LeakIX - Host 52.85.65.45

Host 52.85.65.45

United States

AMAZON-02

Ubuntu

Software information

AmazonS3

tcp/443 tcp/80

Apache Apache

tcp/443 tcp/80

Apache Apache 2.4.57

tcp/443

CloudFront

tcp/443 tcp/80

Microsoft-IIS 10.0

tcp/443 tcp/80

OpenSSL OpenSSL 3.0.9

tcp/443

Server

tcp/443

Tengine

tcp/443 tcp/80

Vercel

tcp/443

awselb awselb 2.0

tcp/443 tcp/80

envoy

tcp/443

istio-envoy

tcp/443

ldweb

tcp/443 tcp/80

nginx nginx 1.20.1

tcp/443

nginx nginx 1.16.1

tcp/443 tcp/80

nginx nginx 1.24.0

tcp/443

nginx nginx 1.14.0

tcp/443

nginx nginx

tcp/443 tcp/80

openresty

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.45
Domain: holarsolar.com
Port: 443
URL: https://holarsolar.com

First seen 2025-09-03 02:43
Last seen 2026-01-02 23:13
Open for 121 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9506476d1d064529cc6b03facb38d6cc9
```
Found 5 files trough .DS_Store spidering:

/img
/img/portfolio
/img/portfolio/3.3 kW
/img/portfolio/4.95 kW
/img/portfolio/5.4 kW
```
  Found on 2026-01-02 23:13
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.45
Domain: www.longevitylounge.in
Port: 443
URL: https://www.longevitylounge.in

First seen 2025-06-01 00:58
Last seen 2026-01-02 21:03
Open for 215 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fb246cfc7bd9842ebcf582f43cf582f43
```
Found 3 files trough .DS_Store spidering:

/img
/index.html
/js
```
  Found on 2026-01-02 21:03
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.45
Domain: learn-staging.edfarm.org
Port: 443
URL: https://learn-staging.edfarm.org

First seen 2025-09-28 03:58
Last seen 2026-01-02 17:22
Open for 96 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c778888b4778888b41780d264e32e0e0828946ef6ab0691a5

Found 40 files trough .DS_Store spidering:

/assets
/fols2025
/tinymce
/tinymce/icons
/tinymce/models
/tinymce/plugins
/tinymce/plugins/accordion
/tinymce/plugins/advlist
/tinymce/plugins/anchor
/tinymce/plugins/autolink
/tinymce/plugins/autoresize
/tinymce/plugins/autosave
/tinymce/plugins/charmap
/tinymce/plugins/code
/tinymce/plugins/codesample
/tinymce/plugins/directionality
/tinymce/plugins/emoticons
/tinymce/plugins/fullscreen
/tinymce/plugins/help
/tinymce/plugins/image
/tinymce/plugins/importcss
/tinymce/plugins/insertdatetime
/tinymce/plugins/link
/tinymce/plugins/lists
/tinymce/plugins/media
/tinymce/plugins/nonbreaking
/tinymce/plugins/pagebreak
/tinymce/plugins/preview
/tinymce/plugins/quickbars
/tinymce/plugins/save
/tinymce/plugins/searchreplace
/tinymce/plugins/table
/tinymce/plugins/template
/tinymce/plugins/visualblocks
/tinymce/plugins/visualchars
/tinymce/plugins/wordcount
/tinymce/skins
/tinymce/skins/content
/tinymce/skins/ui
/tinymce/themes

Found on 2026-01-02 17:22

Severity: medium
Fingerprint: 5f32cf5d6962f09c8f03d7bd8f03d7bdabbbb08b10ae9f91e398a71f9b3ca8e7

Found 38 files trough .DS_Store spidering:

/assets
/fols2025
/tinymce
/tinymce/icons
/tinymce/models
/tinymce/plugins
/tinymce/plugins/accordion
/tinymce/plugins/advlist
/tinymce/plugins/anchor
/tinymce/plugins/autolink
/tinymce/plugins/autoresize
/tinymce/plugins/autosave
/tinymce/plugins/charmap
/tinymce/plugins/code
/tinymce/plugins/codesample
/tinymce/plugins/directionality
/tinymce/plugins/emoticons
/tinymce/plugins/fullscreen
/tinymce/plugins/help
/tinymce/plugins/image
/tinymce/plugins/importcss
/tinymce/plugins/insertdatetime
/tinymce/plugins/link
/tinymce/plugins/lists
/tinymce/plugins/media
/tinymce/plugins/nonbreaking
/tinymce/plugins/pagebreak
/tinymce/plugins/preview
/tinymce/plugins/quickbars
/tinymce/plugins/save
/tinymce/plugins/searchreplace
/tinymce/plugins/table
/tinymce/plugins/template
/tinymce/plugins/visualblocks
/tinymce/plugins/visualchars
/tinymce/plugins/wordcount
/tinymce/skins
/tinymce/themes

