LeakIX - Host 20.90.134.35

Host 20.90.134.35

United Kingdom

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Apache Apache

tcp/443

Kestrel Kestrel

tcp/443 tcp/80

LiteSpeed

tcp/443

gunicorn

tcp/443 tcp/80

nginx nginx

tcp/443 tcp/80

nginx nginx 1.28.0

tcp/443

nginx nginx 1.27.2

tcp/443

nginx nginx 1.29.3

tcp/443

nginx nginx 1.29.4

tcp/443

uvicorn

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.35
Domain: www.chatbot.direct
Port: 443
URL: https://www.chatbot.direct

First seen 2025-12-08 14:50
Last seen 2026-01-12 10:42
Open for 34 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb45d3a3eac6936b78b2e9de4a5bc2074097d872d31

Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /basket/item/{id}
GET /account/active-plan
GET /accounts/all-approvals
GET /accounts/approval-status
GET /accounts/check-level-access
GET /accounts/level
GET /accounts/levels
GET /agent-templates
GET /agent-templates/{id}
GET /agent-voices
GET /agent-voices/by-voice-id/{voiceId}
GET /agent-voices/{id}
GET /agent/{agentId}
GET /agents
GET /agents/{id}
GET /agents/{id}/api-key-status
GET /agents/{id}/status
GET /audio/download/{conversationId}
GET /audio/{conversationId}
GET /azure/audio/{conversationId}
GET /basket-item/create
GET /basket/items
GET /bundles
GET /checkout/start
GET /conversations
GET /conversations/metadata
GET /internal/accounts/unapproved
GET /internal/admin/dashboard-stats
GET /internal/dashboard-conversations
GET /internal/dashboard-conversations/by-account
GET /knowledge-base/{documentationId}
GET /phone-numbers/list
GET /plans
GET /plans/assign-free
GET /plans/summaries
GET /plans/{planId}/features
GET /seconds/balance
GET /send-sms
GET /sync/conversations
GET /sync/stripe-products
GET /transcript-analysis/{conversationId}
GET /transcript-messages/{conversationId}
GET /transcript/{conversationId}
GET /twilio/uk-mobile-numbers
GET /voice-samples/{voiceId}
GET /voices
GET /voices/by-account
GET /voices/check/{voiceId}
POST /accounts/approve
POST /agents/{id}/api-key
POST /agents/{id}/create-elevenlabs
POST /debug/update-agent-voice
POST /elevenlabs/create-agent
POST /email/send
POST /email/send-template
POST /phone-numbers/create
POST /phone-numbers/deactivate
POST /save-audio/{conversationId}
POST /sync/conversation/{conversationId}
POST /voices/ensure/{voiceId}
POST /webhooks/stripe
PUT /basket/item

Found on 2026-01-12 10:42

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.35
Domain: rvaesurv.cluat.uk
Port: 443
URL: https://rvaesurv.cluat.uk

First seen 2025-10-19 00:04
Last seen 2026-01-10 01:21
Open for 83 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549a7da0dcc7859bbef7859bbef7859bbef7859bbef
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Job
GET /api/Settings
```
  Found on 2026-01-10 01:21
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-11-29 03:57
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.35
Domain: api.safe2drive.co.uk
Port: 443
URL: https://api.safe2drive.co.uk

First seen 2025-12-06 01:23
Last seen 2026-01-09 12:04
Open for 34 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 12:04
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.35
Domain: api-dev.c2thebook.com
Port: 443
URL: https://api-dev.c2thebook.com

First seen 2025-10-20 20:50
Last seen 2026-01-09 10:15
Open for 80 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 10:15
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.35
Domain: dipsim-qa.mhhstools.co.uk
Port: 443
URL: https://dipsim-qa.mhhstools.co.uk

First seen 2025-12-08 15:48
Last seen 2026-01-09 04:25
Open for 31 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035496771f79beb5adf43fe6eb25f3a6011783a601178
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /StatusMessage
POST /StatusMessage/Config/{recipientId}
POST /dip-channel/{id}
POST /dip-channel/{id}/pubconfig/{recipientId}
```
  Found on 2026-01-09 04:25
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-12-16 18:17
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.90.134.35
Domain: demo.hiringhub.com
Port: 443
URL: https://demo.hiringhub.com

