LeakIX - Host 185.104.112.92

Host 185.104.112.92

Germany

Timeweb, LLP

Software information

Python 3.11.14

tcp/443

Werkzeug 3.1.3

tcp/443

nginx nginx 1.29.1

tcp/443

SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 185.104.112.92
Port: 22

First seen 2024-07-03 18:47
Last seen 2026-01-08 15:53
Open for 553 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb53ea6237e8f56bf578f56bf578f56bf578f56bf57
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.13
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2026-01-08 15:53
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb583e3d399fac9c920fac9c920fac9c920fac9c920
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.7
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2024-07-03 23:53
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.104.112.92
Domain: health-sync.ru
Port: 443
URL: https://health-sync.ru

First seen 2025-11-03 13:03
Last seen 2026-01-03 09:16
Open for 60 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2026-01-03 09:16
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 5.129.236.238
Domain: devmarket.wedtp.com
Port: 80
URL: http://devmarket.wedtp.com

First seen 2025-02-27 20:00
Last seen 2026-01-02 21:52
Open for 309 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d13e6b5c

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:plyaskin/devmarket.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
[pull]
	rebase = true

Found on 2026-01-02 21:52

280 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224b6dc9c5

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/plyaskin/devmarket.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2025-10-30 22:10

262 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ce392fc7

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:plyaskin/devmarket.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2025-07-01 06:18

258 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 5.129.236.238
Domain: www.devmarket.wedtp.com
Port: 443
URL: https://www.devmarket.wedtp.com

First seen 2025-02-27 20:00
Last seen 2026-01-02 21:06
Open for 309 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d13e6b5c

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:plyaskin/devmarket.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
[pull]
	rebase = true

Found on 2026-01-02 21:06

280 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224b6dc9c5

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/plyaskin/devmarket.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2025-09-01 00:55

262 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ce392fc7

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:plyaskin/devmarket.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2025-07-01 08:16

258 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 5.129.236.238
Domain: devmarket.wedtp.com
Port: 443
URL: https://devmarket.wedtp.com

First seen 2025-02-27 20:00
Last seen 2026-01-02 19:47
Open for 308 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d13e6b5c

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:plyaskin/devmarket.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
[pull]
	rebase = true

Found on 2026-01-02 19:47

280 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224b6dc9c5

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/plyaskin/devmarket.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2025-10-30 22:10

262 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ce392fc7

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:plyaskin/devmarket.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2025-07-01 08:16

258 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 5.129.236.238
Domain: www.unimarket.rs
Port: 80
URL: http://www.unimarket.rs

First seen 2025-03-18 07:27
Last seen 2026-01-02 16:28
Open for 290 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a3de4117
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/plyaskin/unimarket.rs.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2026-01-02 16:28
  
  265 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522166e14ea
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:plyaskin/unimarket.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2025-05-29 01:48
  
  258 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 5.129.236.238
Domain: unimarket.rs
Port: 443
URL: https://unimarket.rs

First seen 2025-03-18 07:27
Last seen 2026-01-02 02:29
Open for 289 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a3de4117
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/plyaskin/unimarket.rs.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2026-01-02 02:29
  
  265 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522166e14ea
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:plyaskin/unimarket.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2025-05-28 10:39
  
  258 Bytes
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 5.129.236.238
Domain: www.devmarket.wedtp.com
Port: 80
URL: http://www.devmarket.wedtp.com

First seen 2025-02-27 20:00
Last seen 2026-01-02 01:10
Open for 308 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d13e6b5c

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:plyaskin/devmarket.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
[pull]
	rebase = true

Found on 2026-01-02 01:10

280 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224b6dc9c5

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/plyaskin/devmarket.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2025-09-01 00:55

262 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ce392fc7

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:plyaskin/devmarket.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2025-07-02 05:52

258 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 5.129.236.238
Domain: unimarket.rs
Port: 80
URL: http://unimarket.rs

First seen 2025-03-18 07:27
Last seen 2026-01-01 21:06
Open for 289 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a3de4117
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/plyaskin/unimarket.rs.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2026-01-01 21:06
  
  265 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522166e14ea
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:plyaskin/unimarket.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2025-05-28 10:39
  
  258 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 5.129.236.238
Domain: www.unimarket.rs
Port: 443
URL: https://www.unimarket.rs

First seen 2025-03-18 07:27
Last seen 2026-01-01 21:06
Open for 289 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a3de4117
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/plyaskin/unimarket.rs.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2026-01-01 21:06
  
  265 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522166e14ea
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:plyaskin/unimarket.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2025-05-28 10:39
  
  258 Bytes
Create report

Open service 185.104.112.92:80 · api.health-sync.ru

2026-01-11 11:25

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Sun, 11 Jan 2026 11:26:05 GMT
Content-Length: 19
Connection: close


