LeakIX - Host 20.105.224.34

Host 20.105.224.34

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Debian

Software information

Apache Apache 2.4.62

tcp/443

Apache Apache

tcp/443

Jetty(10.0.20)

tcp/443

Jetty(10.0.25)

tcp/443

Kestrel Kestrel

tcp/443 tcp/80

colosseum

tcp/443

gunicorn

tcp/443 tcp/80

nginx nginx 1.28.0

tcp/443

nginx nginx 1.29.4

tcp/443

nginx nginx 1.26.3

tcp/443 tcp/80

nginx nginx

tcp/443

nginx nginx 1.28.1

tcp/443

uvicorn

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: orderapi.transfera.com
Port: 443
URL: https://orderapi.transfera.com

First seen 2025-10-17 07:34
Last seen 2026-02-09 22:48
Open for 115 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549ec4ac8bdc6c826f08c1d2965802951366b17549a

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/returnshipments/search
GET /api/returnshipments/{id}
GET /api/shipments/byexternalnumber
GET /api/shipments/downloadlabels
GET /api/shipments/downloadlabelsbase64
GET /api/shipments/downloadlmclabel
GET /api/shipments/search
GET /api/shipments/v2/shipmentevents
GET /api/shipments/{externalNumber}/shipmentevents
GET /api/shipments/{id}
POST /api/returnShipments
POST /api/shipments
POST /api/shipments/publish-labels

Found on 2026-02-09 22:48

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549ec4ac8bdc6c826f08c1d2965802951362382ea67

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/returnshipments/search
GET /api/returnshipments/{id}
GET /api/shipments/byexternalnumber
GET /api/shipments/downloadlabels
GET /api/shipments/downloadlabelsbase64
GET /api/shipments/downloadlmclabel
GET /api/shipments/search
GET /api/shipments/v2/shipmentevents
GET /api/shipments/{externalNumber}/shipmentevents
GET /api/shipments/{id}
POST /api/returnShipments
POST /api/shipments

Found on 2025-12-19 04:24

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: api-test.innothyrogen.com
Port: 443
URL: https://api-test.innothyrogen.com

First seen 2025-12-20 19:12
Last seen 2026-02-09 22:40
Open for 51 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493b3b73507b14a427a636a7c479b8ad63549d958e

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /
GET /api/Auth/authfirebasetoken
GET /api/Auth/firebaseemail2register
GET /api/Dashboard/disease-autoimune
GET /api/Dashboard/disease-bolest-stitnjace
GET /api/Dashboard/disease-bolest-stitnjace-cumulative
GET /api/Dashboard/duplicate-patients
GET /api/Dashboard/duplicate-questionnaires
GET /api/Dashboard/export-patients
GET /api/Dashboard/export-questionnaires
GET /api/Dashboard/orphaned-patients
GET /api/Dashboard/orphaned-questionnaires
GET /api/Dashboard/patients-karcinom
GET /api/Dashboard/patients-nodes-details
GET /api/Dashboard/patients-other-details
GET /api/Dashboard/questionnaires-non-croatian-citizenship
GET /api/Dashboard/questionnaires-non-croatian-nationality
GET /api/Dashboard/statistics
GET /api/Organization
GET /api/Patient
GET /api/Patient/{id}
GET /api/Questionare
GET /api/Questionare/{id}
GET /api/Test/CreateUserAndSendMail
GET /api/Test/GetConfigValue
GET /api/Test/GetDbValue
GET /api/User
GET /api/User/me
GET /api/User/{id}
GET /robots933456.txt
POST /api/User/{id}/reset-password

Found on 2026-02-09 22:40

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493b3b73507b14a427a636a7c479b8ad63c886f397

