LeakIX - Host vault.dev.affinidi.com

Open service 18.66.192.87:80 · vault.dev.affinidi.com

2026-01-12 04:43

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 12 Jan 2026 04:43:53 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://vault.dev.affinidi.com/
X-Cache: Redirect from cloudfront
Via: 1.1 77aa8087323921dee0b130bc0589bda8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: OH4AEAV5LTCxWuwf1ShZZPp4ksRHQVosD_tQSocoqh4fjI6wkVaQhw==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' unpkg.com/@zxing/library@0.19.1 www.gstatic.com; connect-src 'self' d2oeuqaac90cm.cloudfront.net dev.api.vault.affinidi.com login.dev.affinidi.com login.affinidi.com apse1.dev.api.affinidi.io *.apse1.issuance.dev.affinidi.io aps1.dev.api.affinidi.io *.apse1.dev.login.affinidi.io schema.affinidi.com schema.affinidi.io affinidi-vault-backups-store-dev.s3.ap-southeast-1.amazonaws.com vault-file-system-dev-ap--cryptbucketaffinidibucke-w8ovxdkjzfoy.s3.ap-southeast-1.amazonaws.com fonts.gstatic.com worldtimeapi.org 0rk44wcb7e.execute-api.ap-southeast-1.amazonaws.com www.gstatic.com cognito-idp.ap-southeast-1.amazonaws.com o411936.ingest.us.sentry.io; img-src https: data: blob:; object-src 'none'; child-src 'self' acquisition-services.dev.affinidi.io; worker-src 'self' blob:; frame-ancestors login.dev.affinidi.com localhost; upgrade-insecure-requests
X-Content-Type-Options: nosniff
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: cross-origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2 days ago by HttpPlugin

Create report

Open service 18.66.192.44:443 · vault.dev.affinidi.com

2026-01-12 04:43

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 3441
Connection: close
Date: Sun, 11 Jan 2026 13:36:42 GMT
Last-Modified: Fri, 19 Dec 2025 10:00:17 GMT
ETag: "0d8f609d355ac607a531f6420e7fcc3f"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 eec5ede1fdb15ceb2352a4ebfb155362.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: lxGfmrb8OSIZ-MRO8gku0ULJuh7xO9bE-2uNM2waFGJRTODHxDKcug==
Age: 54432
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' unpkg.com/@zxing/library@0.19.1 www.gstatic.com; connect-src 'self' d2oeuqaac90cm.cloudfront.net dev.api.vault.affinidi.com login.dev.affinidi.com login.affinidi.com apse1.dev.api.affinidi.io *.apse1.issuance.dev.affinidi.io aps1.dev.api.affinidi.io *.apse1.dev.login.affinidi.io schema.affinidi.com schema.affinidi.io affinidi-vault-backups-store-dev.s3.ap-southeast-1.amazonaws.com vault-file-system-dev-ap--cryptbucketaffinidibucke-w8ovxdkjzfoy.s3.ap-southeast-1.amazonaws.com fonts.gstatic.com worldtimeapi.org 0rk44wcb7e.execute-api.ap-southeast-1.amazonaws.com www.gstatic.com cognito-idp.ap-southeast-1.amazonaws.com o411936.ingest.us.sentry.io; img-src https: data: blob:; object-src 'none'; child-src 'self' acquisition-services.dev.affinidi.io; worker-src 'self' blob:; frame-ancestors login.dev.affinidi.com localhost; upgrade-insecure-requests
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: cross-origin

Page title: Affinidi Vault

<!DOCTYPE html>
<html>

<head>
  <!--
    If you are serving your web app in a path other than the root, change the
    href value below to reflect the base path you are serving from.

    The path provided below has to start and end with a slash "/" in order for
    it to work correctly.

    For more details:
    * https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base

    This is a placeholder for base href that will be replaced by the value of
    the `--base-href` argument provided to `flutter build`.
  -->
  <base href="/">

  <meta charset="UTF-8">
  <meta content="IE=Edge" http-equiv="X-UA-Compatible">
  <meta name="description"
    content="Empowers you to discover, collect, store, share and monetise your data in a fragmented data world.">

  <!-- iOS meta tags & icons -->
  <meta name="apple-mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-status-bar-style" content="black">
  <meta name="apple-mobile-web-app-title" content="Affinidi Vault">
  <link rel="apple-touch-icon" href="icons/favicon-128x128.png">

