LeakIX - Host 172.67.70.76

Host 172.67.70.76

United States

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 172.67.70.76
Domain: bodymod.ro
Port: 443
URL: https://bodymod.ro

First seen 2025-10-22 15:26
Last seen 2026-02-11 01:05
Open for 111 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2026-02-11 01:05
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa374c2942e74c2942e74c2942e74c2942e74c2942e
```
GraphQL introspection enabled at /graphql
Detected: Magento
```
Found on 2026-01-23 09:56
Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2df9b2641df9b2641df9b2641df9b2641df9b2641
```
GraphQL introspection enabled at /graphql/api
Detected: Magento
```
Found on 2025-12-13 03:01

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa32961b6c5b571250733aeffdda906e244ba60f8e6

GraphQL introspection enabled at /graphql
Types: 767 (by kind: ENUM: 53, INPUT_OBJECT: 160, INTERFACE: 34, OBJECT: 515, SCALAR: 5)
Operations:
- Query: Query | fields: adyenPaymentDetails, adyenPaymentMethods, adyenPaymentStatus, amBlogAllTags, amBlogAuthor
- Mutation: Mutation | fields: AmBlogLeaveComment, AmBlogLeaveVote, acceptAmGdprPolicy, addAmRmaTrackingNumber, addBundleProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-12-01 14:47

1.4 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa366c13dcd70b1b76fffab01c51a65a3ec42fa5aee

GraphQL introspection enabled at /graphql
Types: 766 (by kind: ENUM: 53, INPUT_OBJECT: 160, INTERFACE: 34, OBJECT: 514, SCALAR: 5)
Operations:
- Query: Query | fields: adyenPaymentDetails, adyenPaymentMethods, adyenPaymentStatus, amBlogAllTags, amBlogAuthor
- Mutation: Mutation | fields: AmBlogLeaveComment, AmBlogLeaveVote, acceptAmGdprPolicy, addAmRmaTrackingNumber, addBundleProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-11-12 17:53

1.4 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ca3014fe97df602e2d195db418bb237b20ac4fe3

GraphQL introspection enabled at /graphql
Types: 756 (by kind: ENUM: 52, INPUT_OBJECT: 158, INTERFACE: 34, OBJECT: 507, SCALAR: 5)
Operations:
- Query: Query | fields: adyenPaymentDetails, adyenPaymentMethods, adyenPaymentStatus, amBlogAllTags, amBlogAuthor
- Mutation: Mutation | fields: AmBlogLeaveComment, AmBlogLeaveVote, acceptAmGdprPolicy, addAmRmaTrackingNumber, addBundleProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-10-28 19:38

1.3 MBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 172.67.70.76
Domain: api.fantasy-acc.betr.app
Port: 443
URL: https://api.fantasy-acc.betr.app

First seen 2025-12-04 16:06
Last seen 2026-02-09 15:20
Open for 66 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e639249521892ad75c6d812ff0e38d45513585f9

GraphQL introspection enabled at /graphql
Types: 92 (by kind: ENUM: 28, INPUT_OBJECT: 8, INTERFACE: 1, OBJECT: 51, SCALAR: 4)
Operations:
- Query: Query | fields: getAllEntryTradingLimits, getEntryTradingLimit, validateEntries, validateEntry, validateEntryOnEntryRules
- Mutation: Mutation | fields: addFavoritePlayerForUser, cancelEntry, createEntry, createSharedEntry, removeFavoritePlayerForUser
- Subscription: Subscription | fields: notifyOnMarketForEvent, notifyOnMarketForEvents, notifyOnSettledEntryOrPick, notifyOnUpdatedPoolEntry
Directives: defer, deprecated, experimental_disableErrorPropagation, include, oneOf, skip, specifiedBy (total: 7)

Found on 2026-02-09 15:20

125.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3cf617d437acc7cc1a9caf8551213c377aea3ad27

GraphQL introspection enabled at /graphql
Types: 91 (by kind: ENUM: 28, INPUT_OBJECT: 8, INTERFACE: 1, OBJECT: 50, SCALAR: 4)
Operations:
- Query: Query | fields: getAllEntryTradingLimits, getEntryTradingLimit, validateEntries, validateEntry, validateEntryOnEntryRules
- Mutation: Mutation | fields: addFavoritePlayerForUser, cancelEntry, createEntry, createSharedEntry, removeFavoritePlayerForUser
- Subscription: Subscription | fields: notifyOnMarketForEvent, notifyOnMarketForEvents, notifyOnSettledEntryOrPick, notifyOnUpdatedPoolEntry
Directives: defer, deprecated, experimental_disableErrorPropagation, include, oneOf, skip, specifiedBy (total: 7)

Found on 2026-02-02 05:57

124.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35711fd1f0b0d3cadfa02d1d928572d5b45e47053