Found on 2025-12-13 02:13

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.45
Domain: www.2nlf.com
Port: 443
URL: https://www.2nlf.com

First seen 2025-12-07 16:46
Last seen 2026-01-02 08:51
Open for 25 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c1e3ea8c61e3ea8c6ae89376dd93aaa588b39a669d5f9c8f7

Found 86 files trough .DS_Store spidering:

/.gitignore
/.htaccess
/.php-cs-fixer.dist.php
/admin373qgknns8m5y3czvfc
/admin373qgknns8m5y3czvfc/autoupgrade
/admin373qgknns8m5y3czvfc/backups
/admin373qgknns8m5y3czvfc/export
/admin373qgknns8m5y3czvfc/filemanager
/admin373qgknns8m5y3czvfc/filemanager/config
/admin373qgknns8m5y3czvfc/filemanager/css
/admin373qgknns8m5y3czvfc/filemanager/img
/admin373qgknns8m5y3czvfc/filemanager/include
/admin373qgknns8m5y3czvfc/filemanager/jPlayer
/admin373qgknns8m5y3czvfc/filemanager/js
/admin373qgknns8m5y3czvfc/filemanager/lang
/admin373qgknns8m5y3czvfc/filemanager/uploader
/admin373qgknns8m5y3czvfc/import
/admin373qgknns8m5y3czvfc/themes
/admin373qgknns8m5y3czvfc/themes/default
/admin373qgknns8m5y3czvfc/themes/new-theme
/app
/autoload.php
/bin
/cache
/classes
/composer.lock
/config
/controllers
/docs
/download
/error500.html
/fonts
/img
/img/admin
/img/c
/img/cms
/img/cms/about-us
/img/cms/blog
/img/cms/category
/img/cms/contact-us
/img/cms/distributor
/img/cms/flash-sale
/img/cms/jiuan
/img/cms/nav
/img/cms/security
/img/cms/sku
/img/co
/img/e
/img/flags
/img/genders
/img/jquery-ui
/img/l
/img/m
/img/os
/img/p
/img/pr
/img/s
/img/scenes
/img/st
/img/su
/img/t
/img/tmp
/index.php
/init.php
/INSTALL.txt
/js
/LICENSES
/localization
/mails
/Makefile
/modules
/override
/pdf
/phpstan.neon.dist
/robots.txt
/src
/t.php
/templates
/themes
/tools
/translations
/upload
/var
/vendor
/video
/webservice

Found on 2026-01-02 08:51

Severity: medium
Fingerprint: 5f32cf5d6962f09c7b6beb587b6beb587abad4a7f8cf2a3aa2226deb9c803fa2

Found 57 files trough .DS_Store spidering:

/.gitignore
/.htaccess
/.php-cs-fixer.dist.php
/admin373qgknns8m5y3czvfc
/admin373qgknns8m5y3czvfc/autoupgrade
/admin373qgknns8m5y3czvfc/backups
/admin373qgknns8m5y3czvfc/export
/admin373qgknns8m5y3czvfc/filemanager
/admin373qgknns8m5y3czvfc/filemanager/config
/admin373qgknns8m5y3czvfc/filemanager/css
/admin373qgknns8m5y3czvfc/filemanager/img
/admin373qgknns8m5y3czvfc/filemanager/include
/admin373qgknns8m5y3czvfc/filemanager/jPlayer
/admin373qgknns8m5y3czvfc/filemanager/js
/admin373qgknns8m5y3czvfc/filemanager/lang
/admin373qgknns8m5y3czvfc/filemanager/uploader
/admin373qgknns8m5y3czvfc/import
/admin373qgknns8m5y3czvfc/themes
/admin373qgknns8m5y3czvfc/themes/default
/admin373qgknns8m5y3czvfc/themes/new-theme
/app
/autoload.php
/bin
/cache
/classes
/composer.lock
/config
/controllers
/docs
/download
/error500.html
/fonts
/img
/index.php
/init.php
/INSTALL.txt
/js
/LICENSES
/localization
/mails
/Makefile
/modules
/override
/pdf
/phpstan.neon.dist
/robots.txt
/src
/t.php
/templates
/themes
/tools
/translations
/upload
/var
/vendor
/video
/webservice