  <!-- Favicon -->
  <link rel="icon" type="image/png" href="favicon.png" />

  <title>Affinidi Vault</title>
  <link rel="manifest" href="manifest.json">
  <script src="libs/@zxing/library@0.19.1/umd/index.min.js" defer></script>
  <script src="libs/@veriff/incontext-veriff.js" defer></script>

  <script>
    // The value below is injected by flutter build, do not touch.
    const serviceWorkerVersion = "1950902474";
  </script>
  <!-- This script adds the flutter initialization JS code -->
  <script src="flutter.js" defer></script>
  <script src="web_bundle.min.js" defer></script>
</head>

<body>
  <script>
    window.addEventListener('load', async (event) => {
      // Download main.dart.js

      if (!window.onServiceWorkerMessage) {
        // extra time to add onServiceWorkerMessage event
        await new Promise((resolve) => setTimeout(() => resolve(true), 200))
      }

      _flutter.loader.loadEntrypoint({
        serviceWorker: {
          serviceWorkerVersion: serviceWorkerVersion,
          serviceWorkerUrl: 'sw.js'
        },
        onEntrypointLoaded: (engineInitializer) => {
          engineInitializer.initializeEngine().then((appRunner) => {
            appRunner.runApp()
          })
        }
      })
    })

    navigator.serviceWorker?.addEventListener('message', (event) => window.onServiceWorkerMessage(event.data))

    window.waitForServiceWorker = async () => {
      return serviceWorkerRegistration = Boolean(await navigator.serviceWorker?.ready)
    }

    window.postServiceWorker = (input) => {
      return new Promise(async (resolve) => {
        const onMessageCallback = (event) => {
          if (event.data.type === input.type) {
            resolve(event.data.value)
            navigator.serviceWorker.removeEventListener('message', onMessageCallback);
          }
        }

        navigator.serviceWorker.addEventListener('message', onMessageCallback);

        const registration = await navigator.serviceWorker.ready
        registration.active.postMessage(input)
      })
    }

    setInterval(() => {
      navigator.serviceWorker.ready.then((registration) => {
        registration.active.postMessage({ type: 'keepAlive' })
      })
    }, 20000)
  </script>
  <script src="webAuthn.js" defer></script>
  <script src="image_loader.js" defer></script>
  <script src="idv.js" defer></script>
</body>

</html>

Found 2 days ago by HttpPlugin

Create report

Open service 18.66.192.61:443 · vault.dev.affinidi.com

2026-01-12 04:43

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 3441
Connection: close
Date: Sun, 11 Jan 2026 13:36:42 GMT
Last-Modified: Fri, 19 Dec 2025 10:00:17 GMT
ETag: "0d8f609d355ac607a531f6420e7fcc3f"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 3ddbbcaacc1ba68ddfab04ef45c3ca98.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: xG-kfUDd-2t6ztDG7M-2_Ran9lpi5T_RvcRE3435nuogvTiJ8bQMnQ==
Age: 54431
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' unpkg.com/@zxing/library@0.19.1 www.gstatic.com; connect-src 'self' d2oeuqaac90cm.cloudfront.net dev.api.vault.affinidi.com login.dev.affinidi.com login.affinidi.com apse1.dev.api.affinidi.io *.apse1.issuance.dev.affinidi.io aps1.dev.api.affinidi.io *.apse1.dev.login.affinidi.io schema.affinidi.com schema.affinidi.io affinidi-vault-backups-store-dev.s3.ap-southeast-1.amazonaws.com vault-file-system-dev-ap--cryptbucketaffinidibucke-w8ovxdkjzfoy.s3.ap-southeast-1.amazonaws.com fonts.gstatic.com worldtimeapi.org 0rk44wcb7e.execute-api.ap-southeast-1.amazonaws.com www.gstatic.com cognito-idp.ap-southeast-1.amazonaws.com o411936.ingest.us.sentry.io; img-src https: data: blob:; object-src 'none'; child-src 'self' acquisition-services.dev.affinidi.io; worker-src 'self' blob:; frame-ancestors login.dev.affinidi.com localhost; upgrade-insecure-requests
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: cross-origin

Page title: Affinidi Vault

<!DOCTYPE html>
<html>

<head>
  <!--
    If you are serving your web app in a path other than the root, change the
    href value below to reflect the base path you are serving from.

    The path provided below has to start and end with a slash "/" in order for
    it to work correctly.