404 page not found

Found 23 hours ago by HttpPlugin

Create report

Open service 185.104.112.92:443 · api.health-sync.ru

2026-01-11 11:25

HTTP/1.1 200 OK
Content-Length: 145
Content-Type: application/json
Date: Sun, 11 Jan 2026 11:26:05 GMT
Server: Werkzeug/3.1.3 Python/3.11.14
Connection: close


{
  "docs": "/api/docs",
  "service": "Core Service",
  "status": "running",
  "timestamp": "2026-01-11T11:26:05.148689",
  "version": "1.0.0"
}

Found 23 hours ago by HttpPlugin

Create report

Open service 185.104.112.92:443 · health-sync.ru

2026-01-08 20:37

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache, no-store, must-revalidate
Content-Length: 36799
Content-Type: text/html
Date: Thu, 08 Jan 2026 20:38:03 GMT
Etag: "6921a966-8fbf"
Expires: 0
Last-Modified: Sat, 22 Nov 2025 12:15:34 GMT
Pragma: no-cache
Server: nginx/1.29.1
X-Content-Type-Options: nosniff
Connection: close

Page title: 
      Онлайн расшифровка медицинских анализов с использованием ИИ | Сервис
      расшифровки анализов
    

<!DOCTYPE html>
<html lang="ru">
  <head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta
      name="description"
      content="HealthSync — персонализированная расшифровка анализов с учётом ваших жалоб и образа жизни. Результат за 2 минуты от 99₽. Данные защищены по 152-ФЗ."
    />
    <meta name="theme-color" content="#1E88E5" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta
      name="apple-mobile-web-app-status-bar-style"
      content="black-translucent"
    />
    <meta name="yandex-verification" content="f8b0072f2596025d" />

    <title>
      Онлайн расшифровка медицинских анализов с использованием ИИ | Сервис
      расшифровки анализов
    </title>

    <!-- Favicon -->
    <link rel="icon" type="image/x-icon" href="/images/favicon.ico" />
    <link
      rel="icon"
      type="image/png"
      sizes="32x32"
      href="/images/favicon-32x32.png"
    />
    <link
      rel="icon"
      type="image/png"
      sizes="16x16"
      href="/images/favicon-16x16.png"
    />
    <link
      rel="apple-touch-icon"
      sizes="180x180"
      href="/images/apple-touch-icon.png"
    />

    <!-- Preconnect для оптимизации -->
    <link rel="preconnect" href="https://cdnjs.cloudflare.com" />
    <link rel="dns-prefetch" href="https://cdnjs.cloudflare.com" />

    <!-- Font Awesome для иконок -->
    <link
      rel="stylesheet"
      href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css"
    />

    <!-- Стили -->
    <link rel="stylesheet" href="assets/main.css" />

    <script src="//code.jivo.ru/widget/qb6w1yu1aB" async></script>

    <!-- Yandex.Metrika counter -->
    <script type="text/javascript">
      (function (m, e, t, r, i, k, a) {
        m[i] =
          m[i] ||
          function () {
            (m[i].a = m[i].a || []).push(arguments);
          };
        m[i].l = 1 * new Date();
        for (var j = 0; j < document.scripts.length; j++) {
          if (document.scripts[j].src === r) {
            return;
          }
        }
        (k = e.createElement(t)),
          (a = e.getElementsByTagName(t)[0]),
          (k.async = 1),
          (k.src = r),
          a.parentNode.insertBefore(k, a);
      })(
        window,
        document,
        "script",
        "https://mc.yandex.ru/metrika/tag.js?id=105339372",
        "ym"
      );

      ym(105339372, "init", {
        ssr: true,
        webvisor: true,
        clickmap: true,
        ecommerce: "dataLayer",
        accurateTrackBounce: true,
        trackLinks: true,
      });
    </script>
    <noscript
      ><div>
        <img
          src="https://mc.yandex.ru/watch/105339372"
          style="position: absolute; left: -9999px"
          alt=""
        /></div
    ></noscript>
    <!-- /Yandex.Metrika counter -->
  </head>
  <body>
    <!-- Animated Background -->
    <div class="animated-bg">
      <svg viewBox="0 0 1920 1080" preserveAspectRatio="xMidYMid slice">
        <defs>
          <filter id="blur">
            <feGaussianBlur in="SourceGraphic" stdDeviation="40" />
          </filter>
        </defs>

        <!-- Белые полупрозрачные волны -->
        <g filter="url(#blur)">
          <path
            class="wave-path"
            id="wave1"
            d="M-200,400 Q200,300 600,500 Q1000,700 1400,400 Q1800,100 2200,300 L2200,600 Q1800,400 1400,700 Q1000,1000 600,800 Q200,600 -200,700 Z"
            fill="rgba(255,255,255,0.15)"
          />

          <path
            class="wave-path"
            id="wave2"
            d="M-200,600 Q400,450 800,650 Q1200,850 1600,550 Q1800,450 2200,600 L2200,900 Q1800,750 1600,850 Q1200,1150 800,950 Q400,750 -200,900 Z"
            fill="rgba(255,255,255,0.1)"
          />

