LeakIX - Host 2.21.110.196

Host 2.21.110.196

Germany

Akamai International B.V.

Ubuntu

Software information

AkamaiGHost

tcp/443 tcp/80

Apache Apache

tcp/443

nginx nginx 1.20.1

tcp/443

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 2.21.110.196
Domain: content-uat.gfk.com
Port: 443
URL: https://content-uat.gfk.com

First seen 2025-11-17 18:51
Last seen 2026-01-02 21:56
Open for 46 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa37b601eb72b740d256d3da48df506a15d7128aa45
```
GraphQL introspection enabled at /graphql
Types: 22 (by kind: ENUM: 2, INPUT_OBJECT: 2, OBJECT: 11, SCALAR: 7)
Operations:
- Query: Query | fields: Panelist_Portals, Panelist_Portals_aggregated, Panelist_Portals_by_id
Directives: deprecated, include, skip (total: 3)

Readable stores: 0
```
  Found on 2026-01-02 21:56
  
  25.9 kBytes
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 2.21.110.198
Domain: acc-admin.heinekendot.my
Port: 443
URL: https://acc-admin.heinekendot.my

First seen 2025-11-17 16:10
Last seen 2026-01-02 18:55
Open for 46 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa35996898f245c069dc46ce45a6584402f555ec7de
```
GraphQL introspection enabled at /graphql
Types: 273 (by kind: ENUM: 7, INPUT_OBJECT: 104, INTERFACE: 1, OBJECT: 147, SCALAR: 14)
Operations:
- Query: Query | fields: categories, category, product, properties, property
- Mutation: Mutations | fields: addGiftItems, addItem, changeComment, clearCart, rejectGiftItems
- Subscription: Subscriptions | fields: ping
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 18:55
  
  485.8 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-12-17 01:40
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 2.21.110.196
Domain: beta-cms-richlist.forbesindia.com
Port: 443
URL: https://beta-cms-richlist.forbesindia.com

First seen 2024-07-25 09:02
Last seen 2025-05-12 09:58
Open for 291 days

Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a1cb918

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = https://gitdeployment:GitDepL0yment@gitlab.network18tech.com/forbesindia/article-cms.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "beta"]
	remote = origin
	merge = refs/heads/beta

Found on 2025-05-12 09:58

332 Bytes

Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229c225a16

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = https://gitdeployment:GitDepL0yment@gitlab.network18tech.com/forbesindia/richlist-cms.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "beta"]
	remote = origin
	merge = refs/heads/beta

Found on 2025-05-08 14:22

333 Bytes

Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229b30eb16

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitdeployment:GitDepL0yment@gitlab.network18tech.com/forbesindia/subscription-cms.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "beta"]
	remote = origin
	merge = refs/heads/beta

Found on 2025-04-29 11:39

314 Bytes

Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229f0c94d5

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitdeployment:GitDepL0yment@gitlab.network18tech.com/forbesindia/article-cms.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "beta"]
	remote = origin
	merge = refs/heads/beta

Found on 2025-01-18 15:48

309 Bytes

Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65223676a04f

