LeakIX - Host steelytoe.com

Domain steelytoe.com

Indonesia

INDO Internet, PT

Ubuntu

Software information

AmazonS3

tcp/443

CloudFront

tcp/80

OPNsense

tcp/8443

nginx nginx 1.18.0

tcp/443 tcp/80

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 202.159.30.243
Domain: payment.steelytoe.com
Port: 443
URL: https://payment.steelytoe.com

First seen 2024-12-20 02:07
Last seen 2026-01-03 21:23
Open for 379 days

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652277a767dd

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://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@github.com/eriklukiman/payment_gateway.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "amal"]
	remote = origin
	merge = refs/heads/amal
[branch "qr_va_endpoint"]
	remote = origin
	merge = refs/heads/qr_va_endpoint
[branch "production"]
	remote = origin
	merge = refs/heads/production

Found on 2026-01-03 21:23

460 Bytes

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224231597c

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://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@github.com/eriklukiman/payment_gateway.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "amal"]
	remote = origin
	merge = refs/heads/amal
[branch "qr_va_endpoint"]
	remote = origin
	merge = refs/heads/qr_va_endpoint

Found on 2025-07-22 07:46

390 Bytes

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652246072e05

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://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@github.com/eriklukiman/payment_gateway.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "amal"]
	remote = origin
	merge = refs/heads/amal
[branch "qr_va_endpoint"]
	remote = origin
	merge = refs/heads/qr_va_endpoint

Found on 2025-07-13 00:07

390 Bytes

Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65222f5990ed

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://culhan: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@github.com/eriklukiman/payment_gateway.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "amal"]
	remote = origin
	merge = refs/heads/amal
[branch "qr_va_endpoint"]
	remote = origin
	merge = refs/heads/qr_va_endpoint

Found on 2025-02-06 13:15

397 Bytes

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 202.159.30.243
Domain: payment.steelytoe.com
Port: 8443
URL: https://payment.steelytoe.com:8443

First seen 2025-10-14 01:46
Last seen 2026-01-09 10:54
Open for 87 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 10:54
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 139.162.39.188
Domain: www.steelytoe.com
Port: 443
URL: https://www.steelytoe.com

First seen 2022-07-08 03:58
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d8ff8060
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/steelytoe/www-steelytoe.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2022-07-08 03:58
  
  209 Bytes
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 202.159.30.243
Domain: sendgrid.webhooks.steelytoe.com
Port: 8443
URL: https://sendgrid.webhooks.steelytoe.com:8443

First seen 2025-10-13 21:16
Last seen 2026-01-12 14:48
Open for 90 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-12 14:48
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.32.99.75
Domain: steelytoe.com
Port: 443
URL: https://steelytoe.com

First seen 2025-10-30 09:38
Last seen 2026-01-02 14:29
Open for 64 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dda99fb9ada99fb9ada99fb9ada99fb9a
```
Found 1 files trough .DS_Store spidering:

/static
```
  Found on 2026-01-02 14:29
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 202.159.30.243
Domain: file.steelytoe.com
Port: 8443
URL: https://file.steelytoe.com:8443

First seen 2025-10-13 22:45
Last seen 2026-01-12 16:16
Open for 90 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-12 16:16
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 139.162.39.188
Domain: steelytoe.com
Port: 443
URL: https://steelytoe.com

First seen 2022-07-08 03:58
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d8ff8060
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/steelytoe/www-steelytoe.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2022-07-08 03:58
  
  209 Bytes
Create report

Open service 202.159.30.243:443 · payment.steelytoe.com

2026-01-12 21:17

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 12 Jan 2026 21:17:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding


{"status":{"error":true,"errorCode":404,"message":"Handler not found!"}}

Found 4 hours ago by HttpPlugin

Create report

Open service 202.159.30.243:443 · payment.steelytoe.com

2026-01-12 19:18

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 12 Jan 2026 19:18:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding


{"status":{"error":true,"errorCode":404,"message":"Handler not found!"}}

Found 6 hours ago by HttpPlugin

Create report

Open service 202.159.30.243:80 · payment.steelytoe.com

2026-01-12 19:18

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 12 Jan 2026 19:18:13 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 21 Apr 2020 14:09:01 GMT
Connection: close
ETag: "5e9efe7d-264"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found 6 hours ago by HttpPlugin

Create report

Open service 202.159.30.243:8443 · file.steelytoe.com

2026-01-12 16:16

HTTP/1.1 302 Found
location: http://file.steelytoe.com/manager
content-length: 0
date: Mon, 12 Jan 2026 16:16:58 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 9 hours ago by HttpPlugin

Create report

Open service 202.159.30.243:443 · file.steelytoe.com

2026-01-12 16:16

HTTP/1.1 403 Forbidden
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 12 Jan 2026 16:16:59 GMT
Content-Type: text/html
Content-Length: 162
Connection: close

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>nginx/1.24.0 (Ubuntu)</center>
</body>
</html>

Found 9 hours ago by HttpPlugin

Create report

Open service 202.159.30.243:80 · file.steelytoe.com

2026-01-12 16:16

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 12 Jan 2026 16:16:58 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 21 Apr 2020 14:09:01 GMT
Connection: close
ETag: "5e9efe7d-264"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found 9 hours ago by HttpPlugin

Create report

Open service 202.159.30.243:8443 · sendgrid.webhooks.steelytoe.com

2026-01-12 14:48

HTTP/1.1 302 Found
location: http://sendgrid.webhooks.steelytoe.com/manager
content-length: 0
date: Mon, 12 Jan 2026 14:48:08 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 11 hours ago by HttpPlugin

Create report

Open service 202.159.30.243:443 · sendgrid.webhooks.steelytoe.com

2026-01-12 14:48

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 12 Jan 2026 14:48:09 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 139
Connection: close
X-Powered-By: Express
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 11 hours ago by HttpPlugin

Create report

Open service 202.159.30.243:80 · sendgrid.webhooks.steelytoe.com

2026-01-12 14:48

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 12 Jan 2026 14:48:08 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 21 Apr 2020 14:09:01 GMT
Connection: close
ETag: "5e9efe7d-264"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found 11 hours ago by HttpPlugin

Create report

Open service 202.159.30.243:443 · payment.steelytoe.com

2026-01-11 21:22

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 11 Jan 2026 21:22:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding


{"status":{"error":true,"errorCode":404,"message":"Handler not found!"}}

Found one day ago by HttpPlugin

Create report

Open service 202.159.30.243:443 · payment.steelytoe.com

2026-01-10 21:21

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 10 Jan 2026 21:21:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding


{"status":{"error":true,"errorCode":404,"message":"Handler not found!"}}

Found 2 days ago by HttpPlugin

Create report

Open service 202.159.30.247:443 · api.steelytoe.com

2026-01-09 23:40

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 09 Jan 2026 23:40:45 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Range, Content-Disposition, Content-Type, Authorization
Access-Control-Allow-Methods: GET, PATCH, PUT, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 1000


{"status":{"error":{"message":"Request Not Found"}}}

Found 2026-01-09 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · file.steelytoe.com

2026-01-09 22:35

HTTP/1.1 302 Found
location: http://file.steelytoe.com/manager
content-length: 0
date: Fri, 09 Jan 2026 22:35:23 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2026-01-09 by HttpPlugin

Create report

Open service 202.159.30.243:443 · payment.steelytoe.com

2026-01-09 21:46

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 09 Jan 2026 21:46:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding


{"status":{"error":true,"errorCode":404,"message":"Handler not found!"}}

Found 2026-01-09 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · payment.steelytoe.com

2026-01-09 10:54

HTTP/1.1 302 Found
location: http://payment.steelytoe.com/manager
content-length: 0
date: Fri, 09 Jan 2026 10:54:32 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2026-01-09 by HttpPlugin