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /
GET /api/Auth/authfirebasetoken
GET /api/Auth/firebaseemail2register
GET /api/Dashboard/disease-autoimune
GET /api/Dashboard/disease-bolest-stitnjace
GET /api/Dashboard/duplicate-patients
GET /api/Dashboard/duplicate-questionnaires
GET /api/Dashboard/export-patients
GET /api/Dashboard/export-questionnaires
GET /api/Dashboard/orphaned-patients
GET /api/Dashboard/orphaned-questionnaires
GET /api/Dashboard/patients-karcinom
GET /api/Dashboard/patients-nodes-details
GET /api/Dashboard/patients-other-details
GET /api/Dashboard/statistics
GET /api/Organization
GET /api/Patient
GET /api/Patient/{id}
GET /api/Questionare
GET /api/Questionare/{id}
GET /api/Test/CreateUserAndSendMail
GET /api/Test/GetConfigValue
GET /api/Test/GetDbValue
GET /api/User
GET /api/User/me
GET /api/User/{id}
GET /robots933456.txt
POST /api/User/{id}/reset-password

Found on 2026-01-23 13:14

Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d609b0a7cdb93dc3a8ea13ed82d97cabf32997e577e

Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /
GET /api/Auth/authfirebasetoken
GET /api/Auth/firebaseemail2register
GET /api/Dashboard/disease-autoimune
GET /api/Dashboard/disease-bolest-stitnjace
GET /api/Dashboard/duplicate-patients
GET /api/Dashboard/duplicate-questionnaires
GET /api/Dashboard/export-patients
GET /api/Dashboard/export-questionnaires
GET /api/Dashboard/orphaned-patients
GET /api/Dashboard/orphaned-questionnaires
GET /api/Dashboard/patients-karcinom
GET /api/Dashboard/patients-nodes-details
GET /api/Dashboard/patients-other-details
GET /api/Dashboard/statistics
GET /api/Organization
GET /api/Patient
GET /api/Patient/{id}
GET /api/Questionare
GET /api/Questionare/{id}
GET /api/Test/CreateUserAndSendMail
GET /api/Test/GetConfigValue
GET /api/Test/GetDbValue
GET /api/User
GET /api/User/me
GET /api/User/{id}
GET /robots933456.txt
POST /api/User/{id}/reset-password

Found on 2026-01-10 01:02

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: push-notification-api.mobil.e-shuttle.cloud
Port: 443
URL: https://push-notification-api.mobil.e-shuttle.cloud

