LeakIX - Host 52.85.65.14

Host 52.85.65.14

United States

AMAZON-02

Debian

Software information

AmazonS3

tcp/443 tcp/80

Apache Apache 2

tcp/443 tcp/80

Apache Apache 2.4.65

tcp/443

Apache Apache

tcp/443

Apache Apache 2.4.54

tcp/443

Caddy

tcp/443 tcp/80

CloudFront

tcp/443 tcp/80

Heroku

tcp/443

Microsoft-IIS 10.0

tcp/443 tcp/80

OpenSSL OpenSSL 1.0.2k-fips

tcp/443

Server

tcp/443

Tengine

tcp/443 tcp/80

awselb awselb 2.0

tcp/443

fasterize

tcp/443 tcp/80

nginx nginx 1.20.0

tcp/443

nginx nginx 1.28.0

tcp/443

nginx nginx

tcp/443 tcp/80

nginx nginx 1.21.6

tcp/443

nginx-rc

tcp/443

openresty

tcp/443

swoole-http-server

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 52.85.65.14
Domain: management-api.prod.kea.uae.aws.ssctech.com
Port: 443
URL: https://management-api.prod.kea.uae.aws.ssctech.com

First seen 2025-12-07 07:12
Last seen 2026-01-09 04:13
Open for 32 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549597480c03ee53d12dbdb7298875e19b1a1cea93c

