**Summary:** I've found that you can SSRF to 169.254.169.254 using the domain check feature. Private keys disclosed. ## Browsers Verified In: * Firefox ESR 45.8.0 ## Steps To Reproduce: 1. Simple browse to https://www.threatcrowd.org/domain.php?domain=169.254.169.254/latest/meta-data/iam/se…