First seen 2025-11-16 12:49
Last seen 2026-02-09 17:13
Open for 85 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549e47c72b1ac4aeea235172940c42699b371f0d629
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /public-key
GET /subscriptions
GET /subscriptions/check
GET /subscriptions/check-by-device
POST /send-notifications
POST /send-notifications/{deviceId}
```
  Found on 2026-02-09 17:13
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d60792cd8fe77adac696c61c387e2ec9b384656d974
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /public-key
GET /subscriptions
GET /subscriptions/check
GET /subscriptions/check-by-device
POST /send-notifications
POST /send-notifications/{deviceId}
```
  Found on 2025-12-10 18:15
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549e47c72b1ac4aeea2c230268e2cc897022cc89702
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /public-key
GET /subscriptions
POST /send-notifications
POST /send-notifications/{deviceId}
```
  Found on 2025-11-16 12:49
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: preprod.api.payflip.be
Port: 80
URL: http://preprod.api.payflip.be

First seen 2026-01-04 08:04
Last seen 2026-02-09 09:23
Open for 36 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43e9d43f79bc87110dfa5c6847176f7bc0bb0eadd4

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/budgets/{budgetId}
GET /v1/checkouts/{checkoutId}
GET /v1/choices/{choiceId}
GET /v1/choices/{choiceId}/order
GET /v1/choices/{choiceId}/payment-orders
GET /v1/choices/{choiceId}/transactions
GET /v1/companies/external-id/{externalId}
GET /v1/companies/{companyId}
GET /v1/companies/{companyId}/admins
GET /v1/companies/{companyId}/budgets
GET /v1/companies/{companyId}/choices
GET /v1/companies/{companyId}/employees
GET /v1/employees/external-id/{externalId}
GET /v1/employees/{employeeId}
GET /v1/employees/{employeeId}/benefits
GET /v1/employees/{employeeId}/budget/{budgetId}/payment-orders
GET /v1/employees/{employeeId}/budgets
GET /v1/employees/{employeeId}/budgets/{budgetId}
GET /v1/employees/{employeeId}/budgets/{budgetId}/transactions
GET /v1/employees/{employeeId}/choices
GET /v1/employees/{employeeId}/wage-contracts
GET /v1/employees/{employeeId}/wage-contracts/current
GET /v1/top-up-orders/{topUpOrderId}
GET /v1/users/auth-id/{authId}
GET /v1/users/external-id/{externalId}
GET /v1/users/{userId}
GET /v1/wage-contracts/{wageContractId}
POST /v1/auth/authenticate
POST /v1/auth/logout
POST /v1/checkouts
POST /v1/checkouts/{checkoutId}/cancel
POST /v1/choices/{choiceId}/approve
POST /v1/choices/{choiceId}/order/complete
POST /v1/choices/{choiceId}/reject
POST /v1/choices/{choiceId}/terminate
POST /v1/companies
POST /v1/companies/{companyId}/employees/import-by-external-id
POST /v1/companies/{companyId}/employees/import-wage-contracts
POST /v1/employees/{employeeId}/budget/{budgetId}/deallocate
POST /v1/employees/{employeeId}/budgets/{budgetId}/deactivate
POST /v1/employees/{employeeId}/budgets/{budgetId}/top-up-orders
POST /v1/integrations/{integrationId}/mark-installed
POST /v1/users

Found on 2026-02-09 09:23

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: beta-epsiloniris.epsilonnet.gr
Port: 443
URL: https://beta-epsiloniris.epsilonnet.gr

First seen 2026-01-11 18:14
Last seen 2026-02-02 12:44
Open for 21 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-02 12:44
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: triplebg001-api-v2.tripleplus.io
Port: 443
URL: https://triplebg001-api-v2.tripleplus.io

First seen 2025-12-02 13:09
Last seen 2026-02-02 07:32
Open for 61 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-02 07:32
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: ba.services.zvoove-staging.cloud
Port: 443
URL: https://ba.services.zvoove-staging.cloud

First seen 2025-12-29 11:20
Last seen 2026-02-02 06:17
Open for 34 days

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2026-02-02 06:17

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035494d5c81c91728f838239857574830624f37d25040

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/v2/ba/DeleteModel
DELETE /api/v2/baepcert/DeleteModel
GET /api/jobad/GetJobAdProducts
GET /api/v2/ba/GetAvailableJobPositionProposalFilenames
GET /api/v2/ba/GetJobPositionProposalByFilename
GET /api/v2/ba/GetLatestPublishedJobsExcel
GET /api/v2/ba/GetLatestZip
GET /api/v2/ba/Ping
GET /api/v2/baepcert/GetCertDates
GET /api/v2/baepcert/GetLatestPublishedJobsExcel
GET /api/v2/baepcert/GetLatestZip
GET /api/v2/baepcert/Ping
GET /api/v2/bakatalog/GetBeruf
GET /api/v2/bakatalog/GetBerufByIds
GET /api/v2/bakatalog/GetBrancheByKode
GET /api/v2/bakatalog/GetBranchen
GET /api/v2/bakatalog/GetExternalPartner
GET /api/v2/bakatalog/GetPlzOrt
GET /api/v2/bakatalog/GetRegions
GET /api/v2/bakatalog/GetSkill
GET /api/v2/bakatalog/GetSkillByIds
POST /api/v2/ba/GenerateModel
POST /api/v2/ba/GetErrors
POST /api/v2/ba/GetErrorsByFilenames
POST /api/v2/ba/PostModel
POST /api/v2/ba/ValidateModel
POST /api/v2/ba/VerifyCertificat
POST /api/v2/baepcert/GenerateModel
POST /api/v2/baepcert/GetErrors
POST /api/v2/baepcert/GetErrorsByFilenames
POST /api/v2/baepcert/PostModel
POST /api/v2/baepcert/ValidateModel

Found on 2026-01-23 00:06

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: ka.api.dbd-online.de
Port: 443
URL: https://ka.api.dbd-online.de

First seen 2025-11-18 09:34
Last seen 2026-02-02 02:52
Open for 75 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035499c19afec7c862252acd4627b30081405cac99c68

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/v1/auth/login/{clientSessionId}
GET /api/v1/auth/logout/{clientSessionId}
GET /api/v1/auth/token/{clientSessionId}
GET /api/v1/element/current-dbd-key/{clientSessionId}
GET /api/v1/session/home-url/{clientSessionId}
GET /api/v1/settings/all/{partnerId}
GET /api/v1/settings/price-range/{clientSessionId}
GET /api/v1/settings/region/{clientSessionId}
GET /api/v1/settings/site-equipment/{clientSessionId}
GET /api/v1/settings/version
POST /api/v1/ai/set-interactive-data
POST /api/v1/dbdkey/calculation-data
POST /api/v1/dbdkey/check
POST /api/v1/dbdkey/description
POST /api/v1/dbdkey/features
POST /api/v1/dbdkey/features-set
POST /api/v1/dbdkey/refresh
POST /api/v1/dbdkey/taxonomies
POST /api/v1/element/set-dbd-key
POST /api/v1/session/begin-session
POST /api/v1/session/end-session/{clientSessionId}
POST /api/v1/settings/price-range/{clientSessionId}/{priceRange}
POST /api/v1/settings/site-equipment/{clientSessionId}/{siteEquipment}

Found on 2026-02-02 02:52

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: pepl.eurospar-friedl.at
Port: 443
URL: https://pepl.eurospar-friedl.at

First seen 2025-12-30 05:48
Last seen 2026-02-02 01:41
Open for 33 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-02 01:41
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: alarmmonitor.stemtrax.ch
Port: 443
URL: https://alarmmonitor.stemtrax.ch

First seen 2026-01-11 15:01
Last seen 2026-02-02 00:23
Open for 21 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354934c887d101924ffd56965bd85c2213e15fb3d4be
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/alarms
GET /api/alarms/{id}
GET /api/application-info
GET /api/auth/info
GET /api/sessions
GET /api/sessions/user
GET /api/test/data-seed
GET /api/test/exception
POST /api/activity-log
POST /api/alarm-client
POST /api/auth/login
POST /api/auth/logout
POST /api/test/sendpush
PUT /api/alarm-client/heartbeat
PUT /api/alarms/{id}/acknowledge
PUT /api/alarms/{id}/reject
PUT /api/sessions/heartbeat
PUT /api/sessions/messagingToken
PUT /api/sessions/settings
```
  Found on 2026-02-02 00:23
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-22 21:32
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: api-test.simarine.net
Port: 443
URL: https://api-test.simarine.net

