LeakIX - Host 2.16.1.178

Host 2.16.1.178

Germany

Akamai International B.V.

Software information

AmazonS3

tcp/443

nginx nginx

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 2.16.1.178
Domain: investors-dev.qasgx.com
Port: 443
URL: https://investors-dev.qasgx.com

First seen 2025-07-02 06:52
Last seen 2026-02-09 18:49
Open for 222 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d7ad709ef7ad709ef7ad709ef7ad709ef
```
Found 1 files trough .DS_Store spidering:

/profile
```
  Found on 2026-02-09 18:49
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 2.16.1.178
Domain: www.ebang.co
Port: 443
URL: https://www.ebang.co

First seen 2024-08-12 08:25
Last seen 2024-09-18 13:32
Open for 37 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392abe84ad761f1e49b6452420c7455284621
```
Found 7 files trough .DS_Store spidering:

/about
/asic
/assets
/fintech
/mining
/solar
/telecom
```
  Found on 2024-09-18 13:32
Create report

Open service 2.16.1.178:443 · investors-dev.qasgx.com

2026-01-23 12:14

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Thu, 22 Jan 2026 08:36:25 GMT
ETag: W/"8c50ea1440696e1ff9230f969aeca99b"
x-amz-server-side-encryption: AES256
x-amz-version-id: ZkVY33l6RCM8FixtBjCWAQGWN51Qeekq
X-Frame-Options: DENY
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Amz-Cf-Pop: SIN2-P8
X-Amz-Cf-Id: z1r0OLoht38ZbsISBZRRQ8W_WH4jKxMAxB7E6ha0q3lqcgfB6stzCw==
X-Content-Type-Options: nosniff
Expires: Fri, 23 Jan 2026 12:14:18 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 23 Jan 2026 12:14:18 GMT
Content-Length: 16966
Connection: close

Page title: SGX Investors

<!DOCTYPE html>
<html>
<head>
  <base href="/">
  <meta charset="UTF-8">
  <meta content="IE=Edge" http-equiv="X-UA-Compatible">
  <meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" name="viewport">
  <meta name="description" content="SGX Investors.">
  <!-- Preload critical Flutter bootstrap JS -->
  <link rel="preload" href="flutter_bootstrap.js?v=2026012253" as="script"/>

  <meta name="build_version" content="2026012253">
  <meta name="version" content="2026012253">
  <meta name="build" content="1">

  <!-- iOS meta tags & icons -->
  <meta name="mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-status-bar-style" content="black">
  <meta name="apple-mobile-web-app-title" content="SGX Investors">
  <link rel="apple-touch-icon" href="icons/Icon-192.png">

  <!-- Favicon -->
  <link rel="icon" type="image/png" href="favicon.ico">
  <link rel="stylesheet" href="assets/style/main.css">

