LeakIX - Host 13.248.132.87

Host 13.248.132.87

United States

AMAZON-AES

Software information

Cowboy

tcp/443

Heroku

tcp/443 tcp/80

heroku-router

tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: app.carcort.com
Port: 80
URL: http://app.carcort.com

First seen 2025-11-13 00:53
Last seen 2026-01-12 04:14
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-12 04:14
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: app.carcort.com
Port: 443
URL: https://app.carcort.com

First seen 2025-11-13 00:53
Last seen 2026-01-12 04:14
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-12 04:14
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: dfromr.quixi.com
Port: 443
URL: https://dfromr.quixi.com

First seen 2025-11-13 00:03
Last seen 2026-01-12 03:35
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-12 03:35
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: lcs-il-ilf.quixi.com
Port: 443
URL: https://lcs-il-ilf.quixi.com

First seen 2025-11-12 03:23
Last seen 2026-01-12 02:14
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-12 02:14
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.nardoinc.com
Port: 80
URL: http://api.nardoinc.com

First seen 2025-11-12 02:44
Last seen 2026-01-12 01:35
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-12 01:35
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: www.api.webmakr.io
Port: 443
URL: https://www.api.webmakr.io

First seen 2025-11-12 00:53
Last seen 2026-01-11 03:38
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-11 03:38
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: app.kudibot.com
Port: 443
URL: https://app.kudibot.com

First seen 2025-11-12 00:22
Last seen 2026-01-11 03:09
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-11 03:09
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: app.kudibot.com
Port: 80
URL: http://app.kudibot.com

First seen 2025-11-12 00:22
Last seen 2026-01-11 03:09
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-11 03:09
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: www.kudibot.com
Port: 80
URL: http://www.kudibot.com

First seen 2025-11-12 00:22
Last seen 2026-01-11 03:09
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-11 03:09
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: lcs-il.quixi.com
Port: 443
URL: https://lcs-il.quixi.com

First seen 2025-11-11 03:06
Last seen 2026-01-11 01:59
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-11 01:59
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: demo.quixi-staging.com
Port: 443
URL: https://demo.quixi-staging.com

First seen 2025-11-11 01:46
Last seen 2026-01-11 00:39
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-11 00:39
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: lcs-corporate.quixi.com
Port: 443
URL: https://lcs-corporate.quixi.com

First seen 2025-11-11 01:06
Last seen 2026-01-11 00:07
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-11 00:07
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: bayshire.quixi.com
Port: 443
URL: https://bayshire.quixi.com

First seen 2025-11-11 00:57
Last seen 2026-01-10 02:14
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-10 02:14
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: jkv-il.quixi.com
Port: 443
URL: https://jkv-il.quixi.com

First seen 2025-11-11 00:36
Last seen 2026-01-10 01:54
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-10 01:54
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.marketplace.terrasos.co
Port: 80
URL: http://api.marketplace.terrasos.co

First seen 2025-11-03 01:18
Last seen 2026-01-10 01:52
Open for 68 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd110b5863ca04e28ac7fbad5047fbad5047fbad5047fbad504
```
Public Swagger UI/API detected at path: /api-docs/swagger.json - sample paths:
GET /data/v2/iri-gen
GET /data/v2/metadata-graph/{iri}
```
  Found on 2026-01-10 01:52
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: demo.quixi.com
Port: 443
URL: https://demo.quixi.com

First seen 2025-11-11 00:16
Last seen 2026-01-10 01:45
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-10 01:45
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: carnivalshot.hallofgoats.com
Port: 443
URL: https://carnivalshot.hallofgoats.com

First seen 2025-11-25 01:24
Last seen 2026-01-10 01:02
Open for 45 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-10 01:02
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: www.expertale.com
Port: 443
URL: https://www.expertale.com

First seen 2025-11-22 02:25
Last seen 2026-01-10 00:03
Open for 48 days

Severity: info
Fingerprint: 5733ddf49ff49cd18553ecf73d93c32e464c5158c07c8e2faff4981790a2841c

Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
DELETE /comment/{id}
DELETE /file/delete
DELETE /job/{id}
DELETE /job/{id}/remove-assignment
DELETE /job/{id}/user-job/remove
DELETE /notifications/{id}
DELETE /pr/prof/section/{sectionId}
DELETE /pr/prof/section/{sectionId}/sub/{subSectionId}
DELETE /pr/prof/{id}
DELETE /pr/us/delete/{id}
DELETE /schedule/{id}
GET /comment/{postId}
GET /error
GET /events/all
GET /file/list
GET /file/{filename}
GET /group
GET /group/{id}
GET /job
GET /job/bulk
GET /job/user-jobs
GET /job/user-jobs/latest
GET /job/user-jobs/recommended
GET /job/user-myjobs
GET /job/{id}/user-job
GET /msg/all
GET /msg/sent/{fromId}
GET /msg/sentto/{fromId}/{toId}
GET /notifications
GET /post
GET /post/mine
GET /post/{id}
GET /pr/bal
GET /pr/cashouts/accreq/{destCur}
GET /pr/cashouts/currency
GET /pr/cashouts/currency/{cur}
GET /pr/cashouts/validators/iban/{iban}
GET /pr/jc/all
GET /pr/jc/cat/all
GET /pr/jc/cat/{id}
GET /pr/jc/cnt/all
GET /pr/jc/cod/all/{type}
GET /pr/jc/curr/all
GET /pr/jc/lng/all
GET /pr/jc/sta/all/{CountryCodeAlpha2}
GET /pr/jc/{id}
GET /pr/prof/bio/{userId}
GET /pr/prof/info
GET /pr/prof/info/{id}
GET /pr/prof/occupation
GET /pr/prof/occupation/{userId}
GET /pr/profile-billings
GET /pr/us/all
GET /pr/us/allto/{id}
GET /pr/us/curruser
GET /pr/us/curruser/{id}
GET /pr/us/email
GET /pr/us/email/f
GET /pr/us/find-by-id/{id}
GET /pr/us/getone/{id}
GET /pr/us/profile/{id}
GET /pr/us/user_list
GET /pu/util/admin/users
GET /pu/util/int
GET /pu/util/int/default
GET /pu/util/int/{local}
GET /pu/util/locale
GET /pu/util/management/reports
GET /pu/util/welcome
GET /pu/util/welcomejson
GET /relation/confirmations
GET /relation/detail
GET /schedule
GET /schedule/mine
GET /welcome
GET /welcomeauth
POST /authenticate
POST /comment
POST /file/profile-picture
POST /file/upload
POST /group/bulk
POST /group/{memberId}/insert-in-groups
POST /job/offer/{id}/decline
POST /job/offer/{id}/proceed
POST /job/{id}/accept
POST /job/{id}/apply
POST /job/{id}/assign/{userId}
POST /job/{id}/close
POST /job/{id}/deliver
POST /job/{id}/issues
POST /job/{id}/start
POST /job/{id}/terminate
POST /job/{id}/update
POST /job/{id}/update-progress/{progress}
POST /job/{id}/{file}/deliver
POST /msg/create
POST /post/{id}/add-view
POST /post/{id}/update-visibility
POST /pr/cashouts/accounts
POST /pr/cashouts/quotes
POST /pr/cashouts/tq
POST /pr/cashouts/transfer
POST /pr/pay/add
POST /pr/prof/aboutbio
POST /pr/prof/cnt
POST /pr/prof/education
POST /pr/prof/fre-gigs
POST /pr/prof/ginfo
POST /pr/prof/languages
POST /pr/prof/pricing
POST /pr/prof/skills
POST /pr/prof/web
POST /pr/prof/working-info
POST /pr/us/acc
POST /pr/us/create
POST /pr/us/find-by-ids
POST /pr/us/get-members
POST /pr/us/update
POST /pr/us/user_info
POST /pu/authenticate
POST /pu/util/contactus
POST /pu/util/forgetpswd
POST /pu/util/json
POST /pu/util/resetpswd
POST /relation/approve/{followerId}
POST /relation/block/{followerId}
POST /relation/disapprove/{followerId}
POST /relation/favourite/{memberId}
POST /relation/follow/{memberId}
POST /relation/mute/{followingId}
POST /relation/remove-confirmation/{followingId}
POST /relation/remove-favourite/{memberId}
POST /relation/remove/{followerId}
POST /relation/unblock/{followerId}
POST /relation/unfollow/{memberId}
POST /relation/unmute/{followingId}
POST /schedule/update
PUT /group/{id}/insert-member/{memberId}
PUT /group/{id}/remove-member/{memberId}
PUT /group/{id}/rename
PUT /post/{id}/incrementShareCounter
PUT /post/{id}/updateLikeCounter/{increment}

Found on 2026-01-10 00:03

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: www.app.airbo-staging.com
Port: 443
URL: https://www.app.airbo-staging.com

First seen 2025-11-14 03:24
Last seen 2026-01-09 23:50
Open for 56 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 23:50
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.regen.network
Port: 80
URL: http://api.regen.network

First seen 2025-11-24 01:16
Last seen 2026-01-09 23:17
Open for 46 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd110b5863ca04e28ac7fbad5047fbad5047fbad5047fbad504
```
Public Swagger UI/API detected at path: /api-docs/swagger.json - sample paths:
GET /data/v2/iri-gen
GET /data/v2/metadata-graph/{iri}
```
  Found on 2026-01-09 23:17
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: control.sfhaccess.com
Port: 80
URL: http://control.sfhaccess.com

First seen 2025-11-27 01:08
Last seen 2026-01-09 23:16
Open for 43 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 23:16
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: staging-api.hubble.social
Port: 443
URL: https://staging-api.hubble.social

First seen 2025-11-30 00:01
Last seen 2026-01-09 22:38
Open for 40 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035495f03597d7108e3f4814e5429a89cb990725aba70

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /sessions/test-delete-calendar-event/{eventId}
DELETE /wishlist-lists/{id}
DELETE /wishlist-lists/{id}/expert/{expertProfileId}
GET /advisor-plan
GET /advisor-plan/check-subscription-status/{setupIntentId}
GET /advisor-plan/complete-subscription/{setupIntentId}
GET /advisor-plan/learner-subscriptions
GET /advisor-plan/subscribers
GET /asset/{assetId}
GET /asset/{assetId}/info
GET /experts
GET /experts-category
GET /experts/by-categories/random
GET /experts/by-category/{categoryName}/random
GET /experts/categories/counts
GET /experts/emerging-topics
GET /experts/inactive-transfers
GET /experts/landing
GET /experts/metrics/{expertId}
GET /experts/referrals/dashboard
GET /experts/referrals/my-link
GET /experts/restricted-countries
GET /experts/search
GET /experts/{username}/related
GET /experts/{username}/reviews
GET /healthz
GET /oauth/google-calendar
GET /oauth/google-calendar/done
GET /payments/onboarding/{expertId}/{country}
GET /payments/payment-intent/{paymentIntentId}
GET /payments/stripe-account-status
GET /payments/verify-payment-intent/{paymentIntentId}
GET /payments/verify-setup-intent/{setupIntentId}
GET /referral/{username}
GET /retrospective
GET /search
GET /search/autocomplete
GET /sessions/expert-username/{username}/reviews
GET /sessions/expert/{expertId}/reviews
GET /sessions/past
GET /sessions/upcoming
GET /sessions/user/reviews
GET /sessions/{sessionId}/reviews
GET /users/availability/{username}
GET /users/calendar-events
GET /users/calendar-preferences
GET /users/expert-profile/{username}
GET /users/me
GET /users/payment-info
GET /users/timezone
GET /users/{username}/availability-slots
GET /users/{username}/available-days
GET /users/{username}/available-time-slots-for-date
GET /wishlist-lists
GET /wishlist-lists/{id}/items
PATCH /advisor-plan/cancel-subscription/{subscriptionId}
PATCH /payments/update-stripe-connection-status
PATCH /sessions/{sessionId}/post-booking
PATCH /users
PATCH /users/availability
PATCH /users/marketplace/disable
POST /advisor-plan/create
POST /asset/upload
POST /auth/clerk
POST /communications/contact-form
POST /communications/newsletter-signup
POST /internal/send-slack-message
POST /payments/confirm-subscription-payment
POST /payments/create-payment-intent
POST /payments/create-setup-intent
POST /payments/webhooks
POST /payments/webhooks/connect
POST /referral/{username}/apply
POST /retrospective/download
POST /retrospective/download-test
POST /sessions/expert-review
POST /sessions/get-session-participants
POST /sessions/resolve-bulk-participant-emails
POST /sessions/resolve-participant-email
POST /sessions/review
POST /sessions/test-calendar-event
POST /sessions/test-reschedule
POST /sessions/{sessionId}/request-reschedule
POST /sessions/{sessionId}/reschedule
POST /sessions/{sessionId}/reschedule/force
POST /users/admin/sync-all-expert-calendars
POST /users/become-expert
POST /users/become-expert/waitlist
POST /users/expert-profile
POST /users/sync-calendars
POST /users/sync-timezone
PUT /advisor-plan/toggle

Found on 2026-01-09 22:38

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035495f03597d7108e3f4814e5429a89cb990b26e2f6f

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /sessions/test-delete-calendar-event/{eventId}
DELETE /wishlist-lists/{id}
DELETE /wishlist-lists/{id}/expert/{expertProfileId}
GET /advisor-plan
GET /advisor-plan/check-subscription-status/{setupIntentId}
GET /advisor-plan/complete-subscription/{setupIntentId}
GET /advisor-plan/learner-subscriptions
GET /advisor-plan/subscribers
GET /asset/{assetId}
GET /asset/{assetId}/info
GET /experts
GET /experts-category
GET /experts/by-categories/random
GET /experts/by-category/{categoryName}/random
GET /experts/categories/counts
GET /experts/emerging-topics
GET /experts/inactive-transfers
GET /experts/landing
GET /experts/metrics/{expertId}
GET /experts/referrals/dashboard
GET /experts/referrals/my-link
GET /experts/search
GET /experts/{username}/related
GET /experts/{username}/reviews
GET /healthz
GET /oauth/google-calendar
GET /oauth/google-calendar/done
GET /payments/onboarding/{expertId}/{country}
GET /payments/payment-intent/{paymentIntentId}
GET /payments/stripe-account-status
GET /payments/verify-payment-intent/{paymentIntentId}
GET /payments/verify-setup-intent/{setupIntentId}
GET /referral/{username}
GET /retrospective
GET /search
GET /search/autocomplete
GET /sessions/expert-username/{username}/reviews
GET /sessions/expert/{expertId}/reviews
GET /sessions/past
GET /sessions/upcoming
GET /sessions/user/reviews
GET /sessions/{sessionId}/reviews
GET /users/availability/{username}
GET /users/calendar-events
GET /users/calendar-preferences
GET /users/expert-profile/{username}
GET /users/me
GET /users/payment-info
GET /users/timezone
GET /users/{username}/availability-slots
GET /users/{username}/available-days
GET /users/{username}/available-time-slots-for-date
GET /wishlist-lists
GET /wishlist-lists/{id}/items
PATCH /advisor-plan/cancel-subscription/{subscriptionId}
PATCH /payments/update-stripe-connection-status
PATCH /sessions/{sessionId}/post-booking
PATCH /users
PATCH /users/availability
PATCH /users/marketplace/disable
POST /advisor-plan/create
POST /asset/upload
POST /auth/clerk
POST /communications/contact-form
POST /communications/newsletter-signup
POST /internal/send-slack-message
POST /payments/confirm-subscription-payment
POST /payments/create-payment-intent
POST /payments/create-setup-intent
POST /payments/webhooks
POST /payments/webhooks/connect
POST /referral/{username}/apply
POST /retrospective/download
POST /retrospective/download-test
POST /sessions/expert-review
POST /sessions/get-session-participants
POST /sessions/resolve-bulk-participant-emails
POST /sessions/resolve-participant-email
POST /sessions/review
POST /sessions/test-calendar-event
POST /sessions/test-reschedule
POST /sessions/{sessionId}/request-reschedule
POST /sessions/{sessionId}/reschedule
POST /sessions/{sessionId}/reschedule/force
POST /users/admin/sync-all-expert-calendars
POST /users/become-expert
POST /users/become-expert/waitlist
POST /users/expert-profile
POST /users/sync-calendars
POST /users/sync-timezone
PUT /advisor-plan/toggle

Found on 2025-12-30 12:25

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035495f03597d7108e3f4814e5429a89cb99036f944b2

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /sessions/test-delete-calendar-event/{eventId}
DELETE /wishlist-lists/{id}
DELETE /wishlist-lists/{id}/expert/{expertProfileId}
GET /advisor-plan
GET /advisor-plan/check-subscription-status/{setupIntentId}
GET /advisor-plan/complete-subscription/{setupIntentId}
GET /advisor-plan/learner-subscriptions
GET /advisor-plan/subscribers
GET /asset/{assetId}
GET /asset/{assetId}/info
GET /experts
GET /experts-category
GET /experts/by-categories/random
GET /experts/by-category/{categoryName}/random
GET /experts/categories/counts
GET /experts/emerging-topics
GET /experts/inactive-transfers
GET /experts/landing
GET /experts/metrics/{expertId}
GET /experts/referrals/dashboard
GET /experts/referrals/my-link
GET /experts/search
GET /experts/{username}/related
GET /experts/{username}/reviews
GET /healthz
GET /oauth/google-calendar
GET /oauth/google-calendar/done
GET /payments/onboarding/{expertId}/{country}
GET /payments/payment-intent/{paymentIntentId}
GET /payments/stripe-account-status
GET /payments/verify-payment-intent/{paymentIntentId}
GET /payments/verify-setup-intent/{setupIntentId}
GET /referral/{username}
GET /search
GET /search/autocomplete
GET /sessions/expert-username/{username}/reviews
GET /sessions/expert/{expertId}/reviews
GET /sessions/past
GET /sessions/upcoming
GET /sessions/user/reviews
GET /sessions/{sessionId}/reviews
GET /users/availability/{username}
GET /users/calendar-events
GET /users/calendar-preferences
GET /users/expert-profile/{username}
GET /users/me
GET /users/payment-info
GET /users/timezone
GET /users/{username}/availability-slots
GET /users/{username}/available-days
GET /users/{username}/available-time-slots-for-date
GET /wishlist-lists
GET /wishlist-lists/{id}/items
PATCH /advisor-plan/cancel-subscription/{subscriptionId}
PATCH /payments/update-stripe-connection-status
PATCH /sessions/{sessionId}/post-booking
PATCH /users
PATCH /users/availability
PATCH /users/marketplace/disable
POST /advisor-plan/create
POST /asset/upload
POST /auth/clerk
POST /communications/contact-form
POST /communications/newsletter-signup
POST /internal/send-slack-message
POST /payments/confirm-subscription-payment
POST /payments/create-payment-intent
POST /payments/create-setup-intent
POST /payments/webhooks
POST /payments/webhooks/connect
POST /referral/{username}/apply
POST /sessions/expert-review
POST /sessions/get-session-participants
POST /sessions/resolve-bulk-participant-emails
POST /sessions/resolve-participant-email
POST /sessions/review
POST /sessions/test-calendar-event
POST /sessions/test-reschedule
POST /sessions/{sessionId}/request-reschedule
POST /sessions/{sessionId}/reschedule
POST /sessions/{sessionId}/reschedule/force
POST /users/admin/sync-all-expert-calendars
POST /users/become-expert
POST /users/become-expert/waitlist
POST /users/expert-profile
POST /users/sync-calendars
POST /users/sync-timezone
PUT /advisor-plan/toggle

Found on 2025-12-22 21:22

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035495f03597d7108e3f4814e5429a89cb99023fe9e83

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /sessions/test-delete-calendar-event/{eventId}
DELETE /wishlist-lists/{id}
DELETE /wishlist-lists/{id}/expert/{expertProfileId}
GET /advisor-plan
GET /advisor-plan/check-subscription-status/{setupIntentId}
GET /advisor-plan/complete-subscription/{setupIntentId}
GET /advisor-plan/learner-subscriptions
GET /advisor-plan/subscribers
GET /asset/{assetId}
GET /asset/{assetId}/info
GET /experts
GET /experts-category
GET /experts/by-categories/random
GET /experts/by-category/{categoryName}/random
GET /experts/categories/counts
GET /experts/emerging-topics
GET /experts/inactive-transfers
GET /experts/landing
GET /experts/metrics/{expertId}
GET /experts/referrals/dashboard
GET /experts/referrals/my-link
GET /experts/search
GET /experts/{username}/related
GET /experts/{username}/reviews
GET /healthz
GET /oauth/google-calendar
GET /oauth/google-calendar/done
GET /payments/onboarding/{expertId}/{country}
GET /payments/payment-intent/{paymentIntentId}
GET /payments/stripe-account-status
GET /payments/verify-payment-intent/{paymentIntentId}
GET /payments/verify-setup-intent/{setupIntentId}
GET /referral/{username}
GET /search
GET /search/autocomplete
GET /sessions/expert-username/{username}/reviews
GET /sessions/expert/{expertId}/reviews
GET /sessions/past
GET /sessions/upcoming
GET /sessions/user/reviews
GET /sessions/{sessionId}/reviews
GET /users/availability/{username}
GET /users/calendar-events
GET /users/calendar-preferences
GET /users/expert-profile/{username}
GET /users/me
GET /users/payment-info
GET /users/timezone
GET /users/{username}/availability-slots
GET /wishlist-lists
GET /wishlist-lists/{id}/items
PATCH /advisor-plan/cancel-subscription/{subscriptionId}
PATCH /payments/update-stripe-connection-status
PATCH /sessions/{sessionId}/post-booking
PATCH /users
PATCH /users/availability
PATCH /users/marketplace/disable
POST /advisor-plan/create
POST /asset/upload
POST /auth/clerk
POST /communications/contact-form
POST /communications/newsletter-signup
POST /internal/send-slack-message
POST /payments/confirm-subscription-payment
POST /payments/create-payment-intent
POST /payments/create-setup-intent
POST /payments/webhooks
POST /payments/webhooks/connect
POST /referral/{username}/apply
POST /sessions/expert-review
POST /sessions/get-session-participants
POST /sessions/resolve-bulk-participant-emails
POST /sessions/resolve-participant-email
POST /sessions/review
POST /sessions/test-calendar-event
POST /sessions/test-reschedule
POST /sessions/{sessionId}/request-reschedule
POST /sessions/{sessionId}/reschedule
POST /sessions/{sessionId}/reschedule/force
POST /users/admin/sync-all-expert-calendars
POST /users/become-expert
POST /users/become-expert/waitlist
POST /users/expert-profile
POST /users/sync-calendars
POST /users/sync-timezone
PUT /advisor-plan/toggle

Found on 2025-12-16 13:57

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035495f03597d7108e3f4814e5429a89cb9906b33bd10

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /sessions/test-delete-calendar-event/{eventId}
DELETE /wishlist-lists/{id}
DELETE /wishlist-lists/{id}/expert/{expertProfileId}
GET /advisor-plan
GET /advisor-plan/check-subscription-status/{setupIntentId}
GET /advisor-plan/complete-subscription/{setupIntentId}
GET /advisor-plan/learner-subscriptions
GET /advisor-plan/subscribers
GET /asset/{assetId}
GET /asset/{assetId}/info
GET /experts
GET /experts-category
GET /experts/by-categories/random
GET /experts/by-category/{categoryName}/random
GET /experts/categories/counts
GET /experts/emerging-topics
GET /experts/landing
GET /experts/metrics/{expertId}
GET /experts/referrals/dashboard
GET /experts/referrals/my-link
GET /experts/search
GET /experts/{username}/related
GET /experts/{username}/reviews
GET /healthz
GET /oauth/google-calendar
GET /oauth/google-calendar/done
GET /payments/onboarding/{expertId}/{country}
GET /payments/payment-intent/{paymentIntentId}
GET /payments/stripe-account-status
GET /payments/verify-payment-intent/{paymentIntentId}
GET /payments/verify-setup-intent/{setupIntentId}
GET /referral/{username}
GET /search
GET /search/autocomplete
GET /sessions/expert-username/{username}/reviews
GET /sessions/expert/{expertId}/reviews
GET /sessions/past
GET /sessions/upcoming
GET /sessions/user/reviews
GET /sessions/{sessionId}/reviews
GET /users/availability/{username}
GET /users/calendar-events
GET /users/calendar-preferences
GET /users/expert-profile/{username}
GET /users/me
GET /users/payment-info
GET /users/timezone
GET /users/{username}/availability-slots
GET /wishlist-lists
GET /wishlist-lists/{id}/items
PATCH /advisor-plan/cancel-subscription/{subscriptionId}
PATCH /payments/update-stripe-connection-status
PATCH /sessions/{sessionId}/post-booking
PATCH /users
PATCH /users/availability
PATCH /users/marketplace/disable
POST /advisor-plan/create
POST /asset/upload
POST /auth/clerk
POST /communications/contact-form
POST /communications/newsletter-signup
POST /internal/send-slack-message
POST /payments/confirm-subscription-payment
POST /payments/create-payment-intent
POST /payments/create-setup-intent
POST /payments/webhooks
POST /payments/webhooks/connect
POST /referral/{username}/apply
POST /sessions/expert-review
POST /sessions/get-session-participants
POST /sessions/resolve-bulk-participant-emails
POST /sessions/resolve-participant-email
POST /sessions/review
POST /sessions/test-calendar-event
POST /sessions/test-reschedule
POST /sessions/{sessionId}/request-reschedule
POST /sessions/{sessionId}/reschedule
POST /sessions/{sessionId}/reschedule/force
POST /users/admin/sync-all-expert-calendars
POST /users/become-expert
POST /users/become-expert/waitlist
POST /users/expert-profile
POST /users/sync-calendars
POST /users/sync-timezone
PUT /advisor-plan/toggle

Found on 2025-12-02 09:34

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: hillcrest.quixi.com
Port: 443
URL: https://hillcrest.quixi.com

First seen 2025-11-07 00:57
Last seen 2026-01-09 22:28
Open for 63 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-09 22:28
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: sam.westonfamily.ca
Port: 443
URL: https://sam.westonfamily.ca

First seen 2025-11-20 01:02
Last seen 2026-01-09 22:16
Open for 50 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43a0a0e27f0caf932a9a8a33844143bc8a7d7a85ff
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /devicestatus/{spec}
DELETE /treatments/{spec}
GET /devicestatus/
GET /echo/{storage}/{spec}
GET /entries
GET /entries/{spec}
GET /profile
GET /slice/{storage}/{field}/{type}/{prefix}/{regex}
GET /status
GET /times/echo/{prefix}/{regex}
GET /times/{prefix}/{regex}
GET /treatments
```
  Found on 2026-01-09 22:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.surgechain.io
Port: 80
URL: http://api.surgechain.io

First seen 2025-12-03 00:37
Last seen 2026-01-09 22:09
Open for 37 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 22:09
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: admin-api.medgo.tec.br
Port: 80
URL: http://admin-api.medgo.tec.br

First seen 2025-11-06 00:43
Last seen 2026-01-09 21:39
Open for 64 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 21:39
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: newdomainname.quixi.com
Port: 443
URL: https://newdomainname.quixi.com

First seen 2025-11-03 00:58
Last seen 2026-01-09 21:06
Open for 67 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-09 21:06
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: system.newcaza.com
Port: 443
URL: https://system.newcaza.com

First seen 2025-10-29 00:28
Last seen 2026-01-09 20:48
Open for 72 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-01-09 20:48
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: production.api-v2.theculinistas.com
Port: 443
URL: https://production.api-v2.theculinistas.com

First seen 2025-10-16 02:09
Last seen 2026-01-09 20:35
Open for 85 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549c871eb211720bfd0c4a7738d9af0849cef24d303

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /restApi/Services/get-dish
GET /restApi/Services/get-menu
GET /restApi/Services/get-product
POST /restApi/Customers/activate
POST /restApi/Customers/add-additional-contact
POST /restApi/Customers/add-address
POST /restApi/Customers/add-favorite-dish
POST /restApi/Customers/add-favorite-menu
POST /restApi/Customers/create
POST /restApi/Customers/deactivate
POST /restApi/Customers/delete
POST /restApi/Customers/delete-address
POST /restApi/Customers/get
POST /restApi/Customers/list
POST /restApi/Customers/remove-additional-contact
POST /restApi/Customers/remove-favorite-dishes
POST /restApi/Customers/remove-favorite-menu
POST /restApi/Customers/send-referral-email
POST /restApi/Customers/send-verification-email
POST /restApi/Customers/set-culinary-settings
POST /restApi/Customers/set-household-settings
POST /restApi/Customers/trigger-password-reset
POST /restApi/Customers/update-additional-contact
POST /restApi/Customers/update-address
POST /restApi/Customers/update-email
POST /restApi/Customers/update-personal-info
POST /restApi/Customers/update-stripe-customer-id
POST /restApi/Services/list-dishes
POST /restApi/Services/list-ingredients-from-dishes
POST /restApi/Services/list-menus
POST /restApi/Services/list-products

Found on 2026-01-09 20:35

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-11-22 20:59

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: lootpilot.hallofgoats.com
Port: 80
URL: http://lootpilot.hallofgoats.com

First seen 2025-11-25 00:54
Last seen 2026-01-09 20:16
Open for 45 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 20:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: www.digvijay.software
Port: 443
URL: https://www.digvijay.software

First seen 2025-10-20 00:16
Last seen 2026-01-09 18:30
Open for 81 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1a8bcc6e54d737e0f0e83bdb19b0673b1c0238fb0c7473327
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
DELETE /user/delete-profile-pic
GET /admin/all-user
GET /admin/call-cron
GET /admin/clear-app-cache
GET /journal
GET /journal/id/{getId}
GET /public/health-check
GET /user
GET /user/{city}
POST /admin/create-admin
POST /user/login
POST /user/signup
PUT /user/set-profile-pic
```
  Found on 2026-01-09 18:30
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: console.tamis.ca
Port: 80
URL: http://console.tamis.ca

First seen 2025-11-20 00:42
Last seen 2026-01-09 18:14
Open for 50 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d60bb8f38b6906c66b31708104d1708104d1708104d
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /api/v1/texts
GET /api/v1/texts/{isbn}
GET /api/v1/texts/{isbn}/places
```
  Found on 2026-01-09 18:14
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: express.fitmachine.ai
Port: 80
URL: http://express.fitmachine.ai

First seen 2025-11-24 03:26
Last seen 2026-01-09 18:01
Open for 46 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43fefadcb6a91ebf4f5680a56e9d937b41634e9ab1
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /challenges/list/{after}
GET /challenges/trainer/{hri}/list/{after}
GET /challenges/{id}
GET /feed/list/{after}
GET /feed/{id}
GET /trainers
GET /user
GET /user/validate-start-session
POST /challenges
POST /notifications/send
POST /trainers/{trainerId}/generate-session
POST /user/init
PUT /user/preferences
```
  Found on 2026-01-09 18:01
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: origin.newcaza.com
Port: 443
URL: https://origin.newcaza.com

First seen 2025-12-07 00:14
Last seen 2026-01-09 17:25
Open for 33 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-01-09 17:25
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: public-api.production.liveswitch.com
Port: 80
URL: http://public-api.production.liveswitch.com

First seen 2025-10-31 00:49
Last seen 2026-01-09 16:41
Open for 70 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549b5b584ec7869acc27ed1e6ad991ee927e678d0a7

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /v1/webhooks/app/{appId}
GET /v1/attribute-groups
GET /v1/attribute-groups/app/{appId}
GET /v1/attribute-groups/{id}
GET /v1/attributes
GET /v1/attributes/app/{appId}
GET /v1/attributes/{id}
GET /v1/contacts
GET /v1/contacts/by-phone/{phone}
GET /v1/contacts/{id}
GET /v1/conversations
GET /v1/conversations/{id}
GET /v1/documents/conversation/files/{conversationId}
GET /v1/documents/conversation/snapshots/{conversationId}
GET /v1/documents/conversation/{conversationId}
GET /v1/documents/project/files/{projectId}
GET /v1/documents/project/snapshots/{projectId}
GET /v1/documents/project/{projectId}
GET /v1/documents/{id}
GET /v1/entity-attributes/{entityType}
GET /v1/entity-attributes/{entityType}/by-entity/{entityId}
GET /v1/entity-attributes/{entityType}/{id}
GET /v1/me
GET /v1/organizations/settings
GET /v1/projects
GET /v1/projects/{id}
GET /v1/recordings/conversation/{conversationId}
GET /v1/recordings/project/{projectId}
GET /v1/recordings/{id}
GET /v1/tags
GET /v1/tokens
GET /v1/tokens/logout
GET /v1/webhooks
GET /v1/webhooks/by-app/{appId}
GET /v1/webhooks/{id}
POST /v1/conversations/{id}/upload-urls/documents
POST /v1/conversations/{id}/upload-urls/images
POST /v1/conversations/{id}/upload-urls/videos
POST /v1/projects/{id}/upload-urls/documents
POST /v1/projects/{id}/upload-urls/images
POST /v1/projects/{id}/upload-urls/videos
POST /v1/tokens/code
POST /v1/tokens/refresh
PUT /v1/tags/{id}

Found on 2026-01-09 16:41

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549b5b584ec7869acc27ed1e6ad991ee927ed8addfd

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /v1/webhooks/app/{appId}
GET /v1/attribute-groups
GET /v1/attribute-groups/app/{appId}
GET /v1/attribute-groups/{id}
GET /v1/attributes
GET /v1/attributes/app/{appId}
GET /v1/attributes/{id}
GET /v1/contacts
GET /v1/contacts/by-phone/{phone}
GET /v1/contacts/{id}
GET /v1/conversations
GET /v1/conversations/{id}
GET /v1/documents/conversation/files/{conversationId}
GET /v1/documents/conversation/snapshots/{conversationId}
GET /v1/documents/conversation/{conversationId}
GET /v1/documents/project/files/{projectId}
GET /v1/documents/project/snapshots/{projectId}
GET /v1/documents/project/{projectId}
GET /v1/documents/{id}
GET /v1/entity-attributes/{entityType}
GET /v1/entity-attributes/{entityType}/by-entity/{entityId}
GET /v1/entity-attributes/{entityType}/{id}
GET /v1/me
GET /v1/organizations/settings
GET /v1/projects
GET /v1/projects/{id}
GET /v1/recordings/conversation/{conversationId}
GET /v1/recordings/project/{projectId}
GET /v1/recordings/{id}
GET /v1/tags
GET /v1/tokens
GET /v1/tokens/logout
GET /v1/webhooks
GET /v1/webhooks/by-app/{appId}
GET /v1/webhooks/{id}
POST /v1/tokens/code
POST /v1/tokens/refresh
PUT /v1/tags/{id}

Found on 2025-11-06 17:33

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: testnet.api.dlc.link
Port: 80
URL: http://testnet.api.dlc.link

First seen 2025-10-31 00:20
Last seen 2026-01-09 16:41
Open for 70 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 16:41
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api-demo.quotetome.com
Port: 80
URL: http://api-demo.quotetome.com

First seen 2025-11-17 00:14
Last seen 2026-01-09 16:19
Open for 53 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43655729af6ab92a7d698995df565c4b6825c056a7
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /pos/
GET /pos/{id}/
GET /pos/{id}/receipts/
GET /receipts/
GET /rfqs/
GET /rfqs/{id}/
GET /rfqs/{id}/approvals/
GET /users/
GET /users/cost_codes/
GET /users/jobsites/
GET /users/jobsites/{id}/
GET /users/jobsites/{id}/cost_codes/
GET /vendors/
POST /users/cost_codes/bulk_cost_codes/
POST /users/cost_codes/bulk_delete_cost_codes/
POST /users/login/
POST /users/logout/
PUT /users/cost_codes/{id}/
```
  Found on 2026-01-09 16:19
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.somosbob.com
Port: 443
URL: https://api.somosbob.com

First seen 2025-12-07 01:04
Last seen 2026-01-09 16:16
Open for 33 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 16:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.avalloninc.com
Port: 80
URL: http://api.avalloninc.com

First seen 2025-10-27 01:10
Last seen 2026-01-09 15:54
Open for 74 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 15:54
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: loquiauris.ai
Port: 80
URL: http://loquiauris.ai

First seen 2025-12-02 14:07
Last seen 2026-01-09 15:21
Open for 38 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 15:21
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.salestaxsearch.com
Port: 80
URL: http://api.salestaxsearch.com

First seen 2025-11-14 00:43
Last seen 2026-01-09 15:15
Open for 56 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 15:15
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: dispatcher-api.joinonward.net
Port: 80
URL: http://dispatcher-api.joinonward.net

First seen 2025-11-21 03:59
Last seen 2026-01-09 15:12
Open for 49 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d603963a7c1af802421d4e2f34c87bd82697ed79e12
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /api/Driver/GetDriver
GET /api/Driver/GetDrivers
GET /api/Rides/GetBestTimeBids
GET /api/Rides/GetBestTimeOptions
GET /api/Rides/GetConfirmedRides
GET /api/Rides/GetHistoricalRides
GET /api/Rides/GetMNCSAnswers
GET /api/Rides/GetRideDetails
GET /api/Rides/GetRideReviewOptions
GET /api/Rides/PendingRides
GET /api/Rides/{rideId}
GET /api/TransportPartner
GET /api/TransportPartner/Grouped
GET /api/TransportPartner/TransportType
GET /api/TransportType
POST /api/Custodians/EditCustodian
POST /api/Rides/ClaimRide
POST /api/Rides/CompleteRide
POST /api/Rides/NoShow
POST /api/Rides/Start
POST /api/Rides/SubmitBid
POST /api/Token/GenerateToken
POST /api/Token/Logout
```
  Found on 2026-01-09 15:12
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: portal.acom.net.br
Port: 80
URL: http://portal.acom.net.br