First seen 2025-12-29 14:47
Last seen 2026-02-01 23:33
Open for 34 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035499aee10551943698271c51352e1a6fececd52e870

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Agreement
GET /api/Agreement/active
GET /api/Agreement/required
GET /api/Agreement/required_count
GET /api/Agreement/{id}
GET /api/AuthorizationDemo/admin/system-status
GET /api/AuthorizationDemo/device/{deviceSerial}/access-required
GET /api/AuthorizationDemo/device/{deviceSerial}/owner-only
GET /api/Certificate
GET /api/Certificate/certificateFile
GET /api/Device
GET /api/Device/registered
GET /api/Device/{deviceSerial}/online
GET /api/Device/{deviceSerial}/status
GET /api/Feedback
GET /api/Integration/certendpoint
GET /api/Integration/endpoint
GET /api/Integration/password
GET /api/Integration/port
GET /api/Integration/username
GET /api/MqttStatus/connection
GET /api/MqttStatus/devices
GET /api/MqttStatus/status
GET /api/MqttStatus/subscriptions
GET /api/Profile/profile
GET /api/Test/user-info
POST /api/Agreement/consent
POST /api/Device/delete
POST /api/Device/register
POST /api/Device/setascurrentdevice
POST /api/Device/{deviceSerial}/commands
POST /api/Device/{deviceSerial}/configure
POST /api/Device/{deviceSerial}/firmware/update
POST /api/Test/join-device-group/{deviceSerial}
POST /api/Test/simulate-signalr-call

