Domain tumpedduck.com
United States
-
MacOS file listing through .DS_Store file
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
First seen 2023-08-30 14:11
Last seen 2023-11-06 07:51
Open for 67 days-
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d63a747c263a747c263a747c263a747c2Found 1 files trough .DS_Store spidering: /application
Found on 2023-11-06 07:51
-
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-10-18 10:50
Last seen 2025-11-01 08:21
Open for 13 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9Public Swagger UI/API detected at path: /swagger.json - sample paths: GET /coupons GET /coupons/hascoupon GET /coupons/verify GET /language
Found on 2025-11-01 08:21
-
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-10-18 11:02
Last seen 2025-10-24 10:29
Open for 5 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9Public Swagger UI/API detected at path: /swagger.json - sample paths: GET /coupons GET /coupons/hascoupon GET /coupons/verify GET /language
Found on 2025-10-24 10:29
-
-
Open service 45.154.183.183:443 · tumpedduck.com
2025-12-30 06:34
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 06:34:40 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 56650443 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: e85f75280739cde4da2d5aaaea59af59 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Found 2025-12-30 by HttpPluginCreate report
-
Open service 45.154.183.183:443 · tumpedduck.com
2025-12-22 07:43
HTTP/1.1 403 Forbidden Date: Mon, 22 Dec 2025 07:43:56 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 61408567 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 41c459fef6352c87bbb689404f4c6dbc Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 207.120.36.168:443 · www.tumpedduck.com
2025-12-22 06:09
HTTP/1.1 403 Forbidden Date: Mon, 22 Dec 2025 06:09:03 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 8887018 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 258cf38c8efa9851b3b1fb519f669308 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 45.154.183.183:443 · tumpedduck.com
2025-12-20 08:10
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 08:10:15 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 3277925 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 7ddc22c8e874d8b0885e4844e9b3ed6e Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Found 2025-12-20 by HttpPluginCreate report
-
Open service 207.120.36.168:443 · www.tumpedduck.com
2025-12-20 06:40
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 06:40:57 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 2932732 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: cf4bd89b13104d01199082f66628de50 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Found 2025-12-20 by HttpPluginCreate report
-
Open service 45.154.183.183:80 · tumpedduck.com
2025-12-19 04:47
HTTP/1.1 403 Forbidden Date: Fri, 19 Dec 2025 04:47:10 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 16288462 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 97aba2082d328e3c7500d920a2694318 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 45.154.183.183:443 · tumpedduck.com
2025-12-19 04:47
HTTP/1.1 403 Forbidden Date: Fri, 19 Dec 2025 04:47:08 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 16288451 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 50e202eeb688c79297b02b5b37c3bd42 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report