LeakIX - Host open-api.zapfloorhq.com

Domain open-api.zapfloorhq.com

United States

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.26.8.73
Domain: open-api.zapfloorhq.com
Port: 443
URL: https://open-api.zapfloorhq.com

First seen 2022-09-10 11:10
Last seen 2023-03-12 02:29
Open for 182 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3af247253af24725c32cdade4d7a486820b470e15da8dfaf
```
Found 9 files trough .DS_Store spidering:

/images
/images/long
/images/medium
/images/original
/images/square
/images/thumb
/imports
/system
/uploads
```
  Found on 2023-03-12 02:29
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392ab2102d61cd0dc9e1a24af98d39a47248e
```
Found 7 files trough .DS_Store spidering:

/images
/images/long
/images/medium
/images/original
/images/square
/images/thumb
/imports
```
  Found on 2022-09-10 11:10
Create report

Open service 2606:4700:20::681a:849:8443 · open-api.zapfloorhq.com

2026-01-05 01:59
Found 2026-01-05 by HttpPlugin
Create report

Open service 2606:4700:20::681a:949:80 · open-api.zapfloorhq.com

2026-01-05 01:59

HTTP/1.1 301 Moved Permanently
Date: Mon, 05 Jan 2026 01:59:30 GMT
Content-Length: 0
Connection: close
Location: https://open-api.zapfloorhq.com/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qDM2mIFm6ySD0p7YmdbfZuq4uUCHY6wk6KED7o6QkSEztI3m1GiFVp90KbjzISs4AC2H8KUIvzcRldW3rq8NTmYM20%2FDOsXs%2BKACQM6jKHWZuxskNeJm%2F%2FPyRmpNkn8%2B7w%3D%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfEdge;dur=14,cfOrigin;dur=0
Server: cloudflare
CF-RAY: 9b8f606ddd11ab5b-SIN
alt-svc: h3=":443"; ma=86400

Found 2026-01-05 by HttpPlugin

Create report

Open service 2606:4700:20::ac43:47cb:8443 · open-api.zapfloorhq.com

2026-01-05 01:59
Found 2026-01-05 by HttpPlugin
Create report
Open service 104.26.8.73:8443 · open-api.zapfloorhq.com

2026-01-05 01:59
Found 2026-01-05 by HttpPlugin
Create report

Open service 2606:4700:20::ac43:47cb:443 · open-api.zapfloorhq.com

2026-01-05 01:59

HTTP/1.1 302 Found
Date: Mon, 05 Jan 2026 01:59:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache
location: https://open-api.zapfloorhq.com/api-docs/index.html
nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
report-to: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=kv%2BLnahIuO7NxnCOmW29WQPJM2m8rKP9TeNwhlU3YcA%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767578370"}],"max_age":3600}
reporting-endpoints: heroku-nel="https://nel.heroku.com/reports?s=kv%2BLnahIuO7NxnCOmW29WQPJM2m8rKP9TeNwhlU3YcA%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767578370"
Server: cloudflare
strict-transport-security: max-age=15552000
vary: Origin
via: 2.0 heroku-router
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-request-id: 2faa5bf3-c673-e2a8-3047-eede2adb5e9e
x-runtime: 0.007214
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=23,cfOrigin;dur=194
CF-RAY: 9b8f606ddb57427f-EWR
alt-svc: h3=":443"; ma=86400

Found 2026-01-05 by HttpPlugin

Create report

Open service 104.26.9.73:80 · open-api.zapfloorhq.com

2026-01-05 01:59

HTTP/1.1 301 Moved Permanently
Date: Mon, 05 Jan 2026 01:59:29 GMT
Content-Length: 0
Connection: close
Location: https://open-api.zapfloorhq.com/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=155wpwqCk%2FRbWZ9BIZgUHFGA59N4ugquVKM4ITJ8j7VTsJB%2FRlIbJ8MoIT4%2B9VjIm6tfRxPYIpP0eBf5HHczDh3%2FNc8sp7G0uqqwMyOG58Lcxi1SvLxe"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9b8f606c4ba420c8-LHR
alt-svc: h3=":443"; ma=86400

Found 2026-01-05 by HttpPlugin

Create report

Open service 2606:4700:20::ac43:47cb:80 · open-api.zapfloorhq.com

2026-01-05 01:59

HTTP/1.1 301 Moved Permanently
Date: Mon, 05 Jan 2026 01:59:29 GMT
Content-Length: 0
Connection: close
Location: https://open-api.zapfloorhq.com/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=64USsZI45teHdB5u1vCNnXaMj7GmYO32P3iji8S7UPAVE7Psj%2BEA110h4jqAzGwbWDutsUQLQNHF2T7VipehiGDsWxXEybIZvwBhchw6hikkrxnnBOLiDmcZFNpg9dZe8Ph1"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9b8f606c3904e5e0-AMS
alt-svc: h3=":443"; ma=86400

