LeakIX - Host workmailsecured.com

Domain workmailsecured.com

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.32.1
Domain: workmailsecured.com
Port: 8443
URL: https://workmailsecured.com:8443

First seen 2025-09-06 04:36
Last seen 2025-10-02 18:28
Open for 26 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392ab640323741d4cac640e1bc2345fc0c75b
```
Found 7 files trough .DS_Store spidering:

/cloud_background.svg
/css
/favicon.ico
/index.html
/js
/logo.svg
/placeholder_background.svg
```
  Found on 2025-10-02 18:28
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.32.1
Domain: workmailsecured.com
Port: 443
URL: https://workmailsecured.com

First seen 2025-09-06 04:36
Last seen 2025-10-04 06:11
Open for 28 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392ab640323741d4cac640e1bc2345fc0c75b
```
Found 7 files trough .DS_Store spidering:

/cloud_background.svg
/css
/favicon.ico
/index.html
/js
/logo.svg
/placeholder_background.svg
```
  Found on 2025-10-04 06:11
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.32.1
Domain: workmailsecured.com
Port: 80
URL: http://workmailsecured.com

First seen 2025-09-06 04:36
Last seen 2025-09-12 15:08
Open for 6 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392ab640323741d4cac640e1bc2345fc0c75b
```
Found 7 files trough .DS_Store spidering:

/cloud_background.svg
/css
/favicon.ico
/index.html
/js
/logo.svg
/placeholder_background.svg
```
  Found on 2025-09-12 15:08
Create report

Open service 104.18.29.54:8443 · workmailsecured.com

2026-01-02 05:13

HTTP/1.1 522 
Date: Fri, 02 Jan 2026 05:13:09 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
speculation-rules: "/cdn-cgi/speculation"
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: cloudflare
CF-RAY: 9b77c3f8dd52fd79-SIN
alt-svc: h3=":8443"; ma=86400


error code: 522

Found 2026-01-02 by HttpPlugin

Create report

Open service 104.18.29.54:443 · workmailsecured.com

2026-01-02 05:13

HTTP/1.1 522 
Date: Fri, 02 Jan 2026 05:13:09 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
speculation-rules: "/cdn-cgi/speculation"
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: cloudflare
CF-RAY: 9b77c3f7b94e42e3-EWR
alt-svc: h3=":443"; ma=86400


error code: 522

Found 2026-01-02 by HttpPlugin

Create report

Open service 2606:4700::6812:1c36:80 · workmailsecured.com

2026-01-02 05:13

HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jan 2026 05:13:09 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Fri, 02 Jan 2026 06:13:09 GMT
Location: https://workmailsecured.com/
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 9b77c3f76bfedf34-LHR
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 104.18.28.54:8443 · workmailsecured.com

2026-01-02 05:13

HTTP/1.1 522 
Date: Fri, 02 Jan 2026 05:13:09 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
speculation-rules: "/cdn-cgi/speculation"
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: cloudflare
CF-RAY: 9b77c3f789d693ef-LHR
alt-svc: h3=":8443"; ma=86400


error code: 522

Found 2026-01-02 by HttpPlugin

Create report

Open service 2606:4700::6812:1c36:443 · workmailsecured.com

2026-01-02 05:13

HTTP/1.1 522 
Date: Fri, 02 Jan 2026 05:13:09 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
speculation-rules: "/cdn-cgi/speculation"
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: cloudflare
CF-RAY: 9b77c3f77bb615e0-SJC
alt-svc: h3=":443"; ma=86400


error code: 522

Found 2026-01-02 by HttpPlugin

Create report

Open service 2606:4700::6812:1c36:8443 · workmailsecured.com

2026-01-02 05:13

HTTP/1.1 522 
Date: Fri, 02 Jan 2026 05:13:09 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
speculation-rules: "/cdn-cgi/speculation"
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: cloudflare
CF-RAY: 9b77c3f799ad36df-FRA
alt-svc: h3=":8443"; ma=86400


error code: 522

Found 2026-01-02 by HttpPlugin

Create report

Open service 104.18.28.54:443 · workmailsecured.com

2026-01-02 05:13

HTTP/1.1 522 
Date: Fri, 02 Jan 2026 05:13:09 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
speculation-rules: "/cdn-cgi/speculation"
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: cloudflare
CF-RAY: 9b77c3f8dfb09a35-FRA
alt-svc: h3=":443"; ma=86400


error code: 522

Found 2026-01-02 by HttpPlugin

Create report

Open service 104.18.29.54:80 · workmailsecured.com

2026-01-02 05:13

HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jan 2026 05:13:08 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Fri, 02 Jan 2026 06:13:08 GMT
Location: https://workmailsecured.com/
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 9b77c3f69eece084-BLR
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 2606:4700::6812:1d36:443 · workmailsecured.com

2026-01-02 05:13

HTTP/1.1 522 
Date: Fri, 02 Jan 2026 05:13:08 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
speculation-rules: "/cdn-cgi/speculation"
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: cloudflare
CF-RAY: 9b77c3f6ed4fd5f2-SJC
alt-svc: h3=":443"; ma=86400


error code: 522

Found 2026-01-02 by HttpPlugin

Create report

Open service 2606:4700::6812:1d36:80 · workmailsecured.com

2026-01-02 05:13

HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jan 2026 05:13:08 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Fri, 02 Jan 2026 06:13:08 GMT
Location: https://workmailsecured.com/
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 9b77c3f6ae594f70-FRA
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 104.18.28.54:80 · workmailsecured.com

2026-01-02 05:13

HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jan 2026 05:13:08 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Fri, 02 Jan 2026 06:13:08 GMT
Location: https://workmailsecured.com/
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 9b77c3f66816c1ba-BLR
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 2606:4700::6812:1d36:8443 · workmailsecured.com

2026-01-02 05:13

HTTP/1.1 522 
Date: Fri, 02 Jan 2026 05:13:08 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
speculation-rules: "/cdn-cgi/speculation"
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: cloudflare
CF-RAY: 9b77c3f67e689f17-FRA
alt-svc: h3=":8443"; ma=86400


error code: 522

Found 2026-01-02 by HttpPlugin

Create report

workmailsecured.com*.workmailsecured.com

Fingerprint:

885ff02fee96c3b12faa98ba65428eb79c0582f636644a3b205f3383c95aa0bd

CN:

workmailsecured.com

Key:

ECDSA-256

Issuer:

WE1

Not before:

2026-01-02 04:11

Not after:

2026-04-02 05:10

Domain summary

workmailsecured.com 14

1 recorded

IP summary

104.18.29.54 2 2606:4700::6812:1c36 1 104.18.28.54 1 2606:4700::6812:1d36 1 104.21.32.1 1

5 recorded

Domain workmailsecured.com

Software information

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

workmailsecured.com*.workmailsecured.com

Domain summary

IP summary