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/v1/applications/{applicationId}/gaf-policies/{policyId}/roles/{roleName}/permissions
DELETE /api/v1/applications/{applicationId}/roles/{roleName}
DELETE /api/v1/users/{idOrUserName}/applications/{applicationId}/roles/{roleName}
GET /api/v1/apiresources
GET /api/v1/apiresources/{id}
GET /api/v1/applications
GET /api/v1/applications/{applicationIdOrName}/operational-gaf-policies/active
GET /api/v1/applications/{applicationId}
GET /api/v1/applications/{applicationId}/gaf-policies
GET /api/v1/applications/{applicationId}/gaf-policies/active
GET /api/v1/applications/{applicationId}/gaf-policies/{id}
GET /api/v1/applications/{applicationId}/permissions
GET /api/v1/applications/{applicationId}/permissions/{permissionId}
GET /api/v1/applications/{applicationId}/roles
GET /api/v1/applications/{applicationId}/users
GET /api/v1/audit
GET /api/v1/audit/actiontypes
GET /api/v1/audit/{idOrUserName}/last-login
GET /api/v1/bulk/create-users-template
GET /api/v1/claimtypes
GET /api/v1/clients
GET /api/v1/clients/{clientId}
GET /api/v1/configuration/application/{applicationId}
GET /api/v1/configuration/application/{applicationId}/transformed
GET /api/v1/configuration/tenant
GET /api/v1/configuration/tenant/transformed
GET /api/v1/health
GET /api/v1/health/{from}
GET /api/v1/identityclaims
GET /api/v1/identityclaims/{identityClaimId}
GET /api/v1/identityresources
GET /api/v1/identityresources/{identityResourceId}
GET /api/v1/recovery/forgot_credentials
GET /api/v1/recovery/forgot_credentials/{token}
GET /api/v1/recovery/forgot_password
GET /api/v1/recovery/forgot_password/{token}
GET /api/v1/reports
GET /api/v1/reports/AllClientsByTenant
GET /api/v1/reports/AllUsersByTenant
GET /api/v1/reports/AllpartnersUserCountByApplication
GET /api/v1/reports/createdusers
GET /api/v1/reports/loggedinusercount
GET /api/v1/reports/signindetail
GET /api/v1/reports/signinsummary
GET /api/v1/reports/signinsummaryallpartners
GET /api/v1/reports/userdetail
GET /api/v1/reports/userextract
GET /api/v1/reports/usersummary
GET /api/v1/roles
GET /api/v1/securityQuestions
GET /api/v1/securityQuestions/{questionId}
GET /api/v1/system/tenantidentityurl
GET /api/v1/system/tenantpaths
GET /api/v1/system/tenantswithdetails
GET /api/v1/system/uptime
GET /api/v1/system/version
GET /api/v1/termsandconditions
GET /api/v1/termsandconditions/{idOrUserName}/accepted-terms
GET /api/v1/user-settings
GET /api/v1/user-settings/{key}
GET /api/v1/users
GET /api/v1/users-light
GET /api/v1/users/registration
GET /api/v1/users/{idOrUserName}
GET /api/v1/users/{idOrUserName}/application-roles
GET /api/v1/users/{idOrUserName}/applications
GET /api/v1/users/{idOrUserName}/applications/{applicationId}/roles
GET /api/v1/users/{idOrUserName}/applications/{applicationId}/user-settings/{key}
GET /api/v1/users/{idOrUserName}/credentials/security_question
GET /api/v1/users/{idOrUserName}/dsar
GET /api/v1/users/{idOrUserName}/dsar-pdf
GET /api/v1/users/{idOrUserName}/light
GET /api/v1/users/{idOrUserName}/roles
GET /api/v1/users/{idOrUserName}/user-settings/{key}
GET /api/v1/webhook-event-types
GET /api/v1/webhooks
GET /api/v1/webhooks/{id}
GET /api/v1/webhooks/{id}/history
POST /api/v1/applications/{applicationIdOrName}/operational-gaf-policies/active/evaluate-multiple
POST /api/v1/applications/{applicationIdOrName}/operational-gaf-policies/active/evaluate/{subject}
POST /api/v1/applications/{applicationId}/clients/{clientId}
POST /api/v1/applications/{applicationId}/operational-gaf-policies/active/evaluate
POST /api/v1/bulk/create-users
POST /api/v1/bulk/update-users
POST /api/v1/configuration/reload
POST /api/v1/directemail/send-email
POST /api/v1/directemail/send-sms
POST /api/v1/maintenence/migrate-users-to-app-roles
POST /api/v1/security/authenticate
POST /api/v1/security/generate-token
POST /api/v1/security/validate-token
POST /api/v1/securityQuestions/validate_security_questions_approved
POST /api/v1/securityQuestions/validate_security_questions_unique
POST /api/v1/users/applications
POST /api/v1/users/registration/complete
POST /api/v1/users/search
POST /api/v1/users/{idOrUserName}/2fa
POST /api/v1/users/{idOrUserName}/additional_registration_email
POST /api/v1/users/{idOrUserName}/applications/{applicationId}
POST /api/v1/users/{idOrUserName}/block
POST /api/v1/users/{idOrUserName}/claims
POST /api/v1/users/{idOrUserName}/credentials/change_password
POST /api/v1/users/{idOrUserName}/credentials/change_security_questions
POST /api/v1/users/{idOrUserName}/credentials/set_password
POST /api/v1/users/{idOrUserName}/credentials/verify_security_answer
POST /api/v1/users/{idOrUserName}/expirepassword
POST /api/v1/users/{idOrUserName}/profile
POST /api/v1/users/{idOrUserName}/resend_activation_email
POST /api/v1/users/{idOrUserName}/set_2fa
POST /api/v1/users/{idOrUserName}/set_user_to_active
POST /api/v1/users/{idOrUserName}/unblock
POST /api/v1/users/{idOrUserName}/unexpirepassword
POST /api/v1/users/{idOrUserName}/unlock
POST /api/v1/users/{idOrUserName}/update_user_status
POST /api/v1/validate_password
POST /api/v1/webhooks/{id}/invoke
PUT /api/v1/applications/{applicationId}/gaf-policies/{policyId}
PUT /api/v1/applications/{applicationId}/gaf-policies/{policyId}/roles/{roleName}
PUT /api/v1/applications/{applicationId}/gaf-policies/{policyId}/roles/{roleName}/bulk
PUT /api/v1/roles/{roleName}

Found on 2026-01-09 04:13

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 52.85.65.14
Domain: staging-rt.amazingtalker.com
Port: 443
URL: https://staging-rt.amazingtalker.com

First seen 2025-12-07 03:57
Last seen 2026-01-02 21:56
Open for 26 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa36e86afe6109e6a969dd9269257c10935ec0b7781

GraphQL introspection enabled at /graphql
Types: 514 (by kind: ENUM: 102, INPUT_OBJECT: 19, OBJECT: 383, SCALAR: 10)
Operations:
- Query: Query | fields: announcements, appI18n, appRelease, appointment, appointmentCommentHistories
- Mutation: Mutation | fields: acceptStudentDispute, addDevice, addItemToCart, addRequiredProductForCoupon, approveStudyBuddyApply
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 21:56

728.7 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.12
Domain: academy.toolythub.com
Port: 443
URL: https://academy.toolythub.com

First seen 2024-08-01 05:36
Last seen 2026-01-02 20:29
Open for 519 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c248e4f81248e4f81cb3a648fd0cc6af1739e7b626431c516

Found 41 files trough .DS_Store spidering:

/assets
/assets/css
/assets/data
/assets/img
/css
/images
/images/logos
/js
/js_old
/lib
/lib/select2
/lib/select2/css
/lib/select2/js
/lib/select2/js/i18n
/pages
/pages/css
/pages/js
/plugins
/plugins/bootstrap-4.0.0
/plugins/EditorJs-2.16.1
/plugins/font-awesome-4.7.0
/plugins/form-master
/plugins/jquery-3.4.1
/plugins/jquery-confirm-v3.3.4
/plugins/timepicker
/plugins/trumbowyg
/themes
/themes/login1
/themes/login1/css
/themes/login1/images
/themes/login1/js
/themes/login2
/themes/login2/css
/themes/login2/images
/themes/login3
/themes/login3/css
/themes/login3/images
/themes/login3/js
/themes/login4
/untitled folder
/widgets

Found on 2026-01-02 20:29

Severity: medium
Fingerprint: 5f32cf5d6962f09c92dfb71592dfb715025a95037a9b5dadc4b9d33e86bc6f43

Found 45 files trough .DS_Store spidering:

/assets
/assets/css
/assets/data
/assets/img
/css
/images
/images/logos
/js
/js_old
/lib
/lib/select2
/lib/select2/css
/lib/select2/js
/lib/select2/js/i18n
/pages
/pages/css
/pages/js
/plugins
/plugins/bootstrap-4.0.0
/plugins/EditorJs-2.16.1
/plugins/font-awesome-4.7.0
/plugins/form-master
/plugins/jquery-3.4.1
/plugins/jquery-confirm-v3.3.4
/plugins/timepicker
/plugins/trumbowyg
/themes
/themes/login1
/themes/login1/css
/themes/login1/images
/themes/login1/js
/themes/login2
/themes/login2/css
/themes/login2/images
/themes/login3
/themes/login3/css
/themes/login3/images
/themes/login3/js
/themes/login4
/themes/login4/css
/themes/login4/images
/untitled folder
/widgets
/widgets/css
/widgets/js

Found on 2025-12-27 04:08

Severity: medium
Fingerprint: 5f32cf5d6962f09cccd847a3ccd847a391fda5d5e6fc86d3054c5488e971e2a9

Found 43 files trough .DS_Store spidering:

/assets
/assets/css
/assets/data
/assets/img
/css
/images
/images/logos
/js
/js_old
/lib
/lib/select2
/lib/select2/css
/lib/select2/js
/lib/select2/js/i18n
/pages
/pages/css
/pages/js
/plugins
/plugins/bootstrap-4.0.0
/plugins/EditorJs-2.16.1
/plugins/font-awesome-4.7.0
/plugins/form-master
/plugins/jquery-3.4.1
/plugins/jquery-confirm-v3.3.4
/plugins/timepicker
/plugins/trumbowyg
/themes
/themes/login1
/themes/login1/css
/themes/login1/images
/themes/login1/js
/themes/login2
/themes/login2/css
/themes/login2/images
/themes/login3
/themes/login3/css
/themes/login3/images
/themes/login3/js
/themes/login4
/themes/login4/css
/themes/login4/images
/untitled folder
/widgets

Found on 2025-12-22 19:27

Severity: low
Fingerprint: 5f32cf5d6962f09cdafa5447dafa5447b671e3e93017925f649f93d48ee5aaab

Found 18 files trough .DS_Store spidering:

/assets
/assets/css
/assets/data
/assets/img
/css
/images
/images/logos
/js
/js_old
/lib
/lib/select2
/lib/select2/css
/lib/select2/js
/pages
/plugins
/themes
/untitled folder
/widgets

Found on 2025-11-30 10:01

Severity: low
Fingerprint: 5f32cf5d6962f09c47dfe71947dfe7191bd868874adff799195f390a6df4ff2b

Found 16 files trough .DS_Store spidering:

/assets
/assets/css
/assets/data
/assets/img
/css
/images
/images/logos
/js
/js_old
/lib
/lib/select2
/pages
/plugins
/themes
/untitled folder
/widgets

Found on 2025-11-29 11:43

Severity: low
Fingerprint: 5f32cf5d6962f09cab28146bab28146bd60b51bdf0e13d2b4b2f32e0ef69eda9

Found 21 files trough .DS_Store spidering:

/assets
/assets/css
/assets/data
/assets/img
/css
/images
/images/logos
/js
/js_old
/lib
/lib/select2
/lib/select2/css
/lib/select2/js
/lib/select2/js/i18n
/pages
/pages/css
/pages/js
/plugins
/themes
/untitled folder
/widgets

Found on 2025-11-27 07:18

Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe800eab3a3fec112ef9a48d095e13316d

Found 15 files trough .DS_Store spidering:

/assets
/assets/css
/assets/data
/assets/img
/css
/images
/images/logos
/js
/js_old
/lib
/pages
/plugins
/themes
/untitled folder
/widgets

Found on 2025-11-20 10:30

Severity: medium
Fingerprint: 5f32cf5d6962f09c8efce1938efce19382794f65ede5258345c23f1890d28c24

Found 36 files trough .DS_Store spidering:

/assets
/assets/css
/assets/data
/assets/img
/css
/images
/images/logos
/js
/js_old
/lib
/lib/select2
/lib/select2/css
/lib/select2/js
/lib/select2/js/i18n
/pages
/pages/css
/pages/js
/plugins
/plugins/bootstrap-4.0.0
/plugins/EditorJs-2.16.1
/plugins/font-awesome-4.7.0
/plugins/form-master
/plugins/jquery-3.4.1
/plugins/jquery-confirm-v3.3.4
/plugins/timepicker
/plugins/trumbowyg
/themes
/themes/login1
/themes/login1/css
/themes/login1/images
/themes/login1/js
/themes/login2
/themes/login3
/themes/login4
/untitled folder
/widgets

Found on 2025-11-12 17:18

Severity: medium
Fingerprint: 5f32cf5d6962f09c8f03d7bd8f03d7bdabbbb08b9a84c1a5399db076df72c5cd

Found 38 files trough .DS_Store spidering:

/assets
/assets/css
/assets/data
/assets/img
/css
/images
/images/logos
/js
/js_old
/lib
/lib/select2
/lib/select2/css
/lib/select2/js
/lib/select2/js/i18n
/pages
/pages/css
/pages/js
/plugins
/plugins/bootstrap-4.0.0
/plugins/EditorJs-2.16.1
/plugins/font-awesome-4.7.0
/plugins/form-master
/plugins/jquery-3.4.1
/plugins/jquery-confirm-v3.3.4
/plugins/timepicker
/plugins/trumbowyg
/themes
/themes/login1
/themes/login1/css
/themes/login1/images
/themes/login1/js
/themes/login2
/themes/login2/css
/themes/login2/images
/themes/login3
/themes/login4
/untitled folder
/widgets

Found on 2025-11-05 08:58

Severity: low
Fingerprint: 5f32cf5d6962f09cf35cbfb3f35cbfb3e5971d0580e5d9234fb97db8641c6345

Found 29 files trough .DS_Store spidering:

/assets
/assets/css
/assets/data
/assets/img
/css
/images
/images/logos
/js
/js_old
/lib
/lib/select2
/lib/select2/css
/lib/select2/js
/lib/select2/js/i18n
/pages
/pages/css
/pages/js
/plugins
/plugins/bootstrap-4.0.0
/plugins/EditorJs-2.16.1
/plugins/font-awesome-4.7.0
/plugins/form-master
/plugins/jquery-3.4.1
/plugins/jquery-confirm-v3.3.4
/plugins/timepicker
/plugins/trumbowyg
/themes
/untitled folder
/widgets