First seen 2025-12-07 01:25
Last seen 2026-01-09 14:50
Open for 33 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb475624a53536ee46da06db2c92c69512a04dfdea5
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /portalcli/usuarios
GET /projetos/
GET /projetos/{projeto_id}/apontamentos/
GET /projetos/{projeto_id}/cnpjs/
GET /projetos/{projeto_id}/ras/
```
  Found on 2026-01-09 14:50
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: dev.app.clickon.solutions
Port: 443
URL: https://dev.app.clickon.solutions

First seen 2025-12-07 01:24
Last seen 2026-01-09 14:50
Open for 33 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 14:50
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: portal.acom.net.br
Port: 443
URL: https://portal.acom.net.br

First seen 2025-12-07 01:25
Last seen 2026-01-09 14:50
Open for 33 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb475624a53536ee46da06db2c92c69512a04dfdea5
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /portalcli/usuarios
GET /projetos/
GET /projetos/{projeto_id}/apontamentos/
GET /projetos/{projeto_id}/cnpjs/
GET /projetos/{projeto_id}/ras/
```
  Found on 2026-01-09 14:50
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: staging-api.cresimplify.com
Port: 443
URL: https://staging-api.cresimplify.com

First seen 2025-11-25 00:24
Last seen 2026-01-09 14:41
Open for 45 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff436bb435dd0d417b6b91288e397d40895ce5eb68d4

Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /authentication/{accessToken}
GET /attachment
GET /attachment/{id}
GET /clients
GET /clients/{clientId}
GET /company
GET /company/{companyId}
GET /contacts
GET /contacts/{contactId}
GET /documents
GET /documents/{documentId}
GET /projects
GET /projects/{projectId}
GET /properties
GET /properties/{propertyId}
GET /properties/{propertyId}/delegates
GET /properties/{propertyId}/media
GET /properties/{propertyId}/media/{propertyMediaId}
GET /proposals
GET /proposals/{proposalId}
GET /subscription
GET /subscription/{id}
GET /users
GET /users/me
GET /users/{userId}
POST /auth-management
POST /authentication
POST /mailer
POST /proposals/{proposalId}/invite
POST /proposals/{proposalId}/reject
POST /proposals/{proposalId}/send
POST /upload
POST /webhook

Found on 2026-01-09 14:41

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.antioxida.com
Port: 443
URL: https://api.antioxida.com

First seen 2025-10-28 00:49
Last seen 2026-01-09 14:14
Open for 73 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 14:14
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: evergreenhgtx.quixi.com
Port: 443
URL: https://evergreenhgtx.quixi.com

First seen 2025-12-11 00:45
Last seen 2026-01-09 13:46
Open for 29 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-09 13:46
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.savr.one
Port: 443
URL: https://api.savr.one

First seen 2025-12-03 00:26
Last seen 2026-01-09 13:08
Open for 37 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 13:08
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: deepfield-game.io
Port: 80
URL: http://deepfield-game.io

First seen 2025-11-24 04:06
Last seen 2026-01-09 12:40
Open for 46 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 12:40
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.foodee.sa
Port: 443
URL: https://api.foodee.sa

First seen 2025-10-25 01:18
Last seen 2026-01-09 12:34
Open for 76 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 12:34
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: onpointe.quixi-staging.com
Port: 443
URL: https://onpointe.quixi-staging.com

First seen 2025-10-24 00:12
Last seen 2026-01-09 12:10
Open for 77 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-09 12:10
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: www.realrate.gg
Port: 80
URL: http://www.realrate.gg

First seen 2025-11-25 00:04
Last seen 2026-01-09 12:05
Open for 45 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd151e75e4bc6a4adbdd70075e9de8ed2be10d8ad1eed8a61ad
```
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /player/{playerId}
GET /leaderboard/{title}/{gameType}
GET /title/{identifier}
POST /client
POST /game
POST /player
POST /player/search
POST /title
POST /title/search
```
  Found on 2026-01-09 12:05
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.gangsterarena6.com
Port: 80
URL: http://api.gangsterarena6.com

First seen 2025-10-20 01:17
Last seen 2026-01-09 11:52
Open for 81 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 11:52
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: scoringapi.herokudemos.com
Port: 80
URL: http://scoringapi.herokudemos.com

First seen 2025-11-05 00:11
Last seen 2026-01-09 11:32
Open for 65 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035492574e17052a0456ba2e65bf9238a3d9f6ed8dd09
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /contacts/calculate-all-scores
POST /mqtt/publish
PUT /contacts/calculate-scores
PUT /contacts/interactions/calculate-scores
PUT /contacts/login-events/calculate-scores
```
  Found on 2026-01-09 11:32
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: honeyfield.newcaza.com
Port: 443
URL: https://honeyfield.newcaza.com

First seen 2025-11-05 00:31
Last seen 2026-01-09 11:31
Open for 65 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-01-09 11:31
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: serve-staging.perforlitics.com
Port: 443
URL: https://serve-staging.perforlitics.com

First seen 2025-11-06 00:04
Last seen 2026-01-09 11:10
Open for 64 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43cde35a72b4d5b849c3f9310d6b4723aae6829f4e
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /accept-invite?token={token}
GET /change-password
GET /current-organization
GET /currentuser
GET /department/
GET /department/{id}
GET /indicator
GET /indicator/{id}
GET /objective/
GET /objective/{id}
GET /onboard/upload
GET /organization/
GET /performance/
GET /performance/average-org-performance
GET /perspectives
GET /perspectives/{perspective}/objectives
GET /report/
GET /report/average-org-performance
GET /team/
GET /user/
GET /verify-forgot-password?token={token}
POST /department
POST /forgot-password
POST /login
POST /objective
POST /onboard/create-account
POST /onboard/create-user-account
POST /onboard/skip
POST /organization
POST /performance
POST /send-invite
POST /team
POST /user
```
  Found on 2026-01-09 11:10
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: marshesofskidaway.quixi.com
Port: 443
URL: https://marshesofskidaway.quixi.com

First seen 2025-11-07 00:16
Last seen 2026-01-09 10:50
Open for 63 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-09 10:50
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.almaalee.com
Port: 443
URL: https://api.almaalee.com

First seen 2025-10-16 02:09
Last seen 2026-01-09 10:14
Open for 85 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b567f0269f10cd47d1959f54302f5053f32a8f8c4

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /api/access-codes/{id}
DELETE /api/holidays/clear
DELETE /api/holidays/{id}
DELETE /api/news/delete/{id}
DELETE /api/pdf/delete
DELETE /api/teacher/delete/{id}
DELETE /api/videos/{id}
DELETE /student/app/delete/{id}
DELETE /student/reset/appdevice/{num}
GET /api/access-codes
GET /api/date-ranges
GET /api/date-ranges/{id}
GET /api/download/apk
GET /api/download/apk/admin
GET /api/download/apk/courses
GET /api/gallery/image/{id}
GET /api/gallery/images
GET /api/holidays
GET /api/holidays/check/{date}
GET /api/news
GET /api/news/urgent
GET /api/student/delete/weeklyExam
GET /api/student/get/weeklyExam
GET /api/student/{id}
GET /api/teacher
GET /api/videos
GET /api/videos/{studentClass}
GET /app/{studentNum}
GET /check_notifications
GET /clear_admin_notifications
GET /deleteAdmin
GET /deleteStudent
GET /generateAdminQRCodeLogin
GET /generateAllQRCodes
GET /generateStudentQRCodeLogin
GET /getAbsent
GET /getAllAdmins
GET /getAllStudents
GET /getMessages
GET /getOneStudentInfoAll
GET /getPunishments
GET /getRewards
GET /getStudentAllPayment
GET /getStudentExamInfo
GET /getStudentFinalExamInfo
GET /getStudentInfo
GET /getStudentInfoAll
GET /getStudentInfoAllFromSameFamilt
GET /getYearlyCost
GET /student/app
GET /student/app/{studentClass}
GET /student/reset/logindevice/{id}
GET /student/validate-video
GET /update_notifications
POST /addPunishment
POST /addReward
POST /addStudentPayment
POST /api/access-codes/bulk-update
POST /api/access-codes/class
POST /api/access-codes/validate
POST /api/gallery/upload
POST /api/news/add
POST /api/notifications/save-token
POST /api/notifications/send
POST /api/pdf/upload/{videoId}
POST /api/student/save/weeklyExam
POST /api/students/upload-csv
POST /api/teacher/create
POST /api/update-student-info
POST /api/upload
POST /api/upload-student-image
POST /auth/reset-password
POST /auth/verify-identity
POST /email/send
POST /getClassAbsent
POST /getStudentsExamInfo
POST /login
POST /saveAbsent
POST /saveAdminInfo
POST /saveStudentExamInfo
POST /saveStudentInfo
POST /saveStudentsExamInfo
POST /saveYearlyCost
POST /sendMessage
POST /student/login
POST /student/signup
POST /student/update
POST /updateAdminInfo
PUT /api/news/update/{id}

Found on 2026-01-09 10:14

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b567f0269f10cd47d1959f54302f5053f75bfa858

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /api/access-codes/{id}
DELETE /api/holidays/clear
DELETE /api/holidays/{id}
DELETE /api/news/delete/{id}
DELETE /api/pdf/delete
DELETE /api/teacher/delete/{id}
DELETE /api/videos/{id}
DELETE /student/app/delete/{id}
DELETE /student/reset/appdevice/{num}
GET /api/access-codes
GET /api/date-ranges
GET /api/date-ranges/{id}
GET /api/download/apk
GET /api/download/apk/admin
GET /api/download/apk/courses
GET /api/gallery/image/{id}
GET /api/gallery/images
GET /api/holidays
GET /api/holidays/check/{date}
GET /api/news
GET /api/news/urgent
GET /api/student/delete/weeklyExam
GET /api/student/get/weeklyExam
GET /api/student/{id}
GET /api/teacher
GET /api/videos
GET /api/videos/{studentClass}
GET /app/{studentNum}
GET /check_notifications
GET /clear_admin_notifications
GET /deleteAdmin
GET /deleteStudent
GET /generateAdminQRCodeLogin
GET /generateStudentQRCodeLogin
GET /getAbsent
GET /getAllAdmins
GET /getAllStudents
GET /getMessages
GET /getOneStudentInfoAll
GET /getPunishments
GET /getRewards
GET /getStudentAllPayment
GET /getStudentExamInfo
GET /getStudentFinalExamInfo
GET /getStudentInfo
GET /getStudentInfoAll
GET /getStudentInfoAllFromSameFamilt
GET /getYearlyCost
GET /student/app
GET /student/app/{studentClass}
GET /student/reset/logindevice/{id}
GET /student/validate-video
GET /update_notifications
POST /addPunishment
POST /addReward
POST /addStudentPayment
POST /api/access-codes/bulk-update
POST /api/access-codes/class
POST /api/access-codes/validate
POST /api/gallery/upload
POST /api/news/add
POST /api/notifications/save-token
POST /api/notifications/send
POST /api/pdf/upload/{videoId}
POST /api/student/save/weeklyExam
POST /api/students/upload-csv
POST /api/teacher/create
POST /api/update-student-info
POST /api/upload
POST /api/upload-student-image
POST /auth/reset-password
POST /auth/verify-identity
POST /email/send
POST /getClassAbsent
POST /getStudentsExamInfo
POST /login
POST /saveAbsent
POST /saveAdminInfo
POST /saveStudentExamInfo
POST /saveStudentInfo
POST /saveStudentsExamInfo
POST /saveYearlyCost
POST /sendMessage
POST /student/login
POST /student/signup
POST /student/update
POST /updateAdminInfo
PUT /api/news/update/{id}

Found on 2025-11-16 16:23

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: uat.renaissant.com
Port: 443
URL: https://uat.renaissant.com

First seen 2025-10-21 22:18
Last seen 2026-01-09 09:31
Open for 79 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-09 09:31
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: hubspot.api.staging.sdocs.com
Port: 443
URL: https://hubspot.api.staging.sdocs.com

First seen 2025-10-17 00:41
Last seen 2026-01-09 09:25
Open for 84 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b763a87836b89d23865da56b0074f326b42204381

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /file
GET /app/access-token
GET /app/install
GET /auth/verify
GET /decodeToken/{token}
GET /documents
GET /envelopes
GET /generate/init
GET /generateTemplate
GET /hubspot/document/{documentId}/generate/Pdf
GET /hubspot/documents/attachments
GET /hubspot/envelope/{envelopeId}/document/{documentId}/signatures
GET /hubspot/file
GET /hubspot/generateFinalPdf
GET /hubspot/getFile
GET /hubspot/mergeData
GET /hubspot/object/{object}/{objectId}/associations
GET /hubspot/objects
GET /hubspot/objects/{objectType}/properties
GET /hubspot/objects/{object}/{objectId}
GET /hubspot/properties/{objectType}/{propertyName}
GET /hubspot/schema/{apiName}
GET /hubspot/schemas
GET /hubspot/user/{userId}
GET /templates
GET /user
GET /users
PATCH /hubspot/object/{objectId}
POST /activity/timeline/info
POST /app/install/sync
POST /app/install/templates
POST /esign/envelope/create
POST /hubspot/datasource/refresh
POST /hubspot/envelope/{envelopeId}/documents/signatureField/uploadSign
POST /hubspot/object/{objName}
POST /hubspot/template
POST /hubspot/uploadFile
POST /hubspot/uploadImage
POST /workflow/actions/generatedocument
POST /workflow/actions/generatedocumentandattach
POST /workflow/actions/generatedocumentesign
POST /workflow/actions/templates

Found on 2026-01-09 09:25

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: staging-dispatcher-api.joinonward.net
Port: 80
URL: http://staging-dispatcher-api.joinonward.net

First seen 2025-12-05 01:08
Last seen 2026-01-09 09:24
Open for 35 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d603963a7c1af802421d4e2f34c87bd82697ed79e12
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /api/Driver/GetDriver
GET /api/Driver/GetDrivers
GET /api/Rides/GetBestTimeBids
GET /api/Rides/GetBestTimeOptions
GET /api/Rides/GetConfirmedRides
GET /api/Rides/GetHistoricalRides
GET /api/Rides/GetMNCSAnswers
GET /api/Rides/GetRideDetails
GET /api/Rides/GetRideReviewOptions
GET /api/Rides/PendingRides
GET /api/Rides/{rideId}
GET /api/TransportPartner
GET /api/TransportPartner/Grouped
GET /api/TransportPartner/TransportType
GET /api/TransportType
POST /api/Custodians/EditCustodian
POST /api/Rides/ClaimRide
POST /api/Rides/CompleteRide
POST /api/Rides/NoShow
POST /api/Rides/Start
POST /api/Rides/SubmitBid
POST /api/Token/GenerateToken
POST /api/Token/Logout
```
  Found on 2026-01-09 09:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.ratehogs.com
Port: 80
URL: http://api.ratehogs.com

First seen 2025-11-21 04:59
Last seen 2026-01-09 08:53
Open for 49 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 08:53
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.rockpartyapp.com
Port: 80
URL: http://api.rockpartyapp.com

First seen 2025-11-14 04:32
Last seen 2026-01-09 08:50
Open for 56 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 08:50
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: automation.api.test.sdocs.com
Port: 80
URL: http://automation.api.test.sdocs.com

First seen 2025-10-16 01:38
Last seen 2026-01-09 08:44
Open for 85 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd151e75e4b85ff4881575c27921bb99ec19103a7adeaa4d918
```
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /test/documents
GET /test/envelopes
GET /test/pdfCode
GET /test/pdfFile
GET /test/templates
POST /test/sendEsign
```
  Found on 2026-01-09 08:44
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: express.fitmachine.ai
Port: 443
URL: https://express.fitmachine.ai

First seen 2025-11-24 03:26
Last seen 2026-01-09 08:19
Open for 46 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43fefadcb6a91ebf4f5680a56e9d937b41634e9ab1
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /challenges/list/{after}
GET /challenges/trainer/{hri}/list/{after}
GET /challenges/{id}
GET /feed/list/{after}
GET /feed/{id}
GET /trainers
GET /user
GET /user/validate-start-session
POST /challenges
POST /notifications/send
POST /trainers/{trainerId}/generate-session
POST /user/init
PUT /user/preferences
```
  Found on 2026-01-09 08:19
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: ai-proxy.goingmerry.xyz
Port: 443
URL: https://ai-proxy.goingmerry.xyz

First seen 2025-10-17 01:01
Last seen 2026-01-09 07:54
Open for 84 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 07:54
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: mercadopago-stage.clinicauandes.io
Port: 443
URL: https://mercadopago-stage.clinicauandes.io

First seen 2025-10-19 01:30
Last seen 2026-01-09 07:45
Open for 82 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 07:45
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: staging-api.somosbob.com
Port: 80
URL: http://staging-api.somosbob.com

First seen 2025-11-15 02:20
Last seen 2026-01-09 07:44
Open for 55 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 07:44
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: hubspot.api.dev.sdocs.com
Port: 443
URL: https://hubspot.api.dev.sdocs.com

First seen 2025-12-08 00:41
Last seen 2026-01-09 07:36
Open for 32 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b763a87836b89d23865da56b0074f326b42204381

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /file
GET /app/access-token
GET /app/install
GET /auth/verify
GET /decodeToken/{token}
GET /documents
GET /envelopes
GET /generate/init
GET /generateTemplate
GET /hubspot/document/{documentId}/generate/Pdf
GET /hubspot/documents/attachments
GET /hubspot/envelope/{envelopeId}/document/{documentId}/signatures
GET /hubspot/file
GET /hubspot/generateFinalPdf
GET /hubspot/getFile
GET /hubspot/mergeData
GET /hubspot/object/{object}/{objectId}/associations
GET /hubspot/objects
GET /hubspot/objects/{objectType}/properties
GET /hubspot/objects/{object}/{objectId}
GET /hubspot/properties/{objectType}/{propertyName}
GET /hubspot/schema/{apiName}
GET /hubspot/schemas
GET /hubspot/user/{userId}
GET /templates
GET /user
GET /users
PATCH /hubspot/object/{objectId}
POST /activity/timeline/info
POST /app/install/sync
POST /app/install/templates
POST /esign/envelope/create
POST /hubspot/datasource/refresh
POST /hubspot/envelope/{envelopeId}/documents/signatureField/uploadSign
POST /hubspot/object/{objName}
POST /hubspot/template
POST /hubspot/uploadFile
POST /hubspot/uploadImage
POST /workflow/actions/generatedocument
POST /workflow/actions/generatedocumentandattach
POST /workflow/actions/generatedocumentesign
POST /workflow/actions/templates

Found on 2026-01-09 07:36

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: doc-m-demo.comalatech.app
Port: 443
URL: https://doc-m-demo.comalatech.app

First seen 2025-10-21 16:38
Last seen 2026-01-09 07:26
Open for 79 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 07:26
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api-staging.whiletruemusic.com
Port: 443
URL: https://api-staging.whiletruemusic.com

First seen 2025-10-29 01:09
Last seen 2026-01-09 06:43
Open for 72 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43209d61ec85a8b0d3ef3eee9cef3eee9cef3eee9c
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /shows
POST /contact
POST /subscribe-to-newsletter
```
  Found on 2026-01-09 06:43
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: shefa.green
Port: 80
URL: http://shefa.green

First seen 2025-10-25 00:39
Last seen 2026-01-09 06:04
Open for 76 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 06:04
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.almaalee.com
Port: 80
URL: http://api.almaalee.com

First seen 2025-10-16 02:09
Last seen 2026-01-09 05:41
Open for 85 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b567f0269f10cd47d1959f54302f5053f32a8f8c4

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /api/access-codes/{id}
DELETE /api/holidays/clear
DELETE /api/holidays/{id}
DELETE /api/news/delete/{id}
DELETE /api/pdf/delete
DELETE /api/teacher/delete/{id}
DELETE /api/videos/{id}
DELETE /student/app/delete/{id}
DELETE /student/reset/appdevice/{num}
GET /api/access-codes
GET /api/date-ranges
GET /api/date-ranges/{id}
GET /api/download/apk
GET /api/download/apk/admin
GET /api/download/apk/courses
GET /api/gallery/image/{id}
GET /api/gallery/images
GET /api/holidays
GET /api/holidays/check/{date}
GET /api/news
GET /api/news/urgent
GET /api/student/delete/weeklyExam
GET /api/student/get/weeklyExam
GET /api/student/{id}
GET /api/teacher
GET /api/videos
GET /api/videos/{studentClass}
GET /app/{studentNum}
GET /check_notifications
GET /clear_admin_notifications
GET /deleteAdmin
GET /deleteStudent
GET /generateAdminQRCodeLogin
GET /generateAllQRCodes
GET /generateStudentQRCodeLogin
GET /getAbsent
GET /getAllAdmins
GET /getAllStudents
GET /getMessages
GET /getOneStudentInfoAll
GET /getPunishments
GET /getRewards
GET /getStudentAllPayment
GET /getStudentExamInfo
GET /getStudentFinalExamInfo
GET /getStudentInfo
GET /getStudentInfoAll
GET /getStudentInfoAllFromSameFamilt
GET /getYearlyCost
GET /student/app
GET /student/app/{studentClass}
GET /student/reset/logindevice/{id}
GET /student/validate-video
GET /update_notifications
POST /addPunishment
POST /addReward
POST /addStudentPayment
POST /api/access-codes/bulk-update
POST /api/access-codes/class
POST /api/access-codes/validate
POST /api/gallery/upload
POST /api/news/add
POST /api/notifications/save-token
POST /api/notifications/send
POST /api/pdf/upload/{videoId}
POST /api/student/save/weeklyExam
POST /api/students/upload-csv
POST /api/teacher/create
POST /api/update-student-info
POST /api/upload
POST /api/upload-student-image
POST /auth/reset-password
POST /auth/verify-identity
POST /email/send
POST /getClassAbsent
POST /getStudentsExamInfo
POST /login
POST /saveAbsent
POST /saveAdminInfo
POST /saveStudentExamInfo
POST /saveStudentInfo
POST /saveStudentsExamInfo
POST /saveYearlyCost
POST /sendMessage
POST /student/login
POST /student/signup
POST /student/update
POST /updateAdminInfo
PUT /api/news/update/{id}

Found on 2026-01-09 05:41

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b567f0269f10cd47d1959f54302f5053f75bfa858

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /api/access-codes/{id}
DELETE /api/holidays/clear
DELETE /api/holidays/{id}
DELETE /api/news/delete/{id}
DELETE /api/pdf/delete
DELETE /api/teacher/delete/{id}
DELETE /api/videos/{id}
DELETE /student/app/delete/{id}
DELETE /student/reset/appdevice/{num}
GET /api/access-codes
GET /api/date-ranges
GET /api/date-ranges/{id}
GET /api/download/apk
GET /api/download/apk/admin
GET /api/download/apk/courses
GET /api/gallery/image/{id}
GET /api/gallery/images
GET /api/holidays
GET /api/holidays/check/{date}
GET /api/news
GET /api/news/urgent
GET /api/student/delete/weeklyExam
GET /api/student/get/weeklyExam
GET /api/student/{id}
GET /api/teacher
GET /api/videos
GET /api/videos/{studentClass}
GET /app/{studentNum}
GET /check_notifications
GET /clear_admin_notifications
GET /deleteAdmin
GET /deleteStudent
GET /generateAdminQRCodeLogin
GET /generateStudentQRCodeLogin
GET /getAbsent
GET /getAllAdmins
GET /getAllStudents
GET /getMessages
GET /getOneStudentInfoAll
GET /getPunishments
GET /getRewards
GET /getStudentAllPayment
GET /getStudentExamInfo
GET /getStudentFinalExamInfo
GET /getStudentInfo
GET /getStudentInfoAll
GET /getStudentInfoAllFromSameFamilt
GET /getYearlyCost
GET /student/app
GET /student/app/{studentClass}
GET /student/reset/logindevice/{id}
GET /student/validate-video
GET /update_notifications
POST /addPunishment
POST /addReward
POST /addStudentPayment
POST /api/access-codes/bulk-update
POST /api/access-codes/class
POST /api/access-codes/validate
POST /api/gallery/upload
POST /api/news/add
POST /api/notifications/save-token
POST /api/notifications/send
POST /api/pdf/upload/{videoId}
POST /api/student/save/weeklyExam
POST /api/students/upload-csv
POST /api/teacher/create
POST /api/update-student-info
POST /api/upload
POST /api/upload-student-image
POST /auth/reset-password
POST /auth/verify-identity
POST /email/send
POST /getClassAbsent
POST /getStudentsExamInfo
POST /login
POST /saveAbsent
POST /saveAdminInfo
POST /saveStudentExamInfo
POST /saveStudentInfo
POST /saveStudentsExamInfo
POST /saveYearlyCost
POST /sendMessage
POST /student/login
POST /student/signup
POST /student/update
POST /updateAdminInfo
PUT /api/news/update/{id}

Found on 2025-11-16 07:36

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.fund-match.com
Port: 443
URL: https://api.fund-match.com

First seen 2025-10-21 02:42
Last seen 2026-01-09 05:40
Open for 80 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 05:40
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: devseekapi.bluent.it
Port: 443
URL: https://devseekapi.bluent.it

First seen 2025-11-29 00:16
Last seen 2026-01-09 05:25
Open for 41 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 05:25
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: siesta.jum-dev.com
Port: 443
URL: https://siesta.jum-dev.com

First seen 2025-11-23 00:21
Last seen 2026-01-09 04:57
Open for 47 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 04:57
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: salesforce-hook.alpha.despertaenergia.com
Port: 443
URL: https://salesforce-hook.alpha.despertaenergia.com

First seen 2025-11-14 04:23
Last seen 2026-01-09 04:23
Open for 56 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 04:23
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: nw-staging-techboard.distrito.me
Port: 80
URL: http://nw-staging-techboard.distrito.me

First seen 2025-11-23 02:31
Last seen 2026-01-09 04:15
Open for 47 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 04:15
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: ahm.quixi.com
Port: 443
URL: https://ahm.quixi.com

First seen 2025-11-22 02:04
Last seen 2026-01-09 02:59
Open for 48 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-09 02:59
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: preview.polyientx.com
Port: 443
URL: https://preview.polyientx.com

First seen 2025-11-26 01:20
Last seen 2026-01-08 23:26
Open for 43 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-08 23:26
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: staging-api.cresimplify.com
Port: 80
URL: http://staging-api.cresimplify.com

First seen 2025-11-25 00:24
Last seen 2026-01-08 23:17
Open for 44 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff436bb435dd0d417b6b91288e397d40895ce5eb68d4

Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /authentication/{accessToken}
GET /attachment
GET /attachment/{id}
GET /clients
GET /clients/{clientId}
GET /company
GET /company/{companyId}
GET /contacts
GET /contacts/{contactId}
GET /documents
GET /documents/{documentId}
GET /projects
GET /projects/{projectId}
GET /properties
GET /properties/{propertyId}
GET /properties/{propertyId}/delegates
GET /properties/{propertyId}/media
GET /properties/{propertyId}/media/{propertyMediaId}
GET /proposals
GET /proposals/{proposalId}
GET /subscription
GET /subscription/{id}
GET /users
GET /users/me
GET /users/{userId}
POST /auth-management
POST /authentication
POST /mailer
POST /proposals/{proposalId}/invite
POST /proposals/{proposalId}/reject
POST /proposals/{proposalId}/send
POST /upload
POST /webhook

Found on 2026-01-08 23:17

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: alamitos.quixi.com
Port: 443
URL: https://alamitos.quixi.com

First seen 2025-11-05 00:11
Last seen 2026-01-08 20:32
Open for 64 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-08 20:32
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.institutonetzer.org
Port: 80
URL: http://api.institutonetzer.org

First seen 2025-10-28 01:19
Last seen 2026-01-08 19:20
Open for 72 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-08 19:20
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: pay.zenmaid.com
Port: 443
URL: https://pay.zenmaid.com

First seen 2025-10-31 00:41
Last seen 2026-01-04 06:42
Open for 65 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d9b8ac41ee982f4303f095f9325922980c6755b8

GraphQL introspection enabled at /graphql
Types: 863 (by kind: ENUM: 98, INPUT_OBJECT: 295, OBJECT: 450, SCALAR: 18, UNION: 2)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentAssignmentsUpdateWeb, appointmentBulkChargeWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-04 06:42

991.9 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dac494eda56ff6cf8aec0245de86616c0700a97c

GraphQL introspection enabled at /graphql
Types: 818 (by kind: ENUM: 91, INPUT_OBJECT: 277, OBJECT: 432, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentChargeCreateWeb, appointmentDeleteWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-21 08:00

929.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c64229e3080e2821ffeb4c0bedd5793a6aaa3dc6

GraphQL introspection enabled at /graphql
Types: 815 (by kind: ENUM: 91, INPUT_OBJECT: 276, OBJECT: 430, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentChargeCreateWeb, appointmentDeleteWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-13 05:45

922.9 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa34ee037fcad3fd6400c79035c80a14c937f755ebb

GraphQL introspection enabled at /graphql
Types: 808 (by kind: ENUM: 89, INPUT_OBJECT: 275, OBJECT: 426, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentChargeCreateWeb, appointmentDeleteWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-29 00:59

917.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31e719b12d30d87e2aa5b265ad91815215b3818fd

GraphQL introspection enabled at /graphql
Types: 803 (by kind: ENUM: 89, INPUT_OBJECT: 272, OBJECT: 424, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentDeleteWeb, appointmentFieldsUpdateWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-27 04:23

912.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dbfcd5a4a10ec8280a5a2a24ee038a475a8e09df

GraphQL introspection enabled at /graphql
Types: 802 (by kind: ENUM: 88, INPUT_OBJECT: 272, OBJECT: 424, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentDeleteWeb, appointmentFieldsUpdateWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-22 20:05

910.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-11-12 19:19

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33119f3f55763d9f7efa8d34dee165c8c2da4e75c

GraphQL introspection enabled at /graphql
Types: 787 (by kind: ENUM: 86, INPUT_OBJECT: 268, OBJECT: 415, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentDeleteWeb, appointmentFieldsUpdateWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-10 16:10

895.6 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: m4p43l3ct0r4l.com
Port: 80
URL: http://m4p43l3ct0r4l.com

First seen 2025-05-11 15:17
Last seen 2026-01-03 04:19
Open for 236 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc51fa561ca214e33dc188d50daf703cb5
```
Found 4 files trough .DS_Store spidering:

/css
/db
/img
/js
```
  Found on 2026-01-03 04:19
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: m4p43l3ct0r4l.com
Port: 443
URL: https://m4p43l3ct0r4l.com

First seen 2025-05-11 15:17
Last seen 2026-01-03 04:19
Open for 236 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc51fa561ca214e33dc188d50daf703cb5
```
Found 4 files trough .DS_Store spidering:

/css
/db
/img
/js
```
  Found on 2026-01-03 04:19
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.test-v3-sfa.online
Port: 443
URL: https://www.test-v3-sfa.online

First seen 2025-03-07 08:03
Last seen 2026-01-03 01:17
Open for 301 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d29c9543a29c9543a29c9543a29c9543a
```
Found 1 files trough .DS_Store spidering:

/uploads
```
  Found on 2026-01-03 01:17
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: qaoperaciones.mgmmarco.com
Port: 443
URL: https://qaoperaciones.mgmmarco.com

First seen 2025-11-04 00:43
Last seen 2026-01-03 01:17
Open for 60 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa341eaef48fc0d1cec546944dc654e294a6dccfc1a
```
GraphQL introspection enabled at /graphql
Types: 17 (by kind: ENUM: 2, OBJECT: 11, SCALAR: 4)
Operations:
- Query: Query | fields: companies, company
- Mutation: Mutation | fields: addCompany, deleteCompany, updateCompany
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 1
companies (args: optional/default) : total=3
```
  Found on 2026-01-03 01:17
  
  25.1 kBytes 1 rows
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 75.2.97.79
Domain: capral.adboxapp.com
Port: 443
URL: https://capral.adboxapp.com

First seen 2025-11-13 04:05
Last seen 2026-01-03 01:07
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-03 01:07
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-28 22:23
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: vue-real-estate.kenekt.app
Port: 443
URL: https://vue-real-estate.kenekt.app

First seen 2025-10-01 03:54
Last seen 2026-01-03 00:39
Open for 93 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-03 00:39
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 10:19
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: erp.happyplaygrounds.com
Port: 443
URL: https://erp.happyplaygrounds.com

First seen 2022-11-17 00:25
Last seen 2026-01-03 00:37
Open for 1143 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d325beceb325beceb325beceb325beceb
```
Found 1 files trough .DS_Store spidering:

/assets
```
  Found on 2026-01-03 00:37
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d0ba8d34a0ba8d34a0ba8d34a0ba8d34a
```
Found 1 files trough .DS_Store spidering:

/packs
```
  Found on 2024-12-06 00:47
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: aarnahomes.kenekt.app
Port: 443
URL: https://aarnahomes.kenekt.app

First seen 2025-01-14 04:27
Last seen 2026-01-03 00:35
Open for 353 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-03 00:35
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 22:21
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-16 03:18
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: ican-uk-event.com
Port: 443
URL: https://ican-uk-event.com

First seen 2025-09-18 21:44
Last seen 2026-01-03 00:22
Open for 106 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c70ba7b5770ba7b57f0196617717d70bf54597b777aa96526

Found 54 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/s3/avatar-image.png
/s3/capworth_certificate_template.jpeg
/s3/generated_forms
/s3/generated_forms/qr_7.pdf
/s3/ican-uk-events-serve.xlsx
/s3/ICAN_Original_Certificate.jpg
/s3/ICAN_Original_Certificate_1.jpg
/s3/ICAN_Original_Certificatedkdkdkdk.jpg
/s3/one.jpg
/s3/reg_form.pdf
/s3/three.jpg
/s3/two.jpg
/temp
/web.config

Found on 2026-01-03 00:22

Severity: low
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcfbf04a76f818507e7d472e88f4171b171

Found 25 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-11-30 00:21

Severity: medium
Fingerprint: 5f32cf5d6962f09cef4770e6ef4770e6dc050392eee342926cd39b16eb0f42b1

Found 42 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-11-30 00:21

Severity: low
Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45b260eb1973132049e6469a956c4f281b

Found 30 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-11-26 09:24

Severity: medium
Fingerprint: 5f32cf5d6962f09cd4047824d4047824c93fd99ce3d504bcad338d1c3268bdda

Found 35 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-11-02 17:03

Severity: medium
Fingerprint: 5f32cf5d6962f09c8efce1938efce193046ae6cb6b4184ebc5857e1b6ba779e1

Found 36 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-10-22 23:41

Severity: medium
Fingerprint: 5f32cf5d6962f09cecc85b04ecc85b048c79e47c8a0b749c5c2d4bfcf64e71c6

Found 53 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/s3/avatar-image.png
/s3/capworth_certificate_template.jpeg
/s3/generated_forms
/s3/ican-uk-events-serve.xlsx
/s3/ICAN_Original_Certificate.jpg
/s3/ICAN_Original_Certificate_1.jpg
/s3/ICAN_Original_Certificatedkdkdkdk.jpg
/s3/one.jpg
/s3/reg_form.pdf
/s3/three.jpg
/s3/two.jpg
/temp
/web.config

Found on 2025-10-09 08:51

Severity: medium
Fingerprint: 5f32cf5d6962f09cccd847a3ccd847a3ffb3ce9b020a46fb347ded4be2958652

Found 43 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/generated_forms
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-09-30 12:38

Severity: medium
Fingerprint: 5f32cf5d6962f09c910c508a910c508a76ee39ee244c1976c2785c320a4ea1b1

Found 55 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/generated_forms
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/s3/avatar-image.png
/s3/capworth_certificate_template.jpeg
/s3/generated_forms
/s3/generated_forms/qr_7.pdf
/s3/ican-uk-events-serve.xlsx
/s3/ICAN_Original_Certificate.jpg
/s3/ICAN_Original_Certificate_1.jpg
/s3/ICAN_Original_Certificatedkdkdkdk.jpg
/s3/one.jpg
/s3/reg_form.pdf
/s3/three.jpg
/s3/two.jpg
/temp
/web.config

Found on 2025-09-28 12:01

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: gumpslegal.prevail-portal.com
Port: 80
URL: http://gumpslegal.prevail-portal.com

First seen 2025-03-06 20:39
Last seen 2026-01-03 00:18
Open for 302 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f27d3c38af5f4664b6cedff006cedff00
```
Found 3 files trough .DS_Store spidering:

/download
/images
/packs
```
  Found on 2026-01-03 00:18
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 35.71.145.101
Domain: esp.adboxapp.com
Port: 443
URL: https://esp.adboxapp.com

First seen 2025-11-13 04:13
Last seen 2026-01-03 00:00
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-03 00:00
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-13 04:13
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: managedwealth.kenekt.app
Port: 80
URL: http://managedwealth.kenekt.app

First seen 2025-04-12 00:32
Last seen 2026-01-02 23:34
Open for 265 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 23:34
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 02:39
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.totem.io
Port: 443
URL: https://www.totem.io

First seen 2025-02-28 00:24
Last seen 2026-01-02 23:29
Open for 308 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9b4da533ecdd83fa08201445361fb8b28
```
Found 5 files trough .DS_Store spidering:

/uploads
/uploads/wedding_designs
/uploads/wedding_designs/20
/uploads/wedding_designs/24
/uploads/wedding_designs/25
```
  Found on 2026-01-02 23:29
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: sprague.fleetpanda.com
Port: 443
URL: https://sprague.fleetpanda.com

First seen 2025-11-15 03:20
Last seen 2026-01-02 23:17
Open for 48 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2026-01-02 23:17

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa385bc6649e3921ceb83e385a2a26aac8f0772418f

GraphQL introspection enabled at /graphql
Types: 1373 (by kind: ENUM: 145, INPUT_OBJECT: 613, OBJECT: 596, SCALAR: 9, UNION: 10)
Operations:
- Query: Query | fields: appVersion, appliedPricings, asset, assetInventories, assetInventorySummary
- Mutation: Mutation | fields: accountingAsync, acknowledgeNote, addAssetToDeliveryOrder, addCodeToAsset, addFeeToOrderGroup
Directives: deprecated, include, skip (total: 3)

Found on 2025-11-30 17:46

1.6 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33a5883de4770194e85746cbf1c0b16728ed15ee2

GraphQL introspection enabled at /graphql
Types: 1368 (by kind: ENUM: 144, INPUT_OBJECT: 611, OBJECT: 594, SCALAR: 9, UNION: 10)
Operations:
- Query: Query | fields: appVersion, appliedPricings, asset, assetInventories, assetInventorySummary
- Mutation: Mutation | fields: accountingAsync, acknowledgeNote, addAssetToDeliveryOrder, addCodeToAsset, addFeeToOrderGroup
Directives: deprecated, include, skip (total: 3)

Found on 2025-11-15 03:20

1.6 MBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: angellawoffice.prevail-portal.com
Port: 80
URL: http://angellawoffice.prevail-portal.com

First seen 2025-01-09 21:07
Last seen 2026-01-02 23:16
Open for 358 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f27d3c38af5f4664b6cedff006cedff00
```
Found 3 files trough .DS_Store spidering:

/download
/images
/packs
```
  Found on 2026-01-02 23:16
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: properties.suburbanedge.com.au
Port: 443
URL: https://properties.suburbanedge.com.au

First seen 2025-08-22 03:28
Last seen 2026-01-02 23:16
Open for 133 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 23:16
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 12:37
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 75.2.97.79
Domain: api-preview.endlesscommerce.com
Port: 443
URL: https://api-preview.endlesscommerce.com

First seen 2025-10-25 05:57
Last seen 2026-01-02 22:35
Open for 69 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2026-01-02 22:35

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa343d6c370b8ab2774c8e334b75beb73e747b2970b

GraphQL introspection enabled at /graphql
Types: 641 (by kind: ENUM: 116, INPUT_OBJECT: 242, OBJECT: 260, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-01 12:02

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b91ee1d0e614a5148769a1176d87be47d9061c6b

GraphQL introspection enabled at /graphql
Types: 637 (by kind: ENUM: 116, INPUT_OBJECT: 240, OBJECT: 258, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-27 12:22

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ffb9ec2960b1328b03a7652e2cd2a446d7b1ab00

GraphQL introspection enabled at /graphql
Types: 634 (by kind: ENUM: 115, INPUT_OBJECT: 239, OBJECT: 257, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-23 08:01

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3883d5447df60f37564e700747db672c0b151041e

GraphQL introspection enabled at /graphql
Types: 632 (by kind: ENUM: 114, INPUT_OBJECT: 239, OBJECT: 256, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-16 17:17

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dd37f01ea0d0590ee67e10c5ed9f9ef150bc4b11

GraphQL introspection enabled at /graphql
Types: 603 (by kind: ENUM: 108, INPUT_OBJECT: 231, OBJECT: 241, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-12 21:44

1.1 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f4ff2397bacdf74553647e6472c8db30379f048e

GraphQL introspection enabled at /graphql
Types: 599 (by kind: ENUM: 107, INPUT_OBJECT: 230, OBJECT: 239, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-10 20:27

1.1 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa39df517a44804de28f7d532bb8706306b941a00cf

GraphQL introspection enabled at /graphql
Types: 593 (by kind: ENUM: 106, INPUT_OBJECT: 228, OBJECT: 236, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-08 15:58

1.1 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ccb40ee3feb71f21107344501a426c0cc43b6e4a

GraphQL introspection enabled at /graphql
Types: 586 (by kind: ENUM: 106, INPUT_OBJECT: 221, OBJECT: 236, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-05 02:40

1.1 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa39f8260bbce7235392e28a2d840f6ec5d746ba31d

GraphQL introspection enabled at /graphql
Types: 579 (by kind: ENUM: 103, INPUT_OBJECT: 216, OBJECT: 237, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPersonInvitation, addColor, addNote, addOrderItem, addPerson
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-03 12:18

1.0 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31afe168b9f13e789b34e6548277daded46a6abed

GraphQL introspection enabled at /graphql
Types: 578 (by kind: ENUM: 103, INPUT_OBJECT: 215, OBJECT: 237, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPersonInvitation, addColor, addNote, addOrderItem, addPerson
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-10-30 17:37

1.0 MBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: sunray-dev1.noodoe.com.cn
Port: 80
URL: http://sunray-dev1.noodoe.com.cn

First seen 2025-11-16 00:25
Last seen 2026-01-02 22:29
Open for 47 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3db76ad31f6c3c333cb73996d975dc83082d11752

GraphQL introspection enabled at /graphql
Types: 251 (by kind: ENUM: 41, INPUT_OBJECT: 63, INTERFACE: 1, OBJECT: 127, SCALAR: 17, UNION: 2)
Operations:
- Query: Query | fields: Emergency, Social, UUID, _dummy, blockedCreations
- Mutation: Mutation | fields: EmergencyMutation, MapMutation, MileageMutation, SocialMutation, _dummy
- Subscription: Subscription | fields: _dummy, activityChanged, creationCollectsChanged, creationCommentsChanged, creationLikesChanged
Directives: deprecated, include, skip (total: 3)

Found on 2026-01-02 22:29

249.4 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: www.test.qkly.co
Port: 443
URL: https://www.test.qkly.co

First seen 2025-10-16 08:11
Last seen 2026-01-02 22:29
Open for 78 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa36a3cc14574a3a8876cdfd14eab6d3709b57e9f2b

GraphQL introspection enabled at /graphql
Types: 357 (by kind: ENUM: 21, INPUT_OBJECT: 47, INTERFACE: 16, OBJECT: 255, SCALAR: 11, UNION: 7)
Operations:
- Query: Query | fields: adminUser, asset, backgroundImage, backgroundJob, brand
- Mutation: Mutation | fields: addToIneligibleList, answerSurvey, appStoreUrlMutation, checkEligibility, confirmPhone
- Subscription: Subscription | fields: claimedForDeal, id, wantInCreated, wantInUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 22:29

636.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d5fcf263389295a1c59d8868072a3a9ff483c299

GraphQL introspection enabled at /graphql
Types: 356 (by kind: ENUM: 21, INPUT_OBJECT: 47, INTERFACE: 15, OBJECT: 255, SCALAR: 11, UNION: 7)
Operations:
- Query: Query | fields: adminUser, asset, backgroundImage, backgroundJob, brand
- Mutation: Mutation | fields: addToIneligibleList, answerSurvey, appStoreUrlMutation, checkEligibility, confirmPhone
- Subscription: Subscription | fields: claimedForDeal, id, wantInCreated, wantInUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-20 19:37

636.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3581eee4bcf4898c943f053f06f2cc227101d7d91

GraphQL introspection enabled at /graphql
Types: 352 (by kind: ENUM: 21, INPUT_OBJECT: 47, INTERFACE: 15, OBJECT: 251, SCALAR: 11, UNION: 7)
Operations:
- Query: Query | fields: adminUser, asset, backgroundImage, backgroundJob, brand
- Mutation: Mutation | fields: addToIneligibleList, answerSurvey, appStoreUrlMutation, checkEligibility, confirmPhone
- Subscription: Subscription | fields: claimedForDeal, id, wantInCreated, wantInUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-16 10:56

626.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa373baf320b7d1292461e62c31291de4d02bdfbff8

GraphQL introspection enabled at /graphql
Types: 350 (by kind: ENUM: 21, INPUT_OBJECT: 47, INTERFACE: 15, OBJECT: 249, SCALAR: 11, UNION: 7)
Operations:
- Query: Query | fields: adminUser, asset, backgroundImage, backgroundJob, brand
- Mutation: Mutation | fields: addToIneligibleList, answerSurvey, appStoreUrlMutation, checkEligibility, confirmPhone
- Subscription: Subscription | fields: claimedForDeal, id, wantInCreated, wantInUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-24 21:51

618.7 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: app.glik.ar
Port: 80
URL: http://app.glik.ar

First seen 2024-12-22 00:20
Last seen 2026-01-02 22:25
Open for 376 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d820452ce2850033c47271429120b2174b
```
Found 8 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/external
/logos
/packs
/robots.txt
/safari-pinned-tab.svg
```
  Found on 2026-01-02 22:25
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: sandbox.postpossible.org
Port: 443
URL: https://sandbox.postpossible.org

First seen 2025-07-24 02:03
Last seen 2026-01-02 22:20
Open for 162 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642bcfccc19ecde6a83ecde6a83ecde6a83
```
Found 2 files trough .DS_Store spidering:

/poptential
/poptential/poptential-logo-backup.png
```
  Found on 2026-01-02 22:20
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: stage-api.proksimity.com
Port: 443
URL: https://stage-api.proksimity.com

First seen 2025-11-26 01:01
Last seen 2026-01-02 22:03
Open for 37 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35a91380de3b7672ffb729fba94f02dc15f794b8b

GraphQL introspection enabled at /graphql
Types: 19 (by kind: ENUM: 2, INPUT_OBJECT: 1, OBJECT: 9, SCALAR: 7)
Operations:
- Query: Query | fields: getPlaceById, getPlaceByUuid, listAllPlaces
- Mutation: Mutation | fields: createPlace
Directives: constraint, deprecated, include, oneOf, rolesAllowed, skip, specifiedBy (total: 7)

Found on 2026-01-02 22:03

25.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35a91380de3b7672ffb729fba94f02dc1d1b219ef

GraphQL introspection enabled at /graphql
Types: 19 (by kind: ENUM: 2, INPUT_OBJECT: 1, OBJECT: 9, SCALAR: 7)
Operations:
- Query: Query | fields: getPlaceById, getPlaceByUuid, listAllPlaces
- Mutation: Mutation | fields: createPlace
Directives: constraint, deprecated, include, oneOf, rolesAllowed, skip, specifiedBy (total: 7)

Readable stores: 0

Found on 2025-12-27 02:14

25.2 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: fateh-real-estate.kenekt.app
Port: 443
URL: https://fateh-real-estate.kenekt.app

First seen 2025-09-24 03:17
Last seen 2026-01-02 21:26
Open for 100 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 21:26
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 05:20
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: materialpalette.com
Port: 443
URL: https://materialpalette.com

First seen 2024-11-22 17:46
Last seen 2026-01-02 21:23
Open for 406 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e91ec4a1aa3155cc0895cd635916285e4a
```
Found 5 files trough .DS_Store spidering:

/fonts
/fonts/GothamRounded-Book.otf
/fonts/GothamRounded-Light.otf
/img
/img/techtest 2
```
  Found on 2026-01-02 21:23
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfca832ed7f403e5723f2aee92e5d675f9a
```
Found 4 files trough .DS_Store spidering:

/fonts
/fonts/GothamRounded-Book.otf
/fonts/GothamRounded-Light.otf
/img
```
  Found on 2025-07-02 13:24
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api.gohadley.com
Port: 443
URL: https://api.gohadley.com

First seen 2025-10-20 01:06
Last seen 2026-01-02 21:12
Open for 74 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3b1c899f79a79abe5216d66ad07b83d5781743367
```
GraphQL introspection enabled at /graphql
Types: 174 (by kind: ENUM: 26, INPUT_OBJECT: 41, OBJECT: 99, SCALAR: 8)
Operations:
- Query: Query | fields: bankAccount, contacts, contributions, deduction, deductions
- Mutation: Mutation | fields: acceptFriendRequest, addBankAccount, archiveUser, confirmEmailAddress, connectOrganizationToFinch
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 21:12
  
  200.7 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: grayscale.grapes.tokyo
Port: 443
URL: https://grayscale.grapes.tokyo

First seen 2025-01-21 12:28
Last seen 2026-01-02 21:10
Open for 346 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814ebe1cdd56e5f47a5ff9ad920437d6027a
```
Found 6 files trough .DS_Store spidering:

/css
/images
/src
/src/bootstrap
/src/bootstrap/css
/src/bootstrap/js
```
  Found on 2026-01-02 21:10
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: properties.apihglobal.com
Port: 443
URL: https://properties.apihglobal.com

First seen 2025-09-08 00:40
Last seen 2026-01-02 21:04
Open for 116 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 21:04
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 18:19
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: fintrack.kenekt.app
Port: 80
URL: http://fintrack.kenekt.app

First seen 2025-04-12 00:13
Last seen 2026-01-02 20:36
Open for 265 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 20:36
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 22:26
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api.pierslaine.com
Port: 443
URL: https://api.pierslaine.com

First seen 2025-12-09 00:02
Last seen 2026-01-02 20:36
Open for 24 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3865d6d0fb1617d1dd9b223b37e4114a96cc77151

GraphQL introspection enabled at /graphql
Types: 102 (by kind: ENUM: 9, INPUT_OBJECT: 23, OBJECT: 62, SCALAR: 8)
Operations:
- Query: Query | fields: currentAdmin, getActivePackages, getAdminAppointmentSummary, getAppointmentSummary, getAvailableTechnicians
- Mutation: Mutation | fields: addLocationToBooking, addScheduleToBooking, addServicesInServiceStage, addServicesToBooking, adminBookingCancel
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2026-01-02 20:36

166.7 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: en.bossaz-pr-1101.azstage.in
Port: 443
URL: https://en.bossaz-pr-1101.azstage.in

First seen 2025-11-21 08:32
Last seen 2026-01-02 20:26
Open for 42 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3edcd2f02dd1cea9285e39de80e5d532613018182
```
GraphQL introspection enabled at /graphql
Types: 125 (by kind: ENUM: 22, INPUT_OBJECT: 20, INTERFACE: 2, OBJECT: 69, SCALAR: 10, UNION: 2)
Operations:
- Query: Query | fields: balanceHistory, bookmarks, categories, company, draftResume
- Mutation: Mutation | fields: createBookmark, createContactEmail, createInvoice, createPayment, createResume
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2026-01-02 20:26
  
  140.0 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: hmmm.prevail-portal.com
Port: 443
URL: https://hmmm.prevail-portal.com

First seen 2024-12-26 14:29
Last seen 2026-01-02 19:52
Open for 372 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f27d3c38af5f4664b6cedff006cedff00
```
Found 3 files trough .DS_Store spidering:

/download
/images
/packs
```
  Found on 2026-01-02 19:52
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 35.71.145.101
Domain: content.kingchildren.com
Port: 443
URL: https://content.kingchildren.com

First seen 2025-11-20 00:32
Last seen 2026-01-02 19:49
Open for 43 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a7daf4b44

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : updated_at=2023-10-12T02:02:08.436Z id=1 created_at=2023-10-12T02:02:08.428Z
layout (args: optional/default) : updated_at=2023-10-30T19:07:30.308Z id=1 created_at=2023-10-12T02:03:52.374Z

Found on 2026-01-02 19:49

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a4a2f9258

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z id=1
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-12-26 08:59

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a80858ba4

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : id=1 created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-12-24 09:35

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13adaf3df04

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : updated_at=2023-10-12T02:02:08.436Z id=1 created_at=2023-10-12T02:02:08.428Z
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-12-17 00:51

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a0c69b4ec

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : id=1 created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z
layout (args: optional/default) : created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z id=1

Found on 2025-12-01 17:09

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-11-22 04:20

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13ae09a4ab4

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false id=1 created_at=2023-10-30T20:15:17.877Z
homePage (args: optional/default) : updated_at=2023-10-12T02:02:08.436Z id=1 created_at=2023-10-12T02:02:08.428Z
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-11-20 00:32

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a9f304f6a

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : isBannerEnabled=false id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z
homePage (args: optional/default) : id=1 created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-11-20 00:32

420.5 kBytes 10 rows

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: professional-property-investors.kenekt.app
Port: 80
URL: http://professional-property-investors.kenekt.app

First seen 2025-10-08 02:16
Last seen 2026-01-02 19:45
Open for 86 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 19:45
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 04:23
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: convertmybankstatement.com
Port: 443
URL: https://convertmybankstatement.com

First seen 2025-05-11 15:52
Last seen 2026-01-02 19:38
Open for 236 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d820452ce23b2d12c5e66f7565c89a602e
```
Found 8 files trough .DS_Store spidering:

/404.html
/406-unsupported-browser.html
/422.html
/500.html
/cmbs_og_2x.png
/favicon.png
/logo.png
/robots.txt
```
  Found on 2026-01-02 19:38
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.orbai.ai
Port: 443
URL: https://www.orbai.ai

First seen 2025-11-17 19:58
Last seen 2026-01-02 19:30
Open for 45 days

Severity: high
Fingerprint: 5f32cf5d6962f09c3af247253af24725ac198a545415d10445d1b95eb2d13cf6

Found 9 files trough .DS_Store spidering:

/app.py
/assets
/demo
/index.html
/Procfile
/product.html
/requirements.txt
/Robot.zip
/static

Found on 2026-01-02 19:30

Severity: high
Fingerprint: 5f32cf5d6962f09c684e525d684e525d2140340c493232fc889d2ee9590b9628

Found 27 files trough .DS_Store spidering:

/app.py
/assets
/bloos.png
/demo
/favicon.png
/head_video.mp4
/img
/index.html
/logo.png
/logo_3d.glb
/page3_backup_css.txt
/page3_backup_html.txt
/page3_backup_js.txt
/Procfile
/product
/product-script.js
/product-styles.css
/product.html
/requirements.txt
/robot.png
/Robot.zip
/runtime.txt
/script.js
/sketch1.png
/static
/styles.css
/video.mp4

Found on 2025-12-16 23:23

Severity: high
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcfe2e9ff220b1582be6f09a66b415668e5

Found 25 files trough .DS_Store spidering:

/app.py
/assets
/bloos.png
/favicon.png
/head_video.mp4
/img
/index.html
/logo.png
/logo_3d.glb
/page3_backup_css.txt
/page3_backup_html.txt
/page3_backup_js.txt
/Procfile
/product
/product-script.js
/product-styles.css
/product.html
/requirements.txt
/robot.png
/Robot.zip
/runtime.txt
/script.js
/sketch1.png
/styles.css
/video.mp4

Found on 2025-12-06 08:53

Severity: high
Fingerprint: 5f32cf5d6962f09c8efce1938efce193e4d847be697b136bfe1b9c69f7292dc3

Found 36 files trough .DS_Store spidering:

/app.py
/bloos.png
/favicon.png
/head_video.mp4
/img
/img/apps
/img/apps/app1.png
/img/apps/app10.png
/img/apps/app2.png
/img/apps/app3.png
/img/apps/app4.png
/img/apps/app5.png
/img/apps/app6.png
/img/apps/app7.png
/img/apps/app8.png
/img/apps/app9.png
/img/cards
/index.html
/logo.png
/logo_3d.glb
/page3_backup_css.txt
/page3_backup_html.txt
/page3_backup_js.txt
/Procfile
/product
/product-script.js
/product-styles.css
/product.html
/requirements.txt
/robot.png
/Robot.zip
/runtime.txt
/script.js
/sketch.png
/styles.css
/video.mp4

Found on 2025-12-01 10:39

Severity: high
Fingerprint: 5f32cf5d6962f09c915008969150089692b80a356e8069d0ac4a6882c6ac5289

Found 37 files trough .DS_Store spidering:

/app.py
/bloos.png
/favicon.png
/head_video.mp4
/img
/img/apps
/img/apps/app1.png
/img/apps/app10.png
/img/apps/app2.png
/img/apps/app3.png
/img/apps/app4.png
/img/apps/app5.png
/img/apps/app6.png
/img/apps/app7.png
/img/apps/app8.png
/img/apps/app9.png
/img/cards
/index.html
/logo.png
/logo_3d.glb
/page3_backup_css.txt
/page3_backup_html.txt
/page3_backup_js.txt
/Procfile
/product
/product-script.js
/product-styles.css
/product.html
/product.mp4
/requirements.txt
/robot.png
/Robot.zip
/runtime.txt
/script.js
/sketch.png
/styles.css
/video.mp4

Found on 2025-11-23 13:49

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 75.2.97.79
Domain: arl.adboxapp.com
Port: 443
URL: https://arl.adboxapp.com

First seen 2025-11-13 04:33
Last seen 2026-01-02 19:15
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 19:15
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-13 04:33
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: audisa.adboxapp.com
Port: 443
URL: https://audisa.adboxapp.com

First seen 2025-11-13 03:53
Last seen 2026-01-02 19:12
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 19:12
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-13 03:53
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.upsellkit.com
Port: 443
URL: https://www.upsellkit.com

First seen 2022-09-25 00:54
Last seen 2026-01-02 18:51
Open for 1195 days

Severity: medium
Fingerprint: 5f32cf5d6962f09ca29b58f1a29b58f1d460ecd82a98eeb52622f569cdad63c8

Found 78 files trough .DS_Store spidering:

/500_old.html
/example_email.jpg
/favicon.ico
/Favicon.png
/fonts
/img
/img/back_arrow.png
/img/background.jpg
/img/bg_special_install.jpg
/img/checkout.jpg
/img/chillipage_background.jpg
/img/coupons
/img/coupons/Coupon B2.svg
/img/coupons/coupon_1.svg
/img/coupons/coupon_10.svg
/img/coupons/coupon_10_old.svg
/img/coupons/coupon_11.svg
/img/coupons/coupon_12.svg
/img/coupons/coupon_13.svg
/img/coupons/coupon_14.svg
/img/coupons/coupon_15.svg
/img/coupons/coupon_16.svg
/img/coupons/coupon_17.svg
/img/coupons/coupon_18.svg
/img/coupons/coupon_19.svg
/img/coupons/coupon_2.svg
/img/coupons/coupon_3.svg
/img/coupons/coupon_4.svg
/img/coupons/coupon_6.svg
/img/coupons/coupon_7.svg
/img/coupons/coupon_8.svg
/img/coupons/coupon_9.svg
/img/coupons/Discount code 1.svg
/img/grid.png
/img/home
/img/home/Background.png
/img/home/cover_emails.jpg
/img/home/cover_popups.jpg
/img/home/Emails gallery.png
/img/home/Popups gallery.png
/img/home/Textos.rtf
/img/iphone6.png
/img/iphone_6.png
/img/loading_spinner.gif
/img/logo-fit-bw.png
/img/logo-fit.png
/img/Logo.png
/img/logo_welcome.png
/img/macbook.png
/img/marketing_automation.svg
/img/no_image_product.png
/img/p3_cus.png
/img/placeholder-image.png
/img/placeholder_img.png
/img/Shopify_Logo.png
/img/shopify_promo
/img/shopify_promo/email.png
/img/shopify_promo/logo_landing.png
/img/shopify_promo/popup.png
/img/trash_icon_48.png
/img/unsubscribed.png
/img/video_covers
/img/video_covers/Copia de upkit_bundle_cover.jpg
/img/video_covers/Copia de upkit_upsell_cover.jpg
/img/video_covers/upkit_bundle_cover1.jpg
/img/video_covers/upkit_upsell_cover1.jpg
/javascripts
/lookbook_complete.json
/lti.css
/lti.js
/lti_process.js
/magnific-popup.css
/maintenance.jpg
/manifest.json
/robots.txt
/support_requests.json
/tinymce-4-5
/uploads

Found on 2026-01-02 18:51

Severity: medium
Fingerprint: 5f32cf5d6962f09c8ef2655c8ef2655cd9641ab3d5a9997ab517dc6e2c9afdbd

Found 71 files trough .DS_Store spidering:

/500_old.html
/example_email.jpg
/favicon.ico
/Favicon.png
/fonts
/img
/img/back_arrow.png
/img/background.jpg
/img/bg_special_install.jpg
/img/checkout.jpg
/img/chillipage_background.jpg
/img/coupons
/img/coupons/Coupon B2.svg
/img/coupons/coupon_1.svg
/img/coupons/coupon_10.svg
/img/coupons/coupon_10_old.svg
/img/coupons/coupon_11.svg
/img/coupons/coupon_12.svg
/img/coupons/coupon_13.svg
/img/coupons/coupon_14.svg
/img/coupons/coupon_15.svg
/img/coupons/coupon_16.svg
/img/coupons/coupon_17.svg
/img/coupons/coupon_18.svg
/img/coupons/coupon_19.svg
/img/coupons/coupon_2.svg
/img/coupons/coupon_3.svg
/img/coupons/coupon_4.svg
/img/coupons/coupon_6.svg
/img/coupons/coupon_7.svg
/img/coupons/coupon_8.svg
/img/coupons/coupon_9.svg
/img/coupons/Discount code 1.svg
/img/grid.png
/img/home
/img/home/Background.png
/img/home/cover_emails.jpg
/img/home/cover_popups.jpg
/img/home/Emails gallery.png
/img/home/Popups gallery.png
/img/home/Textos.rtf
/img/iphone6.png
/img/iphone_6.png
/img/loading_spinner.gif
/img/logo-fit-bw.png
/img/logo-fit.png
/img/Logo.png
/img/logo_welcome.png
/img/macbook.png
/img/marketing_automation.svg
/img/no_image_product.png
/img/p3_cus.png
/img/placeholder-image.png
/img/placeholder_img.png
/img/Shopify_Logo.png
/img/shopify_promo
/img/trash_icon_48.png
/img/unsubscribed.png
/img/video_covers
/javascripts
/lookbook_complete.json
/lti.css
/lti.js
/lti_process.js
/magnific-popup.css
/maintenance.jpg
/manifest.json
/robots.txt
/support_requests.json
/tinymce-4-5
/uploads

Found on 2025-06-12 23:12

Severity: low
Fingerprint: 5f32cf5d6962f09cdafa5447dafa544731a12b6aaa7be6fba83d8d4ba969aada

Found 18 files trough .DS_Store spidering:

/500_old.html
/example_email.jpg
/favicon.ico
/Favicon.png
/fonts
/img
/javascripts
/lookbook_complete.json
/lti.css
/lti.js
/lti_process.js
/magnific-popup.css
/maintenance.jpg
/manifest.json
/robots.txt
/support_requests.json
/tinymce-4-5
/uploads

Found on 2025-03-24 03:48

Severity: medium
Fingerprint: 5f32cf5d6962f09cee671e0bee671e0b6cd5bc9605c96b6f1dbd65077bd99638

Found 72 files trough .DS_Store spidering:

/500_old.html
/example_email.jpg
/favicon.ico
/Favicon.png
/fonts
/img
/img/back_arrow.png
/img/background.jpg
/img/bg_special_install.jpg
/img/checkout.jpg
/img/chillipage_background.jpg
/img/coupons
/img/coupons/Coupon B2.svg
/img/coupons/coupon_1.svg
/img/coupons/coupon_10.svg
/img/coupons/coupon_10_old.svg
/img/coupons/coupon_11.svg
/img/coupons/coupon_12.svg
/img/coupons/coupon_13.svg
/img/coupons/coupon_14.svg
/img/coupons/coupon_15.svg
/img/coupons/coupon_16.svg
/img/coupons/coupon_17.svg
/img/coupons/coupon_18.svg
/img/coupons/coupon_19.svg
/img/coupons/coupon_2.svg
/img/coupons/coupon_3.svg
/img/coupons/coupon_4.svg
/img/coupons/coupon_6.svg
/img/coupons/coupon_7.svg
/img/coupons/coupon_8.svg
/img/coupons/coupon_9.svg
/img/coupons/Discount code 1.svg
/img/grid.png
/img/home
/img/iphone6.png
/img/iphone_6.png
/img/loading_spinner.gif
/img/logo-fit-bw.png
/img/logo-fit.png
/img/Logo.png
/img/logo_welcome.png
/img/macbook.png
/img/marketing_automation.svg
/img/no_image_product.png
/img/p3_cus.png
/img/placeholder-image.png
/img/placeholder_img.png
/img/Shopify_Logo.png
/img/shopify_promo
/img/shopify_promo/email.png
/img/shopify_promo/logo_landing.png
/img/shopify_promo/popup.png
/img/trash_icon_48.png
/img/unsubscribed.png
/img/video_covers
/img/video_covers/Copia de upkit_bundle_cover.jpg
/img/video_covers/Copia de upkit_upsell_cover.jpg
/img/video_covers/upkit_bundle_cover1.jpg
/img/video_covers/upkit_upsell_cover1.jpg
/javascripts
/lookbook_complete.json
/lti.css
/lti.js
/lti_process.js
/magnific-popup.css
/maintenance.jpg
/manifest.json
/robots.txt
/support_requests.json
/tinymce-4-5
/uploads

Found on 2024-08-06 11:34

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: admin.islandshrimpco.com
Port: 443
URL: https://admin.islandshrimpco.com

First seen 2025-10-21 10:25
Last seen 2026-01-02 18:27
Open for 73 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
  Found on 2026-01-02 18:27
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62567ae6f21313d3d9baff6d37451f8e4723963de
```
GraphQL introspection enabled at /api/graphql
Types: 2811 (by kind: ENUM: 10, INPUT_OBJECT: 659, OBJECT: 2133, SCALAR: 8, UNION: 1)
Operations:
- Query: Query | fields: Doc, Docs, Photo, Photos, docAccessPhoto
- Mutation: Mutation | fields: createDoc, createPhoto, deletePhoto, updateDoc, updatePhoto
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2025-11-30 21:10
  
  2.1 MBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: getchatty.chat
Port: 443
URL: https://getchatty.chat

First seen 2025-10-01 21:26
Last seen 2026-01-02 18:24
Open for 92 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642d9722e0d6af1d2956af1d2956af1d295
```
Found 2 files trough .DS_Store spidering:

/uploads
/uploads/dad-449.mp4
```
  Found on 2026-01-02 18:24
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api.winefolly.com
Port: 80
URL: http://api.winefolly.com

First seen 2025-10-22 00:05
Last seen 2026-01-02 18:15
Open for 72 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3067658479c3a9f75b78298fba3f82aed89049d25
```
GraphQL introspection enabled at /graphql
Types: 20 (by kind: ENUM: 2, INPUT_OBJECT: 1, OBJECT: 12, SCALAR: 5)
Operations:
- Query: Query | fields: me, note, notes, user
- Mutation: Mutation | fields: cancelSubscription, createNote, requestUpload, unlinkProvider, updateNotifications
Directives: deprecated, include, skip (total: 3)

Readable stores: 0
```
  Found on 2026-01-02 18:15
  
  29.9 kBytes
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: core-api.staging.lifestreams.ai
Port: 443
URL: https://core-api.staging.lifestreams.ai

First seen 2025-10-29 01:10
Last seen 2026-01-02 18:07
Open for 65 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3c68cbc6a34dce7daf1dc7ff2d478f177bcec91cf
```
GraphQL introspection enabled at /graphql
Types: 215 (by kind: ENUM: 44, INPUT_OBJECT: 58, OBJECT: 103, SCALAR: 9, UNION: 1)
Operations:
- Query: Query | fields: accountExists, getAccount, getAccountUsers, getCurrentAccount, getManyAccounts
- Mutation: Mutation | fields: addAccount, addUserToAccount, createAccountIntegration, deactivate, updateAccount
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2026-01-02 18:07
  
  318.9 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: certellcollege.postpossible.org
Port: 80
URL: http://certellcollege.postpossible.org

First seen 2025-07-23 01:51
Last seen 2026-01-02 17:46
Open for 163 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642bcfccc19ecde6a83ecde6a83ecde6a83
```
Found 2 files trough .DS_Store spidering:

/poptential
/poptential/poptential-logo-backup.png
```
  Found on 2026-01-02 17:46
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: www.admin.eatatcolbies.com
Port: 80
URL: http://www.admin.eatatcolbies.com

First seen 2025-11-15 03:30
Last seen 2026-01-02 17:44
Open for 48 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3f0391cdcc70700607b16d873b7fabe3ae90955cc
```
GraphQL introspection enabled at /graphql
Types: 177 (by kind: ENUM: 3, INPUT_OBJECT: 44, OBJECT: 118, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: category, categorys, categorysConnection, recipe, recipes
- Mutation: Mutation | fields: createCategory, createRecipe, deleteCategory, updateCategory, updateRecipe
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2026-01-02 17:44
  
  151.5 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: properties.acceleratewealth.com.au
Port: 80
URL: http://properties.acceleratewealth.com.au

First seen 2025-05-25 03:29
Last seen 2026-01-02 17:43
Open for 222 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 17:43
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 15:09
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: one-agency-macquarie-fields.kenekt.app
Port: 80
URL: http://one-agency-macquarie-fields.kenekt.app

First seen 2025-11-24 02:07
Last seen 2026-01-02 17:40
Open for 39 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 17:40
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api.reviewpoint.com
Port: 443
URL: https://api.reviewpoint.com

First seen 2025-10-16 08:11
Last seen 2026-01-02 17:39
Open for 78 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
  Found on 2026-01-02 17:39
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d6fcfaa9d3abc5ae913fd06a497772ba2eaa5da338
```
GraphQL introspection enabled at /api/graphql
Types: 1509 (by kind: ENUM: 10, INPUT_OBJECT: 1427, OBJECT: 65, SCALAR: 7)
Operations:
- Query: Query | fields: companyContacts, companyContactsCount, contact, contactByEmail, contactByPhoneNumber
- Mutation: Mutation | fields: changePassword, deleteOneContact, requestPasswordReset, resetPassword, updateOneOffCampaignContact
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2025-11-29 12:11
  
  2.4 MBytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: big-bar-wiki.altaviz.ca
Port: 80
URL: http://big-bar-wiki.altaviz.ca

First seen 2025-11-13 01:45
Last seen 2026-01-02 17:31
Open for 50 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31ac6de87e8a5d535f7f8046b56dfed4c602b84ec

GraphQL introspection enabled at /graphql
Types: 133 (by kind: ENUM: 10, INPUT_OBJECT: 12, OBJECT: 106, SCALAR: 5)
Operations:
- Query: Query | fields: analytics, assets, authentication, comments, contribute
- Mutation: Mutation | fields: analytics, assets, authentication, comments, groups
- Subscription: Subscription | fields: loggingLiveTrail
Directives: auth, cacheControl, deprecated, include, rateLimit, skip, specifiedBy (total: 7)

Found on 2026-01-02 17:31

186.5 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: manheim.adboxapp.com
Port: 443
URL: https://manheim.adboxapp.com

First seen 2025-11-13 04:03
Last seen 2026-01-02 16:54
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 16:54
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-13 04:03
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: unswsydney.adboxapp.com
Port: 443
URL: https://unswsydney.adboxapp.com

First seen 2025-11-13 03:53
Last seen 2026-01-02 16:43
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 16:43
  
  93.7 kBytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: content.kingchildren.com
Port: 80
URL: http://content.kingchildren.com

First seen 2025-11-20 00:32
Last seen 2026-01-02 16:38
Open for 43 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a0c69b4ec

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : id=1 created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z
layout (args: optional/default) : created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z id=1

Found on 2026-01-02 16:38

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13ace8d744c

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : updated_at=2023-10-12T02:02:08.436Z id=1 created_at=2023-10-12T02:02:08.428Z
layout (args: optional/default) : created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z id=1

Found on 2025-12-30 14:26

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a80858ba4

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : id=1 created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-12-26 13:40

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13af2837c94

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false id=1 created_at=2023-10-30T20:15:17.877Z
homePage (args: optional/default) : id=1 created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-12-23 04:51

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13ae09a4ab4

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false id=1 created_at=2023-10-30T20:15:17.877Z
homePage (args: optional/default) : updated_at=2023-10-12T02:02:08.436Z id=1 created_at=2023-10-12T02:02:08.428Z
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-12-20 15:49

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a4a2f9258

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z id=1
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-12-10 19:39

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a9f304f6a

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : isBannerEnabled=false id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z
homePage (args: optional/default) : id=1 created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-11-24 08:39

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13acadac364

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : id=1 created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z
layout (args: optional/default) : updated_at=2023-10-30T19:07:30.308Z id=1 created_at=2023-10-12T02:03:52.374Z

Found on 2025-11-22 04:20

420.5 kBytes 10 rows

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api-internal-stag02.koi.eco
Port: 80
URL: http://api-internal-stag02.koi.eco

First seen 2025-11-22 03:03
Last seen 2026-01-02 16:38
Open for 41 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa39e517219d442ba7b97381215539e798ecdf723c4

GraphQL introspection enabled at /graphql
Types: 297 (by kind: ENUM: 29, INPUT_OBJECT: 140, OBJECT: 116, SCALAR: 12)
Operations:
- Query: Query | fields: apiKey, apiKeys, apiKeysPage, cedarjs, redwood
- Mutation: Mutation | fields: createApiKey, createAuthor, deleteApiKey, processAuthenticatedUser, updateApiKey
Directives: deprecated, include, oneOf, requireAuth, skip, skipAuth, specifiedBy (total: 7)

Found on 2026-01-02 16:38

513.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f1e9f36fcf2a543d7d12508b1d5d06981e5c68fa

GraphQL introspection enabled at /graphql
Types: 296 (by kind: ENUM: 28, INPUT_OBJECT: 140, OBJECT: 116, SCALAR: 12)
Operations:
- Query: Query | fields: apiKey, apiKeys, apiKeysPage, cedarjs, redwood
- Mutation: Mutation | fields: createApiKey, createAuthor, deleteApiKey, processAuthenticatedUser, updateApiKey
Directives: deprecated, include, oneOf, requireAuth, skip, skipAuth, specifiedBy (total: 7)

Found on 2025-12-26 13:40

512.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa36747214108e5564323f2e54dad1899d695acdcbc

GraphQL introspection enabled at /graphql
Types: 295 (by kind: ENUM: 27, INPUT_OBJECT: 140, OBJECT: 116, SCALAR: 12)
Operations:
- Query: Query | fields: apiKey, apiKeys, apiKeysPage, cedarjs, redwood
- Mutation: Mutation | fields: createApiKey, createAuthor, deleteApiKey, processAuthenticatedUser, updateApiKey
Directives: deprecated, include, oneOf, requireAuth, skip, skipAuth, specifiedBy (total: 7)

Found on 2025-12-23 04:49

513.3 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api.inlet.fm
Port: 80
URL: http://api.inlet.fm

First seen 2025-11-25 00:44
Last seen 2026-01-02 16:20
Open for 38 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa303f1069a7b138d0aef3924107f21c896415c6247

GraphQL introspection enabled at /graphql
Types: 142 (by kind: ENUM: 25, INPUT_OBJECT: 39, INTERFACE: 5, OBJECT: 62, SCALAR: 11)
Operations:
- Query: Query | fields: managedProspect, managedProspects, me, searchUsers, user
- Mutation: Mutation | fields: adminInviteProspect, confirmEmail, createProspect, googleIdentitySignIn, updateUserLinks
Directives: acl, deprecated, include, oneOf, skip, specifiedBy (total: 6)

Found on 2026-01-02 16:20

175.6 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 35.71.145.101
Domain: app.zenmaid.app
Port: 443
URL: https://app.zenmaid.app

First seen 2025-10-31 00:59
Last seen 2026-01-02 16:18
Open for 63 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d9b8ac41ee982f4303f095f9325922980c6755b8

GraphQL introspection enabled at /graphql
Types: 863 (by kind: ENUM: 98, INPUT_OBJECT: 295, OBJECT: 450, SCALAR: 18, UNION: 2)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentAssignmentsUpdateWeb, appointmentBulkChargeWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 16:18

991.9 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-12-31 00:09

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dac494eda56ff6cf8aec0245de86616c0700a97c

GraphQL introspection enabled at /graphql
Types: 818 (by kind: ENUM: 91, INPUT_OBJECT: 277, OBJECT: 432, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentChargeCreateWeb, appointmentDeleteWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-20 10:52

929.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c64229e3080e2821ffeb4c0bedd5793a6aaa3dc6

GraphQL introspection enabled at /graphql
Types: 815 (by kind: ENUM: 91, INPUT_OBJECT: 276, OBJECT: 430, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentChargeCreateWeb, appointmentDeleteWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-13 13:49

922.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa34ee037fcad3fd6400c79035c80a14c937f755ebb

GraphQL introspection enabled at /graphql
Types: 808 (by kind: ENUM: 89, INPUT_OBJECT: 275, OBJECT: 426, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentChargeCreateWeb, appointmentDeleteWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-01 03:04

917.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dbfcd5a4a10ec8280a5a2a24ee038a475a8e09df

GraphQL introspection enabled at /graphql
Types: 802 (by kind: ENUM: 88, INPUT_OBJECT: 272, OBJECT: 424, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentDeleteWeb, appointmentFieldsUpdateWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-26 10:23

910.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa30af89564fc49e6681b06d664df70138753e5f01f

GraphQL introspection enabled at /graphql
Types: 800 (by kind: ENUM: 88, INPUT_OBJECT: 271, OBJECT: 423, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentDeleteWeb, appointmentFieldsUpdateWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-13 14:12

909.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33119f3f55763d9f7efa8d34dee165c8c2da4e75c

GraphQL introspection enabled at /graphql
Types: 787 (by kind: ENUM: 86, INPUT_OBJECT: 268, OBJECT: 415, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentDeleteWeb, appointmentFieldsUpdateWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-10 16:10

895.6 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: signaturedevelopments.kenekt.app
Port: 443
URL: https://signaturedevelopments.kenekt.app

First seen 2024-12-08 23:48
Last seen 2026-01-02 16:14
Open for 389 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 16:14
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 21:31
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-14 22:19
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: develop.fleetpanda.com
Port: 443
URL: https://develop.fleetpanda.com

First seen 2025-11-15 02:00
Last seen 2026-01-02 15:52
Open for 48 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2026-01-02 15:52
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa385bc6649e3921ceb83e385a2a26aac8f0772418f
```
GraphQL introspection enabled at /graphql
Types: 1373 (by kind: ENUM: 145, INPUT_OBJECT: 613, OBJECT: 596, SCALAR: 9, UNION: 10)
Operations:
- Query: Query | fields: appVersion, appliedPricings, asset, assetInventories, assetInventorySummary
- Mutation: Mutation | fields: accountingAsync, acknowledgeNote, addAssetToDeliveryOrder, addCodeToAsset, addFeeToOrderGroup
Directives: deprecated, include, skip (total: 3)
```
  Found on 2025-11-29 01:43
  
  1.6 MBytes
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 75.2.97.79
Domain: afwagportal.org
Port: 443
URL: https://afwagportal.org

First seen 2025-04-26 04:42
Last seen 2026-01-02 15:51
Open for 251 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c6731298567312985431972ba8a44fd87eac76a910d233665

Found 92 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/intro/intro1
/frontend-assets/images/intro/intro1/bg-1 copy.jpg
/frontend-assets/images/intro/intro1/bg-1.jpg
/frontend-assets/images/intro/intro10
/frontend-assets/images/intro/intro11
/frontend-assets/images/intro/intro12
/frontend-assets/images/intro/intro3
/frontend-assets/images/intro/intro4
/frontend-assets/images/intro/intro5
/frontend-assets/images/intro/intro6
/frontend-assets/images/intro/intro7
/frontend-assets/images/intro/intro8
/frontend-assets/images/intro/intro9
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/products/mini-cart
/frontend-assets/images/products/product
/frontend-assets/images/products/product/327
/frontend-assets/images/products/shopping-cart
/frontend-assets/images/products/single-product
/frontend-assets/images/products/widget
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2026-01-02 15:51

Severity: medium
Fingerprint: 5f32cf5d6962f09c1e3ea8c61e3ea8c6a639d37b489f8e14a6f33832d24a1834

Found 86 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/intro/intro1
/frontend-assets/images/intro/intro1/bg-1 copy.jpg
/frontend-assets/images/intro/intro1/bg-1.jpg
/frontend-assets/images/intro/intro10
/frontend-assets/images/intro/intro11
/frontend-assets/images/intro/intro12
/frontend-assets/images/intro/intro3
/frontend-assets/images/intro/intro4
/frontend-assets/images/intro/intro5
/frontend-assets/images/intro/intro6
/frontend-assets/images/intro/intro7
/frontend-assets/images/intro/intro8
/frontend-assets/images/intro/intro9
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-12-24 00:02

Severity: low
Fingerprint: 5f32cf5d6962f09c0f8dcf020f8dcf02298463c745038fe8dedf2086b84aa4b8

Found 24 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets

Found on 2025-12-01 04:05

Severity: medium
Fingerprint: 5f32cf5d6962f09cddacc81addacc81aa2d220ef8aeb5eb0bf3421ce09ad1700

Found 68 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-11-27 01:16

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f87726595ec97d31be798c76363b6fc2adaf9

Found 11 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/profile
/backend-assets/js
/frontend-assets

Found on 2025-11-23 09:11

Severity: medium
Fingerprint: 5f32cf5d6962f09c3078a2ae3078a2ae5a78d3f336572dac548b86eaed8a0cea

Found 73 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-11-12 21:40

Severity: medium
Fingerprint: 5f32cf5d6962f09c6e6dc6946e6dc69469ba316dd6578cb22928085c2a41a043

Found 84 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/intro/intro1
/frontend-assets/images/intro/intro10
/frontend-assets/images/intro/intro11
/frontend-assets/images/intro/intro12
/frontend-assets/images/intro/intro3
/frontend-assets/images/intro/intro4
/frontend-assets/images/intro/intro5
/frontend-assets/images/intro/intro6
/frontend-assets/images/intro/intro7
/frontend-assets/images/intro/intro8
/frontend-assets/images/intro/intro9
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-11-10 23:07

Severity: medium
Fingerprint: 5f32cf5d6962f09c48b4adea48b4adea8b9e345f1380fb8039c51d1e1d2977d6

Found 91 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/intro/intro1
/frontend-assets/images/intro/intro1/bg-1 copy.jpg
/frontend-assets/images/intro/intro1/bg-1.jpg
/frontend-assets/images/intro/intro10
/frontend-assets/images/intro/intro11
/frontend-assets/images/intro/intro12
/frontend-assets/images/intro/intro3
/frontend-assets/images/intro/intro4
/frontend-assets/images/intro/intro5
/frontend-assets/images/intro/intro6
/frontend-assets/images/intro/intro7
/frontend-assets/images/intro/intro8
/frontend-assets/images/intro/intro9
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/products/mini-cart
/frontend-assets/images/products/product
/frontend-assets/images/products/shopping-cart
/frontend-assets/images/products/single-product
/frontend-assets/images/products/widget
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-11-08 21:11

Severity: low
Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bc250ff385d7f5934a6863bb14754902aa

Found 22 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/frontend-assets

Found on 2025-11-03 08:11

Severity: low
Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45ad82977a58ced0c7278440d12d6b107b

Found 30 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-10-28 18:31

Severity: medium
Fingerprint: 5f32cf5d6962f09c7b6beb587b6beb58fd3762c1cffbbd6e62f0f768caee6e65

Found 57 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/blog
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-10-26 14:11

Severity: medium
Fingerprint: 5f32cf5d6962f09c93a25c3a93a25c3a815e428fa1574bcc91b9baf706330494

Found 46 files trough .DS_Store spidering:

/backend-assets
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-08-25 00:31

Severity: low
Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d825b62841d9c839ee2bafb7e80f6a5b35

Found 8 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets

Found on 2025-06-26 00:07

Severity: medium
Fingerprint: 5f32cf5d6962f09cb1c4b1dfb1c4b1df20683d7851ddbba1c97c83e701755be6

Found 61 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/blog
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-04-26 04:42

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api.stage.affectifi.com
Port: 443
URL: https://api.stage.affectifi.com

First seen 2025-11-21 04:19
Last seen 2026-01-02 15:37
Open for 42 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa34d09b6c5aea9250722908ad43bad0affb6ac56c3

GraphQL introspection enabled at /graphql
Types: 353 (by kind: ENUM: 2, INPUT_OBJECT: 76, OBJECT: 268, SCALAR: 7)
Operations:
- Query: Query | fields: achievements, action_tendencies, appraisal, appraisals_by_participant, belief
- Mutation: Mutations | fields: action_tendency_delete, action_tendency_save, admin_login, invite_code_activation, sign_up
Directives: include, skip (total: 2)

Found on 2026-01-02 15:37

417.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa38dc0c273c368cff15874643aa542c9fd1216f979

GraphQL introspection enabled at /graphql
Types: 352 (by kind: ENUM: 2, INPUT_OBJECT: 75, OBJECT: 268, SCALAR: 7)
Operations:
- Query: Query | fields: achievements, action_tendencies, appraisal, appraisals_by_participant, belief
- Mutation: Mutations | fields: action_tendency_delete, action_tendency_save, admin_login, invite_code_activation, sign_up
Directives: include, skip (total: 2)

Found on 2025-12-24 20:29

415.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-11-24 10:43

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: property-method-co.kenekt.app
Port: 80
URL: http://property-method-co.kenekt.app

First seen 2025-09-10 23:25
Last seen 2026-01-02 15:36
Open for 113 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 15:36
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 07:38
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: admin.islandshrimpco.com
Port: 80
URL: http://admin.islandshrimpco.com

First seen 2025-10-21 10:25
Last seen 2026-01-02 15:27
Open for 73 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
  Found on 2026-01-02 15:27
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62567ae6f21313d3d9baff6d37451f8e4723963de
```
GraphQL introspection enabled at /api/graphql
Types: 2811 (by kind: ENUM: 10, INPUT_OBJECT: 659, OBJECT: 2133, SCALAR: 8, UNION: 1)
Operations:
- Query: Query | fields: Doc, Docs, Photo, Photos, docAccessPhoto
- Mutation: Mutation | fields: createDoc, createPhoto, deletePhoto, updateDoc, updatePhoto
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2025-12-01 11:33
  
  2.1 MBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: packages.land.build
Port: 80
URL: http://packages.land.build

First seen 2025-04-28 01:38
Last seen 2026-01-02 15:16
Open for 249 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 15:16
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 06:22
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.mndl.pro
Port: 443
URL: https://www.mndl.pro

First seen 2024-11-05 13:25
Last seen 2026-01-02 15:14
Open for 423 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fd02d66875fa3a76f405ece2f405ece2f
```
Found 3 files trough .DS_Store spidering:

/css
/js
/js/lib
```
  Found on 2026-01-02 15:14
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176422b63f4828ac3cca08ac3cca08ac3cca0
```
Found 2 files trough .DS_Store spidering:

/css
/js
```
  Found on 2025-07-05 00:29
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 75.2.97.79
Domain: cms.mlsplayers.org
Port: 80
URL: http://cms.mlsplayers.org

First seen 2025-10-21 14:07
Last seen 2026-01-02 14:54
Open for 73 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
  Found on 2026-01-02 14:54
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d6d27f74ef99f154bd741b3e328114ee3e4cf180a8
```
GraphQL introspection enabled at /api/graphql
Types: 2931 (by kind: ENUM: 72, INPUT_OBJECT: 515, OBJECT: 2334, SCALAR: 8, UNION: 2)
Operations:
- Query: Query | fields: Content, Contents, Knowledge_base, Knowledge_bases, docAccessContent
- Mutation: Mutation | fields: createContent, createKnowledge_base, deleteContent, updateContent, updateKnowledge_base
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2025-12-01 15:16
  
  2.0 MBytes
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: nba-blog-crm.cloudsitedsolutions.com
Port: 443
URL: https://nba-blog-crm.cloudsitedsolutions.com

First seen 2025-11-28 00:09
Last seen 2026-01-02 14:47
Open for 35 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3e889d1f435e0c2f874a387d666e6ccb887595d2a
```
GraphQL introspection enabled at /graphql
Types: 111 (by kind: ENUM: 3, INPUT_OBJECT: 32, OBJECT: 66, SCALAR: 9, UNION: 1)
Operations:
- Query: Query | fields: i18NLocale, uploadFile, uploadFiles, uploadFolder, uploadFolders
- Mutation: Mutation | fields: createUploadFile, createUploadFolder, deleteUploadFile, updateUploadFile, updateUploadFolder
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2026-01-02 14:47
  
  141.5 kBytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 75.2.97.79
Domain: api.nickelpayments.com
Port: 80
URL: http://api.nickelpayments.com

First seen 2025-11-10 02:01
Last seen 2026-01-02 14:44
Open for 53 days

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d690cd2a5d41c4c93f6d7c045b8fd4a207761ecf6b

GraphQL introspection enabled at /api/graphql
Types: 381 (by kind: ENUM: 27, INPUT_OBJECT: 27, OBJECT: 320, SCALAR: 7)
Operations:
- Query: Query | fields: creditApplication, customers, organization, user, webhooks
- Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2026-01-02 14:44

456.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d636b97f9fd9cbe82d9f182b31189ddb4524ef1211

GraphQL introspection enabled at /api/graphql
Types: 380 (by kind: ENUM: 26, INPUT_OBJECT: 27, OBJECT: 320, SCALAR: 7)
Operations:
- Query: Query | fields: creditApplication, customers, organization, user, webhooks
- Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-12-04 20:50

455.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6a65d8aef520006bd45a2cf612582c275257f7da1

GraphQL introspection enabled at /api/graphql
Types: 379 (by kind: ENUM: 26, INPUT_OBJECT: 27, OBJECT: 319, SCALAR: 7)
Operations:
- Query: Query | fields: creditApplication, customers, organization, user, webhooks
- Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-30 19:28

454.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6a4e5c25739f61d8502244f49aa61522d668d8159

GraphQL introspection enabled at /api/graphql
Types: 378 (by kind: ENUM: 25, INPUT_OBJECT: 27, OBJECT: 319, SCALAR: 7)
Operations:
- Query: Query | fields: creditApplication, customers, organization, user, webhooks
- Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-26 15:58

452.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6ad480f8f4b16889de83752814a4174951f0da9c1

GraphQL introspection enabled at /api/graphql
Types: 372 (by kind: ENUM: 23, INPUT_OBJECT: 27, OBJECT: 315, SCALAR: 7)
Operations:
- Query: Query | fields: creditApplication, customers, organization, user, webhooks
- Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-22 18:20

448.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d67d4ec50e29df55fe63590576983a944078e27028

GraphQL introspection enabled at /api/graphql
Types: 369 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 313, SCALAR: 7)
Operations:
- Query: Query | fields: creditApplication, customer, customers, organization, user
- Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-20 19:06

446.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d67d4ec50e29df55fe63590576983a9440eeab39f6

GraphQL introspection enabled at /api/graphql
Types: 369 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 313, SCALAR: 7)
Operations:
- Query: Query | fields: creditApplication, customer, customers, organization, user
- Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 0

Found on 2025-11-16 09:46

445.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d616071e5e9c83ccce2456d4a65123c970218a77a6

GraphQL introspection enabled at /api/graphql
Types: 368 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 312, SCALAR: 7)
Operations:
- Query: Query | fields: creditApplication, customer, customers, organization, user
- Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 0

Found on 2025-11-14 10:04

444.9 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: salesforce.dailyaudiobible.com
Port: 443
URL: https://salesforce.dailyaudiobible.com

First seen 2025-11-20 01:31
Last seen 2026-01-02 14:39
Open for 43 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa32f0023ad450d9b0f0bdbba6a1e62a3890566c110
```
GraphQL introspection enabled at /graphql
Types: 22 (by kind: ENUM: 3, OBJECT: 9, SCALAR: 10)
Operations:
- Query: Query | fields: _
- Mutation: Mutation | fields: _, migrateUserIds, processNewUser
- Subscription: Subscription | fields: _
Directives: cacheControl, deprecated, include, skip (total: 4)
```
  Found on 2026-01-02 14:39
  
  19.9 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: projects.landhar.com.au
Port: 80
URL: http://projects.landhar.com.au

First seen 2025-05-04 00:25
Last seen 2026-01-02 14:36
Open for 243 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 14:36
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 06:46
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 75.2.97.79
Domain: impact-admin.worldpulse.org
Port: 80
URL: http://impact-admin.worldpulse.org

First seen 2025-11-14 02:32
Last seen 2026-01-02 14:35
Open for 49 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb57cec3faa

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action
contactPage (args: optional/default) : address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse

Found on 2026-01-02 14:35

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5af2a669c

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About

Found on 2025-12-26 19:22

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5c4139346

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i...
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z
footer (args: optional/default) : instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More

Found on 2025-12-24 22:45

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb589e84ff8

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z
contactPage (args: optional/default) : subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you.
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/

Found on 2025-12-23 02:18

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5a6d91a52

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action
contactPage (args: optional/default) : address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493
financial (args: optional/default) : post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents
footer (args: optional/default) : facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse

Found on 2025-12-20 14:30

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5d04b2f37

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you.
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia

Found on 2025-12-18 17:24

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb59cb9e1a7

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z
contactPage (args: optional/default) : created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More

Found on 2025-12-16 13:25

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5be67e795

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i...
contactPage (args: optional/default) : updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z
financial (args: optional/default) : updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z
footer (args: optional/default) : instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More

Found on 2025-12-12 22:58

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb584f5a8e3

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca...
contactPage (args: optional/default) : address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2025-11-30 21:58

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5a19c2e8b

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices
contactPage (args: optional/default) : subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you.
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2025-11-28 18:35

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb551629d93

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca...
contactPage (args: optional/default) : phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse
financial (args: optional/default) : post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents
footer (args: optional/default) : instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More

Found on 2025-11-26 18:42

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-11-23 05:18

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb53dc30327

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z
contactPage (args: optional/default) : created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z

Found on 2025-11-21 10:51

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5da856dbf

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices
contactPage (args: optional/default) : subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you.
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More

Found on 2025-11-18 09:57

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb58686c14f

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-04-04T19:54:49.609Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia

Found on 2025-11-16 03:19

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb541d36b1f

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-04-04T19:54:49.609Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca...
contactPage (args: optional/default) : address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1

Found on 2025-11-14 02:32

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5577e9e09

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-04-04T19:54:49.609Z
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/

Found on 2025-11-14 02:32

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb582a99ba3

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-04-04T19:54:49.609Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you.
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/

Found on 2025-11-14 02:32

913.9 kBytes 28 rows

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: ressagroup.kenekt.app
Port: 80
URL: http://ressagroup.kenekt.app

First seen 2025-05-25 04:49
Last seen 2026-01-02 14:27
Open for 222 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 14:27
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 06:33
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: aussie-property.kenekt.app
Port: 80
URL: http://aussie-property.kenekt.app

First seen 2025-08-25 01:33
Last seen 2026-01-02 14:27
Open for 130 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 14:27
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 02:32
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: hashprop.hashfinancialgroup.com
Port: 80
URL: http://hashprop.hashfinancialgroup.com

First seen 2025-05-16 01:25
Last seen 2026-01-02 14:27
Open for 231 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 14:27
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 06:33
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: skoda.adboxapp.com
Port: 443
URL: https://skoda.adboxapp.com

First seen 2025-11-13 04:03
Last seen 2026-01-02 14:26
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 14:26
  
  93.7 kBytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api.vanta.gg
Port: 80
URL: http://api.vanta.gg

First seen 2025-12-02 01:13
Last seen 2026-01-02 14:12
Open for 31 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d9c8e569ed0ef14b9851432646cc0eab4f0012c3

GraphQL introspection enabled at /graphql
Types: 197 (by kind: ENUM: 7, INPUT_OBJECT: 5, OBJECT: 171, SCALAR: 14)
Operations:
- Query: Query | fields: arcadeGame, arcadeGames, associations, availablePlayersPrivateCoachingFreeTrial, availablePrivateCoachingFreeTrial
- Mutation: Mutation | fields: applyDiscountCode, bulkInvitePlayers, cancelEvent, createBreakoutRooms, createCheckIn
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 14:12

273.3 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: cms.mlsplayers.org
Port: 443
URL: https://cms.mlsplayers.org

First seen 2025-10-21 14:07
Last seen 2026-01-02 14:05
Open for 72 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
  Found on 2026-01-02 14:05
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d6d27f74ef99f154bd741b3e328114ee3e4cf180a8
```
GraphQL introspection enabled at /api/graphql
Types: 2931 (by kind: ENUM: 72, INPUT_OBJECT: 515, OBJECT: 2334, SCALAR: 8, UNION: 2)
Operations:
- Query: Query | fields: Content, Contents, Knowledge_base, Knowledge_bases, docAccessContent
- Mutation: Mutation | fields: createContent, createKnowledge_base, deleteContent, updateContent, updateKnowledge_base
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2025-11-30 12:50
  
  2.0 MBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: gemstone.kenekt.app
Port: 443
URL: https://gemstone.kenekt.app

First seen 2025-05-15 06:36
Last seen 2026-01-02 14:03
Open for 232 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 14:03
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 06:49
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: dragonflyprofessionals.kenekt.app
Port: 80
URL: http://dragonflyprofessionals.kenekt.app

First seen 2025-05-27 01:25
Last seen 2026-01-02 13:53
Open for 220 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 13:53
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 08:03
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: www.commentoid.com
Port: 443
URL: https://www.commentoid.com

First seen 2025-11-17 00:56
Last seen 2026-01-02 13:46
Open for 46 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3a20f87454ad3ea87ac475d2b116c8857116c8857
```
GraphQL introspection enabled at /graphql
Types: 13 (by kind: ENUM: 2, OBJECT: 8, SCALAR: 3)
Operations:
- Query: Query | fields: article
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2026-01-02 13:46
  
  17.6 kBytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api-preview.endlesscommerce.com
Port: 80
URL: http://api-preview.endlesscommerce.com

First seen 2025-10-25 05:57
Last seen 2026-01-02 13:21
Open for 69 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2026-01-02 13:21

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa343d6c370b8ab2774c8e334b75beb73e747b2970b

GraphQL introspection enabled at /graphql
Types: 641 (by kind: ENUM: 116, INPUT_OBJECT: 242, OBJECT: 260, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-01 02:22

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b91ee1d0e614a5148769a1176d87be47d9061c6b

GraphQL introspection enabled at /graphql
Types: 637 (by kind: ENUM: 116, INPUT_OBJECT: 240, OBJECT: 258, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-27 09:32

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ffb9ec2960b1328b03a7652e2cd2a446d7b1ab00

GraphQL introspection enabled at /graphql
Types: 634 (by kind: ENUM: 115, INPUT_OBJECT: 239, OBJECT: 257, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-23 06:17

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3883d5447df60f37564e700747db672c0b151041e

GraphQL introspection enabled at /graphql
Types: 632 (by kind: ENUM: 114, INPUT_OBJECT: 239, OBJECT: 256, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-16 13:19

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dd37f01ea0d0590ee67e10c5ed9f9ef150bc4b11

GraphQL introspection enabled at /graphql
Types: 603 (by kind: ENUM: 108, INPUT_OBJECT: 231, OBJECT: 241, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-12 16:11

1.1 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f4ff2397bacdf74553647e6472c8db30379f048e

GraphQL introspection enabled at /graphql
Types: 599 (by kind: ENUM: 107, INPUT_OBJECT: 230, OBJECT: 239, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-10 18:08

1.1 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa39df517a44804de28f7d532bb8706306b941a00cf

GraphQL introspection enabled at /graphql
Types: 593 (by kind: ENUM: 106, INPUT_OBJECT: 228, OBJECT: 236, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-08 15:53

1.1 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c1f8c3df872413edf62c575cfbb45941e4e30da1

GraphQL introspection enabled at /graphql
Types: 585 (by kind: ENUM: 106, INPUT_OBJECT: 220, OBJECT: 236, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPersonInvitation, addColor, addNote, addOrderItem, addPerson
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-04 22:15

1.1 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3a7c1342ca58bd5303c9a5f539adbc2e8ee76db36

GraphQL introspection enabled at /graphql
Types: 582 (by kind: ENUM: 106, INPUT_OBJECT: 217, OBJECT: 236, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPersonInvitation, addColor, addNote, addOrderItem, addPerson
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-03 17:45

1.0 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa39f8260bbce7235392e28a2d840f6ec5d746ba31d

GraphQL introspection enabled at /graphql
Types: 579 (by kind: ENUM: 103, INPUT_OBJECT: 216, OBJECT: 237, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPersonInvitation, addColor, addNote, addOrderItem, addPerson
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-02 13:32

1.0 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31afe168b9f13e789b34e6548277daded46a6abed

GraphQL introspection enabled at /graphql
Types: 578 (by kind: ENUM: 103, INPUT_OBJECT: 215, OBJECT: 237, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPersonInvitation, addColor, addNote, addOrderItem, addPerson
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-10-29 04:56

1.0 MBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: ilapi.postpossible.org
Port: 443
URL: https://ilapi.postpossible.org

First seen 2025-07-18 01:37
Last seen 2026-01-02 13:10
Open for 168 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642bcfccc19ecde6a83ecde6a83ecde6a83
```
Found 2 files trough .DS_Store spidering:

/poptential
/poptential/poptential-logo-backup.png
```
  Found on 2026-01-02 13:10
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2ba2d4782ba2d4782ba2d4782ba2d478
```
Found 1 files trough .DS_Store spidering:

/poptential
```
  Found on 2025-11-16 19:27
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api.development-4.agoratutoring.com
Port: 80
URL: http://api.development-4.agoratutoring.com

First seen 2025-11-16 00:44
Last seen 2026-01-02 12:59
Open for 47 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f0431ad004efb814e2986b014cfdc841fc996d87

GraphQL introspection enabled at /graphql
Types: 131 (by kind: ENUM: 6, INPUT_OBJECT: 41, INTERFACE: 3, OBJECT: 72, SCALAR: 9)
Operations:
- Query: Query | fields: allPins, allPosts, chat, coordinates, payments
- Mutation: Mutation | fields: createChat, createMessage, leaveChat, readChat, sendDonation
- Subscription: Subscription | fields: chatCreated, chatUpdated, messageCreated, messageUpdated
Directives: auth, cursor, deprecated, include, oneOf, skip, specifiedBy (total: 7)

Found on 2026-01-02 12:59

113.0 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 35.71.145.101
Domain: propertypros.kenekt.app
Port: 80
URL: http://propertypros.kenekt.app

First seen 2025-04-29 01:05
Last seen 2026-01-02 12:56
Open for 248 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 12:56
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 12:55
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: staging-api.lawncareos.com
Port: 80
URL: http://staging-api.lawncareos.com

First seen 2025-08-26 15:54
Last seen 2026-01-02 12:55
Open for 128 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d86bfb45c81ca2632005a4e73874be3d64
```
Found 8 files trough .DS_Store spidering:

/assets
/assets/css
/assets/css/color
/assets/fonts
/assets/images
/assets/js
/assets/scss
/images
```
  Found on 2026-01-02 12:55
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: apiv2.zeroframe.art
Port: 80
URL: http://apiv2.zeroframe.art

First seen 2025-11-10 01:41
Last seen 2026-01-02 12:54
Open for 53 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3a2503988576878ac12c99cbf288568741a97207c

GraphQL introspection enabled at /graphql
Types: 521 (by kind: ENUM: 13, INPUT_OBJECT: 108, OBJECT: 388, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: account, accountOption, accountOptions, accountOptionsConnection, accounts
- Mutation: Mutation | fields: createAccount, createAccountOption, deleteAccountOption, updateAccount, updateAccountOption
- Subscription: Subscription | fields: account, created_at, id, plan, updated_at
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2026-01-02 12:54

452.2 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.trainyardconsulting.com
Port: 443
URL: https://www.trainyardconsulting.com

First seen 2025-02-27 00:12
Last seen 2026-01-02 12:52
Open for 309 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db20782f8b20782f8b20782f8b20782f8
```
Found 1 files trough .DS_Store spidering:

/vite-dev
```
  Found on 2026-01-02 12:52
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: cloudflare.battlebase.app
Port: 443
URL: https://cloudflare.battlebase.app

First seen 2025-12-10 15:03
Last seen 2026-01-02 12:41
Open for 22 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa383ab510594e4dac74acb012b0aebb9132fbe4734

GraphQL introspection enabled at /graphql
Types: 54 (by kind: ENUM: 8, OBJECT: 35, SCALAR: 11)
Operations:
- Query: Query | fields: battle, battleSetup, config, me, user
- Mutation: Mutation | fields: createGuestUser, deleteAccount, linkCredentialsWithGuestUser, signIn, signUp
- Subscription: Subscription | fields: battleCreated, battleSetupUpdated, battleUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 12:41

117.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3a3a8a9d10e41cb134232e6bf5b7d02d75bcf2678

GraphQL introspection enabled at /graphql
Types: 52 (by kind: ENUM: 8, OBJECT: 33, SCALAR: 11)
Operations:
- Query: Query | fields: battle, battleSetup, config, me, user
- Mutation: Mutation | fields: createGuestUser, deleteAccount, linkCredentialsWithGuestUser, signIn, signUp
- Subscription: Subscription | fields: battleCreated, battleSetupUpdated, battleUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-26 14:55

114.1 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: empire8.kenekt.app
Port: 80
URL: http://empire8.kenekt.app

First seen 2025-05-25 02:29
Last seen 2026-01-02 12:37
Open for 222 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 12:37
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 00:34
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: www.joelsvintageguitars.com
Port: 443
URL: https://www.joelsvintageguitars.com

First seen 2025-12-05 05:39
Last seen 2026-01-02 12:02
Open for 28 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d620a457e866f9bf4c4e1545c55eaa92635685168b
```
GraphQL introspection enabled at /api/graphql
Types: 156 (by kind: ENUM: 10, INPUT_OBJECT: 102, OBJECT: 35, SCALAR: 9)
Operations:
- Query: Query | fields: contactRequest, contactRequests, user, users, usersCount
- Mutation: Mutation | fields: createUser, createUsers, deleteUser, updateUser, updateUsers
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2026-01-02 12:02
  
  216.0 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: build-sydney.kenekt.app
Port: 443
URL: https://build-sydney.kenekt.app

First seen 2025-10-15 02:50
Last seen 2026-01-02 11:58
Open for 79 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 11:58
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 16:55
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api.sketter.jp
Port: 443
URL: https://api.sketter.jp

First seen 2025-11-21 00:38
Last seen 2026-01-02 11:56
Open for 42 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa332ec47e211868ab253f4de057e3823acfd6184bc

GraphQL introspection enabled at /graphql
Types: 99 (by kind: ENUM: 8, INPUT_OBJECT: 34, OBJECT: 49, SCALAR: 8)
Operations:
- Query: Query | fields: currentHost, hostChats, hostConfirmationEmailToken, hostConfirmationToken, hostContracts
- Mutation: Mutation | fields: hostConfirmEmailUpdate, hostCreateChat, hostCreateHostStaff, hostCreateSpot, hostDestroyHostStaff
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 11:56

105.6 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: pzms.adboxapp.com
Port: 443
URL: https://pzms.adboxapp.com

First seen 2025-11-13 04:04
Last seen 2026-01-02 11:54
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 11:54
  
  93.7 kBytes
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: alpha-api.mindtrix.xyz
Port: 443
URL: https://alpha-api.mindtrix.xyz

First seen 2025-10-20 01:06
Last seen 2026-01-02 11:40
Open for 74 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa301e95c728b62ca828306b910c490079e51ffcc88
```
GraphQL introspection enabled at /graphql
Types: 236 (by kind: ENUM: 21, INPUT_OBJECT: 97, OBJECT: 109, SCALAR: 8, UNION: 1)
Operations:
- Query: Query | fields: confirmPassword, countsLikesOfOneLink, decryptPassword, encryptPassword, episodes
- Mutation: Mutation | fields: addChildToParentAccountFromPublishedCapability, addCronJobForSyncingPodcast, addShoppingList, addSubscriberToShow, batchMintForPodcastEpisodeCover
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2026-01-02 11:40
  
  395.5 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-27 07:05
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: getchatty.chat
Port: 80
URL: http://getchatty.chat

First seen 2025-10-01 21:26
Last seen 2026-01-02 11:38
Open for 92 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642d9722e0d6af1d2956af1d2956af1d295
```
Found 2 files trough .DS_Store spidering:

/uploads
/uploads/dad-449.mp4
```
  Found on 2026-01-02 11:38
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: tailawesome.com
Port: 443
URL: https://tailawesome.com

First seen 2025-02-17 20:30
Last seen 2026-01-02 11:29
Open for 318 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642f59365a35b3b376e5b3b376e5b3b376e
```
Found 2 files trough .DS_Store spidering:

/images
/sitemaps
```
  Found on 2026-01-02 11:29
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: winsqpg.kenekt.app
Port: 80
URL: http://winsqpg.kenekt.app

First seen 2025-05-25 03:49
Last seen 2026-01-02 11:08
Open for 222 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 11:08
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 12:29
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: preprod-api.xchangeseat.com
Port: 443
URL: https://preprod-api.xchangeseat.com

First seen 2025-10-19 01:09
Last seen 2026-01-02 11:08
Open for 75 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa334c687ef384e05bd4199ceebe19bf4356feb11e2

GraphQL introspection enabled at /graphql
Types: 44 (by kind: ENUM: 8, INPUT_OBJECT: 10, OBJECT: 20, SCALAR: 6)
Operations:
- Query: Query | fields: availableSwaps, checkSwapAvailability, me, mySwaps, user
- Mutation: Mutation | fields: login, sendMobileOTP, signup, verifyAge, verifyMobileOTP
- Subscription: Subscription | fields: exchangeUpdated, matchRequested, messageReceived
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 11:08

57.6 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: demo.equipnx.com
Port: 443
URL: https://demo.equipnx.com

First seen 2025-10-16 18:27
Last seen 2026-01-02 11:07
Open for 77 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ac975f4cdbe0ec102977755cc687551bd90c702a

GraphQL introspection enabled at /graphql
Types: 296 (by kind: ENUM: 2, INPUT_OBJECT: 59, INTERFACE: 3, OBJECT: 218, SCALAR: 10, UNION: 4)
Operations:
- Query: Query | fields: account, accounts, announcement, announcements, assessment
- Mutation: Mutation | fields: checkinToEvent, checkoutOfEvent, completeRoutineSession, completeTask, createAnnouncement
- Subscription: Subscription | fields: groupMessageDestroyed, groupMessageSent, groupMessageUpdated, groupMessages
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 11:07

1.0 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-12-26 12:01

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa37c4158aef730fe5e56fdfa12773df51d066f1fe0

GraphQL introspection enabled at /graphql
Types: 291 (by kind: ENUM: 2, INPUT_OBJECT: 59, INTERFACE: 3, OBJECT: 213, SCALAR: 10, UNION: 4)
Operations:
- Query: Query | fields: account, accounts, announcement, announcements, assessment
- Mutation: Mutation | fields: checkinToEvent, checkoutOfEvent, completeRoutineSession, completeTask, createAnnouncement
- Subscription: Subscription | fields: groupMessageDestroyed, groupMessageSent, groupMessageUpdated, groupMessages
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-24 10:02

1.0 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa372857039cb61745b95696ac15981aebe62bb537f

GraphQL introspection enabled at /graphql
Types: 291 (by kind: ENUM: 2, INPUT_OBJECT: 61, INTERFACE: 3, OBJECT: 211, SCALAR: 10, UNION: 4)
Operations:
- Query: Query | fields: account, accounts, announcement, announcements, assessment
- Mutation: Mutation | fields: checkinToEvent, checkoutOfEvent, completeRoutineSession, completeTask, createAnnouncement
- Subscription: Subscription | fields: groupMessageDestroyed, groupMessageSent, groupMessageUpdated, groupMessages
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-30 22:13

