LeakIX - Host 18.173.154.76

Host 18.173.154.76

United States

AMAZON-02

Ubuntu

Software information

AmazonS3

tcp/443 tcp/80

Apache Apache

tcp/443

Apache Apache 2

tcp/443 tcp/80

AtlassianEdge

tcp/443

CloudFront

tcp/443 tcp/80

Microsoft-IIS 10.0

tcp/443

Server

tcp/443

Tengine

tcp/443 tcp/80

cloudflare

tcp/443

nginx nginx

tcp/443 tcp/80

nginx nginx 1.22.1

tcp/443

nginx nginx 1.18.0

tcp/443

nginx nginx 1.29.4

tcp/443

nginx nginx 1.27.3

tcp/443

nginx nginx 1.26.2

tcp/443

nginx nginx 1.21.6

tcp/443

nginx nginx 1.24.0

tcp/443

openresty

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 18.173.154.76
Domain: fop.api.tsell.cc
Port: 443
URL: https://fop.api.tsell.cc

First seen 2025-11-21 08:08
Last seen 2026-01-09 05:48
Open for 48 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 05:48
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: www.metres.ai
Port: 443
URL: https://www.metres.ai

First seen 2025-12-07 04:24
Last seen 2026-01-02 22:25
Open for 26 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2026-01-02 22:25
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: resinara.com
Port: 443
URL: https://resinara.com

First seen 2025-11-18 05:39
Last seen 2026-01-02 21:57
Open for 45 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d89a8fd6d89a8fd6d89a8fd6d89a8fd6d
```
Found 1 files trough .DS_Store spidering:

/img
```
  Found on 2026-01-02 21:57
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: mindgov.ai
Port: 443
URL: https://mindgov.ai

First seen 2025-11-12 02:11
Last seen 2026-01-02 19:46
Open for 51 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fcee4563bd09fb5b67c70a8bf7c70a8bf
```
Found 3 files trough .DS_Store spidering:

/AIstory
/AIstory/README.txt
/images
```
  Found on 2026-01-02 19:46
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.173.154.76
Domain: mindgov.ai
Port: 443
URL: https://mindgov.ai

First seen 2025-11-12 02:11
Last seen 2026-01-02 19:46
Open for 51 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226889a94f

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/Mindgrub-Projects/mindgov-ai-microsite
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzXzVLVFNCVDhTUnRnUzhPN2VWV3NaRHR5Ymh2eG5GTzRZeW1rNg==
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2026-01-02 19:46

435 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: www.bevelfish.com
Port: 443
URL: https://www.bevelfish.com

First seen 2025-02-18 18:41
Last seen 2026-01-02 17:35
Open for 317 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c778888b4778888b48692a3838728081afe414b3011ad94b8

Found 40 files trough .DS_Store spidering:

/categories
/categories/angry-old-hoops-fan
/categories/basketball-analysis
/categories/basketball-breakdowns
/categories/basketball-challenges
/categories/basketball-commentary
/categories/basketball-debates
/categories/basketball-fan-opinions
/categories/basketball-handles
/categories/basketball-humor
/categories/basketball-influencer
/categories/basketball-insights
/categories/basketball-trick-shots
/categories/basketball-tutorials
/categories/dunk-contests
/categories/epic-basketball-stunts
/categories/lebron-james-critique
/categories/nba-analysis
/categories/nba-controversies
/categories/nba-discussions
/categories/nba-draft-analysis
/categories/nba-game-breakdowns
/categories/nba-game-reviews
/categories/nba-highlights
/categories/nba-news-updates
/categories/nba-player-evaluations
/categories/nba-player-profiles
/categories/nba-playoffs-coverage
/categories/nba-top-plays
/categories/nba-trade-rumors
/categories/one-on-one-basketball-games
/categories/streetball
/categories/streetball-moves
/categories/tristan-jass
/categories/uncut-hoops
/static
/static/favicons
/static/favicons/favicon_io
/static/images
/static/images/canada

Found on 2026-01-02 17:35

Severity: medium
Fingerprint: 5f32cf5d6962f09c8efce1938efce1934d90a83e691b0f755a9ff0618796a4fa

Found 36 files trough .DS_Store spidering:

/categories
/categories/angry-old-hoops-fan
/categories/basketball-analysis
/categories/basketball-breakdowns
/categories/basketball-challenges
/categories/basketball-commentary
/categories/basketball-debates
/categories/basketball-fan-opinions
/categories/basketball-handles
/categories/basketball-humor
/categories/basketball-influencer
/categories/basketball-insights
/categories/basketball-trick-shots
/categories/basketball-tutorials
/categories/dunk-contests
/categories/epic-basketball-stunts
/categories/lebron-james-critique
/categories/nba-analysis
/categories/nba-controversies
/categories/nba-discussions
/categories/nba-draft-analysis
/categories/nba-game-breakdowns
/categories/nba-game-reviews
/categories/nba-highlights
/categories/nba-news-updates
/categories/nba-player-evaluations
/categories/nba-player-profiles
/categories/nba-playoffs-coverage
/categories/nba-top-plays
/categories/nba-trade-rumors
/categories/one-on-one-basketball-games
/categories/streetball
/categories/streetball-moves
/categories/tristan-jass
/categories/uncut-hoops
/static

Found on 2025-12-18 18:09

Severity: medium
Fingerprint: 5f32cf5d6962f09cb3107650b3107650c54099376976482e8934646c34b1e855

Found 39 files trough .DS_Store spidering:

/categories
/categories/angry-old-hoops-fan
/categories/basketball-analysis
/categories/basketball-breakdowns
/categories/basketball-challenges
/categories/basketball-commentary
/categories/basketball-debates
/categories/basketball-fan-opinions
/categories/basketball-handles
/categories/basketball-humor
/categories/basketball-influencer
/categories/basketball-insights
/categories/basketball-trick-shots
/categories/basketball-tutorials
/categories/dunk-contests
/categories/epic-basketball-stunts
/categories/lebron-james-critique
/categories/nba-analysis
/categories/nba-controversies
/categories/nba-discussions
/categories/nba-draft-analysis
/categories/nba-game-breakdowns
/categories/nba-game-reviews
/categories/nba-highlights
/categories/nba-news-updates
/categories/nba-player-evaluations
/categories/nba-player-profiles
/categories/nba-playoffs-coverage
/categories/nba-top-plays
/categories/nba-trade-rumors
/categories/one-on-one-basketball-games
/categories/streetball
/categories/streetball-moves
/categories/tristan-jass
/categories/uncut-hoops
/static
/static/favicons
/static/favicons/favicon_io
/static/images

Found on 2025-12-10 12:42

Severity: medium
Fingerprint: 5f32cf5d6962f09c8f03d7bd8f03d7bd8ffd9b2cd350b557c5caf617c2499c29

Found 38 files trough .DS_Store spidering:

/categories
/categories/angry-old-hoops-fan
/categories/basketball-analysis
/categories/basketball-breakdowns
/categories/basketball-challenges
/categories/basketball-commentary
/categories/basketball-debates
/categories/basketball-fan-opinions
/categories/basketball-handles
/categories/basketball-humor
/categories/basketball-influencer
/categories/basketball-insights
/categories/basketball-trick-shots
/categories/basketball-tutorials
/categories/dunk-contests
/categories/epic-basketball-stunts
/categories/lebron-james-critique
/categories/nba-analysis
/categories/nba-controversies
/categories/nba-discussions
/categories/nba-draft-analysis
/categories/nba-game-breakdowns
/categories/nba-game-reviews
/categories/nba-highlights
/categories/nba-news-updates
/categories/nba-player-evaluations
/categories/nba-player-profiles
/categories/nba-playoffs-coverage
/categories/nba-top-plays
/categories/nba-trade-rumors
/categories/one-on-one-basketball-games
/categories/streetball
/categories/streetball-moves
/categories/tristan-jass
/categories/uncut-hoops
/static
/static/favicons
/static/images

Found on 2025-09-29 02:53

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: www.onlyrewards.co.nz
Port: 443
URL: https://www.onlyrewards.co.nz

First seen 2025-04-30 01:41
Last seen 2026-01-02 16:45
Open for 247 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d3179fd2e3179fd2e3179fd2e3179fd2e
```
Found 1 files trough .DS_Store spidering:

/CASBanner.png
```
  Found on 2026-01-02 16:45
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: canva.love
Port: 443
URL: https://canva.love