Found on 2025-12-13 16:44

Severity: medium
Fingerprint: 5f32cf5d6962f09ca728a86fa728a86f597daabef3046baf379a1880df1a829f

Found 76 files trough .DS_Store spidering:

/.gitignore
/.htaccess
/.php-cs-fixer.dist.php
/admin373qgknns8m5y3czvfc
/admin373qgknns8m5y3czvfc/autoupgrade
/admin373qgknns8m5y3czvfc/backups
/admin373qgknns8m5y3czvfc/export
/admin373qgknns8m5y3czvfc/filemanager
/admin373qgknns8m5y3czvfc/filemanager/config
/admin373qgknns8m5y3czvfc/filemanager/css
/admin373qgknns8m5y3czvfc/filemanager/img
/admin373qgknns8m5y3czvfc/filemanager/include
/admin373qgknns8m5y3czvfc/filemanager/jPlayer
/admin373qgknns8m5y3czvfc/filemanager/js
/admin373qgknns8m5y3czvfc/filemanager/lang
/admin373qgknns8m5y3czvfc/filemanager/uploader
/admin373qgknns8m5y3czvfc/import
/admin373qgknns8m5y3czvfc/themes
/admin373qgknns8m5y3czvfc/themes/default
/admin373qgknns8m5y3czvfc/themes/new-theme
/app
/autoload.php
/bin
/cache
/classes
/composer.lock
/config
/controllers
/docs
/download
/error500.html
/fonts
/img
/img/admin
/img/c
/img/cms
/img/co
/img/e
/img/flags
/img/genders
/img/jquery-ui
/img/l
/img/m
/img/os
/img/p
/img/pr
/img/s
/img/scenes
/img/st
/img/su
/img/t
/img/tmp
/index.php
/init.php
/INSTALL.txt
/js
/LICENSES
/localization
/mails
/Makefile
/modules
/override
/pdf
/phpstan.neon.dist
/robots.txt
/src
/t.php
/templates
/themes
/tools
/translations
/upload
/var
/vendor
/video
/webservice

Found on 2025-12-07 16:46

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 52.85.65.45
Domain: kashvisor.com
Port: 443
URL: https://kashvisor.com

First seen 2025-08-22 02:30
Last seen 2026-01-02 01:53
Open for 132 days

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652211562ada

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = https://karthikbalu@bitbucket.org/clofus/kashivisor.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[remote "github"]
	url = https://github.com/Kashvisor/Clofus.git
	fetch = +refs/heads/*:refs/remotes/github/*
[branch "master1"]
	remote = github
	merge = refs/heads/master
[branch "master2"]
	remote = github
	merge = refs/heads/master
[branch "master3"]
	remote = github
	merge = refs/heads/master
[branch "master0"]
	remote = github
	merge = refs/heads/master
[branch "master"]
	remote = github
	merge = refs/heads/master
	vscode-merge-base = origin/master

Found on 2026-01-02 01:53

722 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.45
Domain: www.antillaestates.com
Port: 443
URL: https://www.antillaestates.com

First seen 2025-06-08 07:37
Last seen 2026-01-01 23:49
Open for 207 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c8329733f8329733fa0a22501dbaa64878a2428ea9fa47fb0
```
Found 10 files trough .DS_Store spidering:

/assets
/assets/css
/assets/fonts
/assets/img
/assets/js
/assets/property_details.pdf
/assets/video
/assets/webfonts
/next.svg
/vercel.svg
```
  Found on 2026-01-01 23:49
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.45
Domain: bike.kreativgeek.be
Port: 443
URL: https://bike.kreativgeek.be

First seen 2024-09-14 07:48
Last seen 2026-01-01 22:00
Open for 474 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642206cdd84df98f53adf98f53adf98f53a
```
Found 2 files trough .DS_Store spidering:

/gpx
/js
```
  Found on 2026-01-01 22:00
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 52.85.65.45
Domain: magentodocs.integra.do
Port: 443
URL: https://magentodocs.integra.do

First seen 2024-11-03 04:11
Last seen 2025-12-16 15:09
Open for 408 days
- Severity: critical
  Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884029ffc42c1c13dd340
```
[init]
	defaultBranch = none
[fetch]
	recurseSubmodules = false
[transfer]
	bundleURI = true
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab-ci-token:dWsdh-fmKffiHvx1FV19@git2bis.com.br/integrado/dev/documentacao-magento-1.5.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[lfs]
	repositoryformatversion = 0
```
  Found on 2025-12-16 15:09
  