1.0 MBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 35.71.145.101
Domain: unito-property.kenekt.app
Port: 443
URL: https://unito-property.kenekt.app

First seen 2025-08-27 04:20
Last seen 2026-01-02 10:53
Open for 128 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 10:53
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 04:37
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: devrepo-admin.foundersworkshop.com
Port: 80
URL: http://devrepo-admin.foundersworkshop.com

First seen 2025-11-14 01:03
Last seen 2026-01-02 10:50
Open for 49 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa380ac81eed2c0411eda3db5dd17aaff86a7f37d50
```
GraphQL introspection enabled at /graphql
Types: 230 (by kind: ENUM: 6, INPUT_OBJECT: 47, OBJECT: 165, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: fileResource, fileResources, fileResourcesConnection, invoice, invoices
- Mutation: Mutation | fields: createFileResource, createInvoice, deleteFileResource, updateFileResource, updateInvoice
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2026-01-02 10:50
  
  195.3 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: capital-investment-ideas.kenekt.app
Port: 443
URL: https://capital-investment-ideas.kenekt.app

First seen 2025-11-15 03:01
Last seen 2026-01-02 10:45
Open for 48 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 10:45
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: cms.nolacagues.com
Port: 443
URL: https://cms.nolacagues.com

First seen 2025-10-22 08:03
Last seen 2026-01-02 10:42
Open for 72 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3787562b3ff1891b18df131d6e734f2043ec8317e
```
GraphQL introspection enabled at /graphql
Types: 82 (by kind: ENUM: 3, INPUT_OBJECT: 23, OBJECT: 47, SCALAR: 8, UNION: 1)
Operations:
- Query: Query | fields: consejo, consejos, uploadFile, uploadFiles, uploadFolder
- Mutation: Mutation | fields: createConsejo, createUploadFile, deleteConsejo, updateConsejo, updateUploadFile
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2026-01-02 10:42
  
  103.9 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: elitewealthcreators.kenekt.app
Port: 80
URL: http://elitewealthcreators.kenekt.app

First seen 2025-06-14 00:51
Last seen 2026-01-02 10:42
Open for 202 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 10:42
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 01:28
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: stage-api.proksimity.com
Port: 80
URL: http://stage-api.proksimity.com

First seen 2025-11-26 01:01
Last seen 2026-01-02 10:23
Open for 37 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa35a91380de3b7672ffb729fba94f02dc1d1b219ef
```
GraphQL introspection enabled at /graphql
Types: 19 (by kind: ENUM: 2, INPUT_OBJECT: 1, OBJECT: 9, SCALAR: 7)
Operations:
- Query: Query | fields: getPlaceById, getPlaceByUuid, listAllPlaces
- Mutation: Mutation | fields: createPlace
Directives: constraint, deprecated, include, oneOf, rolesAllowed, skip, specifiedBy (total: 7)

Readable stores: 0
```
  Found on 2026-01-02 10:23
  
  25.2 kBytes
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.leanlab.io
Port: 443
URL: https://www.leanlab.io

First seen 2022-09-22 01:59
Last seen 2026-01-02 10:23
Open for 1198 days

Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e925a4a2a8970813df63269c03333e594

Found 20 files trough .DS_Store spidering:

/assets
/assets/blogr
/assets/bootstrap
/assets/branding
/assets/ckeditor
/assets/covers
/assets/defaults
/assets/fonts
/assets/icons
/assets/rails_admin
/assets/screenshots
/uploads
/uploads/ckeditor
/uploads/ckeditor/pictures
/uploads/ckeditor/pictures/1
/uploads/tmp
/uploads/tmp/1402524819-4713-3281
/uploads/tmp/1402607826-3634-8974
/uploads/tmp/1402851903-1120-1072
/uploads/tmp/1404160474-1610-0459

Found on 2026-01-02 10:23

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d336cbabba9c5ffa678c5582d9f874c36

Found 12 files trough .DS_Store spidering:

/assets
/assets/blogr
/assets/bootstrap
/assets/branding
/assets/ckeditor
/assets/covers
/assets/defaults
/assets/fonts
/assets/icons
/assets/rails_admin
/assets/screenshots
/uploads

Found on 2025-11-28 17:21

Severity: low
Fingerprint: 5f32cf5d6962f09c47dfe71947dfe7191bd86887bc6029d213dccde1a33b19ac

Found 16 files trough .DS_Store spidering:

/assets
/assets/blogr
/assets/bootstrap
/assets/branding
/assets/ckeditor
/assets/covers
/assets/defaults
/assets/fonts
/assets/icons
/assets/rails_admin
/assets/screenshots
/uploads
/uploads/ckeditor
/uploads/ckeditor/pictures
/uploads/ckeditor/pictures/1
/uploads/tmp

Found on 2025-11-14 13:49

Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe800eab3a301fdb4dca292350b4dbedb4

Found 15 files trough .DS_Store spidering:

/assets
/assets/blogr
/assets/bootstrap
/assets/branding
/assets/ckeditor
/assets/covers
/assets/defaults
/assets/fonts
/assets/icons
/assets/rails_admin
/assets/screenshots
/uploads
/uploads/ckeditor
/uploads/ckeditor/pictures
/uploads/tmp

Found on 2025-10-07 05:33

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35bf639e88de58ed0389a48e0736d261466

Found 14 files trough .DS_Store spidering:

/assets
/assets/blogr
/assets/bootstrap
/assets/branding
/assets/ckeditor
/assets/covers
/assets/defaults
/assets/fonts
/assets/icons
/assets/rails_admin
/assets/screenshots
/uploads
/uploads/ckeditor
/uploads/tmp

Found on 2025-07-02 17:23

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: app.thebusinessbrain.co.uk
Port: 80
URL: http://app.thebusinessbrain.co.uk

First seen 2025-11-11 03:17
Last seen 2026-01-02 10:20
Open for 52 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa32ffd3f23d80a6be1ef979a9ad1a3c27ae925cfa6

GraphQL introspection enabled at /graphql
Types: 97 (by kind: ENUM: 2, INPUT_OBJECT: 2, OBJECT: 86, SCALAR: 7)
Operations:
- Query: Query | fields: migrateUsers, products, user, userDetails, users
- Mutation: Mutation | fields: deactivateUser, deleteUser, login, requestReset, signup
- Subscription: Subscription | fields: currency, id, lastBillDate, nextBillDate, price
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2026-01-02 10:20

174.2 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: adboxapp.com
Port: 443
URL: https://adboxapp.com

First seen 2025-11-13 04:03
Last seen 2026-01-02 10:16
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 10:16
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-28 22:23
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: apy.appizy.com
Port: 80
URL: http://apy.appizy.com

First seen 2025-11-12 00:03
Last seen 2026-01-02 09:57
Open for 51 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa36ea0027b8b3f3979f3b801af1b189f4332367c47

GraphQL introspection enabled at /graphql
Types: 65 (by kind: ENUM: 3, INPUT_OBJECT: 14, OBJECT: 40, SCALAR: 8)
Operations:
- Query: Query | fields: plans_translations, templates, templates_aggregated, templates_by_id, templates_by_version
- Subscription: Subscription | fields: plans_mutated, plans_translations_mutated, questions_mutated, questions_translations_mutated, templates_mutated
Directives: deprecated, include, skip (total: 3)

Readable stores: 0

Found on 2026-01-02 09:57

104.3 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: suzuki.adboxapp.com
Port: 443
URL: https://suzuki.adboxapp.com

First seen 2025-11-14 00:34
Last seen 2026-01-02 09:49
Open for 49 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 09:49
  
  93.7 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: thomaspaul.kenekt.app
Port: 80
URL: http://thomaspaul.kenekt.app

First seen 2025-05-25 04:59
Last seen 2026-01-02 09:48
Open for 222 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 09:48
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 02:35
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.hellobarrywelch.com
Port: 443
URL: https://www.hellobarrywelch.com

First seen 2025-02-17 20:52
Last seen 2026-01-02 09:16
Open for 318 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d325beceb325beceb325beceb325beceb
```
Found 1 files trough .DS_Store spidering:

/assets
```
  Found on 2026-01-02 09:16
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.orbai.ai
Port: 80
URL: http://www.orbai.ai

First seen 2025-11-17 19:58
Last seen 2026-01-02 09:14
Open for 45 days

Severity: high
Fingerprint: 5f32cf5d6962f09c3af247253af24725ac198a545415d10445d1b95eb2d13cf6

Found 9 files trough .DS_Store spidering:

/app.py
/assets
/demo
/index.html
/Procfile
/product.html
/requirements.txt
/Robot.zip
/static

Found on 2026-01-02 09:14

Severity: high
Fingerprint: 5f32cf5d6962f09c684e525d684e525d2140340c493232fc889d2ee9590b9628

Found 27 files trough .DS_Store spidering:

/app.py
/assets
/bloos.png
/demo
/favicon.png
/head_video.mp4
/img
/index.html
/logo.png
/logo_3d.glb
/page3_backup_css.txt
/page3_backup_html.txt
/page3_backup_js.txt
/Procfile
/product
/product-script.js
/product-styles.css
/product.html
/requirements.txt
/robot.png
/Robot.zip
/runtime.txt
/script.js
/sketch1.png
/static
/styles.css
/video.mp4

Found on 2025-12-16 23:23

Severity: high
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcfe2e9ff220b1582be6f09a66b415668e5

Found 25 files trough .DS_Store spidering:

/app.py
/assets
/bloos.png
/favicon.png
/head_video.mp4
/img
/index.html
/logo.png
/logo_3d.glb
/page3_backup_css.txt
/page3_backup_html.txt
/page3_backup_js.txt
/Procfile
/product
/product-script.js
/product-styles.css
/product.html
/requirements.txt
/robot.png
/Robot.zip
/runtime.txt
/script.js
/sketch1.png
/styles.css
/video.mp4

Found on 2025-12-06 08:53

Severity: high
Fingerprint: 5f32cf5d6962f09c8efce1938efce193e4d847be697b136bfe1b9c69f7292dc3

Found 36 files trough .DS_Store spidering:

/app.py
/bloos.png
/favicon.png
/head_video.mp4
/img
/img/apps
/img/apps/app1.png
/img/apps/app10.png
/img/apps/app2.png
/img/apps/app3.png
/img/apps/app4.png
/img/apps/app5.png
/img/apps/app6.png
/img/apps/app7.png
/img/apps/app8.png
/img/apps/app9.png
/img/cards
/index.html
/logo.png
/logo_3d.glb
/page3_backup_css.txt
/page3_backup_html.txt
/page3_backup_js.txt
/Procfile
/product
/product-script.js
/product-styles.css
/product.html
/requirements.txt
/robot.png
/Robot.zip
/runtime.txt
/script.js
/sketch.png
/styles.css
/video.mp4

Found on 2025-12-01 10:39

Severity: high
Fingerprint: 5f32cf5d6962f09c915008969150089692b80a356e8069d0ac4a6882c6ac5289

Found 37 files trough .DS_Store spidering:

/app.py
/bloos.png
/favicon.png
/head_video.mp4
/img
/img/apps
/img/apps/app1.png
/img/apps/app10.png
/img/apps/app2.png
/img/apps/app3.png
/img/apps/app4.png
/img/apps/app5.png
/img/apps/app6.png
/img/apps/app7.png
/img/apps/app8.png
/img/apps/app9.png
/img/cards
/index.html
/logo.png
/logo_3d.glb
/page3_backup_css.txt
/page3_backup_html.txt
/page3_backup_js.txt
/Procfile
/product
/product-script.js
/product-styles.css
/product.html
/product.mp4
/requirements.txt
/robot.png
/Robot.zip
/runtime.txt
/script.js
/sketch.png
/styles.css
/video.mp4

Found on 2025-11-23 13:49

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: next.alamere.io
Port: 443
URL: https://next.alamere.io

First seen 2025-10-27 17:50
Last seen 2026-01-02 09:11
Open for 66 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b06ea960a4f58be4f58cd264d96a7687f4ded13c

GraphQL introspection enabled at /graphql
Types: 148 (by kind: ENUM: 16, INPUT_OBJECT: 74, OBJECT: 52, SCALAR: 6)
Operations:
- Query: Query | fields: benchmarkCut, benchmarkCuts, benchmarkData, benchmarkDataFilters, benchmarks
- Mutation: Mutation | fields: acceptInvitation, acceptInvitationWithGoogle, addUserRole, benchmarkCutCsvUpload, bonusStructureCountryGroupDelete
Directives: deprecated, include, oneOf, skip, specifiedBy, upper (total: 6)

Found on 2026-01-02 09:11

286.2 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: staging-admin.feedbackforward.org
Port: 443
URL: https://staging-admin.feedbackforward.org

First seen 2025-11-21 05:09
Last seen 2026-01-02 09:08
Open for 42 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3400105ec05482f709bb2e5e59b271c805a001e70

GraphQL introspection enabled at /graphql
Types: 207 (by kind: ENUM: 16, INPUT_OBJECT: 43, INTERFACE: 2, OBJECT: 138, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 09:08

391.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3181a27e89b7baf4c851ec869ce672cf448945614

GraphQL introspection enabled at /graphql
Types: 202 (by kind: ENUM: 13, INPUT_OBJECT: 41, INTERFACE: 2, OBJECT: 138, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-16 10:59

389.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b4b02ad4aa531518a03d4c5d11f6cf68b7f2d088

GraphQL introspection enabled at /graphql
Types: 194 (by kind: ENUM: 13, INPUT_OBJECT: 40, INTERFACE: 2, OBJECT: 131, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-08 08:16

378.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-11-21 05:09

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: customer-portal-dev.fleetpanda.com
Port: 443
URL: https://customer-portal-dev.fleetpanda.com

First seen 2025-10-20 08:28
Last seen 2026-01-02 09:05
Open for 74 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3307cf10a472f2aba31e78cd61b6562ee18e50a1a

GraphQL introspection enabled at /graphql
Types: 152 (by kind: ENUM: 18, INPUT_OBJECT: 58, OBJECT: 68, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 09:05

160.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa326745cc4869061883a49da588adcf1109d326600

GraphQL introspection enabled at /graphql
Types: 151 (by kind: ENUM: 17, INPUT_OBJECT: 58, OBJECT: 68, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-01 16:09

159.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa30e961b676d4ef555b306105d48e4b8db60b48573

GraphQL introspection enabled at /graphql
Types: 147 (by kind: ENUM: 17, INPUT_OBJECT: 56, OBJECT: 66, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-24 03:06

155.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3facad751b6ebaf93b50b3d7783a9d3757ff263c1

GraphQL introspection enabled at /graphql
Types: 148 (by kind: ENUM: 18, INPUT_OBJECT: 56, OBJECT: 66, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-20 13:00

156.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3cb3674fd0d89f81f77d5730b57250791984f91ad

GraphQL introspection enabled at /graphql
Types: 145 (by kind: ENUM: 17, INPUT_OBJECT: 55, OBJECT: 65, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-16 07:25

153.3 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: journal.winefolly.com
Port: 80
URL: http://journal.winefolly.com

First seen 2025-10-22 00:15
Last seen 2026-01-02 08:54
Open for 72 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3067658479c3a9f75b78298fba3f82aed89049d25
```
GraphQL introspection enabled at /graphql
Types: 20 (by kind: ENUM: 2, INPUT_OBJECT: 1, OBJECT: 12, SCALAR: 5)
Operations:
- Query: Query | fields: me, note, notes, user
- Mutation: Mutation | fields: cancelSubscription, createNote, requestUpload, unlinkProvider, updateNotifications
Directives: deprecated, include, skip (total: 3)

Readable stores: 0
```
  Found on 2026-01-02 08:54
  
  29.9 kBytes
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.ican-uk-event.com
Port: 443
URL: https://www.ican-uk-event.com

First seen 2025-09-18 21:44
Last seen 2026-01-02 08:51
Open for 105 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c70ba7b5770ba7b57f0196617717d70bf54597b777aa96526

Found 54 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/s3/avatar-image.png
/s3/capworth_certificate_template.jpeg
/s3/generated_forms
/s3/generated_forms/qr_7.pdf
/s3/ican-uk-events-serve.xlsx
/s3/ICAN_Original_Certificate.jpg
/s3/ICAN_Original_Certificate_1.jpg
/s3/ICAN_Original_Certificatedkdkdkdk.jpg
/s3/one.jpg
/s3/reg_form.pdf
/s3/three.jpg
/s3/two.jpg
/temp
/web.config

Found on 2026-01-02 08:51

Severity: low
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcfbf04a76f818507e7d472e88f4171b171

Found 25 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-12-01 03:43

Severity: medium
Fingerprint: 5f32cf5d6962f09cef4770e6ef4770e6dc050392eee342926cd39b16eb0f42b1

Found 42 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-11-20 06:01

Severity: low
Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45b260eb1973132049e6469a956c4f281b

Found 30 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-11-16 09:05

Severity: low
Fingerprint: 5f32cf5d6962f09c87f05b7087f05b707dd3ac8098f18998ba3131a051e52c82

Found 26 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-11-02 09:44

Severity: medium
Fingerprint: 5f32cf5d6962f09cd4047824d4047824c93fd99ce3d504bcad338d1c3268bdda

Found 35 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-10-26 08:27

Severity: medium
Fingerprint: 5f32cf5d6962f09cccd847a3ccd847a3ffb3ce9b020a46fb347ded4be2958652

Found 43 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/generated_forms
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-09-30 14:01

Severity: medium
Fingerprint: 5f32cf5d6962f09c910c508a910c508a76ee39ee244c1976c2785c320a4ea1b1

Found 55 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/generated_forms
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/s3/avatar-image.png
/s3/capworth_certificate_template.jpeg
/s3/generated_forms
/s3/generated_forms/qr_7.pdf
/s3/ican-uk-events-serve.xlsx
/s3/ICAN_Original_Certificate.jpg
/s3/ICAN_Original_Certificate_1.jpg
/s3/ICAN_Original_Certificatedkdkdkdk.jpg
/s3/one.jpg
/s3/reg_form.pdf
/s3/three.jpg
/s3/two.jpg
/temp
/web.config

Found on 2025-09-26 19:19

Severity: medium
Fingerprint: 5f32cf5d6962f09c70ba7b5770ba7b57f0196617717d70bf54597b773a3684df

Found 54 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/generated_forms
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/s3/avatar-image.png
/s3/capworth_certificate_template.jpeg
/s3/generated_forms
/s3/ican-uk-events-serve.xlsx
/s3/ICAN_Original_Certificate.jpg
/s3/ICAN_Original_Certificate_1.jpg
/s3/ICAN_Original_Certificatedkdkdkdk.jpg
/s3/one.jpg
/s3/reg_form.pdf
/s3/three.jpg
/s3/two.jpg
/temp
/web.config

Found on 2025-09-21 05:00

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.ican-uk-event.com
Port: 80
URL: http://www.ican-uk-event.com

First seen 2025-09-18 21:44
Last seen 2026-01-02 08:51
Open for 105 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c70ba7b5770ba7b57f0196617717d70bf54597b777aa96526

Found 54 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/s3/avatar-image.png
/s3/capworth_certificate_template.jpeg
/s3/generated_forms
/s3/generated_forms/qr_7.pdf
/s3/ican-uk-events-serve.xlsx
/s3/ICAN_Original_Certificate.jpg
/s3/ICAN_Original_Certificate_1.jpg
/s3/ICAN_Original_Certificatedkdkdkdk.jpg
/s3/one.jpg
/s3/reg_form.pdf
/s3/three.jpg
/s3/two.jpg
/temp
/web.config

Found on 2026-01-02 08:51

Severity: low
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcfbf04a76f818507e7d472e88f4171b171

Found 25 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-11-30 14:14

Severity: medium
Fingerprint: 5f32cf5d6962f09cef4770e6ef4770e6dc050392eee342926cd39b16eb0f42b1

Found 42 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-11-23 00:45

Severity: medium
Fingerprint: 5f32cf5d6962f09c910c508a910c508a76ee39ee244c1976c2785c320a4ea1b1

Found 55 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/generated_forms
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/s3/avatar-image.png
/s3/capworth_certificate_template.jpeg
/s3/generated_forms
/s3/generated_forms/qr_7.pdf
/s3/ican-uk-events-serve.xlsx
/s3/ICAN_Original_Certificate.jpg
/s3/ICAN_Original_Certificate_1.jpg
/s3/ICAN_Original_Certificatedkdkdkdk.jpg
/s3/one.jpg
/s3/reg_form.pdf
/s3/three.jpg
/s3/two.jpg
/temp
/web.config

Found on 2025-09-28 03:51

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.tailawesome.com
Port: 443
URL: https://www.tailawesome.com

First seen 2025-02-17 08:13
Last seen 2026-01-02 08:25
Open for 319 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642f59365a35b3b376e5b3b376e5b3b376e
```
Found 2 files trough .DS_Store spidering:

/images
/sitemaps
```
  Found on 2026-01-02 08:25
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: admin.donantes.com.do
Port: 443
URL: https://admin.donantes.com.do

First seen 2025-11-26 00:11
Last seen 2026-01-02 08:08
Open for 37 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3d9181c39a346585bfbe2b3f59676f8159676f815
```
GraphQL introspection enabled at /graphql
Types: 12 (by kind: ENUM: 2, OBJECT: 7, SCALAR: 3)
Operations:
- Query: Query | fields: _empty
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 08:08
  
  17.2 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: executiveproperty.kenekt.app
Port: 80
URL: http://executiveproperty.kenekt.app

First seen 2025-05-25 02:29
Last seen 2026-01-02 08:07
Open for 222 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 08:07
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 23:32
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: clarencehomes.kenekt.app
Port: 80
URL: http://clarencehomes.kenekt.app

First seen 2025-04-12 00:03
Last seen 2026-01-02 08:06
Open for 265 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 08:06
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 17:16
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: journal.winefolly.com
Port: 443
URL: https://journal.winefolly.com

First seen 2025-10-22 00:15
Last seen 2026-01-02 07:58
Open for 72 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3067658479c3a9f75b78298fba3f82aed89049d25
```
GraphQL introspection enabled at /graphql
Types: 20 (by kind: ENUM: 2, INPUT_OBJECT: 1, OBJECT: 12, SCALAR: 5)
Operations:
- Query: Query | fields: me, note, notes, user
- Mutation: Mutation | fields: cancelSubscription, createNote, requestUpload, unlinkProvider, updateNotifications
Directives: deprecated, include, skip (total: 3)

Readable stores: 0
```
  Found on 2026-01-02 07:58
  
  29.9 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: partners.hudsonhomes.com.au
Port: 80
URL: http://partners.hudsonhomes.com.au

First seen 2025-04-04 00:06
Last seen 2026-01-02 07:07
Open for 273 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 07:07
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 13:50
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: packages.land.build
Port: 443
URL: https://packages.land.build

First seen 2025-04-28 01:38
Last seen 2026-01-02 06:48
Open for 249 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 06:48
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 03:43
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: veronahomes.kenekt.app
Port: 80
URL: http://veronahomes.kenekt.app

First seen 2025-05-28 00:46
Last seen 2026-01-02 06:43
Open for 219 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 06:43
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 09:55
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: www.haapastore.com
Port: 443
URL: https://www.haapastore.com

First seen 2025-10-24 16:33
Last seen 2026-01-02 06:42
Open for 69 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db84e0e3508dbeadcee482c53e04510505152da13e4dca764e
```
GraphQL introspection enabled at /api
Types: 46 (by kind: ENUM: 2, INPUT_OBJECT: 1, OBJECT: 35, SCALAR: 8)
Operations:
- Query: Query | fields: api, getOneBook, getOneUserProfile, getUsers, userVerification
- Mutation: Mutation | fields: forgotPassword, login, resetPassword, signup, updateProfile
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 06:42
  
  75.9 kBytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api.testnet.fission.xyz
Port: 443
URL: https://api.testnet.fission.xyz

First seen 2025-10-16 02:19
Last seen 2026-01-02 06:40
Open for 78 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3725e3b1cf7c4a0209a418da50b9d271825e7a238

GraphQL introspection enabled at /graphql
Types: 81 (by kind: ENUM: 17, INPUT_OBJECT: 5, OBJECT: 50, SCALAR: 9)
Operations:
- Query: Query | fields: app_env, asset_details, crypto, feeder_details, feeders
- Mutation: Mutation | fields: register_wallet, reset_password_email, send_confirm_email, start_fund_buy_order, start_redemption
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 06:40

83.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3040e53f8b8a9671ccb208451c80e6152c011612e

GraphQL introspection enabled at /graphql
Types: 71 (by kind: ENUM: 14, INPUT_OBJECT: 4, OBJECT: 45, SCALAR: 8)
Operations:
- Query: Query | fields: app_env, asset_details, crypto, feeder_details, feeders
- Mutation: Mutation | fields: register_wallet, reset_password_email, send_confirm_email, start_redemption
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-23 10:31

73.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3411a361c96a04920d96a76a50bf2a326736bd182

GraphQL introspection enabled at /graphql
Types: 70 (by kind: ENUM: 13, INPUT_OBJECT: 4, OBJECT: 45, SCALAR: 8)
Operations:
- Query: Query | fields: app_env, asset_details, crypto, feeder_details, feeders
- Mutation: Mutation | fields: register_wallet, reset_password_email, send_confirm_email, start_redemption
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-10-28 23:30

71.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa36e6cf1cb8eb06f49d36a1af49bf52c9b6421f633

GraphQL introspection enabled at /graphql
Types: 69 (by kind: ENUM: 13, INPUT_OBJECT: 4, OBJECT: 44, SCALAR: 8)
Operations:
- Query: Query | fields: app_env, asset_details, crypto, feeder_details, feeders
- Mutation: Mutation | fields: register_wallet, reset_password_email, send_confirm_email, start_redemption
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-10-27 00:10

70.9 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c9b8b7a8d53fb68cea8669011d842b8af87d08d6

GraphQL introspection enabled at /graphql
Types: 56 (by kind: ENUM: 9, INPUT_OBJECT: 3, OBJECT: 36, SCALAR: 8)
Operations:
- Query: Query | fields: app_env, asset_details, crypto, feeder_details, feeders
- Mutation: Mutation | fields: register_wallet, reset_password_email, send_confirm_email
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-10-22 11:03

55.6 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: staging.finch.co
Port: 443
URL: https://staging.finch.co

First seen 2025-11-20 00:51
Last seen 2026-01-02 06:32
Open for 43 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3477608d3e09d23913d250ab5a1c3c7541c834d34

GraphQL introspection enabled at /graphql
Types: 68 (by kind: ENUM: 4, INPUT_OBJECT: 2, OBJECT: 53, SCALAR: 9)
Operations:
- Query: Query | fields: accounts, activeCheckRequestVendors, activeExpenseReportVendors, budget, checkApprovers
- Mutation: Mutation | fields: changePassword, createCheckRequest, createDocumentEntity, createLegacyReport, createReportConfiguration
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 06:32

123.7 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: admin.lubbu.com
Port: 443
URL: https://admin.lubbu.com

First seen 2025-12-08 00:10
Last seen 2026-01-02 06:02
Open for 25 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3d9181c39a346585bfbe2b3f59676f8159676f815
```
GraphQL introspection enabled at /graphql
Types: 12 (by kind: ENUM: 2, OBJECT: 7, SCALAR: 3)
Operations:
- Query: Query | fields: _empty
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 06:02
  
  17.0 kBytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: app.thebusinessbrain.co.uk
Port: 443
URL: https://app.thebusinessbrain.co.uk

First seen 2025-11-11 03:17
Last seen 2026-01-02 05:17
Open for 52 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa32ffd3f23d80a6be1ef979a9ad1a3c27ae925cfa6

GraphQL introspection enabled at /graphql
Types: 97 (by kind: ENUM: 2, INPUT_OBJECT: 2, OBJECT: 86, SCALAR: 7)
Operations:
- Query: Query | fields: migrateUsers, products, user, userDetails, users
- Mutation: Mutation | fields: deactivateUser, deleteUser, login, requestReset, signup
- Subscription: Subscription | fields: currency, id, lastBillDate, nextBillDate, price
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2026-01-02 05:17

174.2 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: staging.fleetpanda.com
Port: 443
URL: https://staging.fleetpanda.com

First seen 2025-11-15 02:00
Last seen 2026-01-02 05:11
Open for 48 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2026-01-02 05:11
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 75.2.97.79
Domain: impact-admin.worldpulse.org
Port: 443
URL: https://impact-admin.worldpulse.org

First seen 2025-11-14 02:32
Last seen 2026-01-02 05:05
Open for 49 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5ebf0e82c

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z
contactPage (args: optional/default) : updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/

Found on 2026-01-02 05:05

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb53a0c46c6

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse

Found on 2025-12-26 11:33

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb58ed2fa96

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse
contactPage (args: optional/default) : created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/

Found on 2025-12-24 11:27

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb54f17dc0e

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z
contactPage (args: optional/default) : updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z
financial (args: optional/default) : updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2025-12-22 13:53

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb54f9546e6

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/

Found on 2025-12-20 13:05

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb526340fdf

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493
financial (args: optional/default) : updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2025-12-18 12:15

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5ccef1c23

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i...
contactPage (args: optional/default) : created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About

Found on 2025-12-16 08:28

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5f6165019

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1
footer (args: optional/default) : updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z

Found on 2025-12-14 01:09

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb548068215

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices
contactPage (args: optional/default) : created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1
financial (args: optional/default) : created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2025-12-12 07:08

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb57d784db1

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2025-12-01 01:38

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5ac40dd6f

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse
contactPage (args: optional/default) : updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z
financial (args: optional/default) : post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents
footer (args: optional/default) : id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/

Found on 2025-11-29 01:50

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb51bd0c6cd

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1

Found on 2025-11-27 12:31

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5a5f564eb

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z
financial (args: optional/default) : post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents
footer (args: optional/default) : linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia

Found on 2025-11-23 14:58

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb56bd1c3c3

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca...
contactPage (args: optional/default) : subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you.
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About

Found on 2025-11-21 00:01

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5acb4ec27

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-04-04T19:54:49.609Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse

Found on 2025-11-16 04:24

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb506c3a451

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-04-04T19:54:49.609Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse
contactPage (args: optional/default) : address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493
financial (args: optional/default) : updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z
footer (args: optional/default) : linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia

Found on 2025-11-14 02:32

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5c4c4f2d1

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-04-04T19:54:49.609Z
contactPage (args: optional/default) : updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z
financial (args: optional/default) : created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2025-11-14 02:32

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5d263f88d

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-04-04T19:54:49.609Z banner_title=World Pulse Voices
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2025-11-14 02:32

913.9 kBytes 28 rows

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: app-testing.readyrosie.com
Port: 443
URL: https://app-testing.readyrosie.com

First seen 2025-11-17 20:09
Last seen 2026-01-02 05:02
Open for 45 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3c2ada43cc61f170097f3777584fc0824272ae584
```
GraphQL introspection enabled at /graphql
Types: 46 (by kind: ENUM: 2, OBJECT: 40, SCALAR: 4)
Operations:
- Query: Query | fields: ages, class_types, classroom_caregiver_counts, content_areas, curriculum_categories
- Mutation: Mutation | fields: completeActivity, createConnectionRequest, favoriteVideo, rateVideo, registerUser
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2026-01-02 05:02
  
  85.8 kBytes
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api.orelo.software
Port: 443
URL: https://api.orelo.software

First seen 2025-10-21 14:13
Last seen 2026-01-02 04:47
Open for 72 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
  Found on 2026-01-02 04:47
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d61ea4f17fa371134d9272981617241c5cf2a27976
```
GraphQL introspection enabled at /api/graphql
Types: 4700 (by kind: ENUM: 103, INPUT_OBJECT: 592, OBJECT: 3996, SCALAR: 8, UNION: 1)
Operations:
- Query: Query | fields: Staff, allStaff, docAccessStaff, initializedStaff, meStaff
- Mutation: Mutation | fields: createStaff, deleteStaff, logoutStaff, refreshTokenStaff, updateStaff
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2025-12-01 10:25
  
  3.0 MBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: augment.kenekt.app
Port: 80
URL: http://augment.kenekt.app

First seen 2025-05-28 00:06
Last seen 2026-01-02 04:45
Open for 219 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 04:45
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 21:17
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: portal.aussieproperty.au
Port: 80
URL: http://portal.aussieproperty.au

First seen 2025-08-25 06:14
Last seen 2026-01-02 04:43
Open for 129 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 04:43
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 08:27
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: app.vsystems.com.br
Port: 443
URL: https://app.vsystems.com.br

First seen 2025-07-30 20:45
Last seen 2026-01-02 04:26
Open for 155 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814ebe1cdd56040bf2f6909cd372e933189a
```
Found 6 files trough .DS_Store spidering:

/css
/css/alt
/img
/js
/js/pages
/js/plugins
```
  Found on 2026-01-02 04:26
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: test-api.feedbackforward.org
Port: 443
URL: https://test-api.feedbackforward.org

First seen 2025-10-24 10:16
Last seen 2026-01-02 04:14
Open for 69 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3400105ec05482f709bb2e5e59b271c805a001e70

GraphQL introspection enabled at /graphql
Types: 207 (by kind: ENUM: 16, INPUT_OBJECT: 43, INTERFACE: 2, OBJECT: 138, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 04:14

391.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3181a27e89b7baf4c851ec869ce672cf448945614

GraphQL introspection enabled at /graphql
Types: 202 (by kind: ENUM: 13, INPUT_OBJECT: 41, INTERFACE: 2, OBJECT: 138, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-16 07:01

389.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b4b02ad4aa531518a03d4c5d11f6cf68b7f2d088

GraphQL introspection enabled at /graphql
Types: 194 (by kind: ENUM: 13, INPUT_OBJECT: 40, INTERFACE: 2, OBJECT: 131, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-08 05:33

378.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3fd41e601ad42bf83c0a5a3c281604fe75512bfbf

GraphQL introspection enabled at /graphql
Types: 192 (by kind: ENUM: 12, INPUT_OBJECT: 39, INTERFACE: 2, OBJECT: 131, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-02 19:19

376.5 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: silvertail.kenekt.app
Port: 443
URL: https://silvertail.kenekt.app

First seen 2025-09-17 22:30
Last seen 2026-01-02 02:57
Open for 106 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 02:57
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 14:57
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api.portal.fleetpanda.com
Port: 443
URL: https://api.portal.fleetpanda.com

First seen 2025-10-29 00:48
Last seen 2026-01-02 02:45
Open for 65 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3307cf10a472f2aba31e78cd61b6562ee18e50a1a

GraphQL introspection enabled at /graphql
Types: 152 (by kind: ENUM: 18, INPUT_OBJECT: 58, OBJECT: 68, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 02:45

160.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa326745cc4869061883a49da588adcf1109d326600

GraphQL introspection enabled at /graphql
Types: 151 (by kind: ENUM: 17, INPUT_OBJECT: 58, OBJECT: 68, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-01 19:06

159.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa30e961b676d4ef555b306105d48e4b8db60b48573

GraphQL introspection enabled at /graphql
Types: 147 (by kind: ENUM: 17, INPUT_OBJECT: 56, OBJECT: 66, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-26 12:34

155.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3cb3674fd0d89f81f77d5730b57250791984f91ad

GraphQL introspection enabled at /graphql
Types: 145 (by kind: ENUM: 17, INPUT_OBJECT: 55, OBJECT: 65, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-16 06:30

153.3 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api.sparrow.io
Port: 443
URL: https://api.sparrow.io

First seen 2025-10-16 02:39
Last seen 2026-01-02 02:39
Open for 77 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2026-01-02 02:39

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35793ea9ffa6c612dc94355b942c3ba45c574b911

GraphQL introspection enabled at /graphql
Types: 760 (by kind: ENUM: 47, INPUT_OBJECT: 353, INTERFACE: 3, OBJECT: 344, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-12-11 12:00

1.0 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c5916f1127b100d3d5c3c1cb1f8ba337b00b92bb

GraphQL introspection enabled at /graphql
Types: 744 (by kind: ENUM: 45, INPUT_OBJECT: 349, INTERFACE: 3, OBJECT: 334, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-12-08 05:10

1.0 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3410a49f4c4a8eaf87b14f6f4c108fbd2edd5c2da

GraphQL introspection enabled at /graphql
Types: 705 (by kind: ENUM: 37, INPUT_OBJECT: 340, INTERFACE: 3, OBJECT: 312, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-30 18:45

953.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33263a03127cd1433906ede2bcfd95f57810c29db

GraphQL introspection enabled at /graphql
Types: 688 (by kind: ENUM: 33, INPUT_OBJECT: 334, INTERFACE: 3, OBJECT: 305, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-26 10:05

931.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31f10fd0a435f2eba992473f213ffcd681c1d0410

GraphQL introspection enabled at /graphql
Types: 672 (by kind: ENUM: 31, INPUT_OBJECT: 330, INTERFACE: 3, OBJECT: 295, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-24 08:34

908.9 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f18e2d7ce39052c02554d0bc5de1d14aff199272

GraphQL introspection enabled at /graphql
Types: 667 (by kind: ENUM: 30, INPUT_OBJECT: 327, INTERFACE: 3, OBJECT: 294, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-22 09:53

902.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa30ab825cb80e02b49ba2cf275e2c8ace1ff548ae5

GraphQL introspection enabled at /graphql
Types: 660 (by kind: ENUM: 30, INPUT_OBJECT: 325, INTERFACE: 3, OBJECT: 289, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-17 00:26

895.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f82e04722d670282926af85a59ff5a80f95d4568

GraphQL introspection enabled at /graphql
Types: 653 (by kind: ENUM: 30, INPUT_OBJECT: 322, INTERFACE: 3, OBJECT: 285, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-12 02:30

882.9 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa308c4fff33523647170fe7a9d1537c1b9d46ec37d

GraphQL introspection enabled at /graphql
Types: 649 (by kind: ENUM: 29, INPUT_OBJECT: 319, INTERFACE: 3, OBJECT: 285, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-11 00:33

877.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3081f46cffeb2d85ddc9492e9f9c0fe75cc76d9a1

GraphQL introspection enabled at /graphql
Types: 646 (by kind: ENUM: 29, INPUT_OBJECT: 316, INTERFACE: 3, OBJECT: 285, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-08 22:13

874.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3cb6b243f23622c8d7c443919f971f2658c7353b1

GraphQL introspection enabled at /graphql
Types: 638 (by kind: ENUM: 29, INPUT_OBJECT: 315, INTERFACE: 3, OBJECT: 278, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-07 09:04

864.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3fbe2f7f268812902c3623ada94b40a00aa63d8e8

GraphQL introspection enabled at /graphql
Types: 620 (by kind: ENUM: 29, INPUT_OBJECT: 308, INTERFACE: 3, OBJECT: 267, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-05 14:16

840.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35eadceb723089d25e4902d914f96a16d3e315d99

GraphQL introspection enabled at /graphql
Types: 575 (by kind: ENUM: 29, INPUT_OBJECT: 283, INTERFACE: 3, OBJECT: 247, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-03 11:16

782.3 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33d67c547871b6e7524c5f4612fbf073dbb31aa09

GraphQL introspection enabled at /graphql
Types: 572 (by kind: ENUM: 29, INPUT_OBJECT: 282, INTERFACE: 3, OBJECT: 245, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-10-28 23:57

777.4 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: chessworkgroup.kenekt.app
Port: 80
URL: http://chessworkgroup.kenekt.app

First seen 2025-05-03 01:17
Last seen 2026-01-02 02:22
Open for 244 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 02:22
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 00:00
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api.sparrow.io
Port: 80
URL: http://api.sparrow.io

First seen 2025-10-16 02:39
Last seen 2026-01-02 02:19
Open for 77 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2026-01-02 02:19

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa389ecb48aa3e2413a0feec2725ef860e8f2455b90

GraphQL introspection enabled at /graphql
Types: 757 (by kind: ENUM: 47, INPUT_OBJECT: 353, INTERFACE: 3, OBJECT: 341, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-12-10 21:52

1.0 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3410a49f4c4a8eaf87b14f6f4c108fbd2edd5c2da

GraphQL introspection enabled at /graphql
Types: 705 (by kind: ENUM: 37, INPUT_OBJECT: 340, INTERFACE: 3, OBJECT: 312, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-12-01 00:48

953.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33263a03127cd1433906ede2bcfd95f57810c29db

GraphQL introspection enabled at /graphql
Types: 688 (by kind: ENUM: 33, INPUT_OBJECT: 334, INTERFACE: 3, OBJECT: 305, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-26 17:46

931.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31f10fd0a435f2eba992473f213ffcd681c1d0410

GraphQL introspection enabled at /graphql
Types: 672 (by kind: ENUM: 31, INPUT_OBJECT: 330, INTERFACE: 3, OBJECT: 295, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-23 06:55

907.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f18e2d7ce39052c02554d0bc5de1d14aff199272

GraphQL introspection enabled at /graphql
Types: 667 (by kind: ENUM: 30, INPUT_OBJECT: 327, INTERFACE: 3, OBJECT: 294, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-21 09:09

902.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa30ab825cb80e02b49ba2cf275e2c8ace1ff548ae5

GraphQL introspection enabled at /graphql
Types: 660 (by kind: ENUM: 30, INPUT_OBJECT: 325, INTERFACE: 3, OBJECT: 289, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-18 06:07

895.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f82e04722d670282926af85a59ff5a80f95d4568

GraphQL introspection enabled at /graphql
Types: 653 (by kind: ENUM: 30, INPUT_OBJECT: 322, INTERFACE: 3, OBJECT: 285, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-12 03:07

882.9 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3081f46cffeb2d85ddc9492e9f9c0fe75cc76d9a1

GraphQL introspection enabled at /graphql
Types: 646 (by kind: ENUM: 29, INPUT_OBJECT: 316, INTERFACE: 3, OBJECT: 285, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-10 20:35

874.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3cb6b243f23622c8d7c443919f971f2658c7353b1

GraphQL introspection enabled at /graphql
Types: 638 (by kind: ENUM: 29, INPUT_OBJECT: 315, INTERFACE: 3, OBJECT: 278, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-08 16:20

864.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3fbe2f7f268812902c3623ada94b40a00aa63d8e8

GraphQL introspection enabled at /graphql
Types: 620 (by kind: ENUM: 29, INPUT_OBJECT: 308, INTERFACE: 3, OBJECT: 267, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-05 11:41

840.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35eadceb723089d25e4902d914f96a16d3e315d99

GraphQL introspection enabled at /graphql
Types: 575 (by kind: ENUM: 29, INPUT_OBJECT: 283, INTERFACE: 3, OBJECT: 247, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-03 17:46

782.3 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33d67c547871b6e7524c5f4612fbf073dbb31aa09

GraphQL introspection enabled at /graphql
Types: 572 (by kind: ENUM: 29, INPUT_OBJECT: 282, INTERFACE: 3, OBJECT: 245, SCALAR: 10, UNION: 3)
Operations:
- Query: Query | fields: activityFeed, activitySummaries, apiKey, apiKeys, ask
- Mutation: Mutation | fields: activateCampaign, activateLeadForm, activateTypeformForm, addLabelToAudience, addProjectToAudience
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-10-28 22:59

777.4 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: avenger-uat.fleetpanda.com
Port: 443
URL: https://avenger-uat.fleetpanda.com

First seen 2025-11-16 02:44
Last seen 2026-01-02 02:01
Open for 46 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2026-01-02 02:01
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa385bc6649e3921ceb83e385a2a26aac8f0772418f
```
GraphQL introspection enabled at /graphql
Types: 1373 (by kind: ENUM: 145, INPUT_OBJECT: 613, OBJECT: 596, SCALAR: 9, UNION: 10)
Operations:
- Query: Query | fields: appVersion, appliedPricings, asset, assetInventories, assetInventorySummary
- Mutation: Mutation | fields: accountingAsync, acknowledgeNote, addAssetToDeliveryOrder, addCodeToAsset, addFeeToOrderGroup
Directives: deprecated, include, skip (total: 3)
```
  Found on 2025-11-29 03:05
  
  1.6 MBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: portal.wotta.com.au
Port: 443
URL: https://portal.wotta.com.au

First seen 2024-05-15 04:05
Last seen 2026-01-02 01:50
Open for 596 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 01:50
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 23:50
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2024-12-05 00:44
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: polestarus.adboxapp.com
Port: 443
URL: https://polestarus.adboxapp.com

First seen 2025-10-30 00:40
Last seen 2026-01-02 01:28
Open for 64 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 01:28
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-10-30 00:40
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: me.adboxapp.com
Port: 443
URL: https://me.adboxapp.com

First seen 2025-11-13 04:13
Last seen 2026-01-02 00:35
Open for 49 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 00:35
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-16 15:28
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api-stg.bluekeys.io
Port: 443
URL: https://api-stg.bluekeys.io

First seen 2025-12-09 01:42
Last seen 2026-01-02 00:18
Open for 23 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ca55748ca978ecd0e2e23c26c2ddf2b49e821b0e

GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 5, INPUT_OBJECT: 14, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: getAllBrands, getAllPlans, getDashboardAllBrands, getPlanDetails, getStripeCards
- Mutation: Mutation | fields: createOutMembership, createPortalLink, getToastBrands, getToastMenusItems, upgradeMembership
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2026-01-02 00:18

99.0 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: app-api.getfreedup.com
Port: 80
URL: http://app-api.getfreedup.com

First seen 2025-11-11 00:26
Last seen 2026-01-02 00:07
Open for 51 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3a933aeba3917b7ea59b08958897915b362953c06

GraphQL introspection enabled at /graphql
Types: 72 (by kind: ENUM: 3, INPUT_OBJECT: 18, OBJECT: 42, SCALAR: 9)
Operations:
- Query: Query | fields: _version, currentUser, user, userExists, userSearch
- Mutation: Mutation | fields: groupMultipleChoiceResponse, multipleChoiceResponse, saveGuideProgress, updateUserProfile, user
- Subscription: Subscription | fields: guideGroupMembersChanged, guideGroupMultipleChoiceAnswered, guideGroupMultipleChoiceAnsweredWithAnswer, guideGroupRouletteChanged, guideGroupTimerChanged
Directives: cacheControl, deprecated, include, skip (total: 4)

Found on 2026-01-02 00:07

68.6 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 35.71.145.101
Domain: portal.heapsgoodhomes.com.au
Port: 443
URL: https://portal.heapsgoodhomes.com.au

First seen 2025-07-28 04:09
Last seen 2026-01-01 21:55
Open for 157 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-01 21:55
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 21:58
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: staging-sprague.fleetpanda.com
Port: 443
URL: https://staging-sprague.fleetpanda.com

First seen 2025-10-28 07:28
Last seen 2026-01-01 21:19
Open for 65 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2026-01-01 21:19
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa35b6522d4e2acbd180025f4554e579ad03d040e88
```
GraphQL introspection enabled at /graphql
Types: 1366 (by kind: ENUM: 144, INPUT_OBJECT: 610, OBJECT: 593, SCALAR: 9, UNION: 10)
Operations:
- Query: Query | fields: appVersion, appliedPricings, asset, assetInventories, assetInventorySummary
- Mutation: Mutation | fields: accountingAsync, acknowledgeNote, addAssetToDeliveryOrder, addCodeToAsset, addFeeToOrderGroup
Directives: deprecated, include, skip (total: 3)
```
  Found on 2025-11-14 05:58
  
  1.6 MBytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api.portal.fleetpanda.com
Port: 80
URL: http://api.portal.fleetpanda.com

First seen 2025-10-29 00:48
Last seen 2026-01-01 21:19
Open for 64 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3307cf10a472f2aba31e78cd61b6562ee18e50a1a

GraphQL introspection enabled at /graphql
Types: 152 (by kind: ENUM: 18, INPUT_OBJECT: 58, OBJECT: 68, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-01 21:19

160.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa326745cc4869061883a49da588adcf1109d326600

GraphQL introspection enabled at /graphql
Types: 151 (by kind: ENUM: 17, INPUT_OBJECT: 58, OBJECT: 68, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-01 13:35

159.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa30e961b676d4ef555b306105d48e4b8db60b48573

GraphQL introspection enabled at /graphql
Types: 147 (by kind: ENUM: 17, INPUT_OBJECT: 56, OBJECT: 66, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-27 09:37

155.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3cb3674fd0d89f81f77d5730b57250791984f91ad

GraphQL introspection enabled at /graphql
Types: 145 (by kind: ENUM: 17, INPUT_OBJECT: 55, OBJECT: 65, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-16 04:24

153.3 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 75.2.97.79
Domain: futuramaapi.com
Port: 443
URL: https://futuramaapi.com

First seen 2025-10-30 00:20
Last seen 2026-01-01 21:10
Open for 63 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c07d34deb07d34deb0

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-01 21:10

34.3 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c07d34deb04a5bb08c

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 3
characters (args: optional/default) : offset=0 total=427 limit=50
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : limit=50 offset=0 total=11

Found on 2025-12-29 01:53

34.3 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c07d34deb0e53c3e3e

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 3
characters (args: optional/default) : limit=50 offset=0 total=427
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : limit=50 offset=0 total=11

Found on 2025-12-29 01:53

34.3 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c07d34deb0949769f2

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 3
characters (args: optional/default) : total=427 limit=50 offset=0
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : limit=50 offset=0 total=11

Found on 2025-12-20 08:20

34.3 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c07d34deb069a137b0

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 3
characters (args: optional/default) : total=427 limit=50 offset=0
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : offset=0 total=11 limit=50

Found on 2025-12-18 09:57

34.3 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c07d34deb0af127a3a

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 3
characters (args: optional/default) : limit=50 offset=0 total=427
episodes (args: optional/default) : total=150 limit=50 offset=0
seasons (args: optional/default) : limit=50 offset=0 total=11

Found on 2025-12-12 14:32

34.3 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c07d34deb032437302

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 3
characters (args: optional/default) : limit=50 offset=0 total=427
episodes (args: optional/default) : offset=0 total=150 limit=50
seasons (args: optional/default) : limit=50 offset=0 total=11

Found on 2025-12-02 05:04

34.3 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c07d34deb00ea853f8

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 3
characters (args: optional/default) : limit=50 offset=0 total=427
episodes (args: optional/default) : total=150 limit=50 offset=0
seasons (args: optional/default) : offset=0 total=11 limit=50

Found on 2025-12-01 10:57

34.3 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c0bec3c612536f0158

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
characters (args: optional/default) : offset=0 total=427 limit=50
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : offset=0 total=11 limit=50

Found on 2025-11-05 12:29

34.2 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c0bec3c612c6bcce9a

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
characters (args: optional/default) : offset=0 total=427 limit=50
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : limit=50 offset=0 total=11

Found on 2025-11-03 16:34

34.2 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c0bec3c612fed9b360

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
characters (args: optional/default) : limit=50 offset=0 total=427
episodes (args: optional/default) : total=150 limit=50 offset=0
seasons (args: optional/default) : limit=50 offset=0 total=11

Found on 2025-11-02 06:25

34.2 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c0bec3c6127fea13ba

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
characters (args: optional/default) : limit=50 offset=0 total=427
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : offset=0 total=11 limit=50

Found on 2025-10-30 00:20

34.2 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c0bec3c612498c530c

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
characters (args: optional/default) : limit=50 offset=0 total=427
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : limit=50 offset=0 total=11

Found on 2025-10-30 00:20

34.2 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c0bec3c6125ed0ae7e

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
characters (args: optional/default) : limit=50 offset=0 total=427
episodes (args: optional/default) : total=150 limit=50 offset=0
seasons (args: optional/default) : offset=0 total=11 limit=50

Found on 2025-10-30 00:20

34.2 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c0bec3c612695f02e0

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
characters (args: optional/default) : offset=0 total=427 limit=50
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : total=11 limit=50 offset=0

Found on 2025-10-30 00:20

34.2 kBytes 9 rows

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 75.2.97.79
Domain: racv.adboxapp.com
Port: 443
URL: https://racv.adboxapp.com

First seen 2025-11-13 04:23
Last seen 2026-01-01 19:49
Open for 49 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-01 19:49
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-13 04:23
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: yafo.postpossible.org
Port: 80
URL: http://yafo.postpossible.org

First seen 2025-07-18 01:36
Last seen 2026-01-01 19:37
Open for 167 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642bcfccc19ecde6a83ecde6a83ecde6a83
```
Found 2 files trough .DS_Store spidering:

/poptential
/poptential/poptential-logo-backup.png
```
  Found on 2026-01-01 19:37
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api.rewwind.co
Port: 443
URL: https://api.rewwind.co

First seen 2025-11-22 01:24
Last seen 2025-12-30 14:20
Open for 38 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e5c32b773dd25c65e49f3d7c71e07e4c3fd81e46

GraphQL introspection enabled at /graphql
Types: 67 (by kind: ENUM: 2, INPUT_OBJECT: 22, OBJECT: 39, SCALAR: 4)
Operations:
- Query: RootQuery | fields: getUserWords, getWordPronunciation, searchWord, searchWordDetails, searchWordList
- Mutation: RootMutation | fields: addUserWord, deleteUserWord, deleteUserWords, updateUserWord, updateUserWords
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-12-30 14:20

77.4 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: guide2wealth.kenekt.app
Port: 80
URL: http://guide2wealth.kenekt.app

First seen 2025-04-04 13:20
Last seen 2025-12-30 12:37
Open for 269 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-12-30 12:37
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 13:00
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api-mtx-prod.bairesdevai.com
Port: 80
URL: http://api-mtx-prod.bairesdevai.com

First seen 2025-10-22 00:44
Last seen 2025-12-30 10:47
Open for 69 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b571938e6585c57e05cd218cc362cfe870e6b3f2

GraphQL introspection enabled at /graphql
Types: 110 (by kind: ENUM: 3, INPUT_OBJECT: 21, OBJECT: 76, SCALAR: 9, UNION: 1)
Operations:
- Query: Query | fields: authors, authors_aggregated, authors_by_id, blocks_templates, blocks_templates_by_id
- Mutation: Mutation | fields: create_quiz_vizits_item, create_quiz_vizits_items, update_quiz_vizits_batch, update_quiz_vizits_item, update_quiz_vizits_items
- Subscription: Subscription | fields: authors_mutated, blocks_templates_mutated, companies_companies_tags_mutated, companies_mutated, directus_files_mutated
Directives: deprecated, include, skip (total: 3)

Readable stores: 0

Found on 2025-12-30 10:47

204.8 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 75.2.97.79
Domain: www.afwagportal.org
Port: 443
URL: https://www.afwagportal.org

First seen 2025-04-26 04:42
Last seen 2025-12-30 10:40
Open for 248 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c6731298567312985431972ba8a44fd87eac76a910d233665

Found 92 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/intro/intro1
/frontend-assets/images/intro/intro1/bg-1 copy.jpg
/frontend-assets/images/intro/intro1/bg-1.jpg
/frontend-assets/images/intro/intro10
/frontend-assets/images/intro/intro11
/frontend-assets/images/intro/intro12
/frontend-assets/images/intro/intro3
/frontend-assets/images/intro/intro4
/frontend-assets/images/intro/intro5
/frontend-assets/images/intro/intro6
/frontend-assets/images/intro/intro7
/frontend-assets/images/intro/intro8
/frontend-assets/images/intro/intro9
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/products/mini-cart
/frontend-assets/images/products/product
/frontend-assets/images/products/product/327
/frontend-assets/images/products/shopping-cart
/frontend-assets/images/products/single-product
/frontend-assets/images/products/widget
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-12-30 10:40

Severity: medium
Fingerprint: 5f32cf5d6962f09c1e3ea8c61e3ea8c6a639d37b489f8e14a6f33832d24a1834

Found 86 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/intro/intro1
/frontend-assets/images/intro/intro1/bg-1 copy.jpg
/frontend-assets/images/intro/intro1/bg-1.jpg
/frontend-assets/images/intro/intro10
/frontend-assets/images/intro/intro11
/frontend-assets/images/intro/intro12
/frontend-assets/images/intro/intro3
/frontend-assets/images/intro/intro4
/frontend-assets/images/intro/intro5
/frontend-assets/images/intro/intro6
/frontend-assets/images/intro/intro7
/frontend-assets/images/intro/intro8
/frontend-assets/images/intro/intro9
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-12-26 20:03

Severity: low
Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45ad82977a58ced0c7278440d12d6b107b

Found 30 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-12-01 04:28

Severity: low
Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bc250ff385d7f5934a6863bb14754902aa

Found 22 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/frontend-assets

Found on 2025-11-26 10:51

Severity: low
Fingerprint: 5f32cf5d6962f09c0f8dcf020f8dcf02298463c745038fe8dedf2086b84aa4b8

Found 24 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets

Found on 2025-11-24 10:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c3078a2ae3078a2ae5a78d3f336572dac548b86eaed8a0cea

Found 73 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-11-11 01:30

Severity: medium
Fingerprint: 5f32cf5d6962f09c75d69a7675d69a76b528710b596480805b5d088bed974ece

Found 51 files trough .DS_Store spidering:

/backend-assets
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-10-14 21:30

Severity: medium
Fingerprint: 5f32cf5d6962f09c6e6dc6946e6dc69469ba316dd6578cb22928085c2a41a043

Found 84 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/intro/intro1
/frontend-assets/images/intro/intro10
/frontend-assets/images/intro/intro11
/frontend-assets/images/intro/intro12
/frontend-assets/images/intro/intro3
/frontend-assets/images/intro/intro4
/frontend-assets/images/intro/intro5
/frontend-assets/images/intro/intro6
/frontend-assets/images/intro/intro7
/frontend-assets/images/intro/intro8
/frontend-assets/images/intro/intro9
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-09-25 09:21

Severity: medium
Fingerprint: 5f32cf5d6962f09cddacc81addacc81aa2d220ef8aeb5eb0bf3421ce09ad1700

Found 68 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-09-11 21:40

Severity: medium
Fingerprint: 5f32cf5d6962f09c3b95ca2b3b95ca2bca6ca2b49aa26ed5e548c1ab8ddfa687

Found 58 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/blog
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-09-05 13:42

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b48a11784715fd1851b1da55b3055042e

Found 14 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-06-26 00:07

Severity: medium
Fingerprint: 5f32cf5d6962f09c74247ea574247ea5d33fe25a7e8acf2716020fd449155acc

Found 56 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/blog
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-06-26 00:07

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: ldha.kenekt.app
Port: 80
URL: http://ldha.kenekt.app

First seen 2025-04-24 00:33
Last seen 2025-12-30 10:24
Open for 250 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-12-30 10:24
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 12:37
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.finnotes.org
Port: 443
URL: https://www.finnotes.org

First seen 2022-09-21 14:29
Last seen 2025-12-30 10:10
Open for 1195 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3af247253af247250afce8cdeb84548d01c0a61a2c097538
```
Found 9 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/favicon.ico
/logos
/logos/finnotes-web.png
/logos/small-logo.png
/robots.txt
/uploads
```
  Found on 2025-12-30 10:10
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392aba734d8a76027ae8b8223595c8ce0a7da
```
Found 7 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/favicon.ico
/logos
/robots.txt
/uploads
```
  Found on 2025-09-21 00:38
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: www.battlebase.app
Port: 80
URL: http://www.battlebase.app

First seen 2025-10-16 10:20
Last seen 2025-12-30 09:29
Open for 74 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33cc104fb06a664f9655f7acd828c785922f745f2

GraphQL introspection enabled at /graphql
Types: 53 (by kind: ENUM: 8, OBJECT: 34, SCALAR: 11)
Operations:
- Query: Query | fields: battle, battleSetup, config, me, user
- Mutation: Mutation | fields: createGuestUser, deleteAccount, linkCredentialsWithGuestUser, signIn, signUp
- Subscription: Subscription | fields: battleCreated, battleSetupUpdated, battleUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-30 09:29

116.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3a3a8a9d10e41cb134232e6bf5b7d02d75bcf2678

GraphQL introspection enabled at /graphql
Types: 52 (by kind: ENUM: 8, OBJECT: 33, SCALAR: 11)
Operations:
- Query: Query | fields: battle, battleSetup, config, me, user
- Mutation: Mutation | fields: createGuestUser, deleteAccount, linkCredentialsWithGuestUser, signIn, signUp
- Subscription: Subscription | fields: battleCreated, battleSetupUpdated, battleUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-27 06:48

114.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c1e1c4bb514e013952d40bb912bd7cd53b979de0

GraphQL introspection enabled at /graphql
Types: 51 (by kind: ENUM: 8, OBJECT: 32, SCALAR: 11)
Operations:
- Query: Query | fields: battle, battles, config, me, user
- Mutation: Mutation | fields: createGuestUser, deleteAccount, linkCredentialsWithGuestUser, signIn, signUp
- Subscription: Subscription | fields: battleCreated, battleUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-10-16 10:20

107.5 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: staging-new-event123.virtualvenue3d.com
Port: 443
URL: https://staging-new-event123.virtualvenue3d.com

First seen 2025-12-03 05:35
Last seen 2025-12-27 05:49
Open for 24 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa328e1a256adc077862197dfb1d71fb931ba32c851
```
GraphQL introspection enabled at /graphql
Types: 70 (by kind: ENUM: 4, INPUT_OBJECT: 3, OBJECT: 55, SCALAR: 8)
Operations:
- Query: Query | fields: boothDetail, contestDetail, contestList, conversationDetail, currentUserDetail
- Mutation: Mutation | fields: addPageView, addReaction, authLogin, businessRequest, eventRegister
Directives: deprecated, include, skip (total: 3)
```
  Found on 2025-12-27 05:49
  
  114.6 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-12-06 03:36
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: staging-virtual-venue-test123.virtualvenue3d.com
Port: 443
URL: https://staging-virtual-venue-test123.virtualvenue3d.com

First seen 2025-12-01 09:03
Last seen 2025-12-27 05:28
Open for 25 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa328e1a256adc077862197dfb1d71fb931ba32c851
```
GraphQL introspection enabled at /graphql
Types: 70 (by kind: ENUM: 4, INPUT_OBJECT: 3, OBJECT: 55, SCALAR: 8)
Operations:
- Query: Query | fields: boothDetail, contestDetail, contestList, conversationDetail, currentUserDetail
- Mutation: Mutation | fields: addPageView, addReaction, authLogin, businessRequest, eventRegister
Directives: deprecated, include, skip (total: 3)
```
  Found on 2025-12-27 05:28
  
  114.6 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-12-06 15:22
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: gaml.luckylife.fr
Port: 80
URL: http://gaml.luckylife.fr

First seen 2025-10-28 00:40
Last seen 2025-12-27 01:01
Open for 60 days

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6ae486b79b8e4b81b8e3d7dcfed3f025f395acf7f

GraphQL introspection enabled at /api/graphql
Types: 142 (by kind: ENUM: 13, INPUT_OBJECT: 38, INTERFACE: 1, OBJECT: 85, SCALAR: 5)
Operations:
- Query: Query | fields: backgroundFile, backgroundFiles, geoFilter, geoFilters, node
- Mutation: Mutation | fields: createBackgroundFile, deleteBackgroundFile, deleteGeoFilter, updateBackgroundFile, updateGeoFilter
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-27 01:01

163.1 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: staging-globalsummit2025.virtualvenue3d.com
Port: 443
URL: https://staging-globalsummit2025.virtualvenue3d.com

First seen 2025-10-20 06:47
Last seen 2025-12-26 19:12
Open for 67 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328e1a256adc077862197dfb1d71fb931ba32c851

GraphQL introspection enabled at /graphql
Types: 70 (by kind: ENUM: 4, INPUT_OBJECT: 3, OBJECT: 55, SCALAR: 8)
Operations:
- Query: Query | fields: boothDetail, contestDetail, contestList, conversationDetail, currentUserDetail
- Mutation: Mutation | fields: addPageView, addReaction, authLogin, businessRequest, eventRegister
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-26 19:12

114.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-12-17 00:57

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa38dc716298806408bd0cfa4cabdfd168e32b9be3e

GraphQL introspection enabled at /graphql
Types: 69 (by kind: ENUM: 3, INPUT_OBJECT: 3, OBJECT: 55, SCALAR: 8)
Operations:
- Query: Query | fields: boothDetail, contestDetail, contestList, conversationDetail, currentUserDetail
- Mutation: Mutation | fields: addPageView, addReaction, authLogin, businessRequest, eventRegister
Directives: deprecated, include, skip (total: 3)

Found on 2025-11-23 13:29

113.6 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: staging-tobedeleted.virtualvenue3d.com
Port: 443
URL: https://staging-tobedeleted.virtualvenue3d.com

First seen 2025-12-05 06:25
Last seen 2025-12-26 18:28
Open for 21 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa328e1a256adc077862197dfb1d71fb931ba32c851
```
GraphQL introspection enabled at /graphql
Types: 70 (by kind: ENUM: 4, INPUT_OBJECT: 3, OBJECT: 55, SCALAR: 8)
Operations:
- Query: Query | fields: boothDetail, contestDetail, contestList, conversationDetail, currentUserDetail
- Mutation: Mutation | fields: addPageView, addReaction, authLogin, businessRequest, eventRegister
Directives: deprecated, include, skip (total: 3)
```
  Found on 2025-12-26 18:28
  
  114.6 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-12-24 19:21
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: staging-demo-staging.virtualvenue3d.com
Port: 443
URL: https://staging-demo-staging.virtualvenue3d.com

First seen 2025-11-18 00:48
Last seen 2025-12-26 18:19
Open for 38 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328e1a256adc077862197dfb1d71fb931ba32c851

GraphQL introspection enabled at /graphql
Types: 70 (by kind: ENUM: 4, INPUT_OBJECT: 3, OBJECT: 55, SCALAR: 8)
Operations:
- Query: Query | fields: boothDetail, contestDetail, contestList, conversationDetail, currentUserDetail
- Mutation: Mutation | fields: addPageView, addReaction, authLogin, businessRequest, eventRegister
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-26 18:19

114.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-12-14 03:09

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa38dc716298806408bd0cfa4cabdfd168e32b9be3e

GraphQL introspection enabled at /graphql
Types: 69 (by kind: ENUM: 3, INPUT_OBJECT: 3, OBJECT: 55, SCALAR: 8)
Operations:
- Query: Query | fields: boothDetail, contestDetail, contestList, conversationDetail, currentUserDetail
- Mutation: Mutation | fields: addPageView, addReaction, authLogin, businessRequest, eventRegister
Directives: deprecated, include, skip (total: 3)

Found on 2025-11-24 08:36

114.0 kBytes

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: prod.api.theopenleague.com
Port: 80
URL: http://prod.api.theopenleague.com

First seen 2025-11-15 00:40
Last seen 2025-12-23 08:11
Open for 38 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2025-12-23 08:11
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.clyptrading.com.ng
Port: 443
URL: https://www.clyptrading.com.ng

First seen 2025-06-16 00:27
Last seen 2025-12-22 23:30
Open for 189 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814e18288c977a8c419babe74a464a7bbd5e
```
Found 6 files trough .DS_Store spidering:

/images
/index.html
/script.js
/style.css
/style.css.map
/style.scss
```
  Found on 2025-12-22 23:30
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.guito.software
Port: 80
URL: http://api.guito.software

First seen 2025-11-19 13:00
Last seen 2025-12-22 22:23
Open for 33 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2025-12-22 22:23
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: event-search-staging.thrugo.com
Port: 443
URL: https://event-search-staging.thrugo.com

First seen 2025-11-14 02:42
Last seen 2025-12-22 22:16
Open for 38 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035493cddcfe4812df260812df260812df260812df260
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/events
GET /api/events/referrals
```
  Found on 2025-12-22 22:16
Create report

Finds vulnerable Vite development environment

ViteJS development environment found and vulnerable to CVE-2025-30208

IP: 35.71.145.101
Domain: www.ewbunlv.org
Port: 80
URL: http://www.ewbunlv.org

First seen 2025-05-25 01:29
Last seen 2025-12-22 14:22
Open for 211 days

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd7520b38f

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=59432
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-12-22 14:22

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdc742f054

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=4105
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-12-20 13:26

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd9b68e7b1

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=53173
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-12-18 14:36

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd58d84036

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=4279
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-12-16 13:30

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffda8e22622

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=56162
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-12-12 22:37

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd4ab21943

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=26805
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-30 22:26

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd22330a73

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=51357
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-28 18:02

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdad6c363b

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=27345
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-26 19:39

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdf473f69f

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=56345
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-23 02:52

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd69509ce9

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=40915
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-22 12:18

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd1ba8337b

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=44434
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-20 12:44

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffda41865d8

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=27681
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-16 07:28

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd2f21db9b

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=25462
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-14 08:01

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd6dc68165

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=49581
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-12 06:32

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd012c3ceb

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=49745
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-10 06:17

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd1f0a6b56

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=13648
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-08 04:52

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdf11f01a9

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=19319
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-06 09:59

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd237500d3

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=47981
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-04 08:57

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd83d6e89a

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=41584
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-02 15:47

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdbd7cc91e

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=53518
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-01 09:45

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd39322abc

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=21315
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-10-30 18:56

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd6f7ee6a3

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=56068
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-10-26 09:59

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd78b5eff9

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=14420
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-10-24 07:47

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdc329c0ae

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=41508
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-10-22 07:26

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd87ffe710

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=19486
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-10-20 23:41

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffddc606ed6

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=35752
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-18 05:06

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd71f1f0db

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=9622
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-16 02:30

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd4d2c5b37

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=6036
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-14 04:00

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd4562cf69

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=23534
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-12 04:35

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd6b812d53

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=31456
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-10 04:57

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd229d6032

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=30889
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-08 09:13

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd997b93b8

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=8729
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-06 10:32

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd6797e2fe

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=14511
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-04 07:13

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdf23ba6fc

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=38252
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-03 03:40

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd7e24667b

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=57979
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-01 02:23

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdcd29a3bd

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=40238
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-26 12:51

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd8bd3ad82

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=6581
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-24 06:06

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd4c1ec085

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=46698
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-22 06:52

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd0a0f6a34

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=11341
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-20 06:12

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd0ce2a6a0

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=55860
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-16 10:53

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd70643a08

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=58621
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-13 01:18

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdea0fe9b2

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=26095
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-10 18:16

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd972bcfc9

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=26577
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-08 20:06

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd3e380a36

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=23513
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-04 07:10

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd9269bb32

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=17433
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-02 12:47

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd1a2d6f58

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=6316
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-01 05:35

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdd8e6b08b

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=9239
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-05-30 04:57

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd0e0c19aa

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=48253
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-05-28 23:29

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdf5550750

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=49397
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-05-27 01:26

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd8096149f

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=49617
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-05-25 01:29

Create report

Finds vulnerable Vite development environment

ViteJS development environment found and vulnerable to CVE-2025-30208

IP: 13.248.132.87
Domain: www.ewbunlv.org
Port: 443
URL: https://www.ewbunlv.org

First seen 2025-05-25 01:29
Last seen 2025-12-22 13:24
Open for 211 days

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd7520b38f

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=59432
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-12-22 13:24

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdc742f054

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=4105
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-12-20 14:09

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd9b68e7b1

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=53173
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-12-18 11:15

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd58d84036

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=4279
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-12-17 04:16

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd15758902

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=48006
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-12-14 13:10

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffda9ab5e16

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=10278
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-12-13 18:29

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdec215779

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=40708
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-12-01 13:34

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd22330a73

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=51357
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-28 20:04

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd499259f6

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=40697
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-27 07:09

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdf473f69f

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=56345
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-23 17:27

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd1ba8337b

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=44434
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-20 21:40

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffda41865d8

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=27681
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-16 10:24

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd2f21db9b

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=25462
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-14 10:44

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd6dc68165

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=49581
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-12 10:28

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd012c3ceb

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=49745
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-10 12:48

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd1f0a6b56

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=13648
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-08 11:38

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd2c1b5fc7

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=20537
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-07 02:39

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd77ff228d

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=57726
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-05 02:06

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd83d6e89a

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=41584
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-11-02 14:58

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffda5049de1

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=39959
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-10-29 10:06

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd6f7ee6a3

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=56068
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-10-27 08:48

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdfa58a1d9

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=37926
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-10-25 04:45

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd78b5eff9

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=14420
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-10-23 13:46

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd506c8dc7

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=7167
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-10-21 07:23

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffde19f96a7

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=23309
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-10-19 12:47

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd13c3d70a

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=32968
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-25 00:37

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd87258830

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=14940
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-20 19:50

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdbe9dd7f5

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=9093
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-19 06:08

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd4562cf69

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=23534
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-12 18:15

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdc9445012

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=33295
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-10 20:27

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd229d6032

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=30889
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-09 00:12

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd290327e6

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=9467
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-07 12:41

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdb53ac8d2

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=37219
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-05 07:56

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdf23ba6fc

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=38252
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-03 07:17

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd7e24667b

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=57979
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-07-01 02:54

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdcd29a3bd

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=40238
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-26 17:07

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd8bd3ad82

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=6581
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-24 15:15

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd4c1ec085

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=46698
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-22 13:13

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd0a0f6a34

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=11341
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-20 13:51

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd69656d3a

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=10238
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-16 19:27

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd70643a08

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=58621
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-12 23:55

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdea0fe9b2

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=26095
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-10 21:57

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd972bcfc9

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=26577
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-09 02:52

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd82fcdfb8

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=7922
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-05 10:30

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd12384217

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=12020
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-03 13:11

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd9269bb32

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=17433
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-06-02 13:18

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffda472766b

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=5918
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-05-31 05:56

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdbf015069

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=32679
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-05-29 05:31

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffdf5550750

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=49397
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-05-27 03:12

Severity: critical
Fingerprint: ebb688b314690472074e858154d682968e092245e4eecbc28479dffd8096149f

Found vulnerable ViteJS development environment:
Affected by CVE-2025-30208
Environment:
npm_config_user_agent=npm/10.8.2 node/v20.17.0 linux x64 workspaces/false
npm_node_execpath=/app/.heroku/node/bin/node
SHLVL=0
npm_config_noproxy=
PORT=49617
HOME=/app
npm_package_json=/app/package.json
PS1=\\[\\033[01;34m\\]\\w\\[\\033[00m\\] \\[\\033[01;32m\\]$ \\[\\033[00m\\]
npm_config_userconfig=/app/.npmrc
npm_config_local_prefix=/app
COLOR=0
_=/app/.heroku/node/bin/npm
npm_config_prefix=/app/.heroku/node
npm_config_npm_version=10.8.2
WEB_CONCURRENCY=1
npm_config_cache=/app/.npm
COREPACK_HOME=/app/.heroku/corepack
npm_config_node_gyp=/app/.heroku/node/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js
PATH=/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/node_modules/.bin:/node_modules/.bin:/app/.heroku/node/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin:/app/.heroku/node/bin:/app/.heroku/yarn/bin:/usr/local/bin:/usr/bin:/bin:/app/bin:/app/node_modules/.bin
NODE=/app/.heroku/node/bin/node
npm_package_name=ewbunlv
MEMORY_AVAILABLE=512
NODE_HOME=/app/.heroku/node
npm_lifecycle_script=vite --port $PORT --host 0.0.0.0
npm_package_version=0.0.0
npm_lifecycle_event=prod
npm_config_globalconfig=/app/.heroku/node/etc/npmrc
npm_config_init_module=/app/.npm-init.js
PWD=/app
npm_execpath=/app/.heroku/node/lib/node_modules/npm/bin/npm-cli.js
npm_config_global_prefix=/app/.heroku/node
npm_command=run-script
NODE_ENV=production
WEB_MEMORY=512
DYNO=web.1
INIT_CWD=/app
EDITOR=vi

