LeakIX - Host 0477n.com

Domain 0477n.com

Japan

Shanghai Anchang Network Security Technology Co.,Ltd.

Software information

nginx nginx 1.12.2

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.208.108.229
Domain: www.0477n.com
Port: 80
URL: http://www.0477n.com

First seen 2023-02-13 13:43
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d86812efb5dac32385ece57168af59d18d
```
Found 8 files trough .DS_Store spidering:

/888
/check.html
/event
/event/js
/index.html
/README.md
/static
/static-tvns
```
  Found on 2023-02-13 13:43
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 134.122.216.18
Domain: 0477n.com
Port: 443
URL: https://0477n.com

First seen 2022-10-26 03:17
Last seen 2024-11-01 21:22
Open for 737 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d86812efb5dac32385ece57168af59d18d
```
Found 8 files trough .DS_Store spidering:

/888
/check.html
/event
/event/js
/index.html
/README.md
/static
/static-tvns
```
  Found on 2024-11-01 21:22
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 154.218.11.71
Domain: www.0477n.com
Port: 443
URL: https://www.0477n.com

First seen 2022-10-26 03:02
Last seen 2024-11-01 21:22
Open for 737 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d86812efb5dac32385ece57168af59d18d
```
Found 8 files trough .DS_Store spidering:

/888
/check.html
/event
/event/js
/index.html
/README.md
/static
/static-tvns
```
  Found on 2024-11-01 21:22
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.208.108.229
Domain: 0477n.com
Port: 80
URL: http://0477n.com

First seen 2023-02-13 13:43
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d86812efb5dac32385ece57168af59d18d
```
Found 8 files trough .DS_Store spidering:

/888
/check.html
/event
/event/js
/index.html
/README.md
/static
/static-tvns
```
  Found on 2023-02-13 13:43
Create report

Open service 137.220.225.81:443 · 0477n.com

2024-11-01 21:22

HTTP/1.1 200 OK
Content-Type: text/html
Date: Fri, 01 Nov 2024 21:22:52 GMT
Etag: W/"6635ec44-dc9"
Last-Modified: Sat, 04 May 2024 08:05:24 GMT
Server: nginx/1.12.2
X-Cache: BYPASS
Connection: close
Transfer-Encoding: chunked

Page title: Welcome

<!DOCTYPE html>
<html>

<head>
  <meta charset="utf-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
  <title>Welcome</title>
  
  <script>
    function isMobile() {
      return !!(navigator.userAgent.match(
        /(phone|pad|pod|iPhone|iPod|ios|iPad|android|Mobile|BlackBerry|IEMobile|MQQBrowser|JUC|Fennec|wOSBrowser|BrowserNG|WebOS|Symbian|Windows Phone)/i
        ))
    }
    if (isMobile() !== false) {
      if (location.href.indexOf('#') > -1) {
        location.href = location.origin + '/m/#/home?' + (location.href.split('#')[1].split('?')[1] || '')
      } else {
        location.href = location.origin + '/m/#/home' + location.search
      }
    }
    (function () {
      var url = window.location.href,
        obj = {},
        keyvalue = [],
        key = '',
        value = '',
        parseString = url.substring(url.indexOf('?') + 1, url.length).split('&')
      for (var i in parseString) {
        keyvalue = parseString[i].split('=')
        key = keyvalue[0]
        value = keyvalue[1] && keyvalue[1].includes('#/') ? keyvalue[1].split('#/')[0] : keyvalue[1]
        obj[key] = value
      }

      if (obj.agent) {
        localStorage.setItem('agent', obj.agent)
      }
      if(obj.register){
        if(!localStorage.token){
           localStorage.setItem('register', obj.register)
         }
      }

    })()
    window.vis = true
    window.onblur = function () {
      window.vis = false
    }
    window.onfocus = function () {
      window.vis = true
      if (typeof window.balanceTask === 'function') {
        window.balanceTask()
      }
    }
    if(!document.querySelector('.statistics')) {
      let head = document.head || document.getElementsByTagName('head')[0];
      let script = document.createElement('script');
      let div = document.createElement('div');
      div.classList = 'statistics'
      div.style.position = 'fixed'
      div.style.left = '-9999px'
      div.style.top = '-9999px'
      if(window.origin.indexOf('s2191.com')!= -1){
        script.setAttribute("src", "https://s9.cnzz.com/z_stat.php?id=1280222126&web_id=1280222126");
        div.appendChild(script);
        head.appendChild(div);
      }else if(window.origin.indexOf('s2531.com')!= -1){
        script.setAttribute("src", "https://s4.cnzz.com/z_stat.php?id=1280222128&web_id=1280222128");
        div.appendChild(script);
        head.appendChild(div);
      }
    }
  </script>
  <link rel="shortcut icon" href="/static/tvns/img/favicon.ico" type="image/x-icon">
  <script src="/static/public/js/stomp.js"></script>
  <script src="/static/public/js/qrcode.js"></script>
 
  <!-- <script src="http://cstaticdun.126.net/load.min.js"></script> -->
  <script src="https://cstaticdun.126.net/load.min.js?t=201903281201"></script>
  <script type="text/javascript" src="https://acstatic-dun.126.net/tool.min.js?t=201903281201"></script>
  <!-- <script src="/static/public//js/tn_code.js"></script> -->
<link href="/static-tvns/style.css" rel="stylesheet"><link href="/static-tvns/css/pages/tvns/index.93f9e2426f7398395057e9d10705e010.css" rel="stylesheet"></head>

