LeakIX - Host 172.67.71.53

Host 172.67.71.53

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: boservice.hu7.playdg988.net
Port: 443
URL: https://boservice.hu7.playdg988.net

First seen 2025-10-16 21:37
Last seen 2026-01-10 01:45
Open for 85 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-10 01:45
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: lobbys.awc7.playdg988.net
Port: 443
URL: https://lobbys.awc7.playdg988.net

First seen 2025-11-20 11:00
Last seen 2026-01-10 01:19
Open for 50 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-10 01:19
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: lobby.ig7.playdg988.net
Port: 443
URL: https://lobby.ig7.playdg988.net

First seen 2025-10-13 21:32
Last seen 2026-01-10 00:53
Open for 88 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-10 00:53
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: auth.hu7.playdg988.net
Port: 443
URL: https://auth.hu7.playdg988.net

First seen 2025-11-20 11:29
Last seen 2026-01-09 23:07
Open for 50 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 23:07
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: operator.qm9.playdg988.net
Port: 443
URL: https://operator.qm9.playdg988.net

First seen 2025-11-28 10:04
Last seen 2026-01-09 21:49
Open for 42 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 21:49
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: lobbys.qm9.playdg988.net
Port: 443
URL: https://lobbys.qm9.playdg988.net

First seen 2025-11-28 10:01
Last seen 2026-01-09 21:48
Open for 42 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 21:48
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: auth.nx9.playdg988.net
Port: 443
URL: https://auth.nx9.playdg988.net

First seen 2025-10-29 17:11
Last seen 2026-01-09 18:15
Open for 72 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 18:15
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: auth.ig7.playdg988.net
Port: 443
URL: https://auth.ig7.playdg988.net

First seen 2025-10-20 03:38
Last seen 2026-01-09 16:17
Open for 81 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 16:17
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: lobby.qm9.playdg988.net
Port: 443
URL: https://lobby.qm9.playdg988.net

First seen 2025-11-28 10:42
Last seen 2026-01-09 15:26
Open for 42 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 15:26
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: operator.ig7.playdg988.net
Port: 443
URL: https://operator.ig7.playdg988.net

First seen 2025-10-13 21:31
Last seen 2026-01-09 15:14
Open for 87 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 15:14
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: auth.awc7.playdg988.net
Port: 443
URL: https://auth.awc7.playdg988.net

First seen 2025-11-20 14:19
Last seen 2026-01-09 12:45
Open for 49 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 12:45
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: boservice.qm9.playdg988.net
Port: 443
URL: https://boservice.qm9.playdg988.net

First seen 2025-11-28 09:59
Last seen 2026-01-09 12:04
Open for 42 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 12:04
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: lobbys.ig7.playdg988.net
Port: 443
URL: https://lobbys.ig7.playdg988.net

First seen 2025-11-22 06:21
Last seen 2026-01-09 11:35
Open for 48 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 11:35
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: auth.hu8.playdg988.net
Port: 443
URL: https://auth.hu8.playdg988.net

First seen 2025-11-20 11:04
Last seen 2026-01-09 08:47
Open for 49 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 08:47
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: boservice.awc7.playdg988.net
Port: 443
URL: https://boservice.awc7.playdg988.net

First seen 2025-10-16 19:26
Last seen 2026-01-09 05:25
Open for 84 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 05:25
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: api.basemint.fun
Port: 8443
URL: https://api.basemint.fun:8443

