LeakIX - Host 2a02:26f0:7100::210:130

Host 2a02:26f0:7100::210:130

Germany

Akamai International B.V.

Software information

AkamaiGHost

tcp/443 tcp/80

nginx nginx

tcp/443

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 2a02:26f0:7100::210:130
Domain: backoffice.cassaliguria.it
Port: 443
URL: https://backoffice.cassaliguria.it/_profiler/empty/search/results

First seen 2025-12-11 11:21
Last seen 2026-01-09 12:11
Open for 29 days
- Fingerprint: 407cf4363b0e62fafca67e07f623e4ebf623e4ebf623e4ebf623e4ebf623e4eb
```
Symfony profiler enabled:
https://backoffice.cassaliguria.it/_profiler/empty/search/results
```
  Found on 2026-01-09 12:11
Create report

Open service 2a02:26f0:7100::210:130:443 · return-fcwc25.tickets.fifa.com

2026-02-06 09:27

HTTP/1.1 403 Forbidden
Mime-Version: 1.0
Content-Length: 1359
Cache-control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Type: text/html
Date: Fri, 06 Feb 2026 09:27:08 GMT
Connection: close
Akamai-GRN: 0.2c011002.1770370028.a1ae85d

Page title: Bad request

<html>
<head>
<title>Bad request</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<META HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE">
<meta name="viewport" content="initial-scale=1.0">
<style>
  #content {
    border:none;
    background-color:#326295;
	margin: 50 auto;   
	padding:20px;
	position: relative;
    font-family:"ProximaNovaLight",Roboto,sans-serif;
    font-size:1em;
    max-width: 600px;
  }
  img {
  	max-height: 52px;
    width: auto;
  }
  h1 {
    font-size:1.2em;
    font-weight:bold;
    color:#fff;
  }
  b {
    font-weight:normal;
    color:#929aa1;
  }
   p {
    color:#fff;
  }
  body { 
    background: url('https://fifa-public-pictures.s3.eu-central-1.amazonaws.com/pitch_grass_bg.jpg') no-repeat center center fixed;
    -moz-background-size: cover;
    -webkit-background-size: cover;
    -o-background-size: cover;
    background-size: cover;
} 
</style>
</head>
<body bgcolor="#326295">
<div id="content">
	<img src="https://fifa-public-pictures.s3.eu-central-1.amazonaws.com/fifa_logo_big.png"/>
<h1>Bad request</h1>
<p>A critical request has been detected and therefore blocked.</p>
<p>IP: <b>2a03:b0c0:2:d0::1774:b001</b></p>
<p>Reference: <b>0.2c011002.1770370028.a1ae85d</b></p>
<br />
<p>Please report the incident including request ID to FIFA Service Desk. Thank you!</p>
</div>
</body>
</html>

Found 5 hours ago by HttpPlugin

Create report

Open service 2a02:26f0:7100::210:130:443 · www.ing.com

2026-02-06 05:00

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://ing.com/
Expires: Fri, 06 Feb 2026 05:00:20 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 06 Feb 2026 05:00:20 GMT
Connection: close
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31622400; includeSubDomains

Found 9 hours ago by HttpPlugin

Create report

Open service 2a02:26f0:7100::210:130:80 · www.ing.com

2026-02-06 05:00

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://ing.com/
Expires: Fri, 06 Feb 2026 05:00:41 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 06 Feb 2026 05:00:41 GMT
Connection: close
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN

Found 9 hours ago by HttpPlugin

Create report

Open service 2a02:26f0:7100::210:130:80 · in.mpms.mufg.com

2026-01-12 10:14

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Location: https://in.mpms.mufg.com/
Expires: Mon, 12 Jan 2026 10:15:04 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 12 Jan 2026 10:15:04 GMT
Connection: close
Server-Timing: cdn-cache; desc=HIT
Server-Timing: edge; dur=1
Server-Timing: ak_p; desc="1768212904074_34603308_890086933_14_6286_99_0_-";dur=1

Found 2026-01-12 by HttpPlugin

Create report

Open service 2a02:26f0:7100::210:130:443 · in.mpms.mufg.com

2026-01-12 10:14

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Wed, 16 Jul 2025 12:01:46 GMT
ETag: "071146749f6db1:0",vibrate 'self'; usermedia *; sync-xhr 'self'
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self';
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: : no-referrer-when-downgrade
Feature-Policy: none
Feature-Policy: : https://linkintime.co.in/
Access-Control-Allow-Origin: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Headers: GET,POST
Access-Control-Allow-Methods: true
Access-Control-Allow-Credentials: no-cache, no-store, must-revalidate
X-Akamai-Transformed: 9 5650 0 pmb=mRUM,1
Expires: Mon, 12 Jan 2026 10:14:23 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 12 Jan 2026 10:14:23 GMT
Content-Length: 32214
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=533
Server-Timing: origin; dur=79
Alt-Svc: h3=":443"; ma=93600
Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload
Server-Timing: ak_p; desc="1768212863192_34603268_705628799_61199_6108_83_95_-";dur=1

Page title: MUFG Intime India Private Limited

<!DOCTYPE html
    PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta name="description" content="Link Intime" />
    <!--<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">-->
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <link rel="icon" type="image/png" href="images/favicon.ico" />
    <link type="text/css" rel="stylesheet" href="css/styles.css" />
    <title>MUFG Intime India Private Limited</title>
    <!-- Analytics -->
    <!-- Global site tag (gtag.js) - Google Analytics -->

    <script async src="https://www.googletagmanager.com/gtag/js?id=UA-114588394-1"></script>

    <script type="text/javascript">
        window.dataLayer = window.dataLayer || [];
        function gtag() { dataLayer.push(arguments); }
        gtag('js', new Date());

        gtag('config', 'UA-114588394-1');
    </script>

    <script type="text/javascript">
    </script>

    <style>
.slick-dots{
bottom:10px !important;
}

        th, td
        {
            border-bottom: 0px;
        }
        .news
        {
            background: #D6D6D6;
            border: 1px solid #E60000;
            margin-top: 50px !important;
            margin-bottom: 30px !important;
            padding: 20px;
            border-radius: 6px;
            line-height: 40px;
            box-shadow: 0px 1px 5px 2px #E60000;
            text-align: center;
            font-size: 18px;
            color: #000000;
            margin-left: 61px;
        }
        .stretched-link::after
        {
            position: absolute;
            top: 0;
            right: 0;
            bottom: 0;
            left: 0;
            z-index: 1;
            pointer-events: auto;
            content: "";
            background-color: rgba(0, 0, 0, 0);
        }
        @media (max-width: 550px)
        {
            .banner-text
            {
                padding: 0em 0 0 0 !important;
            }
            #popupDiv
            {
                width: 98vw !important;
                position: absolute !important;
                top: 15vw !important;
                left: 1vw !important;
            }
        }
        .slick-dotted.slick-slider { margin: 0; height:auto  !important;padding:0; }
        
          .page__banner {
        background: url('images/mufg-banner-background.jpg') no-repeat center 76%/cover ;
        padding: 20px 0 !important;
        font-size: 12px !important;
    }

    .page__banner .banner__logo {
        max-width: 100%;
        margin-bottom: 1em;
		width: 100%;

    }

    .page__banner .banner__content p {
        color: #fff;
        font-family: Arial, sans-serif;
        font-size: 1.25em;
        font-weight: 400;
        margin-bottom: 1em;
    }

    .page__banner .banner__content p:last-child {
        margin: 0;
    }

    .page__banner .banner__close {
        background: #fff;
        border-radius: 10px;
        padding: 8px 16px;
        display: inline-block;
        color: #e60000;
        font-weight: bold;
        text-decoration: none;
        outline: 0 !important;
        box-shadow: none !important;
        margin-top: .5em;
        min-width: 125px;
    }

    .page__popup {
        position: fixed;
        left: 0;
        right: 0;
        bottom: 0;
        top: 0;
        width: 100%;
        height: 100%;
        z-index: 1101;
        background: rgba(0, 0, 0, 0.6);
    }

    .page__popup .page__banner {
        position: absolute;
        left: 50%;
        top: 100px;
        -webkit-transform: translateX(-50%) !important;
        transform: translateX(-50%);
        max-width: 620px;
        box-shadow: 0 0 15px -5px rgba(0, 0, 0, 0

Found 2026-01-12 by HttpPlugin

Create report

Open service 2a02:26f0:7100::210:130:80 · uat-prism-client-data.agaassistance.com.au

2026-01-10 05:16

HTTP/1.1 403 Forbidden
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 412
Expires: Sat, 10 Jan 2026 05:17:03 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 10 Jan 2026 05:17:03 GMT
Connection: close

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;uat&#45;prism&#45;client&#45;data&#46;agaassistance&#46;com&#46;au&#47;" on this server.<P>
Reference&#32;&#35;18&#46;2c011002&#46;1768022223&#46;2fd3f4fa
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;2c011002&#46;1768022223&#46;2fd3f4fa</P>
</BODY>
</HTML>

Found 2026-01-10 by HttpPlugin

Create report

Open service 2a02:26f0:7100::210:130:443 · uat-prism-client-data.agaassistance.com.au

2026-01-10 05:16

HTTP/1.1 403 Forbidden
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 410
Expires: Sat, 10 Jan 2026 05:16:23 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 10 Jan 2026 05:16:23 GMT
Connection: close
Strict-Transport-Security: max-age=15768000 ; includeSubDomains ; preload

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;uat&#45;prism&#45;client&#45;data&#46;agaassistance&#46;com&#46;au&#47;" on this server.<P>
Reference&#32;&#35;18&#46;c011002&#46;1768022183&#46;32c992cb
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;c011002&#46;1768022183&#46;32c992cb</P>
</BODY>
</HTML>

Found 2026-01-10 by HttpPlugin

Create report

Open service 2a02:26f0:7100::210:130:80 · leparticulier.lefigaro.fr

2026-01-10 02:01

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Location: https://leparticulier.lefigaro.fr/
Expires: Sat, 10 Jan 2026 02:02:39 GMT
Cache-Control: max-age=0, no-cache, private
Pragma: no-cache
Date: Sat, 10 Jan 2026 02:02:39 GMT
Connection: close
X-Left-TTL: -1768010560

Found 2026-01-10 by HttpPlugin

Create report

Open service 2a02:26f0:7100::210:130:443 · leparticulier.lefigaro.fr

2026-01-10 02:01

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
x-premium: 0
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains; preload
Content-Security-Policy: upgrade-insecure-requests
x-frame-options: sameorigin
Link: <https://static.lefigaro.fr/figconsent/figconsent-v2-short-ttl.js>; rel="preload"; as="script",</build/modern/js/initial-vendors.4346c7fd66ee8d4f.js>; rel="preload"; integrity="sha384-kKmcsGhEa862J+WWByKYXP9OfrJHrynHib+2i97vpPGlA/TGstoX74mFN8WcAuCO"; as="script"; crossorigin="anonymous",</build/modern/js/initial-helpers.9e5131108c53853c.js>; rel="preload"; integrity="sha384-dS65dLES2eRDwP9qVQJZLY5Exne5mgD4YXpORCVrCe+KiUxLHJYE9WBhyKIz3jFk"; as="script"; crossorigin="anonymous",</build/modern/js/globals/handleFiganalytics.972125d12400d78a.js>; rel="preload"; integrity="sha384-br9ALevDS7QSABsv4BtRDoBNLnjbmWh8mPJBNdHeNowgDmfVyxsR1j+PcP9BR2m2"; as="script"; crossorigin="anonymous",<https://static.lefigaro.fr/figanalytics/figanalytics-short-ttl.js>; rel="preload"; as="script",<https://static.lefigaro.fr/common/fonts/SourceSansPro/sourcesanspro-semibold.woff2>; rel="preload"; as="font"; crossorigin="anonymous",<https://static.lefigaro.fr/common/fonts/SourceSansPro/sourcesanspro-regular.woff2>; rel="preload"; as="font"; crossorigin="anonymous",<https://static.lefigaro.fr/common/fonts/NotoSerif/notoserif-bold.woff2>; rel="preload"; as="font"; crossorigin="anonymous",<https://static.lefigaro.fr>; rel="preconnect",<https://i.f1g.fr>; rel="preconnect",<https://collector.appconsent.io>; rel="preconnect",<https://cdn.appconsent.io/tcf2-clear/current/core.bundle.js>; rel="preload"; as="script",<https://www.googletagmanager.com>; rel="dns-prefetch",<https://cdn.appconsent.io>; rel="dns-prefetch",<https://static.lefigaro.fr/header/js/figh-index.940b0be.js>; rel="preload"; as="script"
x-using-nginx-controller: true
x-shard-target: proxy1
x-real-age: 32
Expires: Sat, 10 Jan 2026 02:01:57 GMT
Cache-Control: max-age=0, no-cache, private
Pragma: no-cache
Date: Sat, 10 Jan 2026 02:01:57 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding
X-Left-TTL: 124