First seen 2025-08-01 02:08
Last seen 2026-01-02 13:35
Open for 154 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d869fe6b2869fe6b2869fe6b2869fe6b2
```
Found 1 files trough .DS_Store spidering:

/og
```
  Found on 2026-01-02 13:35
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: ko7.link
Port: 443
URL: https://ko7.link

First seen 2025-11-04 05:39
Last seen 2026-01-02 12:54
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392ab1b17978558eca234111763eee3bd8303
```
Found 7 files trough .DS_Store spidering:

/Adjustscript.js
/d
/globals.css
/img
/index.html
/js
/style.css
```
  Found on 2026-01-02 12:54
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: jhu-blue.3cisd.com
Port: 443
URL: https://jhu-blue.3cisd.com

First seen 2025-10-09 02:23
Last seen 2026-01-02 11:13
Open for 85 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d8988bf04486a5ba397c045b40474a43a9
```
Found 8 files trough .DS_Store spidering:

/cdn-cgi
/comments
/contact
/feed
/privacy
/wp-content
/wp-includes
/wp-json
```
  Found on 2026-01-02 11:13
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: juntaquinenco.evoting.cl
Port: 443
URL: https://juntaquinenco.evoting.cl

First seen 2023-02-22 17:53
Last seen 2026-01-02 10:39
Open for 1044 days

Severity: medium
Fingerprint: 5f32cf5d6962f09cd4047824d404782424ef89b4a9649c542be7dde9ad14a198

Found 35 files trough .DS_Store spidering:

/assets
/assets/css
/assets/css/style.css
/assets/fonts
/assets/img
/assets/img/bg-video.jpg
/assets/img/Logo_EVOTING.png
/assets/img/play.png
/assets/js
/css
/img
/img/arrow.png
/img/como-ingresar.svg
/img/como-votar.svg
/img/favicon.ico
/img/image landing_1.jpg
/img/image landing_2.jpg
/img/image landing_3.jpg
/img/image landing_3.png
/img/image landing_4.jpg
/img/image landing_5.jpg
/img/imageLanding_1.jpg
/img/img-1.png
/img/img-2.png
/img/img-3.png
/img/img-4.png
/img/Logo_EVOTING.png
/img/preguntas-frecuentes.svg
/img/soporte-tecnico.svg
/img/V_Blanco.png
/img/white-down-arrow-png-2.png
/index.html
/index.pug
/js
/pug

Found on 2026-01-02 10:39

Severity: low
Fingerprint: 5f32cf5d6962f09c31c2f0b631c2f0b6b7dfe00ee9f6b8fa3da90163987e9c6d

Found 28 files trough .DS_Store spidering:

/css
/img
/img/arrow.png
/img/Copia de fondoQuinenco.png
/img/Copia de logo-quinenco-2024.png
/img/favicon.ico
/img/image landing_1.jpg
/img/image landing_2.jpg
/img/image landing_3.jpg
/img/image landing_3.png
/img/image landing_4.jpg
/img/image landing_5.jpg
/img/imageLanding_1.jpg
/img/img-1.png
/img/img-2.png
/img/img-3.png
/img/img-4.png
/img/Logo_EVOTING.png
/img/question.png
/img/settings_azul.png
/img/V_Blanco.png
/img/vote2_azul.png
/img/white-down-arrow-png-2.png
/img/www.png
/index.html
/index.pug
/js
/pug

Found on 2025-03-13 07:59

Severity: medium
Fingerprint: 5f32cf5d6962f09c7b6beb587b6beb58c638e0600301dffbff1faa3b686584a4

Found 57 files trough .DS_Store spidering:

/css
/fonts
/img
/img/arrow.png
/img/bgComoVotar.png
/img/bgComoVotar2.png
/img/bgComoVotar3.png
/img/bgComoVotar4.png
/img/bgComoVotar5.png
/img/bgComoVotar7.png
/img/bgComoVotar8.png
/img/bgComoVotar9.png
/img/bgMesaAyuda.png
/img/bgMesaAyuda1.jpg
/img/bgMesaAyuda2.png
/img/bgTop6.jpg
/img/bgVideo.jpg
/img/favicon.ico
/img/fondoQuinenco.png
/img/foto2.jpg
/img/image landing_1.jpg
/img/image landing_2.jpg
/img/image landing_3.jpg
/img/image landing_3.png
/img/image landing_4.jpg
/img/image landing_5.jpg
/img/imageFase.jpg
/img/imageFase2.jpg
/img/imageFase2NO.jpg
/img/imageFase3.jpg
/img/imageFase4.png
/img/imageFase5.jpg
/img/imageFase7.jpg
/img/imageLanding_1.jpg
/img/img-1.png
/img/img-2.png
/img/img-3.png
/img/img-4.png
/img/logo-quinenco-2024.png
/img/logo.png
/img/Logo_EVOTING.png
/img/logoQuinenco.png
/img/logosAll.png
/img/question.png
/img/settings_azul.png
/img/V_Blanco.png
/img/vote2_azul.png
/img/white-down-arrow-png-2.png
/img/www.png
/includes
/index.html
/index.pug
/index2021.html
/js
/junta2022
/junta2022/img
/pug

