LeakIX - Host 18.66.192.63

Host 18.66.192.63

United States

AMAZON-02

Software information

AmazonS3

tcp/443 tcp/80

Apache Apache

tcp/443

Apache Apache 2.4.59

tcp/443

CloudFront

tcp/443 tcp/80

GitHub.com

tcp/443

OpenSSL OpenSSL 3.0.8

tcp/443

Phusion_Passenger 6.0.23

tcp/443

awselb awselb 2.0

tcp/443

cloudflare

tcp/443

nginx nginx

tcp/443 tcp/80

nginx nginx 1.21.6

tcp/443

nginx nginx 1.24.0

tcp/443

nginx nginx 1.29.4

tcp/443 tcp/80

openresty

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 18.66.192.63
Domain: vimond.viewing-history.cf.cc-pr.vmnd.tv
Port: 443
URL: https://vimond.viewing-history.cf.cc-pr.vmnd.tv

First seen 2025-11-06 03:03
Last seen 2026-01-09 10:10
Open for 64 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd151e75e4bced6282f28996f86036c1d9bb3d1d8cc034a180a
```
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /api/v1/viewinghistory
GET /api/v1/viewinghistory/all
GET /api/v1/viewinghistory/all/{categoryId}
GET /api/v1/viewinghistory/completed
GET /api/v1/viewinghistory/completed/{categoryId}
GET /api/v1/viewinghistory/progress
GET /api/v1/viewinghistory/progress/{categoryId}
GET /api/v1/viewinghistory/{assetId}
```
  Found on 2026-01-09 10:10
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 18.66.192.63
Domain: sjmotors.in
Port: 443
URL: https://sjmotors.in

First seen 2025-11-30 05:19
Last seen 2026-01-03 21:23
Open for 34 days
- Severity: critical
  Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884029ffc42c1c7b73bc5
```
[init]
	defaultBranch = none
[fetch]
	recurseSubmodules = false
[transfer]
	bundleURI = true
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab-ci-token:glcbt-66_hLtAaxQY34mHWw2JVc-Q@gitlab.com/neharode/s-j-motors-website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[lfs]
	repositoryformatversion = 0
```
  Found on 2026-01-03 21:23
  
  387 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 18.66.192.63
Domain: www.sjmotors.in
Port: 443
URL: https://www.sjmotors.in

First seen 2025-11-30 05:19
Last seen 2026-01-03 21:13
Open for 34 days
- Severity: critical
  Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884029ffc42c1c7b73bc5
```
[init]
	defaultBranch = none
[fetch]
	recurseSubmodules = false
[transfer]
	bundleURI = true
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab-ci-token:glcbt-66_hLtAaxQY34mHWw2JVc-Q@gitlab.com/neharode/s-j-motors-website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[lfs]
	repositoryformatversion = 0
```
  Found on 2026-01-03 21:13
  
  387 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.66.192.63
Domain: www.safeguardmedix.com
Port: 80
URL: http://www.safeguardmedix.com

First seen 2025-05-10 04:42
Last seen 2026-01-02 19:54
Open for 237 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65228fe35326
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = https://github.com/temitopeajagbe/safeguardmedix.com.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-01-02 19:54
  
  326 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.66.192.63
Domain: ascensus.digital
Port: 443
URL: https://ascensus.digital

First seen 2025-11-29 04:32
Last seen 2026-01-02 17:51
Open for 34 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fd02d66877591c360f966c9a6f966c9a6
```
Found 3 files trough .DS_Store spidering:

/css
/images
/js
```
  Found on 2026-01-02 17:51
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.66.192.63
Domain: dogcatbirth-records.com
Port: 443
URL: https://dogcatbirth-records.com

First seen 2025-08-09 02:27
Last seen 2026-01-02 16:07
Open for 146 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82364b77cc8a4106ad
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
[remote "origin"]
	url = https://github.com/XOR-Geek/PetApp-Web-AWS.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2026-01-02 16:07
  
  184 Bytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 18.66.192.63
Domain: www.protechonline.net
Port: 443
URL: https://www.protechonline.net

First seen 2025-11-27 04:10
Last seen 2026-01-02 14:04
Open for 36 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f885b73a46e3e56ae65764b0bbcd0fc205a47dd3

GraphQL introspection enabled at /graphql
Types: 436 (by kind: ENUM: 29, INPUT_OBJECT: 107, INTERFACE: 21, OBJECT: 274, SCALAR: 5)
Operations:
- Query: Query | fields: availableStores, blogAuthor, blogCategories, blogCategory, blogComments
- Mutation: Mutation | fields: addBundleProductsToCart, addCommentToPost, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Detected: Magento

Found on 2026-01-02 14:04

961.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f885b73a46e3e56ae65764b0bbcd0fc2a5b918ac

GraphQL introspection enabled at /graphql
Types: 436 (by kind: ENUM: 29, INPUT_OBJECT: 107, INTERFACE: 21, OBJECT: 274, SCALAR: 5)
Operations:
- Query: Query | fields: availableStores, blogAuthor, blogCategories, blogCategory, blogComments
- Mutation: Mutation | fields: addBundleProductsToCart, addCommentToPost, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-12-10 20:19

961.0 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.66.192.63
Domain: create.seppo.io
Port: 443
URL: https://create.seppo.io

First seen 2025-11-09 05:00
Last seen 2026-01-02 13:28
Open for 54 days

Severity: medium
Fingerprint: 5f32cf5d6962f09ccbc000d9cbc000d9600de672b4428e0c013784299164f43d

Found 49 files trough .DS_Store spidering:

/dashboard2
/tinymce
/tinymce/icons
/tinymce/langs
/tinymce/models
/tinymce/plugins
/tinymce/plugins/advlist
/tinymce/plugins/anchor
/tinymce/plugins/autolink
/tinymce/plugins/autoresize
/tinymce/plugins/autosave
/tinymce/plugins/charmap
/tinymce/plugins/code
/tinymce/plugins/codesample
/tinymce/plugins/directionality
/tinymce/plugins/emoticons
/tinymce/plugins/fullscreen
/tinymce/plugins/help
/tinymce/plugins/image
/tinymce/plugins/importcss
/tinymce/plugins/insertdatetime
/tinymce/plugins/link
/tinymce/plugins/lists
/tinymce/plugins/media
/tinymce/plugins/nonbreaking
/tinymce/plugins/pagebreak
/tinymce/plugins/preview
/tinymce/plugins/quickbars
/tinymce/plugins/save
/tinymce/plugins/searchreplace
/tinymce/plugins/table
/tinymce/plugins/template
/tinymce/plugins/visualblocks
/tinymce/plugins/visualchars
/tinymce/plugins/wordcount
/tinymce/skins
/tinymce/skins/content
/tinymce/skins/content/dark
/tinymce/skins/content/default
/tinymce/skins/content/document
/tinymce/skins/content/tinymce-5
/tinymce/skins/content/tinymce-5-dark
/tinymce/skins/content/writer
/tinymce/skins/ui
/tinymce/skins/ui/oxide
/tinymce/skins/ui/oxide-dark
/tinymce/skins/ui/tinymce-5
/tinymce/skins/ui/tinymce-5-dark
/tinymce/themes

Found on 2026-01-02 13:28

Severity: medium
Fingerprint: 5f32cf5d6962f09c92dfb71592dfb7155a2fc326202249f8ee20a4b532ce62b3

Found 45 files trough .DS_Store spidering:

/dashboard2
/tinymce
/tinymce/icons
/tinymce/langs
/tinymce/models
/tinymce/plugins
/tinymce/plugins/advlist
/tinymce/plugins/anchor
/tinymce/plugins/autolink
/tinymce/plugins/autoresize
/tinymce/plugins/autosave
/tinymce/plugins/charmap
/tinymce/plugins/code
/tinymce/plugins/codesample
/tinymce/plugins/directionality
/tinymce/plugins/emoticons
/tinymce/plugins/fullscreen
/tinymce/plugins/help
/tinymce/plugins/image
/tinymce/plugins/importcss
/tinymce/plugins/insertdatetime
/tinymce/plugins/link
/tinymce/plugins/lists
/tinymce/plugins/media
/tinymce/plugins/nonbreaking
/tinymce/plugins/pagebreak
/tinymce/plugins/preview
/tinymce/plugins/quickbars
/tinymce/plugins/save
/tinymce/plugins/searchreplace
/tinymce/plugins/table
/tinymce/plugins/template
/tinymce/plugins/visualblocks
/tinymce/plugins/visualchars
/tinymce/plugins/wordcount
/tinymce/skins
/tinymce/skins/content
/tinymce/skins/content/dark
/tinymce/skins/content/default
/tinymce/skins/content/document
/tinymce/skins/content/tinymce-5
/tinymce/skins/content/tinymce-5-dark
/tinymce/skins/content/writer
/tinymce/skins/ui
/tinymce/themes

Found on 2025-11-30 16:55

Severity: medium
Fingerprint: 5f32cf5d6962f09c91500896915008966564e6c398e5a90501caa2c41f7b8ebd

Found 37 files trough .DS_Store spidering:

/dashboard2
/tinymce
/tinymce/icons
/tinymce/langs
/tinymce/models
/tinymce/plugins
/tinymce/plugins/advlist
/tinymce/plugins/anchor
/tinymce/plugins/autolink
/tinymce/plugins/autoresize
/tinymce/plugins/autosave
/tinymce/plugins/charmap
/tinymce/plugins/code
/tinymce/plugins/codesample
/tinymce/plugins/directionality
/tinymce/plugins/emoticons
/tinymce/plugins/fullscreen
/tinymce/plugins/help
/tinymce/plugins/image
/tinymce/plugins/importcss
/tinymce/plugins/insertdatetime
/tinymce/plugins/link
/tinymce/plugins/lists
/tinymce/plugins/media
/tinymce/plugins/nonbreaking
/tinymce/plugins/pagebreak
/tinymce/plugins/preview
/tinymce/plugins/quickbars
/tinymce/plugins/save
/tinymce/plugins/searchreplace
/tinymce/plugins/table
/tinymce/plugins/template
/tinymce/plugins/visualblocks
/tinymce/plugins/visualchars
/tinymce/plugins/wordcount
/tinymce/skins
/tinymce/themes

Found on 2025-11-28 13:14

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 18.66.192.63
Domain: app.etter-berno.ch
Port: 443
URL: https://app.etter-berno.ch

First seen 2025-12-07 03:45
Last seen 2026-01-02 10:11
Open for 26 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
  Found on 2026-01-02 10:11
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 18.66.192.67
Domain: protechonline.net
Port: 443
URL: https://protechonline.net

First seen 2025-11-27 04:10
Last seen 2026-01-02 09:27
Open for 36 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f885b73a46e3e56ae65764b0bbcd0fc205a47dd3

GraphQL introspection enabled at /graphql
Types: 436 (by kind: ENUM: 29, INPUT_OBJECT: 107, INTERFACE: 21, OBJECT: 274, SCALAR: 5)
Operations:
- Query: Query | fields: availableStores, blogAuthor, blogCategories, blogCategory, blogComments
- Mutation: Mutation | fields: addBundleProductsToCart, addCommentToPost, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Detected: Magento

Found on 2026-01-02 09:27

961.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2a7d1ea7b3afd3179e10eba8770e5f407b555ecca

GraphQL introspection enabled at /graphql/api
Types: 436 (by kind: ENUM: 29, INPUT_OBJECT: 107, INTERFACE: 21, OBJECT: 274, SCALAR: 5)
Operations:
- Query: Query | fields: availableStores, blogAuthor, blogCategories, blogCategory, blogComments
- Mutation: Mutation | fields: addBundleProductsToCart, addCommentToPost, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Detected: Magento

Found on 2025-12-13 06:07

961.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f885b73a46e3e56ae65764b0bbcd0fc2a5b918ac

GraphQL introspection enabled at /graphql
Types: 436 (by kind: ENUM: 29, INPUT_OBJECT: 107, INTERFACE: 21, OBJECT: 274, SCALAR: 5)
Operations:
- Query: Query | fields: availableStores, blogAuthor, blogCategories, blogCategory, blogComments
- Mutation: Mutation | fields: addBundleProductsToCart, addCommentToPost, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-12-11 11:34

961.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-11-27 04:10

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.66.192.63
Domain: gameview.cc
Port: 443
URL: https://gameview.cc

First seen 2025-11-10 01:14
Last seen 2026-01-02 08:51
Open for 53 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652262022e87
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = ssh://git@git.halomobi.net:10022/h5game/h5lite_com.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-01-02 08:51
  
  279 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.66.192.63
Domain: teamfactory.io
Port: 443
URL: https://teamfactory.io

First seen 2025-11-26 01:42
Last seen 2026-01-02 06:52
Open for 37 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e94a7e05599e2172c1c34956ac754aa52a
```
Found 5 files trough .DS_Store spidering:

/css
/img
/img/portfolio
/js
/less
```
  Found on 2026-01-02 06:52
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.66.192.63
Domain: wisdome.world
Port: 443
URL: https://wisdome.world

First seen 2024-10-21 00:21
Last seen 2026-01-02 02:18
Open for 438 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c2f72f5fb2f72f5fb328bfaf6685e3a52d334b6fd408dba6f

Found 65 files trough .DS_Store spidering:

/.well-known
/assets
/assets/badges
/assets/badges/amog.svg
/assets/badges/blue.png
/assets/badges/developer.svg
/assets/badges/early_adopter.svg
/assets/badges/founder.svg
/assets/badges/green.png
/assets/badges/moderation.svg
/assets/badges/paw.svg
/assets/badges/raccoon.svg
/assets/badges/red.png
/assets/badges/revolt_r.svg
/assets/badges/supporter.svg
/assets/badges/translator.svg
/assets/badges/verified.svg
/assets/badges/yellow.png
/assets/icons
/assets/icons/android-chrome-192x192.png
/assets/icons/android-chrome-512x512.png
/assets/icons/apple-touch.png
/assets/icons/favicon-16x16.png
/assets/icons/favicon-32x32.png
/assets/icons/masking-512x512.png
/assets/icons/monochrome.svg
/assets/icons/mstile-150x150.png
/assets/logo.png
/assets/logo_new.png
/assets/logo_round.png
/assets/splashscreens
/assets/wide.svg
/assets/wide2.svg
/assets_default
/assets_default/badges
/assets_default/badges/amog.svg
/assets_default/badges/blue.png
/assets_default/badges/developer.svg
/assets_default/badges/early_adopter.svg
/assets_default/badges/founder.svg
/assets_default/badges/green.png
/assets_default/badges/moderation.svg
/assets_default/badges/paw.svg
/assets_default/badges/raccoon.svg
/assets_default/badges/red.png
/assets_default/badges/revolt_r.svg
/assets_default/badges/supporter.svg
/assets_default/badges/translator.svg
/assets_default/badges/verified.svg
/assets_default/badges/yellow.png
/assets_default/icons
/assets_default/icons/android-chrome-192x192.png
/assets_default/icons/android-chrome-512x512.png
/assets_default/icons/apple-touch.png
/assets_default/icons/favicon-16x16.png
/assets_default/icons/favicon-32x32.png
/assets_default/icons/masking-512x512.png
/assets_default/icons/monochrome.svg
/assets_default/icons/mstile-150x150.png
/assets_default/logo.png
/assets_default/logo_round.png
/assets_default/splashscreens
/assets_default/wide.png
/assets_default/wide.svg
/assets_default/wide2.svg

