LeakIX - Host 99.83.151.71

Host 99.83.151.71

United States

AMAZON-AES

Software information

Heroku

tcp/443 tcp/80

heroku-router

tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: ssja.quixi.com
Port: 443
URL: https://ssja.quixi.com

First seen 2025-11-15 00:50
Last seen 2026-01-14 04:27
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-14 04:27
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: portal.gdevelopments.com.au
Port: 80
URL: http://portal.gdevelopments.com.au

First seen 2025-05-16 02:15
Last seen 2026-01-14 02:46
Open for 243 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-14 02:46
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 06:37
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: cgm.y1k3s.com
Port: 443
URL: https://cgm.y1k3s.com

First seen 2025-11-14 03:33
Last seen 2026-01-14 02:27
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43a0a0e27f0caf932a9a8a33844143bc8a7d7a85ff
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /devicestatus/{spec}
DELETE /treatments/{spec}
GET /devicestatus/
GET /echo/{storage}/{spec}
GET /entries
GET /entries/{spec}
GET /profile
GET /slice/{storage}/{field}/{type}/{prefix}/{regex}
GET /status
GET /times/echo/{prefix}/{regex}
GET /times/{prefix}/{regex}
GET /treatments
```
  Found on 2026-01-14 02:27
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: service.bss-staging.auslr.io
Port: 80
URL: http://service.bss-staging.auslr.io

First seen 2025-11-14 03:33
Last seen 2026-01-14 02:27
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43f6f89455b899709811568a379c161071553b52b5
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /api/blob/{blobId}
GET /api/cur-token-info
GET /api/gc/handle
GET /api/ping
GET /api/service-token
GET /api/token
GET /api/tokens
GET /api/upload-tokens
GET /api/v2/blob/batch
POST /api/blob
POST /api/debug/gc/run
POST /api/gc/complete
POST /api/gc/touch
POST /api/v2/blob
```
  Found on 2026-01-14 02:27
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: hashprop.hashfinancialgroup.com
Port: 443
URL: https://hashprop.hashfinancialgroup.com

First seen 2024-11-14 20:20
Last seen 2026-01-14 02:08
Open for 425 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-14 02:08
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 23:55
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-16 02:57
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: jkv-il.quixi-staging.com
Port: 443
URL: https://jkv-il.quixi-staging.com

First seen 2025-11-14 02:53
Last seen 2026-01-14 01:46
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-14 01:46
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.alli.io
Port: 80
URL: http://api.alli.io

First seen 2025-11-14 02:42
Last seen 2026-01-14 01:37
Open for 60 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3d57bcec616f5b336616a3bb5f9f7f082e6880e14
```
GraphQL introspection enabled at /graphql
Types: 72 (by kind: ENUM: 6, INPUT_OBJECT: 14, OBJECT: 46, SCALAR: 6)
Operations:
- Query: Query | fields: pro, pros, prosBy, user, users
- Mutation: Mutation | fields: addBooking, addUser, cancelBooking, updateBooking, updateUser
Directives: cacheControl, deprecated, include, skip, specifiedBy (total: 5)
```
  Found on 2026-01-14 01:37
  
  159.1 kBytes
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.alli.io
Port: 443
URL: https://api.alli.io

First seen 2025-11-14 02:42
Last seen 2026-01-14 01:37
Open for 60 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3d57bcec616f5b336616a3bb5f9f7f082e6880e14
```
GraphQL introspection enabled at /graphql
Types: 72 (by kind: ENUM: 6, INPUT_OBJECT: 14, OBJECT: 46, SCALAR: 6)
Operations:
- Query: Query | fields: pro, pros, prosBy, user, users
- Mutation: Mutation | fields: addBooking, addUser, cancelBooking, updateBooking, updateUser
Directives: cacheControl, deprecated, include, skip, specifiedBy (total: 5)
```
  Found on 2026-01-14 01:37
  
  159.1 kBytes
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: www.torontomandarinschool.com
Port: 443
URL: https://www.torontomandarinschool.com

First seen 2022-09-18 05:16
Last seen 2026-01-14 01:28
Open for 1213 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c88c2190688c2190619917d34dab05742d31f0ff3adee5bf5

Found 107 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/admin
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/frontend
/frontend/fonts
/frontend/images
/frontend/images/about us
/frontend/images/about us/Curriculumn taught sytematically.png
/frontend/images/about us/Customized lessons.png
/frontend/images/about us/double arrow.png
/frontend/images/about us/Free 30 mins trial class.png
/frontend/images/about us/Free Language Assessment.png
/frontend/images/about us/Jennifer Chang.jpg
/frontend/images/about us/Live Interaction & Instant Feedback.png
/frontend/images/about us/Native-speaking, highly educated.png
/frontend/images/about us/Our School Facts.jpg
/frontend/images/about us/Our Story-1-min.jpeg
/frontend/images/about us/Our Story-2.jpeg
/frontend/images/about us/Our Story-3.jpeg
/frontend/images/about us/Our Story-4.jpg
/frontend/images/about us/quotation-mark.png
/frontend/images/about us/quotation-right-mark.png
/frontend/images/banner
/frontend/images/banner/3.jpg
/frontend/images/banner/4.jpg
/frontend/images/banner/5.jpg
/frontend/images/banner/6.jpg
/frontend/images/banner/7.jpg
/frontend/images/business Services
/frontend/images/business Services/Icons
/frontend/images/business Services/Partner logos
/frontend/images/business Services/Partner logos/BMO.jpg
/frontend/images/business Services/Partner logos/Brampton-Logo.png
/frontend/images/business Services/Partner logos/Canadian Tire.png
/frontend/images/business Services/Partner logos/CBC News.png
/frontend/images/business Services/Partner logos/CCBC.jpg
/frontend/images/business Services/Partner logos/CIBC.png
/frontend/images/business Services/Partner logos/crestwood-college
/frontend/images/business Services/Partner logos/CSI.png
/frontend/images/business Services/Partner logos/Embridge.jpg
/frontend/images/business Services/Partner logos/forensic-technology-squarelogo.png
/frontend/images/business Services/Partner logos/KPMG.png
/frontend/images/business Services/Partner logos/Loblaws.png
/frontend/images/business Services/Partner logos/manulife-logo-preview.png
/frontend/images/business Services/Partner logos/Mercedes-Logo.png
/frontend/images/business Services/Partner logos/Rogers.png
/frontend/images/business Services/Partner logos/shopify-setup.jpg
/frontend/images/business Services/Partner logos/shopify.webp
/frontend/images/business Services/Partner logos/Shoppers_Drug_Mart_logo.png
/frontend/images/business Services/Partner logos/Sick-kids.png
/frontend/images/business Services/Partner logos/Spirit of Math.png
/frontend/images/business Services/Partner logos/Sunlife.jpg
/frontend/images/business Services/Partner logos/Toronto-Dominion_Bank_logo.svg.png
/frontend/images/business Services/Partner logos/TPL.jpg
/frontend/images/business Services/Partner logos/Walmart.png
/frontend/images/business Services/Photos
/frontend/images/business Services/Photos/Assessment.jpg
/frontend/images/business Services/Photos/Training and Worshop.jpg
/frontend/images/business Services/Photos/Translations.jpg
/frontend/images/email_sent.png
/frontend/images/heightlight
/frontend/images/home-class
/frontend/images/home-class/Adults Classes.png
/frontend/images/home-class/Business Mandarin.png
/frontend/images/home-class/Children and Teens.png
/frontend/images/home-class/JINGBAO Nursery.png
/frontend/images/JINBAO
/frontend/images/JINBAO/1.JPG
/frontend/images/JINBAO/2.JPG
/frontend/images/JINBAO/3.JPG
/frontend/images/JINBAO/4.JPG
/frontend/images/JINBAO/5.JPG
/frontend/images/JINBAO/6.JPG
/frontend/images/JINBAO/7.jpg
/frontend/images/JINBAO/8.JPG
/frontend/images/JINBAO/atom.png
/frontend/images/JINBAO/give-love.png
/frontend/images/JINBAO/page-center
/frontend/images/JINBAO/solution.png
/frontend/images/JINBAO/translation.png
/frontend/images/learn
/frontend/images/logo
/frontend/images/notSearch.png
/frontend/images/payment
/frontend/images/shopping cart
/frontend/images/shopping cart/Cash.png
/frontend/images/shopping cart/Cheque.png
/frontend/images/shopping cart/Debit.png
/frontend/images/shopping cart/Email Transfer.png
/frontend/images/shopping cart/Master.png
/frontend/images/shopping cart/Visa.png
/frontend/images/students
/frontend/images/students/Aaron Zhang.jpeg
/frontend/images/students/Au.jpg
/frontend/images/students/Dinu Merca.jpg
/frontend/images/students/LeslieChan.jpg
/frontend/images/students/Liu.jpg
/frontend/images/students/Peter Eberhardt.jpg
/frontend/images/students/Tristan Potter.jpg
/frontend/images/students/yang yang.jpeg
/frontend/images/wechatCode.png
/frontend/images/图片1.png
/robots.txt

Found on 2026-01-14 01:28

Severity: medium
Fingerprint: 5f32cf5d6962f09cef4a0ce8ef4a0ce8c8309e127f1a7b542feef301332b0c97

Found 80 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/admin
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/frontend
/frontend/fonts
/frontend/images
/frontend/images/about us
/frontend/images/about us/Curriculumn taught sytematically.png
/frontend/images/about us/Customized lessons.png
/frontend/images/about us/double arrow.png
/frontend/images/about us/Free 30 mins trial class.png
/frontend/images/about us/Free Language Assessment.png
/frontend/images/about us/Jennifer Chang.jpg
/frontend/images/about us/Live Interaction & Instant Feedback.png
/frontend/images/about us/Native-speaking, highly educated.png
/frontend/images/about us/Our School Facts.jpg
/frontend/images/about us/Our Story-1-min.jpeg
/frontend/images/about us/Our Story-2.jpeg
/frontend/images/about us/Our Story-3.jpeg
/frontend/images/about us/Our Story-4.jpg
/frontend/images/about us/quotation-mark.png
/frontend/images/about us/quotation-right-mark.png
/frontend/images/banner
/frontend/images/banner/3.jpg
/frontend/images/banner/4.jpg
/frontend/images/banner/5.jpg
/frontend/images/banner/6.jpg
/frontend/images/banner/7.jpg
/frontend/images/business Services
/frontend/images/business Services/Icons
/frontend/images/business Services/Partner logos
/frontend/images/business Services/Partner logos/BMO.jpg
/frontend/images/business Services/Partner logos/Brampton-Logo.png
/frontend/images/business Services/Partner logos/Canadian Tire.png
/frontend/images/business Services/Partner logos/CBC News.png
/frontend/images/business Services/Partner logos/CCBC.jpg
/frontend/images/business Services/Partner logos/CIBC.png
/frontend/images/business Services/Partner logos/crestwood-college
/frontend/images/business Services/Partner logos/CSI.png
/frontend/images/business Services/Partner logos/Embridge.jpg
/frontend/images/business Services/Partner logos/forensic-technology-squarelogo.png
/frontend/images/business Services/Partner logos/KPMG.png
/frontend/images/business Services/Partner logos/Loblaws.png
/frontend/images/business Services/Partner logos/manulife-logo-preview.png
/frontend/images/business Services/Partner logos/Mercedes-Logo.png
/frontend/images/business Services/Partner logos/Rogers.png
/frontend/images/business Services/Partner logos/shopify-setup.jpg
/frontend/images/business Services/Partner logos/shopify.webp
/frontend/images/business Services/Partner logos/Shoppers_Drug_Mart_logo.png
/frontend/images/business Services/Partner logos/Sick-kids.png
/frontend/images/business Services/Partner logos/Spirit of Math.png
/frontend/images/business Services/Partner logos/Sunlife.jpg
/frontend/images/business Services/Partner logos/Toronto-Dominion_Bank_logo.svg.png
/frontend/images/business Services/Partner logos/TPL.jpg
/frontend/images/business Services/Partner logos/Walmart.png
/frontend/images/business Services/Photos
/frontend/images/business Services/Photos/Assessment.jpg
/frontend/images/business Services/Photos/Training and Worshop.jpg
/frontend/images/business Services/Photos/Translations.jpg
/frontend/images/email_sent.png
/frontend/images/heightlight
/frontend/images/home-class
/frontend/images/home-class/Adults Classes.png
/frontend/images/home-class/Business Mandarin.png
/frontend/images/home-class/Children and Teens.png
/frontend/images/home-class/JINGBAO Nursery.png
/frontend/images/JINBAO
/frontend/images/learn
/frontend/images/logo
/frontend/images/notSearch.png
/frontend/images/payment
/frontend/images/shopping cart
/frontend/images/students
/frontend/images/wechatCode.png
/frontend/images/图片1.png
/robots.txt

Found on 2025-11-22 18:56

Severity: medium
Fingerprint: 5f32cf5d6962f09c3078a2ae3078a2ae8884f0bc5892028a87fdca3b90f14827

Found 73 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/admin
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/frontend
/frontend/fonts
/frontend/images
/frontend/images/about us
/frontend/images/about us/Curriculumn taught sytematically.png
/frontend/images/about us/Customized lessons.png
/frontend/images/about us/double arrow.png
/frontend/images/about us/Free 30 mins trial class.png
/frontend/images/about us/Free Language Assessment.png
/frontend/images/about us/Jennifer Chang.jpg
/frontend/images/about us/Live Interaction & Instant Feedback.png
/frontend/images/about us/Native-speaking, highly educated.png
/frontend/images/about us/Our School Facts.jpg
/frontend/images/about us/Our Story-1-min.jpeg
/frontend/images/about us/Our Story-2.jpeg
/frontend/images/about us/Our Story-3.jpeg
/frontend/images/about us/Our Story-4.jpg
/frontend/images/about us/quotation-mark.png
/frontend/images/about us/quotation-right-mark.png
/frontend/images/banner
/frontend/images/banner/3.jpg
/frontend/images/banner/4.jpg
/frontend/images/banner/5.jpg
/frontend/images/banner/6.jpg
/frontend/images/banner/7.jpg
/frontend/images/business Services
/frontend/images/business Services/Icons
/frontend/images/business Services/Partner logos
/frontend/images/business Services/Partner logos/BMO.jpg
/frontend/images/business Services/Partner logos/Brampton-Logo.png
/frontend/images/business Services/Partner logos/Canadian Tire.png
/frontend/images/business Services/Partner logos/CBC News.png
/frontend/images/business Services/Partner logos/CCBC.jpg
/frontend/images/business Services/Partner logos/CIBC.png
/frontend/images/business Services/Partner logos/crestwood-college
/frontend/images/business Services/Partner logos/CSI.png
/frontend/images/business Services/Partner logos/Embridge.jpg
/frontend/images/business Services/Partner logos/forensic-technology-squarelogo.png
/frontend/images/business Services/Partner logos/KPMG.png
/frontend/images/business Services/Partner logos/Loblaws.png
/frontend/images/business Services/Partner logos/manulife-logo-preview.png
/frontend/images/business Services/Partner logos/Mercedes-Logo.png
/frontend/images/business Services/Partner logos/Rogers.png
/frontend/images/business Services/Partner logos/shopify-setup.jpg
/frontend/images/business Services/Partner logos/shopify.webp
/frontend/images/business Services/Partner logos/Shoppers_Drug_Mart_logo.png
/frontend/images/business Services/Partner logos/Sick-kids.png
/frontend/images/business Services/Partner logos/Spirit of Math.png
/frontend/images/business Services/Partner logos/Sunlife.jpg
/frontend/images/business Services/Partner logos/Toronto-Dominion_Bank_logo.svg.png
/frontend/images/business Services/Partner logos/TPL.jpg
/frontend/images/business Services/Partner logos/Walmart.png
/frontend/images/business Services/Photos
/frontend/images/email_sent.png
/frontend/images/heightlight
/frontend/images/home-class
/frontend/images/JINBAO
/frontend/images/learn
/frontend/images/logo
/frontend/images/notSearch.png
/frontend/images/payment
/frontend/images/shopping cart
/frontend/images/students
/frontend/images/wechatCode.png
/frontend/images/图片1.png
/robots.txt

Found on 2025-11-21 01:56

Severity: medium
Fingerprint: 5f32cf5d6962f09ca728a86fa728a86ff1e84aeb05254007d2cdecc0a30017ca

Found 76 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/admin
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/frontend
/frontend/fonts
/frontend/images
/frontend/images/about us
/frontend/images/about us/Curriculumn taught sytematically.png
/frontend/images/about us/Customized lessons.png
/frontend/images/about us/double arrow.png
/frontend/images/about us/Free 30 mins trial class.png
/frontend/images/about us/Free Language Assessment.png
/frontend/images/about us/Jennifer Chang.jpg
/frontend/images/about us/Live Interaction & Instant Feedback.png
/frontend/images/about us/Native-speaking, highly educated.png
/frontend/images/about us/Our School Facts.jpg
/frontend/images/about us/Our Story-1-min.jpeg
/frontend/images/about us/Our Story-2.jpeg
/frontend/images/about us/Our Story-3.jpeg
/frontend/images/about us/Our Story-4.jpg
/frontend/images/about us/quotation-mark.png
/frontend/images/about us/quotation-right-mark.png
/frontend/images/banner
/frontend/images/banner/3.jpg
/frontend/images/banner/4.jpg
/frontend/images/banner/5.jpg
/frontend/images/banner/6.jpg
/frontend/images/banner/7.jpg
/frontend/images/business Services
/frontend/images/business Services/Icons
/frontend/images/business Services/Partner logos
/frontend/images/business Services/Partner logos/BMO.jpg
/frontend/images/business Services/Partner logos/Brampton-Logo.png
/frontend/images/business Services/Partner logos/Canadian Tire.png
/frontend/images/business Services/Partner logos/CBC News.png
/frontend/images/business Services/Partner logos/CCBC.jpg
/frontend/images/business Services/Partner logos/CIBC.png
/frontend/images/business Services/Partner logos/crestwood-college
/frontend/images/business Services/Partner logos/CSI.png
/frontend/images/business Services/Partner logos/Embridge.jpg
/frontend/images/business Services/Partner logos/forensic-technology-squarelogo.png
/frontend/images/business Services/Partner logos/KPMG.png
/frontend/images/business Services/Partner logos/Loblaws.png
/frontend/images/business Services/Partner logos/manulife-logo-preview.png
/frontend/images/business Services/Partner logos/Mercedes-Logo.png
/frontend/images/business Services/Partner logos/Rogers.png
/frontend/images/business Services/Partner logos/shopify-setup.jpg
/frontend/images/business Services/Partner logos/shopify.webp
/frontend/images/business Services/Partner logos/Shoppers_Drug_Mart_logo.png
/frontend/images/business Services/Partner logos/Sick-kids.png
/frontend/images/business Services/Partner logos/Spirit of Math.png
/frontend/images/business Services/Partner logos/Sunlife.jpg
/frontend/images/business Services/Partner logos/Toronto-Dominion_Bank_logo.svg.png
/frontend/images/business Services/Partner logos/TPL.jpg
/frontend/images/business Services/Partner logos/Walmart.png
/frontend/images/business Services/Photos
/frontend/images/business Services/Photos/Assessment.jpg
/frontend/images/business Services/Photos/Training and Worshop.jpg
/frontend/images/business Services/Photos/Translations.jpg
/frontend/images/email_sent.png
/frontend/images/heightlight
/frontend/images/home-class
/frontend/images/JINBAO
/frontend/images/learn
/frontend/images/logo
/frontend/images/notSearch.png
/frontend/images/payment
/frontend/images/shopping cart
/frontend/images/students
/frontend/images/wechatCode.png
/frontend/images/图片1.png
/robots.txt

Found on 2025-11-16 14:37

Severity: medium
Fingerprint: 5f32cf5d6962f09cff76d438ff76d4388ce6d9424d7fcba45a1be0f158159176

Found 93 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/admin
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/frontend
/frontend/fonts
/frontend/images
/frontend/images/about us
/frontend/images/about us/Curriculumn taught sytematically.png
/frontend/images/about us/Customized lessons.png
/frontend/images/about us/double arrow.png
/frontend/images/about us/Free 30 mins trial class.png
/frontend/images/about us/Free Language Assessment.png
/frontend/images/about us/Jennifer Chang.jpg
/frontend/images/about us/Live Interaction & Instant Feedback.png
/frontend/images/about us/Native-speaking, highly educated.png
/frontend/images/about us/Our School Facts.jpg
/frontend/images/about us/Our Story-1-min.jpeg
/frontend/images/about us/Our Story-2.jpeg
/frontend/images/about us/Our Story-3.jpeg
/frontend/images/about us/Our Story-4.jpg
/frontend/images/about us/quotation-mark.png
/frontend/images/about us/quotation-right-mark.png
/frontend/images/banner
/frontend/images/banner/3.jpg
/frontend/images/banner/4.jpg
/frontend/images/banner/5.jpg
/frontend/images/banner/6.jpg
/frontend/images/banner/7.jpg
/frontend/images/business Services
/frontend/images/business Services/Icons
/frontend/images/business Services/Partner logos
/frontend/images/business Services/Partner logos/BMO.jpg
/frontend/images/business Services/Partner logos/Brampton-Logo.png
/frontend/images/business Services/Partner logos/Canadian Tire.png
/frontend/images/business Services/Partner logos/CBC News.png
/frontend/images/business Services/Partner logos/CCBC.jpg
/frontend/images/business Services/Partner logos/CIBC.png
/frontend/images/business Services/Partner logos/crestwood-college
/frontend/images/business Services/Partner logos/CSI.png
/frontend/images/business Services/Partner logos/Embridge.jpg
/frontend/images/business Services/Partner logos/forensic-technology-squarelogo.png
/frontend/images/business Services/Partner logos/KPMG.png
/frontend/images/business Services/Partner logos/Loblaws.png
/frontend/images/business Services/Partner logos/manulife-logo-preview.png
/frontend/images/business Services/Partner logos/Mercedes-Logo.png
/frontend/images/business Services/Partner logos/Rogers.png
/frontend/images/business Services/Partner logos/shopify-setup.jpg
/frontend/images/business Services/Partner logos/shopify.webp
/frontend/images/business Services/Partner logos/Shoppers_Drug_Mart_logo.png
/frontend/images/business Services/Partner logos/Sick-kids.png
/frontend/images/business Services/Partner logos/Spirit of Math.png
/frontend/images/business Services/Partner logos/Sunlife.jpg
/frontend/images/business Services/Partner logos/Toronto-Dominion_Bank_logo.svg.png
/frontend/images/business Services/Partner logos/TPL.jpg
/frontend/images/business Services/Partner logos/Walmart.png
/frontend/images/business Services/Photos
/frontend/images/business Services/Photos/Assessment.jpg
/frontend/images/business Services/Photos/Training and Worshop.jpg
/frontend/images/business Services/Photos/Translations.jpg
/frontend/images/email_sent.png
/frontend/images/heightlight
/frontend/images/home-class
/frontend/images/home-class/Adults Classes.png
/frontend/images/home-class/Business Mandarin.png
/frontend/images/home-class/Children and Teens.png
/frontend/images/home-class/JINGBAO Nursery.png
/frontend/images/JINBAO
/frontend/images/JINBAO/1.JPG
/frontend/images/JINBAO/2.JPG
/frontend/images/JINBAO/3.JPG
/frontend/images/JINBAO/4.JPG
/frontend/images/JINBAO/5.JPG
/frontend/images/JINBAO/6.JPG
/frontend/images/JINBAO/7.jpg
/frontend/images/JINBAO/8.JPG
/frontend/images/JINBAO/atom.png
/frontend/images/JINBAO/give-love.png
/frontend/images/JINBAO/page-center
/frontend/images/JINBAO/solution.png
/frontend/images/JINBAO/translation.png
/frontend/images/learn
/frontend/images/logo
/frontend/images/notSearch.png
/frontend/images/payment
/frontend/images/shopping cart
/frontend/images/students
/frontend/images/wechatCode.png
/frontend/images/图片1.png
/robots.txt

Found on 2025-11-14 02:32

Severity: medium
Fingerprint: 5f32cf5d6962f09c93a25c3a93a25c3a0d96108889fc5a7e4f009637dc5d31d5

Found 46 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/admin
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/frontend
/frontend/fonts
/frontend/images
/frontend/images/about us
/frontend/images/about us/Curriculumn taught sytematically.png
/frontend/images/about us/Customized lessons.png
/frontend/images/about us/double arrow.png
/frontend/images/about us/Free 30 mins trial class.png
/frontend/images/about us/Free Language Assessment.png
/frontend/images/about us/Jennifer Chang.jpg
/frontend/images/about us/Live Interaction & Instant Feedback.png
/frontend/images/about us/Native-speaking, highly educated.png
/frontend/images/about us/Our School Facts.jpg
/frontend/images/about us/Our Story-1-min.jpeg
/frontend/images/about us/Our Story-2.jpeg
/frontend/images/about us/Our Story-3.jpeg
/frontend/images/about us/Our Story-4.jpg
/frontend/images/about us/quotation-mark.png
/frontend/images/about us/quotation-right-mark.png
/frontend/images/banner
/frontend/images/banner/3.jpg
/frontend/images/banner/4.jpg
/frontend/images/banner/5.jpg
/frontend/images/banner/6.jpg
/frontend/images/banner/7.jpg
/frontend/images/business Services
/frontend/images/email_sent.png
/frontend/images/heightlight
/frontend/images/home-class
/frontend/images/JINBAO
/frontend/images/learn
/frontend/images/logo
/frontend/images/notSearch.png
/frontend/images/payment
/frontend/images/shopping cart
/frontend/images/students
/frontend/images/wechatCode.png
/frontend/images/图片1.png
/robots.txt

Found on 2025-03-20 11:11

Severity: medium
Fingerprint: 5f32cf5d6962f09ccbc000d9cbc000d99e0602916878de0920ec69bed5f4bd17

Found 49 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/admin
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/frontend
/frontend/fonts
/frontend/images
/frontend/images/about us
/frontend/images/about us/Curriculumn taught sytematically.png
/frontend/images/about us/Customized lessons.png
/frontend/images/about us/double arrow.png
/frontend/images/about us/Free 30 mins trial class.png
/frontend/images/about us/Free Language Assessment.png
/frontend/images/about us/Jennifer Chang.jpg
/frontend/images/about us/Live Interaction & Instant Feedback.png
/frontend/images/about us/Native-speaking, highly educated.png
/frontend/images/about us/Our School Facts.jpg
/frontend/images/about us/Our Story-1-min.jpeg
/frontend/images/about us/Our Story-2.jpeg
/frontend/images/about us/Our Story-3.jpeg
/frontend/images/about us/Our Story-4.jpg
/frontend/images/about us/quotation-mark.png
/frontend/images/about us/quotation-right-mark.png
/frontend/images/banner
/frontend/images/banner/3.jpg
/frontend/images/banner/4.jpg
/frontend/images/banner/5.jpg
/frontend/images/banner/6.jpg
/frontend/images/banner/7.jpg
/frontend/images/business Services
/frontend/images/business Services/Icons
/frontend/images/business Services/Partner logos
/frontend/images/business Services/Photos
/frontend/images/email_sent.png
/frontend/images/heightlight
/frontend/images/home-class
/frontend/images/JINBAO
/frontend/images/learn
/frontend/images/logo
/frontend/images/notSearch.png
/frontend/images/payment
/frontend/images/shopping cart
/frontend/images/students
/frontend/images/wechatCode.png
/frontend/images/图片1.png
/robots.txt

Found on 2025-03-16 02:18

Severity: medium
Fingerprint: 5f32cf5d6962f09cac85b122ac85b1226d84eff04dc560c639cf895f753a1932

Found 99 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/admin
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/frontend
/frontend/fonts
/frontend/images
/frontend/images/about us
/frontend/images/about us/Curriculumn taught sytematically.png
/frontend/images/about us/Customized lessons.png
/frontend/images/about us/double arrow.png
/frontend/images/about us/Free 30 mins trial class.png
/frontend/images/about us/Free Language Assessment.png
/frontend/images/about us/Jennifer Chang.jpg
/frontend/images/about us/Live Interaction & Instant Feedback.png
/frontend/images/about us/Native-speaking, highly educated.png
/frontend/images/about us/Our School Facts.jpg
/frontend/images/about us/Our Story-1-min.jpeg
/frontend/images/about us/Our Story-2.jpeg
/frontend/images/about us/Our Story-3.jpeg
/frontend/images/about us/Our Story-4.jpg
/frontend/images/about us/quotation-mark.png
/frontend/images/about us/quotation-right-mark.png
/frontend/images/banner
/frontend/images/banner/3.jpg
/frontend/images/banner/4.jpg
/frontend/images/banner/5.jpg
/frontend/images/banner/6.jpg
/frontend/images/banner/7.jpg
/frontend/images/business Services
/frontend/images/business Services/Icons
/frontend/images/business Services/Partner logos
/frontend/images/business Services/Partner logos/BMO.jpg
/frontend/images/business Services/Partner logos/Brampton-Logo.png
/frontend/images/business Services/Partner logos/Canadian Tire.png
/frontend/images/business Services/Partner logos/CBC News.png
/frontend/images/business Services/Partner logos/CCBC.jpg
/frontend/images/business Services/Partner logos/CIBC.png
/frontend/images/business Services/Partner logos/crestwood-college
/frontend/images/business Services/Partner logos/CSI.png
/frontend/images/business Services/Partner logos/Embridge.jpg
/frontend/images/business Services/Partner logos/forensic-technology-squarelogo.png
/frontend/images/business Services/Partner logos/KPMG.png
/frontend/images/business Services/Partner logos/Loblaws.png
/frontend/images/business Services/Partner logos/manulife-logo-preview.png
/frontend/images/business Services/Partner logos/Mercedes-Logo.png
/frontend/images/business Services/Partner logos/Rogers.png
/frontend/images/business Services/Partner logos/shopify-setup.jpg
/frontend/images/business Services/Partner logos/shopify.webp
/frontend/images/business Services/Partner logos/Shoppers_Drug_Mart_logo.png
/frontend/images/business Services/Partner logos/Sick-kids.png
/frontend/images/business Services/Partner logos/Spirit of Math.png
/frontend/images/business Services/Partner logos/Sunlife.jpg
/frontend/images/business Services/Partner logos/Toronto-Dominion_Bank_logo.svg.png
/frontend/images/business Services/Partner logos/TPL.jpg
/frontend/images/business Services/Partner logos/Walmart.png
/frontend/images/business Services/Photos
/frontend/images/business Services/Photos/Assessment.jpg
/frontend/images/business Services/Photos/Training and Worshop.jpg
/frontend/images/business Services/Photos/Translations.jpg
/frontend/images/email_sent.png
/frontend/images/heightlight
/frontend/images/home-class
/frontend/images/home-class/Adults Classes.png
/frontend/images/home-class/Business Mandarin.png
/frontend/images/home-class/Children and Teens.png
/frontend/images/home-class/JINGBAO Nursery.png
/frontend/images/JINBAO
/frontend/images/JINBAO/1.JPG
/frontend/images/JINBAO/2.JPG
/frontend/images/JINBAO/3.JPG
/frontend/images/JINBAO/4.JPG
/frontend/images/JINBAO/5.JPG
/frontend/images/JINBAO/6.JPG
/frontend/images/JINBAO/7.jpg
/frontend/images/JINBAO/8.JPG
/frontend/images/JINBAO/atom.png
/frontend/images/JINBAO/give-love.png
/frontend/images/JINBAO/page-center
/frontend/images/JINBAO/solution.png
/frontend/images/JINBAO/translation.png
/frontend/images/learn
/frontend/images/logo
/frontend/images/notSearch.png
/frontend/images/payment
/frontend/images/shopping cart
/frontend/images/shopping cart/Cash.png
/frontend/images/shopping cart/Cheque.png
/frontend/images/shopping cart/Debit.png
/frontend/images/shopping cart/Email Transfer.png
/frontend/images/shopping cart/Master.png
/frontend/images/shopping cart/Visa.png
/frontend/images/students
/frontend/images/wechatCode.png
/frontend/images/图片1.png
/robots.txt

Found on 2024-09-18 21:50

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: impact-admin.worldpulse.org
Port: 80
URL: http://impact-admin.worldpulse.org

First seen 2025-11-14 02:32
Last seen 2026-01-14 01:28
Open for 60 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb56a4c842e

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca...
contactPage (args: optional/default) : title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z
financial (args: optional/default) : created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1
footer (args: optional/default) : moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About

Found on 2026-01-14 01:28

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb52e9f7520

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse
contactPage (args: optional/default) : updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2026-01-14 01:28

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5f89d60ca

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action
contactPage (args: optional/default) : title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z
financial (args: optional/default) : created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1
footer (args: optional/default) : id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/

Found on 2026-01-14 01:28

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5eacebfda

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you.
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia

Found on 2026-01-14 01:28

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb57cec3faa

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action
contactPage (args: optional/default) : address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse

Found on 2026-01-02 14:35

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5af2a669c

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About

Found on 2025-12-26 19:22

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5c4139346

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i...
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z
footer (args: optional/default) : instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More

Found on 2025-12-24 22:45

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb589e84ff8

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z
contactPage (args: optional/default) : subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you.
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/

Found on 2025-12-23 02:18

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5a6d91a52

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action
contactPage (args: optional/default) : address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493
financial (args: optional/default) : post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents
footer (args: optional/default) : facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse

Found on 2025-12-20 14:30

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5d04b2f37

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you.
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia

Found on 2025-12-18 17:24

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb59cb9e1a7

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z
contactPage (args: optional/default) : created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More

Found on 2025-12-16 13:25

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5be67e795

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i...
contactPage (args: optional/default) : updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z
financial (args: optional/default) : updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z
footer (args: optional/default) : instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More

Found on 2025-12-12 22:58

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb584f5a8e3

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca...
contactPage (args: optional/default) : address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2025-11-30 21:58

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5a19c2e8b

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices
contactPage (args: optional/default) : subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you.
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2025-11-28 18:35

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb551629d93

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca...
contactPage (args: optional/default) : phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse
financial (args: optional/default) : post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents
footer (args: optional/default) : instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More

Found on 2025-11-26 18:42

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-11-23 05:18

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb53dc30327

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z
contactPage (args: optional/default) : created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z

Found on 2025-11-21 10:51

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5da856dbf

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices
contactPage (args: optional/default) : subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you.
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More

Found on 2025-11-18 09:57

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb58686c14f

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-04-04T19:54:49.609Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia

Found on 2025-11-16 03:19

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb541d36b1f

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-04-04T19:54:49.609Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca...
contactPage (args: optional/default) : address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1

Found on 2025-11-14 02:32

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5577e9e09

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-04-04T19:54:49.609Z
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/

Found on 2025-11-14 02:32

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb582a99ba3

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-04-04T19:54:49.609Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you.
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/

Found on 2025-11-14 02:32

913.9 kBytes 28 rows

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: impact-admin.worldpulse.org
Port: 443
URL: https://impact-admin.worldpulse.org

First seen 2025-11-14 02:32
Last seen 2026-01-14 01:28
Open for 60 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb53694bc9e

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z
contactPage (args: optional/default) : created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1
financial (args: optional/default) : updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z
footer (args: optional/default) : moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About

Found on 2026-01-14 01:28

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5f16350f2

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z
footer (args: optional/default) : facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse

Found on 2026-01-14 01:28

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5cbb5f164

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z
footer (args: optional/default) : created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1

Found on 2026-01-14 01:28

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb51d8faa60

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca...
contactPage (args: optional/default) : phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse
financial (args: optional/default) : created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1
footer (args: optional/default) : id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/

Found on 2026-01-14 01:28

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5ebf0e82c

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z
contactPage (args: optional/default) : updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/

Found on 2026-01-02 05:05

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb53a0c46c6

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse

Found on 2025-12-26 11:33

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb58ed2fa96

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse
contactPage (args: optional/default) : created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/

Found on 2025-12-24 11:27

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb54f17dc0e

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z
contactPage (args: optional/default) : updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z
financial (args: optional/default) : updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2025-12-22 13:53

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb54f9546e6

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-12-19T01:28:39.076Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/

Found on 2025-12-20 13:05

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb526340fdf

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493
financial (args: optional/default) : updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2025-12-18 12:15

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5ccef1c23

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i...
contactPage (args: optional/default) : created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About

Found on 2025-12-16 08:28

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5f6165019

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1
footer (args: optional/default) : updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z

Found on 2025-12-14 01:09

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb548068215

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices
contactPage (args: optional/default) : created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1
financial (args: optional/default) : created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2025-12-12 07:08

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb57d784db1

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2025-12-01 01:38

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5ac40dd6f

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse
contactPage (args: optional/default) : updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z
financial (args: optional/default) : post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents
footer (args: optional/default) : id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/

Found on 2025-11-29 01:50

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb51bd0c6cd

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1

Found on 2025-11-27 12:31

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5a5f564eb

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z
financial (args: optional/default) : post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents
footer (args: optional/default) : linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia

Found on 2025-11-23 14:58

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb56bd1c3c3

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-11-17T21:38:14.602Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca...
contactPage (args: optional/default) : subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you.
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About

Found on 2025-11-21 00:01

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5acb4ec27

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : created_at=2024-12-04T21:40:24.569Z updated_at=2025-04-04T19:54:49.609Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1
contactPage (args: optional/default) : updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z
financial (args: optional/default) : id=1 created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice...
footer (args: optional/default) : facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse

Found on 2025-11-16 04:24

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb506c3a451

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-04-04T19:54:49.609Z banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse
contactPage (args: optional/default) : address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493
financial (args: optional/default) : updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z
footer (args: optional/default) : linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia

Found on 2025-11-14 02:32

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5c4c4f2d1

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : banner_title=World Pulse Voices banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-04-04T19:54:49.609Z
contactPage (args: optional/default) : updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA id=1 created_at=2020-07-02T19:19:19.566Z
financial (args: optional/default) : created_at=2020-11-25T22:04:43.320Z updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2025-11-14 02:32

913.9 kBytes 28 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f30bcee337145f213200bc09f4173fb5d263f88d

GraphQL introspection enabled at /graphql
Types: 1021 (by kind: ENUM: 9, INPUT_OBJECT: 400, OBJECT: 600, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: article, articles, articlesConnection, award, changeChampionsPage
- Mutation: Mutation | fields: createArticle, deleteArticle, deleteAward, updateArticle, updateAward
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 4
award (args: optional/default) : banner_subtitle=Join a global movement of impact—get monthly actions you ca... text_title=From Story to Action text_content=Your encouragement matters—one click can spark real-world i... story_footer_title_1=Donate To World Pulse id=1 created_at=2024-12-04T21:40:24.569Z updated_at=2025-04-04T19:54:49.609Z banner_title=World Pulse Voices
contactPage (args: optional/default) : id=1 created_at=2020-07-02T19:19:19.566Z updated_at=2022-12-23T08:00:06.595Z title=We’d love to hear from you. subtitle=World Pulse phone_number=+1-503-734-2493 address=World Pulse
401 NE 19th Avenue
Suite 200
Portland, OR 97232 USA
financial (args: optional/default) : updated_at=2025-07-29T17:56:23.345Z title=Financial Information and Related Documents post=Your generous gift helps us unite and amplify women’s voice... id=1 created_at=2020-11-25T22:04:43.320Z
footer (args: optional/default) : aboutLinksTitle=About moreLinksTitle=More instagram=https://www.instagram.com/worldpulse facebook=https://www.facebook.com/worldpulsemedia linkedin=https://www.linkedin.com/company/worldpulse/ id=1 created_at=2023-06-21T15:57:24.609Z updated_at=2025-11-13T23:57:45.011Z

Found on 2025-11-14 02:32

913.9 kBytes 28 rows

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: app.hph.fyi
Port: 443
URL: https://app.hph.fyi

First seen 2025-11-14 02:03
Last seen 2026-01-14 01:07
Open for 60 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2026-01-14 01:07
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: xtm.adboxapp.com
Port: 443
URL: https://xtm.adboxapp.com

First seen 2025-11-14 01:32
Last seen 2026-01-14 00:37
Open for 60 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-14 00:37
  
  93.7 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: gemstone.kenekt.app
Port: 80
URL: http://gemstone.kenekt.app

First seen 2025-05-15 06:36
Last seen 2026-01-14 00:27
Open for 243 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-14 00:27
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 13:59
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: admin-api-testing.medgo.tec.br
Port: 443
URL: https://admin-api-testing.medgo.tec.br

First seen 2025-11-06 00:43
Last seen 2026-01-13 10:49
Open for 68 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-13 10:49
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: www.pollstr.app
Port: 443
URL: https://www.pollstr.app

First seen 2025-11-14 00:03
Last seen 2026-01-13 03:54
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-13 03:54
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.dexstreet.io
Port: 443
URL: https://api.dexstreet.io

First seen 2025-11-12 03:33
Last seen 2026-01-12 02:14
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-12 02:14
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api-staging.contentflux.ai
Port: 80
URL: http://api-staging.contentflux.ai

First seen 2025-11-12 02:33
Last seen 2026-01-12 01:24
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-12 01:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api-staging.contentflux.ai
Port: 443
URL: https://api-staging.contentflux.ai

First seen 2025-11-12 02:33
Last seen 2026-01-12 01:24
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-12 01:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.webmakr.io
Port: 80
URL: http://api.webmakr.io

First seen 2025-11-12 00:53
Last seen 2026-01-11 03:38
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-11 03:38
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: jknvi.quixi.com
Port: 443
URL: https://jknvi.quixi.com

First seen 2025-11-12 00:43
Last seen 2026-01-11 03:28
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-11 03:28
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: www.kudibot.com
Port: 443
URL: https://www.kudibot.com

First seen 2025-11-12 00:22
Last seen 2026-01-11 03:09
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-11 03:09
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: staging-api2.autofluencer.com
Port: 443
URL: https://staging-api2.autofluencer.com

First seen 2025-11-11 03:16
Last seen 2026-01-11 02:08
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-11 02:08
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: www.quixi-staging.com
Port: 443
URL: https://www.quixi-staging.com

First seen 2025-11-11 02:26
Last seen 2026-01-11 01:18
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-11 01:18
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: ableheartsnw.quixi.com
Port: 443
URL: https://ableheartsnw.quixi.com

First seen 2025-11-10 00:41
Last seen 2026-01-10 02:29
Open for 61 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-10 02:29
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: www.quixi.com
Port: 443
URL: https://www.quixi.com

First seen 2025-11-11 00:36
Last seen 2026-01-10 01:54
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-10 01:54
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.tilda-tobacco.com
Port: 80
URL: http://api.tilda-tobacco.com

First seen 2025-11-27 00:37
Last seen 2026-01-10 01:53
Open for 44 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-10 01:53
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api-staging.totalhipaa.com
Port: 443
URL: https://api-staging.totalhipaa.com

First seen 2025-10-26 12:19
Last seen 2026-01-10 00:17
Open for 75 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-10 00:17
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: development.api-v2.theculinistas.com
Port: 443
URL: https://development.api-v2.theculinistas.com

First seen 2025-10-16 01:39
Last seen 2026-01-10 00:07
Open for 85 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549c871eb211720bfd0c4a7738d9af0849cef24d303

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /restApi/Services/get-dish
GET /restApi/Services/get-menu
GET /restApi/Services/get-product
POST /restApi/Customers/activate
POST /restApi/Customers/add-additional-contact
POST /restApi/Customers/add-address
POST /restApi/Customers/add-favorite-dish
POST /restApi/Customers/add-favorite-menu
POST /restApi/Customers/create
POST /restApi/Customers/deactivate
POST /restApi/Customers/delete
POST /restApi/Customers/delete-address
POST /restApi/Customers/get
POST /restApi/Customers/list
POST /restApi/Customers/remove-additional-contact
POST /restApi/Customers/remove-favorite-dishes
POST /restApi/Customers/remove-favorite-menu
POST /restApi/Customers/send-referral-email
POST /restApi/Customers/send-verification-email
POST /restApi/Customers/set-culinary-settings
POST /restApi/Customers/set-household-settings
POST /restApi/Customers/trigger-password-reset
POST /restApi/Customers/update-additional-contact
POST /restApi/Customers/update-address
POST /restApi/Customers/update-email
POST /restApi/Customers/update-personal-info
POST /restApi/Customers/update-stripe-customer-id
POST /restApi/Services/list-dishes
POST /restApi/Services/list-ingredients-from-dishes
POST /restApi/Services/list-menus
POST /restApi/Services/list-products

Found on 2026-01-10 00:07

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.exchange.liveswitch.com
Port: 443
URL: https://api.exchange.liveswitch.com

First seen 2025-10-14 06:32
Last seen 2026-01-09 23:21
Open for 87 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549fbd36c012b358f089e0990bf1234bc837ea9ab36

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/platform-authentications/{id}
GET /.well-known/jwks.json
GET /.well-known/oauth-authorization-server
GET /.well-known/openid-configuration
GET /api/actions
GET /api/actions/export/{platformId}
GET /api/actions/history/http
GET /api/actions/public
GET /api/actions/public/{id}
GET /api/actions/{id}
GET /api/app-executions
GET /api/apps
GET /api/apps/{id}
GET /api/authentication/callback
GET /api/authentication/login
GET /api/me
GET /api/me/email
GET /api/platform-authentications
GET /api/platform-authentications/oauth/callback/{platformRandomId}
GET /api/platform-authentications/pre-auth-fields/{platformId}
GET /api/platform-interceptors
GET /api/platform-interceptors/{id}
GET /api/platform-variables
GET /api/platform-variables/{id}
GET /api/platforms
GET /api/platforms/public
GET /api/platforms/public/authenticated-only
GET /api/platforms/public/by-app/{appId}
GET /api/platforms/public/latest/{id}
GET /api/platforms/public/login/{platformCodeName}
GET /api/platforms/public/{id}
GET /api/platforms/{id}
GET /api/public/actions
GET /api/public/actions/{id}
GET /api/public/apps
GET /api/public/apps/connect/{appId}
GET /api/public/apps/platform/by-name/{platformCodeName}
GET /api/public/apps/platform/{id}
GET /api/public/apps/workflows/{appId}
GET /api/public/apps/{id}
GET /api/public/meta/exchange/definitions/platform.json
GET /api/public/meta/mcp/all.json
GET /api/public/meta/mcp/{platformCodeName}.json
GET /api/public/meta/openapi/all.json
GET /api/public/meta/openapi/{platformCodeName}.json
GET /api/public/platforms
GET /api/public/platforms/authenticated-only
GET /api/public/platforms/by-app/{appId}
GET /api/public/platforms/latest/{id}
GET /api/public/platforms/login/{platformCodeName}
GET /api/public/platforms/{id}
GET /api/public/triggers
GET /api/public/triggers/{id}
GET /api/status
GET /api/status/extended
GET /api/stepdefinitions
GET /api/trigger-instances/{id}
GET /api/triggers
GET /api/triggers/app
GET /api/triggers/export/{platformId}
GET /api/triggers/history
GET /api/triggers/public
GET /api/triggers/public/{id}
GET /api/triggers/{id}
GET /api/workflow-exceptions
GET /api/workflow-exceptions/{id}
GET /api/workflow-history/app/{appId}
GET /api/workflow-history/instance/{instanceId}
GET /api/workflow-history/instance/{instanceId}/steps
GET /api/workflow-history/workflow/{workflowId}
GET /api/workflowdefinitions/{id}
GET /api/workflows
GET /api/workflows/{id}
GET /authorize
GET /callback
GET /debug/routes
POST /api/actions/openapi
POST /api/actions/{actionId}/input-properties
POST /api/actions/{actionId}/output-properties
POST /api/actions/{actionId}/succeed
POST /api/actions/{actionId}/try
POST /api/actions/{id}/clone
POST /api/apps/{id}/upgrade
POST /api/appversions/{id}
POST /api/evaluation/javascript
POST /api/platform-authentications/apikey/{platformId}
POST /api/platform-authentications/basic/{platformId}
POST /api/platform-authentications/oauth/{platformId}
POST /api/platform-interceptors/{id}/test
POST /api/platforms/public/logout/{platformCodeName}
POST /api/platforms/publish/{platformId}
POST /api/public/apps/activate/{appId}
POST /api/public/apps/deactivate/{appId}
POST /api/public/apps/install/{appId}
POST /api/public/apps/uninstall/{appId}
POST /api/public/platforms/logout/{platformCodeName}
POST /api/public/tools/try/{stepType}
POST /api/public/tools/try/{stepType}/magic
POST /api/tools/public/try/{stepType}
POST /api/tools/public/try/{stepType}/magic
POST /api/triggers/openapi
POST /api/triggers/{id}/clone
POST /api/triggers/{triggerId}/data-properties
POST /api/triggers/{triggerId}/input-properties
POST /api/triggers/{triggerId}/succeed
POST /api/triggers/{triggerId}/try
POST /api/workflows/{id}/clone
POST /register
POST /token
POST /token/exchange
PUT /api/actions/{actionId}/http-request-info/{id}
PUT /api/actions/{actionId}/input-properties/order
PUT /api/actions/{actionId}/input-properties/{id}
PUT /api/actions/{actionId}/output-properties/{id}
PUT /api/apps/{id}/status
PUT /api/platform-authentications/{id}/action-input-values
PUT /api/platform-authentications/{id}/user-selected-tenant-id
PUT /api/triggers/{triggerId}/data-properties/{id}
PUT /api/triggers/{triggerId}/input-properties/order
PUT /api/triggers/{triggerId}/input-properties/{id}
PUT /api/workflows/{id}/disable
PUT /api/workflows/{id}/enable

Found on 2026-01-09 23:21

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549fbd36c012b358f089e0990bf1234bc8308a63011

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/platform-authentications/{id}
GET /.well-known/jwks.json
GET /.well-known/oauth-authorization-server
GET /.well-known/openid-configuration
GET /api/actions
GET /api/actions/export/{platformId}
GET /api/actions/history/http
GET /api/actions/public
GET /api/actions/public/{id}
GET /api/actions/{id}
GET /api/app-executions
GET /api/apps
GET /api/apps/{id}
GET /api/authentication/callback
GET /api/authentication/login
GET /api/me
GET /api/me/email
GET /api/platform-authentications
GET /api/platform-authentications/oauth/callback/{platformRandomId}
GET /api/platform-authentications/pre-auth-fields/{platformId}
GET /api/platform-interceptors
GET /api/platform-interceptors/{id}
GET /api/platform-variables
GET /api/platform-variables/{id}
GET /api/platforms
GET /api/platforms/public
GET /api/platforms/public/authenticated-only
GET /api/platforms/public/by-app/{appId}
GET /api/platforms/public/latest/{id}
GET /api/platforms/public/login/{platformCodeName}
GET /api/platforms/public/{id}
GET /api/platforms/{id}
GET /api/public/actions
GET /api/public/actions/{id}
GET /api/public/apps
GET /api/public/apps/connect/{appId}
GET /api/public/apps/platform/by-name/{platformCodeName}
GET /api/public/apps/platform/{id}
GET /api/public/apps/workflows/{appId}
GET /api/public/apps/{id}
GET /api/public/meta/exchange/definitions/platform.json
GET /api/public/meta/mcp/all.json
GET /api/public/meta/mcp/{platformCodeName}.json
GET /api/public/meta/openapi/all.json
GET /api/public/meta/openapi/{platformCodeName}.json
GET /api/public/platforms
GET /api/public/platforms/authenticated-only
GET /api/public/platforms/by-app/{appId}
GET /api/public/platforms/latest/{id}
GET /api/public/platforms/login/{platformCodeName}
GET /api/public/platforms/{id}
GET /api/public/triggers
GET /api/public/triggers/{id}
GET /api/status
GET /api/status/extended
GET /api/stepdefinitions
GET /api/trigger-instances/{id}
GET /api/triggers
GET /api/triggers/app
GET /api/triggers/export/{platformId}
GET /api/triggers/history
GET /api/triggers/public
GET /api/triggers/public/{id}
GET /api/triggers/{id}
GET /api/workflow-exceptions
GET /api/workflow-exceptions/{id}
GET /api/workflow-history/app/{appId}
GET /api/workflow-history/instance/{instanceId}
GET /api/workflow-history/workflow/{workflowId}
GET /api/workflowdefinitions/{id}
GET /api/workflows
GET /api/workflows/{id}
GET /authorize
GET /callback
GET /debug/routes
POST /api/actions/openapi
POST /api/actions/{actionId}/input-properties
POST /api/actions/{actionId}/output-properties
POST /api/actions/{actionId}/succeed
POST /api/actions/{actionId}/try
POST /api/actions/{id}/clone
POST /api/apps/{id}/upgrade
POST /api/appversions/{id}
POST /api/evaluation/javascript
POST /api/platform-authentications/apikey/{platformId}
POST /api/platform-authentications/basic/{platformId}
POST /api/platform-authentications/oauth/{platformId}
POST /api/platform-interceptors/{id}/test
POST /api/platforms/public/logout/{platformCodeName}
POST /api/platforms/publish/{platformId}
POST /api/public/apps/activate/{appId}
POST /api/public/apps/deactivate/{appId}
POST /api/public/apps/install/{appId}
POST /api/public/apps/uninstall/{appId}
POST /api/public/platforms/logout/{platformCodeName}
POST /api/public/tools/try/{stepType}
POST /api/public/tools/try/{stepType}/magic
POST /api/tools/public/try/{stepType}
POST /api/tools/public/try/{stepType}/magic
POST /api/triggers/openapi
POST /api/triggers/{id}/clone
POST /api/triggers/{triggerId}/data-properties
POST /api/triggers/{triggerId}/input-properties
POST /api/triggers/{triggerId}/succeed
POST /api/triggers/{triggerId}/try
POST /api/workflows/{id}/clone
POST /register
POST /token
POST /token/exchange
PUT /api/actions/{actionId}/http-request-info/{id}
PUT /api/actions/{actionId}/input-properties/order
PUT /api/actions/{actionId}/input-properties/{id}
PUT /api/actions/{actionId}/output-properties/{id}
PUT /api/apps/{id}/status
PUT /api/platform-authentications/{id}/action-input-values
PUT /api/platform-authentications/{id}/user-selected-tenant-id
PUT /api/triggers/{triggerId}/data-properties/{id}
PUT /api/triggers/{triggerId}/input-properties/order
PUT /api/triggers/{triggerId}/input-properties/{id}
PUT /api/workflows/{id}/disable
PUT /api/workflows/{id}/enable

Found on 2026-01-02 12:38

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549fbd36c012b358f089e0990bf1234bc83d0d86f34

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/platform-authentications/{id}
GET /.well-known/jwks.json
GET /.well-known/oauth-authorization-server
GET /.well-known/openid-configuration
GET /api/actions
GET /api/actions/export/{platformId}
GET /api/actions/history/http
GET /api/actions/public
GET /api/actions/public/{id}
GET /api/actions/{id}
GET /api/app-executions
GET /api/apps
GET /api/apps/{id}
GET /api/authentication/callback
GET /api/authentication/login
GET /api/authentication/logout
GET /api/me
GET /api/me/email
GET /api/platform-authentications
GET /api/platform-authentications/oauth/callback/{platformRandomId}
GET /api/platform-authentications/pre-auth-fields/{platformId}
GET /api/platform-interceptors
GET /api/platform-interceptors/{id}
GET /api/platform-variables
GET /api/platform-variables/{id}
GET /api/platforms
GET /api/platforms/public
GET /api/platforms/public/authenticated-only
GET /api/platforms/public/by-app/{appId}
GET /api/platforms/public/latest/{id}
GET /api/platforms/public/login/{platformCodeName}
GET /api/platforms/public/{id}
GET /api/platforms/{id}
GET /api/public/actions
GET /api/public/actions/{id}
GET /api/public/apps
GET /api/public/apps/connect/{appId}
GET /api/public/apps/platform/by-name/{platformCodeName}
GET /api/public/apps/platform/{id}
GET /api/public/apps/workflows/{appId}
GET /api/public/apps/{id}
GET /api/public/meta/exchange/definitions/platform.json
GET /api/public/meta/mcp/all.json
GET /api/public/meta/mcp/{platformCodeName}.json
GET /api/public/meta/openapi/all.json
GET /api/public/meta/openapi/{platformCodeName}.json
GET /api/public/platforms
GET /api/public/platforms/authenticated-only
GET /api/public/platforms/by-app/{appId}
GET /api/public/platforms/latest/{id}
GET /api/public/platforms/login/{platformCodeName}
GET /api/public/platforms/{id}
GET /api/public/triggers
GET /api/public/triggers/{id}
GET /api/status
GET /api/status/extended
GET /api/stepdefinitions
GET /api/trigger-instances/{id}
GET /api/triggers
GET /api/triggers/app
GET /api/triggers/export/{platformId}
GET /api/triggers/history
GET /api/triggers/public
GET /api/triggers/public/{id}
GET /api/triggers/{id}
GET /api/workflow-exceptions
GET /api/workflow-exceptions/{id}
GET /api/workflow-history/app/{appId}
GET /api/workflow-history/instance/{instanceId}
GET /api/workflow-history/workflow/{workflowId}
GET /api/workflowdefinitions/{id}
GET /api/workflows
GET /api/workflows/{id}
GET /authorize
GET /callback
GET /debug/routes
POST /api/actions/openapi
POST /api/actions/{actionId}/input-properties
POST /api/actions/{actionId}/output-properties
POST /api/actions/{actionId}/succeed
POST /api/actions/{actionId}/try
POST /api/actions/{id}/clone
POST /api/apps/{id}/upgrade
POST /api/appversions/{id}
POST /api/evaluation/javascript
POST /api/platform-authentications/apikey/{platformId}
POST /api/platform-authentications/basic/{platformId}
POST /api/platform-authentications/oauth/{platformId}
POST /api/platform-interceptors/{id}/test
POST /api/platforms/public/logout/{platformCodeName}
POST /api/platforms/publish/{platformId}
POST /api/public/apps/activate/{appId}
POST /api/public/apps/deactivate/{appId}
POST /api/public/apps/install/{appId}
POST /api/public/apps/uninstall/{appId}
POST /api/public/platforms/logout/{platformCodeName}
POST /api/public/tools/try/{stepType}
POST /api/public/tools/try/{stepType}/magic
POST /api/tools/public/try/{stepType}
POST /api/tools/public/try/{stepType}/magic
POST /api/triggers/openapi
POST /api/triggers/{id}/clone
POST /api/triggers/{triggerId}/data-properties
POST /api/triggers/{triggerId}/input-properties
POST /api/triggers/{triggerId}/succeed
POST /api/triggers/{triggerId}/try
POST /api/workflows/{id}/clone
POST /register
POST /token
POST /token/exchange
PUT /api/actions/{actionId}/http-request-info/{id}
PUT /api/actions/{actionId}/input-properties/order
PUT /api/actions/{actionId}/input-properties/{id}
PUT /api/actions/{actionId}/output-properties/{id}
PUT /api/apps/{id}/status
PUT /api/platform-authentications/{id}/action-input-values
PUT /api/platform-authentications/{id}/user-selected-tenant-id
PUT /api/triggers/{triggerId}/data-properties/{id}
PUT /api/triggers/{triggerId}/input-properties/order
PUT /api/triggers/{triggerId}/input-properties/{id}
PUT /api/workflows/{id}/disable
PUT /api/workflows/{id}/enable

Found on 2025-12-01 20:04

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549fbd36c012b358f089e0990bf1234bc837d5b7f59

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/platform-authentications/{id}
GET /.well-known/jwks.json
GET /.well-known/oauth-authorization-server
GET /.well-known/openid-configuration
GET /api/actions
GET /api/actions/export/{platformId}
GET /api/actions/history/http
GET /api/actions/public
GET /api/actions/public/{id}
GET /api/actions/{id}
GET /api/app-executions
GET /api/apps
GET /api/apps/{id}
GET /api/authentication/callback
GET /api/authentication/login
GET /api/authentication/logout
GET /api/me
GET /api/me/email
GET /api/platform-authentications
GET /api/platform-authentications/oauth/callback/{platformRandomId}
GET /api/platform-variables
GET /api/platform-variables/{id}
GET /api/platforms
GET /api/platforms/public
GET /api/platforms/public/authenticated-only
GET /api/platforms/public/by-app/{appId}
GET /api/platforms/public/latest/{id}
GET /api/platforms/public/login/{platformCodeName}
GET /api/platforms/public/{id}
GET /api/platforms/{id}
GET /api/public/actions
GET /api/public/actions/{id}
GET /api/public/apps
GET /api/public/apps/connect/{appId}
GET /api/public/apps/platform/{platformId}
GET /api/public/apps/workflows/{appId}
GET /api/public/apps/{id}
GET /api/public/meta/exchange/definitions/platform.json
GET /api/public/meta/mcp/all.json
GET /api/public/meta/mcp/{platformCodeName}.json
GET /api/public/meta/openapi/all.json
GET /api/public/meta/openapi/{platformCodeName}.json
GET /api/public/platforms
GET /api/public/platforms/authenticated-only
GET /api/public/platforms/by-app/{appId}
GET /api/public/platforms/latest/{id}
GET /api/public/platforms/login/{platformCodeName}
GET /api/public/platforms/{id}
GET /api/public/triggers
GET /api/public/triggers/{id}
GET /api/publicapps
GET /api/publicapps/connect/{appId}
GET /api/publicapps/platform/{platformId}
GET /api/publicapps/workflows/{appId}
GET /api/publicapps/{id}
GET /api/status
GET /api/status/extended
GET /api/stepdefinitions
GET /api/trigger-instances/{id}
GET /api/triggers
GET /api/triggers/app
GET /api/triggers/export/{platformId}
GET /api/triggers/history
GET /api/triggers/public
GET /api/triggers/public/{id}
GET /api/triggers/{id}
GET /api/workflow-exceptions
GET /api/workflow-exceptions/{id}
GET /api/workflow-history/app/{appId}
GET /api/workflow-history/instance/{instanceId}
GET /api/workflow-history/workflow/{workflowId}
GET /api/workflowdefinitions/{id}
GET /api/workflows
GET /api/workflows/{id}
GET /authorize
GET /callback
GET /debug/routes
POST /api/actions/openapi
POST /api/actions/{actionId}/input-properties
POST /api/actions/{actionId}/output-properties
POST /api/actions/{actionId}/succeed
POST /api/actions/{actionId}/try
POST /api/actions/{id}/clone
POST /api/apps/{id}/upgrade
POST /api/appversions/{id}
POST /api/evaluation/javascript
POST /api/platform-authentications/apikey/{platformId}
POST /api/platform-authentications/basic/{platformId}
POST /api/platform-authentications/oauth/{platformId}
POST /api/platforms/public/logout/{platformCodeName}
POST /api/platforms/publish/{platformId}
POST /api/public/apps/install/{appId}
POST /api/public/apps/uninstall/{appId}
POST /api/public/platforms/logout/{platformCodeName}
POST /api/public/tools/try/{stepType}
POST /api/public/tools/try/{stepType}/magic
POST /api/publicapps/install/{appId}
POST /api/publicapps/uninstall/{appId}
POST /api/tools/public/try/{stepType}
POST /api/tools/public/try/{stepType}/magic
POST /api/triggers/openapi
POST /api/triggers/{id}/clone
POST /api/triggers/{triggerId}/data-properties
POST /api/triggers/{triggerId}/input-properties
POST /api/triggers/{triggerId}/succeed
POST /api/triggers/{triggerId}/try
POST /api/workflows/{id}/clone
POST /register
POST /token
POST /token/exchange
PUT /api/actions/{actionId}/http-request-info/{id}
PUT /api/actions/{actionId}/input-properties/order
PUT /api/actions/{actionId}/input-properties/{id}
PUT /api/actions/{actionId}/output-properties/{id}
PUT /api/apps/{id}/status
PUT /api/platform-authentications/{id}/action-input-values
PUT /api/platform-authentications/{id}/user-selected-tenant-id
PUT /api/triggers/{triggerId}/data-properties/{id}
PUT /api/triggers/{triggerId}/input-properties/order
PUT /api/triggers/{triggerId}/input-properties/{id}
PUT /api/workflows/{id}/disable
PUT /api/workflows/{id}/enable

Found on 2025-11-06 19:57

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549fbd36c012b358f089e0990bf1234bc836a2ad4f3

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/platform-authentications/{id}
GET /.well-known/jwks.json
GET /.well-known/oauth-authorization-server
GET /.well-known/openid-configuration
GET /api/actions
GET /api/actions/export/{platformId}
GET /api/actions/public
GET /api/actions/public/{id}
GET /api/actions/{id}
GET /api/app-executions
GET /api/apps
GET /api/apps/{id}
GET /api/authentication/callback
GET /api/authentication/login
GET /api/authentication/logout
GET /api/me
GET /api/me/email
GET /api/platform-authentications
GET /api/platform-authentications/oauth/callback/{platformRandomId}
GET /api/platform-variables
GET /api/platform-variables/{id}
GET /api/platforms
GET /api/platforms/public
GET /api/platforms/public/authenticated-only
GET /api/platforms/public/by-app/{appId}
GET /api/platforms/public/latest/{id}
GET /api/platforms/public/login/{platformCodeName}
GET /api/platforms/public/{id}
GET /api/platforms/{id}
GET /api/public/actions
GET /api/public/actions/{id}
GET /api/public/apps
GET /api/public/apps/connect/{appId}
GET /api/public/apps/platform/{platformId}
GET /api/public/apps/workflows/{appId}
GET /api/public/apps/{id}
GET /api/public/meta/exchange/definitions/platform.json
GET /api/public/meta/mcp/all.json
GET /api/public/meta/mcp/{platformCodeName}.json
GET /api/public/meta/openapi/all.json
GET /api/public/meta/openapi/{platformCodeName}.json
GET /api/public/platforms
GET /api/public/platforms/authenticated-only
GET /api/public/platforms/by-app/{appId}
GET /api/public/platforms/latest/{id}
GET /api/public/platforms/login/{platformCodeName}
GET /api/public/platforms/{id}
GET /api/public/triggers
GET /api/public/triggers/{id}
GET /api/publicapps
GET /api/publicapps/connect/{appId}
GET /api/publicapps/platform/{platformId}
GET /api/publicapps/workflows/{appId}
GET /api/publicapps/{id}
GET /api/status
GET /api/status/extended
GET /api/stepdefinitions
GET /api/trigger-instances/{id}
GET /api/triggers
GET /api/triggers/app
GET /api/triggers/export/{platformId}
GET /api/triggers/public
GET /api/triggers/public/{id}
GET /api/triggers/{id}
GET /api/v1/actions/history/http
GET /api/workflow-exceptions
GET /api/workflow-exceptions/{id}
GET /api/workflow-history/app/{appId}
GET /api/workflow-history/instance/{instanceId}
GET /api/workflow-history/workflow/{workflowId}
GET /api/workflowdefinitions/{id}
GET /api/workflows
GET /api/workflows/{id}
GET /authorize
GET /callback
GET /debug/routes
POST /api/actions/openapi
POST /api/actions/{actionId}/input-properties
POST /api/actions/{actionId}/output-properties
POST /api/actions/{actionId}/succeed
POST /api/actions/{actionId}/try
POST /api/actions/{id}/clone
POST /api/apps/{id}/upgrade
POST /api/appversions/{id}
POST /api/evaluation/javascript
POST /api/platform-authentications/apikey/{platformId}
POST /api/platform-authentications/basic/{platformId}
POST /api/platform-authentications/oauth/{platformId}
POST /api/platforms/public/logout/{platformCodeName}
POST /api/platforms/publish/{platformId}
POST /api/public/apps/install/{appId}
POST /api/public/apps/uninstall/{appId}
POST /api/public/platforms/logout/{platformCodeName}
POST /api/public/tools/try/{stepType}
POST /api/public/tools/try/{stepType}/magic
POST /api/publicapps/install/{appId}
POST /api/publicapps/uninstall/{appId}
POST /api/tools/public/try/{stepType}
POST /api/tools/public/try/{stepType}/magic
POST /api/triggers/openapi
POST /api/triggers/{id}/clone
POST /api/triggers/{triggerId}/data-properties
POST /api/triggers/{triggerId}/input-properties
POST /api/triggers/{triggerId}/succeed
POST /api/triggers/{triggerId}/try
POST /api/workflows/{id}/clone
POST /register
POST /token
POST /token/exchange
PUT /api/actions/{actionId}/http-request-info/{id}
PUT /api/actions/{actionId}/input-properties/order
PUT /api/actions/{actionId}/input-properties/{id}
PUT /api/actions/{actionId}/output-properties/{id}
PUT /api/apps/{id}/status
PUT /api/platform-authentications/{id}/action-input-values
PUT /api/platform-authentications/{id}/user-selected-tenant-id
PUT /api/triggers/{triggerId}/data-properties/{id}
PUT /api/triggers/{triggerId}/input-properties/order
PUT /api/triggers/{triggerId}/input-properties/{id}
PUT /api/workflows/{id}/disable
PUT /api/workflows/{id}/enable

Found on 2025-10-16 06:32

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: www.4forkscatering.com
Port: 443
URL: https://www.4forkscatering.com

First seen 2025-11-08 00:12
Last seen 2026-01-09 23:10
Open for 62 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354963adcf8b63adcf8b63adcf8b63adcf8b63adcf8b
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/buckets/GetImages
```
  Found on 2026-01-09 23:10
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.civicsproject.org
Port: 80
URL: http://api.civicsproject.org

First seen 2025-11-06 01:06
Last seen 2026-01-09 22:29
Open for 64 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 22:29
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: staging.schools.tz.questforward.org
Port: 80
URL: http://staging.schools.tz.questforward.org

First seen 2025-12-11 19:00
Last seen 2026-01-09 22:21
Open for 29 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 22:21
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: demo-v1.quixi.com
Port: 443
URL: https://demo-v1.quixi.com

First seen 2025-12-03 00:57
Last seen 2026-01-09 22:18
Open for 37 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb42dcd314d2dcd314d2dcd314d2dcd314d2dcd314d
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /v1/tpt_qr/{client_id}/{hmac}/{temp}/{timestamp}
```
  Found on 2026-01-09 22:18
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: staging.curriculum.tz.questforward.org
Port: 443
URL: https://staging.curriculum.tz.questforward.org

First seen 2025-12-11 18:56
Last seen 2026-01-09 22:10
Open for 29 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 22:10
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: nj.qwizics.com
Port: 443
URL: https://nj.qwizics.com

First seen 2025-11-06 00:13
Last seen 2026-01-09 21:40
Open for 64 days

Severity: info
Fingerprint: 5733ddf49ff49cd18553ecf71a64bb4a631c1470cbb65aa2dd57e04a3cd8ed76

Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
GET /
GET /actuator
GET /actuator.json
GET /admin/answers
GET /admin/course/delete/{courseId}
GET /admin/courses
GET /admin/member/delete/{memberNumber}
GET /admin/member/{memberNumber}/reset
GET /admin/member/{memberNumber}/results
GET /admin/members/expire
GET /admin/questions
GET /admin/sessions
GET /admin/summary
GET /admin/surveys
GET /auditevents
GET /auditevents.json
GET /autoconfig
GET /autoconfig.json
GET /beans
GET /beans.json
GET /checkout
GET /configprops
GET /configprops.json
GET /course/{id}
GET /dump
GET /dump.json
GET /env
GET /env.json
GET /env/{name}
GET /error
GET /errors
GET /health
GET /health.json
GET /heapdump
GET /heapdump.json
GET /info
GET /info.json
GET /loggers
GET /loggers.json
GET /loggers/{name}
GET /mail/payment/{memberId}
GET /mail/results/{memberId}
GET /mail/signup/{memberId}
GET /mappings
GET /mappings.json
GET /members/
GET /metrics
GET /metrics.json
GET /metrics/{name}
GET /questions/{id}
GET /surveys/{id}
GET /trace
GET /trace.json
POST /charge
POST /course
POST /questions
POST /surveys

Found on 2026-01-09 21:40

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: doc-c-demo.comalatech.app
Port: 80
URL: http://doc-c-demo.comalatech.app

First seen 2025-12-12 01:18
Last seen 2026-01-09 21:39
Open for 28 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 21:39
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.gtfinance.ca
Port: 443
URL: https://api.gtfinance.ca

First seen 2025-12-10 00:16
Last seen 2026-01-09 20:17
Open for 30 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-09 20:17
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.antioxida.com
Port: 80
URL: http://api.antioxida.com

First seen 2025-10-28 00:49
Last seen 2026-01-09 20:15
Open for 73 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 20:15
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: doc-a-demo.comalatech.app
Port: 443
URL: https://doc-a-demo.comalatech.app

First seen 2025-12-13 00:00
Last seen 2026-01-09 19:47
Open for 27 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 19:47
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.ipstation.apptest.jp
Port: 443
URL: https://api.ipstation.apptest.jp

First seen 2025-10-22 00:34
Last seen 2026-01-09 19:39
Open for 79 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 19:39
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: app.step3.io
Port: 443
URL: https://app.step3.io

First seen 2025-10-19 00:09
Last seen 2026-01-09 19:31
Open for 82 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 19:31
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.tilda-tobacco.com
Port: 443
URL: https://api.tilda-tobacco.com

First seen 2025-11-27 00:37
Last seen 2026-01-09 19:19
Open for 43 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 19:19
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: nj.qwizics.com
Port: 80
URL: http://nj.qwizics.com

First seen 2025-11-06 00:13
Last seen 2026-01-09 19:13
Open for 64 days

Severity: info
Fingerprint: 5733ddf49ff49cd18553ecf71a64bb4a631c1470cbb65aa2dd57e04a3cd8ed76

Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
GET /
GET /actuator
GET /actuator.json
GET /admin/answers
GET /admin/course/delete/{courseId}
GET /admin/courses
GET /admin/member/delete/{memberNumber}
GET /admin/member/{memberNumber}/reset
GET /admin/member/{memberNumber}/results
GET /admin/members/expire
GET /admin/questions
GET /admin/sessions
GET /admin/summary
GET /admin/surveys
GET /auditevents
GET /auditevents.json
GET /autoconfig
GET /autoconfig.json
GET /beans
GET /beans.json
GET /checkout
GET /configprops
GET /configprops.json
GET /course/{id}
GET /dump
GET /dump.json
GET /env
GET /env.json
GET /env/{name}
GET /error
GET /errors
GET /health
GET /health.json
GET /heapdump
GET /heapdump.json
GET /info
GET /info.json
GET /loggers
GET /loggers.json
GET /loggers/{name}
GET /mail/payment/{memberId}
GET /mail/results/{memberId}
GET /mail/signup/{memberId}
GET /mappings
GET /mappings.json
GET /members/
GET /metrics
GET /metrics.json
GET /metrics/{name}
GET /questions/{id}
GET /surveys/{id}
GET /trace
GET /trace.json
POST /charge
POST /course
POST /questions
POST /surveys

Found on 2026-01-09 19:13

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: admin-api.medgo.tec.br
Port: 443
URL: https://admin-api.medgo.tec.br

First seen 2025-11-06 00:43
Last seen 2026-01-09 19:12
Open for 64 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 19:12
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: control.sfhaccess.com
Port: 443
URL: https://control.sfhaccess.com

First seen 2025-11-27 01:08
Last seen 2026-01-09 18:31
Open for 43 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 18:31
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.gangsterarena6.com
Port: 443
URL: https://api.gangsterarena6.com

First seen 2025-10-20 01:17
Last seen 2026-01-09 17:11
Open for 81 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 17:11
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: staging.app.clickon.solutions
Port: 80
URL: http://staging.app.clickon.solutions

First seen 2025-12-07 01:04
Last seen 2026-01-09 16:16
Open for 33 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 16:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: dev.stakspace.com
Port: 443
URL: https://dev.stakspace.com

First seen 2025-12-01 00:17
Last seen 2026-01-09 16:13
Open for 39 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 16:13
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: ssign.api.dev.sdocs.com
Port: 80
URL: http://ssign.api.dev.sdocs.com

First seen 2025-12-07 01:45
Last seen 2026-01-09 16:03
Open for 33 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bce42db947c37314315ebc104a4c55fc6ffca5392

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /document/{id}
DELETE /envelope/{envelopeId}/documents/{documentId}/recipient/{recipientId}
GET /documents
GET /documents/documentCards
GET /documents/generatedDocument/{documentId}
GET /documents/{documentId}
GET /documents/{hubId}/template/{templateId}/object/{objectId}
GET /email-template
GET /envelope
GET /envelope/envelopeCards
GET /envelope/getCode/test
GET /envelope/getFile/test
GET /envelope/{envelopeId}/documents
GET /envelope/{envelopeId}/documents/recipient
GET /envelope/{envelopeId}/documents/{documentId}
GET /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField/completed-fields
GET /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField/getAll
GET /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField/{envelopeDocumentFieldId}
GET /envelope/{envelopeId}/documents/{documentId}/generatePDF
GET /envelope/{envelopeId}/recipients
GET /envelope/{envelopeId}/recipients/{recipientId}/validate
GET /envelope/{envelopeId}/{envelopeDocumentId}/auditTrail
GET /envelope/{id}
GET /envelopeDocument/{envelopeDocumentId}/fieldConfig
GET /envelopeDocument/{envelopeDocumentId}/fieldConfig/{id}
GET /help/category
GET /help/category/{id}
GET /help/knowledgeArticle
GET /help/video
GET /help/{id}
GET /sender/copyRecipientSignerLink/{envelopeId}/{recipientMailId}
GET /ssign/envelop
GET /ssign/envelop/{id}
GET /ssign/v1/envelop
PATCH /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField/inputfield
PATCH /envelope/{envelopeId}/documents/{documentId}/recipients
PATCH /sender/{id}/submitEnvelop
PATCH /ssign/save
PATCH /ssign/submit
POST /authenticate
POST /document
POST /document/invite/validate
POST /document/user/verifyOTP
POST /encryptedKey
POST /envelope/create
POST /envelope/multi
POST /envelope/send/test
POST /envelope/workflow/create
POST /envelope/{envelopeId}/documents/multiple
POST /envelope/{envelopeId}/documents/uploadFile
POST /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField
POST /envelope/{envelopeId}/documents/{documentId}/recipient
POST /envelope/{envelopeId}/recipients/submit
POST /sender/email
POST /sender/envelop
POST /sender/inviteUser
POST /sender/resendEnvelope
POST /sender/userInvite
POST /sender/workflow/notification
POST /ssign/init
POST /ssign/initializeSession
POST /ssign/send2FACode
POST /ssign/submitConsent
POST /ssign/verify2FA

Found on 2026-01-09 16:03

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bce42db947c37314315ebc104a4c55fc6692ed80d

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /document/{id}
DELETE /envelope/{envelopeId}/documents/{documentId}/recipient/{recipientId}
GET /documents
GET /documents/documentCards
GET /documents/{documentId}
GET /documents/{hubId}/template/{templateId}/object/{objectId}
GET /email-template
GET /envelope
GET /envelope/envelopeCards
GET /envelope/getCode/test
GET /envelope/getFile/test
GET /envelope/{envelopeId}/documents
GET /envelope/{envelopeId}/documents/recipient
GET /envelope/{envelopeId}/documents/{documentId}
GET /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField/completed-fields
GET /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField/getAll
GET /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField/{envelopeDocumentFieldId}
GET /envelope/{envelopeId}/documents/{documentId}/generatePDF
GET /envelope/{envelopeId}/recipients
GET /envelope/{envelopeId}/recipients/{recipientId}/validate
GET /envelope/{envelopeId}/{envelopeDocumentId}/auditTrail
GET /envelope/{id}
GET /envelopeDocument/{envelopeDocumentId}/fieldConfig
GET /envelopeDocument/{envelopeDocumentId}/fieldConfig/{id}
GET /help/category
GET /help/category/{id}
GET /help/knowledgeArticle
GET /help/video
GET /help/{id}
GET /sender/copyRecipientSignerLink/{envelopeId}/{recipientMailId}
GET /ssign/envelop
GET /ssign/envelop/{id}
GET /ssign/v1/envelop
PATCH /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField/inputfield
PATCH /envelope/{envelopeId}/documents/{documentId}/recipients
PATCH /sender/{id}/submitEnvelop
PATCH /ssign/save
PATCH /ssign/submit
POST /authenticate
POST /document
POST /document/invite/validate
POST /document/user/verifyOTP
POST /encryptedKey
POST /envelope/create
POST /envelope/multi
POST /envelope/send/test
POST /envelope/workflow/create
POST /envelope/{envelopeId}/documents/multiple
POST /envelope/{envelopeId}/documents/uploadFile
POST /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField
POST /envelope/{envelopeId}/documents/{documentId}/recipient
POST /envelope/{envelopeId}/recipients/submit
POST /sender/email
POST /sender/envelop
POST /sender/inviteUser
POST /sender/resendEnvelope
POST /sender/userInvite
POST /sender/workflow/notification
POST /ssign/init
POST /ssign/initializeSession
POST /ssign/send2FACode
POST /ssign/submitConsent
POST /ssign/verify2FA

Found on 2025-12-07 01:45

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: ai-proxy.goingmerry.xyz
Port: 80
URL: http://ai-proxy.goingmerry.xyz

First seen 2025-10-17 01:01
Last seen 2026-01-09 15:39
Open for 84 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 15:39
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: quantum-leap.motorverse.com
Port: 443
URL: https://quantum-leap.motorverse.com

First seen 2025-11-24 03:26
Last seen 2026-01-09 15:39
Open for 46 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 15:39
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.gtfinance.ca
Port: 80
URL: http://api.gtfinance.ca

First seen 2025-12-10 00:16
Last seen 2026-01-09 15:22
Open for 30 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-09 15:22
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: equity-in-funding.datanutrition.org
Port: 80
URL: http://equity-in-funding.datanutrition.org

First seen 2025-11-01 06:48
Last seen 2026-01-09 14:53
Open for 69 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 14:53
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: beta.chat.idengager.com
Port: 80
URL: http://beta.chat.idengager.com

First seen 2025-11-15 03:10
Last seen 2026-01-09 14:13
Open for 55 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43fd7da91faa99f4c3ecab2349f179e607f179e607
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /api/conversations
GET /api/conversations/{id}
GET /api/messages
GET /api/messages/{id}
```
  Found on 2026-01-09 14:13
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: v3api.unabase.com
Port: 80
URL: http://v3api.unabase.com

First seen 2025-11-15 01:50
Last seen 2026-01-09 12:43
Open for 55 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 12:43
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: ao-uat.thecollaborativeplanner.com
Port: 80
URL: http://ao-uat.thecollaborativeplanner.com

First seen 2025-11-24 02:56
Last seen 2026-01-09 12:41
Open for 46 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549e111396b48514dd08f6204c2e312330d10a74f55

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /Dictionary/Delete/{id}
DELETE /DocumentTemplate/Delete/{id}
DELETE /StockPriceRegister/Delete
GET /DataMigration/Migrate
GET /DataMigration/UpdateMigration
GET /Dictionary/DictionaryTypes
GET /Dictionary/Get
GET /DocumentTemplate/Download/{id}
GET /DocumentTemplate/Get/{id}
GET /Household/Data/{type}/{objectid}
GET /Household/Get/{id}
GET /Household/UniquePossibilities/{household}
GET /Salesforce/AccountsHeldElsewhere/{ExternalCode}
GET /Salesforce/AccountsHeldElsewhereHoldings/{ExternalCode}
GET /Salesforce/Assets/{ExternalCode}
GET /Salesforce/BalanceSheet/{ExternalCode}
GET /Salesforce/CheckAllQueries
GET /Salesforce/Documents/{ExternalCode}
GET /Salesforce/Gifts/{ExternalCode}
GET /Salesforce/IdentifyOrLockNPVForUnlockedHouseholds
GET /Salesforce/LTIP/{type}/{household}
GET /Salesforce/LTIPTranch/{ExternalCode}
GET /Salesforce/LTIPTranchDetail/{ExternalCode}
GET /Salesforce/PrintBalanceSheet/{ExternalCode}
GET /Salesforce/PrintLTIPTranchDetail/{type}/{householdCode}/{externalCode}
GET /Salesforce/PrintRebalanceHistory/{household}
GET /Salesforce/PrintStrategicGuide/{household}
GET /Salesforce/SpitOutStartingNo
GET /Salesforce/StartingNo
GET /Salesforce/StrategicGuide/{household}
GET /Security/SystemSettings
GET /Service/Rebuild
GET /Stock/Get
GET /StockPriceRegister/Get
GET /StockPriceRegister/GetPrice/{ticker}
GET /SystemUser/Get
GET /SystemUser/GetCurrentUser
GET /SystemUser/GetRole
POST /Dictionary/GetLookup
POST /Dictionary/Grid
POST /Dictionary/Update
POST /DocumentTemplate/Add
POST /DocumentTemplate/Edit
POST /DocumentTemplate/GetLookup
POST /DocumentTemplate/Grid
POST /Household/BatchUPDataImport
POST /Household/GridSF
POST /Household/UpsertNPVSettings
POST /Household/UpsertUniquePossibilities
POST /Salesforce/PrintNPV
POST /Salesforce/PrintUniquePossibilities
POST /Stock/Grid
POST /Stock/Update
POST /StockPriceRegister/Grid
POST /StockPriceRegister/Insert
POST /SystemUser/GetRoleLookup
POST /SystemUser/GetUsers
POST /SystemUser/Update
POST /config/generate
PUT /Dictionary/Insert
PUT /Salesforce/UpdateNPVLockedValue/{ExternalCode}
PUT /Salesforce/UpdateYearsToRetire/{ExternalCode}
PUT /Security/UpdateSettings
PUT /Stock/Insert
PUT /StockPriceRegister/Update
PUT /SystemUser/Insert

Found on 2026-01-09 12:41

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: stgappapi.cambium-inc.com
Port: 443
URL: https://stgappapi.cambium-inc.com

First seen 2025-11-21 02:39
Last seen 2026-01-09 12:03
Open for 49 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 12:03
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: quantum-leap.motorverse.com
Port: 80
URL: http://quantum-leap.motorverse.com

First seen 2025-11-24 03:26
Last seen 2026-01-09 12:01
Open for 46 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 12:01
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: lootpilot.hallofgoats.com
Port: 443
URL: https://lootpilot.hallofgoats.com

First seen 2025-11-25 00:54
Last seen 2026-01-09 11:16
Open for 45 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 11:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.savr.one
Port: 80
URL: http://api.savr.one

First seen 2025-12-03 00:26
Last seen 2026-01-09 10:44
Open for 37 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 10:44
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: ssign.api.staging.sdocs.com
Port: 443
URL: https://ssign.api.staging.sdocs.com

First seen 2025-10-17 01:01
Last seen 2026-01-09 10:01
Open for 84 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bce42db947c37314315ebc104a4c55fc6ffca5392

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /document/{id}
DELETE /envelope/{envelopeId}/documents/{documentId}/recipient/{recipientId}
GET /documents
GET /documents/documentCards
GET /documents/generatedDocument/{documentId}
GET /documents/{documentId}
GET /documents/{hubId}/template/{templateId}/object/{objectId}
GET /email-template
GET /envelope
GET /envelope/envelopeCards
GET /envelope/getCode/test
GET /envelope/getFile/test
GET /envelope/{envelopeId}/documents
GET /envelope/{envelopeId}/documents/recipient
GET /envelope/{envelopeId}/documents/{documentId}
GET /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField/completed-fields
GET /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField/getAll
GET /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField/{envelopeDocumentFieldId}
GET /envelope/{envelopeId}/documents/{documentId}/generatePDF
GET /envelope/{envelopeId}/recipients
GET /envelope/{envelopeId}/recipients/{recipientId}/validate
GET /envelope/{envelopeId}/{envelopeDocumentId}/auditTrail
GET /envelope/{id}
GET /envelopeDocument/{envelopeDocumentId}/fieldConfig
GET /envelopeDocument/{envelopeDocumentId}/fieldConfig/{id}
GET /help/category
GET /help/category/{id}
GET /help/knowledgeArticle
GET /help/video
GET /help/{id}
GET /sender/copyRecipientSignerLink/{envelopeId}/{recipientMailId}
GET /ssign/envelop
GET /ssign/envelop/{id}
GET /ssign/v1/envelop
PATCH /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField/inputfield
PATCH /envelope/{envelopeId}/documents/{documentId}/recipients
PATCH /sender/{id}/submitEnvelop
PATCH /ssign/save
PATCH /ssign/submit
POST /authenticate
POST /document
POST /document/invite/validate
POST /document/user/verifyOTP
POST /encryptedKey
POST /envelope/create
POST /envelope/multi
POST /envelope/send/test
POST /envelope/workflow/create
POST /envelope/{envelopeId}/documents/multiple
POST /envelope/{envelopeId}/documents/uploadFile
POST /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField
POST /envelope/{envelopeId}/documents/{documentId}/recipient
POST /envelope/{envelopeId}/recipients/submit
POST /sender/email
POST /sender/envelop
POST /sender/inviteUser
POST /sender/resendEnvelope
POST /sender/userInvite
POST /sender/workflow/notification
POST /ssign/init
POST /ssign/initializeSession
POST /ssign/send2FACode
POST /ssign/submitConsent
POST /ssign/verify2FA

Found on 2026-01-09 10:01

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bce42db947c37314315ebc104a4c55fc6692ed80d

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /document/{id}
DELETE /envelope/{envelopeId}/documents/{documentId}/recipient/{recipientId}
GET /documents
GET /documents/documentCards
GET /documents/{documentId}
GET /documents/{hubId}/template/{templateId}/object/{objectId}
GET /email-template
GET /envelope
GET /envelope/envelopeCards
GET /envelope/getCode/test
GET /envelope/getFile/test
GET /envelope/{envelopeId}/documents
GET /envelope/{envelopeId}/documents/recipient
GET /envelope/{envelopeId}/documents/{documentId}
GET /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField/completed-fields
GET /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField/getAll
GET /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField/{envelopeDocumentFieldId}
GET /envelope/{envelopeId}/documents/{documentId}/generatePDF
GET /envelope/{envelopeId}/recipients
GET /envelope/{envelopeId}/recipients/{recipientId}/validate
GET /envelope/{envelopeId}/{envelopeDocumentId}/auditTrail
GET /envelope/{id}
GET /envelopeDocument/{envelopeDocumentId}/fieldConfig
GET /envelopeDocument/{envelopeDocumentId}/fieldConfig/{id}
GET /help/category
GET /help/category/{id}
GET /help/knowledgeArticle
GET /help/video
GET /help/{id}
GET /sender/copyRecipientSignerLink/{envelopeId}/{recipientMailId}
GET /ssign/envelop
GET /ssign/envelop/{id}
GET /ssign/v1/envelop
PATCH /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField/inputfield
PATCH /envelope/{envelopeId}/documents/{documentId}/recipients
PATCH /sender/{id}/submitEnvelop
PATCH /ssign/save
PATCH /ssign/submit
POST /authenticate
POST /document
POST /document/invite/validate
POST /document/user/verifyOTP
POST /encryptedKey
POST /envelope/create
POST /envelope/multi
POST /envelope/send/test
POST /envelope/workflow/create
POST /envelope/{envelopeId}/documents/multiple
POST /envelope/{envelopeId}/documents/uploadFile
POST /envelope/{envelopeId}/documents/{documentId}/envelopeDocumentField
POST /envelope/{envelopeId}/documents/{documentId}/recipient
POST /envelope/{envelopeId}/recipients/submit
POST /sender/email
POST /sender/envelop
POST /sender/inviteUser
POST /sender/resendEnvelope
POST /sender/userInvite
POST /sender/workflow/notification
POST /ssign/init
POST /ssign/initializeSession
POST /ssign/send2FACode
POST /ssign/submitConsent
POST /ssign/verify2FA

Found on 2025-12-01 17:11

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.institutonetzer.org
Port: 443
URL: https://api.institutonetzer.org

First seen 2025-10-28 01:19
Last seen 2026-01-09 09:41
Open for 73 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 09:41
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.termoconfortdelgolfo.com
Port: 80
URL: http://api.termoconfortdelgolfo.com

First seen 2025-11-28 21:02
Last seen 2026-01-09 09:20
Open for 41 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 09:20
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.ratehogs.com
Port: 443
URL: https://api.ratehogs.com

First seen 2025-11-21 04:59
Last seen 2026-01-09 08:53
Open for 49 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 08:53
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: devmarkupapi.bluent.it
Port: 443
URL: https://devmarkupapi.bluent.it

First seen 2025-12-05 00:27
Last seen 2026-01-09 08:36
Open for 35 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 08:36
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.newvertical.tech
Port: 443
URL: https://api.newvertical.tech

First seen 2025-10-25 00:58
Last seen 2026-01-09 08:04
Open for 76 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff437f67d4527f67d4527f67d4527f67d4527f67d452
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /api/user/{id}
```
  Found on 2026-01-09 08:04
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: www.expertale.com
Port: 80
URL: http://www.expertale.com

First seen 2025-11-22 02:25
Last seen 2026-01-09 07:41
Open for 48 days

Severity: info
Fingerprint: 5733ddf49ff49cd18553ecf73d93c32e464c5158c07c8e2faff4981790a2841c

Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
DELETE /comment/{id}
DELETE /file/delete
DELETE /job/{id}
DELETE /job/{id}/remove-assignment
DELETE /job/{id}/user-job/remove
DELETE /notifications/{id}
DELETE /pr/prof/section/{sectionId}
DELETE /pr/prof/section/{sectionId}/sub/{subSectionId}
DELETE /pr/prof/{id}
DELETE /pr/us/delete/{id}
DELETE /schedule/{id}
GET /comment/{postId}
GET /error
GET /events/all
GET /file/list
GET /file/{filename}
GET /group
GET /group/{id}
GET /job
GET /job/bulk
GET /job/user-jobs
GET /job/user-jobs/latest
GET /job/user-jobs/recommended
GET /job/user-myjobs
GET /job/{id}/user-job
GET /msg/all
GET /msg/sent/{fromId}
GET /msg/sentto/{fromId}/{toId}
GET /notifications
GET /post
GET /post/mine
GET /post/{id}
GET /pr/bal
GET /pr/cashouts/accreq/{destCur}
GET /pr/cashouts/currency
GET /pr/cashouts/currency/{cur}
GET /pr/cashouts/validators/iban/{iban}
GET /pr/jc/all
GET /pr/jc/cat/all
GET /pr/jc/cat/{id}
GET /pr/jc/cnt/all
GET /pr/jc/cod/all/{type}
GET /pr/jc/curr/all
GET /pr/jc/lng/all
GET /pr/jc/sta/all/{CountryCodeAlpha2}
GET /pr/jc/{id}
GET /pr/prof/bio/{userId}
GET /pr/prof/info
GET /pr/prof/info/{id}
GET /pr/prof/occupation
GET /pr/prof/occupation/{userId}
GET /pr/profile-billings
GET /pr/us/all
GET /pr/us/allto/{id}
GET /pr/us/curruser
GET /pr/us/curruser/{id}
GET /pr/us/email
GET /pr/us/email/f
GET /pr/us/find-by-id/{id}
GET /pr/us/getone/{id}
GET /pr/us/profile/{id}
GET /pr/us/user_list
GET /pu/util/admin/users
GET /pu/util/int
GET /pu/util/int/default
GET /pu/util/int/{local}
GET /pu/util/locale
GET /pu/util/management/reports
GET /pu/util/welcome
GET /pu/util/welcomejson
GET /relation/confirmations
GET /relation/detail
GET /schedule
GET /schedule/mine
GET /welcome
GET /welcomeauth
POST /authenticate
POST /comment
POST /file/profile-picture
POST /file/upload
POST /group/bulk
POST /group/{memberId}/insert-in-groups
POST /job/offer/{id}/decline
POST /job/offer/{id}/proceed
POST /job/{id}/accept
POST /job/{id}/apply
POST /job/{id}/assign/{userId}
POST /job/{id}/close
POST /job/{id}/deliver
POST /job/{id}/issues
POST /job/{id}/start
POST /job/{id}/terminate
POST /job/{id}/update
POST /job/{id}/update-progress/{progress}
POST /job/{id}/{file}/deliver
POST /msg/create
POST /post/{id}/add-view
POST /post/{id}/update-visibility
POST /pr/cashouts/accounts
POST /pr/cashouts/quotes
POST /pr/cashouts/tq
POST /pr/cashouts/transfer
POST /pr/pay/add
POST /pr/prof/aboutbio
POST /pr/prof/cnt
POST /pr/prof/education
POST /pr/prof/fre-gigs
POST /pr/prof/ginfo
POST /pr/prof/languages
POST /pr/prof/pricing
POST /pr/prof/skills
POST /pr/prof/web
POST /pr/prof/working-info
POST /pr/us/acc
POST /pr/us/create
POST /pr/us/find-by-ids
POST /pr/us/get-members
POST /pr/us/update
POST /pr/us/user_info
POST /pu/authenticate
POST /pu/util/contactus
POST /pu/util/forgetpswd
POST /pu/util/json
POST /pu/util/resetpswd
POST /relation/approve/{followerId}
POST /relation/block/{followerId}
POST /relation/disapprove/{followerId}
POST /relation/favourite/{memberId}
POST /relation/follow/{memberId}
POST /relation/mute/{followingId}
POST /relation/remove-confirmation/{followingId}
POST /relation/remove-favourite/{memberId}
POST /relation/remove/{followerId}
POST /relation/unblock/{followerId}
POST /relation/unfollow/{memberId}
POST /relation/unmute/{followingId}
POST /schedule/update
PUT /group/{id}/insert-member/{memberId}
PUT /group/{id}/remove-member/{memberId}
PUT /group/{id}/rename
PUT /post/{id}/incrementShareCounter
PUT /post/{id}/updateLikeCounter/{increment}

Found on 2026-01-09 07:41

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.staging.tutred.com
Port: 80
URL: http://api.staging.tutred.com

First seen 2025-10-31 02:33
Last seen 2026-01-09 07:04
Open for 70 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 07:04
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.pga.spiderhat.com
Port: 80
URL: http://api.pga.spiderhat.com

First seen 2025-10-23 00:43
Last seen 2026-01-09 06:58
Open for 78 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354965f6c3c4cba4e8755ebf177f179376ddbba0530e

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/TestCompany/{testCompanyId}
DELETE /api/TestResponse/{testResponseId}
GET /api/Auth/authForgot/forgotPassword/{email}
GET /api/Auth/profile
GET /api/Company/GetById/{companyId}
GET /api/Company/ListAllPaged
GET /api/TestCompany/GetById/{testCompanyId}
GET /api/TestCompany/ListAllPaged
GET /api/TestResponse/GetDetailById/{testResponseId}
GET /api/TestResponse/GetResultById/{testResponseId}
GET /api/TestResponse/ListAllAssignedByUserPaged/{userId}
GET /api/TestResponse/ListAllAssignedPaged
GET /api/TestTemplate/GetById/{testTemplateId}
GET /api/TestTemplate/ListAllPaged
GET /api/User/GetById/{userId}
GET /api/User/ListAllPaged
POST /api/Auth/login
POST /api/Auth/refreshToken
POST /api/Company
POST /api/TestCompany/AssignIndividualTest
POST /api/TestResponse
POST /api/TestTemplate
POST /api/User
PUT /api/Auth/changePassword
PUT /api/Company/{companyId}
PUT /api/TestResponse/SolveTest/{testResponseId}
PUT /api/TestTemplate/{testTemplateId}
PUT /api/User/{userId}

Found on 2026-01-09 06:58

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354965f6c3c4cba4e8755ebf177f179376ddee2e3933

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/TestCompany/{testCompanyId}
DELETE /api/TestResponse/{testResponseId}
GET /api/Auth/authForgot/forgotPassword/{email}
GET /api/Auth/profile
GET /api/Company/GetById/{companyId}
GET /api/Company/ListAllPaged
GET /api/TestCompany/GetById/{testCompanyId}
GET /api/TestCompany/ListAllPaged
GET /api/TestResponse/GetDetailById/{testResponseId}
GET /api/TestResponse/ListAllAssignedPaged
GET /api/TestTemplate/GetById/{testTemplateId}
GET /api/TestTemplate/ListAllPaged
GET /api/User/GetById/{userId}
GET /api/User/ListAllPaged
POST /api/Auth/login
POST /api/Auth/refreshToken
POST /api/Company
POST /api/TestCompany/AssignIndividualTest
POST /api/TestResponse
POST /api/TestTemplate
POST /api/User
PUT /api/Auth/changePassword
PUT /api/Company/{companyId}
PUT /api/TestResponse/SolveTest/{testResponseId}
PUT /api/TestTemplate/{testTemplateId}
PUT /api/User/{userId}

Found on 2025-11-30 13:23

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493ba330c3dc2a20e9d31192644f13a5e4bf43494f

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Auth/authForgot/forgotPassword/{email}
GET /api/Auth/profile
GET /api/Company/GetById/{companyId}
GET /api/Company/ListAllPaged
GET /api/User/GetById/{userId}
GET /api/User/ListAllPaged
POST /api/Auth/login
POST /api/Auth/refreshToken
POST /api/Company
POST /api/User
PUT /api/Auth/changePassword
PUT /api/Company/{companyId}
PUT /api/User/{userId}

Found on 2025-11-03 12:20

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: staging.curriculum.tz.questforward.org
Port: 80
URL: http://staging.curriculum.tz.questforward.org

First seen 2025-12-11 18:56
Last seen 2026-01-09 04:56
Open for 28 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 04:56
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: qa.renaissant.com
Port: 443
URL: https://qa.renaissant.com

First seen 2025-11-28 00:48
Last seen 2026-01-09 04:53
Open for 42 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-09 04:53
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: muggsies.officelibations.com
Port: 443
URL: https://muggsies.officelibations.com

First seen 2025-11-23 02:31
Last seen 2026-01-09 04:29
Open for 47 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 04:29
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.pga.spiderhat.com
Port: 443
URL: https://api.pga.spiderhat.com

First seen 2025-10-23 00:43
Last seen 2026-01-09 04:28
Open for 78 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354965f6c3c4cba4e8755ebf177f179376ddbba0530e

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/TestCompany/{testCompanyId}
DELETE /api/TestResponse/{testResponseId}
GET /api/Auth/authForgot/forgotPassword/{email}
GET /api/Auth/profile
GET /api/Company/GetById/{companyId}
GET /api/Company/ListAllPaged
GET /api/TestCompany/GetById/{testCompanyId}
GET /api/TestCompany/ListAllPaged
GET /api/TestResponse/GetDetailById/{testResponseId}
GET /api/TestResponse/GetResultById/{testResponseId}
GET /api/TestResponse/ListAllAssignedByUserPaged/{userId}
GET /api/TestResponse/ListAllAssignedPaged
GET /api/TestTemplate/GetById/{testTemplateId}
GET /api/TestTemplate/ListAllPaged
GET /api/User/GetById/{userId}
GET /api/User/ListAllPaged
POST /api/Auth/login
POST /api/Auth/refreshToken
POST /api/Company
POST /api/TestCompany/AssignIndividualTest
POST /api/TestResponse
POST /api/TestTemplate
POST /api/User
PUT /api/Auth/changePassword
PUT /api/Company/{companyId}
PUT /api/TestResponse/SolveTest/{testResponseId}
PUT /api/TestTemplate/{testTemplateId}
PUT /api/User/{userId}

Found on 2026-01-09 04:28

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354965f6c3c4cba4e8755ebf177f179376ddee2e3933

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/TestCompany/{testCompanyId}
DELETE /api/TestResponse/{testResponseId}
GET /api/Auth/authForgot/forgotPassword/{email}
GET /api/Auth/profile
GET /api/Company/GetById/{companyId}
GET /api/Company/ListAllPaged
GET /api/TestCompany/GetById/{testCompanyId}
GET /api/TestCompany/ListAllPaged
GET /api/TestResponse/GetDetailById/{testResponseId}
GET /api/TestResponse/ListAllAssignedPaged
GET /api/TestTemplate/GetById/{testTemplateId}
GET /api/TestTemplate/ListAllPaged
GET /api/User/GetById/{userId}
GET /api/User/ListAllPaged
POST /api/Auth/login
POST /api/Auth/refreshToken
POST /api/Company
POST /api/TestCompany/AssignIndividualTest
POST /api/TestResponse
POST /api/TestTemplate
POST /api/User
PUT /api/Auth/changePassword
PUT /api/Company/{companyId}
PUT /api/TestResponse/SolveTest/{testResponseId}
PUT /api/TestTemplate/{testTemplateId}
PUT /api/User/{userId}

Found on 2025-11-30 12:49

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493ba330c3dc2a20e9d31192644f13a5e4bf43494f

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Auth/authForgot/forgotPassword/{email}
GET /api/Auth/profile
GET /api/Company/GetById/{companyId}
GET /api/Company/ListAllPaged
GET /api/User/GetById/{userId}
GET /api/User/ListAllPaged
POST /api/Auth/login
POST /api/Auth/refreshToken
POST /api/Company
POST /api/User
PUT /api/Auth/changePassword
PUT /api/Company/{companyId}
PUT /api/User/{userId}

Found on 2025-11-03 12:20

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: app.renaissant.com
Port: 443
URL: https://app.renaissant.com

First seen 2025-10-21 22:26
Last seen 2026-01-09 03:54
Open for 79 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-09 03:54
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: v3api.unabase.com
Port: 443
URL: https://v3api.unabase.com

First seen 2025-11-15 01:50
Last seen 2026-01-09 02:45
Open for 55 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 02:45
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: www.playallaround.com
Port: 443
URL: https://www.playallaround.com

First seen 2025-12-05 00:08
Last seen 2026-01-09 01:57
Open for 35 days

Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e50ffe04ffcdc6e1de8d00b47e642910c973420e39

Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
GET /appUsers
GET /appUsers/search/enableAppUser
GET /appUsers/search/findByEmail
GET /appUsers/search/updateFilter
GET /appUsers/{id}
GET /confirmationTokens
GET /confirmationTokens/search/findByToken
GET /confirmationTokens/search/updateConfirmedAt
GET /confirmationTokens/{id}
GET /confirmationTokens/{id}/appUser
GET /confirmationTokens/{id}/appUser/{propertyId}
GET /destinations
GET /discounts
GET /discounts/search/findByUserIdAndBusinessIdAndRequestTime
GET /discounts/{id}
GET /events2s
GET /events2s/search/findAllByOrderByName
GET /events2s/search/getEventsAndPlacesByCategory
GET /events2s/search/getEventsAroundPlaceId
GET /events2s/search/getEventsByCategory
GET /events2s/search/getEventsByCategoryAndSubcategories
GET /events2s/search/getEventsByPlaceIdBetweenDatesInRadiusApplyFilter
GET /events2s/search/getEventsForAllStates
GET /events2s/search/getEventsForAllStatesWithPageable
GET /events2s/search/getEventsForOneCityAndOneState
GET /events2s/search/getEventsForOneCityAndOneStateWithPageable
GET /events2s/search/getEventsForOneState
GET /events2s/search/getEventsForOneStateWithPageable
GET /events2s/search/getEventsPlacesAndSubcategoriesByCategory
GET /events2s/{id}
GET /filtering
GET /filtering-list
GET /generateQRCode
GET /getUserName
GET /person
GET /person/accept
GET /person/header
GET /placeses
GET /placeses/search/getPlacesByCategory
GET /placeses/{id}
GET /placeses/{id}/events
GET /placeses/{id}/events/{propertyId}
GET /profile
GET /profile/appUsers
GET /profile/confirmationTokens
GET /profile/discounts
GET /profile/events2s
GET /profile/placeses
GET /v1/person
GET /v1/places
GET /v2/person
POST /api/v1/sendgrid
POST /api/v1/sms
POST /bot/chat

Found on 2026-01-09 01:57

Severity: info
Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
Found on 2026-01-01 19:40

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: beta.chat.idengager.com
Port: 443
URL: https://beta.chat.idengager.com

First seen 2025-11-15 03:10
Last seen 2026-01-09 00:56
Open for 54 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43fd7da91faa99f4c3ecab2349f179e607f179e607
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /api/conversations
GET /api/conversations/{id}
GET /api/messages
GET /api/messages/{id}
```
  Found on 2026-01-09 00:56
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: public-api.production.liveswitch.com
Port: 443
URL: https://public-api.production.liveswitch.com

First seen 2025-10-31 00:49
Last seen 2026-01-09 00:07
Open for 69 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549b5b584ec7869acc27ed1e6ad991ee927e678d0a7

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /v1/webhooks/app/{appId}
GET /v1/attribute-groups
GET /v1/attribute-groups/app/{appId}
GET /v1/attribute-groups/{id}
GET /v1/attributes
GET /v1/attributes/app/{appId}
GET /v1/attributes/{id}
GET /v1/contacts
GET /v1/contacts/by-phone/{phone}
GET /v1/contacts/{id}
GET /v1/conversations
GET /v1/conversations/{id}
GET /v1/documents/conversation/files/{conversationId}
GET /v1/documents/conversation/snapshots/{conversationId}
GET /v1/documents/conversation/{conversationId}
GET /v1/documents/project/files/{projectId}
GET /v1/documents/project/snapshots/{projectId}
GET /v1/documents/project/{projectId}
GET /v1/documents/{id}
GET /v1/entity-attributes/{entityType}
GET /v1/entity-attributes/{entityType}/by-entity/{entityId}
GET /v1/entity-attributes/{entityType}/{id}
GET /v1/me
GET /v1/organizations/settings
GET /v1/projects
GET /v1/projects/{id}
GET /v1/recordings/conversation/{conversationId}
GET /v1/recordings/project/{projectId}
GET /v1/recordings/{id}
GET /v1/tags
GET /v1/tokens
GET /v1/tokens/logout
GET /v1/webhooks
GET /v1/webhooks/by-app/{appId}
GET /v1/webhooks/{id}
POST /v1/conversations/{id}/upload-urls/documents
POST /v1/conversations/{id}/upload-urls/images
POST /v1/conversations/{id}/upload-urls/videos
POST /v1/projects/{id}/upload-urls/documents
POST /v1/projects/{id}/upload-urls/images
POST /v1/projects/{id}/upload-urls/videos
POST /v1/tokens/code
POST /v1/tokens/refresh
PUT /v1/tags/{id}

Found on 2026-01-09 00:07

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549b5b584ec7869acc27ed1e6ad991ee927ed8addfd

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /v1/webhooks/app/{appId}
GET /v1/attribute-groups
GET /v1/attribute-groups/app/{appId}
GET /v1/attribute-groups/{id}
GET /v1/attributes
GET /v1/attributes/app/{appId}
GET /v1/attributes/{id}
GET /v1/contacts
GET /v1/contacts/by-phone/{phone}
GET /v1/contacts/{id}
GET /v1/conversations
GET /v1/conversations/{id}
GET /v1/documents/conversation/files/{conversationId}
GET /v1/documents/conversation/snapshots/{conversationId}
GET /v1/documents/conversation/{conversationId}
GET /v1/documents/project/files/{projectId}
GET /v1/documents/project/snapshots/{projectId}
GET /v1/documents/project/{projectId}
GET /v1/documents/{id}
GET /v1/entity-attributes/{entityType}
GET /v1/entity-attributes/{entityType}/by-entity/{entityId}
GET /v1/entity-attributes/{entityType}/{id}
GET /v1/me
GET /v1/organizations/settings
GET /v1/projects
GET /v1/projects/{id}
GET /v1/recordings/conversation/{conversationId}
GET /v1/recordings/project/{projectId}
GET /v1/recordings/{id}
GET /v1/tags
GET /v1/tokens
GET /v1/tokens/logout
GET /v1/webhooks
GET /v1/webhooks/by-app/{appId}
GET /v1/webhooks/{id}
POST /v1/tokens/code
POST /v1/tokens/refresh
PUT /v1/tags/{id}

Found on 2025-11-06 20:14

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api-staging.whiletruemusic.com
Port: 80
URL: http://api-staging.whiletruemusic.com

First seen 2025-10-29 01:09
Last seen 2026-01-08 23:59
Open for 71 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43209d61ec85a8b0d3ef3eee9cef3eee9cef3eee9c
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /shows
POST /contact
POST /subscribe-to-newsletter
```
  Found on 2026-01-08 23:59
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: mercadopago-stage.clinicauandes.io
Port: 80
URL: http://mercadopago-stage.clinicauandes.io

First seen 2025-10-19 01:30
Last seen 2026-01-08 22:23
Open for 81 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-08 22:23
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.marketplace.terrasos.co
Port: 443
URL: https://api.marketplace.terrasos.co

First seen 2025-11-03 01:18
Last seen 2026-01-08 20:39
Open for 66 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd110b5863ca04e28ac7fbad5047fbad5047fbad5047fbad504
```
Public Swagger UI/API detected at path: /api-docs/swagger.json - sample paths:
GET /data/v2/iri-gen
GET /data/v2/metadata-graph/{iri}
```
  Found on 2026-01-08 20:39
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: portal.coombsagency.com.au
Port: 80
URL: http://portal.coombsagency.com.au

First seen 2025-11-05 03:16
Last seen 2026-01-05 00:49
Open for 60 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-05 00:49
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 35.71.145.101
Domain: app2.zenmaid.com
Port: 443
URL: https://app2.zenmaid.com

First seen 2025-10-31 00:29
Last seen 2026-01-04 06:07
Open for 65 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d9b8ac41ee982f4303f095f9325922980c6755b8

GraphQL introspection enabled at /graphql
Types: 863 (by kind: ENUM: 98, INPUT_OBJECT: 295, OBJECT: 450, SCALAR: 18, UNION: 2)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentAssignmentsUpdateWeb, appointmentBulkChargeWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-04 06:07

991.9 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dac494eda56ff6cf8aec0245de86616c0700a97c

GraphQL introspection enabled at /graphql
Types: 818 (by kind: ENUM: 91, INPUT_OBJECT: 277, OBJECT: 432, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentChargeCreateWeb, appointmentDeleteWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-20 21:25

929.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c64229e3080e2821ffeb4c0bedd5793a6aaa3dc6

GraphQL introspection enabled at /graphql
Types: 815 (by kind: ENUM: 91, INPUT_OBJECT: 276, OBJECT: 430, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentChargeCreateWeb, appointmentDeleteWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-14 10:49

922.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa34ee037fcad3fd6400c79035c80a14c937f755ebb

GraphQL introspection enabled at /graphql
Types: 808 (by kind: ENUM: 89, INPUT_OBJECT: 275, OBJECT: 426, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentChargeCreateWeb, appointmentDeleteWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-01 10:33

917.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31e719b12d30d87e2aa5b265ad91815215b3818fd

GraphQL introspection enabled at /graphql
Types: 803 (by kind: ENUM: 89, INPUT_OBJECT: 272, OBJECT: 424, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentDeleteWeb, appointmentFieldsUpdateWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-27 07:21

912.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dbfcd5a4a10ec8280a5a2a24ee038a475a8e09df

GraphQL introspection enabled at /graphql
Types: 802 (by kind: ENUM: 88, INPUT_OBJECT: 272, OBJECT: 424, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentDeleteWeb, appointmentFieldsUpdateWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-23 08:53

910.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-11-14 13:49

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33119f3f55763d9f7efa8d34dee165c8c2da4e75c

GraphQL introspection enabled at /graphql
Types: 787 (by kind: ENUM: 86, INPUT_OBJECT: 268, OBJECT: 415, SCALAR: 18)
Operations:
- Query: Query | fields: account, allNotesBy, allTasksByDateRange, applicationSearch, appointment
- Mutation: Mutation | fields: accountAreTaxFieldsVisibleUpdateWeb, accountDeletionRequest, activateSms, appointmentDeleteWeb, appointmentFieldsUpdateWeb
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-10 17:59

895.6 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: wiki.finnovate.io
Port: 443
URL: https://wiki.finnovate.io

First seen 2025-10-30 01:02
Last seen 2026-01-04 04:58
Open for 66 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dec863f59258a9f72eacd4d9eb5bbc5a957af4f2

GraphQL introspection enabled at /graphql
Types: 134 (by kind: ENUM: 10, INPUT_OBJECT: 12, OBJECT: 107, SCALAR: 5)
Operations:
- Query: Query | fields: analytics, assets, authentication, comments, contribute
- Mutation: Mutation | fields: analytics, assets, authentication, comments, groups
- Subscription: Subscription | fields: loggingLiveTrail
Directives: auth, cacheControl, deprecated, include, rateLimit, skip, specifiedBy (total: 7)

Found on 2026-01-04 04:58

190.9 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: qaoperaciones.mgmmarco.com
Port: 80
URL: http://qaoperaciones.mgmmarco.com

First seen 2025-11-04 00:43
Last seen 2026-01-03 01:17
Open for 60 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa341eaef48fc0d1cec546944dc654e294a6dccfc1a
```
GraphQL introspection enabled at /graphql
Types: 17 (by kind: ENUM: 2, OBJECT: 11, SCALAR: 4)
Operations:
- Query: Query | fields: companies, company
- Mutation: Mutation | fields: addCompany, deleteCompany, updateCompany
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 1
companies (args: optional/default) : total=3
```
  Found on 2026-01-03 01:17
  
  25.1 kBytes 1 rows
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 15.197.246.237
Domain: api.pathfinder.dfhcc.org
Port: 443
URL: https://api.pathfinder.dfhcc.org

First seen 2025-11-14 01:03
Last seen 2026-01-03 00:59
Open for 49 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d72a48ac550906b0a79bc61d8a86000b404e298b

GraphQL introspection enabled at /graphql
Types: 206 (by kind: ENUM: 37, INPUT_OBJECT: 43, INTERFACE: 23, OBJECT: 89, SCALAR: 10, UNION: 4)
Operations:
- Query: Query | fields: audiences, domains, event, events, feed
- Mutation: Mutation | fields: activateOpportunity, activateRecord, archiveOpportunity, archiveRecord, createEvent
Directives: deprecated, include, skip (total: 3)

Found on 2026-01-03 00:59

340.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa36ba277828bd4d812abfcbb064578168d4022935d

GraphQL introspection enabled at /graphql
Types: 131 (by kind: ENUM: 26, INPUT_OBJECT: 27, INTERFACE: 13, OBJECT: 53, SCALAR: 8, UNION: 4)
Operations:
- Query: Query | fields: audiences, domains, node, nodes, opportunities
- Mutation: Mutation | fields: activateOpportunity, archiveOpportunity, createOpportunity, createSource, destroyCurrentAccount
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-26 17:49

183.9 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.macrostax-qa1.com
Port: 443
URL: https://api.macrostax-qa1.com

First seen 2025-11-11 02:07
Last seen 2026-01-03 00:40
Open for 52 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3126522b385fdd1b1cba88b4f93e12feb0acb6577
```
GraphQL introspection enabled at /graphql
Types: 44 (by kind: ENUM: 1, INPUT_OBJECT: 4, OBJECT: 29, SCALAR: 10)
Operations:
- Query: RootQueryType | fields: coupons, customRecipes, favoriteFoods, favoriteRecipes, featuredRecipes
- Mutation: RootMutationType | fields: cloneSignup, createUserRecipe, deleteUserRecipe, enrollUserInMtc, favoriteFood
Directives: include, skip (total: 2)
```
  Found on 2026-01-03 00:40
  
  65.6 kBytes
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: hyundai.adboxapp.com
Port: 443
URL: https://hyundai.adboxapp.com

First seen 2025-11-13 03:53
Last seen 2026-01-03 00:37
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-03 00:37
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-14 23:26
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: propertyinvestors.kenekt.app
Port: 80
URL: http://propertyinvestors.kenekt.app

First seen 2025-05-02 00:25
Last seen 2026-01-03 00:11
Open for 245 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-03 00:11
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 07:25
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: isuzuute.adboxapp.com
Port: 443
URL: https://isuzuute.adboxapp.com

First seen 2025-11-13 03:53
Last seen 2026-01-03 00:09
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-03 00:09
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-13 03:53
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: trainyardconsulting.com
Port: 443
URL: https://trainyardconsulting.com

First seen 2025-02-27 00:12
Last seen 2026-01-03 00:07
Open for 309 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db20782f8b20782f8b20782f8b20782f8
```
Found 1 files trough .DS_Store spidering:

/vite-dev
```
  Found on 2026-01-03 00:07
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: backend.aqa3.io
Port: 443
URL: https://backend.aqa3.io

First seen 2025-12-09 00:21
Last seen 2026-01-02 23:24
Open for 24 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35825f311a1292cd322dd480af12e95232e7884af

GraphQL introspection enabled at /graphql
Types: 272 (by kind: ENUM: 54, INPUT_OBJECT: 101, OBJECT: 110, SCALAR: 7)
Operations:
- Query: Query | fields: angels, answers, article, articles, blockchains
- Mutation: Mutation | fields: addAngelInvestmentInvitation, addAngelInvitation, addCompanyInvestment, addCompanyMember, addCompanyReference
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2026-01-02 23:24

340.2 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: sprague.fleetpanda.com
Port: 443
URL: https://sprague.fleetpanda.com

First seen 2025-11-15 03:20
Last seen 2026-01-02 23:17
Open for 48 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2026-01-02 23:17

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa385bc6649e3921ceb83e385a2a26aac8f0772418f

GraphQL introspection enabled at /graphql
Types: 1373 (by kind: ENUM: 145, INPUT_OBJECT: 613, OBJECT: 596, SCALAR: 9, UNION: 10)
Operations:
- Query: Query | fields: appVersion, appliedPricings, asset, assetInventories, assetInventorySummary
- Mutation: Mutation | fields: accountingAsync, acknowledgeNote, addAssetToDeliveryOrder, addCodeToAsset, addFeeToOrderGroup
Directives: deprecated, include, skip (total: 3)

Found on 2025-11-30 17:46

1.6 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33a5883de4770194e85746cbf1c0b16728ed15ee2

GraphQL introspection enabled at /graphql
Types: 1368 (by kind: ENUM: 144, INPUT_OBJECT: 611, OBJECT: 594, SCALAR: 9, UNION: 10)
Operations:
- Query: Query | fields: appVersion, appliedPricings, asset, assetInventories, assetInventorySummary
- Mutation: Mutation | fields: accountingAsync, acknowledgeNote, addAssetToDeliveryOrder, addCodeToAsset, addFeeToOrderGroup
Directives: deprecated, include, skip (total: 3)

Found on 2025-11-15 03:20

1.6 MBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: portal.vogue-homes.com.au
Port: 443
URL: https://portal.vogue-homes.com.au

First seen 2025-06-10 23:07
Last seen 2026-01-02 23:11
Open for 206 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 23:11
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 01:54
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: staging-api.lawncareos.com
Port: 443
URL: https://staging-api.lawncareos.com

First seen 2025-08-26 15:54
Last seen 2026-01-02 22:59
Open for 129 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d86bfb45c81ca2632005a4e73874be3d64
```
Found 8 files trough .DS_Store spidering:

/assets
/assets/css
/assets/css/color
/assets/fonts
/assets/images
/assets/js
/assets/scss
/images
```
  Found on 2026-01-02 22:59
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: staging.connect.schoolstatus.com
Port: 443
URL: https://staging.connect.schoolstatus.com

First seen 2025-11-27 01:18
Last seen 2026-01-02 22:54
Open for 36 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2026-01-02 22:54
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3fc522d5b2a39fb195609b03586c9a9a1e77ef57d
```
GraphQL introspection enabled at /graphql
Types: 716 (by kind: ENUM: 102, INPUT_OBJECT: 221, INTERFACE: 2, OBJECT: 374, SCALAR: 9, UNION: 8)
Operations:
- Query: Query | fields: activity, analyzedText, analyzedTexts, analyzedTextsCount, announcement
- Mutation: Mutation | fields: activityCreate, activityDestroy, activitySignupCreate, activitySignupDestroy, activitySignupUpdate
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2025-12-12 17:21
  
  1.0 MBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: the-casa-concierge.kenekt.app
Port: 80
URL: http://the-casa-concierge.kenekt.app

First seen 2025-08-25 01:21
Last seen 2026-01-02 22:38
Open for 130 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 22:38
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 00:28
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: www.cattle-line.app
Port: 443
URL: https://www.cattle-line.app

First seen 2025-10-16 01:49
Last seen 2026-01-02 22:32
Open for 78 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f6ce0b694845534b8560ed9f3101d7ec5e26cffc

GraphQL introspection enabled at /graphql
Types: 37 (by kind: ENUM: 2, OBJECT: 29, SCALAR: 6)
Operations:
- Query: Query | fields: currentUser, game, gameStateAtSequence, games, tacticsCards
- Mutation: Mutation | fields: abandonGame, checkGameEnd, completeScout, createGame, drawCard
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2026-01-02 22:32

49.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f6ce0b694845534b8560ed9f3101d7ecba1f87fc

GraphQL introspection enabled at /graphql
Types: 37 (by kind: ENUM: 2, OBJECT: 29, SCALAR: 6)
Operations:
- Query: Query | fields: currentUser, game, gameStateAtSequence, games, tacticsCards
- Mutation: Mutation | fields: abandonGame, checkGameEnd, completeScout, createGame, drawCard
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-05 07:42

49.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3543734edada0d6cf57b233cbc35634f050076e38

GraphQL introspection enabled at /graphql
Types: 36 (by kind: ENUM: 2, OBJECT: 28, SCALAR: 6)
Operations:
- Query: Query | fields: currentUser, game, gameStateAtSequence, games, tacticsCards
- Mutation: Mutation | fields: abandonGame, checkGameEnd, completeScout, createGame, drawCard
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-10-24 06:35

48.7 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: thisweek.is
Port: 443
URL: https://thisweek.is

First seen 2025-08-16 02:27
Last seen 2026-01-02 22:08
Open for 139 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2026-01-02 22:08
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642f59365a30edec7e60edec7e60edec7e6
```
Found 2 files trough .DS_Store spidering:

/images
/vite-dev
```
  Found on 2025-08-28 09:51
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db20782f8b20782f8b20782f8b20782f8
```
Found 1 files trough .DS_Store spidering:

/vite-dev
```
  Found on 2025-08-20 10:30
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: propertypowerhouse.kenekt.app
Port: 80
URL: http://propertypowerhouse.kenekt.app

First seen 2025-03-22 02:43
Last seen 2026-01-02 22:05
Open for 286 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 22:05
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 06:39
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: birchwoodautomotive.adboxapp.com
Port: 443
URL: https://birchwoodautomotive.adboxapp.com

First seen 2025-11-13 03:53
Last seen 2026-01-02 22:04
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 22:04
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-13 03:53
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: stage-api.proksimity.com
Port: 443
URL: https://stage-api.proksimity.com

First seen 2025-11-26 01:01
Last seen 2026-01-02 22:03
Open for 37 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35a91380de3b7672ffb729fba94f02dc15f794b8b

GraphQL introspection enabled at /graphql
Types: 19 (by kind: ENUM: 2, INPUT_OBJECT: 1, OBJECT: 9, SCALAR: 7)
Operations:
- Query: Query | fields: getPlaceById, getPlaceByUuid, listAllPlaces
- Mutation: Mutation | fields: createPlace
Directives: constraint, deprecated, include, oneOf, rolesAllowed, skip, specifiedBy (total: 7)

Found on 2026-01-02 22:03

25.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35a91380de3b7672ffb729fba94f02dc1d1b219ef

GraphQL introspection enabled at /graphql
Types: 19 (by kind: ENUM: 2, INPUT_OBJECT: 1, OBJECT: 9, SCALAR: 7)
Operations:
- Query: Query | fields: getPlaceById, getPlaceByUuid, listAllPlaces
- Mutation: Mutation | fields: createPlace
Directives: constraint, deprecated, include, oneOf, rolesAllowed, skip, specifiedBy (total: 7)

Readable stores: 0

Found on 2025-12-27 02:14

25.2 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: randw-kellyville.kenekt.app
Port: 443
URL: https://randw-kellyville.kenekt.app

First seen 2025-08-08 03:43
Last seen 2026-01-02 21:56
Open for 147 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 21:56
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 23:26
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: ican-uk-event.com
Port: 80
URL: http://ican-uk-event.com

First seen 2025-09-18 21:44
Last seen 2026-01-02 21:53
Open for 106 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c70ba7b5770ba7b57f0196617717d70bf54597b777aa96526

Found 54 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/s3/avatar-image.png
/s3/capworth_certificate_template.jpeg
/s3/generated_forms
/s3/generated_forms/qr_7.pdf
/s3/ican-uk-events-serve.xlsx
/s3/ICAN_Original_Certificate.jpg
/s3/ICAN_Original_Certificate_1.jpg
/s3/ICAN_Original_Certificatedkdkdkdk.jpg
/s3/one.jpg
/s3/reg_form.pdf
/s3/three.jpg
/s3/two.jpg
/temp
/web.config

Found on 2026-01-02 21:53

Severity: medium
Fingerprint: 5f32cf5d6962f09c8efce1938efce193046ae6cb6b4184ebc5857e1b6ba779e1

Found 36 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-11-30 00:21

Severity: medium
Fingerprint: 5f32cf5d6962f09cef4770e6ef4770e6dc050392eee342926cd39b16eb0f42b1

Found 42 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-11-30 00:21

Severity: low
Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45b260eb1973132049e6469a956c4f281b

Found 30 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-11-30 00:21

Severity: medium
Fingerprint: 5f32cf5d6962f09cecc85b04ecc85b048c79e47c8a0b749c5c2d4bfcf64e71c6

Found 53 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/s3/avatar-image.png
/s3/capworth_certificate_template.jpeg
/s3/generated_forms
/s3/ican-uk-events-serve.xlsx
/s3/ICAN_Original_Certificate.jpg
/s3/ICAN_Original_Certificate_1.jpg
/s3/ICAN_Original_Certificatedkdkdkdk.jpg
/s3/one.jpg
/s3/reg_form.pdf
/s3/three.jpg
/s3/two.jpg
/temp
/web.config

Found on 2025-11-02 17:05

Severity: medium
Fingerprint: 5f32cf5d6962f09c910c508a910c508a76ee39ee244c1976c2785c320a4ea1b1

Found 55 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/generated_forms
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/s3/avatar-image.png
/s3/capworth_certificate_template.jpeg
/s3/generated_forms
/s3/generated_forms/qr_7.pdf
/s3/ican-uk-events-serve.xlsx
/s3/ICAN_Original_Certificate.jpg
/s3/ICAN_Original_Certificate_1.jpg
/s3/ICAN_Original_Certificatedkdkdkdk.jpg
/s3/one.jpg
/s3/reg_form.pdf
/s3/three.jpg
/s3/two.jpg
/temp
/web.config

Found on 2025-09-30 12:38

Severity: medium
Fingerprint: 5f32cf5d6962f09cccd847a3ccd847a3ffb3ce9b020a46fb347ded4be2958652

Found 43 files trough .DS_Store spidering:

/certificate.pdf
/css
/favicon.ico
/front
/front/assets
/front/assets/css
/front/assets/fonts
/front/assets/images
/front/assets/images/bg_image.jpg
/front/assets/images/favicon-icon
/front/assets/images/gallery_img2.jpg
/front/assets/images/make_calls.jpg
/front/assets/images/prettyPhoto
/front/assets/js
/front/assets/switcher
/front/assets2
/front/assets2/css
/front/assets2/fonts
/front/assets2/images
/front/assets2/images/blog_800x510_5.jpg
/front/assets2/images/blog_800x510_5e.jpg
/front/assets2/images/favicon-icon
/front/assets2/images/favicon-icon/favicon.png
/front/assets2/images/ican-uk-logo.png
/front/assets2/images/prettyPhoto
/front/assets2/images/prettyPhoto/dark_rounded
/front/assets2/images/prettyPhoto/dark_square
/front/assets2/images/prettyPhoto/default
/front/assets2/images/prettyPhoto/facebook
/front/assets2/images/prettyPhoto/light_rounded
/front/assets2/images/prettyPhoto/light_square
/front/assets2/js
/front/assets2/switcher
/front/schedule-pdf
/generated_forms
/index.php
/js
/mix-manifest.json
/packages
/robots.txt
/s3
/temp
/web.config

Found on 2025-09-30 11:00

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.vanta.gg
Port: 443
URL: https://api.vanta.gg

First seen 2025-12-02 01:13
Last seen 2026-01-02 21:48
Open for 31 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d9c8e569ed0ef14b9851432646cc0eab4f0012c3

GraphQL introspection enabled at /graphql
Types: 197 (by kind: ENUM: 7, INPUT_OBJECT: 5, OBJECT: 171, SCALAR: 14)
Operations:
- Query: Query | fields: arcadeGame, arcadeGames, associations, availablePlayersPrivateCoachingFreeTrial, availablePrivateCoachingFreeTrial
- Mutation: Mutation | fields: applyDiscountCode, bulkInvitePlayers, cancelEvent, createBreakoutRooms, createCheckIn
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 21:48

273.3 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: hjc-ppf.postpossible.org
Port: 80
URL: http://hjc-ppf.postpossible.org

First seen 2025-07-23 01:41
Last seen 2026-01-02 21:40
Open for 163 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642bcfccc19ecde6a83ecde6a83ecde6a83
```
Found 2 files trough .DS_Store spidering:

/poptential
/poptential/poptential-logo-backup.png
```
  Found on 2026-01-02 21:40
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2ba2d4782ba2d4782ba2d4782ba2d478
```
Found 1 files trough .DS_Store spidering:

/poptential
```
  Found on 2025-11-14 16:37
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: australiancricket.adboxapp.com
Port: 443
URL: https://australiancricket.adboxapp.com

First seen 2025-11-13 04:04
Last seen 2026-01-02 21:36
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 21:36
  
  93.7 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: oliver-myers.kenekt.app
Port: 443
URL: https://oliver-myers.kenekt.app

First seen 2025-08-22 05:16
Last seen 2026-01-02 21:19
Open for 133 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 21:19
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 05:58
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: hjc-ppf.postpossible.org
Port: 443
URL: https://hjc-ppf.postpossible.org

First seen 2025-07-23 01:41
Last seen 2026-01-02 21:01
Open for 163 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642bcfccc19ecde6a83ecde6a83ecde6a83
```
Found 2 files trough .DS_Store spidering:

/poptential
/poptential/poptential-logo-backup.png
```
  Found on 2026-01-02 21:01
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: propertyjunction.kenekt.app
Port: 80
URL: http://propertyjunction.kenekt.app

First seen 2025-04-12 00:12
Last seen 2026-01-02 20:36
Open for 265 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 20:36
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 01:39
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: infinite-timeline.manupanizo.com
Port: 80
URL: http://infinite-timeline.manupanizo.com

First seen 2025-10-10 00:04
Last seen 2026-01-02 20:35
Open for 84 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d8ef0d5608ef0d5608ef0d5608ef0d560
```
Found 1 files trough .DS_Store spidering:

/favicon
```
  Found on 2026-01-02 20:35
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: www.kingsgrilldeli.com
Port: 443
URL: https://www.kingsgrilldeli.com

First seen 2025-09-11 20:42
Last seen 2026-01-02 20:15
Open for 112 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176422b63f4825bdb4d635bdb4d635bdb4d63
```
Found 2 files trough .DS_Store spidering:

/css
/images
```
  Found on 2026-01-02 20:15
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 35.71.145.101
Domain: content.kingchildren.com
Port: 443
URL: https://content.kingchildren.com

First seen 2025-11-20 00:32
Last seen 2026-01-02 19:49
Open for 43 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a7daf4b44

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : updated_at=2023-10-12T02:02:08.436Z id=1 created_at=2023-10-12T02:02:08.428Z
layout (args: optional/default) : updated_at=2023-10-30T19:07:30.308Z id=1 created_at=2023-10-12T02:03:52.374Z

Found on 2026-01-02 19:49

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a4a2f9258

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z id=1
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-12-26 08:59

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a80858ba4

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : id=1 created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-12-24 09:35

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13adaf3df04

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : updated_at=2023-10-12T02:02:08.436Z id=1 created_at=2023-10-12T02:02:08.428Z
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-12-17 00:51

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a0c69b4ec

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : id=1 created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z
layout (args: optional/default) : created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z id=1

Found on 2025-12-01 17:09

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-11-22 04:20

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13ae09a4ab4

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false id=1 created_at=2023-10-30T20:15:17.877Z
homePage (args: optional/default) : updated_at=2023-10-12T02:02:08.436Z id=1 created_at=2023-10-12T02:02:08.428Z
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-11-20 00:32

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a9f304f6a

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : isBannerEnabled=false id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z
homePage (args: optional/default) : id=1 created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-11-20 00:32

420.5 kBytes 10 rows

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: brickfield-property.kenekt.app
Port: 80
URL: http://brickfield-property.kenekt.app

First seen 2025-10-08 00:06
Last seen 2026-01-02 19:36
Open for 86 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 19:36
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 08:13
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: partners.frdhomes.com.au
Port: 80
URL: http://partners.frdhomes.com.au

First seen 2025-05-19 00:34
Last seen 2026-01-02 19:27
Open for 228 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 19:27
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 16:36
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: mobile.fleetpanda.com
Port: 443
URL: https://mobile.fleetpanda.com

First seen 2025-10-18 00:36
Last seen 2026-01-02 19:26
Open for 76 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2026-01-02 19:26
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 75.2.97.79
Domain: mabx.adboxapp.com
Port: 443
URL: https://mabx.adboxapp.com

First seen 2025-11-13 04:13
Last seen 2026-01-02 19:15
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 19:15
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-13 04:13
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: audisa.adboxapp.com
Port: 443
URL: https://audisa.adboxapp.com

First seen 2025-11-13 03:53
Last seen 2026-01-02 19:12
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 19:12
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-13 03:53
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: app.glik.ar
Port: 443
URL: https://app.glik.ar

First seen 2024-12-22 00:20
Last seen 2026-01-02 19:10
Open for 376 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d820452ce2850033c47271429120b2174b
```
Found 8 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/external
/logos
/packs
/robots.txt
/safari-pinned-tab.svg
```
  Found on 2026-01-02 19:10
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: admin.postpossible.org
Port: 443
URL: https://admin.postpossible.org

First seen 2025-07-23 02:01
Last seen 2026-01-02 19:02
Open for 163 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642bcfccc19ecde6a83ecde6a83ecde6a83
```
Found 2 files trough .DS_Store spidering:

/poptential
/poptential/poptential-logo-backup.png
```
  Found on 2026-01-02 19:02
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: ru.bossaz-pr-1101.azstage.in
Port: 80
URL: http://ru.bossaz-pr-1101.azstage.in

First seen 2025-11-21 08:32
Last seen 2026-01-02 18:23
Open for 42 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3edcd2f02dd1cea9285e39de80e5d532613018182
```
GraphQL introspection enabled at /graphql
Types: 125 (by kind: ENUM: 22, INPUT_OBJECT: 20, INTERFACE: 2, OBJECT: 69, SCALAR: 10, UNION: 2)
Operations:
- Query: Query | fields: balanceHistory, bookmarks, categories, company, draftResume
- Mutation: Mutation | fields: createBookmark, createContactEmail, createInvoice, createPayment, createResume
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2026-01-02 18:23
  
  140.0 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: suburban-edge.kenekt.app
Port: 80
URL: http://suburban-edge.kenekt.app

First seen 2025-07-17 22:40
Last seen 2026-01-02 18:15
Open for 168 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 18:15
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 12:28
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: oogst.vangst.com
Port: 443
URL: https://oogst.vangst.com

First seen 2025-11-14 00:04
Last seen 2026-01-02 18:13
Open for 49 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa30a2289c48445708899ee525828725b38792911c0

GraphQL introspection enabled at /graphql
Types: 259 (by kind: ENUM: 36, INPUT_OBJECT: 79, INTERFACE: 2, OBJECT: 129, SCALAR: 8, UNION: 5)
Operations:
- Query: Query | fields: currentUser, employmentBenefits, featuredMembers, getChatMessage, getChatMessages
- Mutation: Mutation | fields: acceptCandidateConnection, acceptTermsAndConditions, addToJob, applyToJob, assumeIdentity
Directives: deprecated, include, skip (total: 3)

Found on 2026-01-02 18:13

400.3 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 75.2.97.79
Domain: lexusca.adboxapp.com
Port: 443
URL: https://lexusca.adboxapp.com

First seen 2025-11-13 04:35
Last seen 2026-01-02 17:55
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 17:55
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-13 04:35
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: expaustralia.kenekt.app
Port: 80
URL: http://expaustralia.kenekt.app

First seen 2025-06-16 01:06
Last seen 2026-01-02 17:47
Open for 200 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 17:47
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 07:10
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: coombsagency.kenekt.app
Port: 80
URL: http://coombsagency.kenekt.app

First seen 2025-05-27 01:46
Last seen 2026-01-02 17:40
Open for 220 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 17:40
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 23:33
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: sandbox.postpossible.org
Port: 80
URL: http://sandbox.postpossible.org

First seen 2025-07-24 02:03
Last seen 2026-01-02 17:37
Open for 162 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642bcfccc19ecde6a83ecde6a83ecde6a83
```
Found 2 files trough .DS_Store spidering:

/poptential
/poptential/poptential-logo-backup.png
```
  Found on 2026-01-02 17:37
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: properties.apihglobal.com
Port: 80
URL: http://properties.apihglobal.com

First seen 2025-09-08 00:40
Last seen 2026-01-02 17:35
Open for 116 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 17:35
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 23:47
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.bluekeys.io
Port: 443
URL: https://api.bluekeys.io

First seen 2025-11-13 04:23
Last seen 2026-01-02 17:20
Open for 50 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ca55748ca978ecd0e2e23c2663d17c83a78f606f

GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 5, INPUT_OBJECT: 14, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: getAllBrands, getAllPlans, getDashboardAllBrands, getPlanDetails, getStripeCards
- Mutation: Mutation | fields: createClaimRequest, createMembership, getToastBrands, getToastMenusItems, upgradeMembership
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2026-01-02 17:20

98.2 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.go-workation.jp
Port: 80
URL: http://api.go-workation.jp

First seen 2025-11-18 01:29
Last seen 2026-01-02 17:17
Open for 45 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa384e5ebc7829da5f58606b09bb90f59611b2f382c

GraphQL introspection enabled at /graphql
Types: 41 (by kind: ENUM: 3, INPUT_OBJECT: 10, OBJECT: 24, SCALAR: 4)
Operations:
- Query: Query | fields: eventFormItemList, eventSearchList, searchFilterList, searchItemList, userCheckLinkedLine
- Mutation: Mutation | fields: eventCreate, searchFilterSave, userCreate
Directives: deprecated, include, skip (total: 3)

Readable stores: 1
searchItemList (args: none) : sortTypes=[created_at_desc application_period_asc visit_period_asc]

Found on 2026-01-02 17:17

43.0 kBytes 1 rows

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: www.tailawesome.com
Port: 80
URL: http://www.tailawesome.com

First seen 2025-02-17 08:13
Last seen 2026-01-02 16:44
Open for 319 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642f59365a35b3b376e5b3b376e5b3b376e
```
Found 2 files trough .DS_Store spidering:

/images
/sitemaps
```
  Found on 2026-01-02 16:44
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: elders.adboxapp.com
Port: 443
URL: https://elders.adboxapp.com

First seen 2025-11-13 04:03
Last seen 2026-01-02 16:43
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 16:43
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-13 04:03
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: content.kingchildren.com
Port: 80
URL: http://content.kingchildren.com

First seen 2025-11-20 00:32
Last seen 2026-01-02 16:38
Open for 43 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a0c69b4ec

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : id=1 created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z
layout (args: optional/default) : created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z id=1

Found on 2026-01-02 16:38

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13ace8d744c

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : updated_at=2023-10-12T02:02:08.436Z id=1 created_at=2023-10-12T02:02:08.428Z
layout (args: optional/default) : created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z id=1

Found on 2025-12-30 14:26

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a80858ba4

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : id=1 created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-12-26 13:40

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13af2837c94

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false id=1 created_at=2023-10-30T20:15:17.877Z
homePage (args: optional/default) : id=1 created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-12-23 04:51

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13ae09a4ab4

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false id=1 created_at=2023-10-30T20:15:17.877Z
homePage (args: optional/default) : updated_at=2023-10-12T02:02:08.436Z id=1 created_at=2023-10-12T02:02:08.428Z
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-12-20 15:49

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a4a2f9258

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z id=1
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-12-10 19:39

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13a9f304f6a

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : isBannerEnabled=false id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z
homePage (args: optional/default) : id=1 created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z
layout (args: optional/default) : id=1 created_at=2023-10-12T02:03:52.374Z updated_at=2023-10-30T19:07:30.308Z

Found on 2025-11-24 08:39

420.5 kBytes 10 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35cc492c6b5149f3683ec451c5362c13acadac364

GraphQL introspection enabled at /graphql
Types: 503 (by kind: ENUM: 9, INPUT_OBJECT: 160, OBJECT: 312, SCALAR: 16, UNION: 6)
Operations:
- Query: Query | fields: addToBagPopup, collection, collections, collectionsConnection, customerReview
- Mutation: Mutation | fields: createCollection, deleteAddToBagPopup, deleteCollection, updateAddToBagPopup, updateCollection
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
addToBagPopup (args: optional/default) : id=1 created_at=2023-10-30T20:15:17.877Z updated_at=2023-10-30T20:15:17.891Z isBannerEnabled=false
homePage (args: optional/default) : id=1 created_at=2023-10-12T02:02:08.428Z updated_at=2023-10-12T02:02:08.436Z
layout (args: optional/default) : updated_at=2023-10-30T19:07:30.308Z id=1 created_at=2023-10-12T02:03:52.374Z

Found on 2025-11-22 04:20

420.5 kBytes 10 rows

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: medico.semina.com.br
Port: 80
URL: http://medico.semina.com.br

First seen 2025-11-22 02:14
Last seen 2026-01-02 16:38
Open for 41 days

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6d4b6831c4484b820f4f8c7d90f1d4bfe50ed0191

GraphQL introspection enabled at /api/graphql
Types: 209 (by kind: ENUM: 27, INPUT_OBJECT: 42, INTERFACE: 9, OBJECT: 113, SCALAR: 14, UNION: 4)
Operations:
- Query: Query | fields: address, admin_batch, admin_batches, my_addresses, ping
- Mutation: Mutation | fields: account_register, account_sendEmailVerificationByPhone, account_sendLoginVerification, account_sendPhoneVerification, account_submitPhoneVerification
Directives: deprecated, formatDate, hasAuthorization, include, isAuthenticated, isOwner, masked, skip, specifiedBy, upperCase (total: 11)

Found on 2026-01-02 16:38

342.2 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: frontier-staging.rodeorodeorodeo.com
Port: 443
URL: https://frontier-staging.rodeorodeorodeo.com

First seen 2025-10-25 03:26
Last seen 2026-01-02 16:23
Open for 69 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3c43b627155a7b0f3fb4cb3ce8eac4a8c77a9b55c
```
GraphQL introspection enabled at /graphql
Types: 111 (by kind: ENUM: 16, INPUT_OBJECT: 38, OBJECT: 51, SCALAR: 6)
Operations:
- Query: Query | fields: analyzePost, calendars, chatToken, cohorts, connectedUsers
- Mutation: Mutation | fields: addGroupMember, addPlanAttendee, addPlanWatcher, addSticker, bootstrapGoogleAccount
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2026-01-02 16:23
  
  140.6 kBytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: core-api.gigily.ai
Port: 443
URL: https://core-api.gigily.ai

First seen 2025-12-12 00:17
Last seen 2026-01-02 16:10
Open for 21 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c68cbc6a34dce7daf1dc7ff2d478f177bcec91cf

GraphQL introspection enabled at /graphql
Types: 215 (by kind: ENUM: 44, INPUT_OBJECT: 58, OBJECT: 103, SCALAR: 9, UNION: 1)
Operations:
- Query: Query | fields: accountExists, getAccount, getAccountUsers, getCurrentAccount, getManyAccounts
- Mutation: Mutation | fields: addAccount, addUserToAccount, createAccountIntegration, deactivate, updateAccount
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 16:10

318.9 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 35.71.145.101
Domain: quicksilver.adboxapp.com
Port: 443
URL: https://quicksilver.adboxapp.com

First seen 2025-11-13 04:13
Last seen 2026-01-02 15:57
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 15:57
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-13 04:13
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 75.2.97.79
Domain: afwagportal.org
Port: 443
URL: https://afwagportal.org

First seen 2025-04-26 04:42
Last seen 2026-01-02 15:51
Open for 251 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c6731298567312985431972ba8a44fd87eac76a910d233665

Found 92 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/intro/intro1
/frontend-assets/images/intro/intro1/bg-1 copy.jpg
/frontend-assets/images/intro/intro1/bg-1.jpg
/frontend-assets/images/intro/intro10
/frontend-assets/images/intro/intro11
/frontend-assets/images/intro/intro12
/frontend-assets/images/intro/intro3
/frontend-assets/images/intro/intro4
/frontend-assets/images/intro/intro5
/frontend-assets/images/intro/intro6
/frontend-assets/images/intro/intro7
/frontend-assets/images/intro/intro8
/frontend-assets/images/intro/intro9
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/products/mini-cart
/frontend-assets/images/products/product
/frontend-assets/images/products/product/327
/frontend-assets/images/products/shopping-cart
/frontend-assets/images/products/single-product
/frontend-assets/images/products/widget
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2026-01-02 15:51

Severity: medium
Fingerprint: 5f32cf5d6962f09c1e3ea8c61e3ea8c6a639d37b489f8e14a6f33832d24a1834

Found 86 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/intro/intro1
/frontend-assets/images/intro/intro1/bg-1 copy.jpg
/frontend-assets/images/intro/intro1/bg-1.jpg
/frontend-assets/images/intro/intro10
/frontend-assets/images/intro/intro11
/frontend-assets/images/intro/intro12
/frontend-assets/images/intro/intro3
/frontend-assets/images/intro/intro4
/frontend-assets/images/intro/intro5
/frontend-assets/images/intro/intro6
/frontend-assets/images/intro/intro7
/frontend-assets/images/intro/intro8
/frontend-assets/images/intro/intro9
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-12-24 00:02

Severity: low
Fingerprint: 5f32cf5d6962f09c0f8dcf020f8dcf02298463c745038fe8dedf2086b84aa4b8

Found 24 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets

Found on 2025-12-01 04:05

Severity: medium
Fingerprint: 5f32cf5d6962f09cddacc81addacc81aa2d220ef8aeb5eb0bf3421ce09ad1700

Found 68 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-11-27 01:16

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f87726595ec97d31be798c76363b6fc2adaf9

Found 11 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/profile
/backend-assets/js
/frontend-assets

Found on 2025-11-23 09:11

Severity: medium
Fingerprint: 5f32cf5d6962f09c3078a2ae3078a2ae5a78d3f336572dac548b86eaed8a0cea

Found 73 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-11-12 21:40

Severity: medium
Fingerprint: 5f32cf5d6962f09c6e6dc6946e6dc69469ba316dd6578cb22928085c2a41a043

Found 84 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/intro/intro1
/frontend-assets/images/intro/intro10
/frontend-assets/images/intro/intro11
/frontend-assets/images/intro/intro12
/frontend-assets/images/intro/intro3
/frontend-assets/images/intro/intro4
/frontend-assets/images/intro/intro5
/frontend-assets/images/intro/intro6
/frontend-assets/images/intro/intro7
/frontend-assets/images/intro/intro8
/frontend-assets/images/intro/intro9
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-11-10 23:07

Severity: medium
Fingerprint: 5f32cf5d6962f09c48b4adea48b4adea8b9e345f1380fb8039c51d1e1d2977d6

Found 91 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/intro/intro1
/frontend-assets/images/intro/intro1/bg-1 copy.jpg
/frontend-assets/images/intro/intro1/bg-1.jpg
/frontend-assets/images/intro/intro10
/frontend-assets/images/intro/intro11
/frontend-assets/images/intro/intro12
/frontend-assets/images/intro/intro3
/frontend-assets/images/intro/intro4
/frontend-assets/images/intro/intro5
/frontend-assets/images/intro/intro6
/frontend-assets/images/intro/intro7
/frontend-assets/images/intro/intro8
/frontend-assets/images/intro/intro9
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/products/mini-cart
/frontend-assets/images/products/product
/frontend-assets/images/products/shopping-cart
/frontend-assets/images/products/single-product
/frontend-assets/images/products/widget
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-11-08 21:11

Severity: low
Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bc250ff385d7f5934a6863bb14754902aa

Found 22 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/frontend-assets

Found on 2025-11-03 08:11

Severity: low
Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45ad82977a58ced0c7278440d12d6b107b

Found 30 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-10-28 18:31

Severity: medium
Fingerprint: 5f32cf5d6962f09c7b6beb587b6beb58fd3762c1cffbbd6e62f0f768caee6e65

Found 57 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/blog
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-10-26 14:11

Severity: medium
Fingerprint: 5f32cf5d6962f09c93a25c3a93a25c3a815e428fa1574bcc91b9baf706330494

Found 46 files trough .DS_Store spidering:

/backend-assets
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-08-25 00:31

Severity: low
Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d825b62841d9c839ee2bafb7e80f6a5b35

Found 8 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets

Found on 2025-06-26 00:07

Severity: medium
Fingerprint: 5f32cf5d6962f09cb1c4b1dfb1c4b1df20683d7851ddbba1c97c83e701755be6

Found 61 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/blog
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-04-26 04:42

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: www.materialpalette.com
Port: 80
URL: http://www.materialpalette.com

First seen 2024-11-14 00:39
Last seen 2026-01-02 15:26
Open for 414 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e91ec4a1aa3155cc0895cd635916285e4a
```
Found 5 files trough .DS_Store spidering:

/fonts
/fonts/GothamRounded-Book.otf
/fonts/GothamRounded-Light.otf
/img
/img/techtest 2
```
  Found on 2026-01-02 15:26
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 35.71.145.101
Domain: volkswagenus.adboxapp.com
Port: 443
URL: https://volkswagenus.adboxapp.com

First seen 2025-10-16 02:40
Last seen 2026-01-02 15:23
Open for 78 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 15:23
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-10-16 02:40
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: angellawoffice.prevail-portal.com
Port: 443
URL: https://angellawoffice.prevail-portal.com

First seen 2025-01-09 21:07
Last seen 2026-01-02 15:20
Open for 357 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f27d3c38af5f4664b6cedff006cedff00
```
Found 3 files trough .DS_Store spidering:

/download
/images
/packs
```
  Found on 2026-01-02 15:20
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: app.kenekt.com.au
Port: 80
URL: http://app.kenekt.com.au

First seen 2025-05-13 02:03
Last seen 2026-01-02 14:40
Open for 234 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 14:40
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 11:29
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 35.71.145.101
Domain: craft4-staging.safewill.com
Port: 443
URL: https://craft4-staging.safewill.com

First seen 2025-11-02 00:38
Last seen 2026-01-02 14:31
Open for 61 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db84e0e35084e0e35084e0e35084e0e35084e0e35084e0e350
```
GraphQL introspection enabled at /api
```
  Found on 2026-01-02 14:31
- Severity: medium
  Fingerprint: c2db3a1c40d490db84e0e3502e8caca0798991a4db97361f00e25643f422003f
```
GraphQL introspection enabled at /api
Types: 228 (by kind: ENUM: 4, INPUT_OBJECT: 6, INTERFACE: 10, OBJECT: 118, SCALAR: 8, UNION: 82)
Operations:
- Query: Query | fields: address, addressCount, addresses, entries, ping
- Mutation: Mutation | fields: ping
Directives: deprecated, formatDateTime, include, markdown, money, parseRefs, skip, stripTags, transform, trim (total: 11)
```
  Found on 2025-12-01 05:59
  
  7.2 MBytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: staging-admin.feedbackforward.org
Port: 80
URL: http://staging-admin.feedbackforward.org

First seen 2025-11-21 05:09
Last seen 2026-01-02 14:27
Open for 42 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3400105ec05482f709bb2e5e59b271c805a001e70

GraphQL introspection enabled at /graphql
Types: 207 (by kind: ENUM: 16, INPUT_OBJECT: 43, INTERFACE: 2, OBJECT: 138, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 14:27

391.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3181a27e89b7baf4c851ec869ce672cf448945614

GraphQL introspection enabled at /graphql
Types: 202 (by kind: ENUM: 13, INPUT_OBJECT: 41, INTERFACE: 2, OBJECT: 138, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-16 13:28

389.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b4b02ad4aa531518a03d4c5d11f6cf68b7f2d088

GraphQL introspection enabled at /graphql
Types: 194 (by kind: ENUM: 13, INPUT_OBJECT: 40, INTERFACE: 2, OBJECT: 131, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-30 22:16

378.2 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: audi-fr.adboxapp.com
Port: 443
URL: https://audi-fr.adboxapp.com

First seen 2025-11-13 04:24
Last seen 2026-01-02 14:00
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 14:00
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-13 04:24
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: projects.brickfieldpropertyservices.com.au
Port: 443
URL: https://projects.brickfieldpropertyservices.com.au

First seen 2025-10-08 00:16
Last seen 2026-01-02 13:50
Open for 86 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 13:50
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 18:43
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.recordit.ke
Port: 443
URL: https://api.recordit.ke

First seen 2025-11-28 00:58
Last seen 2026-01-02 13:26
Open for 35 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b4a7973e9ea1b4eeeef8b701ec41c7c0bb2d48dc

GraphQL introspection enabled at /graphql
Types: 178 (by kind: ENUM: 53, INPUT_OBJECT: 57, OBJECT: 64, SCALAR: 4)
Operations:
- Query: Query | fields: getClinic, getClinics, getDefaultRegistrationTerms, getRegistrationTerms, userExists
- Mutation: Mutation | fields: backupData, initiateMpesaExpress, mergeFiles, queryMpesaTransactionStatus, updateAllClinicsSql
Directives: include, skip (total: 2)

Found on 2026-01-02 13:26

268.9 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c7d0150096c24dc4657aa5333b14120ad8edc396

GraphQL introspection enabled at /graphql
Types: 177 (by kind: ENUM: 53, INPUT_OBJECT: 57, OBJECT: 63, SCALAR: 4)
Operations:
- Query: Query | fields: getClinic, getClinics, getDefaultRegistrationTerms, getRegistrationTerms, userExists
- Mutation: Mutation | fields: backupData, initiateMpesaExpress, mergeFiles, queryMpesaTransactionStatus, updateAllClinicsSql
Directives: include, skip (total: 2)

Found on 2025-12-10 13:24

267.1 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: api-preview.endlesscommerce.com
Port: 80
URL: http://api-preview.endlesscommerce.com

First seen 2025-10-25 05:57
Last seen 2026-01-02 13:21
Open for 69 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2026-01-02 13:21

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa343d6c370b8ab2774c8e334b75beb73e747b2970b

GraphQL introspection enabled at /graphql
Types: 641 (by kind: ENUM: 116, INPUT_OBJECT: 242, OBJECT: 260, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-01 02:22

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b91ee1d0e614a5148769a1176d87be47d9061c6b

GraphQL introspection enabled at /graphql
Types: 637 (by kind: ENUM: 116, INPUT_OBJECT: 240, OBJECT: 258, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-27 09:32

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ffb9ec2960b1328b03a7652e2cd2a446d7b1ab00

GraphQL introspection enabled at /graphql
Types: 634 (by kind: ENUM: 115, INPUT_OBJECT: 239, OBJECT: 257, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-23 06:17

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3883d5447df60f37564e700747db672c0b151041e

GraphQL introspection enabled at /graphql
Types: 632 (by kind: ENUM: 114, INPUT_OBJECT: 239, OBJECT: 256, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-16 13:19

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dd37f01ea0d0590ee67e10c5ed9f9ef150bc4b11

GraphQL introspection enabled at /graphql
Types: 603 (by kind: ENUM: 108, INPUT_OBJECT: 231, OBJECT: 241, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-12 16:11

1.1 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f4ff2397bacdf74553647e6472c8db30379f048e

GraphQL introspection enabled at /graphql
Types: 599 (by kind: ENUM: 107, INPUT_OBJECT: 230, OBJECT: 239, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-10 18:08

1.1 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa39df517a44804de28f7d532bb8706306b941a00cf

GraphQL introspection enabled at /graphql
Types: 593 (by kind: ENUM: 106, INPUT_OBJECT: 228, OBJECT: 236, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-08 15:53

1.1 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c1f8c3df872413edf62c575cfbb45941e4e30da1

GraphQL introspection enabled at /graphql
Types: 585 (by kind: ENUM: 106, INPUT_OBJECT: 220, OBJECT: 236, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPersonInvitation, addColor, addNote, addOrderItem, addPerson
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-04 22:15

1.1 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3a7c1342ca58bd5303c9a5f539adbc2e8ee76db36

GraphQL introspection enabled at /graphql
Types: 582 (by kind: ENUM: 106, INPUT_OBJECT: 217, OBJECT: 236, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPersonInvitation, addColor, addNote, addOrderItem, addPerson
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-03 17:45

1.0 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa39f8260bbce7235392e28a2d840f6ec5d746ba31d

GraphQL introspection enabled at /graphql
Types: 579 (by kind: ENUM: 103, INPUT_OBJECT: 216, OBJECT: 237, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPersonInvitation, addColor, addNote, addOrderItem, addPerson
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-02 13:32

1.0 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31afe168b9f13e789b34e6548277daded46a6abed

GraphQL introspection enabled at /graphql
Types: 578 (by kind: ENUM: 103, INPUT_OBJECT: 215, OBJECT: 237, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPersonInvitation, addColor, addNote, addOrderItem, addPerson
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-10-29 04:56

1.0 MBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: bws.adboxapp.com
Port: 443
URL: https://bws.adboxapp.com

First seen 2025-11-13 04:03
Last seen 2026-01-02 13:06
Open for 50 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 13:06
  
  93.7 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-16 23:40
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.rjnye.com
Port: 443
URL: https://api.rjnye.com

First seen 2025-11-12 03:13
Last seen 2026-01-02 13:05
Open for 51 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa324ef8c3ecc575bee63d0662128b41e9d7c3a4a49

GraphQL introspection enabled at /graphql
Types: 199 (by kind: ENUM: 5, INPUT_OBJECT: 54, OBJECT: 124, SCALAR: 13, UNION: 3)
Operations:
- Query: Query | fields: categories, categoriesConnection, category, frontPage, message
- Mutation: Mutation | fields: createCategory, deleteCategory, deleteFrontPage, updateCategory, updateFrontPage
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2026-01-02 13:05

163.9 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.app.dante-nyc.com
Port: 80
URL: http://api.app.dante-nyc.com

First seen 2025-11-21 03:19
Last seen 2026-01-02 13:05
Open for 42 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31de9cc9522b162d705bfbd2eca3e698358c0ac53
```
GraphQL introspection enabled at /graphql
Types: 297 (by kind: ENUM: 4, INPUT_OBJECT: 50, OBJECT: 231, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: address, addresses, addressesConnection, catalog, catalogs
- Mutation: Mutation | fields: createAddress, createCatalog, deleteAddress, updateAddress, updateCatalog
Directives: cacheControl, deprecated, include, skip (total: 4)
```
  Found on 2026-01-02 13:05
  
  252.7 kBytes
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: alpha-api.mindtrix.xyz
Port: 80
URL: http://alpha-api.mindtrix.xyz

First seen 2025-10-20 01:06
Last seen 2026-01-02 12:59
Open for 74 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa301e95c728b62ca828306b910c490079e51ffcc88
```
GraphQL introspection enabled at /graphql
Types: 236 (by kind: ENUM: 21, INPUT_OBJECT: 97, OBJECT: 109, SCALAR: 8, UNION: 1)
Operations:
- Query: Query | fields: confirmPassword, countsLikesOfOneLink, decryptPassword, encryptPassword, episodes
- Mutation: Mutation | fields: addChildToParentAccountFromPublishedCapability, addCronJobForSyncingPodcast, addShoppingList, addSubscriberToShow, batchMintForPodcastEpisodeCover
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2026-01-02 12:59
  
  395.5 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-11-01 16:49
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: properties.brightrealty.com.au
Port: 80
URL: http://properties.brightrealty.com.au

First seen 2025-04-11 00:41
Last seen 2026-01-02 12:49
Open for 266 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 12:49
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 21:34
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: app.kenkyu.ai
Port: 443
URL: https://app.kenkyu.ai

First seen 2025-09-17 09:37
Last seen 2026-01-02 12:46
Open for 107 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d493b8ab2493b8ab2493b8ab2493b8ab2
```
Found 1 files trough .DS_Store spidering:

/vite.svg
```
  Found on 2026-01-02 12:46
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.prescient-ai.io
Port: 443
URL: https://api.prescient-ai.io

First seen 2025-11-07 01:06
Last seen 2026-01-02 12:41
Open for 56 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa35466a4370e7cb9a5a333c963d1a9bd8bd1a9bd8b
```
GraphQL introspection enabled at /graphql
Types: 23 (by kind: ENUM: 4, OBJECT: 13, SCALAR: 6)
Operations:
- Query: Query | fields: channelNames, modeledMetricTimeSeries, modeledMetrics, models
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2026-01-02 12:41
  
  31.8 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-12-20 11:34
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.castironcoding.com
Port: 443
URL: https://api.castironcoding.com

First seen 2025-11-11 00:36
Last seen 2026-01-02 12:41
Open for 52 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3a9f59eb66bbd7e267de666506dc6f7a58c036b71

GraphQL introspection enabled at /graphql
Types: 252 (by kind: ENUM: 16, INPUT_OBJECT: 61, INTERFACE: 7, OBJECT: 158, SCALAR: 10)
Operations:
- Query: Query | fields: accountingMonth, accountingMonths, activeUsers, basecampProjects, billing
- Mutation: Mutation | fields: assignEmployeeToProject, captureTimeEntry, createBilling, createBudgetAdjustment, createClickUpTasksForEstimateCategory
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 12:41

473.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f1386400c1ce12c43c553f4a1e49a847d9c607df

GraphQL introspection enabled at /graphql
Types: 251 (by kind: ENUM: 15, INPUT_OBJECT: 61, INTERFACE: 7, OBJECT: 158, SCALAR: 10)
Operations:
- Query: Query | fields: accountingMonth, accountingMonths, activeUsers, basecampProjects, billing
- Mutation: Mutation | fields: assignEmployeeToProject, captureTimeEntry, createBilling, createBudgetAdjustment, createClickUpTasksForEstimateCategory
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-26 18:26

470.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa367feb675154c4577f67de87592f37d3804516d98

GraphQL introspection enabled at /graphql
Types: 240 (by kind: ENUM: 15, INPUT_OBJECT: 59, INTERFACE: 7, OBJECT: 149, SCALAR: 10)
Operations:
- Query: Query | fields: accountingMonth, accountingMonths, activeUsers, basecampProjects, billing
- Mutation: Mutation | fields: assignEmployeeToProject, captureTimeEntry, createBilling, createBudgetAdjustment, createClickUpTasksForEstimateCategory
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-17 03:59

437.9 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3940e35f1089677737351bf5111adbae9716239d5

GraphQL introspection enabled at /graphql
Types: 183 (by kind: ENUM: 14, INPUT_OBJECT: 42, INTERFACE: 6, OBJECT: 112, SCALAR: 9)
Operations:
- Query: Query | fields: accountingMonth, accountingMonths, activeUsers, basecampProjects, billing
- Mutation: Mutation | fields: assignEmployeeToProject, captureTimeEntry, createBilling, createBudgetAdjustment, createProject
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-01 03:21

333.9 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35a9e52b5789fda371041a23576f8d9fd7316d159

GraphQL introspection enabled at /graphql
Types: 180 (by kind: ENUM: 14, INPUT_OBJECT: 41, INTERFACE: 6, OBJECT: 110, SCALAR: 9)
Operations:
- Query: Query | fields: accountingMonth, accountingMonths, activeUsers, basecampProjects, billing
- Mutation: Mutation | fields: assignEmployeeToProject, captureTimeEntry, createBilling, createBudgetAdjustment, createProject
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-21 10:15

325.2 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: wfi.postpossible.org
Port: 443
URL: https://wfi.postpossible.org

First seen 2025-07-18 01:36
Last seen 2026-01-02 12:36
Open for 168 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642bcfccc19ecde6a83ecde6a83ecde6a83
```
Found 2 files trough .DS_Store spidering:

/poptential
/poptential/poptential-logo-backup.png
```
  Found on 2026-01-02 12:36
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: leadingedgegroup.adboxapp.com
Port: 443
URL: https://leadingedgegroup.adboxapp.com

First seen 2025-11-28 22:37
Last seen 2026-01-02 12:33
Open for 34 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 12:33
  
  93.7 kBytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.paypath.dev
Port: 80
URL: http://api.paypath.dev

First seen 2025-11-11 02:57
Last seen 2026-01-02 12:32
Open for 52 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dc8fdea8c6adc38ca23e828ecf5dc1d16bd669ed

GraphQL introspection enabled at /graphql
Types: 290 (by kind: ENUM: 2, INPUT_OBJECT: 76, OBJECT: 205, SCALAR: 7)
Operations:
- Query: Query | fields: activityStats, adminAddressBooks, exportPayments, getActivity, getAddressBook
- Mutation: Mutation | fields: inviteCompany, removeAddress, removeAddressContact, saveAddressBook, saveAddressContact
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 12:32

455.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa39092960b9d4c920944311907ba2eb0088ac30368

GraphQL introspection enabled at /graphql
Types: 287 (by kind: ENUM: 2, INPUT_OBJECT: 76, OBJECT: 202, SCALAR: 7)
Operations:
- Query: Query | fields: activityStats, adminAddressBooks, exportPayments, getActivity, getAddressBook
- Mutation: Mutation | fields: inviteCompany, removeAddress, removeAddressContact, saveAddressBook, saveAddressContact
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-22 15:21

452.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3964d1a7317ff97f1159d5b0f302057f08cac6820

GraphQL introspection enabled at /graphql
Types: 285 (by kind: ENUM: 2, INPUT_OBJECT: 76, OBJECT: 200, SCALAR: 7)
Operations:
- Query: Query | fields: activityStats, adminAddressBooks, exportPayments, getActivity, getAddressBook
- Mutation: Mutation | fields: inviteCompany, removeAddress, removeAddressContact, saveAddressBook, saveAddressContact
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-20 10:50

450.9 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f6fdcce4b50578e8fab9ac5a9d335ce5557945b1

GraphQL introspection enabled at /graphql
Types: 279 (by kind: ENUM: 2, INPUT_OBJECT: 76, OBJECT: 194, SCALAR: 7)
Operations:
- Query: Query | fields: activityStats, adminAddressBooks, exportPayments, getActivity, getAddressBook
- Mutation: Mutation | fields: inviteCompany, removeAddress, removeAddressContact, saveAddressBook, saveAddressContact
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-18 16:25

442.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa34584477c876db0c072258012df2fc17d9e6030d9

GraphQL introspection enabled at /graphql
Types: 277 (by kind: ENUM: 2, INPUT_OBJECT: 76, OBJECT: 192, SCALAR: 7)
Operations:
- Query: Query | fields: activityStats, adminAddressBooks, exportPayments, getActivity, getAddressBook
- Mutation: Mutation | fields: inviteCompany, removeAddress, removeAddressContact, saveAddressBook, saveAddressContact
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-14 08:51

440.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3cb75b5258df41b270c1f6275e663be22159906be

GraphQL introspection enabled at /graphql
Types: 273 (by kind: ENUM: 2, INPUT_OBJECT: 76, OBJECT: 188, SCALAR: 7)
Operations:
- Query: Query | fields: activityStats, adminAddressBooks, exportPayments, getActivity, getAddressBook
- Mutation: Mutation | fields: inviteCompany, removeAddress, removeAddressContact, saveAddressBook, saveAddressContact
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-11 10:25

430.9 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c39dd0e84e86924c287c014e5ec44091a45a5aad

GraphQL introspection enabled at /graphql
Types: 268 (by kind: ENUM: 2, INPUT_OBJECT: 75, OBJECT: 184, SCALAR: 7)
Operations:
- Query: Query | fields: activityStats, adminAddressBooks, exportPayments, getActivity, getAddressBook
- Mutation: Mutation | fields: inviteCompany, removeAddress, removeAddressContact, saveAddressBook, saveAddressContact
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-08 07:20

419.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c9ad717edcb0a9ae1fccf18079fdd917ff7386af

GraphQL introspection enabled at /graphql
Types: 266 (by kind: ENUM: 2, INPUT_OBJECT: 74, OBJECT: 183, SCALAR: 7)
Operations:
- Query: Query | fields: activityStats, adminAddressBooks, exportPayments, getActivity, getAddressBook
- Mutation: Mutation | fields: inviteCompany, removeAddress, removeAddressContact, saveAddressBook, saveAddressContact
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-23 04:12

414.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa37b32012a46c9bd1a210bd80c4d413cabb2d820c3

GraphQL introspection enabled at /graphql
Types: 263 (by kind: ENUM: 2, INPUT_OBJECT: 74, OBJECT: 180, SCALAR: 7)
Operations:
- Query: Query | fields: activityStats, adminAddressBooks, exportPayments, getActivity, getAddressBook
- Mutation: Mutation | fields: inviteCompany, removeAddress, removeAddressContact, saveAddressBook, saveAddressContact
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-16 06:36

410.3 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e3aff6e57fff05673858d3b59917d362119ffefe

GraphQL introspection enabled at /graphql
Types: 262 (by kind: ENUM: 2, INPUT_OBJECT: 74, OBJECT: 179, SCALAR: 7)
Operations:
- Query: Query | fields: activityStats, adminAddressBooks, exportPayments, getActivity, getAddressBook
- Mutation: Mutation | fields: inviteCompany, removeAddress, removeAddressContact, saveAddressBook, saveAddressContact
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-12 02:28

408.6 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: wfi.postpossible.org
Port: 80
URL: http://wfi.postpossible.org

First seen 2025-07-18 01:36
Last seen 2026-01-02 12:32
Open for 168 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642bcfccc19ecde6a83ecde6a83ecde6a83
```
Found 2 files trough .DS_Store spidering:

/poptential
/poptential/poptential-logo-backup.png
```
  Found on 2026-01-02 12:32
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: mp3-os.channel-force.com
Port: 443
URL: https://mp3-os.channel-force.com

First seen 2025-11-28 01:18
Last seen 2026-01-02 12:29
Open for 35 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3d9181c39a346585bfbe2b3f59676f8159676f815
```
GraphQL introspection enabled at /graphql
Types: 12 (by kind: ENUM: 2, OBJECT: 7, SCALAR: 3)
Operations:
- Query: Query | fields: _empty
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 12:29
  
  17.2 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: npalliance.kenekt.app
Port: 80
URL: http://npalliance.kenekt.app

First seen 2025-05-20 01:10
Last seen 2026-01-02 12:22
Open for 227 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 12:22
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 09:49
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: uhomesl.kenekt.app
Port: 443
URL: https://uhomesl.kenekt.app

First seen 2025-05-27 01:46
Last seen 2026-01-02 12:16
Open for 220 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 12:16
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 23:22
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: www.admin.eatatcolbies.com
Port: 443
URL: https://www.admin.eatatcolbies.com

First seen 2025-11-15 03:30
Last seen 2026-01-02 12:11
Open for 48 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3f0391cdcc70700607b16d873b7fabe3ae90955cc
```
GraphQL introspection enabled at /graphql
Types: 177 (by kind: ENUM: 3, INPUT_OBJECT: 44, OBJECT: 118, SCALAR: 11, UNION: 1)
Operations:
- Query: Query | fields: category, categorys, categorysConnection, recipe, recipes
- Mutation: Mutation | fields: createCategory, createRecipe, deleteCategory, updateCategory, updateRecipe
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2026-01-02 12:11
  
  151.5 kBytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: val.vangst.com
Port: 443
URL: https://val.vangst.com

First seen 2025-11-22 01:55
Last seen 2026-01-02 12:05
Open for 41 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa30a2289c48445708899ee525828725b38792911c0

GraphQL introspection enabled at /graphql
Types: 259 (by kind: ENUM: 36, INPUT_OBJECT: 79, INTERFACE: 2, OBJECT: 129, SCALAR: 8, UNION: 5)
Operations:
- Query: Query | fields: currentUser, employmentBenefits, featuredMembers, getChatMessage, getChatMessages
- Mutation: Mutation | fields: acceptCandidateConnection, acceptTermsAndConditions, addToJob, applyToJob, assumeIdentity
Directives: deprecated, include, skip (total: 3)

Found on 2026-01-02 12:05

400.3 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: infinite-timeline.manupanizo.com
Port: 443
URL: https://infinite-timeline.manupanizo.com

First seen 2025-10-10 00:04
Last seen 2026-01-02 12:05
Open for 84 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d8ef0d5608ef0d5608ef0d5608ef0d560
```
Found 1 files trough .DS_Store spidering:

/favicon
```
  Found on 2026-01-02 12:05
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: event.quiklydemo.com
Port: 443
URL: https://event.quiklydemo.com

First seen 2025-11-11 03:26
Last seen 2026-01-02 11:54
Open for 52 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa36a3cc14574a3a8876cdfd14eab6d3709b57e9f2b

GraphQL introspection enabled at /graphql
Types: 357 (by kind: ENUM: 21, INPUT_OBJECT: 47, INTERFACE: 16, OBJECT: 255, SCALAR: 11, UNION: 7)
Operations:
- Query: Query | fields: adminUser, asset, backgroundImage, backgroundJob, brand
- Mutation: Mutation | fields: addToIneligibleList, answerSurvey, appStoreUrlMutation, checkEligibility, confirmPhone
- Subscription: Subscription | fields: claimedForDeal, id, wantInCreated, wantInUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 11:54

636.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d5fcf263389295a1c59d8868072a3a9ff483c299

GraphQL introspection enabled at /graphql
Types: 356 (by kind: ENUM: 21, INPUT_OBJECT: 47, INTERFACE: 15, OBJECT: 255, SCALAR: 11, UNION: 7)
Operations:
- Query: Query | fields: adminUser, asset, backgroundImage, backgroundJob, brand
- Mutation: Mutation | fields: addToIneligibleList, answerSurvey, appStoreUrlMutation, checkEligibility, confirmPhone
- Subscription: Subscription | fields: claimedForDeal, id, wantInCreated, wantInUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-22 12:42

636.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3581eee4bcf4898c943f053f06f2cc227101d7d91

GraphQL introspection enabled at /graphql
Types: 352 (by kind: ENUM: 21, INPUT_OBJECT: 47, INTERFACE: 15, OBJECT: 251, SCALAR: 11, UNION: 7)
Operations:
- Query: Query | fields: adminUser, asset, backgroundImage, backgroundJob, brand
- Mutation: Mutation | fields: addToIneligibleList, answerSurvey, appStoreUrlMutation, checkEligibility, confirmPhone
- Subscription: Subscription | fields: claimedForDeal, id, wantInCreated, wantInUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-16 06:28

626.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa373baf320b7d1292461e62c31291de4d02bdfbff8

GraphQL introspection enabled at /graphql
Types: 350 (by kind: ENUM: 21, INPUT_OBJECT: 47, INTERFACE: 15, OBJECT: 249, SCALAR: 11, UNION: 7)
Operations:
- Query: Query | fields: adminUser, asset, backgroundImage, backgroundJob, brand
- Mutation: Mutation | fields: addToIneligibleList, answerSurvey, appStoreUrlMutation, checkEligibility, confirmPhone
- Subscription: Subscription | fields: claimedForDeal, id, wantInCreated, wantInUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-22 20:27

619.0 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: jl.fleetpanda.com
Port: 443
URL: https://jl.fleetpanda.com

First seen 2025-11-21 00:49
Last seen 2026-01-02 11:45
Open for 42 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2026-01-02 11:45
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa385bc6649e3921ceb83e385a2a26aac8f0772418f
```
GraphQL introspection enabled at /graphql
Types: 1373 (by kind: ENUM: 145, INPUT_OBJECT: 613, OBJECT: 596, SCALAR: 9, UNION: 10)
Operations:
- Query: Query | fields: appVersion, appliedPricings, asset, assetInventories, assetInventorySummary
- Mutation: Mutation | fields: accountingAsync, acknowledgeNote, addAssetToDeliveryOrder, addCodeToAsset, addFeeToOrderGroup
Directives: deprecated, include, skip (total: 3)
```
  Found on 2025-11-22 19:23
  
  1.6 MBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: properties.capitalinvestmentideas.com.au
Port: 80
URL: http://properties.capitalinvestmentideas.com.au

First seen 2025-11-15 03:01
Last seen 2026-01-02 11:42
Open for 48 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 11:42
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 52.223.46.195
Domain: api.cashlog.net
Port: 80
URL: http://api.cashlog.net

First seen 2025-11-14 00:02
Last seen 2026-01-02 11:33
Open for 49 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b8817192b0207123cb73f32e6271ef5c9bbb5636b

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /api/users/transaction-password
GET /api/customers
GET /api/customers/search
GET /api/customers/{id}
GET /api/customers/{id}/validate-deletion
GET /api/loans
GET /api/loans/count
GET /api/loans/page
GET /api/loans/stats
GET /api/loans/top-profitable-customers
GET /api/users/profile
GET /api/users/transaction-password/status
PATCH /api/loans/{id}/mark-as-paid
POST /api/auth/activate-account
POST /api/auth/login
POST /api/auth/password-reset
POST /api/auth/password-reset/confirm
POST /api/backup
POST /api/loans/batch-mark-as-paid
POST /api/loans/process-overdue
POST /api/loans/{id}/payments
POST /api/users
POST /api/users/transaction-password/set
POST /api/users/transaction-password/validate
POST /api/voice/extract-loan-data
PUT /api/loans/{id}

Found on 2026-01-02 11:33

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b8817192b0207123cb73f32e6271ef5c9208d3e33

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /api/users/transaction-password
GET /api/customers
GET /api/customers/search
GET /api/customers/{id}
GET /api/customers/{id}/validate-deletion
GET /api/loans
GET /api/loans/count
GET /api/loans/page
GET /api/loans/stats
GET /api/users/profile
GET /api/users/transaction-password/status
PATCH /api/loans/{id}/mark-as-paid
POST /api/auth/activate-account
POST /api/auth/login
POST /api/auth/password-reset
POST /api/auth/password-reset/confirm
POST /api/backup
POST /api/loans/batch-mark-as-paid
POST /api/loans/process-overdue
POST /api/loans/{id}/payments
POST /api/users
POST /api/users/transaction-password/set
POST /api/users/transaction-password/validate
POST /api/voice/extract-loan-data
PUT /api/loans/{id}

Found on 2025-12-18 18:11

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b8817192b0207123cb73f32e6271ef5c93d1788be

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /api/users/transaction-password
GET /api/customers
GET /api/customers/search
GET /api/customers/{id}
GET /api/customers/{id}/validate-deletion
GET /api/loans
GET /api/users/profile
GET /api/users/transaction-password/status
PATCH /api/loans/{id}/mark-as-paid
POST /api/auth/activate-account
POST /api/auth/login
POST /api/auth/password-reset
POST /api/auth/password-reset/confirm
POST /api/backup
POST /api/loans/batch-mark-as-paid
POST /api/loans/process-overdue
POST /api/loans/{id}/payments
POST /api/users
POST /api/users/transaction-password/set
POST /api/users/transaction-password/validate
PUT /api/loans/{id}

Found on 2025-12-10 19:58

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: app-api.getfreedup.com
Port: 443
URL: https://app-api.getfreedup.com

First seen 2025-11-11 00:26
Last seen 2026-01-02 11:26
Open for 52 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3a933aeba3917b7ea59b08958897915b362953c06

GraphQL introspection enabled at /graphql
Types: 72 (by kind: ENUM: 3, INPUT_OBJECT: 18, OBJECT: 42, SCALAR: 9)
Operations:
- Query: Query | fields: _version, currentUser, user, userExists, userSearch
- Mutation: Mutation | fields: groupMultipleChoiceResponse, multipleChoiceResponse, saveGuideProgress, updateUserProfile, user
- Subscription: Subscription | fields: guideGroupMembersChanged, guideGroupMultipleChoiceAnswered, guideGroupMultipleChoiceAnsweredWithAnswer, guideGroupRouletteChanged, guideGroupTimerChanged
Directives: cacheControl, deprecated, include, skip (total: 4)

Found on 2026-01-02 11:26

68.6 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: bridge-passwork-app.prazto.com
Port: 80
URL: http://bridge-passwork-app.prazto.com

First seen 2025-07-30 21:16
Last seen 2026-01-02 11:08
Open for 155 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2026-01-02 11:08
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: latam.postpossible.org
Port: 443
URL: https://latam.postpossible.org

First seen 2025-07-23 01:51
Last seen 2026-01-02 10:53
Open for 163 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642bcfccc19ecde6a83ecde6a83ecde6a83
```
Found 2 files trough .DS_Store spidering:

/poptential
/poptential/poptential-logo-backup.png
```
  Found on 2026-01-02 10:53
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: shilac-passwork-app.prazto.com
Port: 80
URL: http://shilac-passwork-app.prazto.com

First seen 2025-10-26 00:16
Last seen 2026-01-02 10:47
Open for 68 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2026-01-02 10:47
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 75.2.97.79
Domain: api-sandbox.endlesscommerce.com
Port: 80
URL: http://api-sandbox.endlesscommerce.com

First seen 2025-11-23 00:12
Last seen 2026-01-02 10:41
Open for 40 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2026-01-02 10:41

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa343d6c370b8ab2774c8e334b75beb73e747b2970b

GraphQL introspection enabled at /graphql
Types: 641 (by kind: ENUM: 116, INPUT_OBJECT: 242, OBJECT: 260, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-01 16:41

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b91ee1d0e614a5148769a1176d87be47d9061c6b

GraphQL introspection enabled at /graphql
Types: 637 (by kind: ENUM: 116, INPUT_OBJECT: 240, OBJECT: 258, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-27 02:42

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ffb9ec2960b1328b03a7652e2cd2a446d7b1ab00

GraphQL introspection enabled at /graphql
Types: 634 (by kind: ENUM: 115, INPUT_OBJECT: 239, OBJECT: 257, SCALAR: 17, UNION: 6)
Operations:
- Query: Query | fields: accountFeatures, allowedRoles, apiClient, apiClients, apiKey
- Mutation: Mutation | fields: acceptPendingOrder, acceptPersonInvitation, addColor, addNote, addOrderItem
- Subscription: Subscription | fields: asnUpdates, brandAsnUpdates, brandOrderUpdates, companyAsnUpdates, companyOrderUpdates
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-23 00:12

1.2 MBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: savvyspotter.kenekt.app
Port: 80
URL: http://savvyspotter.kenekt.app

First seen 2025-03-23 00:10
Last seen 2026-01-02 10:41
Open for 285 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 10:41
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 19:35
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: properties.fatehrealestate.com.au
Port: 80
URL: http://properties.fatehrealestate.com.au

First seen 2025-09-25 00:08
Last seen 2026-01-02 10:35
Open for 99 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 10:35
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 10:48
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: ayres-del-sur.buildit.com.ar
Port: 443
URL: https://ayres-del-sur.buildit.com.ar

First seen 2025-02-17 00:38
Last seen 2026-01-02 10:30
Open for 319 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d325beceb325beceb325beceb325beceb
```
Found 1 files trough .DS_Store spidering:

/assets
```
  Found on 2026-01-02 10:30
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: silverhall.kenekt.app
Port: 80
URL: http://silverhall.kenekt.app

First seen 2025-05-04 15:19
Last seen 2026-01-02 10:22
Open for 242 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 10:22
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 20:39
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: materialpalette.com
Port: 80
URL: http://materialpalette.com

First seen 2024-11-22 17:46
Last seen 2026-01-02 10:19
Open for 405 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e91ec4a1aa3155cc0895cd635916285e4a
```
Found 5 files trough .DS_Store spidering:

/fonts
/fonts/GothamRounded-Book.otf
/fonts/GothamRounded-Light.otf
/img
/img/techtest 2
```
  Found on 2026-01-02 10:19
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.escuelajs.co
Port: 80
URL: http://api.escuelajs.co

First seen 2025-11-22 00:24
Last seen 2026-01-02 10:15
Open for 41 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31697c3bf0458370d440a9e06ed6effda92f95aa6
```
GraphQL introspection enabled at /graphql
Types: 27 (by kind: ENUM: 3, INPUT_OBJECT: 6, OBJECT: 12, SCALAR: 6)
Operations:
- Query: Query | fields: isAvailable, product, products, user, users
- Mutation: Mutation | fields: addProduct, addUser, deleteProduct, updateProduct, updateUser
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2026-01-02 10:15
  
  36.8 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: properties.fatehrealestate.com.au
Port: 443
URL: https://properties.fatehrealestate.com.au

First seen 2025-09-25 00:08
Last seen 2026-01-02 10:04
Open for 99 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 10:04
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 14:38
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: www.midorino-keijiban.com
Port: 443
URL: https://www.midorino-keijiban.com

First seen 2025-04-08 15:22
Last seen 2026-01-02 09:54
Open for 268 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fadeb22586612cddb1eaa29a61eaa29a6
```
Found 3 files trough .DS_Store spidering:

/uploads
/uploads/diary
/uploads/tmp
```
  Found on 2026-01-02 09:54
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: www.quiklydemo.com
Port: 443
URL: https://www.quiklydemo.com

First seen 2025-11-22 00:34
Last seen 2026-01-02 09:44
Open for 41 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa36a3cc14574a3a8876cdfd14eab6d3709b57e9f2b

GraphQL introspection enabled at /graphql
Types: 357 (by kind: ENUM: 21, INPUT_OBJECT: 47, INTERFACE: 16, OBJECT: 255, SCALAR: 11, UNION: 7)
Operations:
- Query: Query | fields: adminUser, asset, backgroundImage, backgroundJob, brand
- Mutation: Mutation | fields: addToIneligibleList, answerSurvey, appStoreUrlMutation, checkEligibility, confirmPhone
- Subscription: Subscription | fields: claimedForDeal, id, wantInCreated, wantInUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 09:44

636.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d5fcf263389295a1c59d8868072a3a9ff483c299

GraphQL introspection enabled at /graphql
Types: 356 (by kind: ENUM: 21, INPUT_OBJECT: 47, INTERFACE: 15, OBJECT: 255, SCALAR: 11, UNION: 7)
Operations:
- Query: Query | fields: adminUser, asset, backgroundImage, backgroundJob, brand
- Mutation: Mutation | fields: addToIneligibleList, answerSurvey, appStoreUrlMutation, checkEligibility, confirmPhone
- Subscription: Subscription | fields: claimedForDeal, id, wantInCreated, wantInUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-22 17:38

636.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3581eee4bcf4898c943f053f06f2cc227101d7d91

GraphQL introspection enabled at /graphql
Types: 352 (by kind: ENUM: 21, INPUT_OBJECT: 47, INTERFACE: 15, OBJECT: 251, SCALAR: 11, UNION: 7)
Operations:
- Query: Query | fields: adminUser, asset, backgroundImage, backgroundJob, brand
- Mutation: Mutation | fields: addToIneligibleList, answerSurvey, appStoreUrlMutation, checkEligibility, confirmPhone
- Subscription: Subscription | fields: claimedForDeal, id, wantInCreated, wantInUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-16 15:23

626.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa373baf320b7d1292461e62c31291de4d02bdfbff8

GraphQL introspection enabled at /graphql
Types: 350 (by kind: ENUM: 21, INPUT_OBJECT: 47, INTERFACE: 15, OBJECT: 249, SCALAR: 11, UNION: 7)
Operations:
- Query: Query | fields: adminUser, asset, backgroundImage, backgroundJob, brand
- Mutation: Mutation | fields: addToIneligibleList, answerSurvey, appStoreUrlMutation, checkEligibility, confirmPhone
- Subscription: Subscription | fields: claimedForDeal, id, wantInCreated, wantInUpdated
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-22 00:34

619.4 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: nsw-land.kenekt.app
Port: 80
URL: http://nsw-land.kenekt.app

First seen 2025-06-26 22:21
Last seen 2026-01-02 09:19
Open for 189 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 09:19
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 01:02
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: customer-portal-dev.fleetpanda.com
Port: 443
URL: https://customer-portal-dev.fleetpanda.com

First seen 2025-10-20 08:28
Last seen 2026-01-02 09:05
Open for 74 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3307cf10a472f2aba31e78cd61b6562ee18e50a1a

GraphQL introspection enabled at /graphql
Types: 152 (by kind: ENUM: 18, INPUT_OBJECT: 58, OBJECT: 68, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 09:05

160.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa326745cc4869061883a49da588adcf1109d326600

GraphQL introspection enabled at /graphql
Types: 151 (by kind: ENUM: 17, INPUT_OBJECT: 58, OBJECT: 68, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-01 16:09

159.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa30e961b676d4ef555b306105d48e4b8db60b48573

GraphQL introspection enabled at /graphql
Types: 147 (by kind: ENUM: 17, INPUT_OBJECT: 56, OBJECT: 66, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-24 03:06

155.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3facad751b6ebaf93b50b3d7783a9d3757ff263c1

GraphQL introspection enabled at /graphql
Types: 148 (by kind: ENUM: 18, INPUT_OBJECT: 56, OBJECT: 66, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-20 13:00

156.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3cb3674fd0d89f81f77d5730b57250791984f91ad

GraphQL introspection enabled at /graphql
Types: 145 (by kind: ENUM: 17, INPUT_OBJECT: 55, OBJECT: 65, SCALAR: 8)
Operations:
- Query: Query | fields: asset, assets, fetchInvitedUserDetails, filteredOrderWell, invoices
- Mutation: Mutation | fields: createAsset, createOrderGroup, createProduct, createShipTo, createSubscriptionRule
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-16 07:25

153.3 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: thomaspaul.kenekt.app
Port: 443
URL: https://thomaspaul.kenekt.app

First seen 2024-11-24 05:31
Last seen 2026-01-02 08:56
Open for 404 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 08:56
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 06:44
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-14 15:07
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: signaturedevelopments.kenekt.app
Port: 80
URL: http://signaturedevelopments.kenekt.app

First seen 2025-04-08 00:31
Last seen 2026-01-02 08:51
Open for 269 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 08:51
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 09:39
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: urbanmaison.kenekt.app
Port: 443
URL: https://urbanmaison.kenekt.app

First seen 2024-11-21 05:21
Last seen 2026-01-02 08:25
Open for 407 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 08:25
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 06:46
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-14 21:25
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: cbre.prensa.com.au
Port: 443
URL: https://cbre.prensa.com.au

First seen 2025-05-12 00:41
Last seen 2026-01-02 08:13
Open for 235 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772159855a0eb5bbe56ccd0a90f0f767a23
```
Found 11 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/assets
/assets/bootstrap
/assets/documents
/assets/lightbox
/assets/photos
/robots.txt
```
  Found on 2026-01-02 08:13
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e975a091b70c0005debaf496f5b10d408d
```
Found 5 files trough .DS_Store spidering:

/assets
/assets/bootstrap
/assets/documents
/assets/lightbox
/assets/photos
```
  Found on 2025-06-03 07:30
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: app.taxhakr.com
Port: 443
URL: https://app.taxhakr.com

First seen 2025-12-03 00:27
Last seen 2026-01-02 08:08
Open for 30 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c8329733f8329733feea7025f45d97ebb5edd355639b8c2f9
```
Found 10 files trough .DS_Store spidering:

/400.html
/404.html
/406-unsupported-browser.html
/422.html
/500.html
/icon.png
/icon.svg
/logo.png
/robots.txt
/taxhakr_logo.svg
```
  Found on 2026-01-02 08:08
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: elibrary.ameritas.edu
Port: 80
URL: http://elibrary.ameritas.edu

First seen 2025-07-05 00:40
Last seen 2026-01-02 08:02
Open for 181 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642bcfccc19ecde6a83ecde6a83ecde6a83
```
Found 2 files trough .DS_Store spidering:

/poptential
/poptential/poptential-logo-backup.png
```
  Found on 2026-01-02 08:02
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.winefolly.com
Port: 443
URL: https://api.winefolly.com

First seen 2025-10-22 00:05
Last seen 2026-01-02 07:56
Open for 72 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3067658479c3a9f75b78298fba3f82aed89049d25
```
GraphQL introspection enabled at /graphql
Types: 20 (by kind: ENUM: 2, INPUT_OBJECT: 1, OBJECT: 12, SCALAR: 5)
Operations:
- Query: Query | fields: me, note, notes, user
- Mutation: Mutation | fields: cancelSubscription, createNote, requestUpload, unlinkProvider, updateNotifications
Directives: deprecated, include, skip (total: 3)

Readable stores: 0
```
  Found on 2026-01-02 07:56
  
  29.9 kBytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.inlet.fm
Port: 443
URL: https://api.inlet.fm

First seen 2025-11-25 00:44
Last seen 2026-01-02 07:38
Open for 38 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa303f1069a7b138d0aef3924107f21c896415c6247

GraphQL introspection enabled at /graphql
Types: 142 (by kind: ENUM: 25, INPUT_OBJECT: 39, INTERFACE: 5, OBJECT: 62, SCALAR: 11)
Operations:
- Query: Query | fields: managedProspect, managedProspects, me, searchUsers, user
- Mutation: Mutation | fields: adminInviteProspect, confirmEmail, createProspect, googleIdentitySignIn, updateUserLinks
Directives: acl, deprecated, include, oneOf, skip, specifiedBy (total: 6)

Found on 2026-01-02 07:38

175.6 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: core-api.gigily.ai
Port: 80
URL: http://core-api.gigily.ai

First seen 2025-12-12 00:17
Last seen 2026-01-02 07:01
Open for 21 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c68cbc6a34dce7daf1dc7ff2d478f177bcec91cf

GraphQL introspection enabled at /graphql
Types: 215 (by kind: ENUM: 44, INPUT_OBJECT: 58, OBJECT: 103, SCALAR: 9, UNION: 1)
Operations:
- Query: Query | fields: accountExists, getAccount, getAccountUsers, getCurrentAccount, getManyAccounts
- Mutation: Mutation | fields: addAccount, addUserToAccount, createAccountIntegration, deactivate, updateAccount
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 07:01

318.9 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 35.71.145.101
Domain: api-dev.containeralliance.com
Port: 443
URL: https://api-dev.containeralliance.com

First seen 2025-12-05 00:47
Last seen 2026-01-02 06:49
Open for 28 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3610fd47530f94f77de1d8a433e4b64c2ca6072d2
```
GraphQL introspection enabled at /graphql
Types: 290 (by kind: ENUM: 2, INPUT_OBJECT: 59, INTERFACE: 1, OBJECT: 217, SCALAR: 8, UNION: 3)
Operations:
- Query: Query | fields: address, addresses, adminDashboard, areaSubscription, areaSubscriptions
- Mutation: Mutation | fields: addOrderBillingAddress, authGmail, cloneOrder, closeLead, createAddress
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 06:49
  
  440.5 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-12-07 12:31
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.nickelpayments.com
Port: 443
URL: https://api.nickelpayments.com

First seen 2025-11-10 02:01
Last seen 2026-01-02 06:39
Open for 53 days

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d690cd2a5d41c4c93f6d7c045b8fd4a207761ecf6b

GraphQL introspection enabled at /api/graphql
Types: 381 (by kind: ENUM: 27, INPUT_OBJECT: 27, OBJECT: 320, SCALAR: 7)
Operations:
- Query: Query | fields: creditApplication, customers, organization, user, webhooks
- Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2026-01-02 06:39

456.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d636b97f9fd9cbe82d9f182b31189ddb4524ef1211

GraphQL introspection enabled at /api/graphql
Types: 380 (by kind: ENUM: 26, INPUT_OBJECT: 27, OBJECT: 320, SCALAR: 7)
Operations:
- Query: Query | fields: creditApplication, customers, organization, user, webhooks
- Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-12-10 07:29

455.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6a65d8aef520006bd45a2cf612582c275257f7da1

GraphQL introspection enabled at /api/graphql
Types: 379 (by kind: ENUM: 26, INPUT_OBJECT: 27, OBJECT: 319, SCALAR: 7)
Operations:
- Query: Query | fields: creditApplication, customers, organization, user, webhooks
- Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-12-01 07:01

454.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6ad480f8f4b16889de83752814a4174951f0da9c1

GraphQL introspection enabled at /api/graphql
Types: 372 (by kind: ENUM: 23, INPUT_OBJECT: 27, OBJECT: 315, SCALAR: 7)
Operations:
- Query: Query | fields: creditApplication, customers, organization, user, webhooks
- Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-23 06:26

448.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d67d4ec50e29df55fe63590576983a944078e27028

GraphQL introspection enabled at /api/graphql
Types: 369 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 313, SCALAR: 7)
Operations:
- Query: Query | fields: creditApplication, customer, customers, organization, user
- Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 0

Found on 2025-11-20 10:23

446.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d67d4ec50e29df55fe63590576983a9440eeab39f6

GraphQL introspection enabled at /api/graphql
Types: 369 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 313, SCALAR: 7)
Operations:
- Query: Query | fields: creditApplication, customer, customers, organization, user
- Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 0

Found on 2025-11-16 05:47

445.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d616071e5e9c83ccce2456d4a65123c970218a77a6

GraphQL introspection enabled at /api/graphql
Types: 368 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 312, SCALAR: 7)
Operations:
- Query: Query | fields: creditApplication, customer, customers, organization, user
- Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 0

Found on 2025-11-14 06:30

444.9 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: ilapi.postpossible.org
Port: 80
URL: http://ilapi.postpossible.org

First seen 2025-07-18 01:37
Last seen 2026-01-02 06:38
Open for 168 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642bcfccc19ecde6a83ecde6a83ecde6a83
```
Found 2 files trough .DS_Store spidering:

/poptential
/poptential/poptential-logo-backup.png
```
  Found on 2026-01-02 06:38
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: demo-reporting.flxsystems.com
Port: 80
URL: http://demo-reporting.flxsystems.com

First seen 2025-10-13 00:07
Last seen 2026-01-02 06:31
Open for 81 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2026-01-02 06:31
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: the-casa-concierge.kenekt.app
Port: 443
URL: https://the-casa-concierge.kenekt.app

First seen 2025-08-25 01:21
Last seen 2026-01-02 05:16
Open for 130 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 05:16
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 00:28
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: certellcollege.postpossible.org
Port: 443
URL: https://certellcollege.postpossible.org

First seen 2025-07-23 01:51
Last seen 2026-01-02 05:09
Open for 163 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642bcfccc19ecde6a83ecde6a83ecde6a83
```
Found 2 files trough .DS_Store spidering:

/poptential
/poptential/poptential-logo-backup.png
```
  Found on 2026-01-02 05:09
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: arce.postpossible.org
Port: 443
URL: https://arce.postpossible.org

First seen 2025-07-23 01:52
Last seen 2026-01-02 05:09
Open for 163 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642bcfccc19ecde6a83ecde6a83ecde6a83
```
Found 2 files trough .DS_Store spidering:

/poptential
/poptential/poptential-logo-backup.png
```
  Found on 2026-01-02 05:09
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api-prod.lidger.com
Port: 443
URL: https://api-prod.lidger.com

First seen 2025-11-22 03:54
Last seen 2026-01-02 05:06
Open for 41 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa371c9494be3be61c9a64381031aac1c2f0dac5eef
```
GraphQL introspection enabled at /graphql
Types: 81 (by kind: ENUM: 2, INPUT_OBJECT: 31, OBJECT: 42, SCALAR: 6)
Operations:
- Query: Query | fields: currentWeek, me, objective, objectiveWeeks, objectives
- Mutation: Mutation | fields: createInitiatives, createKeyResults, createUser, objectiveArchive, progressUpdate
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 05:06
  
  73.5 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: latam.postpossible.org
Port: 80
URL: http://latam.postpossible.org

First seen 2025-07-23 01:51
Last seen 2026-01-02 04:12
Open for 163 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642bcfccc19ecde6a83ecde6a83ecde6a83
```
Found 2 files trough .DS_Store spidering:

/poptential
/poptential/poptential-logo-backup.png
```
  Found on 2026-01-02 04:12
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.reviewpoint.com
Port: 80
URL: http://api.reviewpoint.com

First seen 2025-10-16 08:11
Last seen 2026-01-02 03:56
Open for 77 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
  Found on 2026-01-02 03:56
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d6fcfaa9d3abc5ae913fd06a497772ba2eaa5da338
```
GraphQL introspection enabled at /api/graphql
Types: 1509 (by kind: ENUM: 10, INPUT_OBJECT: 1427, OBJECT: 65, SCALAR: 7)
Operations:
- Query: Query | fields: companyContacts, companyContactsCount, contact, contactByEmail, contactByPhoneNumber
- Mutation: Mutation | fields: changePassword, deleteOneContact, requestPasswordReset, resetPassword, updateOneOffCampaignContact
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2025-12-01 15:18
  
  2.4 MBytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: app2.inspectify.pro
Port: 443
URL: https://app2.inspectify.pro

First seen 2025-11-29 00:05
Last seen 2026-01-02 03:51
Open for 34 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3cc23929ec430648e3b62cb9d785677f783be77fa

GraphQL introspection enabled at /graphql
Types: 293 (by kind: ENUM: 9, INPUT_OBJECT: 80, INTERFACE: 1, OBJECT: 194, SCALAR: 9)
Operations:
- Query: Query | fields: applianceProductTypes, availableUsers, backgroundJobStatus, bankCatalogDeficiencies, bankCatalogDeficiency
- Mutation: Mutation | fields: acceptBundle, agreeMsa, checkVerificationSms, createInspectorOnboarding, createItemAccessLog
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 1
ping (args: none) : success=true

Found on 2026-01-02 03:51

584.9 kBytes 1 rows

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.stg.vibely.com
Port: 80
URL: http://api.stg.vibely.com

First seen 2025-11-25 01:35
Last seen 2026-01-02 03:50
Open for 38 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa345ee39d9305e73bb6ae714dbe1fac9aad6489022

GraphQL introspection enabled at /graphql
Types: 500 (by kind: ENUM: 37, INPUT_OBJECT: 287, INTERFACE: 2, OBJECT: 164, SCALAR: 9, UNION: 1)
Operations:
- Query: Query | fields: campaignAssetById, node, nodeId, query, subscriberGroupById
- Mutation: Mutation | fields: createCampaignWithMedia, publishCampaign, registerDeviceToken, sendAiCreatorMessage, subscribeToCreator
- Subscription: Subscription | fields: aiChatMessage, assetUpdate, inboxEvent, privateChatMessage
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2026-01-02 03:50

941.6 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.castironcoding.com
Port: 80
URL: http://api.castironcoding.com

First seen 2025-11-11 00:36
Last seen 2026-01-02 03:05
Open for 52 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3a9f59eb66bbd7e267de666506dc6f7a58c036b71

GraphQL introspection enabled at /graphql
Types: 252 (by kind: ENUM: 16, INPUT_OBJECT: 61, INTERFACE: 7, OBJECT: 158, SCALAR: 10)
Operations:
- Query: Query | fields: accountingMonth, accountingMonths, activeUsers, basecampProjects, billing
- Mutation: Mutation | fields: assignEmployeeToProject, captureTimeEntry, createBilling, createBudgetAdjustment, createClickUpTasksForEstimateCategory
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 03:05

473.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f1386400c1ce12c43c553f4a1e49a847d9c607df

GraphQL introspection enabled at /graphql
Types: 251 (by kind: ENUM: 15, INPUT_OBJECT: 61, INTERFACE: 7, OBJECT: 158, SCALAR: 10)
Operations:
- Query: Query | fields: accountingMonth, accountingMonths, activeUsers, basecampProjects, billing
- Mutation: Mutation | fields: assignEmployeeToProject, captureTimeEntry, createBilling, createBudgetAdjustment, createClickUpTasksForEstimateCategory
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-26 11:57

470.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3816b67d12434b513c8723371ddb3c8ec24a888fc

GraphQL introspection enabled at /graphql
Types: 248 (by kind: ENUM: 15, INPUT_OBJECT: 61, INTERFACE: 7, OBJECT: 155, SCALAR: 10)
Operations:
- Query: Query | fields: accountingMonth, accountingMonths, activeUsers, basecampProjects, billing
- Mutation: Mutation | fields: assignEmployeeToProject, captureTimeEntry, createBilling, createBudgetAdjustment, createClickUpTasksForEstimateCategory
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-18 15:51

453.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa367feb675154c4577f67de87592f37d3804516d98

GraphQL introspection enabled at /graphql
Types: 240 (by kind: ENUM: 15, INPUT_OBJECT: 59, INTERFACE: 7, OBJECT: 149, SCALAR: 10)
Operations:
- Query: Query | fields: accountingMonth, accountingMonths, activeUsers, basecampProjects, billing
- Mutation: Mutation | fields: assignEmployeeToProject, captureTimeEntry, createBilling, createBudgetAdjustment, createClickUpTasksForEstimateCategory
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-16 15:58

437.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3940e35f1089677737351bf5111adbae9716239d5

GraphQL introspection enabled at /graphql
Types: 183 (by kind: ENUM: 14, INPUT_OBJECT: 42, INTERFACE: 6, OBJECT: 112, SCALAR: 9)
Operations:
- Query: Query | fields: accountingMonth, accountingMonths, activeUsers, basecampProjects, billing
- Mutation: Mutation | fields: assignEmployeeToProject, captureTimeEntry, createBilling, createBudgetAdjustment, createProject
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-01 07:53

333.9 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35a9e52b5789fda371041a23576f8d9fd7316d159

GraphQL introspection enabled at /graphql
Types: 180 (by kind: ENUM: 14, INPUT_OBJECT: 41, INTERFACE: 6, OBJECT: 110, SCALAR: 9)
Operations:
- Query: Query | fields: accountingMonth, accountingMonths, activeUsers, basecampProjects, billing
- Mutation: Mutation | fields: assignEmployeeToProject, captureTimeEntry, createBilling, createBudgetAdjustment, createProject
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-20 04:14

325.2 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: properties.suburbanedge.com.au
Port: 80
URL: http://properties.suburbanedge.com.au

First seen 2025-08-22 03:28
Last seen 2026-01-02 02:57
Open for 132 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 02:57
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 09:59
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: aussie-property.kenekt.app
Port: 443
URL: https://aussie-property.kenekt.app

First seen 2025-08-25 01:33
Last seen 2026-01-02 02:56
Open for 130 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 02:56
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 00:28
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.sketter.jp
Port: 80
URL: http://api.sketter.jp

First seen 2025-11-21 00:38
Last seen 2026-01-02 02:51
Open for 42 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa332ec47e211868ab253f4de057e3823acfd6184bc

GraphQL introspection enabled at /graphql
Types: 99 (by kind: ENUM: 8, INPUT_OBJECT: 34, OBJECT: 49, SCALAR: 8)
Operations:
- Query: Query | fields: currentHost, hostChats, hostConfirmationEmailToken, hostConfirmationToken, hostContracts
- Mutation: Mutation | fields: hostConfirmEmailUpdate, hostCreateChat, hostCreateHostStaff, hostCreateSpot, hostDestroyHostStaff
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 02:51

105.6 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: ar.opticliff.com
Port: 443
URL: https://ar.opticliff.com

First seen 2025-12-02 00:13
Last seen 2026-01-02 02:38
Open for 31 days

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d687f2f1d2f5cd8d22ea143d951f9807d1e0817cd6

GraphQL introspection enabled at /api/graphql
Types: 84 (by kind: ENUM: 11, INPUT_OBJECT: 16, OBJECT: 51, SCALAR: 6)
Operations:
- Query: Query | fields: getAddress, getAddresses, getEntities, getEntity, getEntityMember
- Mutation: Mutation | fields: confirmEntity, createEntity, deleteAddress, updateAddress, updateEntity
Directives: auth, deprecated, include, oneOf, skip, specifiedBy (total: 6)

Readable stores: 0

Found on 2026-01-02 02:38

106.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6260fa37289cb378253ff05816c63ba31f4d2aad2

GraphQL introspection enabled at /api/graphql
Types: 73 (by kind: ENUM: 11, INPUT_OBJECT: 12, OBJECT: 45, SCALAR: 5)
Operations:
- Query: Query | fields: getEntities, getEntity, getEntityMember, getEntityMembers, getPaymentMethods
- Mutation: Mutation | fields: confirmEntity, createEntity, deleteEntity, unConfirmEntity, updateEntity
Directives: auth, deprecated, include, oneOf, skip, specifiedBy (total: 6)

Found on 2025-12-23 00:44

86.6 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: davron.kenekt.app
Port: 80
URL: http://davron.kenekt.app

First seen 2025-05-02 00:36
Last seen 2026-01-02 02:36
Open for 245 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 02:36
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 01:28
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: markspartners.kenekt.app
Port: 80
URL: http://markspartners.kenekt.app

First seen 2025-05-02 00:36
Last seen 2026-01-02 02:36
Open for 245 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 02:36
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 11:37
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: vum.kenekt.app
Port: 80
URL: http://vum.kenekt.app

First seen 2025-05-02 00:46
Last seen 2026-01-02 02:36
Open for 245 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 02:36
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 02:25
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: activepropertyinvesting.kenekt.app
Port: 80
URL: http://activepropertyinvesting.kenekt.app

First seen 2025-05-01 00:40
Last seen 2026-01-02 01:46
Open for 246 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 01:46
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 01:36
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: com.adboxapp.com
Port: 443
URL: https://com.adboxapp.com

First seen 2025-11-13 04:23
Last seen 2026-01-02 01:37
Open for 49 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa365aed762ca93e532870dcdc37c5253f0e4a9a968
```
GraphQL introspection enabled at /graphql
Types: 61 (by kind: ENUM: 9, INPUT_OBJECT: 9, INTERFACE: 1, OBJECT: 35, SCALAR: 7)
Operations:
- Query: Query | fields: accessGroups, adRequest, adRequests, asset, assignTypes
- Mutation: Mutation | fields: archiveJob, assignJob, assignType, createMustacheAsset, deleteCampaign
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 01:37
  
  93.7 kBytes
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: frontier-staging.rodeorodeorodeo.com
Port: 80
URL: http://frontier-staging.rodeorodeorodeo.com

First seen 2025-10-25 03:26
Last seen 2026-01-02 01:31
Open for 68 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3c43b627155a7b0f3fb4cb3ce8eac4a8c77a9b55c
```
GraphQL introspection enabled at /graphql
Types: 111 (by kind: ENUM: 16, INPUT_OBJECT: 38, OBJECT: 51, SCALAR: 6)
Operations:
- Query: Query | fields: analyzePost, calendars, chatToken, cohorts, connectedUsers
- Mutation: Mutation | fields: addGroupMember, addPlanAttendee, addPlanWatcher, addSticker, bootstrapGoogleAccount
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2026-01-02 01:31
  
  140.6 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: go.placelab.com
Port: 443
URL: https://go.placelab.com

First seen 2025-05-02 00:46
Last seen 2026-01-02 01:28
Open for 245 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814e2cd21beaed1c563ea31f0d9ef5c9adcf
```
Found 6 files trough .DS_Store spidering:

/assets
/assets/css
/assets/img
/assets/js
/assets/skins
/help
```
  Found on 2026-01-02 01:28
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: impactdesigns.kenekt.app
Port: 80
URL: http://impactdesigns.kenekt.app

First seen 2025-05-22 01:50
Last seen 2026-01-02 01:09
Open for 224 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 01:09
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 05:56
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: unito-property.kenekt.app
Port: 80
URL: http://unito-property.kenekt.app

First seen 2025-08-27 04:20
Last seen 2026-01-02 00:26
Open for 127 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-02 00:26
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 21:20
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: staging.allovance.com
Port: 443
URL: https://staging.allovance.com

First seen 2025-12-07 01:45
Last seen 2026-01-02 00:09
Open for 25 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa34aa25d3bd1845eb959d9667d27ba0fb84f0b2640
```
GraphQL introspection enabled at /graphql
Types: 35 (by kind: ENUM: 2, OBJECT: 28, SCALAR: 5)
Operations:
- Query: Query | fields: AssetCategory, AssetTeam, ClientCompanyModels, CoachInviteCode, allClientCompanies
- Mutation: Mutation | fields: createAssetCategory, createAssetTeam, deleteAssetCategory, updateAssetCategory, updateAssetTeam
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 00:09
  
  140.0 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: properties.crystelehomes.com.au
Port: 80
URL: http://properties.crystelehomes.com.au

First seen 2025-04-12 00:42
Last seen 2026-01-01 23:48
Open for 264 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-01 23:48
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 08:58
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: winton-homes.kenekt.app
Port: 443
URL: https://winton-homes.kenekt.app

First seen 2025-09-13 00:54
Last seen 2026-01-01 22:14
Open for 110 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2026-01-01 22:14
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 06:30
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 75.2.97.79
Domain: api-staging.containeralliance.com
Port: 443
URL: https://api-staging.containeralliance.com

First seen 2025-11-17 01:26
Last seen 2026-01-01 22:04
Open for 45 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3610fd47530f94f77de1d8a433e4b64c2ca6072d2
```
GraphQL introspection enabled at /graphql
Types: 290 (by kind: ENUM: 2, INPUT_OBJECT: 59, INTERFACE: 1, OBJECT: 217, SCALAR: 8, UNION: 3)
Operations:
- Query: Query | fields: address, addresses, adminDashboard, areaSubscription, areaSubscriptions
- Mutation: Mutation | fields: addOrderBillingAddress, authGmail, cloneOrder, closeLead, createAddress
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-01 22:04
  
  440.5 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-12-10 07:04
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.motrixsolutions.com
Port: 80
URL: http://api.motrixsolutions.com

First seen 2025-10-15 23:48
Last seen 2026-01-01 21:58
Open for 77 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b571938e6585c57e05cd218cc362cfe870e6b3f2

GraphQL introspection enabled at /graphql
Types: 110 (by kind: ENUM: 3, INPUT_OBJECT: 21, OBJECT: 76, SCALAR: 9, UNION: 1)
Operations:
- Query: Query | fields: authors, authors_aggregated, authors_by_id, blocks_templates, blocks_templates_by_id
- Mutation: Mutation | fields: create_quiz_vizits_item, create_quiz_vizits_items, update_quiz_vizits_batch, update_quiz_vizits_item, update_quiz_vizits_items
- Subscription: Subscription | fields: authors_mutated, blocks_templates_mutated, companies_companies_tags_mutated, companies_mutated, directus_files_mutated
Directives: deprecated, include, skip (total: 3)

Readable stores: 0

Found on 2026-01-01 21:58

204.8 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: congresso.ky.com.br
Port: 443
URL: https://congresso.ky.com.br

First seen 2025-10-26 00:16
Last seen 2026-01-01 21:22
Open for 67 days

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6d4b6831c4484b820f4f8c7d90f1d4bfe50ed0191

GraphQL introspection enabled at /api/graphql
Types: 209 (by kind: ENUM: 27, INPUT_OBJECT: 42, INTERFACE: 9, OBJECT: 113, SCALAR: 14, UNION: 4)
Operations:
- Query: Query | fields: address, admin_batch, admin_batches, my_addresses, ping
- Mutation: Mutation | fields: account_register, account_sendEmailVerificationByPhone, account_sendLoginVerification, account_sendPhoneVerification, account_submitPhoneVerification
Directives: deprecated, formatDate, hasAuthorization, include, isAuthenticated, isOwner, masked, skip, specifiedBy, upperCase (total: 11)

Found on 2026-01-01 21:22

342.0 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 75.2.97.79
Domain: futuramaapi.com
Port: 443
URL: https://futuramaapi.com

First seen 2025-10-30 00:20
Last seen 2026-01-01 21:10
Open for 63 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c07d34deb07d34deb0

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-01 21:10

34.3 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c07d34deb04a5bb08c

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 3
characters (args: optional/default) : offset=0 total=427 limit=50
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : limit=50 offset=0 total=11

Found on 2025-12-29 01:53

34.3 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c07d34deb0e53c3e3e

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 3
characters (args: optional/default) : limit=50 offset=0 total=427
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : limit=50 offset=0 total=11

Found on 2025-12-29 01:53

34.3 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c07d34deb0949769f2

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 3
characters (args: optional/default) : total=427 limit=50 offset=0
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : limit=50 offset=0 total=11

Found on 2025-12-20 08:20

34.3 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c07d34deb069a137b0

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 3
characters (args: optional/default) : total=427 limit=50 offset=0
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : offset=0 total=11 limit=50

Found on 2025-12-18 09:57

34.3 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c07d34deb0af127a3a

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 3
characters (args: optional/default) : limit=50 offset=0 total=427
episodes (args: optional/default) : total=150 limit=50 offset=0
seasons (args: optional/default) : limit=50 offset=0 total=11

Found on 2025-12-12 14:32

34.3 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c07d34deb032437302

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 3
characters (args: optional/default) : limit=50 offset=0 total=427
episodes (args: optional/default) : offset=0 total=150 limit=50
seasons (args: optional/default) : limit=50 offset=0 total=11

Found on 2025-12-02 05:04

34.3 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c07d34deb00ea853f8

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Readable stores: 3
characters (args: optional/default) : limit=50 offset=0 total=427
episodes (args: optional/default) : total=150 limit=50 offset=0
seasons (args: optional/default) : offset=0 total=11 limit=50

Found on 2025-12-01 10:57

34.3 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c0bec3c612536f0158

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
characters (args: optional/default) : offset=0 total=427 limit=50
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : offset=0 total=11 limit=50

Found on 2025-11-05 12:29

34.2 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c0bec3c612c6bcce9a

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
characters (args: optional/default) : offset=0 total=427 limit=50
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : limit=50 offset=0 total=11

Found on 2025-11-03 16:34

34.2 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c0bec3c612fed9b360

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
characters (args: optional/default) : limit=50 offset=0 total=427
episodes (args: optional/default) : total=150 limit=50 offset=0
seasons (args: optional/default) : limit=50 offset=0 total=11

Found on 2025-11-02 06:25

34.2 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c0bec3c6127fea13ba

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
characters (args: optional/default) : limit=50 offset=0 total=427
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : offset=0 total=11 limit=50

Found on 2025-10-30 00:20

34.2 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c0bec3c612498c530c

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
characters (args: optional/default) : limit=50 offset=0 total=427
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : limit=50 offset=0 total=11

Found on 2025-10-30 00:20

34.2 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c0bec3c6125ed0ae7e

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
characters (args: optional/default) : limit=50 offset=0 total=427
episodes (args: optional/default) : total=150 limit=50 offset=0
seasons (args: optional/default) : offset=0 total=11 limit=50

Found on 2025-10-30 00:20

34.2 kBytes 9 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328541c9bd49b96d99c1b99c0bec3c612695f02e0

GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 8, OBJECT: 15, SCALAR: 5)
Operations:
- Query: Query | fields: character, characters, episode, episodes, season
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 3
characters (args: optional/default) : offset=0 total=427 limit=50
episodes (args: optional/default) : limit=50 offset=0 total=150
seasons (args: optional/default) : total=11 limit=50 offset=0

Found on 2025-10-30 00:20

34.2 kBytes 9 rows

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.stashrun.com
Port: 443
URL: https://api.stashrun.com

First seen 2025-10-31 00:29
Last seen 2025-12-30 14:54
Open for 60 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35840b6015747af8336d4319e68f98ee00134f5f8

GraphQL introspection enabled at /graphql
Types: 145 (by kind: ENUM: 2, INPUT_OBJECT: 44, OBJECT: 91, SCALAR: 7, UNION: 1)
Operations:
- Query: Query | fields: alreadyWaitlisted, analyticsTimeseriesData, appSetting, auth, authTiktok
- Mutation: Mutation | fields: authenticateWithApple, checkVerification, claimCoinDropGiveaway, collectCoins, connectToFacebook
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-30 14:54

207.1 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.rjnye.com
Port: 80
URL: http://api.rjnye.com

First seen 2025-11-12 03:13
Last seen 2025-12-30 14:14
Open for 48 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa324ef8c3ecc575bee63d0662128b41e9d7c3a4a49

GraphQL introspection enabled at /graphql
Types: 199 (by kind: ENUM: 5, INPUT_OBJECT: 54, OBJECT: 124, SCALAR: 13, UNION: 3)
Operations:
- Query: Query | fields: categories, categoriesConnection, category, frontPage, message
- Mutation: Mutation | fields: createCategory, deleteCategory, deleteFrontPage, updateCategory, updateFrontPage
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-12-30 14:14

163.9 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.development-4.agoratutoring.com
Port: 443
URL: https://api.development-4.agoratutoring.com

First seen 2025-11-16 00:44
Last seen 2025-12-30 14:14
Open for 44 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f0431ad004efb814e2986b014cfdc841fc996d87

GraphQL introspection enabled at /graphql
Types: 131 (by kind: ENUM: 6, INPUT_OBJECT: 41, INTERFACE: 3, OBJECT: 72, SCALAR: 9)
Operations:
- Query: Query | fields: allPins, allPosts, chat, coordinates, payments
- Mutation: Mutation | fields: createChat, createMessage, leaveChat, readChat, sendDonation
- Subscription: Subscription | fields: chatCreated, chatUpdated, messageCreated, messageUpdated
Directives: auth, cursor, deprecated, include, oneOf, skip, specifiedBy (total: 7)

Found on 2025-12-30 14:14

113.0 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: projects.thecasaconcierge.com.au
Port: 80
URL: http://projects.thecasaconcierge.com.au

First seen 2025-08-31 22:54
Last seen 2025-12-30 12:03
Open for 120 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-12-30 12:03
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 07:58
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: staging-vv3dtestdemo.virtualvenue3d.com
Port: 443
URL: https://staging-vv3dtestdemo.virtualvenue3d.com

First seen 2025-12-01 11:08
Last seen 2025-12-30 11:09
Open for 29 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa328e1a256adc077862197dfb1d71fb931ba32c851
```
GraphQL introspection enabled at /graphql
Types: 70 (by kind: ENUM: 4, INPUT_OBJECT: 3, OBJECT: 55, SCALAR: 8)
Operations:
- Query: Query | fields: boothDetail, contestDetail, contestList, conversationDetail, currentUserDetail
- Mutation: Mutation | fields: addPageView, addReaction, authLogin, businessRequest, eventRegister
Directives: deprecated, include, skip (total: 3)
```
  Found on 2025-12-30 11:09
  
  114.6 kBytes
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 75.2.97.79
Domain: www.afwagportal.org
Port: 443
URL: https://www.afwagportal.org

First seen 2025-04-26 04:42
Last seen 2025-12-30 10:40
Open for 248 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c6731298567312985431972ba8a44fd87eac76a910d233665

Found 92 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/intro/intro1
/frontend-assets/images/intro/intro1/bg-1 copy.jpg
/frontend-assets/images/intro/intro1/bg-1.jpg
/frontend-assets/images/intro/intro10
/frontend-assets/images/intro/intro11
/frontend-assets/images/intro/intro12
/frontend-assets/images/intro/intro3
/frontend-assets/images/intro/intro4
/frontend-assets/images/intro/intro5
/frontend-assets/images/intro/intro6
/frontend-assets/images/intro/intro7
/frontend-assets/images/intro/intro8
/frontend-assets/images/intro/intro9
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/products/mini-cart
/frontend-assets/images/products/product
/frontend-assets/images/products/product/327
/frontend-assets/images/products/shopping-cart
/frontend-assets/images/products/single-product
/frontend-assets/images/products/widget
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-12-30 10:40

Severity: medium
Fingerprint: 5f32cf5d6962f09c1e3ea8c61e3ea8c6a639d37b489f8e14a6f33832d24a1834

Found 86 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/intro/intro1
/frontend-assets/images/intro/intro1/bg-1 copy.jpg
/frontend-assets/images/intro/intro1/bg-1.jpg
/frontend-assets/images/intro/intro10
/frontend-assets/images/intro/intro11
/frontend-assets/images/intro/intro12
/frontend-assets/images/intro/intro3
/frontend-assets/images/intro/intro4
/frontend-assets/images/intro/intro5
/frontend-assets/images/intro/intro6
/frontend-assets/images/intro/intro7
/frontend-assets/images/intro/intro8
/frontend-assets/images/intro/intro9
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-12-26 20:03

Severity: low
Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45ad82977a58ced0c7278440d12d6b107b

Found 30 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-12-01 04:28

Severity: low
Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bc250ff385d7f5934a6863bb14754902aa

Found 22 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/frontend-assets

Found on 2025-11-26 10:51

Severity: low
Fingerprint: 5f32cf5d6962f09c0f8dcf020f8dcf02298463c745038fe8dedf2086b84aa4b8

Found 24 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets

Found on 2025-11-24 10:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c3078a2ae3078a2ae5a78d3f336572dac548b86eaed8a0cea

Found 73 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-11-11 01:30

Severity: medium
Fingerprint: 5f32cf5d6962f09c75d69a7675d69a76b528710b596480805b5d088bed974ece

Found 51 files trough .DS_Store spidering:

/backend-assets
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-10-14 21:30

Severity: medium
Fingerprint: 5f32cf5d6962f09c6e6dc6946e6dc69469ba316dd6578cb22928085c2a41a043

Found 84 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event/170
/frontend-assets/images/event/270
/frontend-assets/images/event/370
/frontend-assets/images/event/570
/frontend-assets/images/event/event-details
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/intro/intro1
/frontend-assets/images/intro/intro10
/frontend-assets/images/intro/intro11
/frontend-assets/images/intro/intro12
/frontend-assets/images/intro/intro3
/frontend-assets/images/intro/intro4
/frontend-assets/images/intro/intro5
/frontend-assets/images/intro/intro6
/frontend-assets/images/intro/intro7
/frontend-assets/images/intro/intro8
/frontend-assets/images/intro/intro9
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-09-25 09:21

Severity: medium
Fingerprint: 5f32cf5d6962f09cddacc81addacc81aa2d220ef8aeb5eb0bf3421ce09ad1700

Found 68 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/about/about03/image-1.webp
/frontend-assets/images/about/about03/image1.png
/frontend-assets/images/about/about03/image12.png
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/bg/become-a-teache-bg.jpg
/frontend-assets/images/bg/callout-bg.jpg
/frontend-assets/images/bg/mobile-bg.jpg
/frontend-assets/images/blog
/frontend-assets/images/blog/270
/frontend-assets/images/blog/500
/frontend-assets/images/blog/540
/frontend-assets/images/blog/770
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-09-11 21:40

Severity: medium
Fingerprint: 5f32cf5d6962f09c3b95ca2b3b95ca2bca6ca2b49aa26ed5e548c1ab8ddfa687

Found 58 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/about/about03
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/blog
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-09-05 13:42

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b48a11784715fd1851b1da55b3055042e

Found 14 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/css/vendor
/backend-assets/img
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-06-26 00:07

Severity: medium
Fingerprint: 5f32cf5d6962f09c74247ea574247ea5d33fe25a7e8acf2716020fd449155acc

Found 56 files trough .DS_Store spidering:

/backend-assets
/backend-assets/css
/backend-assets/img
/backend-assets/img/background
/backend-assets/img/banner
/backend-assets/img/favicon
/backend-assets/img/product
/backend-assets/img/product/small
/backend-assets/img/product/small/product-1.webp
/backend-assets/img/product/small/product-10.webp
/backend-assets/img/product/small/product-2.webp
/backend-assets/img/product/small/product-3.webp
/backend-assets/img/product/small/product-4.webp
/backend-assets/img/product/small/product-5.webp
/backend-assets/img/product/small/product-6.webp
/backend-assets/img/product/small/product-7.webp
/backend-assets/img/product/small/product-8.webp
/backend-assets/img/product/small/product-9.webp
/backend-assets/img/profile
/backend-assets/js
/backend-assets/js/pages
/backend-assets/js/vendor
/frontend-assets
/frontend-assets/css
/frontend-assets/fonts
/frontend-assets/images
/frontend-assets/images/about
/frontend-assets/images/background.png
/frontend-assets/images/bg
/frontend-assets/images/blog
/frontend-assets/images/community.png
/frontend-assets/images/connect.png
/frontend-assets/images/course-1.jpg
/frontend-assets/images/course-2.jpg
/frontend-assets/images/course-3.jpg
/frontend-assets/images/course-5.jpg
/frontend-assets/images/course-6.jpg
/frontend-assets/images/course4.png
/frontend-assets/images/courses1.jpg
/frontend-assets/images/courses2.jpg
/frontend-assets/images/courses3.jpg
/frontend-assets/images/courses5.jpg
/frontend-assets/images/event
/frontend-assets/images/event.png
/frontend-assets/images/intro
/frontend-assets/images/logo
/frontend-assets/images/menu
/frontend-assets/images/pdf.png
/frontend-assets/images/products
/frontend-assets/images/profile
/frontend-assets/images/shape-animation
/frontend-assets/images/small-logo.png
/frontend-assets/images/video.png
/frontend-assets/js
/frontend-assets/php
/frontend-assets/scss

Found on 2025-06-26 00:07

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: getchatty.io
Port: 80
URL: http://getchatty.io

First seen 2025-10-01 21:26
Last seen 2025-12-30 10:00
Open for 89 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642d9722e0d6af1d2956af1d2956af1d295
```
Found 2 files trough .DS_Store spidering:

/uploads
/uploads/dad-449.mp4
```
  Found on 2025-12-30 10:00
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: core-api.lifestreams.ai
Port: 80
URL: http://core-api.lifestreams.ai

First seen 2025-10-29 00:58
Last seen 2025-12-30 09:39
Open for 62 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c68cbc6a34dce7daf1dc7ff2d478f177bcec91cf

GraphQL introspection enabled at /graphql
Types: 215 (by kind: ENUM: 44, INPUT_OBJECT: 58, OBJECT: 103, SCALAR: 9, UNION: 1)
Operations:
- Query: Query | fields: accountExists, getAccount, getAccountUsers, getCurrentAccount, getManyAccounts
- Mutation: Mutation | fields: addAccount, addUserToAccount, createAccountIntegration, deactivate, updateAccount
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-30 09:39

318.9 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: staging-new-event123.virtualvenue3d.com
Port: 443
URL: https://staging-new-event123.virtualvenue3d.com

First seen 2025-12-03 05:35
Last seen 2025-12-27 05:49
Open for 24 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa328e1a256adc077862197dfb1d71fb931ba32c851
```
GraphQL introspection enabled at /graphql
Types: 70 (by kind: ENUM: 4, INPUT_OBJECT: 3, OBJECT: 55, SCALAR: 8)
Operations:
- Query: Query | fields: boothDetail, contestDetail, contestList, conversationDetail, currentUserDetail
- Mutation: Mutation | fields: addPageView, addReaction, authLogin, businessRequest, eventRegister
Directives: deprecated, include, skip (total: 3)
```
  Found on 2025-12-27 05:49
  
  114.6 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-12-06 03:36
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: staging-comcon-2025.virtualvenue3d.com
Port: 443
URL: https://staging-comcon-2025.virtualvenue3d.com

First seen 2025-11-26 00:51
Last seen 2025-12-27 05:14
Open for 31 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa328e1a256adc077862197dfb1d71fb931ba32c851
```
GraphQL introspection enabled at /graphql
Types: 70 (by kind: ENUM: 4, INPUT_OBJECT: 3, OBJECT: 55, SCALAR: 8)
Operations:
- Query: Query | fields: boothDetail, contestDetail, contestList, conversationDetail, currentUserDetail
- Mutation: Mutation | fields: addPageView, addReaction, authLogin, businessRequest, eventRegister
Directives: deprecated, include, skip (total: 3)
```
  Found on 2025-12-27 05:14
  
  114.6 kBytes
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: www.didmediate.com
Port: 80
URL: http://www.didmediate.com

First seen 2025-12-05 01:08
Last seen 2025-12-26 22:28
Open for 21 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2025-12-26 22:28
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: staging-demo-staging.virtualvenue3d.com
Port: 443
URL: https://staging-demo-staging.virtualvenue3d.com

First seen 2025-11-18 00:48
Last seen 2025-12-26 18:19
Open for 38 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328e1a256adc077862197dfb1d71fb931ba32c851

GraphQL introspection enabled at /graphql
Types: 70 (by kind: ENUM: 4, INPUT_OBJECT: 3, OBJECT: 55, SCALAR: 8)
Operations:
- Query: Query | fields: boothDetail, contestDetail, contestList, conversationDetail, currentUserDetail
- Mutation: Mutation | fields: addPageView, addReaction, authLogin, businessRequest, eventRegister
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-26 18:19

114.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-12-14 03:09

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa38dc716298806408bd0cfa4cabdfd168e32b9be3e

GraphQL introspection enabled at /graphql
Types: 69 (by kind: ENUM: 3, INPUT_OBJECT: 3, OBJECT: 55, SCALAR: 8)
Operations:
- Query: Query | fields: boothDetail, contestDetail, contestList, conversationDetail, currentUserDetail
- Mutation: Mutation | fields: addPageView, addReaction, authLogin, businessRequest, eventRegister
Directives: deprecated, include, skip (total: 3)

Found on 2025-11-24 08:36

114.0 kBytes

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.tiio.in
Port: 443
URL: https://api.tiio.in

First seen 2025-12-05 01:17
Last seen 2025-12-26 17:07
Open for 21 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-12-26 17:07
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: staging-globalsummit2025.com.virtualvenue3d.com
Port: 443
URL: https://staging-globalsummit2025.com.virtualvenue3d.com

First seen 2025-11-26 00:51
Last seen 2025-12-26 15:41
Open for 30 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa328e1a256adc077862197dfb1d71fb931ba32c851
```
GraphQL introspection enabled at /graphql
Types: 70 (by kind: ENUM: 4, INPUT_OBJECT: 3, OBJECT: 55, SCALAR: 8)
Operations:
- Query: Query | fields: boothDetail, contestDetail, contestList, conversationDetail, currentUserDetail
- Mutation: Mutation | fields: addPageView, addReaction, authLogin, businessRequest, eventRegister
Directives: deprecated, include, skip (total: 3)
```
  Found on 2025-12-26 15:41
  
  114.6 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-12-20 20:34
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.truinterview.com
Port: 80
URL: http://api.truinterview.com

First seen 2025-10-14 09:45
Last seen 2025-12-25 04:04
Open for 71 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd151e75e4beaf9ba3dff1a930a80b0301785e55cbb187671a8
```
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/autocomplete
GET /api/job/allInterestedJobs/user/{userId}
GET /api/locationSearch
GET /api/logout
GET /api/refreshtoken
GET /api/salary/levels
GET /api/sendOtpToEmail/{emailId}
GET /api/sendOtpToMobile/{phoneNo}
GET /api/user/{userId}
GET /api/yoe/levels
GET /git-info
POST /api/job/interested
POST /api/job/notInterested
POST /api/jobDetail
POST /api/jobSearch
POST /api/login
POST /api/trackUserActivity
POST /api/verifyOtpForEmail
POST /api/verifyOtpForMobile
PUT /api/updatePassword/{userId}
```
  Found on 2025-12-25 04:04
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: didmediate.com
Port: 80
URL: http://didmediate.com

First seen 2025-12-07 00:04
Last seen 2025-12-24 17:59
Open for 17 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2025-12-24 17:59
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: www.app.chainbook.co.za
Port: 443
URL: https://www.app.chainbook.co.za

First seen 2025-11-28 12:45
Last seen 2025-12-23 04:47
Open for 24 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3d3371c2635ff1b56932c8e70d90774d349f5765b
```
GraphQL introspection enabled at /graphql
Types: 33 (by kind: ENUM: 6, INPUT_OBJECT: 3, OBJECT: 18, SCALAR: 6)
Operations:
- Query: Query | fields: customer, invoice, myInvoices, transaction, user
- Mutation: Mutation | fields: createCustomer, createInvoice, createTransaction, createUser, login
Directives: deprecated, include, oneOf, skip (total: 4)
```
  Found on 2025-12-23 04:47
  
  41.3 kBytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: preprod-api.xchangeseat.com
Port: 80
URL: http://preprod-api.xchangeseat.com

First seen 2025-10-19 01:09
Last seen 2025-12-21 04:47
Open for 63 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa334c687ef384e05bd4199ceebe19bf4356feb11e2

GraphQL introspection enabled at /graphql
Types: 44 (by kind: ENUM: 8, INPUT_OBJECT: 10, OBJECT: 20, SCALAR: 6)
Operations:
- Query: Query | fields: availableSwaps, checkSwapAvailability, me, mySwaps, user
- Mutation: Mutation | fields: login, sendMobileOTP, signup, verifyAge, verifyMobileOTP
- Subscription: Subscription | fields: exchangeUpdated, matchRequested, messageReceived
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-21 04:47

57.6 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: staging-newevent-2806.virtualvenue3d.com
Port: 443
URL: https://staging-newevent-2806.virtualvenue3d.com

First seen 2025-12-09 08:39
Last seen 2025-12-20 23:09
Open for 11 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa328e1a256adc077862197dfb1d71fb931ba32c851
```
GraphQL introspection enabled at /graphql
Types: 70 (by kind: ENUM: 4, INPUT_OBJECT: 3, OBJECT: 55, SCALAR: 8)
Operations:
- Query: Query | fields: boothDetail, contestDetail, contestList, conversationDetail, currentUserDetail
- Mutation: Mutation | fields: addPageView, addReaction, authLogin, businessRequest, eventRegister
Directives: deprecated, include, skip (total: 3)
```
  Found on 2025-12-20 23:09
  
  114.6 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-12-19 00:53
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: api.starhire.io
Port: 443
URL: https://api.starhire.io

First seen 2025-10-25 00:48
Last seen 2025-12-14 09:24
Open for 50 days

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d64501a4e6856511966a0196d0df35c71621ba95f2

GraphQL introspection enabled at /api/graphql
Types: 266 (by kind: ENUM: 2, INPUT_OBJECT: 115, OBJECT: 141, SCALAR: 8)
Operations:
- Query: Query | fields: automationLogs, candidate, candidateAnswer, candidateForCvUpload, candidateInterview
- Mutation: Mutation | fields: acceptUserInvitation, addCandidatesToPool, addNewQuestion, cancelSubscription, completeUploadSession
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-14 09:24

281.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d695a58dad6e55690f3f9da54b1d414387514a201f

GraphQL introspection enabled at /api/graphql
Types: 263 (by kind: ENUM: 2, INPUT_OBJECT: 114, OBJECT: 139, SCALAR: 8)
Operations:
- Query: Query | fields: automationLogs, candidate, candidateAnswer, candidateForCvUpload, candidateInterview
- Mutation: Mutation | fields: acceptUserInvitation, addCandidatesToPool, addNewQuestion, cancelSubscription, completeUploadSession
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-27 00:57

277.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6636494345df369b8fe85d0f68871cf1c8e697e6c

GraphQL introspection enabled at /api/graphql
Types: 265 (by kind: ENUM: 2, INPUT_OBJECT: 115, OBJECT: 140, SCALAR: 8)
Operations:
- Query: Query | fields: automationLogs, candidate, candidateAnswer, candidateForCvUpload, candidateInterview
- Mutation: Mutation | fields: acceptUserInvitation, addCandidatesToPool, addNewQuestion, cancelSubscription, completeUploadSession
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-23 10:02

279.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
Found on 2025-11-21 14:43

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6581a7837922f55a5ebb4d0452a2e549152c5aead

GraphQL introspection enabled at /api/graphql
Types: 261 (by kind: ENUM: 2, INPUT_OBJECT: 113, OBJECT: 138, SCALAR: 8)
Operations:
- Query: Query | fields: automationLogs, candidate, candidateAnswer, candidateForCvUpload, candidateInterview
- Mutation: Mutation | fields: acceptUserInvitation, addCandidatesToPool, addNewQuestion, cancelSubscription, completeUploadSession
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-16 15:33

274.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6a7530c0e1191c2fe488483888446efbe189f1eaa

GraphQL introspection enabled at /api/graphql
Types: 256 (by kind: ENUM: 2, INPUT_OBJECT: 111, OBJECT: 135, SCALAR: 8)
Operations:
- Query: Query | fields: automationLogs, candidate, candidateAnswer, candidateForCvUpload, candidateInterview
- Mutation: Mutation | fields: acceptUserInvitation, addCandidatesToPool, addNewQuestion, cancelSubscription, completeUploadSession
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-14 16:38

267.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d65e6c06775cc7a5658f189d05805b9b515d45db6d

GraphQL introspection enabled at /api/graphql
Types: 251 (by kind: ENUM: 2, INPUT_OBJECT: 109, OBJECT: 132, SCALAR: 8)
Operations:
- Query: Query | fields: automationLogs, candidate, candidateAnswer, candidateForCvUpload, candidateInterview
- Mutation: Mutation | fields: acceptUserInvitation, addCandidatesToPool, addNewQuestion, cancelSubscription, completeUploadSession
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-12 18:01

262.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6af1958c5469c5b07552ede73335aa61f303a9987

GraphQL introspection enabled at /api/graphql
Types: 250 (by kind: ENUM: 2, INPUT_OBJECT: 109, OBJECT: 131, SCALAR: 8)
Operations:
- Query: Query | fields: automationLogs, candidate, candidateAnswer, candidateForCvUpload, candidateInterview
- Mutation: Mutation | fields: acceptUserInvitation, addCandidatesToPool, addNewQuestion, cancelSubscription, completeUploadSession
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-10 20:58

258.3 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6d55f97a9f4ce410b8df5a15fcee085837d74c16b

GraphQL introspection enabled at /api/graphql
Types: 246 (by kind: ENUM: 2, INPUT_OBJECT: 107, OBJECT: 129, SCALAR: 8)
Operations:
- Query: Query | fields: automationLogs, candidate, candidateAnswer, candidateForCvUpload, candidateInterview
- Mutation: Mutation | fields: acceptUserInvitation, addCandidatesToPool, addNewQuestion, cancelSubscription, completeUploadSession
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-05 11:52

255.0 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: ru.bossaz-pr-1274.azstage.in
Port: 443
URL: https://ru.bossaz-pr-1274.azstage.in

First seen 2025-12-10 15:08
Last seen 2025-12-14 02:55
Open for 3 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3edcd2f02dd1cea9285e39de80e5d532613018182
```
GraphQL introspection enabled at /graphql
Types: 125 (by kind: ENUM: 22, INPUT_OBJECT: 20, INTERFACE: 2, OBJECT: 69, SCALAR: 10, UNION: 2)
Operations:
- Query: Query | fields: balanceHistory, bookmarks, categories, company, draftResume
- Mutation: Mutation | fields: createBookmark, createContactEmail, createInvoice, createPayment, createResume
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2025-12-14 02:55
  
  140.2 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-12-10 15:08
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: en.bossaz-pr-1273.azstage.in
Port: 443
URL: https://en.bossaz-pr-1273.azstage.in

First seen 2025-12-10 08:43

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3edcd2f02dd1cea9285e39de80e5d532613018182

GraphQL introspection enabled at /graphql
Types: 125 (by kind: ENUM: 22, INPUT_OBJECT: 20, INTERFACE: 2, OBJECT: 69, SCALAR: 10, UNION: 2)
Operations:
- Query: Query | fields: balanceHistory, bookmarks, categories, company, draftResume
- Mutation: Mutation | fields: createBookmark, createContactEmail, createInvoice, createPayment, createResume
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-10 08:43

140.1 kBytes

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: webhook.trackipal.com
Port: 80
URL: http://webhook.trackipal.com

First seen 2025-11-08 00:42
Last seen 2025-12-08 03:13
Open for 30 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2025-12-08 03:13
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: en.bossaz-pr-1270.azstage.in
Port: 443
URL: https://en.bossaz-pr-1270.azstage.in

First seen 2025-12-05 15:04

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3edcd2f02dd1cea9285e39de80e5d532613018182

GraphQL introspection enabled at /graphql
Types: 125 (by kind: ENUM: 22, INPUT_OBJECT: 20, INTERFACE: 2, OBJECT: 69, SCALAR: 10, UNION: 2)
Operations:
- Query: Query | fields: balanceHistory, bookmarks, categories, company, draftResume
- Mutation: Mutation | fields: createBookmark, createContactEmail, createInvoice, createPayment, createResume
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-05 15:04

140.1 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: bossaz-pr-1270.azstage.in
Port: 443
URL: https://bossaz-pr-1270.azstage.in

First seen 2025-12-05 15:04

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3edcd2f02dd1cea9285e39de80e5d532613018182

GraphQL introspection enabled at /graphql
Types: 125 (by kind: ENUM: 22, INPUT_OBJECT: 20, INTERFACE: 2, OBJECT: 69, SCALAR: 10, UNION: 2)
Operations:
- Query: Query | fields: balanceHistory, bookmarks, categories, company, draftResume
- Mutation: Mutation | fields: createBookmark, createContactEmail, createInvoice, createPayment, createResume
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-05 15:04

140.1 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: staging-vv3d-demo1.virtualvenue3d.com
Port: 443
URL: https://staging-vv3d-demo1.virtualvenue3d.com

First seen 2025-11-14 04:53
Last seen 2025-12-01 13:06
Open for 17 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa328e1a256adc077862197dfb1d71fb931ba32c851

GraphQL introspection enabled at /graphql
Types: 70 (by kind: ENUM: 4, INPUT_OBJECT: 3, OBJECT: 55, SCALAR: 8)
Operations:
- Query: Query | fields: boothDetail, contestDetail, contestList, conversationDetail, currentUserDetail
- Mutation: Mutation | fields: addPageView, addReaction, authLogin, businessRequest, eventRegister
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-01 13:06

114.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa38dc716298806408bd0cfa4cabdfd168e32b9be3e

GraphQL introspection enabled at /graphql
Types: 69 (by kind: ENUM: 3, INPUT_OBJECT: 3, OBJECT: 55, SCALAR: 8)
Operations:
- Query: Query | fields: boothDetail, contestDetail, contestList, conversationDetail, currentUserDetail
- Mutation: Mutation | fields: addPageView, addReaction, authLogin, businessRequest, eventRegister
Directives: deprecated, include, skip (total: 3)

Found on 2025-11-23 04:11

114.0 kBytes

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: en.bossaz-pr-1255.azstage.in
Port: 443
URL: https://en.bossaz-pr-1255.azstage.in

First seen 2025-11-12 07:32
Last seen 2025-12-01 00:45
Open for 18 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3edcd2f02dd1cea9285e39de80e5d532613018182
```
GraphQL introspection enabled at /graphql
Types: 125 (by kind: ENUM: 22, INPUT_OBJECT: 20, INTERFACE: 2, OBJECT: 69, SCALAR: 10, UNION: 2)
Operations:
- Query: Query | fields: balanceHistory, bookmarks, categories, company, draftResume
- Mutation: Mutation | fields: createBookmark, createContactEmail, createInvoice, createPayment, createResume
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2025-12-01 00:45
  
  139.8 kBytes
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: com.lessee-lessor.com
Port: 80
URL: http://com.lessee-lessor.com

First seen 2025-11-24 00:46
Last seen 2025-11-30 10:30
Open for 6 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2025-11-30 10:30
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: com.lessee-lessor.com
Port: 443
URL: https://com.lessee-lessor.com

First seen 2025-11-24 00:46
Last seen 2025-11-29 13:28
Open for 5 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2025-11-29 13:28
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.ticketswithease.co.ke
Port: 443
URL: https://api.ticketswithease.co.ke

First seen 2025-10-14 11:18
Last seen 2025-11-23 17:14
Open for 40 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-11-23 17:14
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.ticketswithease.co.ke
Port: 80
URL: http://api.ticketswithease.co.ke

First seen 2025-10-14 18:41
Last seen 2025-11-23 08:59
Open for 39 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-11-23 08:59
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: staging.wecora.com
Port: 443
URL: https://staging.wecora.com

First seen 2024-11-06 00:15
Last seen 2025-11-16 14:01
Open for 375 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d7f85caec7f85caec7f85caec7f85caec
```
Found 1 files trough .DS_Store spidering:

/webfonts
```
  Found on 2025-11-16 14:01
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.248.132.87
Domain: staging.orderprinterpro.com
Port: 443
URL: https://staging.orderprinterpro.com

First seen 2025-02-08 00:11
Last seen 2025-11-16 03:19
Open for 281 days

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b33e8323b0a8f7a337f2fc95ba4c0df82

Found 14 files trough .DS_Store spidering:

/css
/font-awesome
/font-awesome/css
/font-awesome/css/font-awesome.css
/font-awesome/css/font-awesome.min.css
/font-awesome/fonts
/font-awesome/fonts/fontawesome-webfont.eot
/font-awesome/fonts/fontawesome-webfont.svg
/font-awesome/fonts/fontawesome-webfont.ttf
/font-awesome/fonts/fontawesome-webfont.woff
/font-awesome/fonts/FontAwesome.otf
/js
/js/jquery.js
/js/wordsearch-resize.js

Found on 2025-11-16 03:19

Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e94a7e0559767e8031747e4af9780ac4e4
```
Found 5 files trough .DS_Store spidering:

/css
/font-awesome
/js
/js/jquery.js
/js/wordsearch-resize.js
```
Found on 2025-06-24 11:30

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d6aae32957ee1427defb31dcd78695736

Found 12 files trough .DS_Store spidering:

/css
/font-awesome
/font-awesome/css
/font-awesome/fonts
/font-awesome/fonts/fontawesome-webfont.eot
/font-awesome/fonts/fontawesome-webfont.svg
/font-awesome/fonts/fontawesome-webfont.ttf
/font-awesome/fonts/fontawesome-webfont.woff
/font-awesome/fonts/FontAwesome.otf
/js
/js/jquery.js
/js/wordsearch-resize.js

Found on 2025-06-08 00:58

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247252af0f35d67698835508a1d65095da2a5

Found 9 files trough .DS_Store spidering:

/css
/font-awesome
/font-awesome/css
/font-awesome/css/font-awesome.css
/font-awesome/css/font-awesome.min.css
/font-awesome/fonts
/js
/js/jquery.js
/js/wordsearch-resize.js

Found on 2025-06-08 00:58

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: apiv2.cashlog.net
Port: 443
URL: https://apiv2.cashlog.net

First seen 2025-11-13 23:39
- Severity: info
  Fingerprint: 5733ddf49ff49cd151e75e4b8817192b0207123cb73f32e6271ef5c93d1788be
```
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /api/users/transaction-password
GET /api/customers
GET /api/customers/search
GET /api/customers/{id}
GET /api/customers/{id}/validate-deletion
GET /api/loans
GET /api/users/profile
GET /api/users/transaction-password/status
PATCH /api/loans/{id}/mark-as-paid
POST /api/auth/activate-account
POST /api/auth/login
POST /api/auth/password-reset
POST /api/auth/password-reset/confirm
POST /api/backup
POST /api/loans/batch-mark-as-paid
POST /api/loans/process-overdue
POST /api/loans/{id}/payments
POST /api/users
POST /api/users/transaction-password/set
POST /api/users/transaction-password/validate
PUT /api/loans/{id}
```
  Found on 2025-11-13 23:39
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: aushomes.kenekt.app
Port: 443
URL: https://aushomes.kenekt.app

First seen 2023-09-13 01:23
Last seen 2025-11-12 22:28
Open for 791 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-12 22:28
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-09-12 08:33
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-15 07:21
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: foundermindsetpodcast.com
Port: 80
URL: http://foundermindsetpodcast.com

First seen 2025-10-25 01:18
Last seen 2025-11-12 21:47
Open for 18 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642b9618ce7da41f744da41f744da41f744
```
Found 2 files trough .DS_Store spidering:

/.git
/static
```
  Found on 2025-11-12 21:47
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: homecorp.kenekt.app
Port: 443
URL: https://homecorp.kenekt.app

First seen 2025-03-02 23:19
Last seen 2025-11-12 12:02
Open for 254 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-12 12:02
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 03:10
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-14 12:49
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: creationhomesvic.kenekt.app
Port: 443
URL: https://creationhomesvic.kenekt.app

First seen 2024-11-22 01:15
Last seen 2025-11-10 23:26
Open for 353 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-10 23:26
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 11:11
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-16 02:15
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: creationhomes.kenekt.app
Port: 80
URL: http://creationhomes.kenekt.app

First seen 2025-04-12 01:23
Last seen 2025-11-10 20:56
Open for 212 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-10 20:56
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 20:24
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: aplace-vic.kenekt.app
Port: 443
URL: https://aplace-vic.kenekt.app

First seen 2025-08-01 01:16
Last seen 2025-11-10 16:40
Open for 101 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-10 16:40
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 07:30
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: brolenhomes.kenekt.app
Port: 443
URL: https://brolenhomes.kenekt.app

First seen 2025-06-10 22:24
Last seen 2025-11-10 15:31
Open for 152 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-10 15:31
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 16:46
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: tribeca.kenekt.app
Port: 80
URL: http://tribeca.kenekt.app

First seen 2025-05-06 03:00
Last seen 2025-11-10 14:03
Open for 188 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-10 14:03
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 06:38
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: child-care-sms.mobrilz.digital
Port: 80
URL: http://child-care-sms.mobrilz.digital

First seen 2025-10-20 01:06
Last seen 2025-11-10 13:50
Open for 21 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2025-11-10 13:50
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: creationhomesvic.kenekt.app
Port: 80
URL: http://creationhomesvic.kenekt.app

First seen 2025-03-23 05:00
Last seen 2025-11-10 08:59
Open for 232 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-10 08:59
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 06:58
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: creationnsw.kenekt.app
Port: 80
URL: http://creationnsw.kenekt.app

First seen 2025-05-01 00:40
Last seen 2025-11-10 07:51
Open for 193 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-10 07:51
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 18:22
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: hermitage-homes.kenekt.app
Port: 80
URL: http://hermitage-homes.kenekt.app

First seen 2025-08-25 22:32
Last seen 2025-11-08 21:58
Open for 74 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-08 21:58
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 00:38
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: frdhomes.kenekt.app
Port: 80
URL: http://frdhomes.kenekt.app

First seen 2025-04-03 13:34
Last seen 2025-11-08 21:52
Open for 219 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-08 21:52
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 00:31
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: goldstate-homes.kenekt.app
Port: 443
URL: https://goldstate-homes.kenekt.app

First seen 2025-10-31 00:09
Last seen 2025-11-08 21:51
Open for 8 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-08 21:51
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: customer.globalsim.mn
Port: 443
URL: https://customer.globalsim.mn

First seen 2025-11-02 01:29
Last seen 2025-11-08 21:16
Open for 6 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-11-08 21:16
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: wise.kenekt.app
Port: 80
URL: http://wise.kenekt.app

First seen 2025-04-12 00:13
Last seen 2025-11-08 15:50
Open for 210 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-08 15:50
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 05:27
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: patra.kenekt.app
Port: 80
URL: http://patra.kenekt.app

First seen 2025-04-12 00:12
Last seen 2025-11-08 05:08
Open for 210 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-08 05:08
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 23:00
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: kallea.kenekt.app
Port: 80
URL: http://kallea.kenekt.app

First seen 2025-05-02 00:35
Last seen 2025-11-07 02:11
Open for 189 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-07 02:11
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 06:30
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: bridgeprojectsgroup.kenekt.app
Port: 80
URL: http://bridgeprojectsgroup.kenekt.app

First seen 2025-05-24 04:48
Last seen 2025-11-06 20:31
Open for 166 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-06 20:31
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 06:02
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: paletteai.dev
Port: 443
URL: https://paletteai.dev

First seen 2025-10-22 14:46
Last seen 2025-11-06 17:37
Open for 15 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176426b7f0a699f0da7be9f0da7be9f0da7be
```
Found 2 files trough .DS_Store spidering:

/icons
/uploads
```
  Found on 2025-11-06 17:37
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: portal.homestrikers.com.au
Port: 80
URL: http://portal.homestrikers.com.au

First seen 2025-09-17 00:10
Last seen 2025-11-06 17:21
Open for 50 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-06 17:21
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 07:18
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: markreubenprojects.kenekt.app
Port: 80
URL: http://markreubenprojects.kenekt.app

First seen 2025-04-24 00:23
Last seen 2025-11-05 15:33
Open for 195 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-05 15:33
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 23:10
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: outlookfinance.kenekt.app
Port: 80
URL: http://outlookfinance.kenekt.app

First seen 2025-04-12 00:13
Last seen 2025-11-05 14:23
Open for 207 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-05 14:23
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 01:21
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: cookiecapital.kenekt.app
Port: 80
URL: http://cookiecapital.kenekt.app

First seen 2025-04-12 00:12
Last seen 2025-11-05 11:53
Open for 207 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-05 11:53
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 01:41
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: everest.kenekt.app
Port: 80
URL: http://everest.kenekt.app

First seen 2025-06-22 00:47
Last seen 2025-11-05 09:23
Open for 136 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-05 09:23
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 02:14
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: highmarkhomes.kenekt.app
Port: 80
URL: http://highmarkhomes.kenekt.app

First seen 2025-04-09 01:11
Last seen 2025-11-05 00:28
Open for 209 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-05 00:28
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 11:17
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: dtz.kenekt.app
Port: 80
URL: http://dtz.kenekt.app

First seen 2025-05-13 02:34
Last seen 2025-11-04 20:30
Open for 175 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-04 20:30
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 10:53
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: hotpropertygrouphomes.kenekt.app
Port: 443
URL: https://hotpropertygrouphomes.kenekt.app

First seen 2025-02-27 04:28
Last seen 2025-11-04 10:37
Open for 250 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-04 10:37
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 01:23
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-15 02:16
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: grand-ocean-financial-services.kenekt.app
Port: 80
URL: http://grand-ocean-financial-services.kenekt.app

First seen 2025-10-29 04:46
Last seen 2025-11-03 19:37
Open for 5 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-03 19:37
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: grand-ocean-financial-services.kenekt.app
Port: 443
URL: https://grand-ocean-financial-services.kenekt.app

First seen 2025-10-29 04:46
Last seen 2025-11-03 19:37
Open for 5 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-03 19:37
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: therisingpropertysolutions.kenekt.app
Port: 80
URL: http://therisingpropertysolutions.kenekt.app

First seen 2025-04-12 00:33
Last seen 2025-11-03 19:10
Open for 205 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-03 19:10
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 03:27
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: sttrinity.kenekt.app
Port: 80
URL: http://sttrinity.kenekt.app

First seen 2025-06-14 00:42
Last seen 2025-11-03 18:25
Open for 142 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-03 18:25
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 06:24
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: houseandland4sale.kenekt.app
Port: 80
URL: http://houseandland4sale.kenekt.app

First seen 2025-04-12 00:13
Last seen 2025-11-03 15:01
Open for 205 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-03 15:01
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 19:50
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: astel.kenekt.app
Port: 80
URL: http://astel.kenekt.app

First seen 2025-04-12 00:42
Last seen 2025-11-03 13:12
Open for 205 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-03 13:12
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 03:27
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: evolveproperty.kenekt.app
Port: 80
URL: http://evolveproperty.kenekt.app

First seen 2025-05-02 00:36
Last seen 2025-11-03 11:48
Open for 185 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-03 11:48
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 01:38
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: mcmhomes.kenekt.app
Port: 80
URL: http://mcmhomes.kenekt.app

First seen 2025-05-01 00:41
Last seen 2025-11-03 10:47
Open for 186 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-03 10:47
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 12:52
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: shyam.kenekt.app
Port: 80
URL: http://shyam.kenekt.app

First seen 2025-05-25 02:29
Last seen 2025-11-03 09:22
Open for 162 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-03 09:22
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 23:43
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.titaniumfxpro.com
Port: 80
URL: http://api.titaniumfxpro.com

First seen 2025-10-27 01:00
Last seen 2025-11-03 07:40
Open for 7 days

Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e5727e04f7562e519d1237e0a3efdcf449a5a60a19

Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
DELETE /v1/contracts/{hash}
DELETE /v1/orders/{hash}
DELETE /v1/robots/{hash}
GET /v1/actives
GET /v1/actives/{ativoId}
GET /v1/asset-history
GET /v1/cities
GET /v1/cities/{cidadeId}
GET /v1/contracts
GET /v1/contracts/{contratoId}
GET /v1/grupos
GET /v1/grupos/{grupoId}
GET /v1/grupos/{grupoId}/permissoes
GET /v1/investments
GET /v1/markets
GET /v1/markets/sse
GET /v1/markets/{symbols}
GET /v1/news
GET /v1/operations
GET /v1/orders
GET /v1/orders/total-operations
GET /v1/orders/{hash}/hash
GET /v1/orders/{ordemId}
GET /v1/permissoes
GET /v1/professions
GET /v1/quotas
GET /v1/quotas/total-paid
GET /v1/quotas/{parcelaId}
GET /v1/releases
GET /v1/releases/total-releases
GET /v1/releases/{hash}/hash
GET /v1/robots
GET /v1/robots/total-operations
GET /v1/robots/{hash}/hash
GET /v1/robots/{hash}/hash-model
GET /v1/states
GET /v1/states/{estadoId}
GET /v1/tokens
GET /v1/users
GET /v1/users/brokers
GET /v1/users/full
GET /v1/users/{hash}/annotation
GET /v1/users/{hash}/balance
GET /v1/users/{hash}/balances
GET /v1/users/{hash}/hash
GET /v1/users/{hash}/password-decrypted
GET /v1/users/{usuarioId}
GET /v1/users/{usuarioId}/photo
GET /v1/users/{usuarioId}/photo/{tipoFoto}
GET /v1/usuarios/{usuarioId}/grupos
POST /v1/releases/{accessKey}
POST /v1/users/home-created
POST /v1/users/{accessKey}
PUT /v1/actives/{id}
PUT /v1/contracts/{hash}/sign
PUT /v1/contracts/{id}
PUT /v1/grupos/{grupoId}/permissoes/{permissaoId}
PUT /v1/orders/{hash}/close
PUT /v1/orders/{hash}/crash-operation
PUT /v1/quotas/{parcelaId}/paid
PUT /v1/releases/{lancamentoHash}
PUT /v1/releases/{lancamentoHash}/authorized
PUT /v1/releases/{lancamentoHash}/canceled
PUT /v1/releases/{lancamentoHash}/confirmed
PUT /v1/robots/{hash}/allow-transfer
PUT /v1/robots/{hash}/transfer-balance
PUT /v1/users/reset-password/{email}
PUT /v1/users/{hash}/logged-in
PUT /v1/users/{usuarioId}/allow-transfer
PUT /v1/users/{usuarioId}/close-order-allowed
PUT /v1/users/{usuarioId}/demo-balance
PUT /v1/users/{usuarioId}/open-order-allowed
PUT /v1/users/{usuarioId}/score
PUT /v1/users/{usuarioId}/senha
PUT /v1/usuarios/{usuarioId}/grupos/{grupoId}

Found on 2025-11-03 07:40

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: signature.kenekt.app
Port: 80
URL: http://signature.kenekt.app

First seen 2025-04-12 00:33
Last seen 2025-11-02 20:09
Open for 204 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-02 20:09
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-25 06:10
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: rosieandrosie.kenekt.app
Port: 80
URL: http://rosieandrosie.kenekt.app

First seen 2025-05-25 02:49
Last seen 2025-11-02 18:12
Open for 161 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc299e3b9f3fee980b9d70137cbaa01b82
```
Found 4 files trough .DS_Store spidering:

/default-data
/docs
/images
/js
```
  Found on 2025-11-02 18:12
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-10-24 21:11
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: app-staging.parentbirth.com
Port: 443
URL: https://app-staging.parentbirth.com

First seen 2025-10-20 00:28
Last seen 2025-10-22 07:04
Open for 2 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2025-10-22 07:04
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: beta.womrecs.com
Port: 443
URL: https://beta.womrecs.com

First seen 2025-05-27 00:36
Last seen 2025-10-21 05:39
Open for 147 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d516b4a56516b4a56516b4a56516b4a56
```
Found 1 files trough .DS_Store spidering:

/fonts
```
  Found on 2025-10-21 05:39
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: peacefyl-play.breue.com
Port: 443
URL: https://peacefyl-play.breue.com

First seen 2025-05-25 04:08
Last seen 2025-09-28 21:57
Open for 126 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772159855a0eb5bbe56ccd0a90f98fae956
```
Found 11 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/favicon.ico
/header.jpg
/header.png
/intro.mp4
/javascripts
/robots.txt
```
  Found on 2025-09-28 21:57
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3af247253af247250afce8cdeb84548d01c0a61af4e56990
```
Found 9 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/apple-touch-icon-precomposed.png
/apple-touch-icon.png
/background-short.mp4
/favicon.ico
/javascripts
/robots.txt
```
  Found on 2025-07-20 18:17
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: arg.kenekt.app
Port: 80
URL: http://arg.kenekt.app

First seen 2025-05-25 02:39
Last seen 2025-09-13 16:35
Open for 111 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-09-13 16:35
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: firstplacebuildingcompany.kenekt.app
Port: 80
URL: http://firstplacebuildingcompany.kenekt.app

First seen 2025-04-12 00:43
Last seen 2025-09-05 12:04
Open for 146 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-09-05 12:04
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: visionhomes.kenekt.app
Port: 443
URL: https://visionhomes.kenekt.app

First seen 2025-06-05 00:47
Last seen 2025-09-05 04:49
Open for 92 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-09-05 04:49
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: www.med-mh.com
Port: 80
URL: http://www.med-mh.com

First seen 2025-01-01 11:50
Last seen 2025-08-21 01:05
Open for 231 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b703805b217208ad996041f231bfdbe104

Found 128 files trough .DS_Store spidering:

/200.html
/404.html
/422.html
/500.html
/_nuxt
/_nuxt/004af9a.js
/_nuxt/0336768.js
/_nuxt/057e14f.js
/_nuxt/05914d3.js
/_nuxt/0862c1d.js
/_nuxt/113caae.js
/_nuxt/11c4a32.js
/_nuxt/1237e66.js
/_nuxt/15ce6f5.js
/_nuxt/16f9d74.js
/_nuxt/1aa21d6.js
/_nuxt/1be8c15.js
/_nuxt/230327e.js
/_nuxt/2522a13.js
/_nuxt/2610ff5.js
/_nuxt/26e2b80.js
/_nuxt/277fdfe.js
/_nuxt/2925186.js
/_nuxt/297f512.js
/_nuxt/2fb776d.js
/_nuxt/3145365.js
/_nuxt/32fa639.js
/_nuxt/3347794.js
/_nuxt/35c7908.js
/_nuxt/368f5ca.js
/_nuxt/3cc4818.js
/_nuxt/3e1ecd6.js
/_nuxt/40327a9.js
/_nuxt/4861a59.js
/_nuxt/48b7731.js
/_nuxt/4c39e69.js
/_nuxt/4d5e5b6.js
/_nuxt/5707650.js
/_nuxt/5a34a02.js
/_nuxt/5f86e6c.js
/_nuxt/604d7d4.js
/_nuxt/639efa8.js
/_nuxt/64f2c42.js
/_nuxt/657b857.js
/_nuxt/6a81ab6.js
/_nuxt/6ac6e68.js
/_nuxt/6e49695.js
/_nuxt/70e974c.js
/_nuxt/7257c57.js
/_nuxt/74e1bf5.js
/_nuxt/77458e4.js
/_nuxt/7d3ab57.js
/_nuxt/7e61628.js
/_nuxt/7eabd22.js
/_nuxt/81f555a.js
/_nuxt/838b59c.js
/_nuxt/848ac44.js
/_nuxt/87fe407.js
/_nuxt/8adfc10.js
/_nuxt/8b277d2.js
/_nuxt/8bb934b.js
/_nuxt/8f8c7e6.js
/_nuxt/94b2938.js
/_nuxt/9a719d1.js
/_nuxt/9aa2680.js
/_nuxt/9c2a213.js
/_nuxt/9cc270d.js
/_nuxt/a0e24be.js
/_nuxt/a130e7e.js
/_nuxt/a2a5632.js
/_nuxt/a2d0683.js
/_nuxt/a2f5755.js
/_nuxt/a3e6286.js
/_nuxt/a416c1e.js
/_nuxt/a41a29f.js
/_nuxt/a6de197.js
/_nuxt/a957967.js
/_nuxt/aaba2f5.js
/_nuxt/acc5e50.js
/_nuxt/acccf0a.js
/_nuxt/aec25fb.js
/_nuxt/b168e81.js
/_nuxt/b925b49.js
/_nuxt/bae7386.js
/_nuxt/bbb7e16.js
/_nuxt/c085d7f.js
/_nuxt/c301b8e.js
/_nuxt/c3192fd.js
/_nuxt/c4ce1de.js
/_nuxt/c61b02a.js
/_nuxt/c71e131.js
/_nuxt/c764a4c.js
/_nuxt/d22294e.js
/_nuxt/d315d2b.js
/_nuxt/d32045b.js
/_nuxt/d4eccff.js
/_nuxt/d7ce098.js
/_nuxt/d81b1f6.js
/_nuxt/dbb62be.js
/_nuxt/ddbe6ed.js
/_nuxt/e0a350a.js
/_nuxt/e0c9ee2.js
/_nuxt/e144566.js
/_nuxt/e2677ab.js
/_nuxt/e350d8b.js
/_nuxt/e3a995d.js
/_nuxt/e4538ef.js
/_nuxt/e47a620.js
/_nuxt/e6736a1.js
/_nuxt/e78a540.js
/_nuxt/e7d5d88.js
/_nuxt/e8ace6e.js
/_nuxt/e96993d.js
/_nuxt/ea7bbc3.js
/_nuxt/ea980a3.js
/_nuxt/edb6425.js
/_nuxt/eef685e.js
/_nuxt/f53b67c.js
/_nuxt/f78bef5.js
/_nuxt/f85dadd.js
/_nuxt/f977048.js
/_nuxt/faacb71.js
/_nuxt/fb71295.js
/_nuxt/fdd2f76.js
/_nuxt/img
/_nuxt/LICENSES
/assets
/assets/bootstrap.bundle.js

Found on 2025-08-21 01:05

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: yourexpertrealestate.kenekt.app
Port: 80
URL: http://yourexpertrealestate.kenekt.app

First seen 2025-04-12 00:02
Last seen 2025-08-17 04:42
Open for 127 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-08-17 04:42
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: partners.kenekt.com.au
Port: 443
URL: https://partners.kenekt.com.au

First seen 2025-02-10 22:14
Last seen 2025-08-11 05:37
Open for 181 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-08-11 05:37
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-15 01:29
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: www.yourdreamnumber.com
Port: 80
URL: http://www.yourdreamnumber.com

First seen 2025-07-05 15:05
Last seen 2025-08-09 11:47
Open for 34 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0f8dcf020f8dcf02ae0625d00646fe264596b83f18bfdb77
```
Found 24 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/favicon.ico
/robots.txt
/uploads
/uploads/affiliate
/uploads/affiliate/image
/uploads/affiliate/image/1
/uploads/affiliate/image/1/GoDaddy.png
/uploads/affiliate/image/2
/uploads/affiliate/image/2/Legalzoom.png
/uploads/affiliate/image/3
/uploads/dream
/uploads/dream/image
/uploads/dream/image/36
/uploads/dream/image/36/Retirement-dude.png
/uploads/dream/image/63
/uploads/dream/image/63/orange_bugatti.jpg
/uploads/tmp
/uploads/user
/uploads/user/profile_picture
/uploads/user/profile_picture/16
/uploads/user/profile_picture/16/arcticmonkeys.jpeg
```
  Found on 2025-08-09 11:47
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: asset-plus-realty.kenekt.app
Port: 80
URL: http://asset-plus-realty.kenekt.app

First seen 2025-08-08 03:17
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-08-08 03:17
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: areaspecialistharmony.kenekt.app
Port: 80
URL: http://areaspecialistharmony.kenekt.app

First seen 2025-05-30 00:24
Last seen 2025-06-24 14:11
Open for 25 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-06-24 14:11
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: harirealty.kenekt.app
Port: 80
URL: http://harirealty.kenekt.app

First seen 2025-05-05 00:38
Last seen 2025-06-22 19:06
Open for 48 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-06-22 19:06
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: hppm.kenekt.app
Port: 80
URL: http://hppm.kenekt.app

First seen 2025-05-02 00:57
Last seen 2025-06-22 18:19
Open for 51 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-06-22 18:19
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: michaelkellybuyersagent.kenekt.app
Port: 80
URL: http://michaelkellybuyersagent.kenekt.app

First seen 2025-05-02 00:26
Last seen 2025-06-22 15:39
Open for 51 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-06-22 15:39
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: vogue-homes.kenekt.app
Port: 80
URL: http://vogue-homes.kenekt.app

First seen 2025-05-22 23:28
Last seen 2025-06-09 04:38
Open for 17 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-06-09 04:38
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: cavalierhomesgv.kenekt.app
Port: 80
URL: http://cavalierhomesgv.kenekt.app

First seen 2025-04-12 00:12
Last seen 2025-05-23 01:33
Open for 41 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-05-23 01:33
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: sakoonhomes.kenekt.app
Port: 80
URL: http://sakoonhomes.kenekt.app

First seen 2025-04-07 00:21
Last seen 2025-05-22 09:31
Open for 45 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-05-22 09:31
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: nbcgroupaustralia.kenekt.app
Port: 80
URL: http://nbcgroupaustralia.kenekt.app

First seen 2025-04-12 00:22
Last seen 2025-05-20 17:07
Open for 38 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-05-20 17:07
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: valor.kenekt.app
Port: 80
URL: http://valor.kenekt.app

First seen 2025-04-26 00:44
Last seen 2025-05-20 16:10
Open for 24 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-05-20 16:10
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: kierconstruction.kenekt.app
Port: 80
URL: http://kierconstruction.kenekt.app

First seen 2025-04-12 01:02
Last seen 2025-05-20 13:49
Open for 38 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-05-20 13:49
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: newchoicehomes.kenekt.app
Port: 80
URL: http://newchoicehomes.kenekt.app

First seen 2025-04-12 00:02
Last seen 2025-05-20 07:09
Open for 38 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-05-20 07:09
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: test.skillmore.com
Port: 443
URL: https://test.skillmore.com

First seen 2025-02-10 23:10
Last seen 2025-05-06 12:49
Open for 84 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f07caaca34a3126f490704e4a90704e4a
```
Found 3 files trough .DS_Store spidering:

/home
/images
/platform
```
  Found on 2025-05-06 12:49
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: www-dev.skillmore.com
Port: 80
URL: http://www-dev.skillmore.com

First seen 2025-02-12 01:37
Last seen 2025-05-06 11:23
Open for 83 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f07caaca34a3126f490704e4a90704e4a
```
Found 3 files trough .DS_Store spidering:

/home
/images
/platform
```
  Found on 2025-05-06 11:23
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: www-dev.skillmore.com
Port: 443
URL: https://www-dev.skillmore.com

First seen 2025-02-12 01:37
Last seen 2025-05-06 01:08
Open for 82 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f07caaca34a3126f490704e4a90704e4a
```
Found 3 files trough .DS_Store spidering:

/home
/images
/platform
```
  Found on 2025-05-06 01:08
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: www.clyptrading.ng
Port: 443
URL: https://www.clyptrading.ng

First seen 2025-01-07 16:04
Last seen 2025-04-14 23:16
Open for 97 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814e18288c977a8c419babe74a464a7bbd5e
```
Found 6 files trough .DS_Store spidering:

/images
/index.html
/script.js
/style.css
/style.css.map
/style.scss
```
  Found on 2025-04-14 23:16
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: kenekt.koalainvest.com.au
Port: 80
URL: http://kenekt.koalainvest.com.au

First seen 2025-03-24 21:23
Last seen 2025-03-24 21:23
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-03-24 21:23
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: kenekt.koalainvest.com.au
Port: 443
URL: https://kenekt.koalainvest.com.au

First seen 2025-03-24 21:23
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f481d59866b291d8f9964ec279964ec27
```
Found 3 files trough .DS_Store spidering:

/default-data
/images
/js
```
  Found on 2025-03-24 21:23
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: landhar.kenekt.app
Port: 443
URL: https://landhar.kenekt.app

First seen 2024-11-05 03:13
Last seen 2025-03-04 15:11
Open for 119 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-04 15:11
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: conversion2.kenekt.app
Port: 443
URL: https://conversion2.kenekt.app

First seen 2024-12-05 02:14
Last seen 2025-03-04 13:08
Open for 89 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2025-03-04 13:08
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: projetonovoshabitos.institutorealizandoofuturo.org.br
Port: 80
URL: http://projetonovoshabitos.institutorealizandoofuturo.org.br

First seen 2024-11-05 13:02
Last seen 2025-02-11 21:41
Open for 98 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc0363d38caf1e6e4b6d09f0917dcb21f6
```
Found 4 files trough .DS_Store spidering:

/assets
/modelo_de_tabela_para_importar_alunos.xlsx
/system
/uploads
```
  Found on 2025-02-11 21:41
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: www.picklebeastpickleball.com
Port: 80
URL: http://www.picklebeastpickleball.com

First seen 2025-01-16 01:48
Last seen 2025-01-18 12:05
Open for 2 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642fdc9b5d5ce912fa9ce912fa9ce912fa9
```
Found 2 files trough .DS_Store spidering:

/push
/push/onesignal
```
  Found on 2025-01-18 12:05
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: conversion1.kenekt.app
Port: 443
URL: https://conversion1.kenekt.app

First seen 2024-12-05 00:47
Last seen 2024-12-12 20:41
Open for 7 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2024-12-12 20:41
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 99.83.151.71
Domain: buynewqueensland.kenekt.app
Port: 443
URL: https://buynewqueensland.kenekt.app

First seen 2024-11-25 00:51
Last seen 2024-11-27 02:20
Open for 2 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2a6e52012a6e52012a6e52012a6e5201
```
Found 1 files trough .DS_Store spidering:

/dev-assets
```
  Found on 2024-11-27 02:20
Create report

Open service 99.83.151.71:443 · direwolf-89cd06044c-2-08e65b04ae.herokusnitest.com

2026-01-13 01:21

HTTP/1.1 200 OK
Content-Length: 8
Content-Type: text/html;charset=utf-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=JOKxoSidTVscKiVNtUETO7uosk7iBpQOsu3vHwafeCk%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1768267276"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=JOKxoSidTVscKiVNtUETO7uosk7iBpQOsu3vHwafeCk%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1768267276"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Date: Tue, 13 Jan 2026 01:21:16 GMT
Connection: close


Bazinga!

Found one day ago by HttpPlugin