Found on 2026-02-01 23:33

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: core.dev.analogio.dk
Port: 443
URL: https://core.dev.analogio.dk

First seen 2025-12-20 08:06
Last seen 2026-02-01 22:19
Open for 43 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035492280f62c381e2eb1a8f95be0ec48471b5680ec15
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/v1/Account
GET /api/v1/AppConfig
GET /api/v1/CoffeeCards
GET /api/v1/Leaderboard
GET /api/v1/Ping
GET /api/v1/Products
GET /api/v1/Products/app
GET /api/v1/Programmes
GET /api/v1/Purchases
GET /api/v1/Tickets
POST /api/v1/Account/forgotpassword
POST /api/v1/Account/login
POST /api/v1/Account/register
POST /api/v1/MobilePay/complete
POST /api/v1/MobilePay/initiate
POST /api/v1/Purchases/issueproduct
POST /api/v1/Purchases/redeemvoucher
POST /api/v1/Tickets/use
POST /api/v1/Tickets/useMultiple
```
  Found on 2026-02-01 22:19
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 09:38
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 20.105.224.34
Domain: undppams.mw
Port: 443
URL: https://undppams.mw

First seen 2025-09-08 04:27
Last seen 2026-01-23 05:57
Open for 137 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652289752898
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[gui]
	wmstate = normal
	geometry = 893x415+130+130 175 196
[remote "origin"]
	url = https://github.com/thomus265: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@github.com/thomus265/undppams.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2026-01-23 05:57
  
  363 Bytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 20.105.224.34
Domain: api.inhouse.scanreach.com
Port: 443
URL: https://api.inhouse.scanreach.com

First seen 2025-12-24 06:53
Last seen 2026-01-23 05:31
Open for 29 days

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2bebf0f58976d62bc5fe0501837bb84b46ba73301

GraphQL introspection enabled at /graphql/api
Types: 144 (by kind: ENUM: 15, INPUT_OBJECT: 83, OBJECT: 37, SCALAR: 9)
Operations:
- Query: GraphQLQuery | fields: issues, nodes, sites, version, views
Directives: include, skip (total: 2)

Readable stores: 1
version (args: none) : versionTag=x.x.x buildId=44950 buildDate=2025.03.26 genericApiLibVersion=1.7.1

Found on 2026-01-23 05:31

215.7 kBytes 4 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa374b0c8ef20f870bd1ad405215573d68537e3263a

GraphQL introspection enabled at /graphql
Types: 144 (by kind: ENUM: 15, INPUT_OBJECT: 83, OBJECT: 37, SCALAR: 9)
Operations:
- Query: GraphQLQuery | fields: issues, nodes, sites, version, views
Directives: include, skip (total: 2)

Readable stores: 1
version (args: none) : genericApiLibVersion=1.7.1 versionTag=x.x.x buildId=44950 buildDate=2025.03.26

Found on 2026-01-16 19:30

215.7 kBytes 4 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa374b0c8ef20f870bd1ad405215573d68531bbd706

GraphQL introspection enabled at /graphql
Types: 144 (by kind: ENUM: 15, INPUT_OBJECT: 83, OBJECT: 37, SCALAR: 9)
Operations:
- Query: GraphQLQuery | fields: issues, nodes, sites, version, views
Directives: include, skip (total: 2)

Readable stores: 1
version (args: none) : versionTag=x.x.x buildId=44950 buildDate=2025.03.26 genericApiLibVersion=1.7.1

Found on 2026-01-02 04:16

215.7 kBytes 4 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-12-30 08:57

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: api.inhouse.scanreach.com
Port: 443
URL: https://api.inhouse.scanreach.com

First seen 2025-12-22 06:28
Last seen 2026-01-23 05:31
Open for 31 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549020b2cdb240a96f193756850dc3c34e6096e919f
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/v1/DashboardConfig
GET /api/v1/FuelTypeLog
GET /api/v1/Issue
GET /api/v1/Node
GET /api/v1/Person
GET /api/v1/Person/BoardingActions
GET /api/v1/Person/GangwayDropoffReport
GET /api/v1/Person/GetBoardingActions
GET /api/v1/SensorAlarm
GET /api/v1/SensorAlarmConfig
GET /api/v1/SensorConfiguration
GET /api/v1/SensorData/dataSource
GET /api/v1/SensorData/measurement
GET /api/v1/SiteLocation/geo
GET /api/v1/Sites
GET /api/v1/SpatialData
GET /api/v1/Version
PUT /api/v1/DashboardConfig/{dashboardConfigId}
```
  Found on 2026-01-23 05:31
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 18:57
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: preprod.api.payflip.be
Port: 443
URL: https://preprod.api.payflip.be

