AmazonS3
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea9dd0e5e9b7ca0a9ab63d0d9092febdc3f
Found 23 files trough .DS_Store spidering: /change-password.html /company /company/cross-loop /confirm-passcode.html /content /content/all.min.css /content/apexcharts.min.js /content/cover-14.jpg /content/index.core.js /content/index.css /content/index.js /content/mail /content/theme.min.css /googleabf1a51ac372eda6.html /index.html /js /register.html /robots.txt /settings.html /signin.html /signin_classic.html /users.html /verify.html
Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe058ed03a5c40f7ee8aea4a863111a0e9
Found 15 files trough .DS_Store spidering: /change-password.html /company /company/cross-loop /confirm-passcode.html /content /googleabf1a51ac372eda6.html /index.html /js /register.html /robots.txt /settings.html /signin.html /signin_classic.html /users.html /verify.html
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226bb0d0de
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true ignorecase = true precomposeunicode = true [remote "origin"] url = git@github.com:cross-loop/frontend.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 18.66.97.11:443 · console.cross-loop.io
2026-01-10 02:17
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1213
Connection: close
Date: Fri, 09 Jan 2026 02:25:55 GMT
Last-Modified: Wed, 23 Feb 2022 17:38:13 GMT
ETag: "0e1fdff07e3aad569e4383b8961eaf8a"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 985c0b2ec44bdebc7f24f26d1e427d30.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P2
X-Amz-Cf-Id: StlZQOQMS2ENCBF2d6zW-6V1NCxSHvOVOsqrvBVvGBN7NhJR2R-_tw==
Age: 85885
<!DOCTYPE html>
<html class="no-js" lang="">
<head>
<meta http-equiv="refresh" content="0; url=https://app.cross-loop.io" />
</head>
<body class="page-home">
<!-- The core Firebase JS SDK is always required and must be listed first -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-app.js"></script>
<!-- TODO: Add SDKs for Firebase products that you want to use
https://firebase.google.com/docs/web/setup#available-libraries -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-analytics.js"></script>
<script>
// Your web app's Firebase configuration
var firebaseConfig = {
apiKey: 'AIzaSyDMDYKfteCUMWzDDXeQeYMkrxJq9spbsq0',
authDomain: 'crooop-frontend.firebaseapp.com',
databaseURL: 'https://crooop-frontend.firebaseio.com',
projectId: 'crooop-frontend',
storageBucket: 'crooop-frontend.appspot.com',
messagingSenderId: '125978285032',
appId: '1:125978285032:web:5088a9952f4bbd518dca5d',
measurementId: 'G-EE08V2GCBV',
};
// Initialize Firebase
firebase.initializeApp(firebaseConfig);
firebase.analytics();
</script>
</body>
</html>
Open service 18.66.97.103:443 · console.cross-loop.io
2026-01-09 17:01
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1213
Connection: close
Last-Modified: Wed, 23 Feb 2022 17:38:13 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 09 Jan 2026 17:01:43 GMT
ETag: "0e1fdff07e3aad569e4383b8961eaf8a"
X-Cache: Error from cloudfront
Via: 1.1 6faa38f38a1fee24a829fec7c748876c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P2
X-Amz-Cf-Id: fq6dSuiwLs9PSSVGGggFKaMDaYceiKNjhNg7wGrc-xd5nc7bASxnwA==
Age: 52552
<!DOCTYPE html>
<html class="no-js" lang="">
<head>
<meta http-equiv="refresh" content="0; url=https://app.cross-loop.io" />
</head>
<body class="page-home">
<!-- The core Firebase JS SDK is always required and must be listed first -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-app.js"></script>
<!-- TODO: Add SDKs for Firebase products that you want to use
https://firebase.google.com/docs/web/setup#available-libraries -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-analytics.js"></script>
<script>
// Your web app's Firebase configuration
var firebaseConfig = {
apiKey: 'AIzaSyDMDYKfteCUMWzDDXeQeYMkrxJq9spbsq0',
authDomain: 'crooop-frontend.firebaseapp.com',
databaseURL: 'https://crooop-frontend.firebaseio.com',
projectId: 'crooop-frontend',
storageBucket: 'crooop-frontend.appspot.com',
messagingSenderId: '125978285032',
appId: '1:125978285032:web:5088a9952f4bbd518dca5d',
measurementId: 'G-EE08V2GCBV',
};
// Initialize Firebase