First seen 2025-10-22 01:09
Last seen 2026-01-09 05:05
Open for 79 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43ca3b7a33381cf5999099bf878c704528bd8f77e3
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /collections/bulk
GET /collections
GET /collections/count
GET /collections/{predictedAddress}
POST /referrers
```
  Found on 2026-01-09 05:05
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.71.53
Domain: boservice.hu8.playdg988.net
Port: 443
URL: https://boservice.hu8.playdg988.net

First seen 2025-11-20 14:43
Last seen 2026-01-09 04:20
Open for 49 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 04:20
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 172.67.71.53
Domain: www.cloving.co.uk
Port: 443
URL: https://www.cloving.co.uk

First seen 2025-12-04 20:51
Last seen 2026-01-02 22:11
Open for 29 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa353aac6c35df215413d1cc12cb2fb693292c00f01

GraphQL introspection enabled at /graphql
Types: 489 (by kind: ENUM: 45, INPUT_OBJECT: 121, INTERFACE: 25, OBJECT: 293, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Detected: Magento

Found on 2026-01-02 22:11

829.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e230bc13828fcc0c121413da830fa5f0f36f6439a3

GraphQL introspection enabled at /graphql/api
Types: 489 (by kind: ENUM: 45, INPUT_OBJECT: 121, INTERFACE: 25, OBJECT: 293, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-11 10:23

829.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa353aac6c35df215413d1cc12cb2fb6932d0d2e4a2

GraphQL introspection enabled at /graphql
Types: 489 (by kind: ENUM: 45, INPUT_OBJECT: 121, INTERFACE: 25, OBJECT: 293, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-04 20:51

829.6 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 172.67.71.53
Domain: heitmann-hygiene-care.de
Port: 443
URL: https://heitmann-hygiene-care.de

First seen 2025-10-18 22:49
Last seen 2026-01-02 18:57
Open for 75 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa389867cd6a590eb06a92ac9593bf967f1b06962f4

GraphQL introspection enabled at /graphql
Types: 396 (by kind: ENUM: 26, INPUT_OBJECT: 83, INTERFACE: 24, OBJECT: 258, SCALAR: 5)
Operations:
- Query: Query | fields: availableStores, cart, categories, category, categoryList
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Detected: Magento

Found on 2026-01-02 18:57

773.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa389867cd6a590eb06a92ac9593bf967f197d84811

GraphQL introspection enabled at /graphql
Types: 396 (by kind: ENUM: 26, INPUT_OBJECT: 83, INTERFACE: 24, OBJECT: 258, SCALAR: 5)
Operations:
- Query: Query | fields: availableStores, cart, categories, category, categoryList
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-12 12:38

773.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-10-21 04:50

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2456a14416100a7432bb7326ccac99a72524ae2e2

GraphQL introspection enabled at /graphql/api
Types: 396 (by kind: ENUM: 26, INPUT_OBJECT: 83, INTERFACE: 24, OBJECT: 258, SCALAR: 5)
Operations:
- Query: Query | fields: availableStores, cart, categories, category, categoryList
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Found on 2025-10-18 22:49

773.0 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 104.26.14.18
Domain: www.heitmann-hygiene-care.de
Port: 80
URL: http://www.heitmann-hygiene-care.de

First seen 2025-10-18 22:49
Last seen 2026-01-02 15:04
Open for 75 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa389867cd6a590eb06a92ac9593bf967f1b06962f4

GraphQL introspection enabled at /graphql
Types: 396 (by kind: ENUM: 26, INPUT_OBJECT: 83, INTERFACE: 24, OBJECT: 258, SCALAR: 5)
Operations:
- Query: Query | fields: availableStores, cart, categories, category, categoryList
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Detected: Magento

Found on 2026-01-02 15:04

773.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa374c2942e74c2942e74c2942e74c2942e74c2942e
```
GraphQL introspection enabled at /graphql
Detected: Magento
```
Found on 2025-12-13 16:56

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa389867cd6a590eb06a92ac9593bf967f197d84811

GraphQL introspection enabled at /graphql
Types: 396 (by kind: ENUM: 26, INPUT_OBJECT: 83, INTERFACE: 24, OBJECT: 258, SCALAR: 5)
Operations:
- Query: Query | fields: availableStores, cart, categories, category, categoryList
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-10 10:45

773.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2456a14416100a7432bb7326ccac99a72524ae2e2

GraphQL introspection enabled at /graphql/api
Types: 396 (by kind: ENUM: 26, INPUT_OBJECT: 83, INTERFACE: 24, OBJECT: 258, SCALAR: 5)
Operations:
- Query: Query | fields: availableStores, cart, categories, category, categoryList
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Found on 2025-10-18 22:49

