LeakIX - Host 3.167.227.75

Host 3.167.227.75

United States

AMAZON-02

Debian

Software information

AliyunOSS

tcp/443 tcp/80

AmazonS3

tcp/443 tcp/80

Apache Apache 2.4.62

tcp/443

Apache Apache 2.4.65

tcp/443

CloudFront

tcp/443 tcp/80

OpenSSL OpenSSL 1.0.2k-fips

tcp/443

PHP PHP 7.4.15

tcp/443

envoy

tcp/443

istio-envoy

tcp/443

nginx nginx

tcp/443 tcp/80

nginx nginx 1.18.0

tcp/443

nginx nginx 1.23.4

tcp/443

openresty

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 3.167.227.75
Domain: bradroot.me
Port: 443
URL: https://bradroot.me

First seen 2025-09-26 02:24
Last seen 2026-01-02 07:18
Open for 98 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcf7c01fcc79f204375dbf4cc6ea69cc0ed
```
Found 25 files trough .DS_Store spidering:

/css
/error.html
/images
/images/Aisligneach Screenshots.png
/images/aislingeach-icon.png
/images/APPS.svg
/images/BLOGS.svg
/images/bradroot-photo.jpeg
/images/Frame 5-2.svg
/images/iconmonstr-apple-os-3.svg
/images/iconmonstr-github-3.svg
/images/iconmonstr-gmail-3.svg
/images/iconmonstr-linkedin-3.svg
/images/iconmonstr-safari-3.svg
/images/iconmonstr-twitch-3.svg
/images/iconmonstr-youtube-8.svg
/images/Inneal Screenshots-2.png
/images/Inneal Screenshots.png
/images/inneal-icon.jpg
/images/lingo-2.png
/images/lingo-icon.png
/images/lingo.png
/images/old
/images/WORK.svg
/index.html
```
  Found on 2026-01-02 07:18
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 3.167.227.75
Domain: bradroot.me
Port: 443
URL: https://bradroot.me

First seen 2025-09-26 02:24
Last seen 2026-01-02 07:18
Open for 98 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652208a132f6
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = git@github.com:amiantos/bradroot.me.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-01-02 07:18
  
  309 Bytes
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 3.167.227.75
Domain: abs-app.bankasia.com
Port: 443
URL: https://abs-app.bankasia.com

First seen 2025-11-24 22:34
Last seen 2025-12-25 05:33
Open for 30 days

Severity: info
Fingerprint: 5733ddf49ff49cd18553ecf72691cf9d6b901d300afdfedce0410d00d2fbe287

Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
GET /API/appRovalDeatil
GET /API/appRovalImpl
GET /API/checkFee
GET /API/checkQuota
GET /API/checkSmsMsg
GET /API/checkUserPower
GET /API/delPayee
GET /API/getAccBaseInf
GET /API/getAccDeatil
GET /API/getAccList
GET /API/getCurrentUserMobile
GET /API/getMainPageMenu
GET /API/getMainPageMsg
GET /API/getPubMsg
GET /API/getUserNameByAccNo
GET /API/innerTransfer
GET /API/isExitUserInf
GET /API/modifyPwd
GET /API/outTransfer
GET /API/payeeList
GET /API/queryAppRoval4Me
GET /API/queryAppRovalUser
GET /API/querySettingAppRov
GET /API/querySwiftCode
GET /API/queryTransfer4One
GET /API/queryTransferList
GET /API/queryTxAdvice
GET /API/queryustName
GET /API/sendSmsMsg
GET /API/sendSmsMsgCurrentUser
GET /API/setPwd
GET /API/settingAppRov
GET /API/submitFeedBack
GET /API/updateUserPower
GET /API4HOST/modifyCorInf
GET /API4HOST/modifyPerInf
GET /APIEX/showHeadImage
GET /APIEX/turnPage
GET /APIEX/uploadHeadFile
POST /API/basicInfo
POST /API/bondDevices
POST /API/commonProblem
POST /API/commonProblemType
POST /API/contactUs
POST /API/fixedTimeDeposit
POST /API/fixedTimeDraw
POST /API/login
POST /API/loginOut
POST /API/loginSet
POST /API/msgInf
POST /API/msgList
POST /API/noticeList
POST /API/queryBondDevices
POST /API/queryFixedTimeDeposits
POST /API/queryLog
POST /API/queryProductInfos
POST /API/queryStatementService
POST /API/queryVersion
POST /API/resetLoginPwd
POST /API/resetUserName
POST /API/rotationChart
POST /API/setLanguage
POST /API/submitPreMsg
POST /API/terms
POST /API/verifyLoginPwd