Found on 2025-11-03 13:29

Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57adf0e4e16700d0272d1b2d3bd81bf56d6

Found 19 files trough .DS_Store spidering:

/assets
/assets/css
/assets/data
/assets/img
/css
/images
/images/logos
/js
/js_old
/lib
/lib/select2
/lib/select2/css
/lib/select2/js
/lib/select2/js/i18n
/pages
/plugins
/themes
/untitled folder
/widgets

Found on 2025-09-18 20:53

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35bf639e88dde2326dbbfdb5b3097e0d15e

Found 14 files trough .DS_Store spidering:

/assets
/assets/css
/assets/data
/assets/img
/css
/images
/js
/js_old
/lib
/pages
/plugins
/themes
/untitled folder
/widgets

Found on 2024-09-14 17:39

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.14
Domain: eurek-app.com
Port: 443
URL: https://eurek-app.com

First seen 2025-05-12 06:49
Last seen 2026-01-02 15:36
Open for 235 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f5cf739aa003f00b3dd284978dd284978
```
Found 3 files trough .DS_Store spidering:

/favicon
/static
/static/illustrations
```
  Found on 2026-01-02 15:36
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.14
Domain: underboss.ai
Port: 443
URL: https://underboss.ai

First seen 2025-10-09 21:04
Last seen 2026-01-02 11:12
Open for 84 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0ff409caf14e67693497e73c2d97e73c2d
```
Found 3 files trough .DS_Store spidering:

/assets
/assets/fonts
/assets/images
```
  Found on 2026-01-02 11:12
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.14
Domain: chameleonworks.com.au
Port: 80
URL: http://chameleonworks.com.au

First seen 2024-10-10 07:23
Last seen 2026-01-02 02:07
Open for 448 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814ebe1cdd56ff90c56d10e2a85e475f90bb
```
Found 6 files trough .DS_Store spidering:

/css
/fonts
/google4e65a7fcb4462113.html
/images
/images/virgin1.png
/scripts
```
  Found on 2026-01-02 02:07
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.14
Domain: underboss.app
Port: 443
URL: https://underboss.app

First seen 2025-10-09 21:04
Last seen 2026-01-01 19:34
Open for 83 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0ff409caf14e67693497e73c2d97e73c2d
```
Found 3 files trough .DS_Store spidering:

/assets
/assets/fonts
/assets/images
```
  Found on 2026-01-01 19:34
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 52.85.65.14
Domain: sandiegoflowerco.com
Port: 443
URL: https://sandiegoflowerco.com

First seen 2025-12-07 22:42
Last seen 2025-12-20 04:32
Open for 12 days

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e208a11888215c6dac8808add1a2a4291955ead644

GraphQL introspection enabled at /graphql/api
Types: 397 (by kind: ENUM: 41, INPUT_OBJECT: 86, INTERFACE: 24, OBJECT: 241, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToWishlist
Directives: deprecated, include, oneOf, skip (total: 4)

Detected: Magento

Found on 2025-12-20 04:32

677.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e208a11888215c6dac8808add1a2a429196ed1a0c1

GraphQL introspection enabled at /graphql/api
Types: 397 (by kind: ENUM: 41, INPUT_OBJECT: 86, INTERFACE: 24, OBJECT: 241, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToWishlist
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-12-07 22:42

677.8 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.14
Domain: courses.salescraft.training
Port: 443
URL: https://courses.salescraft.training

First seen 2025-05-15 03:24
Last seen 2025-12-18 05:20
Open for 217 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b9dd4fa7c405f2c5d31ba2b029ceead48
```
Found 14 files trough .DS_Store spidering:

/.git
/_database
/application
/fe
/index.php
/license.txt
/package-lock.json
/package.json
/postcss.config.js
/readme.rst
/src
/system
/tailwind.config.js
/uploads
```
  Found on 2025-12-18 05:20
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 52.85.65.14
Domain: flowerbartomsriver.com
Port: 443
URL: https://flowerbartomsriver.com