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://gitdeployment:GitDepL0yment@git.active18.com/forbesindia/richlist-cms.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "beta"]
	remote = origin
	merge = refs/heads/beta

Found on 2024-12-18 05:38

301 Bytes

Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225b34ee25

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://gitdeployment:GitDepL0yment@git.active18.com/forbesindia/blog-cms.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-07-27 02:30

301 Bytes

Create report

Open service 2.21.110.196:443 · content-uat.gfk.com

2026-01-09 18:29

HTTP/1.1 302 Moved Temporarily
Content-Type: text/plain; charset=utf-8
Content-Length: 29
Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob: https://cdn.directus.io;media-src 'self' https://cdn.directus.io;connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Powered-By: Directus
Location: ./admin
Date: Fri, 09 Jan 2026 18:29:58 GMT
Connection: close


Found. Redirecting to ./admin

Found 2026-01-09 by HttpPlugin

Create report

Open service 2.21.110.196:443 · www.remodelmybath.co

2026-01-09 08:24

HTTP/1.1 200 OK
Server: Apache
Link: <https://gather1.championdre.com/index.php/wp-json/>; rel="https://api.w.org/"
Last-Modified: Fri, 09 Jan 2026 03:19:29 GMT
Content-Type: text/html; charset=UTF-8
Cache-Control: must-revalidate, max-age=3326
Date: Fri, 09 Jan 2026 08:24:03 GMT
Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding

Found 2026-01-09 by HttpPlugin

Create report

Open service 2.21.110.196:443 · www.allentexasautoinsurance.com

2026-01-09 02:11

HTTP/1.1 403 Forbidden
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 385
Cache-Control: max-age=0
Date: Fri, 09 Jan 2026 02:12:00 GMT
Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600
Connection: close

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;www&#46;allentexasautoinsurance&#46;com&#47;" on this server.<P>
Reference&#32;&#35;18&#46;c4621302&#46;1767924720&#46;c4fb35d4
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;c4621302&#46;1767924720&#46;c4fb35d4</P>
</BODY>
</HTML>

Found 2026-01-09 by HttpPlugin

Create report

Open service 2.21.110.196:443 · www.flushingsautoinsurance.com

2026-01-09 01:52

HTTP/1.1 302 Moved Temporarily
Server: Apache
Location: https://www.flushingsautoinsurance.com/cgi-sys/suspendedpage.cgi
Content-Length: 248
Content-Type: text/html; charset=iso-8859-1
Cache-Control: max-age=21600
Date: Fri, 09 Jan 2026 01:52:25 GMT
Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600
Connection: close

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://www.flushingsautoinsurance.com/cgi-sys/suspendedpage.cgi">here</a>.</p>
</body></html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 2.21.110.196:443 · finenightmoon.com

2026-01-08 20:17
Found 2026-01-08 by HttpPlugin
Create report

Open service 2.21.110.196:443 · content-uat.gfk.com

2026-01-02 21:56

HTTP/1.1 302 Moved Temporarily
Content-Type: text/plain; charset=utf-8
Content-Length: 29
Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob: https://cdn.directus.io;media-src 'self' https://cdn.directus.io;connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Powered-By: Directus
Location: ./admin
Date: Fri, 02 Jan 2026 21:56:33 GMT
Connection: close


Found. Redirecting to ./admin

Found 2026-01-02 by HttpPlugin

Create report

Open service 2.21.110.196:443 · www.remodelmybath.co

2026-01-02 11:35

HTTP/1.1 403 Forbidden
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 372
