::3
Domain: tehransub.website
Port: 80
URL: http://tehransub.website/_profiler/empty/search/results

First seen 2023-11-12 10:53
Last seen 2024-10-26 10:45
Open for 348 days
- Fingerprint: 407cf4363b0e62fafca67e072548d68f2548d68f2548d68f2548d68f2548d68f
```
Symfony profiler enabled:
http://tehransub.website/_profiler/empty/search/results
```
  Found on 2024-10-26 10:45
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 188.114.97.3
Domain: tehransub.website
Port: 443
URL: https://tehransub.website/_profiler/empty/search/results

First seen 2024-10-02 20:08
Last seen 2024-10-26 16:26
Open for 23 days
- Fingerprint: 407cf4363b0e62fafca67e07c5c19e38c5c19e38c5c19e38c5c19e38c5c19e38
```
Symfony profiler enabled:
https://tehransub.website/_profiler/empty/search/results
```
  Found on 2024-10-26 16:26
Create report

Open service 188.114.97.3:443 · tehransub.website

2025-01-08 13:21

HTTP/1.1 200 OK
Date: Wed, 08 Jan 2025 13:21:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, private
X-Robots-Tag: noindex
cf-cache-status: DYNAMIC
vary: accept-encoding
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mfZcs158dekpNkezn194wkBOcEOAjIVu64JtRiVIeqacKP1lZ4%2B6A%2BPhpHvCL06WFJAjW2ddPF739c8Ofrp6%2F%2F8tJORwmksqXyE7CPUWtEdG2Jyax5zUPuq%2F%2FcEXZAry15q%2FZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8fec7d897e29d9d2-FRA
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=797&min_rtt=773&rtt_var=339&sent=5&recv=6&lost=0&retrans=0&sent_bytes=3118&recv_bytes=566&delivery_rate=4482972&cwnd=252&unsent_bytes=0&cid=f8b2b349509f2e4e&ts=52&x=0"

Page title: انتخاب سرویس

<!DOCTYPE html>
<html dir="rtl">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>انتخاب سرویس</title>
    <link rel="stylesheet" type="text/css" href="/auth/css/farsi-font.css">
    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.rtl.min.css">
    <!-- Google tag (gtag.js) -->
    <script async src="https://www.googletagmanager.com/gtag/js?id=G-JBGXY40K9E"></script>
    <link rel="shortcut icon" type="image/x-icon" href="/qrlogo.png">
    <script>
        window.dataLayer = window.dataLayer || [];

        function gtag() {
            dataLayer.push(arguments);
        }

        gtag('js', new Date());

        gtag('config', 'G-JBGXY40K9E');
    </script>
</head>
<body style="background-image: url('/uploads/file-666d73ddf3926.png');background-repeat: no-repeat; background-size: cover ;height: 100vh; font-family: 'iranyekan';">
<div class="container pt-5">
    <div class="row justify-content-center mt-5">
        <div class="col-12 col-sm-12 col-md-4 ">
            <a href="/service/login" class="btn py-3 w-100 mb-5 btn-outline-light">ورود به سرویس</a>
            <a href="/login" class="btn w-100 py-3 mb-5 btn-outline-light">ورود نمایندگان فروش</a>
        </div>
    </div>
</div>
</body>
</html>

Found 13 hours ago by HttpPlugin

Domain tehransub.website

The Netherlands

Software information

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Symfony developement panel enabled

Symfony developement panel enabled

tehransub.website*.tehransub.website

tehransub.website*.tehransub.website

Domain summary

IP summary