LeakIX - Host 2.21.23.172

Host 2.21.23.172

The Netherlands

Akamai International B.V.

Ubuntu

Software information

Apache Apache 2.4.63

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 2.21.23.172
Domain: understandingucdev.dwp.gov.uk
Port: 443
URL: https://understandingucdev.dwp.gov.uk

First seen 2025-06-10 09:19
Last seen 2026-02-09 22:20
Open for 244 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c39aac35b39aac35bcf7342359e78152d85f255eb6974c507
```
Found 14 files trough .DS_Store spidering:

/wp-admin
/wp-content
/wp-content/aiowps_backups
/wp-content/debug.log
/wp-content/index.php
/wp-content/plugins
/wp-content/plugins/advanced-custom-fields-pro
/wp-content/plugins/index.php
/wp-content/plugins/wordpress-importer
/wp-content/themes
/wp-content/themes/dwp-universalcredits
/wp-content/themes/index.php
/wp-content/upgrade
/wp-content/uploads
```
  Found on 2026-02-09 22:20
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176426a5bbc36738703107387031073870310
```
Found 2 files trough .DS_Store spidering:

/wp-admin
/wp-content
```
  Found on 2026-02-03 10:20
- Severity: low
  Fingerprint: 5f32cf5d6962f09c11d3744d11d3744da1ff43cf382f57d3b6d1b645b37f2eae
```
Found 12 files trough .DS_Store spidering:

/wp-admin
/wp-content
/wp-content/aiowps_backups
/wp-content/debug.log
/wp-content/index.php
/wp-content/plugins
/wp-content/plugins/advanced-custom-fields-pro
/wp-content/plugins/index.php
/wp-content/plugins/wordpress-importer
/wp-content/themes
/wp-content/upgrade
/wp-content/uploads
```
  Found on 2025-10-26 06:35
Create report

Open service 2.21.23.172:443 · understandingucdev.dwp.gov.uk

2026-01-22 20:59

HTTP/1.1 200 OK
Server: Apache/2.4.63 (Ubuntu)
X-Pingback: https://understandingucdev.dwp.gov.uk/xmlrpc.php
X-Frame-Options: SAMEORIGIN
Link: <https://understandingucdev.dwp.gov.uk/wp-json/>; rel="https://api.w.org/"
Link: <https://understandingucdev.dwp.gov.uk/wp-json/wp/v2/pages/5>; rel="alternate"; type="application/json"
Link: <https://understandingucdev.dwp.gov.uk/>; rel=shortlink
Content-Type: text/html; charset=UTF-8
Expires: Thu, 22 Jan 2026 20:59:35 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 22 Jan 2026 20:59:35 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding
Set-Cookie: PHPSESSID=gggge3ofrjujnv74iij056e0nh; path=/

Found 2026-01-22 by HttpPlugin

Create report

careersdev.dwp.gov.ukcwptest.dwp.gov.ukjobhelp-test.dwp.gov.uklaoff.dwp.gov.uklostest.dwp.gov.ukpcctest.dwp.gov.uksecuretest.dwp.gov.ukunderstandingucdev.dwp.gov.ukwpptest.dwp.gov.ukyptest.dwp.gov.uk

Fingerprint:

8386c13e7c25be1c67f940ae3355557af8b90e058f483b9f298840f9d2b8ec2f

CN:

securetest.dwp.gov.uk

Key:

RSA-2048

Issuer:

R13

Not before:

2026-01-06 06:39

Not after:

2026-04-06 06:39

Domain summary

understandingucdev.dwp.gov.uk 3

1 recorded