773.0 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 172.67.71.53
Domain: api-preprod.gr.app
Port: 443
URL: https://api-preprod.gr.app

First seen 2025-10-25 14:26
Last seen 2026-01-02 09:02
Open for 68 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3eb804dadb633a90f819d92780e210614215b3af4

GraphQL introspection enabled at /graphql
Types: 319 (by kind: ENUM: 30, INPUT_OBJECT: 122, INTERFACE: 9, OBJECT: 151, SCALAR: 7)
Operations:
- Query: Query | fields: assertGroupByCode, canRemoveMemberOfGroup, cartMeta, cartsMeta, checkCatalogCatchmentArea
- Mutation: Mutation | fields: acceptInvitation, activateFutureSales, activateProducts, addFavoriteCatalog, addGroupAddress
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 09:02

464.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3eb804dadb633a90f3a0b5640c7ebe41cd81ce36c

GraphQL introspection enabled at /graphql
Types: 319 (by kind: ENUM: 30, INPUT_OBJECT: 122, INTERFACE: 9, OBJECT: 151, SCALAR: 7)
Operations:
- Query: Query | fields: assertGroupByCode, cartMeta, cartsMeta, checkCatalogCatchmentArea, checkEmail
- Mutation: Mutation | fields: acceptInvitation, activateFutureSales, activateProducts, addFavoriteCatalog, addGroupAddress
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-19 01:47

463.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa39f48870a11625cba67c1543d3d958f77ee630fcf

GraphQL introspection enabled at /graphql
Types: 310 (by kind: ENUM: 30, INPUT_OBJECT: 120, INTERFACE: 9, OBJECT: 144, SCALAR: 7)
Operations:
- Query: Query | fields: assertGroupByCode, cartMeta, cartsMeta, checkCatalogCatchmentArea, checkEmail
- Mutation: Mutation | fields: activateFutureSales, activateProducts, addFavoriteCatalog, addGroupAddress, addMemberToGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-16 23:28

437.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-12-06 17:53

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3614601224f75be72fd091aa549a0aabfb348c067

GraphQL introspection enabled at /graphql
Types: 312 (by kind: ENUM: 30, INPUT_OBJECT: 120, INTERFACE: 9, OBJECT: 146, SCALAR: 7)
Operations:
- Query: Query | fields: assertGroupByCode, cartMeta, cartsMeta, checkCatalogCatchmentArea, checkEmail
- Mutation: Mutation | fields: activateFutureSales, activateProducts, addFavoriteCatalog, addGroupAddress, addMemberToGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-30 14:17

438.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa36fed4af9f06d829b80df1bdfa4d25411248da62d

GraphQL introspection enabled at /graphql
Types: 313 (by kind: ENUM: 37, INPUT_OBJECT: 116, INTERFACE: 9, OBJECT: 144, SCALAR: 7)
Operations:
- Query: Query | fields: cartMeta, cartsMeta, checkCatalogCatchmentArea, checkEmail, deleteCartComponent
- Mutation: Mutation | fields: activateFutureSales, activateProducts, addFavoriteCatalog, addGroupAddress, addMemberToGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-27 06:00

435.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33fecb65f08618f6df511c715c55ae3d80add73f8

GraphQL introspection enabled at /graphql
Types: 310 (by kind: ENUM: 36, INPUT_OBJECT: 115, INTERFACE: 9, OBJECT: 143, SCALAR: 7)
Operations:
- Query: Query | fields: cartMeta, cartsMeta, checkCatalogCatchmentArea, checkEmail, deleteCartComponent
- Mutation: Mutation | fields: activateProducts, addFavoriteCatalog, addGroupAddress, addMemberToGroup, anonymizeAccount
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-12 15:50

432.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa367df46ff3fe5afcdc04c0759ea2b6514dcd389f4

GraphQL introspection enabled at /graphql
Types: 264 (by kind: ENUM: 36, INPUT_OBJECT: 100, INTERFACE: 9, OBJECT: 112, SCALAR: 7)
Operations:
- Query: Query | fields: checkCatalogCatchmentArea, checkEmail, deleteCartComponent, findCarts, findCatalogs
- Mutation: Mutation | fields: activateProducts, addFavoriteCatalog, addGroupAddress, addMemberToGroup, anonymizeAccount
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-10-28 07:31

363.0 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 104.26.14.18
Domain: www.heitmann-hygiene-care.de
Port: 443
URL: https://www.heitmann-hygiene-care.de

First seen 2025-10-18 22:49
Last seen 2026-01-02 06:02
Open for 75 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa389867cd6a590eb06a92ac9593bf967f1b06962f4

GraphQL introspection enabled at /graphql
Types: 396 (by kind: ENUM: 26, INPUT_OBJECT: 83, INTERFACE: 24, OBJECT: 258, SCALAR: 5)
Operations:
- Query: Query | fields: availableStores, cart, categories, category, categoryList
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Detected: Magento

Found on 2026-01-02 06:02

773.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa389867cd6a590eb06a92ac9593bf967f197d84811

GraphQL introspection enabled at /graphql
