LeakIX - Host 172.67.74.126

Host 172.67.74.126

United States

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.74.126
Domain: sidcff2-dev-backend-orm.itriad.org.br
Port: 443
URL: https://sidcff2-dev-backend-orm.itriad.org.br

First seen 2025-11-13 17:56
Last seen 2026-02-02 12:41
Open for 80 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d60599583667c5ab9eca7ecfd9c4831be33afb3ea54
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /index/{schema}/{indexName}
GET /home
GET /index/info/{indexName}/{tableSchema}
GET /index/{schema}/{tableName}
GET /index/{schema}/{tableName}/{columnName}
GET /sample/{schema}/{tableName}
GET /tables/schema
GET /tables/{schemaName}
GET /tables/{schema}/{tableName}
GET /tables/{schema}/{tableName}/HasData
GET /tables/{schema}/{tableName}/{columnName}/HasData
POST /crud
POST /crud/many
POST /crud/select
POST /crud/select/paginated
POST /index
POST /tables
PUT /index/{oldIndexName}
PUT /tables/{schema}/{tableName}/column/{columnName}
```
  Found on 2026-02-02 12:41
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.74.126
Domain: sidcff2-dev-backend-repair.itriad.org.br
Port: 443
URL: https://sidcff2-dev-backend-repair.itriad.org.br

First seen 2025-11-13 17:56
Last seen 2026-02-02 00:18
Open for 80 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d60990ac400b3ac55b8c0a020ddc8db0dfee48fe168

Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /api/Repair/Cookbook/{id}
DELETE /api/Repair/MaterialOrder/BulkDelete
DELETE /api/Repair/TemporaryDiagnostic/Delete/SerialNumber/{serialNumber}
DELETE /api/Repair/TemporaryDiagnostic/Delete/{id}
GET /api/Application
GET /api/Application/HealthCheck
GET /api/Repair/Analysis/{serialNumber}/RepairSolutions
GET /api/Repair/BGAJudgmentData/{serialNumber}
GET /api/Repair/Cookbook/Paginated
GET /api/Repair/ElectricalScheme/Id/{id}
GET /api/Repair/ElectricalScheme/Paginated
GET /api/Repair/ElectricalScheme/Permissions
GET /api/Repair/ElectricalScheme/products
GET /api/Repair/ElectricalScheme/{partNumber}
GET /api/Repair/FailureLimitsPerCustomer
GET /api/Repair/FailureLimitsPerCustomer/Permissions
GET /api/Repair/FailureLimitsPerCustomer/causes
GET /api/Repair/FailureLimitsPerCustomer/customers
GET /api/Repair/FailureLimitsPerCustomer/{customer}
GET /api/Repair/Failures
GET /api/Repair/HistoricLogRepair/Paginated
GET /api/Repair/History/{serialNumber}
GET /api/Repair/ICTFailuresLog/{serialNumber}
GET /api/Repair/MaterialOrder/Requests
GET /api/Repair/MaterialOrder/Sent
GET /api/Repair/MaterialOrder/Template/{id}
GET /api/Repair/MaterialOrders/Finish/Paginated
GET /api/Repair/MaterialOrders/Receive
GET /api/Repair/MaterialOrders/Release/Paginated
GET /api/Repair/MaterialOrders/{serialNumber}/IsMaterialRequested
GET /api/Repair/PartNumbers/Paginated
GET /api/Repair/PartNumbers/Position-SKU/Paginated
GET /api/Repair/PreorderMaterial
GET /api/Repair/ReadSerialNumber/{serialNumber}
GET /api/Repair/Reason/Paginated
GET /api/Repair/ReasonIgnoreFail/{customer}
GET /api/Repair/RepairEvidence
GET /api/Repair/RepairFailureHistory/{serialNumber}
GET /api/Repair/RepairFailures/{serialNumber}/{hasRepair}
GET /api/Repair/RepairSuggestionByModel/{modelName}
GET /api/Repair/ScrapReason
GET /api/Repair/SerialNumberInfo/{serialNumber}/Current
GET /api/Repair/SerialNumberInfo/{serialNumber}/LastFailed
GET /api/Repair/Solution/Paginated
GET /api/Repair/TemporaryDiagnostic/{serialNumber}
GET /api/Repair/TemporaryRepair/{serialNumber}
GET /api/Repair/{sku}/Positions
GET /api/RepairAP/Defects/Material/{materialName}
GET /api/RepairAP/MaterialPartInfo/{serialNumber}/{materialName}
GET /api/RepairAP/Materials
GET /api/RepairAP/OriginDefects
GET /api/RepairAP/ReadNewMaterialCustSerialNumber
GET /api/RepairAP/ReadSerialNumber/{serialNumber}
GET /api/RepairAP/RepairParts/{serialNumber}/{repairFlag}
GET /api/RepairAP/TemporaryRepairAP/{serialNumber}/{repairFlag}
GET /api/RepairAP/ValidateNewMaterialSerialNumber
GET /api/Screening/Groups
GET /api/Screening/Lines
GET /api/Screening/OperatorConfig
GET /api/Screening/Positions/Paginated
GET /api/Screening/Sections
GET /api/Screening/Stations
GET /api/Screening/Symptoms/Paginated
GET /api/Screening/ValidationSerialNumber
GET /api/User/ActiveUsers
GET /api/Warehouse/List
GET /api/Warehouse/TransferOrderType
GET /api/Warehouse/WarehouseConfig
GET /api/Warehouse/WarehouseConfig/{code}
PATCH /api/Repair/MaterialOrders/Finish
PATCH /api/Repair/MaterialOrders/Release
PATCH /api/Repair/MaterialOrders/Send
PATCH /api/Repair/MaterialOrders/{serialNumber}/ConfirmMaterialDelivery
PATCH /api/Repair/WIPTracking/{serialNumber}/ChangeUser
POST /api/Repair/Alternates
POST /api/Repair/Analysis/Conclude
POST /api/Repair/ConcludeRepair
POST /api/Repair/Cookbook
POST /api/Repair/Diagnosis/Conclude
POST /api/Repair/DiagnosisTS/BGAJudge/Conclude
POST /api/Repair/ElectricalScheme
POST /api/Repair/MaterialOrder
POST /api/Repair/MaterialOrder/Template
POST /api/Repair/PreorderMaterial/Confirm
POST /api/Repair/ReadSerialNumber/RepairIn/{serialNumber}
POST /api/Repair/ReadSerialNumber/RepairOut/{serialNumber}
POST /api/Repair/RepairEvidence/Image
POST /api/Repair/RepairEvidence/List
POST /api/Repair/TemporaryDiagnostic/Save
POST /api/Repair/TemporaryRepair/Save
POST /api/Repair/TransferToBGAJudge
POST /api/Repair/TransferToScrap
POST /api/Repair/TransferToTS
POST /api/RepairAP/Conclude
POST /api/RepairAP/Kit/Replacement/Validate
POST /api/RepairAP/TemporaryMaterialChange
POST /api/RepairAP/TemporaryMaterialDefect
POST /api/RepairAP/TemporaryRepairAP
POST /api/RepairAP/UnlinkPart
POST /api/Screening/Conclude
PUT /api/Repair/ElectricalScheme/{id}
PUT /api/Repair/TemporaryDiagnostic/Update

Found on 2026-02-02 00:18

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.67.74.126
Domain: job-middleware.electriccircus.co.uk
Port: 443
URL: https://job-middleware.electriccircus.co.uk

First seen 2024-11-13 13:56
Last seen 2026-02-01 23:34
Open for 445 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642e2f248bb69ad522c69ad522c69ad522c
```
Found 2 files trough .DS_Store spidering:

/build
/images
```
  Found on 2026-02-01 23:34
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 104.26.1.87
Domain: harrisdiscount.com
Port: 443
URL: https://harrisdiscount.com

First seen 2025-11-09 03:54
Last seen 2026-02-01 20:07
Open for 84 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35539f568a82f73cc2e1896314f431ee930a06459

GraphQL introspection enabled at /graphql
Types: 480 (by kind: ENUM: 44, INPUT_OBJECT: 114, INTERFACE: 25, OBJECT: 292, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Found on 2026-02-01 20:07

795.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e23308206d18e1a54f9ce8cbce7dc77c7cf261cb7b

GraphQL introspection enabled at /graphql/api
Types: 480 (by kind: ENUM: 44, INPUT_OBJECT: 114, INTERFACE: 25, OBJECT: 292, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Detected: Magento

Found on 2026-01-27 07:34

795.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35539f568a82f73cc2e1896314f431ee9cd9beb0c

GraphQL introspection enabled at /graphql
Types: 480 (by kind: ENUM: 44, INPUT_OBJECT: 114, INTERFACE: 25, OBJECT: 292, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Detected: Magento

Found on 2026-01-01 22:02

795.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e23308206d18e1a54f9ce8cbce7dc77c7cb4783ac4

GraphQL introspection enabled at /graphql/api
Types: 480 (by kind: ENUM: 44, INPUT_OBJECT: 114, INTERFACE: 25, OBJECT: 292, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-01 09:40

795.4 kBytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.67.74.126
Domain: dhl-dgf-tagging.electriccircus.co.uk
Port: 443
URL: https://dhl-dgf-tagging.electriccircus.co.uk

First seen 2025-09-10 17:05
Last seen 2026-01-23 07:30
Open for 134 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522be4756d4
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:teamelectriccircus/dgf-tagging.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-01-23 07:30
  
  277 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.67.74.126
Domain: mirajedesign.com
Port: 443
URL: https://mirajedesign.com

First seen 2022-06-27 05:34
Last seen 2026-01-23 05:20
Open for 1305 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b815a0a1
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gpcoders@bitbucket.org/gpcoders9187/miraje_komal.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2026-01-23 05:20
  
  223 Bytes
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.74.126
Domain: sidcff2-qa-backend-orm.itriad.org.br
Port: 443
URL: https://sidcff2-qa-backend-orm.itriad.org.br

First seen 2025-11-13 17:56
Last seen 2026-01-16 14:15
Open for 63 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d60599583667c5ab9eca7ecfd9c4831be33afb3ea54
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /index/{schema}/{indexName}
GET /home
GET /index/info/{indexName}/{tableSchema}
GET /index/{schema}/{tableName}
GET /index/{schema}/{tableName}/{columnName}
GET /sample/{schema}/{tableName}
GET /tables/schema
GET /tables/{schemaName}
GET /tables/{schema}/{tableName}
GET /tables/{schema}/{tableName}/HasData
GET /tables/{schema}/{tableName}/{columnName}/HasData
POST /crud
POST /crud/many
POST /crud/select
POST /crud/select/paginated
POST /index
POST /tables
PUT /index/{oldIndexName}
PUT /tables/{schema}/{tableName}/column/{columnName}
```
  Found on 2026-01-16 14:15
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.67.74.126
Domain: members.thehatvpn.com
Port: 443
URL: https://members.thehatvpn.com

First seen 2024-02-12 08:52
Last seen 2024-11-20 17:03
Open for 282 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b40c7e98
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:purevpn/hatvpn-whmcs.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-11-20 17:03
  
  267 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.67.74.126
Domain: cer.electriccircus.co.uk
Port: 443
URL: https://cer.electriccircus.co.uk

First seen 2024-08-29 11:12
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652215ddb4b1
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:teamelectriccircus/cer_rebuild.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-08-29 11:12
  
  277 Bytes
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.67.74.126
Domain: beardedfellows.co.uk
Port: 443
URL: https://beardedfellows.co.uk

First seen 2022-06-24 07:09
Last seen 2024-03-30 15:32
Open for 645 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652210e40dd1

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:teamelectriccircus/beardedfellows.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "development"]
	remote = origin
	merge = refs/heads/development
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-03-30 15:32

352 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225db3eab0

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:teamelectriccircus/beardedfellows.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "development"]
	remote = origin
	merge = refs/heads/development

Found on 2022-06-24 07:09

290 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 104.26.0.87
Domain: www.beardedfellows.co.uk
Port: 443
URL: https://www.beardedfellows.co.uk

First seen 2022-06-24 07:09
Last seen 2024-03-30 15:32
Open for 645 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652210e40dd1

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:teamelectriccircus/beardedfellows.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "development"]
	remote = origin
	merge = refs/heads/development
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-03-30 15:32

352 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225db3eab0

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:teamelectriccircus/beardedfellows.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "development"]
	remote = origin
	merge = refs/heads/development

Found on 2022-06-24 07:09

290 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.67.74.126
Domain: docs.flowgpt.com
Port: 443
URL: https://docs.flowgpt.com

First seen 2023-10-29 02:08
Last seen 2023-12-23 22:26
Open for 55 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c8329733f8329733f17d98850fae96607231ad37ea46b020f
```
Found 10 files trough .DS_Store spidering:

/createPrompt
/home_page.jpg
/promptCard
/promptCard/academic-essay.jpg
/promptCard/blog-post.png
/promptCard/code-generation.png
/promptCard/cold-email.png
/promptCard/research-paper-summary.png
/promptCard/resume-editing.png
/promptCard/saas-startup-idea.png
```
  Found on 2023-12-23 22:26
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 104.26.0.87
Domain: electriccircus.co.uk
Port: 443
URL: https://electriccircus.co.uk

First seen 2022-07-07 05:02
Last seen 2023-07-23 08:16
Open for 381 days

Severity: medium
Fingerprint: 2580fa947e78dd08e645819d5824ae6e78b8902bc39bee778ae607d1254bf5c2

HTTP/1.1 200 OK
Date: Tue, 09 May 2023 16:34:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
link: <https://electriccircus.co.uk/wp-json/>; rel="https://api.w.org/", <https://electriccircus.co.uk/wp-json/wp/v2/pages/7>; rel="alternate"; type="application/json", <https://electriccircus.co.uk/>; rel=shortlink
vary: Accept-Encoding
referrer-policy: no-referrer-when-downgrade
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MGSdeJ9YCOOl6%2BySSFklVmbc566l716SrqXUZX%2FfZkhB1%2FORCyTMIpxZZWRxFrknGiBICrLbDJJkpWT5XisBeek6k8GA2%2FHiUcP7ZIg%2FDmFxE5Fov2ligOMy50dXOrvc%2F2K%2BQ1bN"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7c4b59cee8b242f6-EWR

Page title: Electric Circus | Experiences That Connect[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:teamelectriccircus/electriccircus2022.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-05-09 16:34

284 Bytes

Severity: medium
Fingerprint: 2580fa947e78dd08e645819d5824ae6e78b8902bc39bee778ae607d15e4d7b8d

HTTP/1.1 200 OK
Date: Tue, 09 May 2023 16:34:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
link: <https://electriccircus.co.uk/wp-json/>; rel="https://api.w.org/", <https://electriccircus.co.uk/wp-json/wp/v2/pages/7>; rel="alternate"; type="application/json", <https://electriccircus.co.uk/>; rel=shortlink
vary: Accept-Encoding
referrer-policy: no-referrer-when-downgrade
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=29c1eBJnriHayBDOzUdXqoWVQNO8ik4Uc4mdAlGFX%2BsIZ%2FRxZTB76G2XNu7HlwOAtT0LKJy3w1DTBNllzvPj%2B6eFyHi6ZdD72gS%2B6AcH1hdtvrMCEyZopiIhvoxu6Pdx3h36Srio"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7c4b59cdbf0378e8-EWR

Page title: Electric Circus | Experiences That Connect[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:teamelectriccircus/electriccircus2022.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-05-09 16:34

284 Bytes

Severity: medium
Fingerprint: 2580fa947e78dd08e645819d5824ae6e78b8902bc39bee778ae607d1ae5a6baf

HTTP/1.1 200 OK
Date: Tue, 09 May 2023 16:34:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
link: <https://electriccircus.co.uk/wp-json/>; rel="https://api.w.org/", <https://electriccircus.co.uk/wp-json/wp/v2/pages/7>; rel="alternate"; type="application/json", <https://electriccircus.co.uk/>; rel=shortlink
vary: Accept-Encoding
referrer-policy: no-referrer-when-downgrade
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eVUDlcADbmp97ZWmB2blNV7IA8oaIAQwT6sqTzkqjevphkOFJEV62FVZ3ErAldDAx1rizFUe7HfdIkHdEOMwdoMsXK0s8HbAWNHY06kEi7r7Zp1Hp0TBgztx%2BmVJSWMRtuqkti41"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7c4b59c8fe6b4288-EWR

Page title: Electric Circus | Experiences That Connect[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:teamelectriccircus/electriccircus2022.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-05-09 16:34

284 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65220895d991

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:teamelectriccircus/electriccircus2022.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2022-09-24 22:10

284 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65221a850013

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:teamelectriccircus/ec.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2022-07-07 05:02

268 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 104.26.0.87
Domain: www.electriccircus.co.uk
Port: 443
URL: https://www.electriccircus.co.uk

First seen 2022-07-07 05:02
Last seen 2023-07-10 05:17
Open for 368 days

Severity: medium
Fingerprint: 2580fa947e78dd084a208bffa23fee8c88aa9379902e0a8dd689c99c556430b9

HTTP/1.1 301 Moved Permanently
Date: Tue, 09 May 2023 16:34:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
location: https://electriccircus.co.uk/
expires: Tue, 09 May 2023 17:34:36 GMT
Cache-Control: max-age=3600
x-redirect-by: WordPress
referrer-policy: no-referrer-when-downgrade
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mcdT%2BJvyS1Ij8aHZB73OiOQ%2Bw0%2Fv2mI2QSjw1ME56Fo7UDNjJtNHKi%2FZRaSzC8cgFyRCTfhWo7IOAa%2FlhFmdR7k61nek9hKH9XCNK42kkbUfeG%2BfGSgnz2zcc7ZXE1gRKXrVA86MUBCDGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7c4b59ced8e11c0c-AMS


0

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:teamelectriccircus/electriccircus2022.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-05-09 16:34

284 Bytes

Severity: medium
Fingerprint: 2580fa947e78dd084a208bffa23fee8c88aa9379902e0a8dd689c99cc8028e58

HTTP/1.1 301 Moved Permanently
Date: Tue, 09 May 2023 16:34:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
location: https://electriccircus.co.uk/
expires: Tue, 09 May 2023 17:34:35 GMT
Cache-Control: max-age=3600
x-redirect-by: WordPress
referrer-policy: no-referrer-when-downgrade
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kK7ADf5dVx7lx8FMMUZTi13UiVBbYRbop1y6ZZmahhMIS%2BoCKB7wNkEDQBLlRrHhnuL2BFE3BWj86WD9D4aXclOCLpQDxZVCawstm6E9VkkZAQxO3T9bN9Ir4ny6IL4rYlip1BORCJURaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7c4b59c85dcd4182-LHR


0

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:teamelectriccircus/electriccircus2022.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-05-09 16:34

284 Bytes

Severity: medium
Fingerprint: 2580fa947e78dd084a208bffa23fee8c88aa9379902e0a8dd689c99c0133e390

HTTP/1.1 301 Moved Permanently
Date: Tue, 09 May 2023 16:34:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
location: https://electriccircus.co.uk/
expires: Tue, 09 May 2023 17:34:35 GMT
Cache-Control: max-age=3600
x-redirect-by: WordPress
referrer-policy: no-referrer-when-downgrade
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GmQm2TH%2BmBlASh6BgfJcbxjHdf7ZYd3nB%2BDosbuKQI7aW3%2F1NrGvfBYFtcWIXWtoWXwTeDU%2FH6JbzoCUzE5HNNlZiMNgdkRYD5AG44i0Rjj6%2B5AlFJwPCUdo8wETFlPijz0clyNKtrWcoA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7c4b59c85cba0716-LHR


0

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:teamelectriccircus/electriccircus2022.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-05-09 16:34

284 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65220895d991

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:teamelectriccircus/electriccircus2022.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2022-10-06 15:20

284 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65221a850013

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:teamelectriccircus/ec.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2022-07-07 05:02

268 Bytes

Create report

Open service 172.67.74.126:443 · alpha-vac.com

2026-01-26 11:52

HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Jan 2026 11:52:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
CF-RAY: 9c3fce11f935381b-FRA
Expires: Mon, 26 Jan 2026 12:16:22 GMT
Location: https://www.alpha-vac.com/
Status: 301 Moved Permanently
X-Powered-By: WP Engine
X-Redirect-By: WordPress
X-Cacheable: non200
Cache-Control: max-age=600, must-revalidate
X-Cache: HIT: 12
X-Cache-Group: normal
cf-cache-status: DYNAMIC
Set-Cookie: __cf_bm=oeMPl819tb9lJw_S1.SgfO1T8NdNZ2dxGGHIMBg3qRg-1769428355-1.0.1.1-hUb17l77dgGBEm6r_qRANzwiatVunhTzzj0ZzZOK.Ja9xbpNvwq61tG2D6OIkvOlnikSpCJfRNUrnjfElgdiWIYbiscCpokHNJ6dzFxTzLg; path=/; expires=Mon, 26-Jan-26 12:22:35 GMT; domain=.alpha-vac.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
alt-svc: h3=":443"; ma=86400

Found 2026-01-26 by HttpPlugin

Host 172.67.74.126

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

MacOS file listing through .DS_Store file

GraphQL introspection is enabled.

Git configuration and history exposed

Git configuration and history exposed

Swagger API description is publicly available

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed