LeakIX - Host alcovecollaborative.com

Domain alcovecollaborative.com

United States

SQUIXA PTY LIMITED

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 45.154.183.183
Domain: alcovecollaborative.com
Port: 443
URL: https://alcovecollaborative.com

First seen 2023-05-05 13:51
Last seen 2023-09-13 23:31
Open for 131 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d63a747c263a747c263a747c263a747c2
```
Found 1 files trough .DS_Store spidering:

/application
```
  Found on 2023-05-05 13:51
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 45.154.183.183
Domain: alcovecollaborative.com
Port: 443
URL: https://alcovecollaborative.com

First seen 2025-10-22 23:09
Last seen 2025-11-01 14:32
Open for 9 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /coupons
GET /coupons/hascoupon
GET /coupons/verify
GET /language
```
  Found on 2025-11-01 14:32
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 207.120.36.168
Domain: www.alcovecollaborative.com
Port: 443
URL: https://www.alcovecollaborative.com

First seen 2025-10-22 11:02
Last seen 2025-10-28 07:37
Open for 5 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /coupons
GET /coupons/hascoupon
GET /coupons/verify
GET /language
```
  Found on 2025-10-28 07:37
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 146.190.16.61
Domain: www.alcovecollaborative.com
Port: 443
URL: https://www.alcovecollaborative.com

First seen 2023-03-06 13:39
Last seen 2023-11-16 18:41
Open for 255 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d63a747c263a747c263a747c263a747c2
```
Found 1 files trough .DS_Store spidering:

/application
```
  Found on 2023-11-16 18:41
Create report

Open service 45.154.183.183:443 · alcovecollaborative.com

2025-12-30 05:11

HTTP/1.1 403 Forbidden
Date: Tue, 30 Dec 2025 05:11:40 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 55241380
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 296971a16b47ec9b77adafd73dceb529

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 207.120.36.168:443 · www.alcovecollaborative.com

2025-12-22 07:51

HTTP/1.1 403 Forbidden
Date: Mon, 22 Dec 2025 07:51:14 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 7465368
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: f2e59ade77dc7cc6197afd2f91c507c4

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 45.154.183.183:443 · alcovecollaborative.com

2025-12-22 06:10

HTTP/1.1 403 Forbidden
Date: Mon, 22 Dec 2025 06:10:00 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 22679175
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: fe4b8ab3f4ba24720a60438c99343bbd

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-22 by HttpPlugin