Found on 2025-05-25 01:29

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: www.kickon.cl
Port: 443
URL: https://www.kickon.cl

First seen 2025-11-23 03:21
Last seen 2025-12-22 11:06
Open for 29 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3894e4d6f47ec723d1ee6de39550f516c336dfc8f
```
GraphQL introspection enabled at /graphql
Types: 38 (by kind: ENUM: 3, INPUT_OBJECT: 2, OBJECT: 27, SCALAR: 6)
Operations:
- Query: Query | fields: getCard, getPromo, getTransaction, getTransactionData, getUser
- Mutation: Mutation | fields: createTransaction, createTransactionData, createUser
Directives: auth, deprecated, include, skip, specifiedBy (total: 5)
```
  Found on 2025-12-22 11:06
  
  71.0 kBytes
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: www.kickon.cl
Port: 80
URL: http://www.kickon.cl

First seen 2025-11-23 03:21
Last seen 2025-12-22 11:06
Open for 29 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3894e4d6f47ec723d1ee6de39550f516c336dfc8f
```
GraphQL introspection enabled at /graphql
Types: 38 (by kind: ENUM: 3, INPUT_OBJECT: 2, OBJECT: 27, SCALAR: 6)
Operations:
- Query: Query | fields: getCard, getPromo, getTransaction, getTransactionData, getUser
- Mutation: Mutation | fields: createTransaction, createTransactionData, createUser
Directives: auth, deprecated, include, skip, specifiedBy (total: 5)
```
  Found on 2025-12-22 11:06
  
  71.0 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.chessgen.com
Port: 80
URL: http://www.chessgen.com

First seen 2025-09-18 06:57
Last seen 2025-12-16 15:57
Open for 89 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0734de28a29e105ac27d515d9e7170ed4
```
Found 13 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/chess.html
/chessgen-favicon.png
/chessgen-imageonly.png
/chessgen-logo.png
/chessgen-wordmark.png
/chessgen.png
/chesspieces
/robots.txt
```
  Found on 2025-12-16 15:57
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.thecareersphere.com
Port: 443
URL: https://www.thecareersphere.com

First seen 2024-12-25 00:22
Last seen 2025-12-12 18:45
Open for 352 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176424efdc5be88cca9fe88cca9fe88cca9fe
```
Found 2 files trough .DS_Store spidering:

/logo192 4.30.30 AM.png
/logo512 4.30.30 AM.png
```
  Found on 2025-12-12 18:45
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: en.bossaz-pr-1273.azstage.in
Port: 80
URL: http://en.bossaz-pr-1273.azstage.in

First seen 2025-12-10 08:43

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3edcd2f02dd1cea9285e39de80e5d532613018182

GraphQL introspection enabled at /graphql
Types: 125 (by kind: ENUM: 22, INPUT_OBJECT: 20, INTERFACE: 2, OBJECT: 69, SCALAR: 10, UNION: 2)
Operations:
- Query: Query | fields: balanceHistory, bookmarks, categories, company, draftResume
- Mutation: Mutation | fields: createBookmark, createContactEmail, createInvoice, createPayment, createResume
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-10 08:43

140.1 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: ru.bossaz-pr-1270.azstage.in
Port: 443
URL: https://ru.bossaz-pr-1270.azstage.in

First seen 2025-12-05 15:03

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3edcd2f02dd1cea9285e39de80e5d532613018182

GraphQL introspection enabled at /graphql
Types: 125 (by kind: ENUM: 22, INPUT_OBJECT: 20, INTERFACE: 2, OBJECT: 69, SCALAR: 10, UNION: 2)
Operations:
- Query: Query | fields: balanceHistory, bookmarks, categories, company, draftResume
- Mutation: Mutation | fields: createBookmark, createContactEmail, createInvoice, createPayment, createResume
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-05 15:03

140.1 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: ru.bossaz-pr-1255.azstage.in
Port: 443
URL: https://ru.bossaz-pr-1255.azstage.in

First seen 2025-11-12 07:33
Last seen 2025-12-01 00:45
Open for 18 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3edcd2f02dd1cea9285e39de80e5d532613018182
```
GraphQL introspection enabled at /graphql
Types: 125 (by kind: ENUM: 22, INPUT_OBJECT: 20, INTERFACE: 2, OBJECT: 69, SCALAR: 10, UNION: 2)
Operations:
- Query: Query | fields: balanceHistory, bookmarks, categories, company, draftResume
- Mutation: Mutation | fields: createBookmark, createContactEmail, createInvoice, createPayment, createResume
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2025-12-01 00:45
  
  139.8 kBytes
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: bossaz-pr-1255.azstage.in
Port: 443
URL: https://bossaz-pr-1255.azstage.in

First seen 2025-11-12 07:32
Last seen 2025-12-01 00:45
Open for 18 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3edcd2f02dd1cea9285e39de80e5d532613018182
```
GraphQL introspection enabled at /graphql
Types: 125 (by kind: ENUM: 22, INPUT_OBJECT: 20, INTERFACE: 2, OBJECT: 69, SCALAR: 10, UNION: 2)
Operations:
- Query: Query | fields: balanceHistory, bookmarks, categories, company, draftResume
- Mutation: Mutation | fields: createBookmark, createContactEmail, createInvoice, createPayment, createResume
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2025-12-01 00:45
  
  139.8 kBytes
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: spoke.drivers.coop
Port: 443
URL: https://spoke.drivers.coop

First seen 2025-11-14 02:33
Last seen 2025-11-22 11:16
Open for 8 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa30d0098f353fb9771415b4e4b6fd54fd3f8f95ec3
```
GraphQL introspection enabled at /graphql
Types: 88 (by kind: ENUM: 5, INPUT_OBJECT: 25, OBJECT: 48, SCALAR: 8, UNION: 2)
Operations:
- Query: RootQuery | fields: assignment, campaign, currentUser, inviteByHash, organization
- Mutation: RootMutation | fields: createCampaign, createInvite, deleteJob, editCampaign, editOrganization
Directives: deprecated, include, skip (total: 3)
```
  Found on 2025-11-22 11:16
  
  114.0 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.staging.orderprinterpro.com
Port: 443
URL: https://www.staging.orderprinterpro.com

First seen 2025-02-08 00:11
Last seen 2025-11-16 06:59
Open for 281 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b33e8323b0a8f7a337f2fc95ba4c0df82
```
Found 14 files trough .DS_Store spidering:

/css
/font-awesome
/font-awesome/css
/font-awesome/css/font-awesome.css
/font-awesome/css/font-awesome.min.css
/font-awesome/fonts
/font-awesome/fonts/fontawesome-webfont.eot
/font-awesome/fonts/fontawesome-webfont.svg
/font-awesome/fonts/fontawesome-webfont.ttf
/font-awesome/fonts/fontawesome-webfont.woff
/font-awesome/fonts/FontAwesome.otf
/js
/js/jquery.js
/js/wordsearch-resize.js
```
  Found on 2025-11-16 06:59
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e94a7e0559767e8031747e4af9780ac4e4
```
Found 5 files trough .DS_Store spidering:

/css
/font-awesome
/js
/js/jquery.js
/js/wordsearch-resize.js
```
  Found on 2025-08-07 01:20
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: cdn.staging.orderprinterpro.com
Port: 443
URL: https://cdn.staging.orderprinterpro.com

First seen 2025-02-08 00:12
Last seen 2025-11-16 03:19
Open for 281 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b33e8323b0a8f7a337f2fc95ba4c0df82
```
Found 14 files trough .DS_Store spidering:

/css
/font-awesome
/font-awesome/css
/font-awesome/css/font-awesome.css
/font-awesome/css/font-awesome.min.css
/font-awesome/fonts
/font-awesome/fonts/fontawesome-webfont.eot
/font-awesome/fonts/fontawesome-webfont.svg
/font-awesome/fonts/fontawesome-webfont.ttf
/font-awesome/fonts/fontawesome-webfont.woff
/font-awesome/fonts/FontAwesome.otf
/js
/js/jquery.js
/js/wordsearch-resize.js
```
  Found on 2025-11-16 03:19
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: staging.orderprinterpro.com
Port: 443
URL: https://staging.orderprinterpro.com

First seen 2025-02-08 00:11
Last seen 2025-11-16 03:19
Open for 281 days

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b33e8323b0a8f7a337f2fc95ba4c0df82

Found 14 files trough .DS_Store spidering:

/css
/font-awesome
/font-awesome/css
/font-awesome/css/font-awesome.css
/font-awesome/css/font-awesome.min.css
/font-awesome/fonts
/font-awesome/fonts/fontawesome-webfont.eot
/font-awesome/fonts/fontawesome-webfont.svg
/font-awesome/fonts/fontawesome-webfont.ttf
/font-awesome/fonts/fontawesome-webfont.woff
/font-awesome/fonts/FontAwesome.otf
/js
/js/jquery.js
/js/wordsearch-resize.js

Found on 2025-11-16 03:19

Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e94a7e0559767e8031747e4af9780ac4e4
```
Found 5 files trough .DS_Store spidering:

/css
/font-awesome
/js
/js/jquery.js
/js/wordsearch-resize.js
```
Found on 2025-06-24 11:30

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d6aae32957ee1427defb31dcd78695736

Found 12 files trough .DS_Store spidering:

/css
/font-awesome
/font-awesome/css
/font-awesome/fonts
/font-awesome/fonts/fontawesome-webfont.eot
/font-awesome/fonts/fontawesome-webfont.svg
/font-awesome/fonts/fontawesome-webfont.ttf
/font-awesome/fonts/fontawesome-webfont.woff
/font-awesome/fonts/FontAwesome.otf
/js
/js/jquery.js
/js/wordsearch-resize.js

Found on 2025-06-08 00:58

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247252af0f35d67698835508a1d65095da2a5

Found 9 files trough .DS_Store spidering:

/css
/font-awesome
/font-awesome/css
/font-awesome/css/font-awesome.css
/font-awesome/css/font-awesome.min.css
/font-awesome/fonts
/js
/js/jquery.js
/js/wordsearch-resize.js

Found on 2025-06-08 00:58

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: apinode.balancelifedesign.com
Port: 443
URL: https://apinode.balancelifedesign.com

First seen 2025-10-31 01:19
Last seen 2025-11-14 20:54
Open for 14 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2025-11-14 20:54
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: apiv2.cashlog.net
Port: 80
URL: http://apiv2.cashlog.net

First seen 2025-11-13 23:39
- Severity: info
  Fingerprint: 5733ddf49ff49cd151e75e4b8817192b0207123cb73f32e6271ef5c93d1788be
```
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /api/users/transaction-password
GET /api/customers
GET /api/customers/search
GET /api/customers/{id}
GET /api/customers/{id}/validate-deletion
GET /api/loans
GET /api/users/profile
GET /api/users/transaction-password/status
PATCH /api/loans/{id}/mark-as-paid
POST /api/auth/activate-account
POST /api/auth/login
POST /api/auth/password-reset
POST /api/auth/password-reset/confirm
POST /api/backup
POST /api/loans/batch-mark-as-paid
POST /api/loans/process-overdue
POST /api/loans/{id}/payments
POST /api/users
POST /api/users/transaction-password/set
POST /api/users/transaction-password/validate
PUT /api/loans/{id}
```
  Found on 2025-11-13 23:39
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: realnet.kenekt.app
Port: 80
URL: http://realnet.kenekt.app

First seen 2025-04-12 00:02
Last seen 2025-11-12 20:59
Open for 214 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-12 20:59
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 10:12
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: enrolment-api.feedbackforward.org
Port: 443
URL: https://enrolment-api.feedbackforward.org

First seen 2025-11-12 18:38

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa338f1d774a089ef78566208fdf04f6348511e79a8

GraphQL introspection enabled at /graphql
Types: 199 (by kind: ENUM: 16, INPUT_OBJECT: 42, INTERFACE: 2, OBJECT: 131, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-12 18:38

381.0 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: strikedev.kenekt.app
Port: 80
URL: http://strikedev.kenekt.app

First seen 2025-04-12 00:13
Last seen 2025-11-12 08:58
Open for 214 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-12 08:58
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 05:00
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: thevortexmindset.com
Port: 80
URL: http://thevortexmindset.com

First seen 2025-11-10 01:51
Last seen 2025-11-12 04:36
Open for 2 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642b9618ce7da41f744da41f744da41f744
```
Found 2 files trough .DS_Store spidering:

/.git
/static
```
  Found on 2025-11-12 04:36
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: momentum-property-solutions.kenekt.app
Port: 80
URL: http://momentum-property-solutions.kenekt.app

First seen 2025-08-15 04:21
Last seen 2025-11-10 23:06
Open for 87 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-10 23:06
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 08:20
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: aplace-vic.kenekt.app
Port: 80
URL: http://aplace-vic.kenekt.app

First seen 2025-08-01 01:16
Last seen 2025-11-10 21:14
Open for 101 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-10 21:14
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 16:08
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: karston-homes.kenekt.app
Port: 80
URL: http://karston-homes.kenekt.app

First seen 2025-09-20 01:40
Last seen 2025-11-10 14:41
Open for 51 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-10 14:41
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 12:35
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: aviahomes.kenekt.app
Port: 80
URL: http://aviahomes.kenekt.app

First seen 2025-06-18 22:15
Last seen 2025-11-10 08:05
Open for 144 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-10 08:05
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 02:30
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: alc.kenekt.app
Port: 80
URL: http://alc.kenekt.app

First seen 2025-04-06 01:04
Last seen 2025-11-10 07:46
Open for 218 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-10 07:46
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 05:11
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: child-care-sms.mobrilz.digital
Port: 443
URL: https://child-care-sms.mobrilz.digital

First seen 2025-10-20 01:06
Last seen 2025-11-10 06:45
Open for 21 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2025-11-10 06:45
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: projects.trustedestateagents.com.au
Port: 80
URL: http://projects.trustedestateagents.com.au

First seen 2025-05-04 01:05
Last seen 2025-11-08 21:18
Open for 188 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-08 21:18
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 20:18
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: equiti.kenekt.app
Port: 80
URL: http://equiti.kenekt.app

First seen 2025-06-19 00:20
Last seen 2025-11-08 20:48
Open for 142 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-08 20:48
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 06:59
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: stock.pierstech.com
Port: 80
URL: http://stock.pierstech.com

First seen 2025-04-26 00:44
Last seen 2025-11-08 13:18
Open for 196 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-08 13:18
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 08:14
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: vision21.kenekt.app
Port: 80
URL: http://vision21.kenekt.app

First seen 2025-03-24 01:19
Last seen 2025-11-08 12:33
Open for 229 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-08 12:33
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 22:02
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: resultdevelopments.kenekt.app
Port: 80
URL: http://resultdevelopments.kenekt.app

First seen 2025-04-12 00:13
Last seen 2025-11-08 04:31
Open for 210 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-08 04:31
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 22:59
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: hendrixandhart.kenekt.app
Port: 80
URL: http://hendrixandhart.kenekt.app

First seen 2025-04-12 01:12
Last seen 2025-11-07 00:46
Open for 208 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-07 00:46
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 07:23
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: sunnythepropertyguru.kenekt.app
Port: 80
URL: http://sunnythepropertyguru.kenekt.app

First seen 2025-04-12 00:13
Last seen 2025-11-06 23:57
Open for 208 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-06 23:57
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 21:34
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: newpropertyspecialists.kenekt.app
Port: 443
URL: https://newpropertyspecialists.kenekt.app

First seen 2024-11-25 01:14
Last seen 2025-11-06 22:43
Open for 346 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-06 22:43
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 07:54
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-14 13:20
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: portal.buynewqueensland.com.au
Port: 443
URL: https://portal.buynewqueensland.com.au

First seen 2024-11-28 03:13
Last seen 2025-11-06 22:06
Open for 343 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-06 22:06
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 06:22
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-14 06:29
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: newvision.kenekt.app
Port: 80
URL: http://newvision.kenekt.app

First seen 2025-04-12 00:03
Last seen 2025-11-05 16:21
Open for 207 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-05 16:21
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 19:57
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: properties.paradiselifeproject.com
Port: 80
URL: http://properties.paradiselifeproject.com

First seen 2025-04-24 00:52
Last seen 2025-11-05 15:09
Open for 195 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-05 15:09
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 08:54
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: g9realtors.kenekt.app
Port: 80
URL: http://g9realtors.kenekt.app

First seen 2025-04-12 00:14
Last seen 2025-11-05 11:53
Open for 207 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-05 11:53
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 01:39
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: partners.fortune8propertygroup.com.au
Port: 80
URL: http://partners.fortune8propertygroup.com.au

First seen 2025-06-22 00:57
Last seen 2025-11-05 11:06
Open for 136 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-05 11:06
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 20:20
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: monaproperties.kenekt.app
Port: 80
URL: http://monaproperties.kenekt.app

First seen 2025-05-25 01:29
Last seen 2025-11-05 01:53
Open for 164 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-05 01:53
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 23:14
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: metro.kenekt.app
Port: 80
URL: http://metro.kenekt.app

First seen 2025-04-12 00:42
Last seen 2025-11-04 19:32
Open for 206 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-04 19:32
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 13:03
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: metro.kenekt.app
Port: 443
URL: https://metro.kenekt.app

First seen 2024-12-12 22:00
Last seen 2025-11-04 14:15
Open for 326 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-04 14:15
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 20:08
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-15 03:25
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: hotpropertygrouphomes.kenekt.app
Port: 443
URL: https://hotpropertygrouphomes.kenekt.app

First seen 2025-02-27 04:28
Last seen 2025-11-04 10:37
Open for 250 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-04 10:37
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 01:23
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-15 02:16
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: mansenrealestate.kenekt.app
Port: 80
URL: http://mansenrealestate.kenekt.app

First seen 2025-04-12 00:03
Last seen 2025-11-03 15:13
Open for 205 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-03 15:13
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 04:42
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.titaniumfxpro.com
Port: 443
URL: https://api.titaniumfxpro.com

First seen 2025-10-27 01:00
Last seen 2025-11-03 07:40
Open for 7 days

Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e5727e04f7562e519d1237e0a3efdcf449a5a60a19

Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
DELETE /v1/contracts/{hash}
DELETE /v1/orders/{hash}
DELETE /v1/robots/{hash}
GET /v1/actives
GET /v1/actives/{ativoId}
GET /v1/asset-history
GET /v1/cities
GET /v1/cities/{cidadeId}
GET /v1/contracts
GET /v1/contracts/{contratoId}
GET /v1/grupos
GET /v1/grupos/{grupoId}
GET /v1/grupos/{grupoId}/permissoes
GET /v1/investments
GET /v1/markets
GET /v1/markets/sse
GET /v1/markets/{symbols}
GET /v1/news
GET /v1/operations
GET /v1/orders
GET /v1/orders/total-operations
GET /v1/orders/{hash}/hash
GET /v1/orders/{ordemId}
GET /v1/permissoes
GET /v1/professions
GET /v1/quotas
GET /v1/quotas/total-paid
GET /v1/quotas/{parcelaId}
GET /v1/releases
GET /v1/releases/total-releases
GET /v1/releases/{hash}/hash
GET /v1/robots
GET /v1/robots/total-operations
GET /v1/robots/{hash}/hash
GET /v1/robots/{hash}/hash-model
GET /v1/states
GET /v1/states/{estadoId}
GET /v1/tokens
GET /v1/users
GET /v1/users/brokers
GET /v1/users/full
GET /v1/users/{hash}/annotation
GET /v1/users/{hash}/balance
GET /v1/users/{hash}/balances
GET /v1/users/{hash}/hash
GET /v1/users/{hash}/password-decrypted
GET /v1/users/{usuarioId}
GET /v1/users/{usuarioId}/photo
GET /v1/users/{usuarioId}/photo/{tipoFoto}
GET /v1/usuarios/{usuarioId}/grupos
POST /v1/releases/{accessKey}
POST /v1/users/home-created
POST /v1/users/{accessKey}
PUT /v1/actives/{id}
PUT /v1/contracts/{hash}/sign
PUT /v1/contracts/{id}
PUT /v1/grupos/{grupoId}/permissoes/{permissaoId}
PUT /v1/orders/{hash}/close
PUT /v1/orders/{hash}/crash-operation
PUT /v1/quotas/{parcelaId}/paid
PUT /v1/releases/{lancamentoHash}
PUT /v1/releases/{lancamentoHash}/authorized
PUT /v1/releases/{lancamentoHash}/canceled
PUT /v1/releases/{lancamentoHash}/confirmed
PUT /v1/robots/{hash}/allow-transfer
PUT /v1/robots/{hash}/transfer-balance
PUT /v1/users/reset-password/{email}
PUT /v1/users/{hash}/logged-in
PUT /v1/users/{usuarioId}/allow-transfer
PUT /v1/users/{usuarioId}/close-order-allowed
PUT /v1/users/{usuarioId}/demo-balance
PUT /v1/users/{usuarioId}/open-order-allowed
PUT /v1/users/{usuarioId}/score
PUT /v1/users/{usuarioId}/senha
PUT /v1/usuarios/{usuarioId}/grupos/{grupoId}

Found on 2025-11-03 07:40

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: astel.kenekt.app
Port: 443
URL: https://astel.kenekt.app

First seen 2024-12-12 22:16
Last seen 2025-11-03 07:39
Open for 325 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-03 07:39
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 18:26
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-14 08:11
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: statewidecapital.kenekt.app
Port: 80
URL: http://statewidecapital.kenekt.app

First seen 2025-03-17 01:57
Last seen 2025-11-02 19:22
Open for 230 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-02 19:22
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 09:28
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: hotpropertygrouphomes.kenekt.app
Port: 80
URL: http://hotpropertygrouphomes.kenekt.app

First seen 2025-04-29 00:14
Last seen 2025-11-02 09:31
Open for 187 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-02 09:31
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 13:09
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: members.platinumproperty.club
Port: 80
URL: http://members.platinumproperty.club

First seen 2025-05-06 06:24
Last seen 2025-10-30 17:21
Open for 177 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-10-30 17:21
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 03:36
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: recomot-passwork-app.prazto.com
Port: 80
URL: http://recomot-passwork-app.prazto.com

First seen 2025-10-21 00:50
Last seen 2025-10-25 04:55
Open for 4 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2025-10-25 04:55
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: backend.aicreatorlabs.id
Port: 443
URL: https://backend.aicreatorlabs.id

First seen 2025-10-15 19:51

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff4387a9a19603cc507f60c0016405d6e532f23f3816

Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /projects/{id}/delete/
DELETE /projects/{project_id}/videos/{video_id}/remove/
DELETE /watchlists/{id}/
GET /api/v1/addons/
GET /api/v1/addons/available/
GET /api/v1/addons/{id}/
GET /api/v1/agenda-items/
GET /api/v1/agenda-items/by_day/
GET /api/v1/agenda-items/{id}/
GET /api/v1/benefits/
GET /api/v1/benefits/{id}/
GET /api/v1/daily-agendas/
GET /api/v1/daily-agendas/{id}/
GET /api/v1/events/
GET /api/v1/events/featured/
GET /api/v1/events/{id}/
GET /api/v1/events/{id}/registrations/
GET /api/v1/events/{id}/stats/
GET /api/v1/events/{id}/summary/
GET /api/v1/registrations/
GET /api/v1/registrations/{id}/
GET /api/v1/speakers/
GET /api/v1/speakers/keynotes/
GET /api/v1/speakers/{id}/
GET /api/v1/speakers/{id}/sessions/
GET /api/v1/speakers/{id}/summary/
GET /api/v1/testimonials/
GET /api/v1/testimonials/by_rating/
GET /api/v1/testimonials/featured/
GET /api/v1/testimonials/{id}/
GET /api/v1/vouchers/
GET /api/v1/vouchers/{id}/
GET /channel-requests/
GET /channels/
GET /channels/{channel_id}/watchlists/
GET /projects/
GET /projects/{id}/
GET /projects/{project_id}/videos/
GET /videos/
GET /videos/{video_id}/
GET /watchlists/
POST /akal/transactions
POST /api/v1/events/vouchers/validate/
POST /api/v1/registrations/{id}/cancel/
POST /api/v1/registrations/{id}/confirm_payment/
POST /channels/bulk-update-create/
POST /projects/add-video/
POST /simon-sons/purchasing-request/
POST /videos/instagram/bulk-update-create/
POST /watchlists/add-channel/
PUT /projects/{id}/update/
PUT /watchlists/{id}/update/

Found on 2025-10-15 19:51

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.colinseitzphotography.com
Port: 443
URL: https://www.colinseitzphotography.com

First seen 2022-09-22 19:28
Last seen 2025-10-11 02:21
Open for 1114 days

Severity: low
Fingerprint: 5f32cf5d6962f09c47dfe71947dfe7193b01226acad4358e95f4672a7eefb26f

Found 16 files trough .DS_Store spidering:

/images
/images/thumb
/system
/system/contents
/system/contents/photos
/system/contents/photos/000
/system/contents/photos/000/000
/system/contents/photos/000/000/002
/system/contents/photos/000/000/002/large
/system/contents/photos/000/000/002/medium
/system/contents/photos/000/000/002/original
/system/contents/photos/000/000/002/small
/system/contents/photos/000/000/002/thumb
/system/contents/photos/000/000/003
/system/contents/photos/000/000/004
/system/photos

Found on 2025-10-11 02:21

Severity: low
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcf4e3e2d089b5cf1d4ea83b21886c75269

Found 25 files trough .DS_Store spidering:

/images
/images/thumb
/system
/system/contents
/system/contents/photos
/system/contents/photos/000
/system/contents/photos/000/000
/system/contents/photos/000/000/002
/system/contents/photos/000/000/002/large
/system/contents/photos/000/000/002/medium
/system/contents/photos/000/000/002/original
/system/contents/photos/000/000/002/small
/system/contents/photos/000/000/002/thumb
/system/contents/photos/000/000/003
/system/contents/photos/000/000/004
/system/photos
/system/photos/photos
/system/photos/photos/000
/system/photos/photos/000/000
/system/photos/photos/000/000/001
/system/photos/photos/000/000/001/large
/system/photos/photos/000/000/001/medium
/system/photos/photos/000/000/001/original
/system/photos/photos/000/000/001/small
/system/photos/photos/000/000/001/thumb

Found on 2025-10-08 20:47

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772c0ef9a1312020dfd3183360320a06925

Found 11 files trough .DS_Store spidering:

/images
/images/thumb
/system
/system/contents
/system/contents/photos
/system/contents/photos/000
/system/contents/photos/000/000
/system/contents/photos/000/000/002
/system/contents/photos/000/000/003
/system/contents/photos/000/000/004
/system/photos

Found on 2025-03-23 04:30

Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e7db0bbd797cd19f9e6933ed714561499

Found 20 files trough .DS_Store spidering:

/images
/images/thumb
/system
/system/contents
/system/contents/photos
/system/contents/photos/000
/system/contents/photos/000/000
/system/contents/photos/000/000/002
/system/contents/photos/000/000/002/large
/system/contents/photos/000/000/002/medium
/system/contents/photos/000/000/002/original
/system/contents/photos/000/000/002/small
/system/contents/photos/000/000/002/thumb
/system/contents/photos/000/000/003
/system/contents/photos/000/000/004
/system/photos
/system/photos/photos
/system/photos/photos/000
/system/photos/photos/000/000
/system/photos/photos/000/000/001

Found on 2024-08-28 11:41

Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a9a32b07b7036151597a937bb4d951c33

Found 19 files trough .DS_Store spidering:

/images
/images/thumb
/system
/system/contents
/system/contents/photos
/system/contents/photos/000
/system/contents/photos/000/000
/system/contents/photos/000/000/002
/system/contents/photos/000/000/002/large
/system/contents/photos/000/000/002/medium
/system/contents/photos/000/000/002/original
/system/contents/photos/000/000/002/small
/system/contents/photos/000/000/002/thumb
/system/contents/photos/000/000/003
/system/contents/photos/000/000/004
/system/photos
/system/photos/photos
/system/photos/photos/000
/system/photos/photos/000/000

Found on 2024-05-08 20:07

Severity: low
Fingerprint: 5f32cf5d6962f09cdafa5447dafa5447730fdda063733b7c69ab01204657b4c0

Found 18 files trough .DS_Store spidering:

/images
/images/thumb
/system
/system/contents
/system/contents/photos
/system/contents/photos/000
/system/contents/photos/000/000
/system/contents/photos/000/000/002
/system/contents/photos/000/000/002/large
/system/contents/photos/000/000/002/medium
/system/contents/photos/000/000/002/original
/system/contents/photos/000/000/002/small
/system/contents/photos/000/000/002/thumb
/system/contents/photos/000/000/003
/system/contents/photos/000/000/004
/system/photos
/system/photos/photos
/system/photos/photos/000

Found on 2022-11-22 16:43

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: demo.equipnx.com
Port: 443
URL: https://demo.equipnx.com

First seen 2025-05-27 01:25
Last seen 2025-10-07 03:34
Open for 133 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3838040e3838040e7121511cb681bfa78b66f38b288263dc
```
Found 20 files trough .DS_Store spidering:

/404.html
/406-unsupported-browser.html
/422.html
/500.html
/android-chrome-192x192.png
/android-chrome-512x512.png
/apple-app-site-association-develop.json
/apple-app-site-association-prod.json
/apple-app-site-association-staging.json
/apple-touch-icon-180x180.png
/assetlinks-develop.json
/assetlinks-prod.json
/assetlinks-staging.json
/blobs.svg
/favicon-16x16.png
/favicon-32x32.png
/favicon.ico
/pdfs
/robots.txt
/site.webmanifest
```
  Found on 2025-10-07 03:34
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: jonathanthom.com
Port: 80
URL: http://jonathanthom.com

First seen 2025-10-03 05:44
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772c0ef9a13bf8de6d25179a29885dd70f1
```
Found 11 files trough .DS_Store spidering:

/images
/images/IMG_5811.jpeg
/index.html
/node_modules
/optimize-images.sh
/package-lock.json
/package.json
/photos
/photos.html
/Procfile
/serve.json
```
  Found on 2025-10-03 05:44
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: jonathanthom.com
Port: 443
URL: https://jonathanthom.com

First seen 2025-10-03 05:44
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772c0ef9a13bf8de6d25179a29885dd70f1
```
Found 11 files trough .DS_Store spidering:

/images
/images/IMG_5811.jpeg
/index.html
/node_modules
/optimize-images.sh
/package-lock.json
/package.json
/photos
/photos.html
/Procfile
/serve.json
```
  Found on 2025-10-03 05:44
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.upsendly.com
Port: 443
URL: https://www.upsendly.com

First seen 2025-01-04 00:53
Last seen 2025-09-17 00:04
Open for 255 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da868258a4f7b

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/cover.jpg
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/greenpal-partner-min.png
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/called-g.svg
/images/icons/cash-g.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/computer-g.svg
/images/icons/copy-g.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-g.svg
/images/icons/edit-w.svg
/images/icons/email-b.svg
/images/icons/email-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails-w.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/external.svg
/images/icons/eye-g.svg
/images/icons/eye-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/inbox-g-outline.svg
/images/icons/inbox-w-outline.svg
/images/icons/insights.svg
/images/icons/laptop.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/magnet-g.svg
/images/icons/magnet.svg
/images/icons/manager.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent-w.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/spam.svg
/images/icons/support-w.svg
/images/icons/telephone-w.svg
/images/icons/telephone.svg
/images/icons/trash.svg
/images/icons/triangle-g.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/leademail_images
/images/leademail_images/schedule-img.jpg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/play-button.png
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg

Found on 2025-09-17 00:04

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da8688a943f1c

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/cover.jpg
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/greenpal-partner-min.png
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/called-g.svg
/images/icons/cash-g.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/computer-g.svg
/images/icons/copy-g.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-g.svg
/images/icons/edit-w.svg
/images/icons/email-b.svg
/images/icons/email-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails-w.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/external.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/inbox-g-outline.svg
/images/icons/inbox-w-outline.svg
/images/icons/insights.svg
/images/icons/laptop.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/magnet-g.svg
/images/icons/magnet.svg
/images/icons/manager.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent-w.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/spam.svg
/images/icons/support-w.svg
/images/icons/telephone-w.svg
/images/icons/telephone.svg
/images/icons/trash.svg
/images/icons/triangle-g.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/leademail_images
/images/leademail_images/schedule-img.jpg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/play-button.png
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg

Found on 2025-02-12 14:30

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da8688b67f716

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/called-g.svg
/images/icons/cash-g.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/computer-g.svg
/images/icons/copy-g.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-g.svg
/images/icons/edit-w.svg
/images/icons/email-b.svg
/images/icons/email-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails-w.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/external.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/inbox-g-outline.svg
/images/icons/inbox-w-outline.svg
/images/icons/insights.svg
/images/icons/laptop.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/magnet-g.svg
/images/icons/magnet.svg
/images/icons/manager.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent-w.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/spam.svg
/images/icons/support-w.svg
/images/icons/telephone-w.svg
/images/icons/telephone.svg
/images/icons/trash.svg
/images/icons/triangle-g.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/play-button.png
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/schedule-img.jpg
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png

Found on 2025-02-08 06:04

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da868dc3a31c6

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/called-g.svg
/images/icons/cash-g.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/computer-g.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-w.svg
/images/icons/email-b.svg
/images/icons/email-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails-w.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/external.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/inbox-g-outline.svg
/images/icons/inbox-w-outline.svg
/images/icons/insights.svg
/images/icons/laptop.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/magnet-g.svg
/images/icons/magnet.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent-w.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/spam.svg
/images/icons/support-w.svg
/images/icons/telephone-w.svg
/images/icons/telephone.svg
/images/icons/trash.svg
/images/icons/triangle-g.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/play-button.png
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/schedule-img.jpg
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png

Found on 2025-02-06 10:03

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da868b2f930c8

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/called-g.svg
/images/icons/cash-g.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/computer-g.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-w.svg
/images/icons/email-b.svg
/images/icons/email-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails-w.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/external.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/inbox-w-outline.svg
/images/icons/insights.svg
/images/icons/laptop.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/magnet-g.svg
/images/icons/magnet.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent-w.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/spam.svg
/images/icons/support-w.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/triangle-g.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/play-button.png
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png

Found on 2025-02-04 15:00

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da8682fabe43f

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/called-g.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-w.svg
/images/icons/email-b.svg
/images/icons/email-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/external.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/laptop.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent-w.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/spam.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/triangle-g.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/play-button.png
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-img-2-aeration-cta.webp
/images/splash-img-2-aeration-header.webp
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login copy.jpeg

Found on 2025-01-26 10:38

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da8688811a160

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/called-g.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-w.svg
/images/icons/email-b copy.svg
/images/icons/email-b.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/external.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/laptop.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent-w.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/triangle-g.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/play-button.png
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-img-2-aeration-cta.webp
/images/splash-img-2-aeration-header.webp
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login copy.jpeg
/images/splash-upsendly-login.jpg

Found on 2025-01-24 09:02

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da868d9f0ed8c

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/laptop.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-img-2-aeration-cta.webp
/images/splash-img-2-aeration-header.webp
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login copy.jpeg
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/ssl-badge-min.png
/images/stripe-badge-left.png
/images/stripe-badge-right.png
/images/stripe-badge.png
/images/templates
/images/templates/categories

Found on 2025-01-18 04:38

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da86816175a6f

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-img-2-aeration-cta.webp
/images/splash-img-2-aeration-header.webp
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login copy.jpeg
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/ssl-badge-min.png
/images/stripe-badge-left.png
/images/stripe-badge-right.png
/images/stripe-badge.png
/images/templates
/images/templates/categories
/images/templates/categories/1

Found on 2025-01-14 04:48

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da868c156ef09

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-img-2-aeration-cta.webp
/images/splash-img-2-aeration-header.webp
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login copy.jpeg
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/ssl-badge-min.png
/images/stripe-badge-left.png
/images/stripe-badge-right.png
/images/stripe-badge.png
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/categories/1/beautiful-evening-house-lawn-128x.jpg

Found on 2025-01-12 03:37

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da868b55614c3

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-img-2-aeration-cta.webp
/images/splash-img-2-aeration-header.webp
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login copy.jpeg
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/stripe-badge-left.png
/images/stripe-badge-right.png
/images/stripe-badge.png
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/categories/1/beautiful-evening-house-lawn-128x.jpg
/images/templates/categories/1/beautiful-evening-house-lawn.jpg
/images/templates/categories/1/beautiful-lush-yard-hedge-lawn-care-128x.jpg
/images/templates/categories/1/beautiful-lush-yard-hedge-lawn-care.jpg
/images/templates/categories/1/default-image-128x.jpg

Found on 2025-01-10 22:32

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da868cb5666b1

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/lawn-care-template-select-upsendly.webp
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-img-2-aeration-cta.webp
/images/splash-img-2-aeration-header.webp
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login copy.jpeg
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/stripe-badge-left.png
/images/stripe-badge-right.png
/images/stripe-badge.png
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/categories/1/beautiful-evening-house-lawn-128x.jpg
/images/templates/categories/1/beautiful-evening-house-lawn.jpg
/images/templates/categories/1/beautiful-lush-yard-hedge-lawn-care-128x.jpg
/images/templates/categories/1/beautiful-lush-yard-hedge-lawn-care.jpg