First seen 2025-12-02 16:01
Last seen 2025-12-07 22:42
Open for 5 days

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e208a11888215c6dac8808add1a2a429196ed1a0c1

GraphQL introspection enabled at /graphql/api
Types: 397 (by kind: ENUM: 41, INPUT_OBJECT: 86, INTERFACE: 24, OBJECT: 241, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToWishlist
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-12-07 22:42

677.8 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.14
Domain: nft-viewer.stage.unionavatars.unionavatars.com
Port: 443
URL: https://nft-viewer.stage.unionavatars.unionavatars.com

First seen 2025-06-05 01:38
Last seen 2025-10-22 14:47
Open for 139 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d89a8fd6d89a8fd6d89a8fd6d89a8fd6d
```
Found 1 files trough .DS_Store spidering:

/img
```
  Found on 2025-10-22 14:47
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 52.85.65.14
Domain: dev.dxpn.dxstar.jp
Port: 443
URL: https://dev.dxpn.dxstar.jp

First seen 2025-10-17 02:23
Last seen 2025-10-19 06:30
Open for 2 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-10-19 06:30
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.14
Domain: drummerclass.com
Port: 443
URL: https://drummerclass.com

First seen 2025-08-07 19:49
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176423f3e94de8919b64c8919b64c8919b64c
```
Found 2 files trough .DS_Store spidering:

/assets
/index.html
```
  Found on 2025-08-07 19:49
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.14
Domain: dev.gocharlie.ai
Port: 443
URL: https://dev.gocharlie.ai

First seen 2023-08-31 20:25
Last seen 2025-04-13 09:47
Open for 590 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392ab64a56ddb433e8657a99ab50f3cd30983
```
Found 7 files trough .DS_Store spidering:

/favicon.ico
/index.html
/libraries
/logo192.png
/logo512.png
/manifest.json
/robots.txt
```
  Found on 2025-04-13 09:47
- Severity: low
  Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d1c397f5e7959c3f54d9cc5a9c7c6cc74
```
Found 12 files trough .DS_Store spidering:

/config.json
/config_production.json
/favicon.ico
/gc-brand
/head-logo.png
/index.html
/logo192.png
/logo512.png
/logoExt.png
/manifest.json
/robots.txt
/service-worker.js
```
  Found on 2024-11-10 11:29
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc8cc38eb34ec52abfaf7f3a9b3ece194b
```
Found 4 files trough .DS_Store spidering:

/browser-ext
/index.html
/manifest.json
/robots.txt
```
  Found on 2023-09-23 08:05
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e985a0bb723b794138d919352cd10229f2
```
Found 5 files trough .DS_Store spidering:

/browser-ext
/index.html
/libraries
/manifest.json
/robots.txt
```
  Found on 2023-09-16 12:12
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d801053967e3a4620f4bd12cc7f65f6a18
```
Found 8 files trough .DS_Store spidering:

/browser-ext
/favicon.ico
/libraries
/logo192.png
/logo512.png
/manifest.json
/robots.txt
/static
```
  Found on 2023-09-12 22:12
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d801053967e3a4620fa2dcc363699991b7
```
Found 8 files trough .DS_Store spidering:

/browser-ext
/favicon.ico
/index.html
/libraries
/logo192.png
/logo512.png
/manifest.json
/robots.txt
```
  Found on 2023-08-31 20:25
Create report

Open service 52.85.65.14:443 · csicmmi.primelectric.ph

2026-01-11 21:16

HTTP/1.1 307 Temporary Redirect
Content-Type: text/html; charset=utf-8
Content-Length: 5337
Connection: close
Date: Wed, 31 Dec 2025 21:31:50 GMT
ETag: "l27ikj4dfy449"
x-nextjs-cache: HIT
x-nextjs-prerender: 1
x-nextjs-prerender: 1
Location: /login
x-nextjs-stale-time: 300
x-powered-by: Next.js
Cache-Control: s-maxage=31536000
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9dd3685eb51bb09781f673d8a8f1a6c4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P6
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: VWGS4GfYkADY1caWP2eFg1jFG8QRDsA1APZzaV1xUc8O1E5ThrK67w==
Age: 949511