Cache-Control: max-age=0
Date: Fri, 02 Jan 2026 11:35:10 GMT
Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600
Connection: close

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;www&#46;remodelmybath&#46;co&#47;" on this server.<P>
Reference&#32;&#35;18&#46;c4621302&#46;1767353710&#46;d6ae0f6
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;c4621302&#46;1767353710&#46;d6ae0f6</P>
</BODY>
</HTML>

Found 2026-01-02 by HttpPlugin

Create report

Open service 2.21.110.196:443 · www.allentexasautoinsurance.com

2026-01-02 05:22

HTTP/1.1 403 Forbidden
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 385
Cache-Control: max-age=0
Date: Fri, 02 Jan 2026 05:22:03 GMT
Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600
Connection: close

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;www&#46;allentexasautoinsurance&#46;com&#47;" on this server.<P>
Reference&#32;&#35;18&#46;cf621302&#46;1767331323&#46;bff4adb9
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;cf621302&#46;1767331323&#46;bff4adb9</P>
</BODY>
</HTML>

Found 2026-01-02 by HttpPlugin

Create report

Open service 2.21.110.196:443 · www.flushingsautoinsurance.com

2026-01-02 00:54

HTTP/1.1 302 Moved Temporarily
Server: Apache
Location: https://www.flushingsautoinsurance.com/cgi-sys/suspendedpage.cgi
Content-Length: 248
Content-Type: text/html; charset=iso-8859-1
Cache-Control: max-age=21600
Date: Fri, 02 Jan 2026 00:54:41 GMT
Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600
Connection: close

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://www.flushingsautoinsurance.com/cgi-sys/suspendedpage.cgi">here</a>.</p>
</body></html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 2.21.110.196:443 · ucational.com

2026-01-01 22:47
Found 2026-01-01 by HttpPlugin
Create report
Open service 2.21.110.196:443 · finenightmoon.com

2026-01-01 20:44
Found 2026-01-01 by HttpPlugin
Create report

Open service 2.21.110.196:443 · www.allentexasautoinsurance.com

2025-12-30 12:11

HTTP/1.1 403 Forbidden
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 385
Cache-Control: max-age=0
Date: Tue, 30 Dec 2025 12:11:59 GMT
Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600
Connection: close

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;www&#46;allentexasautoinsurance&#46;com&#47;" on this server.<P>
Reference&#32;&#35;18&#46;cf621302&#46;1767096719&#46;69fa6ae9
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;cf621302&#46;1767096719&#46;69fa6ae9</P>
</BODY>
</HTML>

Found 2025-12-30 by HttpPlugin

Create report

Open service 2.21.110.196:443 · www.flushingsautoinsurance.com

2025-12-30 07:17

HTTP/1.1 200 OK
Server: Apache
Link: <https://www.flushingsautoinsurance.com/wp-json/>; rel="https://api.w.org/", <https://www.flushingsautoinsurance.com/wp-json/wp/v2/pages/103130>; rel="alternate"; title="JSON"; type="application/json", <https://www.flushingsautoinsurance.com/>; rel=shortlink
Content-Type: text/html; charset=UTF-8
Cache-Control: max-age=21599
Date: Tue, 30 Dec 2025 07:17:36 GMT
Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding

Found 2025-12-30 by HttpPlugin

Create report

Open service 2.21.110.196:443 · ucational.com

2025-12-30 06:18
Found 2025-12-30 by HttpPlugin
Create report
Open service 2.21.110.196:443 · finenightmoon.com

2025-12-30 05:02
Found 2025-12-30 by HttpPlugin
Create report

Open service 2.21.110.196:443 · mcashier.dafaind.com

2025-12-25 10:46

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.20.1
Content-Type: text/html; charset=UTF-8
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Location: https://mcashier.dafaind.com/en/access-denied
X-NPRO: N0P0
Content-Length: 0
Date: Thu, 25 Dec 2025 10:46:03 GMT
Connection: close
Strict-Transport-Security: max-age=15768000 ; includeSubDomains

Found 2025-12-25 by HttpPlugin

Create report

Open service 2.21.110.196:80 · mcashier.dafaind.com

2025-12-25 10:46

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://mcashier.dafaind.com/
Cache-Control: max-age=0
Expires: Thu, 25 Dec 2025 10:46:05 GMT
Date: Thu, 25 Dec 2025 10:46:05 GMT
Connection: close

Found 2025-12-25 by HttpPlugin

Create report

Open service 2.21.110.196:80 · my.z-markets.com

2025-12-25 09:45

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Location: https://my.z-markets.com/
Expires: Thu, 25 Dec 2025 09:45:08 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 25 Dec 2025 09:45:08 GMT
Connection: close
Server-Timing: cdn-cache; desc=HIT
Server-Timing: edge; dur=1
Akamai-Cache-Status: NotCacheable from child
Set-Cookie: _abck=392411C34DF1B18C820358C70414CA34~-1~YAAQxGITAhUcLy2bAQAAUNnlVA+Bjjbb5rJcgQ3GvCJMZ+WQrJwZH5UiKCWgfQHxqMW7YVslUvVTYVPOTc/QcWts9WeYcL7IQcLFdtQkE956JiUyWnhORZmihqfEtGsB6CmNrhl5UH42if9fyXF48AveNI/UqW15SD5bjFkr3zvdveAAZjCEVHP6DBb+fo2GTfaaOysCqsf5tqkz+ZJEWeY8qJUkSPERZKj1lMUvc9YdtxG3mRdD7L+tIQR9dSkIbrhEVFyDSlvzxeNvGq0tCud0pH9YXaMKK+O6EKMmaIUQg/05It0WaPU/ko6Kcjq+99QUPB7Fi+1livdWClDqsPEMe894wduxYN0vZb1S3kfrwVXLusQCMCJvSMSreU24tmoAkOq/e+U=~-1~-1~-1~-1~-1; Domain=.z-markets.com; Path=/; Expires=Fri, 25 Dec 2026 09:45:08 GMT; Max-Age=31536000
Set-Cookie: bm_sz=D89F2053F18F583EB3D1D7263DEA572D~YAAQxGITAhYcLy2bAQAAUNnlVB6xmCUsJRkU7ieTY8vKMtBB3Awfeo9w8Id1mhPgtAU6LJZzD6BABqCjdIEqjYKlyxMiFRqxgBi5Hq7V+49z2kk/2XupeYz2VGEpbmCvLxUTJjkl/kYbZltdG2ZPjeTbyMxGyJRO3m19OPJtqUzAKUridJ/rVHtUgSwRnDMLkPwOhaj5hEqf9fwHYObDTcgBn8Q78RefJO4uC+N5HA+G7gqS1kN4QJ1IrSww5KdPGh7cl6REiKzxggAO0VdLRukhvkGFrFyocLFVyHgvbTp7fLrGaOkfUgSKDLswsL2T6YiPSitF3C4acmQeBYXEvffwl/aZlybS8VIV4X+cvQ==~3683382~4604217; Domain=.z-markets.com; Path=/; Expires=Thu, 25 Dec 2025 13:45:08 GMT; Max-Age=14400
Server-Timing: ak_p; desc="1766655908164_34824900_2906323985_6_11070_8_0_-";dur=1

Found 2025-12-25 by HttpPlugin

Create report

Open service 2.21.110.196:443 · my.z-markets.com

2025-12-25 09:45

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Thursday, 25-Dec-2025 09:45:06 UTC
Accept-Ranges: bytes
X-Akamai-Transformed: 9 25341 0 pmb=mRUM,2
Expires: Thu, 25 Dec 2025 09:45:06 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 25 Dec 2025 09:45:06 GMT
Content-Length: 30164
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=488
Server-Timing: origin; dur=4
Akamai-Cache-Status: NotCacheable from child
Strict-Transport-Security: max-age=15768000 ; preload
Set-Cookie: _abck=EF415E1DCA94BEA074F6DC4AE67E1E37~-1~YAAQxGITAl4bLy2bAQAAatHlVA/YF7d7pxrMh77YmvIIZW+tXjiGggAuf5OTOz4fgax68xeKJCbXZodq8itcXjQ6poQpfQBDSVLrRpe/+SOE8vLuWMmLd/Mv1ZpbP07VZtQPXySFX/EZtwyfG9X/eSW81nPP8EKmaketNQMN6KDP2FG7tvMJKnLpiY8TdsE2E8NBPGOPLdVV76l1qWXUQaLHfI7UGYdgME0lPNtI6C6B/7Ttt2fhMwnh8lepQqBgiZ9qgMGrsH9uKoUIm/YSDwx+tyTk8PzI2+ADpHFddQ5q2Qbkyc0I/kNKYFm+OL9mRj5Ky9K2/yE+AE0qoOnQrBAw8DbF/vR37JkAi20/btdglfg8OQ3I5pX+x1zG4aYKqYLtLvhEHwYmwldfVDp8mnkRcGWqbNr0mTb1T6Iq9wlE+FnaaBj6d74UBHpQLyWcxM7A4q65dQI=~-1~-1~-1~-1~-1; Domain=.z-markets.com; Path=/; Expires=Fri, 25 Dec 2026 09:45:06 GMT; Max-Age=31536000; Secure