    For more details:
    * https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base

    This is a placeholder for base href that will be replaced by the value of
    the `--base-href` argument provided to `flutter build`.
  -->
  <base href="/">

  <meta charset="UTF-8">
  <meta content="IE=Edge" http-equiv="X-UA-Compatible">
  <meta name="description"
    content="Empowers you to discover, collect, store, share and monetise your data in a fragmented data world.">

  <!-- iOS meta tags & icons -->
  <meta name="apple-mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-status-bar-style" content="black">
  <meta name="apple-mobile-web-app-title" content="Affinidi Vault">
  <link rel="apple-touch-icon" href="icons/favicon-128x128.png">

  <!-- Favicon -->
  <link rel="icon" type="image/png" href="favicon.png" />

  <title>Affinidi Vault</title>
  <link rel="manifest" href="manifest.json">
  <script src="libs/@zxing/library@0.19.1/umd/index.min.js" defer></script>
  <script src="libs/@veriff/incontext-veriff.js" defer></script>

  <script>
    // The value below is injected by flutter build, do not touch.
    const serviceWorkerVersion = "1950902474";
  </script>
  <!-- This script adds the flutter initialization JS code -->
  <script src="flutter.js" defer></script>
  <script src="web_bundle.min.js" defer></script>
</head>

<body>
  <script>
    window.addEventListener('load', async (event) => {
      // Download main.dart.js

      if (!window.onServiceWorkerMessage) {
        // extra time to add onServiceWorkerMessage event
        await new Promise((resolve) => setTimeout(() => resolve(true), 200))
      }

      _flutter.loader.loadEntrypoint({
        serviceWorker: {
          serviceWorkerVersion: serviceWorkerVersion,
          serviceWorkerUrl: 'sw.js'
        },
        onEntrypointLoaded: (engineInitializer) => {
          engineInitializer.initializeEngine().then((appRunner) => {
            appRunner.runApp()
          })
        }
      })
    })

    navigator.serviceWorker?.addEventListener('message', (event) => window.onServiceWorkerMessage(event.data))

    window.waitForServiceWorker = async () => {
      return serviceWorkerRegistration = Boolean(await navigator.serviceWorker?.ready)
    }

    window.postServiceWorker = (input) => {
      return new Promise(async (resolve) => {
        const onMessageCallback = (event) => {
          if (event.data.type === input.type) {
            resolve(event.data.value)
            navigator.serviceWorker.removeEventListener('message', onMessageCallback);
          }
        }

        navigator.serviceWorker.addEventListener('message', onMessageCallback);

        const registration = await navigator.serviceWorker.ready
        registration.active.postMessage(input)
      })
    }

    setInterval(() => {
      navigator.serviceWorker.ready.then((registration) => {
        registration.active.postMessage({ type: 'keepAlive' })
      })
    }, 20000)
  </script>
  <script src="webAuthn.js" defer></script>
  <script src="image_loader.js" defer></script>
  <script src="idv.js" defer></script>
</body>

</html>

Found 2 days ago by HttpPlugin

Create report

Open service 18.66.192.87:443 · vault.dev.affinidi.com

2026-01-12 04:43

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 3441
Connection: close
Date: Sun, 11 Jan 2026 13:36:42 GMT
Last-Modified: Fri, 19 Dec 2025 10:00:17 GMT
ETag: "0d8f609d355ac607a531f6420e7fcc3f"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 32700c539a5f821aadd3624288c4aeb6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 8nrbCooLSriJ0YtRRrcSor0PZOKHuN4LC8bV0OnT_l69ltit3ceiQQ==
Age: 54431
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' unpkg.com/@zxing/library@0.19.1 www.gstatic.com; connect-src 'self' d2oeuqaac90cm.cloudfront.net dev.api.vault.affinidi.com login.dev.affinidi.com login.affinidi.com apse1.dev.api.affinidi.io *.apse1.issuance.dev.affinidi.io aps1.dev.api.affinidi.io *.apse1.dev.login.affinidi.io schema.affinidi.com schema.affinidi.io affinidi-vault-backups-store-dev.s3.ap-southeast-1.amazonaws.com vault-file-system-dev-ap--cryptbucketaffinidibucke-w8ovxdkjzfoy.s3.ap-southeast-1.amazonaws.com fonts.gstatic.com worldtimeapi.org 0rk44wcb7e.execute-api.ap-southeast-1.amazonaws.com www.gstatic.com cognito-idp.ap-southeast-1.amazonaws.com o411936.ingest.us.sentry.io; img-src https: data: blob:; object-src 'none'; child-src 'self' acquisition-services.dev.affinidi.io; worker-src 'self' blob:; frame-ancestors login.dev.affinidi.com localhost; upgrade-insecure-requests
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: cross-origin

Page title: Affinidi Vault

<!DOCTYPE html>
<html>

<head>
  <!--
    If you are serving your web app in a path other than the root, change the
    href value below to reflect the base path you are serving from.