Page title: PHI: CIS Controls-Based Questionnaire

<!DOCTYPE html><!--DwKqJu6mcvdvAG0mHXcrG--><html id="__next_error__"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/65fbe02f49b22b6c.js"/><script src="/_next/static/chunks/72a7109cf212cd02.js" async=""></script><script src="/_next/static/chunks/bd4ab1517efdc1c3.js" async=""></script><script src="/_next/static/chunks/e3c838b1b5004803.js" async=""></script><script src="/_next/static/chunks/da1ebc61b4c2a760.js" async=""></script><script src="/_next/static/chunks/6740f161f60c6ab5.js" async=""></script><script src="/_next/static/chunks/turbopack-320ca65841b07d1e.js" async=""></script><script src="/_next/static/chunks/ff1a16fafef87110.js" async=""></script><script src="/_next/static/chunks/247eb132b7f7b574.js" async=""></script><title>PHI: CIS Controls-Based Questionnaire</title><meta name="description" content="PHI: CIS Controls-Based Questionnaire"/><link rel="icon" href="/favicon.ico?favicon.6427a852.ico" sizes="28x30" type="image/x-icon"/><script src="/_next/static/chunks/a6dad97d9634a72d.js" noModule=""></script></head><body><div hidden=""><!--$--><!--/$--></div><script src="/_next/static/chunks/65fbe02f49b22b6c.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[39756,[\"/_next/static/chunks/ff1a16fafef87110.js\",\"/_next/static/chunks/247eb132b7f7b574.js\"],\"default\"]\n3:I[37457,[\"/_next/static/chunks/ff1a16fafef87110.js\",\"/_next/static/chunks/247eb132b7f7b574.js\"],\"default\"]\n4:I[36768,[\"/_next/static/chunks/8006abbb7813bac9.js\",\"/_next/static/chunks/66e8b59b18bd8e10.js\"],\"default\"]\n5:I[70319,[\"/_next/static/chunks/8006abbb7813bac9.js\"],\"ToastContainer\"]\n7:I[97367,[\"/_next/static/chunks/ff1a16fafef87110.js\",\"/_next/static/chunks/247eb132b7f7b574.js\"],\"OutletBoundary\"]\n8:\"$Sreact.suspense\"\na:I[97367,[\"/_next/static/chunks/ff1a16fafef87110.js\",\"/_next/static/chunks/247eb132b7f7b574.js\"],\"ViewportBoundary\"]\nc:I[97367,[\"/_next/static/chunks/ff1a16fafef87110.js\",\"/_next/static/chunks/247eb132b7f7b574.js\"],\"MetadataBoundary\"]\ne:I[68027,[],\"default\"]\n:HL[\"/_next/static/chunks/85a84dc8ab6487a6.css\",\"style\"]\n:HL[\"/_next/static/media/797e433ab948586e-s.p.dbea232f.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/media/caa3a2e1cccd8315-s.p.853070df.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"DwKqJu6mcvdvAG0mHXcrG\",\"c\":[\"\",\"\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"__PAGE__\",{}]},\"$undefined\",\"$undefined\",true],[[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/chunks/85a84dc8ab6487a6.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/8006abbb7813bac9.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"html\",null,{\"lang\":\"en\",\"children\":[\"$\",\"body\",null,{\"className\":\"geist_a71539c9-module__T19VSG__variable geist_mono_8d43a2aa-module__8Li5zG__variable antialiased\",\"children\":[[\"$\",\"$L2\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L3\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":[[\"$\",\"$L4\",null,{}],[]],\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}],[\"$\",\"$L5\",null,{\"position\":\"top-right\",\"autoClose\":3000,\"hideProgressBar\":false,\"newestOnTop\":false,\"closeOnClick\":true,\"rtl\":false,\"pauseOnFocusLoss\":true,\"draggable\":true,\"pauseOnHover\":true}]]}]}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[\"$L6\",null,[\"$\",\"$L7\",null,{\"children\":[\"$\",\"$8\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@9\"}]}]]}],{},null,fal

Found 51 minutes ago by HttpPlugin