GraphQL introspection enabled at /graphql
Types: 93 (by kind: ENUM: 28, INPUT_OBJECT: 8, INTERFACE: 1, OBJECT: 52, SCALAR: 4)
Operations:
- Query: Query | fields: getAllEntryTradingLimits, getEntryTradingLimit, validateEntries, validateEntry, validateEntryOnEntryRules
- Mutation: Mutation | fields: addFavoritePlayerForUser, cancelEntry, createEntry, createSharedEntry, removeFavoritePlayerForUser
- Subscription: Subscription | fields: notifyOnMarketForEvent, notifyOnMarketForEvents, notifyOnSettledEntryOrPick, notifyOnUpdatedPoolEntry
Directives: defer, deprecated, experimental_disableErrorPropagation, include, oneOf, skip, specifiedBy (total: 7)

Found on 2025-12-18 14:01

132.1 kBytes

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.70.76
Domain: api.er-vanguard.co.za
Port: 443
URL: https://api.er-vanguard.co.za

First seen 2025-10-13 22:29
Last seen 2026-02-02 06:56
Open for 111 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354942ed1d87acaff837985163cdd6212e43b7a35cdc

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/app/case
GET /api/app/case-status-history
GET /api/app/case/dashboard-data
GET /api/app/case/{id}
GET /api/app/document
GET /api/app/document-link
GET /api/app/document-link/{id}
GET /api/app/document/{id}
GET /api/app/executor
GET /api/app/executor-link
GET /api/app/executor-link/{id}
GET /api/app/executor/{id}
GET /api/app/import-record
GET /api/app/import-record/{id}
GET /api/app/note
GET /api/app/note/{id}
GET /api/app/payment
GET /api/app/payment/{id}
GET /api/external-request/api-management
GET /api/external-request/dashboard
GET /api/external-request/get-all-paged
GET /api/external-request/get/{id}
GET /api/external-request/internal/deceased-lookup/{key}
GET /api/files/download/{id}
POST /api/app/case/export-case-records
POST /api/app/case/manually-create-case
POST /api/app/case/or-edit
POST /api/app/case/{id}/generate-from-file
POST /api/app/case/{id}/generate-letter/{executorId}
POST /api/app/document-link/or-edit
POST /api/app/document/or-edit
POST /api/app/document/upload/{linkedId}
POST /api/app/document/{id}/download-file
POST /api/app/document/{id}/import
POST /api/app/executor-link/or-edit
POST /api/app/executor/export-executors
POST /api/app/executor/or-edit
POST /api/app/import-record/export-import-records
POST /api/app/import-record/or-edit
POST /api/app/note/or-edit
POST /api/app/payment/export-payments
POST /api/app/payment/or-edit
POST /api/external-request/deceased-lookup
POST /api/external-request/export
POST /api/files/upload/{documentType}
POST /api/files/uploadlinked/{linkedId}/{documentType}

Found on 2026-02-02 06:56

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.70.76
Domain: stage-uuidv3.betr.app
Port: 443
URL: https://stage-uuidv3.betr.app

First seen 2025-11-07 12:27
Last seen 2026-02-02 01:41
Open for 86 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-02 01:41
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 104.26.15.186
Domain: flamingriverheavyduty.com
Port: 443
URL: https://flamingriverheavyduty.com

First seen 2025-10-20 16:17
Last seen 2026-02-01 20:06
Open for 104 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa373c4103c6bc53b00dc6a01625b90afa85d05bf1a

GraphQL introspection enabled at /graphql
Types: 509 (by kind: ENUM: 44, INPUT_OBJECT: 117, INTERFACE: 25, OBJECT: 318, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, blogAuthor, blogCategories
- Mutation: Mutation | fields: addBundleProductsToCart, addCommentToPost, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2026-02-01 20:06

968.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa373c4103c6bc53b00dc6a01625b90afa8ec878049

GraphQL introspection enabled at /graphql
Types: 509 (by kind: ENUM: 44, INPUT_OBJECT: 117, INTERFACE: 25, OBJECT: 318, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, blogAuthor, blogCategories
- Mutation: Mutation | fields: addBundleProductsToCart, addCommentToPost, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Detected: Magento

Found on 2026-01-26 20:18

968.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e24730b179a5f17a1bd04bbf81d3a96475b7030770

GraphQL introspection enabled at /graphql/api
Types: 509 (by kind: ENUM: 44, INPUT_OBJECT: 117, INTERFACE: 25, OBJECT: 318, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, blogAuthor, blogCategories
- Mutation: Mutation | fields: addBundleProductsToCart, addCommentToPost, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Detected: Magento

Found on 2025-12-21 01:59

968.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e24730b179a5f17a1bd04bbf81d3a96475c9ff86ad

GraphQL introspection enabled at /graphql/api
Types: 509 (by kind: ENUM: 44, INPUT_OBJECT: 117, INTERFACE: 25, OBJECT: 318, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, blogAuthor, blogCategories
- Mutation: Mutation | fields: addBundleProductsToCart, addCommentToPost, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-12-10 22:58

968.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-10-22 08:59

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa365be29aabc894a9a4f7b5ff037af9c0245bb10ec