firebase.initializeApp(firebaseConfig);
firebase.analytics();
</script>
</body>
</html>
Open service 18.66.97.103:443 · console.cross-loop.io
2026-01-02 23:36
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1213
Connection: close
Date: Fri, 02 Jan 2026 23:36:05 GMT
Last-Modified: Wed, 23 Feb 2022 17:38:13 GMT
ETag: "0e1fdff07e3aad569e4383b8961eaf8a"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 e9101023ffbe04130b9d4cac0cf9eebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P2
X-Amz-Cf-Id: 2QMi9C8Z7HmNUBJIkxzELbQvy-DXGJJNo3eYjnh0bAiJIeIsG6vuMg==
Age: 1
<!DOCTYPE html>
<html class="no-js" lang="">
<head>
<meta http-equiv="refresh" content="0; url=https://app.cross-loop.io" />
</head>
<body class="page-home">
<!-- The core Firebase JS SDK is always required and must be listed first -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-app.js"></script>
<!-- TODO: Add SDKs for Firebase products that you want to use
https://firebase.google.com/docs/web/setup#available-libraries -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-analytics.js"></script>
<script>
// Your web app's Firebase configuration
var firebaseConfig = {
apiKey: 'AIzaSyDMDYKfteCUMWzDDXeQeYMkrxJq9spbsq0',
authDomain: 'crooop-frontend.firebaseapp.com',
databaseURL: 'https://crooop-frontend.firebaseio.com',
projectId: 'crooop-frontend',
storageBucket: 'crooop-frontend.appspot.com',
messagingSenderId: '125978285032',
appId: '1:125978285032:web:5088a9952f4bbd518dca5d',
measurementId: 'G-EE08V2GCBV',
};
// Initialize Firebase
firebase.initializeApp(firebaseConfig);
firebase.analytics();
</script>
</body>
</html>
Open service 18.66.97.11:443 · console.cross-loop.io
2026-01-02 07:21
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1213
Connection: close
Last-Modified: Wed, 23 Feb 2022 17:38:13 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 02 Jan 2026 07:21:46 GMT
ETag: "0e1fdff07e3aad569e4383b8961eaf8a"
X-Cache: Error from cloudfront
Via: 1.1 5d5481cfa85227a3fdd5ff0b03093c62.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P2
X-Amz-Cf-Id: 3ZenSseOpaOyALCPcyIpzQYCjnRONaF5-8yVlV_1jIoeROWJHtiG3w==
Age: 1
<!DOCTYPE html>
<html class="no-js" lang="">
<head>
<meta http-equiv="refresh" content="0; url=https://app.cross-loop.io" />
</head>
<body class="page-home">
<!-- The core Firebase JS SDK is always required and must be listed first -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-app.js"></script>
<!-- TODO: Add SDKs for Firebase products that you want to use
https://firebase.google.com/docs/web/setup#available-libraries -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-analytics.js"></script>
<script>
// Your web app's Firebase configuration
var firebaseConfig = {
apiKey: 'AIzaSyDMDYKfteCUMWzDDXeQeYMkrxJq9spbsq0',
authDomain: 'crooop-frontend.firebaseapp.com',
databaseURL: 'https://crooop-frontend.firebaseio.com',
projectId: 'crooop-frontend',
storageBucket: 'crooop-frontend.appspot.com',
messagingSenderId: '125978285032',
appId: '1:125978285032:web:5088a9952f4bbd518dca5d',
measurementId: 'G-EE08V2GCBV',
};
// Initialize Firebase
firebase.initializeApp(firebaseConfig);
firebase.analytics();
</script>
</body>
</html>
Open service 18.66.97.103:443 · console.cross-loop.io
2025-12-30 09:27
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1213
Connection: close
Last-Modified: Wed, 23 Feb 2022 17:38:13 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 30 Dec 2025 09:27:06 GMT
ETag: "0e1fdff07e3aad569e4383b8961eaf8a"
X-Cache: Error from cloudfront
Via: 1.1 9015971351bc982a04ee209a022bb1f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P2
X-Amz-Cf-Id: wiseE4Szcz3XN6emb8cpdTeQiUP6sv6caaNzB-nD9Tuv7E5VFrbABw==
Age: 1
<!DOCTYPE html>
<html class="no-js" lang="">
<head>
<meta http-equiv="refresh" content="0; url=https://app.cross-loop.io" />
</head>
<body class="page-home">
<!-- The core Firebase JS SDK is always required and must be listed first -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-app.js"></script>
<!-- TODO: Add SDKs for Firebase products that you want to use
https://firebase.google.com/docs/web/setup#available-libraries -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-analytics.js"></script>