          <path
            class="wave-path"
            id="wave3"

Found 2026-01-08 by HttpPlugin

Create report

Open service 185.104.112.92:22

2026-01-08 15:53
Found 2026-01-08 by SSHOpenPlugin
Create report

Open service 185.104.112.92:443 · health-sync.ru

2026-01-03 09:16

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache, no-store, must-revalidate
Content-Length: 36799
Content-Type: text/html
Date: Sat, 03 Jan 2026 09:16:01 GMT
Etag: "6921a966-8fbf"
Expires: 0
Last-Modified: Sat, 22 Nov 2025 12:15:34 GMT
Pragma: no-cache
Server: nginx/1.29.1
X-Content-Type-Options: nosniff
Connection: close

Page title: 
      Онлайн расшифровка медицинских анализов с использованием ИИ | Сервис
      расшифровки анализов
    

<!DOCTYPE html>
<html lang="ru">
  <head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta
      name="description"
      content="HealthSync — персонализированная расшифровка анализов с учётом ваших жалоб и образа жизни. Результат за 2 минуты от 99₽. Данные защищены по 152-ФЗ."
    />
    <meta name="theme-color" content="#1E88E5" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta
      name="apple-mobile-web-app-status-bar-style"
      content="black-translucent"
    />
    <meta name="yandex-verification" content="f8b0072f2596025d" />

    <title>
      Онлайн расшифровка медицинских анализов с использованием ИИ | Сервис
      расшифровки анализов
    </title>

    <!-- Favicon -->
    <link rel="icon" type="image/x-icon" href="/images/favicon.ico" />
    <link
      rel="icon"
      type="image/png"
      sizes="32x32"
      href="/images/favicon-32x32.png"
    />
    <link
      rel="icon"
      type="image/png"
      sizes="16x16"
      href="/images/favicon-16x16.png"
    />
    <link
      rel="apple-touch-icon"
      sizes="180x180"
      href="/images/apple-touch-icon.png"
    />

    <!-- Preconnect для оптимизации -->
    <link rel="preconnect" href="https://cdnjs.cloudflare.com" />
    <link rel="dns-prefetch" href="https://cdnjs.cloudflare.com" />

    <!-- Font Awesome для иконок -->
    <link
      rel="stylesheet"
      href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css"
    />

    <!-- Стили -->
    <link rel="stylesheet" href="assets/main.css" />

    <script src="//code.jivo.ru/widget/qb6w1yu1aB" async></script>

    <!-- Yandex.Metrika counter -->
    <script type="text/javascript">
      (function (m, e, t, r, i, k, a) {
        m[i] =
          m[i] ||
          function () {
            (m[i].a = m[i].a || []).push(arguments);
          };
        m[i].l = 1 * new Date();
        for (var j = 0; j < document.scripts.length; j++) {
          if (document.scripts[j].src === r) {
            return;
          }
        }
        (k = e.createElement(t)),
          (a = e.getElementsByTagName(t)[0]),
          (k.async = 1),
          (k.src = r),
          a.parentNode.insertBefore(k, a);
      })(
        window,
        document,
        "script",
        "https://mc.yandex.ru/metrika/tag.js?id=105339372",
        "ym"
      );

      ym(105339372, "init", {
        ssr: true,
        webvisor: true,
        clickmap: true,
        ecommerce: "dataLayer",
        accurateTrackBounce: true,
        trackLinks: true,
      });
    </script>
    <noscript
      ><div>
        <img
          src="https://mc.yandex.ru/watch/105339372"
          style="position: absolute; left: -9999px"
          alt=""
        /></div
    ></noscript>
    <!-- /Yandex.Metrika counter -->
  </head>
  <body>
    <!-- Animated Background -->
    <div class="animated-bg">
      <svg viewBox="0 0 1920 1080" preserveAspectRatio="xMidYMid slice">
        <defs>
          <filter id="blur">
            <feGaussianBlur in="SourceGraphic" stdDeviation="40" />
          </filter>
        </defs>

        <!-- Белые полупрозрачные волны -->
        <g filter="url(#blur)">
          <path
            class="wave-path"
            id="wave1"
            d="M-200,400 Q200,300 600,500 Q1000,700 1400,400 Q1800,100 2200,300 L2200,600 Q1800,400 1400,700 Q1000,1000 600,800 Q200,600 -200,700 Z"
            fill="rgba(255,255,255,0.15)"
          />

          <path
            class="wave-path"
            id="wave2"
            d="M-200,600 Q400,450 800,650 Q1200,850 1600,550 Q1800,450 2200,600 L2200,900 Q1800,750 1600,850 Q1200,1150 800,950 Q400,750 -200,900 Z"
            fill="rgba(255,255,255,0.1)"
          />

          <path
            class="wave-path"
            id="wave3"