    The path provided below has to start and end with a slash "/" in order for
    it to work correctly.

    For more details:
    * https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base

    This is a placeholder for base href that will be replaced by the value of
    the `--base-href` argument provided to `flutter build`.
  -->
  <base href="/">

  <meta charset="UTF-8">
  <meta content="IE=Edge" http-equiv="X-UA-Compatible">
  <meta name="description"
    content="Empowers you to discover, collect, store, share and monetise your data in a fragmented data world.">

  <!-- iOS meta tags & icons -->
  <meta name="apple-mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-status-bar-style" content="black">
  <meta name="apple-mobile-web-app-title" content="Affinidi Vault">
  <link rel="apple-touch-icon" href="icons/favicon-128x128.png">

  <!-- Favicon -->
  <link rel="icon" type="image/png" href="favicon.png" />

  <title>Affinidi Vault</title>
  <link rel="manifest" href="manifest.json">
  <script src="libs/@zxing/library@0.19.1/umd/index.min.js" defer></script>
  <script src="libs/@veriff/incontext-veriff.js" defer></script>

  <script>
    // The value below is injected by flutter build, do not touch.
    const serviceWorkerVersion = "1950902474";
  </script>
  <!-- This script adds the flutter initialization JS code -->
  <script src="flutter.js" defer></script>
  <script src="web_bundle.min.js" defer></script>
</head>

<body>
  <script>
    window.addEventListener('load', async (event) => {
      // Download main.dart.js

      if (!window.onServiceWorkerMessage) {
        // extra time to add onServiceWorkerMessage event
        await new Promise((resolve) => setTimeout(() => resolve(true), 200))
      }

      _flutter.loader.loadEntrypoint({
        serviceWorker: {
          serviceWorkerVersion: serviceWorkerVersion,
          serviceWorkerUrl: 'sw.js'
        },
        onEntrypointLoaded: (engineInitializer) => {
          engineInitializer.initializeEngine().then((appRunner) => {
            appRunner.runApp()
          })
        }
      })
    })

    navigator.serviceWorker?.addEventListener('message', (event) => window.onServiceWorkerMessage(event.data))

    window.waitForServiceWorker = async () => {
      return serviceWorkerRegistration = Boolean(await navigator.serviceWorker?.ready)
    }

    window.postServiceWorker = (input) => {
      return new Promise(async (resolve) => {
        const onMessageCallback = (event) => {
          if (event.data.type === input.type) {
            resolve(event.data.value)
            navigator.serviceWorker.removeEventListener('message', onMessageCallback);
          }
        }

        navigator.serviceWorker.addEventListener('message', onMessageCallback);

        const registration = await navigator.serviceWorker.ready
        registration.active.postMessage(input)
      })
    }

    setInterval(() => {
      navigator.serviceWorker.ready.then((registration) => {
        registration.active.postMessage({ type: 'keepAlive' })
      })
    }, 20000)
  </script>
  <script src="webAuthn.js" defer></script>
  <script src="image_loader.js" defer></script>
  <script src="idv.js" defer></script>
</body>

</html>

Found 2 days ago by HttpPlugin

Create report

Open service 18.66.192.9:443 · vault.dev.affinidi.com

2026-01-12 04:43

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 3441
Connection: close
Date: Sun, 11 Jan 2026 13:36:42 GMT
Last-Modified: Fri, 19 Dec 2025 10:00:17 GMT
ETag: "0d8f609d355ac607a531f6420e7fcc3f"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 c3f546c2f6132a41e608317139aa8faa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: fI3omuEIUsmbBPANXs6iiqoBvUOG2q54bLlFXehfhxEtL9i2SuXfsg==
Age: 54431
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' unpkg.com/@zxing/library@0.19.1 www.gstatic.com; connect-src 'self' d2oeuqaac90cm.cloudfront.net dev.api.vault.affinidi.com login.dev.affinidi.com login.affinidi.com apse1.dev.api.affinidi.io *.apse1.issuance.dev.affinidi.io aps1.dev.api.affinidi.io *.apse1.dev.login.affinidi.io schema.affinidi.com schema.affinidi.io affinidi-vault-backups-store-dev.s3.ap-southeast-1.amazonaws.com vault-file-system-dev-ap--cryptbucketaffinidibucke-w8ovxdkjzfoy.s3.ap-southeast-1.amazonaws.com fonts.gstatic.com worldtimeapi.org 0rk44wcb7e.execute-api.ap-southeast-1.amazonaws.com www.gstatic.com cognito-idp.ap-southeast-1.amazonaws.com o411936.ingest.us.sentry.io; img-src https: data: blob:; object-src 'none'; child-src 'self' acquisition-services.dev.affinidi.io; worker-src 'self' blob:; frame-ancestors login.dev.affinidi.com localhost; upgrade-insecure-requests
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: cross-origin