<script>
// Your web app's Firebase configuration
var firebaseConfig = {
apiKey: 'AIzaSyDMDYKfteCUMWzDDXeQeYMkrxJq9spbsq0',
authDomain: 'crooop-frontend.firebaseapp.com',
databaseURL: 'https://crooop-frontend.firebaseio.com',
projectId: 'crooop-frontend',
storageBucket: 'crooop-frontend.appspot.com',
messagingSenderId: '125978285032',
appId: '1:125978285032:web:5088a9952f4bbd518dca5d',
measurementId: 'G-EE08V2GCBV',
};
// Initialize Firebase
firebase.initializeApp(firebaseConfig);
firebase.analytics();
</script>
</body>
</html>
Open service 18.66.97.103:443 · console.cross-loop.io
2025-12-23 01:23
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1213
Connection: close
Last-Modified: Wed, 23 Feb 2022 17:38:13 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 23 Dec 2025 00:25:59 GMT
ETag: "0e1fdff07e3aad569e4383b8961eaf8a"
X-Cache: Error from cloudfront
Via: 1.1 3a3c1dcacd115187f53f40028ae4bd24.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P2
X-Amz-Cf-Id: LPSlmvLMkq70Y8NNfH0v3e7uYl5rK4j1GgUrRy8UNfUhOA3tXwg6Qw==
Age: 3452
<!DOCTYPE html>
<html class="no-js" lang="">
<head>
<meta http-equiv="refresh" content="0; url=https://app.cross-loop.io" />
</head>
<body class="page-home">
<!-- The core Firebase JS SDK is always required and must be listed first -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-app.js"></script>
<!-- TODO: Add SDKs for Firebase products that you want to use
https://firebase.google.com/docs/web/setup#available-libraries -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-analytics.js"></script>
<script>
// Your web app's Firebase configuration
var firebaseConfig = {
apiKey: 'AIzaSyDMDYKfteCUMWzDDXeQeYMkrxJq9spbsq0',
authDomain: 'crooop-frontend.firebaseapp.com',
databaseURL: 'https://crooop-frontend.firebaseio.com',
projectId: 'crooop-frontend',
storageBucket: 'crooop-frontend.appspot.com',
messagingSenderId: '125978285032',
appId: '1:125978285032:web:5088a9952f4bbd518dca5d',
measurementId: 'G-EE08V2GCBV',
};
// Initialize Firebase
firebase.initializeApp(firebaseConfig);
firebase.analytics();
</script>
</body>
</html>
Open service 18.66.97.11:443 · console.cross-loop.io
2025-12-23 00:25
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1213
Connection: close
Last-Modified: Wed, 23 Feb 2022 17:38:13 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 23 Dec 2025 00:25:59 GMT
ETag: "0e1fdff07e3aad569e4383b8961eaf8a"
X-Cache: Error from cloudfront
Via: 1.1 03ffca0f67e3596b9a0c92342fe91598.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P2
X-Amz-Cf-Id: eZ7lwobZ3tHOoBDJ0pH0yjpyXeF_ZJEBNfs-0XkIkIxh8va7unabug==
Age: 1
<!DOCTYPE html>
<html class="no-js" lang="">
<head>
<meta http-equiv="refresh" content="0; url=https://app.cross-loop.io" />
</head>
<body class="page-home">
<!-- The core Firebase JS SDK is always required and must be listed first -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-app.js"></script>
<!-- TODO: Add SDKs for Firebase products that you want to use
https://firebase.google.com/docs/web/setup#available-libraries -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-analytics.js"></script>
<script>
// Your web app's Firebase configuration
var firebaseConfig = {
apiKey: 'AIzaSyDMDYKfteCUMWzDDXeQeYMkrxJq9spbsq0',
authDomain: 'crooop-frontend.firebaseapp.com',
databaseURL: 'https://crooop-frontend.firebaseio.com',
projectId: 'crooop-frontend',
storageBucket: 'crooop-frontend.appspot.com',
messagingSenderId: '125978285032',
appId: '1:125978285032:web:5088a9952f4bbd518dca5d',
measurementId: 'G-EE08V2GCBV',
};
// Initialize Firebase
firebase.initializeApp(firebaseConfig);
firebase.analytics();
</script>
</body>
</html>
Open service 18.66.97.11:443 · console.cross-loop.io
2025-12-21 09:09
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1213
Connection: close
Date: Sun, 21 Dec 2025 09:09:54 GMT
Last-Modified: Wed, 23 Feb 2022 17:38:13 GMT
ETag: "0e1fdff07e3aad569e4383b8961eaf8a"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 1f0db25765b79d244ad1fa2184395c12.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P2
X-Amz-Cf-Id: WfSxuKnTMt68RnRrU-57D0x4wtLPWGmErVd54H5dudr2xaXcrF0qmg==