Set-Cookie: bm_sz=9860D6E661B48C675A7C5588C4150123~YAAQxGITAl8bLy2bAQAAatHlVB4cZIBXfx9tY1dFP/aZVnocUGoVY4M/94WlgddNXoFkwo9NTs6UlVg382Gc+n6rWvnCmZf+2jHSwazNpzLxYYZv2vGJO1Js8Dy+4HUKzV48/kBBZtJOcfMVCoMAPnyTgifT4J/jc8hDSJPr5F2Cmfa1sR0slNQtLYXKRAkXvVZAHHea79FbYyFQDsRAyLgjFA2c1IFgjUU5drgSfU41rlAaeC/JItdMAaPv3Uzx4uHlYj/j6YbJz8ObgN0q8v5KpIOBFMorw1RGIfYh0kiz+dak2y3G7j/aReoT5355lb+pe0OpikE6bujtxt1GMnw+B/2hnFnJwedByRcRVcE=~4539718~3682354; Domain=.z-markets.com; Path=/; Expires=Thu, 25 Dec 2025 13:45:05 GMT; Max-Age=14399
Server-Timing: ak_p; desc="1766655905625_34824900_2906318511_49124_9673_13_24_-";dur=1


<!doctype html>
<html>
  <head>
    <meta charset="utf-8" />
    <meta
      http-equiv="X-UA-Compatible"
      content="IE=edge,chrome=1"
    />
    <meta
      name="description"
      content="zfx-member"
    />
    <meta
      name="viewport"
      content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no,viewport-fit=cover"
    />
    <link
      rel="icon"
      id="favicon"
      href="data:,"
    />
    <script>
      window.APP_BRAND = "zfx";
      window.FEATURE_FLAGS = {"FEATURE_FLAG_ENABLE_CONVERT_BY_FRIENDS_CONVERT_BY_PROFIT": true,"FEATURE_FLAG_ENABLE_TRADING_EXPLORE_ROUTES": true,"FEATURE_FLAG_ENABLE_LOSS_PROTECTION": true,"FEATURE_FLAG_ENABLE_TRAZE_ZPAY_ROUTES": true,"FEATURE_FLAG_LEGACY_LOCALES": true,"FEATURE_FLAG_ENABLE_PROMOTION_MENU": true,"FEATURE_FLAG_VPN_DETECTION": true,"FEATURE_FLAG_ENABLE_CRYPTO_DEPOSITS": true,"FEATURE_FLAG_ENABLE_CRYPTO_MENU": true,"FEATURE_FLAG_KYC_MODULE": true,"FEATURE_FLAG_ENABLE_CONVERT_BY_INTEREST": true,"FEATURE_FLAG_ENABLE_MODULES": true,"FEATURE_FLAG_ENABLE_CONVERT_BY_PROFIT": true,"FEATURE_FLAG_ENABLE_CAPTCHA": true,"FEATURE_FLAG_ENABLE_CASHBACK_CREATE_ACCOUNT_API": true,"FEATURE_FLAG_ENABLE_TRADING_REPORTS_ROUTES": true,"FEATURE_FLAG_DIGITAL_SHARES_MODULE": true,"FEATURE_FLAG_ENABLE_NEW_INSIGHTS_PAGE": false,"FEATURE_FLAG_SOCKET_WITH_POLLING_MT5": false,"FEATURE_FLAG_ENABLE_TASKS": true,"FEATURE_FLAG_NEW_ACCOUNT_VERIFICATION": true,"FEATURE_FLAG_ENABLE_ZPAY_ROUTES": true,"FEATURE_FLAG_ENABLE_CASHBACK_ROUTES": true,"FEATURE_FLAG_ENABLE_CONVERT_BY_TRADING": true,"FEATURE_FLAG_ENABLE_TRADING_ACCOUNTS_ROUTES": true,"FEATURE_FLAG_ENABLE_TRADING_DASHBOARD_ROUTES": false,"FEATURE_FLAG_POLLING_MT4_MT5": true,"FEATURE_FLAG_ENABLE_GT_CAPTCHA": true,"FEATURE_FLAG_ENABLE_EARN_BY_FRIENDS_TASKS": true,"FEATURE_FLAG_SOKET_WITH_POLLING_MT5": false,"FEATURE_FLAG_SHOW_SERVICE_DISRUPTION_POPUP": false,"FEATURE_FLAG_ENABLE_BANNERS": true,"FEATURE_FLAG_SHOW_ZDS_UPDATE_MODAL": true,"FEATURE_FLAG_ENABLE_CRYPTO_WITHDRAWALS": true,"FEATURE_FLAG_ENABLE_SENTRY": true,"FEATURE_FLAG_ENABLE_TRADING_MODULE": true};
      window.APP_VARIABLES = {"APP_CAPTCHA_GEETEST_CAPTCHA_ID": "93b64f963f2c6f445d9b06f26179f57d","APP_CHAT_ZFX": "[{'provider': 'zendesk', 'apiKey': '415c6389-3383-48f3-9498-0d80e2cb6426'},{'language': 'ar', 'provider': 'zendesk', 'apiKey': '25d9544b-bdca-4b70-af03-59903433db7c'}, {'language': 'id', 'provider': 'zendesk', 'apiKey': '2e6b073d-6463-4abe-9025-6bd802394ba8'}, {'language': 'ms', 'provider': 'zendesk', 'apiKey': '415c6389-3383-48f3-9498-0d80e2cb6426'},{'language': 'th', 'provider': 'zendesk', 'apiKey': '2e6b073d-6463-4abe-9025-6bd802394ba8'},{'language': 'vi', 'provider': 'zendesk', 