First seen 2025-08-23 23:29
Last seen 2026-01-02 20:56
Open for 131 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814ec72168172e908daa7d7ed54a00733be3
```
Found 6 files trough .DS_Store spidering:

/api
/api/v1
/api/v1/vandal
/images
/old
/system
```
  Found on 2026-01-02 20:56
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2025-11-10 22:15
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 20.90.134.35
Domain: engineapi.cloudshelf.ai
Port: 443
URL: https://engineapi.cloudshelf.ai

First seen 2025-11-28 11:53
Last seen 2026-01-02 16:37
Open for 35 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa39b66b5d42f1cee18b7c58fa931eba92ffaee3761

GraphQL introspection enabled at /graphql
Types: 336 (by kind: ENUM: 75, INPUT_OBJECT: 60, OBJECT: 190, SCALAR: 9, UNION: 2)
Operations:
- Query: Query | fields: allIngestionStats, availablePDPBlocks, buyersGuide, canRegisterDevice, chartAverageSaleValueRecords
- Mutation: Mutation | fields: abortPaymentRequest, addProductsToProductGroup, aiGenerateBuyersGuide, aiGenerateBuyersGuideContext, aiGenerateBuyersGuideQuestions
- Subscription: Subscription | fields: buyersGuideAiGenerationStatusUpdated, buyersGuideContextStatusUpdated, buyersGuideProductTaggingStatusUpdated, buyersGuideQuestionsStatusUpdated, organisationSyncStatusUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 16:37

539.4 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 20.90.134.35
Domain: managerapi.cloudshelf.ai
Port: 443
URL: https://managerapi.cloudshelf.ai

First seen 2025-11-28 11:53
Last seen 2026-01-02 16:37
Open for 35 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa39b66b5d42f1cee18b7c58fa931eba92ffaee3761

GraphQL introspection enabled at /graphql
Types: 336 (by kind: ENUM: 75, INPUT_OBJECT: 60, OBJECT: 190, SCALAR: 9, UNION: 2)
Operations:
- Query: Query | fields: allIngestionStats, availablePDPBlocks, buyersGuide, canRegisterDevice, chartAverageSaleValueRecords
- Mutation: Mutation | fields: abortPaymentRequest, addProductsToProductGroup, aiGenerateBuyersGuide, aiGenerateBuyersGuideContext, aiGenerateBuyersGuideQuestions
- Subscription: Subscription | fields: buyersGuideAiGenerationStatusUpdated, buyersGuideContextStatusUpdated, buyersGuideProductTaggingStatusUpdated, buyersGuideQuestionsStatusUpdated, organisationSyncStatusUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 16:37

539.4 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.90.134.35
Domain: cablestaging.hiringhub.com
Port: 443
URL: https://cablestaging.hiringhub.com

First seen 2025-02-04 03:06
Last seen 2026-01-02 15:22
Open for 332 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814ec72168172e908daa7d7ed54a00733be3
```
Found 6 files trough .DS_Store spidering:

/api
/api/v1
/api/v1/vandal
/images
/old
/system
```
  Found on 2026-01-02 15:22
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2025-11-10 07:00
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772692eda332c7aa8c65006aef6205732f8
```
Found 11 files trough .DS_Store spidering:

/api
/api/v1
/api/v1/vandal
/api/v1/vandal/assets
/api/v1/vandal/assets/img
/api/v1/vandal/css
/api/v1/vandal/js
/images
/images/offers-images
/images/offers-images/backgrounds
/images/offers-images/logos
```
  Found on 2025-02-24 08:56
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.90.134.35
Domain: kinly.org.uk
Port: 443
URL: https://kinly.org.uk