Page title: Affinidi Vault

<!DOCTYPE html>
<html>

<head>
  <!--
    If you are serving your web app in a path other than the root, change the
    href value below to reflect the base path you are serving from.

    The path provided below has to start and end with a slash "/" in order for
    it to work correctly.

    For more details:
    * https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base

    This is a placeholder for base href that will be replaced by the value of
    the `--base-href` argument provided to `flutter build`.
  -->
  <base href="/">

  <meta charset="UTF-8">
  <meta content="IE=Edge" http-equiv="X-UA-Compatible">
  <meta name="description"
    content="Empowers you to discover, collect, store, share and monetise your data in a fragmented data world.">

  <!-- iOS meta tags & icons -->
  <meta name="apple-mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-status-bar-style" content="black">
  <meta name="apple-mobile-web-app-title" content="Affinidi Vault">
  <link rel="apple-touch-icon" href="icons/favicon-128x128.png">

  <!-- Favicon -->
  <link rel="icon" type="image/png" href="favicon.png" />

  <title>Affinidi Vault</title>
  <link rel="manifest" href="manifest.json">
  <script src="libs/@zxing/library@0.19.1/umd/index.min.js" defer></script>
  <script src="libs/@veriff/incontext-veriff.js" defer></script>

  <script>
    // The value below is injected by flutter build, do not touch.
    const serviceWorkerVersion = "1950902474";
  </script>
  <!-- This script adds the flutter initialization JS code -->
  <script src="flutter.js" defer></script>
  <script src="web_bundle.min.js" defer></script>
</head>

<body>
  <script>
    window.addEventListener('load', async (event) => {
      // Download main.dart.js

      if (!window.onServiceWorkerMessage) {
        // extra time to add onServiceWorkerMessage event
        await new Promise((resolve) => setTimeout(() => resolve(true), 200))
      }

      _flutter.loader.loadEntrypoint({
        serviceWorker: {
          serviceWorkerVersion: serviceWorkerVersion,
          serviceWorkerUrl: 'sw.js'
        },
        onEntrypointLoaded: (engineInitializer) => {
          engineInitializer.initializeEngine().then((appRunner) => {
            appRunner.runApp()
          })
        }
      })
    })

    navigator.serviceWorker?.addEventListener('message', (event) => window.onServiceWorkerMessage(event.data))

    window.waitForServiceWorker = async () => {
      return serviceWorkerRegistration = Boolean(await navigator.serviceWorker?.ready)
    }

    window.postServiceWorker = (input) => {
      return new Promise(async (resolve) => {
        const onMessageCallback = (event) => {
          if (event.data.type === input.type) {
            resolve(event.data.value)
            navigator.serviceWorker.removeEventListener('message', onMessageCallback);
          }
        }

        navigator.serviceWorker.addEventListener('message', onMessageCallback);

        const registration = await navigator.serviceWorker.ready
        registration.active.postMessage(input)
      })
    }

    setInterval(() => {
      navigator.serviceWorker.ready.then((registration) => {
        registration.active.postMessage({ type: 'keepAlive' })
      })
    }, 20000)
  </script>
  <script src="webAuthn.js" defer></script>
  <script src="image_loader.js" defer></script>
  <script src="idv.js" defer></script>
</body>