Found on 2024-04-10 15:57

Severity: low
Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc51fa561c54e9f04848886d5e43a218ef
```
Found 4 files trough .DS_Store spidering:

/css
/img
/js
/pug
```
Found on 2024-03-21 15:00
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d89a8fd6d89a8fd6d89a8fd6d89a8fd6d
```
Found 1 files trough .DS_Store spidering:

/img
```
Found on 2023-02-22 17:53

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: eiqshopping.com
Port: 80
URL: http://eiqshopping.com

First seen 2024-11-06 07:55
Last seen 2026-01-02 07:29
Open for 421 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9cdbb983a1169d4a2a9a6409b960f3949
```
Found 5 files trough .DS_Store spidering:

/images
/images/rep_logos
/static
/static/css
/static/js
```
  Found on 2026-01-02 07:29
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f661bc6c82918aaac1db52c8d1db52c8d
```
Found 3 files trough .DS_Store spidering:

/images
/images/rep_logos
/static
```
  Found on 2025-03-08 21:47
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: www.eazyiron.com
Port: 443
URL: https://www.eazyiron.com

First seen 2025-11-14 00:09
Last seen 2026-01-02 03:57
Open for 49 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe800eab3a3fec112e58335a6b455d9f4b
```
Found 15 files trough .DS_Store spidering:

/assets
/assets/css
/assets/driver
/assets/driver/images
/assets/drycleaner
/assets/drycleaner/css
/assets/drycleaner/images
/assets/drycleaner/js
/assets/fonts
/assets/images
/assets/js
/assets/provider
/assets/provider/css
/assets/provider/images
/assets/provider/js
```
  Found on 2026-01-02 03:57
- Severity: low
  Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d336cbabbd7dd8ab5248aed945af7217d
```
Found 12 files trough .DS_Store spidering:

/assets
/assets/css
/assets/driver
/assets/driver/images
/assets/drycleaner
/assets/drycleaner/css
/assets/drycleaner/images
/assets/drycleaner/js
/assets/fonts
/assets/images
/assets/js
/assets/provider
```
  Found on 2025-12-01 15:11
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 18.173.154.76
Domain: bellevuefloristandcafe.com
Port: 443
URL: https://bellevuefloristandcafe.com

First seen 2025-12-04 16:01

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e208a11888215c6dac8808add1a2a429196ed1a0c1

GraphQL introspection enabled at /graphql/api
Types: 397 (by kind: ENUM: 41, INPUT_OBJECT: 86, INTERFACE: 24, OBJECT: 241, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToWishlist
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-12-04 16:01

677.8 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 18.173.154.76
Domain: manahawkinflorist.net
Port: 443
URL: https://manahawkinflorist.net

First seen 2025-12-04 16:01

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e208a11888215c6dac8808add1a2a429196ed1a0c1

GraphQL introspection enabled at /graphql/api
Types: 397 (by kind: ENUM: 41, INPUT_OBJECT: 86, INTERFACE: 24, OBJECT: 241, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToWishlist
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-12-04 16:01

677.8 kBytes

Create report

Grafana instance publicly available
Grafana instance is open to the public and could leak the following information :

System/internal statistics

Database backend credentials
IP: 18.173.154.76
Domain: insights.bf2.co
Port: 443
URL: https://insights.bf2.co/api/datasources

First seen 2025-07-02 08:10
Last seen 2025-12-01 20:28
Open for 152 days
- Fingerprint: afdaacf60309de55fbe6b9b4c3046613c3046613c3046613c3046613c3046613
```
Read-only access:
Title: sentry | path: db/sentry | type: dash-folder
```
  Found on 2025-12-01 20:28
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.46
Domain: www.wtgsex.com
Port: 443
URL: https://www.wtgsex.com

