LeakIX - Host getgifted.com

Domain getgifted.com

Ireland

GOOGLE-CLOUD-PLATFORM

Ubuntu

Software information

CloudFront

tcp/80

awselb awselb 2.0

tcp/443 tcp/80

cloudflare

tcp/443

nginx nginx 1.18.0

tcp/443

nginx nginx 1.26.2

tcp/443

nginx nginx 1.21.6

tcp/443

nginx nginx

tcp/443 tcp/80

openresty

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 16.16.228.120
Domain: harbor.int.getgifted.com
Port: 443
URL: https://harbor.int.getgifted.com

First seen 2025-11-29 04:18
Last seen 2026-01-09 08:10
Open for 41 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43340c51c6930c093d70a6a2f3e498b2bbb7725ef4

Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/labels/{label_id}
DELETE /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/tags/{tag_name}
GET /audit-logs
GET /configurations
GET /export/cve/download/{execution_id}
GET /export/cve/execution/{execution_id}
GET /export/cve/executions
GET /health
GET /icons/{digest}
GET /internalconfig
GET /jobservice/jobs/{job_id}/log
GET /jobservice/pools
GET /jobservice/pools/{pool_id}/workers
GET /jobservice/queues
GET /labels
GET /labels/{label_id}
GET /ldap/groups/search
GET /ldap/users/search
GET /p2p/preheat/instances
GET /p2p/preheat/instances/{preheat_instance_name}
GET /p2p/preheat/providers
GET /permissions
GET /ping
GET /projects
GET /projects/{project_name_or_id}
GET /projects/{project_name_or_id}/_deletable
GET /projects/{project_name_or_id}/artifacts
GET /projects/{project_name_or_id}/immutabletagrules
GET /projects/{project_name_or_id}/members
GET /projects/{project_name_or_id}/members/{mid}
GET /projects/{project_name_or_id}/metadatas/
GET /projects/{project_name_or_id}/metadatas/{meta_name}
GET /projects/{project_name_or_id}/robots
GET /projects/{project_name_or_id}/robots/{robot_id}
GET /projects/{project_name_or_id}/scanner
GET /projects/{project_name_or_id}/scanner/candidates
GET /projects/{project_name_or_id}/summary
GET /projects/{project_name_or_id}/webhook/events
GET /projects/{project_name_or_id}/webhook/jobs
GET /projects/{project_name_or_id}/webhook/lasttrigger
GET /projects/{project_name_or_id}/webhook/policies
GET /projects/{project_name_or_id}/webhook/policies/{webhook_policy_id}
GET /projects/{project_name_or_id}/webhook/policies/{webhook_policy_id}/executions
GET /projects/{project_name_or_id}/webhook/policies/{webhook_policy_id}/executions/{execution_id}/tasks
GET /projects/{project_name_or_id}/webhook/policies/{webhook_policy_id}/executions/{execution_id}/tasks/{task_id}/log
GET /projects/{project_name}/logs
GET /projects/{project_name}/preheat/policies
GET /projects/{project_name}/preheat/policies/{preheat_policy_name}
GET /projects/{project_name}/preheat/policies/{preheat_policy_name}/executions
GET /projects/{project_name}/preheat/policies/{preheat_policy_name}/executions/{execution_id}
GET /projects/{project_name}/preheat/policies/{preheat_policy_name}/executions/{execution_id}/tasks
GET /projects/{project_name}/preheat/policies/{preheat_policy_name}/executions/{execution_id}/tasks/{task_id}/logs
GET /projects/{project_name}/preheat/providers
GET /projects/{project_name}/repositories
GET /projects/{project_name}/repositories/{repository_name}
GET /projects/{project_name}/repositories/{repository_name}/artifacts
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/accessories
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/additions/vulnerabilities
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/additions/{addition}
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/scan/{report_id}/log
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/tags
GET /quotas
GET /quotas/{id}
GET /registries
GET /registries/{id}
GET /registries/{id}/info
GET /replication/adapterinfos
GET /replication/adapters
GET /replication/executions
GET /replication/executions/{id}
GET /replication/executions/{id}/tasks
GET /replication/executions/{id}/tasks/{task_id}/log
GET /replication/policies
GET /replication/policies/{id}
GET /repositories
GET /retentions/metadatas
GET /retentions/{id}
GET /retentions/{id}/executions
GET /retentions/{id}/executions/{eid}/tasks
GET /retentions/{id}/executions/{eid}/tasks/{tid}
GET /robots
GET /robots/{robot_id}
GET /scanners
GET /scanners/{registration_id}
GET /scanners/{registration_id}/metadata
GET /scans/all/metrics
GET /scans/schedule/metrics
GET /schedules
GET /schedules/{job_type}/paused
GET /search
GET /security/summary
GET /security/vul
GET /statistics
GET /system/CVEAllowlist
GET /system/gc
GET /system/gc/schedule
GET /system/gc/{gc_id}
GET /system/gc/{gc_id}/log
GET /system/purgeaudit
GET /system/purgeaudit/schedule
GET /system/purgeaudit/{purge_id}
GET /system/purgeaudit/{purge_id}/log
GET /system/scanAll/schedule
GET /systeminfo
GET /systeminfo/getcert
GET /systeminfo/volumes
GET /usergroups
GET /usergroups/search
GET /usergroups/{group_id}
GET /users
GET /users/current
GET /users/current/permissions
GET /users/search
GET /users/{user_id}
PATCH /retentions/{id}/executions/{eid}
POST /export/cve
POST /ldap/ping
POST /ldap/users/import
POST /p2p/preheat/instances/ping
POST /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/labels
POST /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/scan
POST /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/scan/stop
POST /registries/ping
POST /retentions
POST /scanners/ping
POST /system/oidc/ping
POST /system/scanAll/stop
PUT /jobservice/jobs/{job_id}
PUT /jobservice/queues/{job_type}
PUT /projects/{project_name_or_id}/immutabletagrules/{immutable_rule_id}
PUT /users/{user_id}/cli_secret
PUT /users/{user_id}/password
PUT /users/{user_id}/sysadmin

Found on 2026-01-09 08:10

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 3.250.49.248
Domain: getgifted.com
Port: 443
URL: https://getgifted.com/.git/config

First seen 2021-09-24 00:13
Last seen 2021-10-04 15:27
Open for 10 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbbd3c339ea
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = https://gitlab.com/antyra-tech/www-gifted-com.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "develop"]
	remote = origin
	merge = refs/heads/develop
[branch "dev-cpm"]
	remote = origin
	merge = refs/heads/dev-cpm
```
  Found on 2021-09-24 00:13
  
  440 Bytes
Create report

Open service 34.252.230.68:443 · prod-sales-module-4-0.prod2.getgifted.com

2026-01-12 21:26

HTTP/1.1 404 Not Found
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Content-Type: text/html; charset=utf-8
Date: Mon, 12 Jan 2026 21:27:57 GMT
Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding
X-Powered-By: Next.js
Connection: close
Transfer-Encoding: chunked


<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><link rel="stylesheet" href="/_next/static/css/1eb1a89553cbf0c4.css" data-precedence="next"/><link rel="preload" href="/_next/static/chunks/webpack-02dfe0f095df598b.js" as="script"/><link rel="preload" href="/_next/static/chunks/bce60fc1-a9db639c381f03f4.js" as="script"/><link rel="preload" href="/_next/static/chunks/7698-ef5444a4d84607f3.js" as="script"/><link rel="preload" href="/_next/static/chunks/main-app-66c6c2de284c0bee.js" as="script"/><meta name="robots" content="noindex"/><meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests"/><meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no"/><link rel="icon" href="/assets/icons/favicon.ico" sizes="any"/><meta name="viewport" content="width=device-width, initial-scale=1"/><script src="/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js" noModule=""></script></head><body><main><link rel="stylesheet" href="/_next/static/css/20ffd704cdd485b5.css"/><div class="nf-container MuiBox-root css-0"><div class="nf-wrapper MuiBox-root css-0"><img alt="card Image" loading="lazy" width="399" height="147" decoding="async" data-nimg="1" class="nf-img" style="color:transparent" src="/_next/static/media/404.fc6670c3.svg"/><style data-emotion="css 9l3uo3">.css-9l3uo3{margin:0;font-family:"Roboto","Helvetica","Arial",sans-serif;font-weight:400;font-size:1rem;line-height:1.5;letter-spacing:0.00938em;}</style><p class="MuiTypography-root MuiTypography-body1 nf-title css-9l3uo3">not-found-page.header</p><p class="MuiTypography-root MuiTypography-body1 nf-desc css-9l3uo3">not-found-page.try-again</p><p class="MuiTypography-root MuiTypography-body1 nf-desc css-9l3uo3">not-found-page.please-contact<!-- --> <a class="nf-link" href="https://support.getgifted.com/hc/en-us">not-found-page.customer-service</a></p><style data-emotion="css 1hpn8z5">.css-1hpn8z5{margin:0;font-family:"Roboto","Helvetica","Arial",sans-serif;font-weight:400;font-size:1rem;line-height:1.5;letter-spacing:0.00938em;margin-top:24px;}</style><p class="MuiTypography-root MuiTypography-body1 nf-desc css-1hpn8z5"></p></div></div><div class="redux-toastr animate__animated animate__delay-2s" aria-live="assertive"><div><div class="top-left"></div><div class="top-right"></div><div class="top-center"></div><div class="bottom-left"></div><div class="bottom-right"></div><div class="bottom-center"></div></div></div></main><script src="/_next/static/chunks/webpack-02dfe0f095df598b.js" async=""></script><script src="/_next/static/chunks/bce60fc1-a9db639c381f03f4.js" async=""></script><script src="/_next/static/chunks/7698-ef5444a4d84607f3.js" async=""></script><script src="/_next/static/chunks/main-app-66c6c2de284c0bee.js" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:HL[\"/_next/static/css/1eb1a89553cbf0c4.css\",{\"as\":\"style\"}]\n0:\"$L2\"\n"])</script><script>self.__next_f.push([1,"3:I{\"id\":2353,\"chunks\":[\"2272:static/chunks/webpack-02dfe0f095df598b.js\",\"9253:static/chunks/bce60fc1-a9db639c381f03f4.js\",\"7698:static/chunks/7698-ef5444a4d84607f3.js\"],\"name\":\"default\",\"async\":false}\n5:I{\"id\":43012,\"chunks\":[\"6673:static/chunks/6673-3cd2b5e8168212be.js\",\"6470:static/chunks/app/global-error-e961570d66d6b7b5.js\"],\"name\":\"\",\"async\":false}\n2:[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/css/1eb1a89553cbf0c4.css\",\"precedence\":\"next\"}]],[\"$\",\"$L3\",null,{\"buildId\":\"qYo6_JxCPW5fkYPf"])</script><script>self.__next_f.push([1,"EtULj\",\"assetPrefix\":\"\",\"initialCanonicalUrl\":\"/\",\"initialTree\":[\"\",{\"children\":[\"not-found\",{}]},\"$undefined\",\"$undefined\",true],\"initialHead\":[\"$L4\",null],\"globalErrorComponent\":\"$5\",\"notFound\":\"$L6\",\"asNotFound\":true,\"children\":[\"$L7\",null]}]]\n"])</script><script>self.__next_f.push([1,"8:I{\"id\":15557,\"chunks\":[\"4550:static/chunks/925f3d25-783f9f38cc865d95.js\",\"6673:static/chunks/6673-3cd2b5e8168212be.js\",\"688:static/chunks/688-64ded60

Found one day ago by HttpPlugin

Domain getgifted.com

Ireland

Software information

Swagger API description is publicly available

Git configuration and history exposed