Found 2026-01-10 by HttpPlugin

Create report

Open service 2a02:26f0:7100::210:130:443 · backoffice.cassaliguria.it

2026-01-09 12:11

HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=utf-8
x-dt-tracestate: 2a7d194f-637d50b7@dt
traceresponse: 00-25d9d3e7be42edd5e6f22632faa78f85-01f2fb4ba0d1ab18-01
Cache-Control: max-age=0, must-revalidate, private
Location: /login
Referrer-Policy: no-referrer, strict-origin-when-cross-origin
X-Debug-Token: fb108c
Expires: Fri, 09 Jan 2026 12:11:27 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 235
Date: Fri, 09 Jan 2026 12:11:27 GMT
Connection: close
Set-Cookie: route=1767960688.745.39.484440|a37e39176af5c07ddeb68dfa08ba017d; Path=/; Secure; HttpOnly
Set-Cookie: sf_redirect=%7B%22token%22%3A%22fb108c%22%2C%22route%22%3A%22admin%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CAdmin%5C%5CDashboardController%22%2C%22method%22%3A%22index%22%2C%22file%22%3A%22%5C%2Fvar%5C%2Fwww%5C%2Fhtml%5C%2Fsrc%5C%2FController%5C%2FAdmin%5C%2FDashboardController.php%22%2C%22line%22%3A79%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D; path=/; secure; httponly; samesite=lax
Set-Cookie: PHPSESSID=g0te9eap74t69rq3dltu8dakjl; path=/; secure; httponly; samesite=lax
Set-Cookie: TS012d3a7b=01f24f4447b29fdfcab48548f8a53f3dd638e73fb2ea301f854f8602477890cceae628d806076e6ec967959ff6ce41e24834216df5; Path=/; Secure

Page title: Redirecting to https://backoffice.cassaliguria.it/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='https://backoffice.cassaliguria.it/login'" />

        <title>Redirecting to https://backoffice.cassaliguria.it/login

Found 2026-01-09 by HttpPlugin

Create report

Open service 2a02:26f0:7100::210:130:443 · webwinkel.destentor.nl

2026-01-09 01:20

HTTP/1.1 302 Moved Temporarily
Location: https://myprivacy.dpgmedia.nl/consent?siteKey=dl16ymcepojg0niw&callbackUrl=https%3A%2F%2Fwebwinkel.destentor.nl%2Fprivacygate-confirm%3FredirectUri%3D%252F&isLoggedIn=false
Content-Type: text/html
Content-Length: 0
Date: Fri, 09 Jan 2026 01:20:11 GMT
Connection: close

Found 2026-01-09 by HttpPlugin

Create report

Open service 2a02:26f0:7100::210:130:80 · webwinkel.destentor.nl

2026-01-09 01:20

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://webwinkel.destentor.nl/
Date: Fri, 09 Jan 2026 01:20:51 GMT
Connection: close

Found 2026-01-09 by HttpPlugin