First seen 2026-01-04 08:04
Last seen 2026-01-22 21:38
Open for 18 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43e9d43f79bc87110dfa5c6847176f7bc0bb0eadd4

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/budgets/{budgetId}
GET /v1/checkouts/{checkoutId}
GET /v1/choices/{choiceId}
GET /v1/choices/{choiceId}/order
GET /v1/choices/{choiceId}/payment-orders
GET /v1/choices/{choiceId}/transactions
GET /v1/companies/external-id/{externalId}
GET /v1/companies/{companyId}
GET /v1/companies/{companyId}/admins
GET /v1/companies/{companyId}/budgets
GET /v1/companies/{companyId}/choices
GET /v1/companies/{companyId}/employees
GET /v1/employees/external-id/{externalId}
GET /v1/employees/{employeeId}
GET /v1/employees/{employeeId}/benefits
GET /v1/employees/{employeeId}/budget/{budgetId}/payment-orders
GET /v1/employees/{employeeId}/budgets
GET /v1/employees/{employeeId}/budgets/{budgetId}
GET /v1/employees/{employeeId}/budgets/{budgetId}/transactions
GET /v1/employees/{employeeId}/choices
GET /v1/employees/{employeeId}/wage-contracts
GET /v1/employees/{employeeId}/wage-contracts/current
GET /v1/top-up-orders/{topUpOrderId}
GET /v1/users/auth-id/{authId}
GET /v1/users/external-id/{externalId}
GET /v1/users/{userId}
GET /v1/wage-contracts/{wageContractId}
POST /v1/auth/authenticate
POST /v1/auth/logout
POST /v1/checkouts
POST /v1/checkouts/{checkoutId}/cancel
POST /v1/choices/{choiceId}/approve
POST /v1/choices/{choiceId}/order/complete
POST /v1/choices/{choiceId}/reject
POST /v1/choices/{choiceId}/terminate
POST /v1/companies
POST /v1/companies/{companyId}/employees/import-by-external-id
POST /v1/companies/{companyId}/employees/import-wage-contracts
POST /v1/employees/{employeeId}/budget/{budgetId}/deallocate
POST /v1/employees/{employeeId}/budgets/{budgetId}/deactivate
POST /v1/employees/{employeeId}/budgets/{budgetId}/top-up-orders
POST /v1/integrations/{integrationId}/mark-installed
POST /v1/users

Found on 2026-01-22 21:38

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: disease-ocr-dev.kennedysiq.com
Port: 443
URL: https://disease-ocr-dev.kennedysiq.com

First seen 2026-01-02 18:06
Last seen 2026-01-16 15:07
Open for 13 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d6083d726071b944d3d73e014e1a121a5c6d1541e9c
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /ContainerLiveness
GET /ContainerReadiness
GET /ready
GET /records/usage-logs
GET /records/usage-logs/{month}/{year}
GET /status
GET /vision/v3.2/read/analyzeResults/{rId}
POST /authentication/renew
POST /vision/v3.2/read/analyze
POST /vision/v3.2/read/syncAnalyze
POST /webhook/batchnotification
POST /webhook/batchoutput
```
  Found on 2026-01-16 15:07
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: api-ext-test.crossvertise.com
Port: 443
URL: https://api-ext-test.crossvertise.com

First seen 2025-12-21 04:33
Last seen 2026-01-16 14:46
Open for 26 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354977346cbea6e9af88f48c179ee9830a4ddc2c700a
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /v1/Auth/login
POST /v1/OrganizationUnit
POST /v1/notifications/mail-delegation
POST /v1/notifications/user-data-changed
POST /v1/notifications/user-invite-result
POST /v1/notifications/user-merge
POST /v1/notifications/user-status-changed
PUT /v1/OrganizationUnit/{id}
```
  Found on 2026-01-16 14:46
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: valuecards.visitgroup.com
Port: 443
URL: https://valuecards.visitgroup.com