'apiKey': '2e6b073d-6463-4abe-9025-6bd802394ba8'}, {'language': 'tr', 'provider': 'zendesk', 'apiKey': '25d9544b-bdca-4b70-af03-59903433db7c'},{'language': 'ko','provider': 'zendesk','apiKey': '415c6389-3383-48f3-9498-0d80e2cb6426'},{'language': 'pt','provider': 'zendesk','apiKey': '415c6389-3383-48f3-9498-0d80e2cb6426'},{'language': 'es','provider': 'zendesk','apiKey': '415c6389-3383-48f3-9498-0d80e2cb6426'},{'language': 'hi', 'provider': 'zendesk', 'apiKey': '2e6b073d-6463-4abe-9025-6bd802394ba8'},{'language': 'zh-TW', 'provider': 'zendesk', 'apiKey': '0fb50340-01b6-429d-86dd-4a871867532a'},{'language': 'zh-CN', 'provider': 'zendesk', 'apiKey': '0fb50340-01b6-429d-86dd-4a871867532a'},{'language': 'en', 'provider': 'zendesk','apiKey': '415c6389-3383-48f3-9498-0d80e2cb6426'}]","APP_INNERWORKS_ID": "300d4db0-85c5-4d5b-b590-7a620458e3df","APP_TXID_LINK": "https://tronscan.org/#/transaction","APP_GE_CAMPAIGN_START_DATE": "2025-11-30T16:00:00Z","APP_CRITICAL_LATENCY_TIME": "1500","APP_CAPTCHA_API_KEY": "FCMQB7312MUITVH5","APP_GCP_URL": "https://storage.googleapis.com/zfx-customer-portal-client-sentiments-prod","APP_ZDS_DOMAINS_API_BACKUP_URL": "https://red.zlinkpath.com/api/v2/domains/tag?tag=zds","APP_GE_CAMPAIGN_END_DATE": "2026-02-28T15:59:59Z","APP_GA_ID": "GTM-T4KLV3Z","APP_FEATURE_FLAGS_API_KEY": "*:production.1abca772b6b822f74765bb1eadc4a4da4faef91bb248a163951c38b6","APP_

Found 2025-12-25 by HttpPlugin

Create report

Open service 2.21.110.196:443 · content-uat.gfk.com

2025-12-23 04:18

HTTP/1.1 302 Moved Temporarily
Content-Type: text/plain; charset=utf-8
Content-Length: 29
Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob: https://cdn.directus.io;media-src 'self' https://cdn.directus.io;connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Powered-By: Directus
Location: ./admin
Date: Tue, 23 Dec 2025 04:18:45 GMT
Connection: close


Found. Redirecting to ./admin

Found 2025-12-23 by HttpPlugin

Create report

Open service 2.21.110.196:443 · www.allentexasautoinsurance.com

2025-12-22 16:09

HTTP/1.1 403 Forbidden
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 385
Cache-Control: max-age=0
Date: Mon, 22 Dec 2025 16:09:45 GMT
Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600
Connection: close

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;www&#46;allentexasautoinsurance&#46;com&#47;" on this server.<P>
Reference&#32;&#35;18&#46;c4621302&#46;1766419785&#46;722c9c4a
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;c4621302&#46;1766419785&#46;722c9c4a</P>
</BODY>
</HTML>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2.21.110.196:443 · www.flushingsautoinsurance.com

2025-12-22 09:01

HTTP/1.1 403 Forbidden
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 384
Cache-Control: max-age=0
Date: Mon, 22 Dec 2025 09:01:08 GMT
Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600
Connection: close

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;www&#46;flushingsautoinsurance&#46;com&#47;" on this server.<P>
Reference&#32;&#35;18&#46;c4621302&#46;1766394067&#46;6acea973
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;c4621302&#46;1766394067&#46;6acea973</P>
</BODY>
</HTML>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2.21.110.196:443 · ucational.com

2025-12-22 07:25
Found 2025-12-22 by HttpPlugin
Create report
Open service 2.21.110.196:443 · finenightmoon.com

2025-12-22 05:56
Found 2025-12-22 by HttpPlugin
