LeakIX - Host groupbyinc.com

Domain groupbyinc.com

United States

GOOGLE-CLOUD-PLATFORM

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 151.101.65.161
Domain: groupbyinc.com
Port: 443
URL: https://groupbyinc.com

First seen 2021-08-08 06:02
Last seen 2021-08-17 09:23
Open for 9 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3af247253af24725baff4de56cecd837d77a8737ef082652
```
Found 9 files trough .DS_Store spidering:

/legacy
/legacy/includes
/legacy/libraries
/legacy/libraries/authorize
/legacy/libraries/authorize/lib
/legacy/libraries/authorize/lib/shared
/legacy/libraries/authorize/lib/ssl
/legacy/libraries/stripe
/Zesty
```
  Found on 2021-08-08 06:02
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f87725a0c88546edd562e8d86e2fc273fb6ea
```
Found 11 files trough .DS_Store spidering:

/legacy
/legacy/includes
/legacy/libraries
/legacy/libraries/authorize
/legacy/libraries/authorize/lib
/legacy/libraries/authorize/lib/shared
/legacy/libraries/authorize/lib/ssl
/legacy/libraries/stripe
/legacy/libraries/stripe/data
/legacy/libraries/stripe/Stripe
/Zesty
```
  Found on 2021-08-08 06:02
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.43.13
Domain: argocd-prod.groupbyinc.com
Port: 443
URL: https://argocd-prod.groupbyinc.com

First seen 2025-11-05 03:06
Last seen 2026-02-01 23:25
Open for 88 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43ebdcac21f171352b5e17e732a74f5e1043f063b3

Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /api/v1/account/{name}/token/{id}
DELETE /api/v1/applications/{name}/operation
DELETE /api/v1/projects/{project}/roles/{role}/token/{iat}
DELETE /api/v1/repocreds/{url}
GET /api/v1/account
GET /api/v1/account/can-i/{resource}/{action}/{subresource}
GET /api/v1/account/{name}
GET /api/v1/applications
GET /api/v1/applications/{applicationName}/managed-resources
GET /api/v1/applications/{applicationName}/resource-tree
GET /api/v1/applications/{name}
GET /api/v1/applications/{name}/events
GET /api/v1/applications/{name}/logs
GET /api/v1/applications/{name}/manifests
GET /api/v1/applications/{name}/pods/{podName}/logs
GET /api/v1/applications/{name}/resource
GET /api/v1/applications/{name}/resource/actions
GET /api/v1/applications/{name}/revisions/{revision}/metadata
GET /api/v1/applications/{name}/syncwindows
GET /api/v1/applicationsets
GET /api/v1/applicationsets/{name}
GET /api/v1/certificates
GET /api/v1/clusters
GET /api/v1/clusters/{id.value}
GET /api/v1/gpgkeys
GET /api/v1/gpgkeys/{keyID}
GET /api/v1/notifications/services
GET /api/v1/notifications/templates
GET /api/v1/notifications/triggers
GET /api/v1/projects
GET /api/v1/projects/{name}
GET /api/v1/projects/{name}/detailed
GET /api/v1/projects/{name}/events
GET /api/v1/projects/{name}/globalprojects
GET /api/v1/projects/{name}/syncwindows
GET /api/v1/repocreds
GET /api/v1/repositories
GET /api/v1/repositories/{repo}
GET /api/v1/repositories/{repo}/apps
GET /api/v1/repositories/{repo}/helmcharts
GET /api/v1/repositories/{repo}/refs
GET /api/v1/session/userinfo
GET /api/v1/settings
GET /api/v1/stream/applications
GET /api/v1/stream/applications/{applicationName}/resource-tree
GET /api/version
POST /api/v1/account/{name}/token
POST /api/v1/applications/manifestsWithFiles
POST /api/v1/applications/{name}/rollback
POST /api/v1/applications/{name}/sync
POST /api/v1/clusters/{id.value}/invalidate-cache
POST /api/v1/clusters/{id.value}/rotate-auth
POST /api/v1/projects/{project}/roles/{role}/token
POST /api/v1/repositories/{repo}/validate
POST /api/v1/repositories/{source.repoURL}/appdetails
POST /api/v1/session
PUT /api/v1/account/password
PUT /api/v1/applications/{application.metadata.name}
PUT /api/v1/applications/{name}/spec
PUT /api/v1/projects/{project.metadata.name}
PUT /api/v1/repocreds/{creds.url}
PUT /api/v1/repositories/{repo.repo}

Found on 2026-02-01 23:25

Create report

Open service 172.66.40.243:443 · groupbyinc.com

2026-01-22 18:37

HTTP/1.1 301 Moved Permanently
Date: Thu, 22 Jan 2026 18:37:38 GMT
Content-Length: 0
Connection: close
Location: https://www.groupbyinc.com/
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Jrn3lWmy%2BRvTyhcMdmJKfhgWsissAIPqj8WspTI5DcBVuVBAfae1YRrIP6BcQBxfRV7am8T%2BhzhXF7zXegGjpIDV79mOvN%2BIfFDR"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfEdge;dur=8,cfOrigin;dur=0
Server: cloudflare
CF-RAY: 9c2129ea9af99ba8-SIN
alt-svc: h3=":443"; ma=86400

Found 2026-01-22 by HttpPlugin

Domain groupbyinc.com

United States

Software information

MacOS file listing through .DS_Store file

Swagger API description is publicly available

groupbyinc.com*.groupbyinc.com

argocd-prod.groupbyinc.com

insights.groupbyinc.com

www.groupbyinc.com

3d-demo.groupbyinc.com

documentation.groupbyinc.com

argocd-prod.groupbyinc.com

sftp.groupbyinc.com

Domain summary

IP summary