<!DOCTYPE html>
<html class="no-js" lang="">
<head>
<meta http-equiv="refresh" content="0; url=https://app.cross-loop.io" />
</head>
<body class="page-home">
<!-- The core Firebase JS SDK is always required and must be listed first -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-app.js"></script>
<!-- TODO: Add SDKs for Firebase products that you want to use
https://firebase.google.com/docs/web/setup#available-libraries -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-analytics.js"></script>
<script>
// Your web app's Firebase configuration
var firebaseConfig = {
apiKey: 'AIzaSyDMDYKfteCUMWzDDXeQeYMkrxJq9spbsq0',
authDomain: 'crooop-frontend.firebaseapp.com',
databaseURL: 'https://crooop-frontend.firebaseio.com',
projectId: 'crooop-frontend',
storageBucket: 'crooop-frontend.appspot.com',
messagingSenderId: '125978285032',
appId: '1:125978285032:web:5088a9952f4bbd518dca5d',
measurementId: 'G-EE08V2GCBV',
};
// Initialize Firebase
firebase.initializeApp(firebaseConfig);
firebase.analytics();
</script>
</body>
</html>
Open service 18.66.97.103:443 · console.cross-loop.io
2025-12-21 07:21
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1213
Connection: close
Last-Modified: Wed, 23 Feb 2022 17:38:13 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 21 Dec 2025 07:21:48 GMT
ETag: "0e1fdff07e3aad569e4383b8961eaf8a"
X-Cache: Error from cloudfront
Via: 1.1 b9d2ce196c8a711fb15d92175d58476e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P2
X-Amz-Cf-Id: xUL7Ca1roy8CTsiyELFLPBfhUSM2oyujw6pRaDiYjXhZT0BVLVKcxQ==
Age: 1
<!DOCTYPE html>
<html class="no-js" lang="">
<head>
<meta http-equiv="refresh" content="0; url=https://app.cross-loop.io" />
</head>
<body class="page-home">
<!-- The core Firebase JS SDK is always required and must be listed first -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-app.js"></script>
<!-- TODO: Add SDKs for Firebase products that you want to use
https://firebase.google.com/docs/web/setup#available-libraries -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-analytics.js"></script>
<script>
// Your web app's Firebase configuration
var firebaseConfig = {
apiKey: 'AIzaSyDMDYKfteCUMWzDDXeQeYMkrxJq9spbsq0',
authDomain: 'crooop-frontend.firebaseapp.com',
databaseURL: 'https://crooop-frontend.firebaseio.com',
projectId: 'crooop-frontend',
storageBucket: 'crooop-frontend.appspot.com',
messagingSenderId: '125978285032',
appId: '1:125978285032:web:5088a9952f4bbd518dca5d',
measurementId: 'G-EE08V2GCBV',
};
// Initialize Firebase
firebase.initializeApp(firebaseConfig);
firebase.analytics();
</script>
</body>
</html>
Open service 18.66.97.11:443 · console.cross-loop.io
2025-12-19 11:20
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1213
Connection: close
Date: Thu, 18 Dec 2025 20:58:44 GMT
Last-Modified: Wed, 23 Feb 2022 17:38:13 GMT
ETag: "0e1fdff07e3aad569e4383b8961eaf8a"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 93b8205e2f07a7099af2e6fd126d9658.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P2
X-Amz-Cf-Id: bZFihbwRg5QZKhAP_Yc771r7w5iK5W1-wLeSuNZyquOYwKVXJojvrw==
Age: 51689
<!DOCTYPE html>
<html class="no-js" lang="">
<head>
<meta http-equiv="refresh" content="0; url=https://app.cross-loop.io" />
</head>
<body class="page-home">
<!-- The core Firebase JS SDK is always required and must be listed first -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-app.js"></script>
<!-- TODO: Add SDKs for Firebase products that you want to use
https://firebase.google.com/docs/web/setup#available-libraries -->
<script src="https://www.gstatic.com/firebasejs/7.16.0/firebase-analytics.js"></script>
<script>
// Your web app's Firebase configuration
var firebaseConfig = {
apiKey: 'AIzaSyDMDYKfteCUMWzDDXeQeYMkrxJq9spbsq0',
authDomain: 'crooop-frontend.firebaseapp.com',
databaseURL: 'https://crooop-frontend.firebaseio.com',
projectId: 'crooop-frontend',
storageBucket: 'crooop-frontend.appspot.com',
messagingSenderId: '125978285032',
appId: '1:125978285032:web:5088a9952f4bbd518dca5d',
measurementId: 'G-EE08V2GCBV',
};
// Initialize Firebase
firebase.initializeApp(firebaseConfig);
firebase.analytics();
</script>
</body>
</html>