Create report

Open service 2.21.110.196:443 · content-uat.gfk.com

2025-12-21 10:11

HTTP/1.1 302 Moved Temporarily
Content-Type: text/plain; charset=utf-8
Content-Length: 29
Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob: https://cdn.directus.io;media-src 'self' https://cdn.directus.io;connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Powered-By: Directus
Location: ./admin
Date: Sun, 21 Dec 2025 10:11:05 GMT
Connection: close


Found. Redirecting to ./admin

Found 2025-12-21 by HttpPlugin

Create report

Open service 2.21.110.196:443 · www.allentexasautoinsurance.com

2025-12-20 16:41

HTTP/1.1 403 Forbidden
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 385
Cache-Control: max-age=0
Date: Sat, 20 Dec 2025 16:41:58 GMT
Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600
Connection: close

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;www&#46;allentexasautoinsurance&#46;com&#47;" on this server.<P>
Reference&#32;&#35;18&#46;cf621302&#46;1766248918&#46;6c815756
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;cf621302&#46;1766248918&#46;6c815756</P>
</BODY>
</HTML>

Found 2025-12-20 by HttpPlugin

Create report

Open service 2.21.110.196:443 · www.flushingsautoinsurance.com

2025-12-20 09:32

HTTP/1.1 403 Forbidden
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 384
Cache-Control: max-age=0
Date: Sat, 20 Dec 2025 09:32:53 GMT
Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600
Connection: close

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;www&#46;flushingsautoinsurance&#46;com&#47;" on this server.<P>
Reference&#32;&#35;18&#46;c4621302&#46;1766223173&#46;3ff8916b
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;c4621302&#46;1766223173&#46;3ff8916b</P>
</BODY>
</HTML>

Found 2025-12-20 by HttpPlugin

Create report

Open service 2.21.110.196:443 · ucational.com

2025-12-20 07:54
Found 2025-12-20 by HttpPlugin
Create report
Open service 2.21.110.196:443 · finenightmoon.com

2025-12-20 06:27
Found 2025-12-20 by HttpPlugin
Create report

Open service 2.21.110.196:443 · content-uat.gfk.com

2025-12-19 00:05

HTTP/1.1 302 Moved Temporarily
Content-Type: text/plain; charset=utf-8
Content-Length: 29
Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob: https://cdn.directus.io;media-src 'self' https://cdn.directus.io;connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Powered-By: Directus
Location: ./admin
Date: Fri, 19 Dec 2025 00:06:00 GMT
Connection: close


Found. Redirecting to ./admin

Found 2025-12-19 by HttpPlugin

Create report

content-uat.gfk.com

Fingerprint:

ca492d9af45405b389af4b73f4ac53c9869e272d05bc524a7812425613cfcad5

CN:

content-uat.gfk.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-17 17:51

Not after:

2026-02-15 17:51

www.remodelmybath.co

Fingerprint:

63a415966fa37e52069ef655be77c1cc15a0b3dcc54acc4520d04882bcd7d660

CN:

www.remodelmybath.co

Key:

ECDSA-256

Issuer:

Not before:

2025-12-24 15:05

Not after:

2026-03-24 15:05

www.allentexasautoinsurance.com

Fingerprint:

cb2185fc278401f5f337f9fe01a6d5c6072b0e5f21083012dd54b69b13a5e876

CN:

www.allentexasautoinsurance.com

Key:

ECDSA-256

Issuer:

Not before:

2025-12-22 16:55

Not after:

2026-03-22 16:55

www.flushingsautoinsurance.com

Fingerprint:

e02a464017811b1e476bc72f8032e7428c55c6b6b686a8041539a31ff4fb3df2

CN:

www.flushingsautoinsurance.com

Key:

ECDSA-256

Issuer:

Not before:

2025-12-22 16:53