</html>

Found 2 days ago by HttpPlugin

Create report

Open service 18.66.192.9:80 · vault.dev.affinidi.com

2026-01-12 04:43

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 12 Jan 2026 04:43:52 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://vault.dev.affinidi.com/
X-Cache: Redirect from cloudfront
Via: 1.1 28e56b9ddced4ed414e75f87cbd0d976.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: crDvfq9x5UYgw360PL1dbUaKjT9TcTAzpWQzti964LB-JVK6WDBcqQ==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' unpkg.com/@zxing/library@0.19.1 www.gstatic.com; connect-src 'self' d2oeuqaac90cm.cloudfront.net dev.api.vault.affinidi.com login.dev.affinidi.com login.affinidi.com apse1.dev.api.affinidi.io *.apse1.issuance.dev.affinidi.io aps1.dev.api.affinidi.io *.apse1.dev.login.affinidi.io schema.affinidi.com schema.affinidi.io affinidi-vault-backups-store-dev.s3.ap-southeast-1.amazonaws.com vault-file-system-dev-ap--cryptbucketaffinidibucke-w8ovxdkjzfoy.s3.ap-southeast-1.amazonaws.com fonts.gstatic.com worldtimeapi.org 0rk44wcb7e.execute-api.ap-southeast-1.amazonaws.com www.gstatic.com cognito-idp.ap-southeast-1.amazonaws.com o411936.ingest.us.sentry.io; img-src https: data: blob:; object-src 'none'; child-src 'self' acquisition-services.dev.affinidi.io; worker-src 'self' blob:; frame-ancestors login.dev.affinidi.com localhost; upgrade-insecure-requests
X-Content-Type-Options: nosniff
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: cross-origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2 days ago by HttpPlugin

Create report

Open service 18.66.192.61:80 · vault.dev.affinidi.com

2026-01-12 04:43

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 12 Jan 2026 04:43:52 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://vault.dev.affinidi.com/
X-Cache: Redirect from cloudfront
Via: 1.1 8c1abfbb8460bed752668233d296dba8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: SkCYZGB6sA8GNNY3s-Q36rWp8MGh1r0o7_AzCbdkAuLdYWeiDD4Y4Q==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' unpkg.com/@zxing/library@0.19.1 www.gstatic.com; connect-src 'self' d2oeuqaac90cm.cloudfront.net dev.api.vault.affinidi.com login.dev.affinidi.com login.affinidi.com apse1.dev.api.affinidi.io *.apse1.issuance.dev.affinidi.io aps1.dev.api.affinidi.io *.apse1.dev.login.affinidi.io schema.affinidi.com schema.affinidi.io affinidi-vault-backups-store-dev.s3.ap-southeast-1.amazonaws.com vault-file-system-dev-ap--cryptbucketaffinidibucke-w8ovxdkjzfoy.s3.ap-southeast-1.amazonaws.com fonts.gstatic.com worldtimeapi.org 0rk44wcb7e.execute-api.ap-southeast-1.amazonaws.com www.gstatic.com cognito-idp.ap-southeast-1.amazonaws.com o411936.ingest.us.sentry.io; img-src https: data: blob:; object-src 'none'; child-src 'self' acquisition-services.dev.affinidi.io; worker-src 'self' blob:; frame-ancestors login.dev.affinidi.com localhost; upgrade-insecure-requests
X-Content-Type-Options: nosniff
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: cross-origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2 days ago by HttpPlugin

Create report

Open service 18.66.192.44:80 · vault.dev.affinidi.com

2026-01-12 04:43

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 12 Jan 2026 04:43:52 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://vault.dev.affinidi.com/
X-Cache: Redirect from cloudfront
Via: 1.1 3ddbbcaacc1ba68ddfab04ef45c3ca98.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: SPHfMIMnrDgAj6qlkA8ELH5vNYAtITKtsAoKw2TfWoYgm47Bbc4uAQ==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' unpkg.com/@zxing/library@0.19.1 www.gstatic.com; connect-src 'self' d2oeuqaac90cm.cloudfront.net dev.api.vault.affinidi.com login.dev.affinidi.com login.affinidi.com apse1.dev.api.affinidi.io *.apse1.issuance.dev.affinidi.io aps1.dev.api.affinidi.io *.apse1.dev.login.affinidi.io schema.affinidi.com schema.affinidi.io affinidi-vault-backups-store-dev.s3.ap-southeast-1.amazonaws.com vault-file-system-dev-ap--cryptbucketaffinidibucke-w8ovxdkjzfoy.s3.ap-southeast-1.amazonaws.com fonts.gstatic.com worldtimeapi.org 0rk44wcb7e.execute-api.ap-southeast-1.amazonaws.com www.gstatic.com cognito-idp.ap-southeast-1.amazonaws.com o411936.ingest.us.sentry.io; img-src https: data: blob:; object-src 'none'; child-src 'self' acquisition-services.dev.affinidi.io; worker-src 'self' blob:; frame-ancestors login.dev.affinidi.com localhost; upgrade-insecure-requests
X-Content-Type-Options: nosniff
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: cross-origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2 days ago by HttpPlugin

Domain vault.dev.affinidi.com

United States

Software information

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

vault.dev.affinidi.com

Domain summary

IP summary