First seen 2024-09-10 11:15
Last seen 2026-01-02 10:31
Open for 478 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c3e8b9cac3e8b9cac799d51cc441412e5e9a26fd4442387ac

Found 48 files trough .DS_Store spidering:

/css
/css/plugins
/css/style.css
/css/style.css.map
/favicon.ico
/fonts
/fonts/lg.eot
/fonts/lg.svg
/fonts/lg.ttf
/fonts/lg.woff
/img
/img/about
/img/about/banner_bg.svg
/img/about/fun_fact_bg.jpeg
/img/appointments
/img/appointments/banner_bg.svg
/img/contact
/img/contact/banner_bg.svg
/img/contact/icon_1.svg
/img/contact/icon_2.svg
/img/contact/icon_3.svg
/img/departments
/img/departments/banner_bg.svg
/img/departments/banner_bg_3.svg
/img/doctors
/img/doctors/banner_bg.svg
/img/doctors/doctor_details_bg.svg
/img/home_1
/img/home_2
/img/home_3
/img/home_4
/img/home_5
/img/icons
/img/partners
/img/pricing_plan
/img/pricing_plan/banner_bg.svg
/img/timetable
/img/timetable/banner_bg.svg
/img/video-preview
/index.php
/js
/js/main.js
/js/plugins
/js/plugins/jquery-3.6.0.min.js
/js/plugins/wow.min.js
/robots.txt
/sitemap.xml
/video

Found on 2026-01-02 10:31

Severity: medium
Fingerprint: 5f32cf5d6962f09cef4770e6ef4770e6d2b535be7567f5cfb5f2787eeca91d66

Found 42 files trough .DS_Store spidering:

/css
/css/plugins
/css/style.css
/css/style.css.map
/favicon.ico
/fonts
/fonts/lg.eot
/fonts/lg.svg
/fonts/lg.ttf
/fonts/lg.woff
/img
/img/about
/img/about/banner_bg.svg
/img/about/fun_fact_bg.jpeg
/img/appointments
/img/appointments/banner_bg.svg
/img/contact
/img/contact/banner_bg.svg
/img/contact/icon_1.svg
/img/contact/icon_2.svg
/img/contact/icon_3.svg
/img/departments
/img/departments/banner_bg.svg
/img/departments/banner_bg_3.svg
/img/doctors
/img/doctors/banner_bg.svg
/img/doctors/doctor_details_bg.svg
/img/home_1
/img/home_2
/img/home_3
/img/home_4
/img/home_5
/img/icons
/img/partners
/img/pricing_plan
/img/timetable
/img/video-preview
/index.php
/js
/robots.txt
/sitemap.xml
/video

Found on 2025-12-01 15:47

Severity: medium
Fingerprint: 5f32cf5d6962f09c93a25c3a93a25c3a48d8e6cafd24bbeb0ea178ca635d033f

Found 46 files trough .DS_Store spidering:

/css
/css/plugins
/css/style.css
/css/style.css.map
/favicon.ico
/fonts
/fonts/lg.eot
/fonts/lg.svg
/fonts/lg.ttf
/fonts/lg.woff
/img
/img/about
/img/about/banner_bg.svg
/img/about/fun_fact_bg.jpeg
/img/appointments
/img/appointments/banner_bg.svg
/img/contact
/img/contact/banner_bg.svg
/img/contact/icon_1.svg
/img/contact/icon_2.svg
/img/contact/icon_3.svg
/img/departments
/img/departments/banner_bg.svg
/img/departments/banner_bg_3.svg
/img/doctors
/img/doctors/banner_bg.svg
/img/doctors/doctor_details_bg.svg
/img/home_1
/img/home_2
/img/home_3
/img/home_4
/img/home_5
/img/icons
/img/partners
/img/pricing_plan
/img/pricing_plan/banner_bg.svg
/img/timetable
/img/timetable/banner_bg.svg
/img/video-preview
/index.php
/js
/js/main.js
/js/plugins
/robots.txt
/sitemap.xml
/video