<body>
  <div id="js85App">

  </div>
<script type="text/javascript" src="/static-tvns/js/manifest.a968a13906705fd5fb57.js?v=2024-4-26-18:51:08"></script><script type="text/javascript" src="/static-tvns/js/vendor.74e27af8ace9e304921c.js?v=2024-4-26-18:51:08"></script><script type="text/javascript" src="/static-tvns/js/pages/tvns/index.1c1bc5954c6a5c8941a8.js?v=2024-4-26-18:51:08"></script></body>

</html>

Found 2024-11-01 by HttpPlugin

Create report

Open service 13.231.94.131:443 · www.0477n.com

2024-11-01 21:22

HTTP/1.1 200 OK
Content-Type: text/html
Date: Fri, 01 Nov 2024 21:22:53 GMT
Etag: W/"6635ec44-dc9"
Last-Modified: Sat, 04 May 2024 08:05:24 GMT
Server: nginx/1.12.2
X-Cache: BYPASS
Connection: close
Transfer-Encoding: chunked

Page title: Welcome

<!DOCTYPE html>
<html>

<head>
  <meta charset="utf-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
  <title>Welcome</title>
  
  <script>
    function isMobile() {
      return !!(navigator.userAgent.match(
        /(phone|pad|pod|iPhone|iPod|ios|iPad|android|Mobile|BlackBerry|IEMobile|MQQBrowser|JUC|Fennec|wOSBrowser|BrowserNG|WebOS|Symbian|Windows Phone)/i
        ))
    }
    if (isMobile() !== false) {
      if (location.href.indexOf('#') > -1) {
        location.href = location.origin + '/m/#/home?' + (location.href.split('#')[1].split('?')[1] || '')
      } else {
        location.href = location.origin + '/m/#/home' + location.search
      }
    }
    (function () {
      var url = window.location.href,
        obj = {},
        keyvalue = [],
        key = '',
        value = '',
        parseString = url.substring(url.indexOf('?') + 1, url.length).split('&')
      for (var i in parseString) {
        keyvalue = parseString[i].split('=')
        key = keyvalue[0]
        value = keyvalue[1] && keyvalue[1].includes('#/') ? keyvalue[1].split('#/')[0] : keyvalue[1]
        obj[key] = value
      }

      if (obj.agent) {
        localStorage.setItem('agent', obj.agent)
      }
      if(obj.register){
        if(!localStorage.token){
           localStorage.setItem('register', obj.register)
         }
      }

    })()
    window.vis = true
    window.onblur = function () {
      window.vis = false
    }
    window.onfocus = function () {
      window.vis = true
      if (typeof window.balanceTask === 'function') {
        window.balanceTask()
      }
    }
    if(!document.querySelector('.statistics')) {
      let head = document.head || document.getElementsByTagName('head')[0];
      let script = document.createElement('script');
      let div = document.createElement('div');
      div.classList = 'statistics'
      div.style.position = 'fixed'
      div.style.left = '-9999px'
      div.style.top = '-9999px'
      if(window.origin.indexOf('s2191.com')!= -1){
        script.setAttribute("src", "https://s9.cnzz.com/z_stat.php?id=1280222126&web_id=1280222126");
        div.appendChild(script);
        head.appendChild(div);
      }else if(window.origin.indexOf('s2531.com')!= -1){
        script.setAttribute("src", "https://s4.cnzz.com/z_stat.php?id=1280222128&web_id=1280222128");
        div.appendChild(script);
        head.appendChild(div);
      }
    }
  </script>
  <link rel="shortcut icon" href="/static/tvns/img/favicon.ico" type="image/x-icon">
  <script src="/static/public/js/stomp.js"></script>
  <script src="/static/public/js/qrcode.js"></script>
 
  <!-- <script src="http://cstaticdun.126.net/load.min.js"></script> -->
  <script src="https://cstaticdun.126.net/load.min.js?t=201903281201"></script>
  <script type="text/javascript" src="https://acstatic-dun.126.net/tool.min.js?t=201903281201"></script>
  <!-- <script src="/static/public//js/tn_code.js"></script> -->
<link href="/static-tvns/style.css" rel="stylesheet"><link href="/static-tvns/css/pages/tvns/index.93f9e2426f7398395057e9d10705e010.css" rel="stylesheet"></head>

<body>
  <div id="js85App">

  </div>
<script type="text/javascript" src="/static-tvns/js/manifest.a968a13906705fd5fb57.js?v=2024-4-26-18:51:08"></script><script type="text/javascript" src="/static-tvns/js/vendor.74e27af8ace9e304921c.js?v=2024-4-26-18:51:08"></script><script type="text/javascript" src="/static-tvns/js/pages/tvns/index.1c1bc5954c6a5c8941a8.js?v=2024-4-26-18:51:08"></script></body>

</html>

Found 2024-11-01 by HttpPlugin

Create report

0477n.comwww.0477n.com

Fingerprint:

a64fb744511859299350d0c36b149ced96706015c036c26149cf91b6f71cc019

CN:

0477n.com

Key:

RSA-2048

Issuer:

R10

Not before:

2024-09-03 02:22

Not after:

2024-12-02 02:22

Domain summary

0477n.com 2 www.0477n.com 2

2 recorded

IP summary

137.220.225.81 1 13.231.94.131 1 104.208.108.229 1 134.122.216.18 1 154.218.11.71 1

5 recorded

Domain 0477n.com

Japan

Software information

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Create report

Create report

0477n.comwww.0477n.com

Domain summary

IP summary