  393 Bytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 52.85.65.45
Domain: premiermediaav.com
Port: 443
URL: https://premiermediaav.com

First seen 2025-12-05 19:10
Last seen 2025-12-12 08:58
Open for 6 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d36f2a9e4dc6ec8e3faec04fe466fb5752457167

GraphQL introspection enabled at /graphql
Types: 470 (by kind: ENUM: 44, INPUT_OBJECT: 112, INTERFACE: 25, OBJECT: 284, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-12 08:58

781.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2ea394f5f1594c26dcc58d848b76fd356154b4856

GraphQL introspection enabled at /graphql/api
Types: 470 (by kind: ENUM: 44, INPUT_OBJECT: 112, INTERFACE: 25, OBJECT: 284, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-05 19:10

781.6 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 52.85.65.45
Domain: www.website-6fad9d5c822a0e64.dynamic-environment.mydaytrip.net
Port: 443
URL: https://www.website-6fad9d5c822a0e64.dynamic-environment.mydaytrip.net

First seen 2025-12-04 15:32
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3f8bd54934ea39ed1770c9d385fcb7055b888ca61
```
GraphQL introspection enabled at /graphql
Types: 260 (by kind: ENUM: 29, INPUT_OBJECT: 56, OBJECT: 170, SCALAR: 5)
Operations:
- Query: Query | fields: arcadeDemo, countries, countriesWithActiveRoutes, countryByIsoCode, customerAppVersion
- Mutation: Mutation | fields: requestByTheHourBooking, requestFlexibleOffer, requestManagedOffer, requestOfferForDayTrip, requestOffersV2
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2025-12-04 15:32
  
  434.0 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.45
Domain: demo.chartiq.com
Port: 443
URL: https://demo.chartiq.com

First seen 2024-11-18 08:51
Last seen 2025-04-10 08:51
Open for 143 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d1ad1b6281ad1b6281ad1b6281ad1b628
```
Found 1 files trough .DS_Store spidering:

/plugins
```
  Found on 2025-04-10 08:51
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.45
Domain: www.graice.com
Port: 443
URL: https://www.graice.com

First seen 2024-10-02 06:47
Last seen 2025-02-24 20:08
Open for 145 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9df46ca378f46ca378f46ca378f46ca378
```
Found 1 files trough .DS_Store spidering:

/.well-known
```
  Found on 2025-02-24 20:08
Create report

Open service 52.85.65.45:443 · cdn.icoogod.com

2026-01-13 01:08

HTTP/1.1 403 Forbidden
Content-Type: application/xml
Content-Length: 379
Connection: close
Server: Tengine
Timing-Allow-Origin: *
Date: Tue, 13 Jan 2026 01:08:28 GMT
x-oss-request-id: 69659B0CD3A5E137336535E5
x-oss-cdn-auth: success
x-oss-server-time: 0
x-oss-ec: 0003-00000002
Via: ens-cache25.l2de4[151,302,403-1280,C], ens-cache20.l2de4[304,0], ens-cache8.de7[304,389,403-1280,C], ens-cache7.de7[391,0], 1.1 2f495c2a75817f316afd4d3bb437bf0a.cloudfront.net (CloudFront)
Ali-Swift-Global-Savetime: 1768266508
EagleId: a3b5839b17682665080943084e
X-Swift-Error: orig response 4XX error
X-Swift-SaveTime: Tue, 13 Jan 2026 01:08:28 GMT
X-Swift-CacheTime: 0
X-Cache: Error from cloudfront
X-Amz-Cf-Pop: MUC50-P6
X-Amz-Cf-Id: QVWUubuEplihNinge-CdyTXDuy2u4Gsc67gshV9qzbdnQiu4pVjOSg==
Vary: Origin


<?xml version="1.0" encoding="UTF-8"?>
<Error>
  <Code>AccessDenied</Code>
  <Message>Anonymous user has no right to access this bucket.</Message>
  <RequestId>69659B0CD3A5E137336535E5</RequestId>
  <HostId>joi-user-res.oss-us-west-1.aliyuncs.com</HostId>
  <EC>0003-00000002</EC>
  <RecommendDoc>https://api.alibabacloud.com/troubleshoot?q=0003-00000002</RecommendDoc>
</Error>

Found 2 days ago by HttpPlugin