Not after:

2026-03-22 16:53

finenightmoon.comfineredbonus.comfinovaedu.comred-v2.finovaedu.comred-v2.qa.finovaedu.comred-v2.uat.finovaedu.comred-v2.ucational.comred.finovaedu.comred.texapit.comred.texexp.comred.zlinkpath.comtestmyconnect.comtexapit.comuat.testmyconnect.comucational.com

Fingerprint:

878c82e98d4ab0c4428509d47de424b67f94f92b822151315ce2b2ce78f8576c

CN:

finovaedu.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-11-04 02:39

Not after:

2026-02-02 02:39

account.dafa888.comaccount.dafaind.comaccount.sheetzuchin.comaccount.xiaofeihuang.comaka-als.xiaofeihuang.comaka-sports.xiaofeihuang.comaka-www.xiaofeihuang.comals.dafa888.comals.dafaind.comals.sheetzuchin.comals.xiaofeihuang.comcashier2.dafa888.comcashier2.dafaind.comcashier2.sheetzuchin.comcashier2.xiaofeihuang.comdafa888.comdafaind.comid102.m4kpd7xg.comistg-www.xiaofeihuang.comm.dafa888.comm.dafabocai.netm.dafaind.comm.dafanba.netm.dangcapdf.comm.sheetzuchin.comm.xiaofeihuang.commcashier.dafa888.commcashier.dafaind.commcashier.dafanba.netmcashier.sheetzuchin.commcashier.xiaofeihuang.comsheetzuchin.comsports.dafa888.comsports.dafaind.comsports.sheetzuchin.comsports.xiaofeihuang.comwww.dafa888.comwww.dafabocai.netwww.dafaind.comwww.dafanba.netwww.sheetzuchin.comwww.xiaofeihuang.comxiaofeihuang.com

Fingerprint:

616c9c4b666da6d566ca2bc3e0de7cf1f3ac410ad9e0927fed150e379ac8378b

CN:

id102.m4kpd7xg.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-11-14 07:48

Not after:

2026-02-12 07:48

app.z-markets.combroker.z-markets.comcdn.z-markets.comcopytrading-rating.z-markets.comcopytrading.z-markets.commy.z-markets.comwebtrader.z-markets.comwww.z-markets.comz-markets.com

Fingerprint:

d1a7bd7bb27d21ec165e5ab3bee87966c06b50362d2e49319babb3d77bc7d4e4

CN:

z-markets.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-10-16 08:50

Not after:

2026-01-14 08:50

www.allentexasautoinsurance.com

Fingerprint:

d899c5abbaef1f042900e0ee9bcd41ad576a21a7e582ee1683d14deb25bda522

CN:

www.allentexasautoinsurance.com

Key:

ECDSA-256

Issuer:

Not before:

2025-10-17 18:27

Not after:

2026-01-15 18:26

www.flushingsautoinsurance.com

Fingerprint:

3d349199c01451ed3f99038bb2f55a8ef611f20fbafd4ddde2fa53327eca98c8

CN:

www.flushingsautoinsurance.com

Key:

ECDSA-256

Issuer:

Not before:

2025-10-17 18:26

Not after:

2026-01-15 18:26

Domain summary

beta-cms-richlist.forbesindia.com 6 acc-admin.heinekendot.my 2 content-uat.gfk.com 5 www.remodelmybath.co 1 www.allentexasautoinsurance.com 4 www.flushingsautoinsurance.com 4 finenightmoon.com 4 ucational.com 3 mcashier.dafaind.com 1 my.z-markets.com 1

10 recorded

Host 2.21.110.196

Germany

Software information

GraphQL introspection is enabled.

GraphQL introspection is enabled.

Git configuration and history exposed

content-uat.gfk.com

www.remodelmybath.co

www.allentexasautoinsurance.com

www.flushingsautoinsurance.com

finenightmoon.comfineredbonus.comfinovaedu.comred-v2.finovaedu.comred-v2.qa.finovaedu.comred-v2.uat.finovaedu.comred-v2.ucational.comred.finovaedu.comred.texapit.comred.texexp.comred.zlinkpath.comtestmyconnect.comtexapit.comuat.testmyconnect.comucational.com

app.z-markets.combroker.z-markets.comcdn.z-markets.comcopytrading-rating.z-markets.comcopytrading.z-markets.commy.z-markets.comwebtrader.z-markets.comwww.z-markets.comz-markets.com

www.allentexasautoinsurance.com

www.flushingsautoinsurance.com

Domain summary