First seen 2026-01-11 14:28
Last seen 2026-01-16 14:43
Open for 5 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-16 14:43
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: api.bithabit.me
Port: 443
URL: https://api.bithabit.me

First seen 2026-01-11 17:10
Last seen 2026-01-16 14:41
Open for 4 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035492f92d38db93495e9d1e2baa4fbb9e7168621b3bb

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /AppAuth/seed
GET /AppAuth/seed2
GET /AppAuth/seed3
GET /AppAuth/seed4
GET /AppAuth/sendverification
GET /AppAuth/verifynumber
GET /api/AppLanguage
GET /api/AppLanguage/languagelist
GET /api/AppLanguage/languages
GET /api/AppLanguage/staticfields
GET /api/AppLanguage/studylanguages
GET /api/AppLanguage/translations
GET /api/Browse
GET /api/Browse/detail
GET /api/BulkUserImport
GET /api/DataExport/exportevent
GET /api/DataExport/exportquestion
GET /api/DataExport/exportsess
GET /api/DataExport/exportusers
GET /api/DataExport/exportusraction
GET /api/DataExport/exportusrhabit
GET /api/Feedback
GET /api/Goal
GET /api/Goal/list
GET /api/Habit
GET /api/Habit/habitcat
GET /api/Habit/list
GET /api/Habit/selectlist
GET /api/HabitContext
GET /api/HabitContext/list
GET /api/HabitGroup
GET /api/HabitGroup/list
GET /api/Monitor
GET /api/Monitor/context
GET /api/Monitor/gethabitschedule
GET /api/Monitor/habitnotes
GET /api/Monitor/performances
GET /api/Monitor/totalselected
GET /api/Notification
GET /api/Notification/reminder
GET /api/PushNotification/send
GET /api/PushNotification/vapidpublickey
GET /api/Question
GET /api/Question/list
GET /api/QuestionOption
GET /api/QuestionOption/list
GET /api/Questionnaire
GET /api/Questionnaire/list
GET /api/Recommendation
GET /api/Score
GET /api/Score/leaderboard
GET /api/SocialFeed
GET /api/SocialFeedComment
GET /api/Study
GET /api/Study/studylist
GET /api/Summary
GET /api/SuperGroup
GET /api/SuperGroup/list
GET /api/Tag
GET /api/Tag/list
GET /api/User/adminstudies
GET /api/User/pendingtasks
GET /api/User/userlist
GET /api/UserGoal
GET /api/UserProfile
GET /api/UserProfile/profile
GET /api/UserQuestionnaire
POST /AppAuth/loginapi
POST /AppAuth/sendactivation
POST /AppAuth/sendactivationtoall
POST /api/Log
POST /api/Log/trackevent
POST /api/Notification/dr
POST /api/PushNotification/subscribe
POST /api/SuggestHabit
POST /api/User/updatelang
POST /api/User/updateuserstudy
PUT /AppAuth/register
PUT /api/Monitor/associatecontext
PUT /api/Monitor/discontinue
PUT /api/Monitor/movehabit
PUT /api/Monitor/pending
PUT /api/Monitor/savenotes
PUT /api/Monitor/saveschedule
PUT /api/User
PUT /api/UserQuestionnaire/skip

Found on 2026-01-16 14:41

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: jirasync.asts.es
Port: 443
URL: https://jirasync.asts.es