Found on 2026-01-02 02:18

Severity: low
Fingerprint: 5f32cf5d6962f09c87f05b7087f05b705330411dbf550b6b988af99000c15123

Found 26 files trough .DS_Store spidering:

/.well-known
/assets
/assets/badges
/assets/badges/amog.svg
/assets/badges/blue.png
/assets/badges/developer.svg
/assets/badges/early_adopter.svg
/assets/badges/founder.svg
/assets/badges/green.png
/assets/badges/moderation.svg
/assets/badges/paw.svg
/assets/badges/raccoon.svg
/assets/badges/red.png
/assets/badges/revolt_r.svg
/assets/badges/supporter.svg
/assets/badges/translator.svg
/assets/badges/verified.svg
/assets/badges/yellow.png
/assets/icons
/assets/logo.png
/assets/logo_new.png
/assets/logo_round.png
/assets/splashscreens
/assets/wide.svg
/assets/wide2.svg
/assets_default

Found on 2025-11-28 23:02

Severity: medium
Fingerprint: 5f32cf5d6962f09cfdf2c773fdf2c77384732ffe3d5cd9fa2f682dc5b6ed1f07

Found 50 files trough .DS_Store spidering:

/.well-known
/assets
/assets/badges
/assets/icons
/assets/icons/android-chrome-192x192.png
/assets/icons/android-chrome-512x512.png
/assets/icons/apple-touch.png
/assets/icons/favicon-16x16.png
/assets/icons/favicon-32x32.png
/assets/icons/masking-512x512.png
/assets/icons/monochrome.svg
/assets/icons/mstile-150x150.png
/assets/logo.png
/assets/logo_new.png
/assets/logo_round.png
/assets/splashscreens
/assets/wide.svg
/assets/wide2.svg
/assets_default
/assets_default/badges
/assets_default/badges/amog.svg
/assets_default/badges/blue.png
/assets_default/badges/developer.svg
/assets_default/badges/early_adopter.svg
/assets_default/badges/founder.svg
/assets_default/badges/green.png
/assets_default/badges/moderation.svg
/assets_default/badges/paw.svg
/assets_default/badges/raccoon.svg
/assets_default/badges/red.png
/assets_default/badges/revolt_r.svg
/assets_default/badges/supporter.svg
/assets_default/badges/translator.svg
/assets_default/badges/verified.svg
/assets_default/badges/yellow.png
/assets_default/icons
/assets_default/icons/android-chrome-192x192.png
/assets_default/icons/android-chrome-512x512.png
/assets_default/icons/apple-touch.png
/assets_default/icons/favicon-16x16.png
/assets_default/icons/favicon-32x32.png
/assets_default/icons/masking-512x512.png
/assets_default/icons/monochrome.svg
/assets_default/icons/mstile-150x150.png
/assets_default/logo.png
/assets_default/logo_round.png
/assets_default/splashscreens
/assets_default/wide.png
/assets_default/wide.svg
/assets_default/wide2.svg

Found on 2025-02-04 10:25

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 18.66.192.63
Domain: claytoncityflorist.com
Port: 443
URL: https://claytoncityflorist.com

First seen 2025-11-30 11:23
Last seen 2025-12-08 23:02
Open for 8 days
- Severity: medium
  Fingerprint: c2db3a1c40d490dbf8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2
```
GraphQL introspection enabled at /graphql/api
```
  Found on 2025-12-08 23:02
- Severity: medium
  Fingerprint: c2db3a1c40d490dbf8cbe7e208a11888215c6dac8808add1a2a429196ed1a0c1
```
GraphQL introspection enabled at /graphql/api
Types: 397 (by kind: ENUM: 41, INPUT_OBJECT: 86, INTERFACE: 24, OBJECT: 241, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToWishlist
Directives: deprecated, include, oneOf, skip (total: 4)
```
  Found on 2025-11-30 11:23
  