Types: 396 (by kind: ENUM: 26, INPUT_OBJECT: 83, INTERFACE: 24, OBJECT: 258, SCALAR: 5)
Operations:
- Query: Query | fields: availableStores, cart, categories, category, categoryList
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-10 07:13

773.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2456a14416100a7432bb7326ccac99a72524ae2e2

GraphQL introspection enabled at /graphql/api
Types: 396 (by kind: ENUM: 26, INPUT_OBJECT: 83, INTERFACE: 24, OBJECT: 258, SCALAR: 5)
Operations:
- Query: Query | fields: availableStores, cart, categories, category, categoryList
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Found on 2025-10-18 22:49

773.0 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 172.67.71.53
Domain: subside.com.au
Port: 443
URL: https://subside.com.au

First seen 2025-10-21 06:51
Last seen 2026-01-02 02:21
Open for 72 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa339bd8d31a8fb63334fb898143ddf16faca10af7b

GraphQL introspection enabled at /graphql
Types: 521 (by kind: ENUM: 44, INPUT_OBJECT: 118, INTERFACE: 25, OBJECT: 329, SCALAR: 5)
Operations:
- Query: Query | fields: adyenPaymentMethods, adyenPaymentMethodsBalance, adyenPaymentStatus, adyenRedeemedGiftcards, attributesForm
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, oneOf, skip (total: 4)

Detected: Magento

Found on 2026-01-02 02:21

869.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2d302c3409f8baa8438690d77bb83b95fe9b8cc92

GraphQL introspection enabled at /graphql/api
Types: 521 (by kind: ENUM: 44, INPUT_OBJECT: 118, INTERFACE: 25, OBJECT: 329, SCALAR: 5)
Operations:
- Query: Query | fields: adyenPaymentMethods, adyenPaymentMethodsBalance, adyenPaymentStatus, adyenRedeemedGiftcards, attributesForm
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, oneOf, skip (total: 4)

Detected: Magento

Found on 2026-01-01 22:00

869.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa339bd8d31a8fb63334fb898143ddf16fa6d9146c4

GraphQL introspection enabled at /graphql
Types: 521 (by kind: ENUM: 44, INPUT_OBJECT: 118, INTERFACE: 25, OBJECT: 329, SCALAR: 5)
Operations:
- Query: Query | fields: adyenPaymentMethods, adyenPaymentMethodsBalance, adyenPaymentStatus, adyenRedeemedGiftcards, attributesForm
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-12-02 08:05

867.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2d302c3409f8baa8438690d77bb83b95f802fd687

GraphQL introspection enabled at /graphql/api
Types: 521 (by kind: ENUM: 44, INPUT_OBJECT: 118, INTERFACE: 25, OBJECT: 329, SCALAR: 5)
Operations:
- Query: Query | fields: adyenPaymentMethods, adyenPaymentMethodsBalance, adyenPaymentStatus, adyenRedeemedGiftcards, attributesForm
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-11-26 21:25

869.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa334cd49063a54fef69c464f5951b259f112a86719

GraphQL introspection enabled at /graphql
Types: 519 (by kind: ENUM: 44, INPUT_OBJECT: 118, INTERFACE: 25, OBJECT: 327, SCALAR: 5)
Operations:
- Query: Query | fields: adyenPaymentMethods, adyenPaymentMethodsBalance, adyenPaymentStatus, adyenRedeemedGiftcards, attributesForm
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-11-03 20:47

862.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2786b96272c2a58950ea16c4e5709e5fca398437e

GraphQL introspection enabled at /graphql/api
Types: 519 (by kind: ENUM: 44, INPUT_OBJECT: 118, INTERFACE: 25, OBJECT: 327, SCALAR: 5)
Operations:
- Query: Query | fields: adyenPaymentMethods, adyenPaymentMethodsBalance, adyenPaymentStatus, adyenRedeemedGiftcards, attributesForm
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-10-28 09:52

862.8 kBytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.67.71.53
Domain: m.checkporno.link
Port: 80
URL: http://m.checkporno.link

First seen 2024-12-11 15:08
Last seen 2025-07-19 10:52
Open for 219 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652226cdd16b
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@git.uptraff.team:video-projects-ru/checkporno.com.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2025-07-19 10:52
  
  282 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.67.71.53
Domain: ww.checkporno.link
Port: 443
URL: https://ww.checkporno.link

First seen 2024-12-11 15:08
Last seen 2025-07-19 10:52
Open for 219 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652226cdd16b
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@git.uptraff.team:video-projects-ru/checkporno.com.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2025-07-19 10:52
  
  282 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.67.71.53
Domain: ohitv.vin
Port: 443
URL: https://ohitv.vin

First seen 2025-01-28 15:28
Last seen 2025-03-22 05:33
Open for 52 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9f8ddd3d1b99d8bb622d126b0e1074350
```
Found 5 files trough .DS_Store spidering:

/wp-content
/wp-content/banner
/wp-content/languages
/wp-content/plugins
/wp-content/themes
```
  Found on 2025-03-22 05:33
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814e2a3d1388c32101f39db3b7ff2895bb2f
```
Found 6 files trough .DS_Store spidering:

/wp-content
/wp-content/banner
/wp-content/languages
/wp-content/plugins
/wp-content/themes
/wp-content/themes/themes
```
  Found on 2025-03-15 06:19
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.67.71.53
Domain: be.checkporno.link
Port: 80
URL: http://be.checkporno.link

First seen 2024-12-11 15:08
Last seen 2025-03-12 14:48
Open for 90 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652226cdd16b
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@git.uptraff.team:video-projects-ru/checkporno.com.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2025-03-12 14:48
  
  282 Bytes
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.67.71.53
Domain: jaecoopanama.com
Port: 443
URL: https://jaecoopanama.com

First seen 2024-06-20 14:21
Last seen 2024-08-18 21:52
Open for 59 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7fa73b3101492073df038289d00c183b1

Found 128 files trough .DS_Store spidering:

/images
/images/bg_footer_cot.jpg
/images/btn-footer_cot.png
/images/btn-footer_cot_vo2.png
/images/footer_gs.png
/images/footer_gs_03.jpg
/images/icons
/images/J7-white.png
/images/j7.jpg
/images/jaecoo_logo.png
/images/logoGS.png
/index.html
/index_files
/menu.js
/modelos
/modelos_cot
/modelos_cot/alerta.php
/modelos_cot/btn_box_mail.jpg
/modelos_cot/btn_mail_print.png
/modelos_cot/buscar_modelo_cpo.php
/modelos_cot/buscar_modelo_existente.php
/modelos_cot/buscar_version_existente.php
/modelos_cot/buscar_version_existente2.php
/modelos_cot/buscar_version_existente2_mobile.php
/modelos_cot/buscar_version_existente2_mobile_vo.php
/modelos_cot/buscar_version_existente2_mobileF.php
/modelos_cot/buscar_version_existente2F.php
/modelos_cot/buscar_version_existente3.php
/modelos_cot/buscar_version_existente3_cpo.php
/modelos_cot/buscar_version_existente3_test.php
/modelos_cot/buscar_version_existente3_vo.php
/modelos_cot/buscar_version_existente_bk.php
/modelos_cot/calculador_pmt.php
/modelos_cot/class.phpmailer.php
/modelos_cot/class.smtp.php
/modelos_cot/close_btn.png
/modelos_cot/cloud_print.php
/modelos_cot/cloud_print_old.php
/modelos_cot/cloud_print_trafic.php
/modelos_cot/cloud_print_trafic_cpo.php
/modelos_cot/composer.json
/modelos_cot/composer.lock
/modelos_cot/Config.php
/modelos_cot/conn.php
/modelos_cot/cot_all_models.php
/modelos_cot/cot_all_models2.php
/modelos_cot/cot_all_models2_cpo.php
/modelos_cot/cot_all_models2_cpo1.php
/modelos_cot/cot_all_models3.php
/modelos_cot/cot_con.php
/modelos_cot/cot_ok.php
/modelos_cot/cot_ok2.php
/modelos_cot/cot_ok_bk.php
/modelos_cot/crear_pdf.php
/modelos_cot/crear_solicitud_credito.php
/modelos_cot/datos_seguros_old.php
/modelos_cot/dompdf
/modelos_cot/feria_mail.php
/modelos_cot/firma_solicitud.php
/modelos_cot/form_cotizacion2.php
/modelos_cot/form_cotizacion2_2new.php
/modelos_cot/form_cotizacion2_2new_mobile_vo.php
/modelos_cot/form_cotizacion2_2new_vo.php
/modelos_cot/form_cotizacion_complet.php
/modelos_cot/GoogleCloudPrint.php
/modelos_cot/GoogleCloudPrint_old.php
/modelos_cot/guardar_datos_compra.php
/modelos_cot/guardar_datos_compra_contado.php
/modelos_cot/HttpRequest.Class.php
/modelos_cot/images
/modelos_cot/img
/modelos_cot/img_save.php
/modelos_cot/index.php
/modelos_cot/jquery.cookie.js
/modelos_cot/jquery.fileDownload.js
/modelos_cot/jquery.min.js
/modelos_cot/jquery.printPage.js
/modelos_cot/jquery.range.css
/modelos_cot/jquery.range.js
/modelos_cot/js
/modelos_cot/js_modelos_versiones.js
/modelos_cot/lib
/modelos_cot/local_feria.php
/modelos_cot/local_mail.php
/modelos_cot/local_mail_cpo.php
/modelos_cot/local_mail_old.php
/modelos_cot/mail.php
/modelos_cot/mail2.php
/modelos_cot/mail2_old22.php
/modelos_cot/mail_ana.php
/modelos_cot/mail_bk.php
/modelos_cot/mail_bk2.php
/modelos_cot/mail_new.php
/modelos_cot/mail_new2.php
/modelos_cot/mail_new_cpo.php
/modelos_cot/mail_new_vo.php
/modelos_cot/mail_newF.php
/modelos_cot/mail_old.php
/modelos_cot/mailF.php
/modelos_cot/Mobile_Detect.php
/modelos_cot/modelos_cotizacion_GS.jpg
/modelos_cot/oAuthRedirect.php
/modelos_cot/offlineAccess.php
/modelos_cot/offlineToken.php
/modelos_cot/pag_cotizacion2.php
/modelos_cot/pag_cotizacion244.php
/modelos_cot/pag_cotizacion2_bk28_04_14.php
/modelos_cot/pag_cotizacion2_old.php
/modelos_cot/pag_cotizacion2_oldmay.php
/modelos_cot/pag_cotizacion2F.php
/modelos_cot/pag_cotizacion_old.php
/modelos_cot/pag_cotizacion_old2.php
/modelos_cot/pay.php
/modelos_cot/pdf_new_cot.php
/modelos_cot/pdf_new_cot_cpo.php
/modelos_cot/pdf_new_cotF.php
/modelos_cot/pdf_trafic_cot.php
/modelos_cot/pdf_trafic_cot_cpo.php
/modelos_cot/printGS.php
/modelos_cot/recive_mail.php
/modelos_cot/script.js
/modelos_cot/segurl.php
/modelos_cot/select_print.png
/modelos_cot/send_mail_trafic.php
/modelos_cot/send_prospect.php
/modelos_cot/send_prospect_cpo.php
/modelos_cot/send_prospect_mail.php
/modelos_cot/send_vo_pago.php

Found on 2024-08-18 21:52

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.26.15.18
Domain: buzzfun.me
Port: 443
URL: https://buzzfun.me

First seen 2023-10-19 14:50
Last seen 2023-11-16 21:30
Open for 28 days

Severity: medium
Fingerprint: 5f32cf5d6962f09cd4047824d40478249eff9eb3201a2009c80d88d70c1039e2

Found 35 files trough .DS_Store spidering:

/buzzfun
/buzzfun/mobile
/buzzfun/mobile/css
/buzzfun/mobile/icon
/buzzfun/mobile/img
/buzzfun/mobile/img/bfsvg
/buzzfun/mobile/img/sd
/buzzfun/mobile/js
/buzzfun/pc
/buzzfun/pc/css
/buzzfun/pc/fonts
/buzzfun/pc/icon
/buzzfun/pc/img
/buzzfun/pc/js
/buzzsight
/buzzsight/mobile
/buzzsight/mobile/css
/buzzsight/mobile/img
/buzzsight/mobile/img/sd
/buzzsight/mobile/js
/buzzsight/pc
/buzzsight/pc/css
/buzzsight/pc/icon
/buzzsight/pc/img
/buzzsight/pc/js
/diggfun
/diggfun/mobile
/diggfun/mobile/css
/diggfun/mobile/icon
/diggfun/mobile/img
/diggfun/mobile/js
/diggfun/pc
/quiztest
/static
/testname

Found on 2023-11-16 21:30

Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a55483f914bc84047c14de1ddd8010894

Found 19 files trough .DS_Store spidering:

/buzzfun
/buzzfun/mobile
/buzzfun/mobile/css
/buzzfun/mobile/icon
/buzzfun/mobile/img
/buzzfun/mobile/img/bfsvg
/buzzfun/mobile/img/sd
/buzzfun/mobile/js
/buzzfun/pc
/buzzfun/pc/css
/buzzfun/pc/fonts
/buzzfun/pc/icon
/buzzfun/pc/img
/buzzfun/pc/js
/buzzsight
/diggfun
/quiztest
/static
/testname

Found on 2023-11-05 22:52

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35bde7eae8cf196aad4da3439bc79ad75c5

Found 14 files trough .DS_Store spidering:

/buzzfun
/buzzfun/mobile
/buzzfun/mobile/css
/buzzfun/mobile/icon
/buzzfun/mobile/img
/buzzfun/mobile/img/bfsvg
/buzzfun/mobile/img/sd
/buzzfun/mobile/js
/buzzfun/pc
/buzzsight
/diggfun
/quiztest
/static
/testname

Found on 2023-10-19 14:50

Severity: low
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcfb48ca3f8de5c76a8a1b5128020dea88c

Found 25 files trough .DS_Store spidering:

/buzzfun
/buzzfun/mobile
/buzzfun/mobile/css
/buzzfun/mobile/icon
/buzzfun/mobile/img
/buzzfun/mobile/img/bfsvg
/buzzfun/mobile/img/sd
/buzzfun/mobile/js
/buzzfun/pc
/buzzfun/pc/css
/buzzfun/pc/fonts
/buzzfun/pc/icon
/buzzfun/pc/img
/buzzfun/pc/js
/buzzsight
/buzzsight/mobile
/buzzsight/mobile/css
/buzzsight/mobile/img
/buzzsight/mobile/img/sd
/buzzsight/mobile/js
/buzzsight/pc
/diggfun
/quiztest
/static
/testname

Found on 2023-10-19 14:50

Create report

Open service 172.67.71.53:8443 · burbankfire.us

2026-01-13 00:44

HTTP/1.1 522 <none>
Date: Tue, 13 Jan 2026 00:45:15 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9bd0de31f8f2365c-FRA


error code: 522

Found 2 days ago by HttpPlugin

Host 172.67.71.53

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

GraphQL introspection is enabled.

GraphQL introspection is enabled.

GraphQL introspection is enabled.

GraphQL introspection is enabled.

GraphQL introspection is enabled.

GraphQL introspection is enabled.

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file