Found on 2025-11-30 14:23

Severity: medium
Fingerprint: 5f32cf5d6962f09c99d3320899d332083d9647d0da8dea998faf7db8c02c739d

Found 44 files trough .DS_Store spidering:

/css
/css/plugins
/css/style.css
/css/style.css.map
/favicon.ico
/fonts
/fonts/lg.eot
/fonts/lg.svg
/fonts/lg.ttf
/fonts/lg.woff
/img
/img/about
/img/about/banner_bg.svg
/img/about/fun_fact_bg.jpeg
/img/appointments
/img/appointments/banner_bg.svg
/img/contact
/img/contact/banner_bg.svg
/img/contact/icon_1.svg
/img/contact/icon_2.svg
/img/contact/icon_3.svg
/img/departments
/img/departments/banner_bg.svg
/img/departments/banner_bg_3.svg
/img/doctors
/img/doctors/banner_bg.svg
/img/doctors/doctor_details_bg.svg
/img/home_1
/img/home_2
/img/home_3
/img/home_4
/img/home_5
/img/icons
/img/partners
/img/pricing_plan
/img/pricing_plan/banner_bg.svg
/img/timetable
/img/timetable/banner_bg.svg
/img/video-preview
/index.php
/js
/robots.txt
/sitemap.xml
/video

Found on 2025-11-05 04:53

Severity: medium
Fingerprint: 5f32cf5d6962f09c8f03d7bd8f03d7bd53ac2c852777e9c8d72f108d4b61a1f3

Found 38 files trough .DS_Store spidering:

/css
/css/plugins
/css/style.css
/css/style.css.map
/favicon.ico
/fonts
/fonts/lg.eot
/fonts/lg.svg
/fonts/lg.ttf
/fonts/lg.woff
/img
/img/about
/img/about/banner_bg.svg
/img/about/fun_fact_bg.jpeg
/img/appointments
/img/appointments/banner_bg.svg
/img/contact
/img/contact/banner_bg.svg
/img/contact/icon_1.svg
/img/contact/icon_2.svg
/img/contact/icon_3.svg
/img/departments
/img/doctors
/img/home_1
/img/home_2
/img/home_3
/img/home_4
/img/home_5
/img/icons
/img/partners
/img/pricing_plan
/img/timetable
/img/video-preview
/index.php
/js
/robots.txt
/sitemap.xml
/video

Found on 2025-10-10 13:13

Severity: medium
Fingerprint: 5f32cf5d6962f09cccd847a3ccd847a35c0fafb3b1db234e94d17e435f51bb69

Found 43 files trough .DS_Store spidering:

/css
/css/plugins
/css/style.css
/css/style.css.map
/favicon.ico
/fonts
/fonts/lg.eot
/fonts/lg.svg
/fonts/lg.ttf
/fonts/lg.woff
/img
/img/about
/img/about/banner_bg.svg
/img/about/fun_fact_bg.jpeg
/img/appointments
/img/appointments/banner_bg.svg
/img/contact
/img/contact/banner_bg.svg
/img/contact/icon_1.svg
/img/contact/icon_2.svg
/img/contact/icon_3.svg
/img/departments
/img/departments/banner_bg.svg
/img/departments/banner_bg_3.svg
/img/doctors
/img/doctors/banner_bg.svg
/img/doctors/doctor_details_bg.svg
/img/home_1
/img/home_2
/img/home_3
/img/home_4
/img/home_5
/img/icons
/img/partners
/img/pricing_plan
/img/pricing_plan/banner_bg.svg
/img/timetable
/img/video-preview
/index.php
/js
/robots.txt
/sitemap.xml
/video

