LeakIX - Host app.animetics.com.au

Domain app.animetics.com.au

United States

AMAZON-AES

Software information

Heroku

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.205.36.100
Domain: app.animetics.com.au
Port: 443
URL: https://app.animetics.com.au

First seen 2023-03-13 07:05
Last seen 2025-12-30 06:38
Open for 1022 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c3005b7223005b72213f694dc26d707a879a8b352a0634fb2

Found 77 files trough .DS_Store spidering:

/1.sample_upload.csv
/3.results_upload.csv
/404.html
/422.html
/500.html
/alert.svg
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/arrow.svg
/assets
/back.svg
/bankinfo.svg
/bird.jpg
/Cards.svg
/ceertificate.svg
/certificate-bg.png
/certificate_bg.png
/certificate_footer.png
/certificate_footer_two.png
/circle_1.svg
/circle_2.svg
/circle_3.svg
/client.svg
/collection.svg
/copy.svg
/cross.svg
/dna.svg
/dna_link.svg
/down.svg
/download.svg
/downloadf.svg
/edit.svg
/empty_bird.jpg
/envelope.svg
/export.svg
/favicon.ico
/favicons
/file.svg
/filepresent.svg
/fuel.svg
/google.svg
/info.svg
/info_circle.svg
/info_colored.svg
/loading.svg
/Logo.png
/Logo_D.png
/logout.svg
/map.svg
/mo.svg
/nab.png
/order.svg
/ordersuccess.svg
/os.svg
/packs
/parrot.jpg
/pay.svg
/pdf_footer.png
/phone.svg
/plus.svg
/plusCircle.svg
/ps.svg
/ps1.svg
/robots.txt
/sample.svg
/setting.svg
/settingdark.svg
/ss.svg
/step_line.svg
/store.svg
/track.svg
/transaction.svg
/upload.svg
/user.svg
/vdot.svg
/warning.svg
/xero.svg

Found on 2025-12-30 06:38

Severity: medium
Fingerprint: 5f32cf5d6962f09c5d6424645d642464955eeea21c9ee792fc24a2c0d87be899

Found 79 files trough .DS_Store spidering:

/1.sample_upload.csv
/3.results_upload.csv
/404.html
/422.html
/500.html
/alert.svg
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/arrow.svg
/assets
/back.svg
/bankinfo.svg
/bird.jpg
/Cards.svg
/ceertificate.svg
/certificate-bg.png
/certificate_bg.png
/certificate_footer.png
/certificate_footer_two.png
/circle_1.svg
/circle_2.svg
/circle_3.svg
/client.svg
/collection.svg
/copy.svg
/cross.svg
/dna.svg
/dna_link.svg
/down.svg
/download.svg
/downloadf.svg
/edit.svg
/empty_bird.jpg
/envelope.svg
/excelfile.xlsx
/export.svg
/favicon.ico
/favicons
/file.svg
/filepresent.svg
/fuel.svg
/google.svg
/info.svg
/info_circle.svg
/info_colored.svg
/loading.svg
/Logo.png
/Logo_D.png
/logout.svg
/lu3901w65.tmp
/map.svg
/mo.svg
/nab.png
/order.svg
/ordersuccess.svg
/os.svg
/packs
/parrot.jpg
/pay.svg
/pdf_footer.png
/phone.svg
/plus.svg
/plusCircle.svg
/ps.svg
/ps1.svg
/robots.txt
/sample.svg
/setting.svg
/settingdark.svg
/ss.svg
/step_line.svg
/store.svg
/track.svg
/transaction.svg
/upload.svg
/user.svg
/vdot.svg
/warning.svg
/xero.svg

Found on 2024-03-21 15:29

Create report

Open service 13.248.132.87:443 · app.animetics.com.au

2026-01-10 01:04

HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Type: text/html; charset=utf-8
Etag: W/"6cd56d921f8b1d3c62c7a9fe8c4ddfed"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=7L4Ck79fRirjdXq1y9lERh4iSOHNYvOGZcNQSsUJ1cU%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1768007093"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=7L4Ck79fRirjdXq1y9lERh4iSOHNYvOGZcNQSsUJ1cU%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1768007093"
Server: Heroku
Set-Cookie: _my_app_session=a3c47e8f195df9847c9b435a7341a93f; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=31536000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 57f312e0-2af0-c19f-f4e6-4f97a3929ce4
X-Runtime: 0.024717
X-Xss-Protection: 1; mode=block
Date: Sat, 10 Jan 2026 01:04:53 GMT
Connection: close
Transfer-Encoding: chunked