GraphQL introspection enabled at /graphql
Types: 504 (by kind: ENUM: 44, INPUT_OBJECT: 115, INTERFACE: 25, OBJECT: 315, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, blogAuthor, blogCategories
- Mutation: Mutation | fields: addBundleProductsToCart, addCommentToPost, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-10-20 16:17

962.9 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.67.70.76
Domain: 35lordfilm.online
Port: 443
URL: https://35lordfilm.online

First seen 2025-01-06 12:37
Last seen 2025-04-04 03:36
Open for 87 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642748cf957e51411d3e51411d3e51411d3
```
Found 2 files trough .DS_Store spidering:

/engine
/engine/data
```
  Found on 2025-04-04 03:36
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.67.70.76
Domain: tv.35lordfilm.online
Port: 443
URL: https://tv.35lordfilm.online

First seen 2025-02-02 22:25
Last seen 2025-02-02 22:25
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642748cf957e51411d3e51411d3e51411d3
```
Found 2 files trough .DS_Store spidering:

/engine
/engine/data
```
  Found on 2025-02-02 22:25
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.67.70.76
Domain: hd.35lordfilm.online
Port: 443
URL: https://hd.35lordfilm.online

First seen 2025-02-02 22:25
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642748cf957e51411d3e51411d3e51411d3
```
Found 2 files trough .DS_Store spidering:

/engine
/engine/data
```
  Found on 2025-02-02 22:25
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.67.70.76
Domain: wink.35lordfilm.online
Port: 443
URL: https://wink.35lordfilm.online

First seen 2025-02-02 22:25
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642748cf957e51411d3e51411d3e51411d3
```
Found 2 files trough .DS_Store spidering:

/engine
/engine/data
```
  Found on 2025-02-02 22:25
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.67.70.76
Domain: mobile.35lordfilm.online
Port: 443
URL: https://mobile.35lordfilm.online

First seen 2025-02-02 22:25
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642748cf957e51411d3e51411d3e51411d3
```
Found 2 files trough .DS_Store spidering:

/engine
/engine/data
```
  Found on 2025-02-02 22:25
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.26.14.186
Domain: www.acegikm.com
Port: 443
URL: https://www.acegikm.com

First seen 2023-12-14 16:32
Last seen 2023-12-20 12:14
Open for 5 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45c43e06b00cd6f9fff48c6b7d9681fea8
```
Found 30 files trough .DS_Store spidering:

/.well-known
/403.html
/9026.wav
/admin
/agents
/css
/download
/download/img
/env.json
/favicon.ico
/font-test.ttf
/images
/index.html
/index.php
/js
/json
/layui
/layuiadmin
/phpinfo.php
/robots.txt
/ueditor
/upload
/upload/ueditor
/upload/ueditor/20211020
/upload/ueditor/20211024
/upload/ueditor/20211026
/upload/ueditor/20211028
/vendor
/web.config
/winadmin
```
  Found on 2023-12-20 12:14
- Severity: low
  Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcfb02efa9226c403b9d547fa4b46166dc7
```
Found 25 files trough .DS_Store spidering:

/.well-known
/403.html
/9026.wav
/admin
/agents
/css
/download
/download/img
/env.json
/favicon.ico
/font-test.ttf
/images
/index.html
/index.php
/js
/json
/layui
/layuiadmin
/phpinfo.php
/robots.txt
/ueditor
/upload
/vendor
/web.config
/winadmin
```
  Found on 2023-12-14 16:32
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.67.70.76
Domain: regs.element1hq.com
Port: 443
URL: https://regs.element1hq.com

First seen 2023-04-10 10:28
Last seen 2023-04-19 14:04
Open for 9 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176420e9325196ca7c27b6ca7c27b6ca7c27b
```
Found 2 files trough .DS_Store spidering:

/pdf
/pdfjs
```
  Found on 2023-04-10 10:28
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.67.70.76
Domain: svt.element1hq.com
Port: 443
URL: https://svt.element1hq.com

First seen 2023-04-19 14:04
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176420e9325196ca7c27b6ca7c27b6ca7c27b
```
Found 2 files trough .DS_Store spidering:

/pdf
/pdfjs
```
  Found on 2023-04-19 14:04
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.67.70.76
Domain: msd-stg.element1hq.com
Port: 443
URL: https://msd-stg.element1hq.com

First seen 2023-04-06 18:42
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176420e9325196ca7c27b6ca7c27b6ca7c27b
```
Found 2 files trough .DS_Store spidering:

/pdf
/pdfjs
```
  Found on 2023-04-06 18:42
Create report

Open service 172.67.70.76:80 · batterycharger.lutech.vn

2026-01-26 15:43

HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Jan 2026 15:43:52 GMT
Content-Type: text/html
Content-Length: 178
Connection: close
Server: cloudflare
Location: https://batterycharger.lutech.vn/
cf-cache-status: DYNAMIC
CF-RAY: 9c4120dd88ceb97e-AMS

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.18.0 (Ubuntu)</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Host 172.67.70.76

United States

Software information

GraphQL introspection is enabled.

GraphQL introspection is enabled.

Swagger API description is publicly available

Swagger API description is publicly available

GraphQL introspection is enabled.

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file