Found on 2025-12-25 05:33

Create report

Open service 3.167.227.75:443 · dev.vertebrate.us

2026-01-12 21:29

HTTP/1.1 307 Temporary Redirect
Content-Type: text/html; charset=utf-8
Content-Length: 6117
Connection: close
Date: Mon, 12 Jan 2026 21:29:59 GMT
X-Amzn-Trace-Id: Root=1-696567d7-517497ee5294bdb4207c5377;Parent=7b085c079937b5a3;Sampled=0;Lineage=1:f9c6282f:0
x-amzn-RequestId: ba148da9-e58e-4ea0-be7b-d1c45d186d0f
x-opennext: 1
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Location: /auth/sign-in
x-powered-by: Next.js
Link: </_next/static/media/e4af272ccee01ff0-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
X-Cache: Miss from cloudfront
Via: 1.1 a6cf64e69a19d3b39479c6c39a829974.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P11
X-Amz-Cf-Id: W70OaBR6Rvyt3jQLegEUt1JjkEA7D0sH6QsMv_WOP_8eKQSht36KSg==

Page title: Vertebrate App

<!DOCTYPE html><html id="__next_error__"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-c33700f0df1d13a7.js"/><script src="/_next/static/chunks/52ce4d83-40f903bcd6e444b4.js" async=""></script><script src="/_next/static/chunks/2246-97ab8e0289ba216b.js" async=""></script><script src="/_next/static/chunks/main-app-f9a0da7d2c25859c.js" async=""></script><meta name="next-size-adjust" content=""/><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><div hidden=""><!--$?--><template id="B:0"></template><!--/$--></div><script>requestAnimationFrame(function(){$RT=performance.now()});</script><script src="/_next/static/chunks/webpack-c33700f0df1d13a7.js" id="_R_" async=""></script><title>Vertebrate App</title><meta name="description" content="Vertebrate Application"/><div hidden id="S:0"></div><script>$RB=[];$RV=function(b){$RT=performance.now();for(var a=0;a<b.length;a+=2){var c=b[a],e=b[a+1];null!==e.parentNode&&e.parentNode.removeChild(e);var f=c.parentNode;if(f){var g=c.previousSibling,h=0;do{if(c&&8===c.nodeType){var d=c.data;if("/$"===d||"/&"===d)if(0===h)break;else h--;else"$"!==d&&"$?"!==d&&"$~"!==d&&"$!"!==d&&"&"!==d||h++}d=c.nextSibling;f.removeChild(c);c=d}while(c);for(;e.firstChild;)f.insertBefore(e.firstChild,c);g.data="$";g._reactRetry&&g._reactRetry()}}b.length=0};
$RC=function(b,a){if(a=document.getElementById(a))(b=document.getElementById(b))?(b.previousSibling.data="$~",$RB.push(b,a),2===$RB.length&&(b="number"!==typeof $RT?0:$RT,a=performance.now(),setTimeout($RV.bind(null,$RB),2300>a&&2E3<a?2300-a:b+300-a))):a.parentNode.removeChild(a)};$RC("B:0","S:0")</script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[17966,[\"7769\",\"static/chunks/7769-d0f52c0d915f4edd.js\",\"223\",\"static/chunks/223-9e78990f0c37a33b.js\",\"359\",\"static/chunks/359-0f8262ca2002127e.js\",\"7177\",\"static/chunks/app/layout-39105c3e5aed858e.js\"],\"Providers\"]\n3:I[79648,[],\"\"]\n4:I[25190,[],\"\"]\n6:I[98704,[],\"OutletBoundary\"]\n8:I[49208,[],\"AsyncMetadataOutlet\"]\na:I[98704,[],\"ViewportBoundary\"]\nc:I[98704,[],\"MetadataBoundary\"]\nd:\"$Sreact.suspense\"\nf:I[15484,[],\"\"]\n:HL[\"/_next/static/media/e4af272ccee01ff0-s.p.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/css/931b179cff3131dc.css\",\"style\"]\n:HL[\"/_next/static/css/270b790173086d02.css\",\"style\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"pxWkGEoWMtd65MjXkKj9Z\",\"p\":\"\",\"c\":[\"\",\"\"],\"i\":false,\"f\":[[[\"\",{\"children\":[\"__PAGE__\",{}]},\"$undefined\",\"$undefined\",true],[\"\",[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/css/931b179cff3131dc.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"link\",\"1\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/css/270b790173086d02.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}]],[\"$\",\"html\",null,{\"lang\":\"en\",\"className\":\"dark\",\"suppressHydrationWarning\":true,\"children\":[\"$\",\"body\",null,{\"className\":\"__className_e8ce0c dark\",\"suppressHydrationWarning\":true,\"children\":[\"$\",\"$L2\",null,{\"children\":[\"$\",\"$L3\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L4\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":[[[\"$\",\"title\",null,{\"children\":\"404: This page could not be found.\"}],[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justi

Found 11 hours ago by HttpPlugin

Host 3.167.227.75

United States

Software information

MacOS file listing through .DS_Store file

Git configuration and history exposed

Swagger API description is publicly available