LeakIX - Host huxmay.com

Domain huxmay.com

United States

SQUIXA PTY LIMITED

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 45.154.183.183
Domain: huxmay.com
Port: 443
URL: https://huxmay.com

First seen 2023-09-13 21:00
Last seen 2023-11-12 20:02
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d63a747c263a747c263a747c263a747c2
```
Found 1 files trough .DS_Store spidering:

/application
```
  Found on 2023-11-12 20:02
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 207.120.36.139
Domain: www.huxmay.com
Port: 443
URL: https://www.huxmay.com

First seen 2025-11-01 17:27
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /coupons
GET /coupons/hascoupon
GET /coupons/verify
GET /language
```
  Found on 2025-11-01 17:27
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 45.154.183.183
Domain: huxmay.com
Port: 443
URL: https://huxmay.com

First seen 2025-11-01 16:56
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /coupons
GET /coupons/hascoupon
GET /coupons/verify
GET /language
```
  Found on 2025-11-01 16:56
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 206.189.107.139
Domain: www.huxmay.com
Port: 443
URL: https://www.huxmay.com

First seen 2023-09-13 21:00
Last seen 2023-11-12 20:02
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d63a747c263a747c263a747c263a747c2
```
Found 1 files trough .DS_Store spidering:

/application
```
  Found on 2023-11-12 20:02
Create report

Open service 207.120.36.138:80 · www.huxmay.com

2025-12-31 16:32

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:32:05 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 13731161
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 80352baa7ff341546228ae29cdfe0efa

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 207.120.36.140:80 · www.huxmay.com

2025-12-31 16:32

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:32:05 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 13540762
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 3d591d60541cd045daa1be4f0c58b411

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 207.120.36.134:443 · www.huxmay.com

2025-12-31 16:32

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:32:03 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 13361731
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 034ce7be37d530d96129b23be948bdb3

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 207.120.36.138:443 · www.huxmay.com

2025-12-31 16:32

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:32:02 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 14364577
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 33a29a9290d695f1cf1b9a62a91ff7a9

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 207.120.36.140:443 · www.huxmay.com

2025-12-31 16:32

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:32:02 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 14364589
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 5ac1f099ec168c45d9a78d60b20f682e

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 207.120.36.136:80 · www.huxmay.com

2025-12-31 16:32

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:32:02 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 13919054
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 1d0a98465a465e4a695756b2ac047369

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 207.120.36.134:80 · www.huxmay.com

2025-12-31 16:32

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:32:02 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 12975643
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 819931e032af79f88961ce9cda30c78a

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 207.120.36.173:443 · www.huxmay.com

2025-12-31 16:32

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:32:02 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 13919058
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: d77d3a3f46a80804cc9cbf213d6523a6

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 207.120.36.136:443 · www.huxmay.com

2025-12-31 16:32

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:32:02 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 13763750
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 091b0d16003c16450b5dbc40c12749db

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 207.120.36.166:80 · www.huxmay.com

2025-12-31 16:32

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:32:02 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 14364573
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 4a3ddd8bd1f32bf8ea12e19a6838978e

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 207.120.36.166:443 · www.huxmay.com

2025-12-31 16:32

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:32:02 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 12939318
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 12a1c7cf99da84f8c31144cbb8035c32

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 207.120.36.168:80 · www.huxmay.com

2025-12-31 16:32

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:32:02 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 14364583
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 59c4031479c1c6ce8fdb61785574b637

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 207.120.36.170:443 · www.huxmay.com

2025-12-31 16:32

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:32:02 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 13289850
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 7d3bfcdc470fe51b366f7fc3a63cb843

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 207.120.36.173:80 · www.huxmay.com

2025-12-31 16:32

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:32:02 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 13424698
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: fb54035be548186f10aaa1c8873d28a3

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 207.120.36.168:443 · www.huxmay.com

2025-12-31 16:32

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:32:02 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 14141936
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 7e532710f495f16748f69cf40ce37fab

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 207.120.36.170:80 · www.huxmay.com

2025-12-31 16:32

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:32:02 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 13424696
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: decf6d23c5b1a66f543c609099c52c51

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 45.154.183.183:80 · huxmay.com

2025-12-31 16:02

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:02:41 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 49717335
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: c59dd5a952d7ffe60f39ece0ea2fe98c

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 45.154.183.183:443 · huxmay.com

2025-12-31 16:02

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 16:02:41 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 50045134
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: a0374b137d31c72554f912b047e09273

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 45.154.183.183:443 · huxmay.com

2025-12-30 06:08

HTTP/1.1 403 Forbidden
Date: Tue, 30 Dec 2025 06:08:27 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 45367319
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: fcf90fb97508ade76c9bc1fadfa5fa7f

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 207.120.36.139:443 · www.huxmay.com

2025-12-30 05:11

HTTP/1.1 403 Forbidden
Date: Tue, 30 Dec 2025 05:11:38 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 13189958
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 28ef3a7e83b737ceae96a4d6d5fc4e60

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 45.154.183.183:443 · huxmay.com

2025-12-22 06:43

HTTP/1.1 403 Forbidden
Date: Mon, 22 Dec 2025 06:43:40 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 17004350
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: b518dabee7d59d9fa1e41ace5b3e7b06

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 207.120.36.139:443 · www.huxmay.com

2025-12-22 06:09

HTTP/1.1 403 Forbidden
Date: Mon, 22 Dec 2025 06:09:58 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 8620191
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 4ff6142bb501a79c165b1f53749d8fe3

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 45.154.183.183:443 · huxmay.com

2025-12-20 07:17

HTTP/1.1 403 Forbidden
Date: Sat, 20 Dec 2025 07:17:20 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 21473355
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: e7ab00090f64c73515623b3a1656446a

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

Open service 207.120.36.139:443 · www.huxmay.com

2025-12-20 06:42

HTTP/1.1 403 Forbidden
Date: Sat, 20 Dec 2025 06:42:02 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 2547251
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 61904c6baf1cd50ec065d9943f36d012

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

www.huxmay.com

Fingerprint:

b2bb58b28dc46b6979963bc99e67370f95be8d4d686e02d172b85b2864172d14

CN:

www.huxmay.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-11-01 16:27

Not after:

2026-01-30 16:27

huxmay.com

Fingerprint:

52469513ca61d1a76d4683e0b69bcfbc73899c399be41e1dde78d0b16a9aadc8

CN:

huxmay.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-01 15:57

Not after:

2026-01-30 15:57

Domain summary

www.huxmay.com 20 huxmay.com 6

2 recorded

IP summary

45.154.183.183 2 207.120.36.138 1 207.120.36.140 1 207.120.36.134 1 207.120.36.136 1 207.120.36.173 1 207.120.36.166 1 207.120.36.168 1 207.120.36.170 1 207.120.36.139 1 206.189.107.139 1

11 recorded

Domain huxmay.com

United States

MacOS file listing through .DS_Store file

Swagger API description is publicly available

Swagger API description is publicly available

MacOS file listing through .DS_Store file

www.huxmay.com

huxmay.com

Domain summary

IP summary