Found on 2025-01-08 19:16

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da86884fb79af

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/verified-g.svg
/images/lawn-care-template-select-upsendly.webp
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-img-2-aeration-cta.webp
/images/splash-img-2-aeration-header.webp
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/stripe-badge-left.png
/images/stripe-badge-right.png
/images/stripe-badge.png
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/categories/1/beautiful-evening-house-lawn-128x.jpg
/images/templates/categories/1/beautiful-evening-house-lawn.jpg
/images/templates/categories/1/beautiful-lush-yard-hedge-lawn-care-128x.jpg
/images/templates/categories/1/beautiful-lush-yard-hedge-lawn-care.jpg
/images/templates/categories/1/default-image-128x.jpg
/images/templates/categories/1/default-image.jpg
/images/templates/categories/1/fall-lawn-aeration-128x.jpg
/images/templates/categories/1/fall-lawn-aeration.jpg
/images/templates/categories/1/family-in-front-of-house-lawn-care-128x.jpg
/images/templates/categories/1/family-in-front-of-house-lawn-care.jpg

Found on 2025-01-06 04:19

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.kenkyu.ai
Port: 80
URL: http://www.kenkyu.ai

First seen 2025-05-25 02:58
Last seen 2025-09-16 20:52
Open for 114 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d493b8ab2493b8ab2493b8ab2493b8ab2
```
Found 1 files trough .DS_Store spidering:

/vite.svg
```
  Found on 2025-09-16 20:52
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.kenkyu.ai
Port: 443
URL: https://www.kenkyu.ai

First seen 2025-05-25 02:58
Last seen 2025-09-16 15:49
Open for 114 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d493b8ab2493b8ab2493b8ab2493b8ab2
```
Found 1 files trough .DS_Store spidering:

/vite.svg
```
  Found on 2025-09-16 15:49
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.upsendly.ca
Port: 443
URL: https://www.upsendly.ca

First seen 2024-11-14 00:13
Last seen 2025-09-16 11:39
Open for 306 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da868258a4f7b

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/cover.jpg
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/greenpal-partner-min.png
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/called-g.svg
/images/icons/cash-g.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/computer-g.svg
/images/icons/copy-g.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-g.svg
/images/icons/edit-w.svg
/images/icons/email-b.svg
/images/icons/email-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails-w.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/external.svg
/images/icons/eye-g.svg
/images/icons/eye-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/inbox-g-outline.svg
/images/icons/inbox-w-outline.svg
/images/icons/insights.svg
/images/icons/laptop.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/magnet-g.svg
/images/icons/magnet.svg
/images/icons/manager.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent-w.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/spam.svg
/images/icons/support-w.svg
/images/icons/telephone-w.svg
/images/icons/telephone.svg
/images/icons/trash.svg
/images/icons/triangle-g.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/leademail_images
/images/leademail_images/schedule-img.jpg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/play-button.png
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg

Found on 2025-09-16 11:39

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da8688a943f1c

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/cover.jpg
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/greenpal-partner-min.png
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/called-g.svg
/images/icons/cash-g.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/computer-g.svg
/images/icons/copy-g.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-g.svg
/images/icons/edit-w.svg
/images/icons/email-b.svg
/images/icons/email-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails-w.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/external.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/inbox-g-outline.svg
/images/icons/inbox-w-outline.svg
/images/icons/insights.svg
/images/icons/laptop.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/magnet-g.svg
/images/icons/magnet.svg
/images/icons/manager.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent-w.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/spam.svg
/images/icons/support-w.svg
/images/icons/telephone-w.svg
/images/icons/telephone.svg
/images/icons/trash.svg
/images/icons/triangle-g.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/leademail_images
/images/leademail_images/schedule-img.jpg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/play-button.png
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg

Found on 2025-02-12 17:39

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da8688b67f716

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/called-g.svg
/images/icons/cash-g.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/computer-g.svg
/images/icons/copy-g.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-g.svg
/images/icons/edit-w.svg
/images/icons/email-b.svg
/images/icons/email-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails-w.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/external.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/inbox-g-outline.svg
/images/icons/inbox-w-outline.svg
/images/icons/insights.svg
/images/icons/laptop.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/magnet-g.svg
/images/icons/magnet.svg
/images/icons/manager.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent-w.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/spam.svg
/images/icons/support-w.svg
/images/icons/telephone-w.svg
/images/icons/telephone.svg
/images/icons/trash.svg
/images/icons/triangle-g.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/play-button.png
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/schedule-img.jpg
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png

Found on 2025-02-08 12:06

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da8685e183176

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/called-g.svg
/images/icons/cash-g.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/computer-g.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-g.svg
/images/icons/edit-w.svg
/images/icons/email-b.svg
/images/icons/email-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails-w.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/external.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/inbox-g-outline.svg
/images/icons/inbox-w-outline.svg
/images/icons/insights.svg
/images/icons/laptop.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/magnet-g.svg
/images/icons/magnet.svg
/images/icons/manager.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent-w.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/spam.svg
/images/icons/support-w.svg
/images/icons/telephone-w.svg
/images/icons/telephone.svg
/images/icons/trash.svg
/images/icons/triangle-g.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/play-button.png
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/schedule-img.jpg
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png

Found on 2025-02-06 14:28

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da868b2f930c8

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/called-g.svg
/images/icons/cash-g.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/computer-g.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-w.svg
/images/icons/email-b.svg
/images/icons/email-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails-w.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/external.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/inbox-w-outline.svg
/images/icons/insights.svg
/images/icons/laptop.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/magnet-g.svg
/images/icons/magnet.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent-w.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/spam.svg
/images/icons/support-w.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/triangle-g.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/play-button.png
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png

Found on 2025-02-04 14:23

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da8689370668e

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/called-g.svg
/images/icons/cash-g.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/computer-g.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-w.svg
/images/icons/email-b.svg
/images/icons/email-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/external.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/laptop.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/magnet-g.svg
/images/icons/magnet.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent-w.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/spam.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/triangle-g.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/play-button.png
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png

Found on 2025-01-26 14:05

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da868d9f0ed8c

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/laptop.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-img-2-aeration-cta.webp
/images/splash-img-2-aeration-header.webp
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login copy.jpeg
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/ssl-badge-min.png
/images/stripe-badge-left.png
/images/stripe-badge-right.png
/images/stripe-badge.png
/images/templates
/images/templates/categories

Found on 2025-01-18 13:41

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da86816175a6f

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/phil-upsendly-min.jpg
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-img-2-aeration-cta.webp
/images/splash-img-2-aeration-header.webp
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login copy.jpeg
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/ssl-badge-min.png
/images/stripe-badge-left.png
/images/stripe-badge-right.png
/images/stripe-badge.png
/images/templates
/images/templates/categories
/images/templates/categories/1

Found on 2025-01-14 11:19

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da868c156ef09

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/100-satisfaction-guarantee-min.png
/images/canspam-csl-compliance-badge-min.png
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/powered-by-stripe.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-img-2-aeration-cta.webp
/images/splash-img-2-aeration-header.webp
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login copy.jpeg
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/ssl-badge-min.png
/images/stripe-badge-left.png
/images/stripe-badge-right.png
/images/stripe-badge.png
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/categories/1/beautiful-evening-house-lawn-128x.jpg

Found on 2025-01-12 09:32

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da868b55614c3

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/forward-w.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/upload.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-img-2-aeration-cta.webp
/images/splash-img-2-aeration-header.webp
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login copy.jpeg
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/stripe-badge-left.png
/images/stripe-badge-right.png
/images/stripe-badge.png
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/categories/1/beautiful-evening-house-lawn-128x.jpg
/images/templates/categories/1/beautiful-evening-house-lawn.jpg
/images/templates/categories/1/beautiful-lush-yard-hedge-lawn-care-128x.jpg
/images/templates/categories/1/beautiful-lush-yard-hedge-lawn-care.jpg
/images/templates/categories/1/default-image-128x.jpg

Found on 2025-01-10 08:48

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da86870546ce7

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/edit-w.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/save-w.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/settings.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/verified-g.svg
/images/lawn-care-template-select-upsendly.webp
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-img-2-aeration-cta.webp
/images/splash-img-2-aeration-header.webp
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login copy.jpeg
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/stripe-badge-left.png
/images/stripe-badge-right.png
/images/stripe-badge.png
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/categories/1/beautiful-evening-house-lawn-128x.jpg
/images/templates/categories/1/beautiful-evening-house-lawn.jpg
/images/templates/categories/1/beautiful-lush-yard-hedge-lawn-care-128x.jpg
/images/templates/categories/1/beautiful-lush-yard-hedge-lawn-care.jpg
/images/templates/categories/1/default-image-128x.jpg
/images/templates/categories/1/default-image.jpg

Found on 2025-01-08 06:22

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da86884fb79af

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/verified-g.svg
/images/lawn-care-template-select-upsendly.webp
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-img-2-aeration-cta.webp
/images/splash-img-2-aeration-header.webp
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/stripe-badge-left.png
/images/stripe-badge-right.png
/images/stripe-badge.png
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/categories/1/beautiful-evening-house-lawn-128x.jpg
/images/templates/categories/1/beautiful-evening-house-lawn.jpg
/images/templates/categories/1/beautiful-lush-yard-hedge-lawn-care-128x.jpg
/images/templates/categories/1/beautiful-lush-yard-hedge-lawn-care.jpg
/images/templates/categories/1/default-image-128x.jpg
/images/templates/categories/1/default-image.jpg
/images/templates/categories/1/fall-lawn-aeration-128x.jpg
/images/templates/categories/1/fall-lawn-aeration.jpg
/images/templates/categories/1/family-in-front-of-house-lawn-care-128x.jpg
/images/templates/categories/1/family-in-front-of-house-lawn-care.jpg

Found on 2025-01-06 04:20

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da8680020c173

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/verified-g.svg
/images/lawn-care-template-select-upsendly.webp
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-img-2-aeration-cta.webp
/images/splash-img-2-aeration-header.webp
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login copy.jpeg
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/stripe-badge-left.png
/images/stripe-badge-right.png
/images/stripe-badge.png
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/categories/1/beautiful-evening-house-lawn-128x.jpg
/images/templates/categories/1/beautiful-evening-house-lawn.jpg
/images/templates/categories/1/default-image-128x.jpg
/images/templates/categories/1/default-image.jpg
/images/templates/categories/1/fall-lawn-aeration-128x.jpg
/images/templates/categories/1/fall-lawn-aeration.jpg
/images/templates/categories/1/gardening-128x.jpg
/images/templates/categories/1/gardening.jpg
/images/templates/categories/1/gutter-cleaning-128x.jpg

Found on 2025-01-02 17:51

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da8687a70017f

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/grass-w.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/person-w.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/telephone-w.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/select-template-lawn-care-service.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-img-2-aeration-cta.webp
/images/splash-img-2-aeration-header.webp
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/stripe-badge-left.png
/images/stripe-badge-right.png
/images/stripe-badge.png
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/categories/1/beautiful-evening-house-lawn-128x.jpg
/images/templates/categories/1/beautiful-evening-house-lawn.jpg
/images/templates/categories/1/default-image-128x.jpg
/images/templates/categories/1/default-image-128x.jpg.sb-b065df0d-q0JL9P
/images/templates/categories/1/default-image.jpg
/images/templates/categories/1/fall-lawn-aeration-128x.jpg
/images/templates/categories/1/fall-lawn-aeration-128x.jpg.sb-b065df0d-ATnKmK
/images/templates/categories/1/fall-lawn-aeration.jpg
/images/templates/categories/1/gutter-cleaning-128x.jpg
/images/templates/categories/1/gutter-cleaning.jpg

Found on 2025-01-01 23:19

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da86880d4b801

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/email-template-lawn-aeration-upsendly.webp
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/select-template-lawn-care-service.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-upsendly-lawncare-mobile.webp
/images/splash-upsendly-login copy.jpeg
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/categories/1/beautiful-evening-house-lawn-128x.jpg
/images/templates/categories/1/beautiful-evening-house-lawn.jpg
/images/templates/categories/1/default-image-128x.jpg
/images/templates/categories/1/default-image-128x.jpg.sb-b065df0d-q0JL9P
/images/templates/categories/1/default-image.jpg
/images/templates/categories/1/fall-lawn-aeration-128x.jpg
/images/templates/categories/1/fall-lawn-aeration-128x.jpg.sb-b065df0d-ATnKmK
/images/templates/categories/1/fall-lawn-aeration.jpg
/images/templates/categories/1/gutter-cleaning-128x.jpg
/images/templates/categories/1/gutter-cleaning.jpg
/images/templates/categories/1/lawn-mowing-128x.jpg
/images/templates/categories/1/lawn-mowing.jpg
/images/templates/categories/1/lawn-overseeding-128x.jpg
/images/templates/categories/1/lawn-overseeding.jpg
/images/templates/categories/1/leaf-removal-128x.jpg
/images/templates/categories/1/leaf-removal.jpg

Found on 2024-12-30 22:36

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da868b5295df0

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/schedule-g.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/categories/1/beautiful-evening-house-lawn-128x.jpg
/images/templates/categories/1/beautiful-evening-house-lawn.jpg
/images/templates/categories/1/default-image-128x.jpg
/images/templates/categories/1/default-image-128x.jpg.sb-b065df0d-q0JL9P
/images/templates/categories/1/default-image.jpg
/images/templates/categories/1/fall-lawn-aeration-128x.jpg
/images/templates/categories/1/fall-lawn-aeration-128x.jpg.sb-b065df0d-ATnKmK
/images/templates/categories/1/fall-lawn-aeration.jpg
/images/templates/categories/1/gutter-cleaning-128x.jpg
/images/templates/categories/1/gutter-cleaning.jpg
/images/templates/categories/1/lawn-mowing-128x.jpg
/images/templates/categories/1/lawn-mowing.jpg
/images/templates/categories/1/lawn-overseeding-128x.jpg
/images/templates/categories/1/lawn-overseeding.jpg
/images/templates/categories/1/leaf-removal-128x.jpg
/images/templates/categories/1/leaf-removal.jpg
/images/templates/categories/1/lush-green-lawn-128x.jpg
/images/templates/categories/1/lush-green-lawn.jpg
/images/templates/categories/1/snow-removal-orange-blower-128x.jpg
/images/templates/categories/1/snow-removal-orange-blower.jpg

Found on 2024-12-28 15:11

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da86807f4deb9

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-upsendly-login.jpg
/images/splash-upsendly-splash.jpg
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/categories/1/beautiful-evening-house-lawn-128x.jpg
/images/templates/categories/1/beautiful-evening-house-lawn.jpg
/images/templates/categories/1/default-image-128x.jpg
/images/templates/categories/1/default-image-128x.jpg.sb-b065df0d-q0JL9P
/images/templates/categories/1/default-image.jpg
/images/templates/categories/1/fall-lawn-aeration-128x.jpg
/images/templates/categories/1/fall-lawn-aeration-128x.jpg.sb-b065df0d-ATnKmK
/images/templates/categories/1/fall-lawn-aeration.jpg
/images/templates/categories/1/gutter-cleaning-128x.jpg
/images/templates/categories/1/gutter-cleaning.jpg
/images/templates/categories/1/lawn-mowing-128x.jpg
/images/templates/categories/1/lawn-mowing.jpg
/images/templates/categories/1/lawn-overseeding-128x.jpg
/images/templates/categories/1/lawn-overseeding.jpg
/images/templates/categories/1/leaf-removal-128x.jpg
/images/templates/categories/1/leaf-removal.jpg
/images/templates/categories/1/lush-green-lawn-128x.jpg
/images/templates/categories/1/lush-green-lawn.jpg
/images/templates/categories/1/snow-removal-orange-blower-128x.jpg
/images/templates/categories/1/snow-removal-orange-blower.jpg
/images/templates/categories/1/sod-installation-128x.jpg

Found on 2024-12-20 23:13

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da868697077f9

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change-w.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/preview-g.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search-w.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-upsendly-login.jpg
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/categories/1/beautiful-evening-house-lawn-128x.jpg
/images/templates/categories/1/beautiful-evening-house-lawn.jpg
/images/templates/categories/1/default-image-128x.jpg
/images/templates/categories/1/default-image-128x.jpg.sb-b065df0d-q0JL9P
/images/templates/categories/1/default-image.jpg
/images/templates/categories/1/fall-lawn-aeration-128x.jpg
/images/templates/categories/1/fall-lawn-aeration-128x.jpg.sb-b065df0d-ATnKmK
/images/templates/categories/1/fall-lawn-aeration.jpg
/images/templates/categories/1/gutter-cleaning-128x.jpg
/images/templates/categories/1/gutter-cleaning.jpg
/images/templates/categories/1/lawn-mowing-128x.jpg
/images/templates/categories/1/lawn-mowing.jpg
/images/templates/categories/1/lawn-overseeding-128x.jpg
/images/templates/categories/1/lawn-overseeding.jpg
/images/templates/categories/1/leaf-removal-128x.jpg
/images/templates/categories/1/leaf-removal.jpg
/images/templates/categories/1/lush-green-lawn-128x.jpg
/images/templates/categories/1/lush-green-lawn.jpg
/images/templates/categories/1/snow-removal-orange-blower-128x.jpg
/images/templates/categories/1/snow-removal-orange-blower.jpg
/images/templates/categories/1/sod-installation-128x.jpg
/images/templates/categories/1/sod-installation.jpg

Found on 2024-12-12 08:42

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7abf60e5353930a2f012da86826400889

Found 128 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/change-g.svg
/images/icons/change.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload-g.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-upsendly-login.jpg
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/categories/1/beautiful-evening-house-lawn-128x.jpg
/images/templates/categories/1/beautiful-evening-house-lawn.jpg
/images/templates/categories/1/default-image-128x.jpg
/images/templates/categories/1/default-image-128x.jpg.sb-b065df0d-q0JL9P
/images/templates/categories/1/default-image.jpg
/images/templates/categories/1/fall-lawn-aeration-128x.jpg
/images/templates/categories/1/fall-lawn-aeration-128x.jpg.sb-b065df0d-ATnKmK
/images/templates/categories/1/fall-lawn-aeration.jpg
/images/templates/categories/1/lawn-mowing-128x.jpg
/images/templates/categories/1/lawn-mowing.jpg
/images/templates/categories/1/lawn-overseeding-128x.jpg
/images/templates/categories/1/lawn-overseeding.jpg
/images/templates/categories/1/leaf-removal-128x.jpg
/images/templates/categories/1/leaf-removal.jpg
/images/templates/categories/1/lush-green-lawn-128x.jpg
/images/templates/categories/1/lush-green-lawn.jpg
/images/templates/categories/1/sod-installation-128x.jpg
/images/templates/categories/1/sod-installation.jpg
/images/templates/categories/1/weed-control-128x.jpg
/images/templates/categories/1/weed-control.jpg
/images/templates/categories/2
/images/templates/categories/2/default-image-128x.jpg
/images/templates/categories/2/default-image.jpg
/images/templates/default-128x.jpg
/images/templates/default.jpg

Found on 2024-12-06 07:05

Severity: medium
Fingerprint: 5f32cf5d6962f09c2d9d96002d9d96007680226a2194158cb5ae8d39e3d1e503

Found 109 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/back-w.svg
/images/icons/back.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/copy.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/down-chevron.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/images.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/up-chevron.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-upsendly-login.jpg
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/categories/1/default-image.jpg
/images/templates/categories/1/fall-lawn-aeration.jpg
/images/templates/categories/1/lawn-mowing.jpg
/images/templates/categories/2
/images/templates/default.jpg
/manifest.json
/offline.html
/robots.txt
/service-worker.js

Found on 2024-12-04 08:18

Severity: medium
Fingerprint: 5f32cf5d6962f09cac85b122ac85b1226d84eff04dc560c639cf895f99eeba99

Found 99 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-upsendly-login.jpg
/images/templates
/images/templates/categories
/images/templates/categories/1
/images/templates/default.jpg
/manifest.json
/offline.html
/robots.txt
/service-worker.js

Found on 2024-11-30 16:03

Severity: medium
Fingerprint: 5f32cf5d6962f09c62fb79d662fb79d6eb3d4c24e5ecf612d5469ae305b9ebfa

Found 95 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/clicked-g.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/code.svg
/images/icons/complete.svg
/images/icons/customers-g.svg
/images/icons/customers.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails-g.svg
/images/icons/emails.svg
/images/icons/external-g.svg
/images/icons/external-w.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/filter.svg
/images/icons/grid-w.svg
/images/icons/grid.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened-g.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/schedule-w.svg
/images/icons/schedule.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-upsendly-login.jpg
/manifest.json
/offline.html
/robots.txt
/service-worker.js

Found on 2024-11-28 18:30

Severity: medium
Fingerprint: 5f32cf5d6962f09ce95adb67e95adb6765f497636b977e1f70950c38b837a470

Found 83 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/complete.svg
/images/icons/customers.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/plus-w.svg
/images/icons/plus.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-upsendly-login.jpg
/manifest.json
/offline.html
/robots.txt
/service-worker.js

Found on 2024-11-24 22:41

Severity: medium
Fingerprint: 5f32cf5d6962f09c5a2cc21a5a2cc21aa2562ae829de5c5eeeb89397ef411140

Found 82 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/admin.svg
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/complete.svg
/images/icons/customers.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/plus-w.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-upsendly-login.jpg
/manifest.json
/offline.html
/robots.txt
/service-worker.js

Found on 2024-11-22 19:29

Severity: medium
Fingerprint: 5f32cf5d6962f09cdecb5675decb5675bb7acbfdccca899de3ade18ae4691fd3

Found 81 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/complete.svg
/images/icons/customers.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/insights.svg
/images/icons/lock.svg
/images/icons/logout.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/plus-w.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/search.svg
/images/icons/sent.svg
/images/icons/trash.svg
/images/icons/unsubscribe.svg
/images/icons/unverified.svg
/images/icons/verified-g.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-upsendly-login.jpg
/manifest.json
/offline.html
/robots.txt
/service-worker.js

Found on 2024-11-20 23:37

Severity: medium
Fingerprint: 5f32cf5d6962f09c3078a2ae3078a2ae8884f0bc5892028a87fdca3b7f9d073e

Found 73 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/icons
/images/icons/clicked.svg
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/customers.svg
/images/icons/download.svg
/images/icons/dropdown-w.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/insights.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/opened.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/plus-w.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/reload.svg
/images/icons/right-chevron.svg
/images/icons/sent.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-upsendly-login.jpg
/manifest.json
/offline.html
/robots.txt
/service-worker.js

Found on 2024-11-18 19:20

Severity: medium
Fingerprint: 5f32cf5d6962f09c6cdae1676cdae167ecfa4963eb7f741f02438e38667be779

Found 69 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/defaultcompany.png
/images/email-logo-min.png
/images/feature.jpeg
/images/feature.jpeg.sb-cd78268b-vr4QsQ
/images/icons
/images/icons/close-w.svg
/images/icons/close.svg
/images/icons/customers.svg
/images/icons/dropdown.svg
/images/icons/email.svg
/images/icons/emails.svg
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/image2vector (2).svg
/images/icons/insights.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/icons/plus-w.svg
/images/icons/profile-filled.svg
/images/icons/profile-outline.svg
/images/icons/right-chevron.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-upsendly-login.jpg
/manifest.json
/offline.html
/robots.txt
/service-worker.js

Found on 2024-11-16 18:41

Severity: medium
Fingerprint: 5f32cf5d6962f09c74247ea574247ea51b47974df947f80d4914d89a7bb3aa63

Found 56 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/images
/images/email-logo-min.png
/images/feature.jpeg
/images/feature.jpeg.sb-cd78268b-vr4QsQ
/images/icons
/images/icons/favicon-websafe.png
/images/icons/favicon-websafe.svg
/images/icons/menu-close.svg
/images/icons/menu.svg
/images/icons/pass-hidden.svg
/images/icons/pass-visible.svg
/images/navlogo.svg
/images/pwaicons
/images/pwaicons/icon-120x120.png
/images/pwaicons/icon-120x120.png.sb-cd78268b-8sitT4
/images/pwaicons/icon-128x128.png
/images/pwaicons/icon-144x144.png
/images/pwaicons/icon-152x152.png
/images/pwaicons/icon-180x180.png
/images/pwaicons/icon-180x180.png.sb-cd78268b-6ee5eI
/images/pwaicons/icon-192x192.png
/images/pwaicons/icon-384x384.png
/images/pwaicons/icon-48x48.png
/images/pwaicons/icon-512x512 copy.png.sb-cd78268b-GnUvKZ
/images/pwaicons/icon-512x512.png
/images/pwaicons/icon-72x72.png
/images/pwaicons/icon-96x96.png
/images/screenshots
/images/screenshots/screenshot1.jpeg
/images/screenshots/screenshot1.webp
/images/screenshots/screenshot2.jpeg
/images/screenshots/screenshot2.webp
/images/screenshots/screenshot3.jpeg
/images/screenshots/screenshot3.webp
/images/splash
/images/splash/1080x2340-min.png
/images/splash/1125x2436-min.png
/images/splash/1170x2532-min.png
/images/splash/1179x2556-min.png
/images/splash/1242x2208-min.png
/images/splash/1242x2688-min.png
/images/splash/1284x2778-min.png
/images/splash/1290x2796-min.png
/images/splash/750x1334-min.png
/images/splash/828x1792-min.png
/images/splash-upsendly-login.jpg
/manifest.json
/offline.html
/robots.txt
/service-worker.js

Found on 2024-11-14 00:13

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.yourdreamnumber.com
Port: 443
URL: https://www.yourdreamnumber.com

First seen 2025-07-05 15:05
Last seen 2025-08-12 22:51
Open for 38 days

Severity: low
Fingerprint: 5f32cf5d6962f09c0f8dcf020f8dcf02ae0625d00646fe264596b83f18bfdb77

Found 24 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/favicon.ico
/robots.txt
/uploads
/uploads/affiliate
/uploads/affiliate/image
/uploads/affiliate/image/1
/uploads/affiliate/image/1/GoDaddy.png
/uploads/affiliate/image/2
/uploads/affiliate/image/2/Legalzoom.png
/uploads/affiliate/image/3
/uploads/dream
/uploads/dream/image
/uploads/dream/image/36
/uploads/dream/image/36/Retirement-dude.png
/uploads/dream/image/63
/uploads/dream/image/63/orange_bugatti.jpg
/uploads/tmp
/uploads/user
/uploads/user/profile_picture
/uploads/user/profile_picture/16
/uploads/user/profile_picture/16/arcticmonkeys.jpeg

Found on 2025-08-12 22:51

Severity: low
Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea98b7246811e07f3d9ca24076e012de12b

Found 23 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/favicon.ico
/robots.txt
/uploads
/uploads/affiliate
/uploads/affiliate/image
/uploads/affiliate/image/1
/uploads/affiliate/image/1/GoDaddy.png
/uploads/affiliate/image/2
/uploads/affiliate/image/2/Legalzoom.png
/uploads/affiliate/image/3
/uploads/dream
/uploads/dream/image
/uploads/dream/image/36
/uploads/dream/image/36/Retirement-dude.png
/uploads/dream/image/63
/uploads/dream/image/63/orange_bugatti.jpg
/uploads/tmp
/uploads/user
/uploads/user/profile_picture
/uploads/user/profile_picture/16

Found on 2025-08-07 12:34

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: partners.kenekt.com.au
Port: 80
URL: http://partners.kenekt.com.au

First seen 2025-04-12 00:32
Last seen 2025-08-10 05:13
Open for 120 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-08-10 05:13
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.mydreamnumber.com
Port: 80
URL: http://www.mydreamnumber.com

First seen 2025-07-05 15:05
Last seen 2025-08-09 05:30
Open for 34 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0f8dcf020f8dcf02ae0625d00646fe264596b83f18bfdb77
```
Found 24 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/favicon.ico
/robots.txt
/uploads
/uploads/affiliate
/uploads/affiliate/image
/uploads/affiliate/image/1
/uploads/affiliate/image/1/GoDaddy.png
/uploads/affiliate/image/2
/uploads/affiliate/image/2/Legalzoom.png
/uploads/affiliate/image/3
/uploads/dream
/uploads/dream/image
/uploads/dream/image/36
/uploads/dream/image/36/Retirement-dude.png
/uploads/dream/image/63
/uploads/dream/image/63/orange_bugatti.jpg
/uploads/tmp
/uploads/user
/uploads/user/profile_picture
/uploads/user/profile_picture/16
/uploads/user/profile_picture/16/arcticmonkeys.jpeg
```
  Found on 2025-08-09 05:30
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: midorino-keijiban.com
Port: 443
URL: https://midorino-keijiban.com

First seen 2024-11-12 14:41
Last seen 2025-08-08 09:35
Open for 268 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fadeb22586612cddb1eaa29a61eaa29a6
```
Found 3 files trough .DS_Store spidering:

/uploads
/uploads/diary
/uploads/tmp
```
  Found on 2025-08-08 09:35
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: aeonrealty.kenekt.app
Port: 80
URL: http://aeonrealty.kenekt.app

First seen 2025-06-13 01:00
Last seen 2025-08-06 20:17
Open for 54 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-08-06 20:17
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: pembrook.kenekt.app
Port: 80
URL: http://pembrook.kenekt.app

First seen 2025-04-30 01:14
Last seen 2025-08-06 19:06
Open for 98 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-08-06 19:06
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: bramwell.kenekt.app
Port: 80
URL: http://bramwell.kenekt.app

First seen 2025-04-09 00:40
Last seen 2025-08-06 11:24
Open for 119 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-08-06 11:24
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: risingsunpa.kenekt.app
Port: 80
URL: http://risingsunpa.kenekt.app

First seen 2025-05-02 00:36
Last seen 2025-08-04 19:30
Open for 94 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-08-04 19:30
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: rajan.kenekt.app
Port: 80
URL: http://rajan.kenekt.app

First seen 2025-04-12 00:12
Last seen 2025-07-08 15:39
Open for 87 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-07-08 15:39
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: theurbanland.kenekt.app
Port: 80
URL: http://theurbanland.kenekt.app

First seen 2025-05-02 00:25
Last seen 2025-07-07 02:27
Open for 66 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-07-07 02:27
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: parklands.kenekt.app
Port: 80
URL: http://parklands.kenekt.app

First seen 2025-04-12 01:12
Last seen 2025-07-06 20:15
Open for 85 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-07-06 20:15
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.xn--ronnie-and-nia-2nb.xyz
Port: 443
URL: https://www.xn--ronnie-and-nia-2nb.xyz

First seen 2025-05-19 20:12
Last seen 2025-07-04 23:57
Open for 46 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3af247253af247250afce8cdeb84548d01c0a61a4c44b987
```
Found 9 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/favicon.png
/packs
/robots.txt
```
  Found on 2025-07-04 23:57
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: aussieproperty.kenekt.app
Port: 80
URL: http://aussieproperty.kenekt.app

First seen 2025-04-12 00:12
Last seen 2025-06-24 17:14
Open for 73 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-06-24 17:14
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: virtuoushomes.kenekt.app
Port: 80
URL: http://virtuoushomes.kenekt.app

First seen 2025-04-12 00:02
Last seen 2025-05-22 12:03
Open for 40 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-05-22 12:03
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: nirmaanhomes.kenekt.app
Port: 80
URL: http://nirmaanhomes.kenekt.app

First seen 2025-04-12 00:43
Last seen 2025-05-22 10:29
Open for 40 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-05-22 10:29
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: urbanedge.kenekt.app
Port: 80
URL: http://urbanedge.kenekt.app

First seen 2025-05-06 00:11
Last seen 2025-05-21 01:19
Open for 15 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-05-21 01:19
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: brolen.kenekt.app
Port: 80
URL: http://brolen.kenekt.app

First seen 2025-04-12 00:12
Last seen 2025-05-20 22:39
Open for 38 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-05-20 22:39
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: bassoondevelopment.kenekt.app
Port: 80
URL: http://bassoondevelopment.kenekt.app

First seen 2025-05-01 00:51
Last seen 2025-05-20 21:01
Open for 19 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-05-20 21:01
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: hotpropertygroup.kenekt.app
Port: 80
URL: http://hotpropertygroup.kenekt.app

First seen 2025-03-20 01:40
Last seen 2025-05-20 20:37
Open for 61 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-05-20 20:37
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: builder4.kenekt.app
Port: 80
URL: http://builder4.kenekt.app

First seen 2025-04-29 00:14
Last seen 2025-05-20 16:36
Open for 21 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-05-20 16:36
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: b1.kenekt.app
Port: 80
URL: http://b1.kenekt.app

First seen 2025-04-12 00:13
Last seen 2025-05-20 08:12
Open for 38 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-05-20 08:12
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: kuber.kenekt.app
Port: 80
URL: http://kuber.kenekt.app

First seen 2025-05-08 23:50
Last seen 2025-05-19 00:43
Open for 10 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-05-19 00:43
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: dcl.kenekt.app
Port: 80
URL: http://dcl.kenekt.app

First seen 2025-04-12 00:12
Last seen 2025-05-18 12:11
Open for 36 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-05-18 12:11
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: test.skillmore.com
Port: 80
URL: http://test.skillmore.com

First seen 2025-02-10 23:10
Last seen 2025-05-06 09:03
Open for 84 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f07caaca34a3126f490704e4a90704e4a
```
Found 3 files trough .DS_Store spidering:

/home
/images
/platform
```
  Found on 2025-05-06 09:03
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: koalainvest.kenekt.app
Port: 443
URL: https://koalainvest.kenekt.app

First seen 2025-03-10 04:53
Last seen 2025-03-22 21:39
Open for 12 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-03-22 21:39
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-14 12:42
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: integrations.herokudemos.com
Port: 80
URL: http://integrations.herokudemos.com

First seen 2024-11-14 01:50
Last seen 2025-01-14 00:56
Open for 60 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176423f3e94de685027a0685027a0685027a0
```
Found 2 files trough .DS_Store spidering:

/assets
/assets/htmlimages
```
  Found on 2025-01-14 00:56
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.insurancescout.io
Port: 443
URL: https://www.insurancescout.io

First seen 2023-09-03 00:16
Last seen 2025-01-02 19:52
Open for 487 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbecc9a916cd8c9f71a4dbed4ab8594cb6a
```
Found 15 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/bootstrap-docs.png
/bootstrap-logo.svg
/dashboard.png
/ensurco.png
/family.jpeg
/favicon.ico
/intact.png
/robots.txt
/travelers.jpeg
/wawanesa.gif
```
  Found on 2025-01-02 19:52
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0734de28a29e105ac27d515d9ab0ac70f
```
Found 13 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/bootstrap-docs.png
/bootstrap-logo.svg
/family.jpeg
/favicon.ico
/intact.png
/robots.txt
/travelers.jpeg
/wawanesa.gif
```
  Found on 2024-10-27 18:54
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.insurancescout.io
Port: 80
URL: http://www.insurancescout.io

First seen 2023-09-03 00:16
Last seen 2025-01-02 06:57
Open for 487 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbecc9a916cd8c9f71a4dbed4ab8594cb6a
```
Found 15 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/bootstrap-docs.png
/bootstrap-logo.svg
/dashboard.png
/ensurco.png
/family.jpeg
/favicon.ico
/intact.png
/robots.txt
/travelers.jpeg
/wawanesa.gif
```
  Found on 2025-01-02 06:57
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0734de28a29e105ac27d515d9ab0ac70f
```
Found 13 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/bootstrap-docs.png
/bootstrap-logo.svg
/family.jpeg
/favicon.ico
/intact.png
/robots.txt
/travelers.jpeg
/wawanesa.gif
```
  Found on 2024-10-27 18:54
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: testerp.happyplaygrounds.com
Port: 443
URL: https://testerp.happyplaygrounds.com

First seen 2024-12-16 23:09
Last seen 2024-12-21 00:59
Open for 4 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d325beceb325beceb325beceb325beceb
```
Found 1 files trough .DS_Store spidering:

/assets
```
  Found on 2024-12-21 00:59
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: www.westwardcharm.com
Port: 443
URL: https://www.westwardcharm.com

First seen 2024-11-30 02:42
Last seen 2024-12-02 20:51
Open for 2 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0f8dcf020f8dcf02a7ea88e318d38aaf6b905bf36cfc8087
```
Found 24 files trough .DS_Store spidering:

/images
/images/1.JPG
/images/10.JPG
/images/11.JPG
/images/12.JPG
/images/13.JPG
/images/14.JPG
/images/15.JPG
/images/16.JPG
/images/17.JPG
/images/18.JPG
/images/19.JPG
/images/2.JPG
/images/20.JPG
/images/21.JPG
/images/3.JPG
/images/4.JPG
/images/5.JPG
/images/6.JPG
/images/7.JPG
/images/8.JPG
/images/9.JPG
/images/header.JPG
/images/logo.JPG
```
  Found on 2024-12-02 20:51
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: frdh.kenekt.app
Port: 443
URL: https://frdh.kenekt.app

First seen 2024-11-14 02:14
Last seen 2024-11-16 18:32
Open for 2 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2024-11-16 18:32
Create report

Open service 13.248.132.87:80 · direwolf-00effe5995.herokusnitest.com

2026-01-12 10:44

HTTP/1.1 404 Not Found
Content-Length: 548
Cache-Control: no-cache, no-store
Content-Type: text/html; charset=utf-8
Date: 2026-01-12 10:45:03.671368005 +0000 UTC
Server: heroku-router

Page title: No such app

<!DOCTYPE html>
<html>
  <head>
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta charset="utf-8">
    <title>No such app</title>
    <style media="screen">
      html,body,iframe {
        margin: 0;
        padding: 0;
      }
      html,body {
        height: 100%;
        overflow: hidden;
      }
      iframe {
        width: 100%;
        height: 100%;
        border: 0;
      }
    </style>
  </head>
  <body>
    <iframe src="//www.herokucdn.com/error-pages/no-such-app.html"></iframe>
  </body>
</html>

Found 13 minutes ago by HttpPlugin