First seen 2025-11-04 09:56
Last seen 2025-12-01 17:08
Open for 27 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3838040e3838040e925a4a2a36852e35ce994b83ebadb8d4
```
Found 20 files trough .DS_Store spidering:

/assets
/assets/icons
/assets/icons/bak
/assets/icons/lasbet
/assets/img
/assets/img/ph
/assets/outer
/assets/outer/launch_game
/assets/outer/spei
/assets/pwa
/assets/pwa/168loc
/assets/pwa/bethoje
/assets/pwa/bethoje61
/assets/pwa/lasbet
/assets/site
/outer
/outer/mx_download
/outer/mx_download/dist
/outer/mx_download/index
/webclip
```
  Found on 2025-12-01 17:08
- Severity: low
  Fingerprint: 5f32cf5d6962f09c668fcbec668fcbecac82a5dcf3492a4f79999e21f16c2217
```
Found 17 files trough .DS_Store spidering:

/assets
/assets/icons
/assets/icons/bak
/assets/icons/lasbet
/assets/img
/assets/img/ph
/assets/outer
/assets/outer/launch_game
/assets/outer/spei
/assets/pwa
/assets/pwa/168loc
/assets/pwa/bethoje
/assets/pwa/bethoje61
/assets/pwa/lasbet
/assets/site
/outer
/webclip
```
  Found on 2025-11-27 01:31
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: echopinnacles.com
Port: 443
URL: https://echopinnacles.com

First seen 2025-11-13 08:44
Last seen 2025-11-16 22:39
Open for 3 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3838040e3838040e925a4a2a36852e35ce994b83ebadb8d4
```
Found 20 files trough .DS_Store spidering:

/assets
/assets/icons
/assets/icons/bak
/assets/icons/lasbet
/assets/img
/assets/img/ph
/assets/outer
/assets/outer/launch_game
/assets/outer/spei
/assets/pwa
/assets/pwa/168loc
/assets/pwa/bethoje
/assets/pwa/bethoje61
/assets/pwa/lasbet
/assets/site
/outer
/outer/mx_download
/outer/mx_download/dist
/outer/mx_download/index
/webclip
```
  Found on 2025-11-16 22:39
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: portal.pangenea.com
Port: 443
URL: https://portal.pangenea.com

First seen 2024-03-07 01:51
Last seen 2025-09-24 23:50
Open for 566 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392abbcee0d14cfd5a725ceb85ccc83f650c6
```
Found 7 files trough .DS_Store spidering:

/documents
/static
/static/tinymce
/static/tinymce/skins
/static/tinymce/skins/lightgray
/static/tinymce/themes
/static/tinymce/themes/modern
```
  Found on 2025-09-24 23:50
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9883657cee17fc497f7efb47a9fcf76b6
```
Found 5 files trough .DS_Store spidering:

/documents
/static
/static/tinymce
/static/tinymce/skins
/static/tinymce/themes
```
  Found on 2024-05-30 09:25
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: www.kirknewtonpharmacy.co.uk
Port: 443
URL: https://www.kirknewtonpharmacy.co.uk

First seen 2024-10-09 00:22
Last seen 2025-09-14 22:28
Open for 340 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fb246cfc78c334135a18804a4a18804a4
```
Found 3 files trough .DS_Store spidering:

/img
/img/delivery_options
/img/shop
```
  Found on 2025-09-14 22:28
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d89a8fd6d89a8fd6d89a8fd6d89a8fd6d
```
Found 1 files trough .DS_Store spidering:

/img
```
  Found on 2025-06-24 13:28
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: rugby-777.com
Port: 443
URL: https://rugby-777.com

First seen 2025-08-31 15:11
Last seen 2025-09-14 16:38
Open for 14 days

Severity: medium
Fingerprint: 5f32cf5d6962f09cb3107650b3107650997a94f4fcae5e2cdc6cba007097c695

Found 39 files trough .DS_Store spidering:

/img
/img/activity
/img/agente-avatar.png
/img/brazil-icon.avif
/img/footer
/img/footer-link
/img/game
/img/header
/img/img_hb_frame.avif
/img/leftPanel
/img/login
/img/mark.png
/img/notice
/img/page
/img/popup
/img/promote
/img/promote/a.avif
/img/promote/apps
/img/promote/avatar.png
/img/promote/b1.avif
/img/promote/b2.avif
/img/promote/b3.avif
/img/promote/c1.avif
/img/promote/c2.avif
/img/promote/close-eye.png
/img/promote/empty.webp
/img/promote/eye.png
/img/promote/line-1.png
/img/promote/line-2.png
/img/promote/lock.png
/img/promote/medal.webp
/img/promote/rule-bg.png
/img/promote/search-empty.webp
/img/promote/search.png
/img/promote/user.png
/img/regra
/img/searchSlot
/img/sol.png
/img/user

Found on 2025-09-14 16:38

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: marketbrewer.com
Port: 443
URL: https://marketbrewer.com

First seen 2024-09-12 01:56
Last seen 2025-08-12 22:46
Open for 334 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f567349e40ee2d61a5dbe18375dbe1837
```
Found 3 files trough .DS_Store spidering:

/fonts
/js
/styles
```
  Found on 2025-08-12 22:46
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc51fa561ca814eca213400451592d4908
```
Found 4 files trough .DS_Store spidering:

/css
/js
/products
/shop
```
  Found on 2025-03-06 16:21
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.76
Domain: dashboard.rentalshield.ae
Port: 443
URL: https://dashboard.rentalshield.ae

First seen 2023-03-01 05:12
Last seen 2025-07-07 11:07
Open for 859 days

Severity: high
Fingerprint: 5f32cf5d6962f09cfb7dc6fdfb7dc6fd29e23b458b38a94c331e27947a0aae52

Found 74 files trough .DS_Store spidering:

/css
/custom-icons
/custom-icons/apartment.svg
/custom-icons/dispute.svg
/custom-icons/DONHjWeVAAA6qQB.jpeg
/custom-icons/ETgy.txt
/custom-icons/file.svg
/custom-icons/logout.svg
/custom-icons/owner.svg
/custom-icons/security.svg
/favicon.ico
/favicongfd.ico
/img
/img/avatars
/img/flags
/img/Home Page Icons 300-08.jpeg
/img/logo-sm-white.png
/img/logo-sm.jpeg
/img/logo-sm.png
/img/logo-white.png
/img/logo.jpeg
/img/logo.png
/img/Onboarding
/img/Onboarding/register-vector.svg
/img/others
/img/others/5-ways-seo-web-design-go-together-5e2945dd5df37.png
/img/others/cards.png
/img/others/client_secret_424032780589-fu826a3bprf8796g4nkb0vf0k0kempb7.apps.googleusercontent.com.json
/img/others/deposit.png
/img/others/dispute.png
/img/others/img-1.png
/img/others/img-10.png
/img/others/img-11.png
/img/others/img-12.jpg
/img/others/img-13.jpg
/img/others/img-14.jpg
/img/others/img-15.jpg
/img/others/img-16.jpg
/img/others/img-17.jpg
/img/others/img-18.png
/img/others/img-19.png
/img/others/img-2.png
/img/others/img-20.png
/img/others/img-21.png
/img/others/img-3.png
/img/others/img-4.png
/img/others/img-5.png
/img/others/img-6.png
/img/others/img-7.png
/img/others/img-8.png
/img/others/img-9.png
/img/others/mapad.jpeg
/img/others/marker.png
/img/others/meri.jpeg
/img/others/move.png
/img/others/protection.png
/img/others/qrcode.png
/img/others/shield.png
/img/others/Tenant Dashboard User Flow.pdf
/img/others/tenant.svg
/img/others/white- (1).mp4
/img/others/white-.mp4
/img/page-background
/img/page-background.zip
/img/register-vector.zip
/img/report_images
/img/rm309-adj-01.svg
/img/Rs_logo.png
/img/thumbs
/index.html
/logo192.png
/logo512.png
/manifest.json
/robots.txt

Found on 2025-07-07 11:07

Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733fbe7e56f7ad640f3ae590782ee969e64d

Found 10 files trough .DS_Store spidering:

/css
/custom-icons
/favicon.ico
/favicongfd.ico
/img
/index.html
/logo192.png
/logo512.png
/manifest.json
/robots.txt

Found on 2025-03-22 20:28

Severity: high
Fingerprint: 5f32cf5d6962f09c2f9cf9902f9cf99096f7c82882851237e58223d9d31f7b62

Found 75 files trough .DS_Store spidering:

/css
/custom-icons
/custom-icons/apartment.svg
/custom-icons/dispute.svg
/custom-icons/DONHjWeVAAA6qQB.jpeg
/custom-icons/ETgy.txt
/custom-icons/file.svg
/custom-icons/logout.svg
/custom-icons/owner.svg
/custom-icons/security.svg
/data
/favicon.ico
/favicongfd.ico
/img
/img/avatars
/img/flags
/img/Home Page Icons 300-08.jpeg
/img/logo-sm-white.png
/img/logo-sm.jpeg
/img/logo-sm.png
/img/logo-white.png
/img/logo.jpeg
/img/logo.png
/img/Onboarding
/img/Onboarding/register-vector.svg
/img/others
/img/others/5-ways-seo-web-design-go-together-5e2945dd5df37.png
/img/others/cards.png
/img/others/client_secret_424032780589-fu826a3bprf8796g4nkb0vf0k0kempb7.apps.googleusercontent.com.json
/img/others/deposit.png
/img/others/dispute.png
/img/others/img-1.png
/img/others/img-10.png
/img/others/img-11.png
/img/others/img-12.jpg
/img/others/img-13.jpg
/img/others/img-14.jpg
/img/others/img-15.jpg
/img/others/img-16.jpg
/img/others/img-17.jpg
/img/others/img-18.png
/img/others/img-19.png
/img/others/img-2.png
/img/others/img-20.png
/img/others/img-21.png
/img/others/img-3.png
/img/others/img-4.png
/img/others/img-5.png
/img/others/img-6.png
/img/others/img-7.png
/img/others/img-8.png
/img/others/img-9.png
/img/others/mapad.jpeg
/img/others/marker.png
/img/others/meri.jpeg
/img/others/move.png
/img/others/protection.png
/img/others/qrcode.png
/img/others/shield.png
/img/others/Tenant Dashboard User Flow.pdf
/img/others/tenant.svg
/img/others/white- (1).mp4
/img/others/white-.mp4
/img/page-background
/img/page-background.zip
/img/register-vector.zip
/img/report_images
/img/rm309-adj-01.svg
/img/Rs_logo.png
/img/thumbs
/index.html
/logo192.png
/logo512.png
/manifest.json
/robots.txt

Found on 2023-11-07 08:33

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.173.154.76
Domain: www.laboratoriogigliotti.com.br
Port: 443
URL: https://www.laboratoriogigliotti.com.br

First seen 2024-01-25 02:26
Last seen 2024-12-26 17:23
Open for 336 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224559e36c
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/wearelode/website
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2024-12-26 17:23
  
  257 Bytes
Create report

Open service 18.173.154.76:443 · www.arvast.ai

2026-01-13 00:55

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 421040
Connection: close
Date: Tue, 13 Jan 2026 00:55:17 GMT
Cache-Control: max-age=5, stale-while-revalidate
Accept-Ranges: bytes
ETag: "7e3f295321385896ca3ff5c37a18a5b8"
Last-Modified: Mon, 15 Sep 2025 07:28:28 GMT
X-Cache: Hit from cloudfront
Via: 1.1 106a2e3801afa4dfd5bd4bfaeb93d526.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: q1cM9yhomhVDSpOSIlPbIl-RIYiE-Q5t7aI7LF6KGw5ziihg9HL_ng==
Age: 2

Page title: Augmented Reality Visual Assistant for Modern Methods of Construction | ARVAST

<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="color-scheme" content="dark"/><meta name="theme-color"/><link rel="preload" href="/assets/logo.svg" as="image" fetchpriority="high"/><title>Augmented Reality Visual Assistant for Modern Methods of Construction | ARVAST</title><meta name="robots" content="index,follow"/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:site" content="@Arvast"/><meta name="twitter:creator" content="@Arvast"/><meta property="og:title" content="Augmented Reality Visual Assistant for Modern Methods of Construction | ARVAST"/><meta property="og:url" content="https://arvast.ai/"/><meta property="og:image" content="https://arvast.ai/assets/social-banner.jpg"/><meta property="og:site_name" content="ARVAST"/><meta name="next-head-count" content="14"/><link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png"/><link rel="icon" href="/favicon.ico"/><link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png"/><link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png"/><meta name="theme-color" content="#16B364"/><meta name="color-scheme" content="dark"/><style id="__jsx-1c3f0d6e1d8f4356">.hologram-cloud{position:absolute;background:#acab97;-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;opacity:0;-webkit-filter:blur(4px);filter:blur(4px);-webkit-animation:fizzle 4s linear infinite,glow 4s ease-in-out infinite alternate;-moz-animation:fizzle 4s linear infinite,glow 4s ease-in-out infinite alternate;-o-animation:fizzle 4s linear infinite,glow 4s ease-in-out infinite alternate;animation:fizzle 4s linear infinite,glow 4s ease-in-out infinite alternate}@-webkit-keyframes fizzle{0%{opacity:0;-webkit-transform:scale(1);transform:scale(1)}50%{opacity:.8;-webkit-transform:scale(1.2);transform:scale(1.2)}100%{opacity:0;-webkit-transform:scale(1.5);transform:scale(1.5)}}@-moz-keyframes fizzle{0%{opacity:0;-moz-transform:scale(1);transform:scale(1)}50%{opacity:.8;-moz-transform:scale(1.2);transform:scale(1.2)}100%{opacity:0;-moz-transform:scale(1.5);transform:scale(1.5)}}@-o-keyframes fizzle{0%{opacity:0;-o-transform:scale(1);transform:scale(1)}50%{opacity:.8;-o-transform:scale(1.2);transform:scale(1.2)}100%{opacity:0;-o-transform:scale(1.5);transform:scale(1.5)}}@keyframes fizzle{0%{opacity:0;-webkit-transform:scale(1);-moz-transform:scale(1);-o-transform:scale(1);transform:scale(1)}50%{opacity:.8;-webkit-transform:scale(1.2);-moz-transform:scale(1.2);-o-transform:scale(1.2);transform:scale(1.2)}100%{opacity:0;-webkit-transform:scale(1.5);-moz-transform:scale(1.5);-o-transform:scale(1.5);transform:scale(1.5)}}@-webkit-keyframes glow{0%{-webkit-box-shadow:0 0 5px rgba(255,255,255,.5),0 0 10px rgba(255,255,255,.5);box-shadow:0 0 5px rgba(255,255,255,.5),0 0 10px rgba(255,255,255,.5)}50%{-webkit-box-shadow:0 0 20px rgba(255,255,255,1),0 0 30px rgba(255,255,255,1);box-shadow:0 0 20px rgba(255,255,255,1),0 0 30px rgba(255,255,255,1)}100%{-webkit-box-shadow:0 0 5px rgba(255,255,255,.5),0 0 10px rgba(255,255,255,.5);box-shadow:0 0 5px rgba(255,255,255,.5),0 0 10px rgba(255,255,255,.5)}}@-moz-keyframes glow{0%{-moz-box-shadow:0 0 5px rgba(255,255,255,.5),0 0 10px rgba(255,255,255,.5);box-shadow:0 0 5px rgba(255,255,255,.5),0 0 10px rgba(255,255,255,.5)}50%{-moz-box-shadow:0 0 20px rgba(255,255,255,1),0 0 30px rgba(255,255,255,1);box-shadow:0 0 20px rgba(255,255,255,1),0 0 30px rgba(255,255,255,1)}100%{-moz-box-shadow:0 0 5px rgba(255,255,255,.5),0 0 10px rgba(255,255,255,.5);box-shadow:0 0 5px rgba(255,255,255,.5),0 0 10px rgba(255,255,255,.5)}}@-o-keyframes glow{0%{box-shadow:0 0 5px rgba(255,255,255,.5),0 0 10px rgba(255,255,255,.5)}50%{box-shadow:0 0 20px rgba(255,255,255,1),0 0 30px rgba(255,255,255,1)}100%{box-shadow:0 0 5px rgba(255,255,255,.5),0 0 10px rgba(255,255,255,.5)}}@keyframes glow{0%{-webkit-box-shadow:0 0 5px rgba(255,255,255,.5),0 0 10px rgba(255,255,255,.5);-moz-box-shadow:0 0 5px rgba(255,255,255,.5),0 0 10px rgba(255,255,255,.5);box-shadow

Found 3 days ago by HttpPlugin

Host 18.173.154.76

United States

Software information

Swagger API description is publicly available

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

GraphQL introspection is enabled.

GraphQL introspection is enabled.

Grafana instance publicly available

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed