LeakIX - Host 65.8.131.98

Host 65.8.131.98

United States

AMAZON-02

Ubuntu

Software information

AmazonS3

tcp/443 tcp/80

Apache Apache 2

tcp/443

Apache Apache

tcp/443 tcp/80

Apache Apache 2.4.62

tcp/443

CloudFront

tcp/443 tcp/80

Microsoft-IIS 10.0

tcp/443

N A

tcp/443

OpenSSL OpenSSL 1.0.2k-fips

tcp/443

PHP PHP 7.4.15

tcp/443

awselb awselb 2.0

tcp/443

cloudflare

tcp/443

nginx nginx

tcp/443 tcp/80

nginx nginx 1.24.0

tcp/443 tcp/80

nginx nginx 1.20.1

tcp/443 tcp/80

nginx nginx 1.22.1

tcp/443

openresty 1.17.8.2

tcp/443 tcp/80

openresty

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 65.8.131.98
Domain: www.funduscvd.com
Port: 443
URL: https://www.funduscvd.com

First seen 2025-11-08 01:57
Last seen 2026-01-09 10:52
Open for 62 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb466aa5a80d16cf9711d520f50fb812b30a76a90b2

Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /tasks/{task_id}
GET /admin/user/{username}
GET /admin/users
GET /annotator/data/{image_id}
GET /dashboard/
GET /dashboard/admin/all-users
GET /dashboard/admin/user/{username}
GET /dashboard/usage-stats
GET /dataset/
GET /dataset/data
GET /dataset/{dataset_id}/data
GET /dataset/{dataset_id}/scan
GET /dataset/{dataset_id}/users
GET /image/
GET /image/check/{file_name}
GET /image/{image_id}
GET /info/
GET /resultAI/
GET /resultAI/download-pdf/{image_id}
GET /resultAI/fhir
GET /resultAI/fhir/download
GET /resultAI/inference/
GET /resultAI/{image_id}
GET /tasks/
GET /tasks/{task_id}/logs
GET /undo/list/
GET /user/
GET /user/logout
POST /admin/user/
POST /admin/user/{username}/account-type
POST /admin/user/{username}/ai-limit
POST /admin/user/{username}/subscription
POST /annotator/data
POST /dataset/{dataset_id}
POST /dataset/{dataset_id}/share
POST /image/multiple
POST /image/pacsgetdicom
POST /resultAI/download-pdfs/batch
POST /resultAI/inference/all
POST /undo/
POST /user/login
POST /user/password
POST /user/register

Found on 2026-01-09 10:52

Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb466aa5a80d16cf9711d520f50fb812b3054d2dd1c

Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /tasks/{task_id}
GET /admin/user/{username}
GET /admin/users
GET /annotator/data/{image_id}
GET /dashboard/
GET /dashboard/admin/all-users
GET /dashboard/admin/user/{username}
GET /dashboard/usage-stats
GET /dataset/
GET /dataset/data
GET /dataset/{dataset_id}/data
GET /dataset/{dataset_id}/scan
GET /dataset/{dataset_id}/users
GET /image/
GET /image/check/{file_name}
GET /image/{image_id}
GET /info/
GET /resultAI/
GET /resultAI/fhir
GET /resultAI/fhir/download
GET /resultAI/inference/
GET /resultAI/{image_id}
GET /tasks/
GET /tasks/{task_id}/logs
GET /undo/list/
GET /user/
GET /user/logout
POST /admin/user/
POST /admin/user/{username}/account-type
POST /admin/user/{username}/ai-limit
POST /admin/user/{username}/subscription
POST /annotator/data
POST /dataset/{dataset_id}
POST /dataset/{dataset_id}/share
POST /image/multiple
POST /image/pacsgetdicom
POST /resultAI/download-pdfs/batch
POST /resultAI/inference/all
POST /undo/
POST /user/login
POST /user/password
POST /user/register

Found on 2025-11-22 06:38

Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb466aa5a80d16cf9711d520f50fb812b30ff0e89b0

Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /tasks/{task_id}
GET /admin/user/{username}
GET /admin/users
GET /annotator/data/{image_id}
GET /dashboard/
GET /dashboard/admin/all-users
GET /dashboard/admin/user/{username}
GET /dashboard/usage-stats
GET /dataset/
GET /dataset/data
GET /dataset/{dataset_id}/data
GET /dataset/{dataset_id}/scan
GET /dataset/{dataset_id}/users
GET /image/
GET /image/check/{file_name}
GET /image/{image_id}
GET /info/
GET /resultAI/
GET /resultAI/fhir
GET /resultAI/fhir/download
GET /resultAI/inference/
GET /resultAI/{image_id}
GET /tasks/
GET /tasks/{task_id}/logs
GET /undo/list/
GET /user/
GET /user/logout
POST /admin/user/
POST /admin/user/{username}/account-type
POST /admin/user/{username}/ai-limit
POST /admin/user/{username}/subscription
POST /annotator/data
POST /dataset/{dataset_id}
POST /dataset/{dataset_id}/share
POST /image/multiple
POST /image/pacsgetdicom
POST /resultAI/inference/all
POST /undo/
POST /user/login
POST /user/password
POST /user/register

Found on 2025-11-08 01:57

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.8.131.98
Domain: nusamer.com
Port: 443
URL: https://nusamer.com

First seen 2025-12-10 13:47
Last seen 2026-01-02 12:36
Open for 22 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d8b2ab5db06f43f8d432c7a1adfeadf24a
```
Found 8 files trough .DS_Store spidering:

/folder-alias.json
/img
/img/bg.jpg
/img/footer.png
/img/icon.png
/img/logo.png
/index.html
/js
```
  Found on 2026-01-02 12:36
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.8.131.98
Domain: suzurigo.com
Port: 443
URL: https://suzurigo.com

First seen 2023-07-24 03:18
Last seen 2026-01-02 12:33
Open for 893 days

Severity: high
Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea9496bd62409cd4ad57b7391cee9f871b9

Found 23 files trough .DS_Store spidering:

/favicon
/favicon/favicon1
/images
/images/about
/images/aws-website
/images/build-your-own-website
/images/coffee-is-back
/images/ecs-nginx
/images/ecs-nginx/nginx.png
/images/fuji2023
/images/gomodules
/images/gomodules/go-logo.png
/images/my-first-post
/images/my-second-post
/images/my-third-post
/images/nice-vacation
/images/nice-vacation/izu.jpg
/images/publish-website
/images/s24
/images/the-beach
/images/webscraping
/images/webscraping/images
/scripts

Found on 2026-01-02 12:33

Severity: high
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57af97b3dd71061d68c1f87eff5bc887f1e

Found 19 files trough .DS_Store spidering:

/favicon
/favicon/favicon1
/images
/images/about
/images/aws-website
/images/build-your-own-website
/images/coffee-is-back
/images/ecs-nginx
/images/fuji2023
/images/gomodules
/images/my-first-post
/images/my-second-post
/images/my-third-post
/images/nice-vacation
/images/publish-website
/images/s24
/images/the-beach
/images/webscraping
/scripts

Found on 2025-12-01 10:51

Severity: high
Fingerprint: 5f32cf5d6962f09cab28146bab28146b387df8ce74617f23da378a7445753c00

Found 21 files trough .DS_Store spidering:

/favicon
/favicon/favicon1
/images
/images/about
/images/aws-website
/images/build-your-own-website
/images/coffee-is-back
/images/ecs-nginx
/images/ecs-nginx/nginx.png
/images/fuji2023
/images/gomodules
/images/gomodules/go-logo.png
/images/my-first-post
/images/my-second-post
/images/my-third-post
/images/nice-vacation
/images/publish-website
/images/s24
/images/the-beach
/images/webscraping
/scripts

Found on 2025-11-28 23:05

Severity: low
Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc278dd409d04f927288de6313877ca74a
```
Found 4 files trough .DS_Store spidering:

/favicon
/favicon/favicon1
/images
/scripts
```
Found on 2025-11-20 11:03

Severity: high
Fingerprint: 5f32cf5d6962f09c3838040e3838040ea73dae43ae00f190313437613e39d7d6

Found 20 files trough .DS_Store spidering:

/favicon
/favicon/favicon1
/images
/images/about
/images/aws-website
/images/build-your-own-website
/images/coffee-is-back
/images/ecs-nginx
/images/ecs-nginx/nginx.png
/images/fuji2023
/images/gomodules
/images/my-first-post
/images/my-second-post
/images/my-third-post
/images/nice-vacation
/images/publish-website
/images/s24
/images/the-beach
/images/webscraping
/scripts

Found on 2025-11-05 08:02

Severity: high
Fingerprint: 5f32cf5d6962f09cdafa5447dafa5447aaeef502dee87ddffe43d418c34fc64d

Found 18 files trough .DS_Store spidering:

/favicon
/favicon/favicon1
/images
/images/about
/images/aws-website
/images/build-your-own-website
/images/coffee-is-back
/images/fuji2023
/images/gomodules
/images/my-first-post
/images/my-second-post
/images/my-third-post
/images/nice-vacation
/images/publish-website
/images/s24
/images/the-beach
/images/webscraping
/scripts

Found on 2024-06-26 08:29

Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf17642f59365a341b9717841b9717841b97178
```
Found 2 files trough .DS_Store spidering:

/images
/images/izu.jpg
```
Found on 2023-07-24 03:18

Create report

Open service 65.8.131.98:443 · gms.us.com

2026-01-12 01:30

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 163
Connection: close
Date: Sun, 11 Jan 2026 17:53:44 GMT
Last-Modified: Tue, 10 Nov 2020 22:42:26 GMT
ETag: "a5202503ed688985b9c740ebca218d9f"
x-amz-version-id: TffgDENOsoC3vbW7ZX6lnfESrXGDGQ1X
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 b3c2d934335633b45a80b7ad63463cda.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: pwGwtlZxQb7nAWjJ_HgwW1_lFNtBlKHv7axfXTqD9kL6ksxmnxABAg==
Age: 27433

Page title: Hello World

<!doctype html>

<html lang="en">
<head>
  <meta charset="utf-8">

  <title>Hello World</title>
</head>

<body>
  <h1>Hello World!</h1>
</body>
</html>

Found 2026-01-12 by HttpPlugin