  <title>SGX Investors</title>
  <link rel="manifest" href="manifest.json">

  <meta name="falcon-configs" class="falcon-configs" content='{"env":"dev","apiBaseUrl":"https://api5-dev.qasgx.com","mobileApiBaseUrl":"https://qatrademobile.qasgx.com/v7","cmsApiBaseUrl":"https://api2.sgx.com","cmsVersion":"9b5f40321735d88857c12bd08459b5aba7fe2d1e","investorsCmsVersion":"0c6b763562fa9ad6d4b40558d2670db60437f7a6","marketDataApiBaseUrl":"https://api.qasgx.com","sgxLinksBaseUrl":"https://links.sgx.com/1.0.0/","sgxWebBaseUrl":"https://www.sgx.com/","investorsPortalWebBaseUrl":"https://investors-dev.qasgx.com/","updateParticularsForm":"https://api2.sgx.com/sites/default/files/2025-08/2.%20Update%20Account%20Particulars%2004082025.pdf","cddqDigitalForm":"https://api2.sgx.com/sites/default/files/2025-08/Customer%20Due%20Diligence%20Questionnaire%202025%2020082025.pdf","singpassLogin":{"cdpNewSessionPath":"/investors-authorization/v1/singpass/initiate-session","cdpLoginPath":"/investors-authorization/v1/singpass/login","cdpLogoutPath":"/investors-authorization/v1/logout","mobileCallback":"sgxonline://www.sgx.com?cat=portfolio&action=signin&type=spcb","mobileAppScheme":"sgxonline","webCallback":"https://investors-dev.qasgx.com/login-online.html","singpassAuthenticationEndpoint":"stg-id.singpass.gov.sg","singpassClientId":"3F9IOitBIXFtGVyvy3VrQC3JZVOiAky7"},"myinfoConfig":{"particularsRedirectUri":"https://investors-dev.qasgx.com/profile/personal-particulars.html","particularsClientId":"STG-198003912M-SGX-CDP-UPDATECONTACT","myinfoApiHostname":"test.api.myinfo.gov.sg","myinfoAuthApiPath":"/com/v4/authorize","cddqMobileCallback":"sgxonline://www.sgx.com?cat=portfolio&action=signin&type=spcb","cddqRedirectUri":"https://investors-dev.qasgx.com/forms/cddq/retrieve_info.html"},"txnSigning":{"redirectUri":"https://investors-dev.qasgx.com/profile/personal-particulars.html","particularsEndpoint":"https://api5.qasgx.com/cdpws-user/v1/user/particulars","clientId":"TRls9g9-U702jEKKr6tzfXeFlz9bQfJt","qrScanWebPage":"https://investors-dev.qasgx.com/profile/personal-particulars/txn-signing-qr.html","ndiLibSrc":"https://static.staging.sign.singpass.gov.sg/static/ndi_txn_sign.js"},"pinnedCerts":[],"firebaseWeb":{"apiKey":"AIzaSyBzvWES4EQ8BrCCnGojQ4sOEcbI9l6DHk4","appId":"1:828666375529:web:8010be8efd6422699961f8","messagingSenderId":"828666375529","projectId":"sgx-online-qa","authDomain":"sgx-online-qa.firebaseapp.com","storageBucket":"sgx-online-qa.appspot.com","measurementId":"G-C1X1SK5K8S"},"beneficiary":{"name":"The Central Depository Pte Ltd","account":"","bank":"","bic":"","uen":"198003912MCAS","company":"CDP - RIGHTS PAYNOW TRUST ACCT"}}'>

  <script src="js/unsupported-browser-check.js?v=2026012253" defer></script>
  <script src="js/splash.js?v=2026012253" defer></script>
  <script src="js/ame_security_util.js?v=2026012253" defer></script>
  <script src="js/rsa.js?v=2026012253" defer></script>
  <script type="text/javascript" src="js/paynow/paynowqr.esm.js?v=2026012253" defer></script>

  <link rel="prefetch" href="/apps/assets/packages/falcon_ux_font_awesome/asset

Found 2026-01-23 by HttpPlugin

Create report

Open service 2.16.1.178:443 · www.sigma-wire.com

2026-01-23 00:58

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Content-Length: 0
X-Cache-Enabled: True
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Redirect-By: WordPress
Location: https://sigma-wire.com/
X-Httpd-Modphp: 1
Host-Header: 6b7412fb82ca5edfd0917e3957f05d89
X-Proxy-Cache: MISS
X-Proxy-Cache-Info: 0301 NC:000000 UP:
Expires: Fri, 23 Jan 2026 00:58:40 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 23 Jan 2026 00:58:40 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=95
Server-Timing: origin; dur=369
Server-Timing: ak_p; desc="1769129920365_34603438_90439756_46438_6421_93_111_-";dur=1

Found 2026-01-23 by HttpPlugin

Create report

Open service 2.16.1.178:443 · www.airtrip.co.jp

2026-01-23 00:36

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
X-Cache-Status: MISS
Server: nginx
X-Cached: Fri, 23 Jan 2026 00:36:07 GMT
Link: <https://www.airtrip.co.jp/>; rel=shortlink
X-Amz-Cf-Pop: LHR50-P6
X-Amz-Cf-Id: ZXSdQNOnjqn29t3tUBKPnMf73B-VBP8d3Jg9z6g3ZD9CgLYXJ88gyQ==
Expires: Fri, 23 Jan 2026 00:36:08 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 23 Jan 2026 00:36:08 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding

Found 2026-01-23 by HttpPlugin

Create report

Open service 2.16.1.178:443 · www.toplinecounters.com

2026-01-22 23:51

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Expect-CT: max-age=604800, enforce
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), gamepad=(self 'https://slabcloud.com'), serial=()
X-Cache-Enabled: True
Link: <https://www.toplinecounters.com/wp-json/>; rel="https://api.w.org/"
Link: <https://www.toplinecounters.com/wp-json/wp/v2/pages/19>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://www.toplinecounters.com/>; rel=shortlink
X-Httpd-Modphp: 1
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: upgrade-insecure-requests; frame-ancestors 'self' https://slabcloud.com;
Cross-Origin-Embedder-Policy: unsafe-none
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: cross-origin
Host-Header: 8441280b0c35cbc1147f8ba998a563a7
X-Proxy-Cache: HIT
X-Akamai-Transformed: 9 47616 0 pmb=mRUM,1
Expires: Thu, 22 Jan 2026 23:51:22 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 22 Jan 2026 23:51:22 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=269
Server-Timing: origin; dur=27
Server-Timing: ak_p; desc="1769125882650_34603438_90033223_29550_6317_16_33_-";dur=1

Found 2026-01-22 by HttpPlugin

Create report

Open service 2.16.1.178:443 · receivablesfinancinguat.ceo.wellsfargo.com

2026-01-10 14:15

HTTP/1.1 500 Internal Server Error
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 387
Expires: Sat, 10 Jan 2026 14:15:49 GMT
Date: Sat, 10 Jan 2026 14:15:49 GMT
Connection: close
Set-Cookie: DCID=MhSy%2f+%2fNyCs5wTeRRlY2I1drjjvmFl0NuJ77hm8XivhWY2Sk9XC7tAHvMwbsAz3x; Domain=receivablesfinancinguat.ceo.wellsfargo.com; Path=/; Expires=Sat, 10 Jan 2026 14:30:47 GMT;Httponly; Secure
Set-Cookie: DCID=EtmqPPB7szsdd4xbpAxQx7Pbvs5b2DGadykEvydp%2fTd8jPtpcUAzZGTCZbu9cNGM; Domain=receivablesfinancinguat.ceo.wellsfargo.com; Path=/; Expires=Sat, 10 Jan 2026 14:30:48 GMT;Httponly; Secure
Set-Cookie: DCID=VwRVh8QEuo6T12pul+DRubgxoXvQIuhb%2fj39iyoSFrr8%2f4ejKGMDp1aCuCxhcnWD; Domain=receivablesfinancinguat.ceo.wellsfargo.com; Path=/; Expires=Sat, 10 Jan 2026 14:30:48 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Page title: Internal Server Error

<HTML><HEAD>
<TITLE>Internal Server Error</TITLE>
</HEAD><BODY>
<H1>Internal Server Error - Read</H1>
The server encountered an internal error or misconfiguration and was unable to
complete your request.<P>
Reference&#32;&#35;3&#46;d61c2117&#46;1768054548&#46;6c1351c1
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;3&#46;d61c2117&#46;1768054548&#46;6c1351c1</P>
</BODY></HTML>

Found 2026-01-10 by HttpPlugin

Create report

Open service 2.16.1.178:443 · www.airtrip.co.jp

2026-01-10 02:14

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
X-Cache-Status: MISS
Server: nginx
X-Cached: Sat, 10 Jan 2026 02:14:54 GMT
Link: <https://www.airtrip.co.jp/>; rel=shortlink
X-Amz-Cf-Pop: MUC50-P6
X-Amz-Cf-Id: yjkwJYP63LJrJ_92IbaMcEaVYjEdHMxQxB4Q9ylvZhM97Sw38av02w==
Expires: Sat, 10 Jan 2026 02:14:55 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 10 Jan 2026 02:14:55 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding

Found 2026-01-10 by HttpPlugin