Found 2026-01-05 by HttpPlugin

Create report

Open service 2606:4700:20::681a:849:443 · open-api.zapfloorhq.com

2026-01-05 01:59

HTTP/1.1 302 Found
Date: Mon, 05 Jan 2026 01:59:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache
location: https://open-api.zapfloorhq.com/api-docs/index.html
nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
report-to: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=kv%2BLnahIuO7NxnCOmW29WQPJM2m8rKP9TeNwhlU3YcA%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767578370"}],"max_age":3600}
reporting-endpoints: heroku-nel="https://nel.heroku.com/reports?s=kv%2BLnahIuO7NxnCOmW29WQPJM2m8rKP9TeNwhlU3YcA%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767578370"
Server: cloudflare
strict-transport-security: max-age=15552000
vary: Origin
via: 2.0 heroku-router
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-request-id: 263d8bc2-098f-43b1-c08c-7548601a0acf
x-runtime: 0.006269
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
CF-RAY: 9b8f606cb8396334-LHR
alt-svc: h3=":443"; ma=86400

Found 2026-01-05 by HttpPlugin

Create report

Open service 172.67.71.203:8443 · open-api.zapfloorhq.com

2026-01-05 01:59
Found 2026-01-05 by HttpPlugin
Create report

Open service 2606:4700:20::681a:849:80 · open-api.zapfloorhq.com

2026-01-05 01:59

HTTP/1.1 301 Moved Permanently
Date: Mon, 05 Jan 2026 01:59:29 GMT
Content-Length: 0
Connection: close
Location: https://open-api.zapfloorhq.com/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=UmKsicskhg4zfrMEkgjXecT52vqb2PBBq1%2BXo6A29bbSlto3mW26Pov1v8yCoahGM2K%2FC4Fv2w7y4Th%2BpE1pm9hIsUA08a0g1pNPHecX9z1HxLYiFNk%2FCvqjrVdHur924gAW"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfEdge;dur=14,cfOrigin;dur=0
Server: cloudflare
CF-RAY: 9b8f606bcdbe94e3-YYZ
alt-svc: h3=":443"; ma=86400

Found 2026-01-05 by HttpPlugin

Create report

Open service 172.67.71.203:443 · open-api.zapfloorhq.com

2026-01-05 01:59

HTTP/1.1 302 Found
Date: Mon, 05 Jan 2026 01:59:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache
location: https://open-api.zapfloorhq.com/api-docs/index.html
nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
report-to: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=kv%2BLnahIuO7NxnCOmW29WQPJM2m8rKP9TeNwhlU3YcA%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767578370"}],"max_age":3600}
reporting-endpoints: heroku-nel="https://nel.heroku.com/reports?s=kv%2BLnahIuO7NxnCOmW29WQPJM2m8rKP9TeNwhlU3YcA%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767578370"
Server: cloudflare
strict-transport-security: max-age=15552000
vary: Origin
via: 2.0 heroku-router
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-request-id: 92409745-4749-2dba-4d37-609aab794eb3
x-runtime: 0.004391
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=20,cfOrigin;dur=193
CF-RAY: 9b8f606d2ebebdbc-EWR
alt-svc: h3=":443"; ma=86400

Found 2026-01-05 by HttpPlugin

Create report

Open service 104.26.8.73:80 · open-api.zapfloorhq.com

2026-01-05 01:59

HTTP/1.1 301 Moved Permanently
Date: Mon, 05 Jan 2026 01:59:29 GMT
Content-Length: 0
Connection: close
Location: https://open-api.zapfloorhq.com/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=5YLFIqyGfHy6DWJFz5eEsfajDxtreJu3848ZTkscI5mT3f%2FERmS%2FI%2FINKlKyN%2BvN4rHrFBYrWfbiXYEy%2F%2B9f3mpyW1Ng%2FGzl9H5NbfSlzSVbLdYwCQmn"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9b8f606bbe0bdbfe-FRA
alt-svc: h3=":443"; ma=86400