Found on 2025-10-06 13:05

Severity: medium
Fingerprint: 5f32cf5d6962f09ca629b8b1a629b8b15704f0b123373734ed9e46f90dd8c423

Found 34 files trough .DS_Store spidering:

/css
/css/plugins
/css/style.css
/css/style.css.map
/favicon.ico
/fonts
/fonts/lg.eot
/fonts/lg.svg
/fonts/lg.ttf
/fonts/lg.woff
/img
/img/about
/img/about/banner_bg.svg
/img/about/fun_fact_bg.jpeg
/img/appointments
/img/appointments/banner_bg.svg
/img/contact
/img/departments
/img/doctors
/img/home_1
/img/home_2
/img/home_3
/img/home_4
/img/home_5
/img/icons
/img/partners
/img/pricing_plan
/img/timetable
/img/video-preview
/index.php
/js
/robots.txt
/sitemap.xml
/video

Found on 2024-11-20 16:59

Severity: medium
Fingerprint: 5f32cf5d6962f09c248e4f81248e4f81c23c60418d617ee4df16d7492a94cee6

Found 41 files trough .DS_Store spidering:

/css
/css/plugins
/css/style.css
/css/style.css.map
/fonts
/fonts/lg.eot
/fonts/lg.svg
/fonts/lg.ttf
/fonts/lg.woff
/img
/img/about
/img/about/banner_bg.svg
/img/about/fun_fact_bg.jpeg
/img/appointments
/img/appointments/banner_bg.svg
/img/contact
/img/contact/banner_bg.svg
/img/contact/icon_1.svg
/img/contact/icon_2.svg
/img/contact/icon_3.svg
/img/departments
/img/departments/banner_bg.svg
/img/departments/banner_bg_3.svg
/img/doctors
/img/doctors/banner_bg.svg
/img/doctors/doctor_details_bg.svg
/img/home_1
/img/home_2
/img/home_3
/img/home_4
/img/home_5
/img/icons
/img/pricing_plan
/img/pricing_plan/banner_bg.svg
/img/timetable
/img/timetable/banner_bg.svg
/js
/js/main.js
/js/plugins
/js/plugins/jquery-3.6.0.min.js
/js/plugins/wow.min.js

Found on 2024-11-14 17:38

Severity: medium
Fingerprint: 5f32cf5d6962f09cd4047824d4047824166c30941179663d2886f05c2c4a4337

Found 35 files trough .DS_Store spidering:

/css
/css/plugins
/css/style.css
/css/style.css.map
/fonts
/fonts/lg.eot
/fonts/lg.svg
/fonts/lg.ttf
/fonts/lg.woff
/img
/img/about
/img/about/banner_bg.svg
/img/about/fun_fact_bg.jpeg
/img/appointments
/img/appointments/banner_bg.svg
/img/contact
/img/contact/banner_bg.svg
/img/contact/icon_1.svg
/img/contact/icon_2.svg
/img/contact/icon_3.svg
/img/departments
/img/departments/banner_bg.svg
/img/departments/banner_bg_3.svg
/img/doctors
/img/doctors/banner_bg.svg
/img/doctors/doctor_details_bg.svg
/img/home_1
/img/home_2
/img/home_3
/img/home_4
/img/home_5
/img/icons
/img/pricing_plan
/img/timetable
/js

Found on 2024-11-08 22:15

Severity: medium
Fingerprint: 5f32cf5d6962f09c91500896915008966952c4ee09206a9fd594256ea447c3f2

Found 37 files trough .DS_Store spidering:

/css
/css/plugins
/css/style.css
/css/style.css.map
/fonts
/fonts/lg.eot
/fonts/lg.svg
/fonts/lg.ttf
/fonts/lg.woff
/img
/img/about
/img/about/banner_bg.svg
/img/about/fun_fact_bg.jpeg
/img/appointments
/img/appointments/banner_bg.svg
/img/contact
/img/contact/banner_bg.svg
/img/contact/icon_1.svg
/img/contact/icon_2.svg
/img/contact/icon_3.svg
/img/departments
/img/departments/banner_bg.svg
/img/departments/banner_bg_3.svg
/img/doctors
/img/doctors/banner_bg.svg
/img/doctors/doctor_details_bg.svg
/img/home_1
/img/home_2
/img/home_3
/img/home_4
/img/home_5
/img/icons
/img/pricing_plan
/img/pricing_plan/banner_bg.svg
/img/timetable
/img/timetable/banner_bg.svg
/js

Found on 2024-10-20 04:15

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.90.134.35
Domain: cablealpha.hiringhub.com
Port: 443
URL: https://cablealpha.hiringhub.com

First seen 2025-06-11 08:28
Last seen 2026-01-02 01:51
Open for 204 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2026-01-02 01:51
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.35
Domain: api.piexsquared-prerelease.co.uk
Port: 443
URL: https://api.piexsquared-prerelease.co.uk

First seen 2025-12-07 04:23
Last seen 2026-01-02 01:44
Open for 25 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-02 01:44
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 20.90.134.35
Domain: ingestapi.cloudshelf.ai
Port: 443
URL: https://ingestapi.cloudshelf.ai

First seen 2025-11-28 11:53
Last seen 2026-01-01 23:46
Open for 34 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa39b66b5d42f1cee18b7c58fa931eba92ffaee3761

GraphQL introspection enabled at /graphql
Types: 336 (by kind: ENUM: 75, INPUT_OBJECT: 60, OBJECT: 190, SCALAR: 9, UNION: 2)
Operations:
- Query: Query | fields: allIngestionStats, availablePDPBlocks, buyersGuide, canRegisterDevice, chartAverageSaleValueRecords
- Mutation: Mutation | fields: abortPaymentRequest, addProductsToProductGroup, aiGenerateBuyersGuide, aiGenerateBuyersGuideContext, aiGenerateBuyersGuideQuestions
- Subscription: Subscription | fields: buyersGuideAiGenerationStatusUpdated, buyersGuideContextStatusUpdated, buyersGuideProductTaggingStatusUpdated, buyersGuideQuestionsStatusUpdated, organisationSyncStatusUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-01 23:46

539.4 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.90.134.35
Domain: test.abovethewings.com
Port: 443
URL: https://test.abovethewings.com

First seen 2025-04-13 15:23
Last seen 2025-04-20 22:06
Open for 7 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cdafa5447dafa5447b671e3e9311b95ec8ca6dd123bba61bf
```
Found 18 files trough .DS_Store spidering:

/assets
/assets/ATW_banner_image.png
/assets/banner.jpg
/assets/destinations
/assets/json
/assets/location
/assets/logo-white.svg
/assets/logo.svg
/assets/london.jpg
/assets/mapping.csv
/assets/packages
/assets/Vector (1).png
/assets/Vector (2).png
/assets/Vector (3).png
/assets/Vector.png
/ion_bed.svg
/Paper Plane.svg
/Vector.svg
```
  Found on 2025-04-20 22:06
Create report

Open service 20.90.134.35:443 · bulktainer.dev.fleetlive.ai

2026-01-13 01:10

HTTP/1.1 200 OK
Content-Length: 149794
Connection: close
Content-Type: text/html
Date: Tue, 13 Jan 2026 01:11:05 GMT
Server: Kestrel
Request-Context: appId=cid-v1:153c1335-9639-45be-9e68-907137dde5b0

Page title: Your Azure Function App is up and running.

<!DOCTYPE html>
<html>
<head>
    <title>Your Azure Function App is up and running.</title>
    <style type="text/css">
        @font-face {
            font-family: 'SegoeLight';
            src: url(//:) format('no404'), url(data:font/woff;charset=utf-8;base64,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

Found 12 hours ago by HttpPlugin