First seen 2026-01-05 06:43
Last seen 2026-01-16 13:53
Open for 11 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035495de474797e6e74a39689ba5551e622eb51e622eb
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /api/v1/issues/issue/comment/add
POST /api/v1/issues/issue/comment/update
POST /api/v1/issues/issue/transition
POST /api/v1/issues/updateAstsIssue
```
  Found on 2026-01-16 13:53
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: savings.ctwo.com
Port: 443
URL: https://savings.ctwo.com

First seen 2025-12-11 09:36
Last seen 2026-01-16 12:02
Open for 36 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549391419c4b3c80926b5ff5c3f9a48f7548b57702a
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Calculator/SavingsBreakdown
GET /api/References
GET /api/Reports
GET /api/Reports/ListReportPerEmail
GET /api/Reports/ShowReport
GET /api/Reports/{fileName}
POST /api/Calculator/calculate
POST /api/Calculator/calculateLive
POST /api/Calculator/calculateSimple
POST /api/Calculator/saveLiveCalculation
POST /api/Reports/FetchReport
POST /api/Reports/RegisterNote
POST /api/Reports/RequestReport
```
  Found on 2026-01-16 12:02
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.34
Domain: showcase.deheus-apps.com
Port: 443
URL: https://showcase.deheus-apps.com

First seen 2025-11-20 09:52
Last seen 2026-01-16 10:34
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-16 10:34
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.105.224.34
Domain: www.mebfiscal.com
Port: 443
URL: https://www.mebfiscal.com

First seen 2024-04-18 11:13
Last seen 2026-01-16 01:37
Open for 637 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d819fde85819fde85819fde85819fde85
```
Found 1 files trough .DS_Store spidering:

/js
```
  Found on 2026-01-16 01:37
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.105.224.34
Domain: mebfiscal.com
Port: 443
URL: https://mebfiscal.com

First seen 2024-04-18 10:57
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d819fde85819fde85819fde85819fde85
```
Found 1 files trough .DS_Store spidering:

/js
```
  Found on 2024-04-18 10:57
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.105.224.34
Domain: www.mebfiscal.pt
Port: 443
URL: https://www.mebfiscal.pt

First seen 2024-03-22 00:05
Last seen 2024-04-10 17:34
Open for 19 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d819fde85819fde85819fde85819fde85
```
Found 1 files trough .DS_Store spidering:

/js
```
  Found on 2024-04-10 17:34
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.105.224.34
Domain: mebfiscal.pt
Port: 443
URL: https://mebfiscal.pt

First seen 2024-03-21 23:54
Last seen 2024-04-10 17:16
Open for 19 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d819fde85819fde85819fde85819fde85
```
Found 1 files trough .DS_Store spidering:

/js
```
  Found on 2024-04-10 17:16
Create report

Open service 20.105.224.34:443 · join-accept.umob.app

2026-02-09 21:30

HTTP/1.1 403 Site Disabled
Content-Length: 1148
Connection: close
Content-Type: text/html
Date: Mon, 09 Feb 2026 21:31:16 GMT

Page title: Web App - Unavailable

<!DOCTYPE html><html><head><title>Web App - Unavailable</title><style type="text/css">html{height:100%;width:100%;}#feature{width:960px;margin:95px auto 0 auto;overflow:auto;}#content{font-family:"Segoe UI";font-weight:normal;font-size:22px;color:#fff;float:left;width:460px;margin-top:68px;margin-left:0px;vertical-align:middle;}#content h1{font-family:"Segoe UI Light";color:#fff;font-weight:normal;font-size:60px;line-height:48pt;width:800px;}p a,p a:visited,p a:active,p a:hover{color:#fff;}</style></head><body bgcolor="#00abec"><div id="feature"><div id="content"><h1 id="unavailable">Error 403 - This web app is stopped.</h1><p id="tryAgain">The web app you have attempted to reach is currently stopped and does not accept any requests. Please try to reload the page or visit it again soon.</p><p id="toAdmin">If you are the web app administrator, please find the common 403 error scenarios and resolution <a href="https://go.microsoft.com/fwlink/?linkid=2095007" target="_blank">here</a>. For further troubleshooting tools and recommendations, please visit <a href="https://portal.azure.com/">Azure Portal</a>.</p></div></div></body></html>

Found 2 days ago by HttpPlugin

Host 20.105.224.34

The Netherlands

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Git configuration and history exposed

GraphQL introspection is enabled.

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file