Found 2026-01-05 by HttpPlugin

Create report

Open service 104.26.9.73:443 · open-api.zapfloorhq.com

2026-01-05 01:59

HTTP/1.1 302 Found
Date: Mon, 05 Jan 2026 01:59:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache
location: https://open-api.zapfloorhq.com/api-docs/index.html
nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
report-to: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=kv%2BLnahIuO7NxnCOmW29WQPJM2m8rKP9TeNwhlU3YcA%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767578370"}],"max_age":3600}
reporting-endpoints: heroku-nel="https://nel.heroku.com/reports?s=kv%2BLnahIuO7NxnCOmW29WQPJM2m8rKP9TeNwhlU3YcA%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767578370"
Server: cloudflare
strict-transport-security: max-age=15552000
vary: Origin
via: 2.0 heroku-router
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-request-id: 0d9e050d-e574-c2d9-1137-845d3de46505
x-runtime: 0.006356
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
CF-RAY: 9b8f606c3d4bdc9e-FRA
alt-svc: h3=":443"; ma=86400

Found 2026-01-05 by HttpPlugin

Create report

Open service 2606:4700:20::681a:949:443 · open-api.zapfloorhq.com

2026-01-05 01:59

HTTP/1.1 302 Found
Date: Mon, 05 Jan 2026 01:59:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache
location: https://open-api.zapfloorhq.com/api-docs/index.html
nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
report-to: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=kv%2BLnahIuO7NxnCOmW29WQPJM2m8rKP9TeNwhlU3YcA%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767578370"}],"max_age":3600}
reporting-endpoints: heroku-nel="https://nel.heroku.com/reports?s=kv%2BLnahIuO7NxnCOmW29WQPJM2m8rKP9TeNwhlU3YcA%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767578370"
Server: cloudflare
strict-transport-security: max-age=15552000
vary: Origin
via: 2.0 heroku-router
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-request-id: 50d78871-5112-f329-ecc8-e07e08f0f76e
x-runtime: 0.018371
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
CF-RAY: 9b8f606c2bf8928d-FRA
alt-svc: h3=":443"; ma=86400

Found 2026-01-05 by HttpPlugin

Create report

Open service 104.26.8.73:443 · open-api.zapfloorhq.com

2026-01-05 01:59

HTTP/1.1 302 Found
Date: Mon, 05 Jan 2026 01:59:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache
location: https://open-api.zapfloorhq.com/api-docs/index.html
nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
report-to: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=kv%2BLnahIuO7NxnCOmW29WQPJM2m8rKP9TeNwhlU3YcA%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767578370"}],"max_age":3600}
reporting-endpoints: heroku-nel="https://nel.heroku.com/reports?s=kv%2BLnahIuO7NxnCOmW29WQPJM2m8rKP9TeNwhlU3YcA%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767578370"
Server: cloudflare
strict-transport-security: max-age=15552000
vary: Origin
via: 2.0 heroku-router
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-request-id: ed969fd5-af46-451f-926c-89f539110df0
x-runtime: 0.005330
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=19,cfOrigin;dur=234
CF-RAY: 9b8f606d3d22ebb8-YYZ
alt-svc: h3=":443"; ma=86400

Found 2026-01-05 by HttpPlugin

Create report

Open service 2606:4700:20::681a:949:8443 · open-api.zapfloorhq.com

2026-01-05 01:59
Found 2026-01-05 by HttpPlugin
Create report

Open service 172.67.71.203:80 · open-api.zapfloorhq.com

2026-01-05 01:59

HTTP/1.1 301 Moved Permanently
Date: Mon, 05 Jan 2026 01:59:29 GMT
Content-Length: 0
Connection: close
Location: https://open-api.zapfloorhq.com/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=JRVCEjH57M9P1k%2Bhzz1hvSjSxdL9B5jWvnvk%2BkT5HSEHEb1ELMtk5qGM7S%2BcBeiVGpSLtSx895AELdX3ROWalEnQZbnLYbEoBcaMcyzcEiNVhRinL8PL"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9b8f606b68fc1e6e-FRA
alt-svc: h3=":443"; ma=86400

Found 2026-01-05 by HttpPlugin

Create report

zapfloorhq.com*.zapfloorhq.com

Fingerprint:

0300c56a80293a5e0fd2cbf6e71a407d64f0179956fc7bfb724ad092d688abbc

CN:

zapfloorhq.com

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-11-24 04:49

Not after:

2026-02-22 05:47

Domain summary

open-api.zapfloorhq.com 18

1 recorded

IP summary

2606:4700:20::681a:849 1 2606:4700:20::681a:949 1 2606:4700:20::ac43:47cb 1 104.26.8.73 1 104.26.9.73 1 172.67.71.203 1

6 recorded

Domain open-api.zapfloorhq.com

United States

Software information

MacOS file listing through .DS_Store file

zapfloorhq.com*.zapfloorhq.com

Domain summary

IP summary