LeakIX - Host wisho-se.com

Domain wisho-se.com

CLOUDFLARENET

Software information

cloudflare

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 188.114.97.3
Domain: wisho-se.com
Port: 443
URL: https://wisho-se.com

First seen 2025-12-02 13:18
Last seen 2026-01-02 21:00
Open for 31 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea96ba46591629a2ee1cbb56ea163e836bb
```
Found 23 files trough .DS_Store spidering:

/admin
/admin/img
/admin/js
/build
/build/admin
/build/frontend
/bundles
/css
/flags
/frontend
/frontend/img
/img
/media
/media/cache
/media/cache/pb_block_image
/media/cache/pb_image
/nav-icons
/pagebuilder
/svg
/svg/games
/svg/socials
/uploads
/uploads/media
```
  Found on 2026-01-02 21:00
- Severity: low
  Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bcc68b1780bf80d660e08e14da7f2276dc
```
Found 22 files trough .DS_Store spidering:

/admin
/admin/img
/admin/js
/build
/build/admin
/build/frontend
/bundles
/css
/flags
/frontend
/frontend/img
/img
/media
/media/cache
/media/cache/pb_block_image
/media/cache/pb_image
/nav-icons
/pagebuilder
/svg
/svg/games
/svg/socials
/uploads
```
  Found on 2025-12-02 13:18
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 2a06:98c1:3120::3
Domain: wisho-se.com
Port: 443
URL: https://wisho-se.com/_profiler/empty/search/results

First seen 2025-12-02 13:18
- Fingerprint: 407cf4363b0e62fafca67e0798e165bb98e165bb98e165bb98e165bb98e165bb
```
Symfony profiler enabled:
https://wisho-se.com/_profiler/empty/search/results
```
  Found on 2025-12-02 13:18
Create report

Open service 188.114.97.3:443 · wisho-se.com

2026-01-09 11:46

HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 11:46:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=uhuIAyy2FLE15xh52o28Ibh%2Ftn4bZ0ouvylF9y%2FxykRyaglMn%2F2r%2BTFw0D1%2BIVxHFP6ZX3AyrzaCP432qfP3jqjBgoSapuCNUCs%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Mon, 09 Feb 2026 11:46:52 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=10,cfOrigin;dur=850
CF-RAY: 9bb3b2511b9aa24c-YYZ

Found 3 days ago by HttpPlugin

Create report

Open service 2a06:98c1:3120::3:443 · wisho-se.com

2026-01-08 21:38

HTTP/1.1 200 OK
Date: Thu, 08 Jan 2026 21:38:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=go6wXInFrm3dAJQZBkwmnUA%2FvaGBL%2FMSSorH6MhVFIK29Icyfp7QI2PQ1d5%2FnAqgShRrAHaX6xCLcz70gCfXVI0b6dLQj3e54pa%2BrrzT7sXgB0CA5%2BaAQg%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Sun, 08 Feb 2026 21:38:37 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=4,cfOrigin;dur=677
CF-RAY: 9baed7c3bef057ad-BOM

Found 2026-01-08 by HttpPlugin

Create report

Open service 188.114.97.3:443 · wisho-se.com

2026-01-02 21:00

HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 21:00:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=5aOROgxY2qC5usmlDqvw9PNOxbA2Ip6xpmv%2Btg6%2Bl8cqGRm7nzpNlav3%2FilV2vRNiHqQUP%2BSqTPCCSz0aY0cqVBof9Qs0HFitcpZlQ%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Mon, 02 Feb 2026 21:00:27 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=7,cfOrigin;dur=432
CF-RAY: 9b7d2f9fa9f77cac-EWR

Found 2026-01-02 by HttpPlugin

Create report

Open service 2a06:98c1:3120::3:443 · wisho-se.com

2026-01-01 21:48

HTTP/1.1 200 OK
Date: Thu, 01 Jan 2026 21:48:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=257VT181NQgU7zqQTARAxUsqJdozBL81%2FZEtTvEv2MKQlJL%2Fe0W%2FxVFJqZw3fhaQLlrDmqzCfqPRmmbnE2Qp%2FmaX7Jix%2BfHiuLzuL%2FA33QaDF1Y4UAPUMA%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Sun, 01 Feb 2026 21:48:14 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=10,cfOrigin;dur=888
CF-RAY: 9b7538378b70ebb4-YYZ

Found 2026-01-01 by HttpPlugin

Create report

Open service 2a06:98c1:3120::3:443 · wisho-se.com

2025-12-30 06:13

HTTP/1.1 200 OK
Date: Tue, 30 Dec 2025 06:13:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=7gHpDQx4jawLDUiU9o1bz3QEpEETt8G6q9SOBNCgAxfrbYY%2FOFBOKzo%2FQ2oYc8IgIZquLwmWIneuVeScaEYEeIclggbs8jRmVbDzdce%2BKkGRXoZ%2BM%2BZEsg%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Fri, 30 Jan 2026 06:13:56 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b5f64dfc8db4dc4-FRA

Found 2025-12-30 by HttpPlugin

Create report

Open service 188.114.97.3:443 · wisho-se.com

2025-12-22 23:44

HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 23:44:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=WZUQbLk%2FfpSQmjKkOAGggZd51pmShOW0kASI6bus6C4Hg8JKb135XWoXZgi8Zp491Er7L7AxvEsAE21t0ou3uqVkCrDRQPl1k4ZkkQ%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Thu, 22 Jan 2026 23:44:21 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=9,cfOrigin;dur=802
CF-RAY: 9b237c8f1990151b-EWR

Found 2025-12-22 by HttpPlugin

Create report

Open service 2a06:98c1:3120::3:443 · wisho-se.com

2025-12-22 07:18

HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 07:18:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=XPWI0b6OWqEoiPKBLDZZZK8nSm%2FxzHgBHQJmUCB1DUPl0I%2F0R6EferMcZMexH%2FHOy4lA6o%2BlMybVgLmk8LG%2BuGSYpCSFkX0AF%2F77nRknEVmdIDgQN2lStA%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Thu, 22 Jan 2026 07:18:52 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b1dd8ffb9c3d7a1-AMS

Found 2025-12-22 by HttpPlugin

Create report

Open service 188.114.97.3:443 · wisho-se.com

2025-12-21 03:56

HTTP/1.1 200 OK
Date: Sun, 21 Dec 2025 03:56:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=d1UTxVIjTUmPgAt%2BZlxHknPMvfsD%2FTUZcG4OKTyHqKzKqepm1ea6bI95oeFUiNF%2BB7ye3C4TyKmMHLhUCs4St6vBy42%2BiZ7VauKgeg%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Wed, 21 Jan 2026 03:56:03 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b1472851c2d591e-LHR

Found 2025-12-21 by HttpPlugin

Create report

Open service 2a06:98c1:3120::3:443 · wisho-se.com

2025-12-20 07:59

HTTP/1.1 200 OK
Date: Sat, 20 Dec 2025 07:59:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=5PRYJ451bTn1pWX%2B975cToJvnzjuQ34jZbHd6ZXH0ZoTn01ytsbKOlIuUw8TWuKq2h44DzykSNDabkEGQRPXvSZFUPKXBkmJ5OXfJfkcctr2IHWfQscLQA%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Tue, 20 Jan 2026 07:59:07 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b0d99375c08e6fe-AMS

Found 2025-12-20 by HttpPlugin

Create report

wisho-se.com*.wisho-se.com

Fingerprint:

0afbc854c92ce71adb39f35a2ee0b2b723c18447620844391a053d9749813700

CN:

wisho-se.com

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-11-24 10:27

Not after:

2026-02-22 11:26

Domain summary

wisho-se.com 11

1 recorded

IP summary

188.114.97.3 1 2a06:98c1:3120::3 1

2 recorded

Domain wisho-se.com

Software information

MacOS file listing through .DS_Store file

Symfony developement panel enabled

wisho-se.com*.wisho-se.com

Domain summary

IP summary