Page title: Animetics

<!DOCTYPE html>
<html lang="en">
  <head>
    <title>Animetics</title>
    <!-- Meta Tags -->
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
    <meta name="description" content="Animetics">
    <meta name="author" content="System Plus">
    <meta name="robots" content="index,follow">
    
    <meta name="csrf-param" content="authenticity_token" />
<meta name="csrf-token" content="8SgW6mNpAy2ypbNN7QGiM3CBVu/Yy5YVcKVB4KuKhaKXSBXfy7W8NQ0Y+cW9hjo+oZql3d9y9PvUecnEnRCWWQ==" />
    
    
    <!-- Favicons -->
    <link rel="apple-touch-icon" href="/favicons/apple-touch-icon.png" sizes="180x180">
    <link rel="icon" href="/favicons/favicon-32x32.png" sizes="32x32" type="image/png">
    <link rel="icon" href="/favicons/favicon-16x16.png" sizes="16x16" type="image/png">
    <link rel="manifest" href="/favicons/site.webmanifest">
    <link rel="mask-icon" href="/favicons/safari-pinned-tab.svg" color="#E10045">
    <link rel="icon" href="/favicons/favicon.ico">
    <meta name="msapplication-config" content="/favicons/browserconfig.xml">
    <meta name="theme-color" content="#E10045">

    <script src="/packs/js/application-4430dd4ddfa8040b39df.js" data-turbolinks-track="reload"></script>
    <script src="https://js.stripe.com/v3/"></script>
    <!-- JavaScript Bundle with Popper -->
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.1/dist/js/bootstrap.bundle.min.js" integrity="sha384-u1OknCvxWvY5kfmNBILK2hRnQC3Pr17a+RTT6rIHI7NnikvbZlHgTPOOmMi466C8" crossorigin="anonymous"></script>

    <!-- sweetalert2 -->
    <script src="https://cdnjs.cloudflare.com/ajax/libs/limonte-sweetalert2/11.4.34/sweetalert2.min.js" integrity="sha512-5nFKfJyu0Zs7sl9v+skSwjHkePWguVrf4yOdwz+3IcvdbLF+4sQKOrU2aLqISATLkM0SAkJzhD5E9I9oPYhweg==" crossorigin="anonymous" referrerpolicy="no-referrer"></script>
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/limonte-sweetalert2/11.4.34/sweetalert2.min.css" integrity="sha512-doewDSLNwoD1ZCdA1D1LXbbdNlI4uZv7vICMrzxfshHmzzyFNhajLEgH/uigrbOi8ETIftUGBkyLnbyDOU5rpA==" crossorigin="anonymous" referrerpolicy="no-referrer" />
    <script type='text/javascript'>
      window.smartlook||(function(d) {
      var o=smartlook=function(){ o.api.push(arguments)},h=d.getElementsByTagName('head')[0];
      var c=d.createElement('script');o.api=new Array();c.async=true;c.type='text/javascript';
      c.charset='utf-8';c.src='https://web-sdk.smartlook.com/recorder.js';h.appendChild(c);
      })(document);
      smartlook('init', '74d8b0658c08e6f2bbc5098b66a6e5e64fe77e8e', { region: 'eu' });
      smartlook('record', { forms: true, numbers: true, emails: true });
    </script>

  </head>

  <body class="sb-nav-fixed">

    <!-- <p class="notice"></p>
    <p class="alert"></p> -->

    <div class="modal fade" id="ProfileUpdate" aria-labelledby="ProfileUpdateLabel" data-bs-backdrop="static" data-bs-keyboard="false" tabindex="-1" aria-hidden="true">
      <div class="modal-dialog mw-420">
        <div class="modal-content">
          <div class="modal-body">
          </div>
        </div>
      </div>
    </div>
    <div class="container-xl py-5">
  <div class="welcome-box mx-auto mb-4">
    <div class="d-flex align-items-center justify-content-between">
      <h5 class="h5"> <img src="/Hand.svg" alt="Hand.svg" class="me-2 mb-2"> Welcome Back!</h5>
      <img src="/cross.svg" alt="cross.svg" role="button" class="cursor-pointer" onclick="welcomeCross()">
    </div>
    <h5 class="lh-24 ps-40">Welcome to our new online ordering system. If you had an account on our previous system, you’ll need to register again.
      To access your information on the previous system, please contact us on
      <a href="mailto: info@animetics.com.au" class="text-secondary">info@animetics.com.au</a></h5>
  </div>
  <div class="devise-card-width mx-auto">
    <a href="https://animetics.com.au">
      <img src="/Logo.png" alt="Logo.png" class="d-block mx-auto mb-5">
    </a>
    <div class="card card-box-shadow">
      <div class="card-body p-sm-5 px-3 py