  677.8 kBytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 18.66.192.104
Domain: h4y5t3l8b7wx.com
Port: 80
URL: http://h4y5t3l8b7wx.com

First seen 2025-08-25 05:40
Last seen 2025-11-07 08:56
Open for 74 days
- Severity: critical
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652258c05b03
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://root:Hys581x9505!@gituu23mm.com:8082/root/proxy-web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2025-11-07 08:56
  
  283 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e759c9ce
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://www.yccom5mon.com/root/proxy-web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2025-08-29 07:11
  
  265 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 18.66.192.63
Domain: y9n4k5s1q8p3.com
Port: 80
URL: http://y9n4k5s1q8p3.com

First seen 2025-08-25 05:40
Last seen 2025-11-07 08:11
Open for 74 days
- Severity: critical
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652258c05b03
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://root:Hys581x9505!@gituu23mm.com:8082/root/proxy-web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2025-11-07 08:11
  
  283 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e759c9ce
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://www.yccom5mon.com/root/proxy-web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2025-08-29 04:55
  
  265 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 18.66.192.104
Domain: t7y9x2r3b5l8n.com
Port: 443
URL: https://t7y9x2r3b5l8n.com

First seen 2025-08-25 05:40
Last seen 2025-11-06 15:07
Open for 73 days
- Severity: critical
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652258c05b03
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://root:Hys581x9505!@gituu23mm.com:8082/root/proxy-web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2025-11-06 15:07
  
  283 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e759c9ce
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://www.yccom5mon.com/root/proxy-web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2025-08-29 04:55
  
  265 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 18.66.192.63
Domain: c5m7p8x4z2v1.com
Port: 80
URL: http://c5m7p8x4z2v1.com

First seen 2025-08-25 05:40
Last seen 2025-11-05 03:41
Open for 71 days
- Severity: critical
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652258c05b03
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://root:Hys581x9505!@gituu23mm.com:8082/root/proxy-web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2025-11-05 03:41
  
  283 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e759c9ce
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://www.yccom5mon.com/root/proxy-web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2025-08-29 07:11
  
  265 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.66.192.63
Domain: insights.dev.vquip.com
Port: 443
URL: https://insights.dev.vquip.com

First seen 2025-05-11 02:43
Last seen 2025-06-16 15:42
Open for 36 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fb246cfc7166e49b34fae30514fae3051
```
Found 3 files trough .DS_Store spidering:

/img
/img/logo
/img/thumbs
```
  Found on 2025-06-16 15:42
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.66.192.63
Domain: xg.a331pzf.cc
Port: 443
URL: https://xg.a331pzf.cc

First seen 2024-03-13 13:21
Last seen 2024-06-10 13:02
Open for 88 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652208309e9a
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://cdn-tv.hnmting.com/69cy/69cy_web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-06-10 13:02
  
  269 Bytes
Create report

Open service 18.66.192.63:443 · www.thedigitalpaygrowth.com

2026-01-13 00:53

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Tue, 13 Jan 2026 00:53:10 GMT
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Server: nginx
Cache-Control: no-cache, private
Vary: Accept-Encoding
Via: 1.1 8c1abfbb8460bed752668233d296dba8.cloudfront.net (CloudFront)
Set-Cookie: v=01KETDF9C660J73VMJJGQR8N9B; expires=Sun, 13 Jan 2036 00:53:10 GMT; Max-Age=315532800; path=/; secure; httponly; samesite=lax
X-Cache: Miss from cloudfront
X-Amz-Cf-Pop: MUC50-P1
X-Amz-Cf-Id: KkMmNrZViBffy6sB62mRcZUfK7i0hOdcc_QYfSpymao1mxrVOHyFIA==

Found 7 hours ago by HttpPlugin

Host 18.66.192.63

United States

Software information

Swagger API description is publicly available

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

GraphQL introspection is enabled.

MacOS file listing through .DS_Store file

GraphQL introspection is enabled.

GraphQL introspection is enabled.

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

GraphQL introspection is enabled.

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed